last executing test programs: 10.412613907s ago: executing program 2 (id=6011): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000080)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000410001032bbd7000fddbdf2503"], 0x18}}, 0x840) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv4_newroute={0x134, 0x18, 0x302, 0x70bd25, 0x25dfdbfc, {0x2, 0x20, 0x10, 0x3, 0xfc, 0x2, 0xfe, 0x93d4169f30db6cd4, 0x2e00}, [@RTA_METRICS={0xf6, 0x8, 0x0, 0x1, "494654089bfa5b3f96b64d7800fda75f0f64f09de505690f766c7bd94d7a4e1d00c6555e0cad023425dc578496f31677d1ebdc5ec83cbab5a1dbe79a023ea3b6b9b2c6d72005b329d21b7192c312238e3009bb4a0b078c5f9acdde9708ad74a9aa3923e9ad9b53759e15417ea36a037edb7ca9e0147bbabd3485d8c972bac9ad9f5a69ccf9a447a8c97330304d0810bfb61c54354e712b301f9f003927fea492c0989e2936257aaf55e1c3d3ab8a66b31d2296130054c8ea9afdff496519c1c611f4158af7054037dcd4fe267053a1503d6975a775dfaaf0c87c925c3ecef15a4037f77aad6c22f4f5fcf4d1a9ce00cac923"}, @RTA_GATEWAY={0x8, 0x5, @multicast2}, @RTA_IIF={0x8, 0x3, r3}, @RTA_NH_ID={0x8, 0x1e, 0x2}, @RTA_OIF={0x8, 0x4, r2}]}, 0x134}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000080)=0x2, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000180)=0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000410001032bbd7000fddbdf2503"], 0x18}}, 0x840) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv4_newroute={0x134, 0x18, 0x302, 0x70bd25, 0x25dfdbfc, {0x2, 0x20, 0x10, 0x3, 0xfc, 0x2, 0xfe, 0x93d4169f30db6cd4, 0x2e00}, [@RTA_METRICS={0xf6, 0x8, 0x0, 0x1, "494654089bfa5b3f96b64d7800fda75f0f64f09de505690f766c7bd94d7a4e1d00c6555e0cad023425dc578496f31677d1ebdc5ec83cbab5a1dbe79a023ea3b6b9b2c6d72005b329d21b7192c312238e3009bb4a0b078c5f9acdde9708ad74a9aa3923e9ad9b53759e15417ea36a037edb7ca9e0147bbabd3485d8c972bac9ad9f5a69ccf9a447a8c97330304d0810bfb61c54354e712b301f9f003927fea492c0989e2936257aaf55e1c3d3ab8a66b31d2296130054c8ea9afdff496519c1c611f4158af7054037dcd4fe267053a1503d6975a775dfaaf0c87c925c3ecef15a4037f77aad6c22f4f5fcf4d1a9ce00cac923"}, @RTA_GATEWAY={0x8, 0x5, @multicast2}, @RTA_IIF={0x8, 0x3, r3}, @RTA_NH_ID={0x8, 0x1e, 0x2}, @RTA_OIF={0x8, 0x4, r2}]}, 0x134}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) 10.267226235s ago: executing program 2 (id=6013): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000080)=0xfff, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x3]}, &(0x7f0000000100)=0x6) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x81, "89043a999f8325e41e58934bb9d8c13260212ba956dc866d14c835427e542f2fa08cf770249fae947dcb3ad8389076e270099b0a3b234e563602b18a15d79f1d87b62c6c8eb9316567589c072d3f767305fb4fa20ebf4d01d6636aa0db4115c57ed2478bec952ba1011357e55462cefb5fdf57a27ee9b07b788fd16da71d28a0ec"}, &(0x7f0000000200)=0x89) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x81, "89043a999f8325e41e58934bb9d8c13260212ba956dc866d14c835427e542f2fa08cf770249fae947dcb3ad8389076e270099b0a3b234e563602b18a15d79f1d87b62c6c8eb9316567589c072d3f767305fb4fa20ebf4d01d6636aa0db4115c57ed2478bec952ba1011357e55462cefb5fdf57a27ee9b07b788fd16da71d28a0ec"}, &(0x7f0000000200)=0x89) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000240)={r3, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0xfff, 0xd, 0x9, 0x6}, &(0x7f0000000300)=0x98) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x8, 0x10, 0xfff, 0x2, {{0xf, 0x4, 0x3, 0x4, 0x3c, 0x66, 0x0, 0x2, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x28, 0xae, 0x0, 0x5, [0x3, 0x4, 0x8, 0x0, 0xfff, 0x2, 0x5, 0x7, 0x4]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x8, 0x10, 0xfff, 0x2, {{0xf, 0x4, 0x3, 0x4, 0x3c, 0x66, 0x0, 0x2, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x28, 0xae, 0x0, 0x5, [0x3, 0x4, 0x8, 0x0, 0xfff, 0x2, 0x5, 0x7, 0x4]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x80, 0xf807, 0x0, 0x7, {{0x17, 0x4, 0x3, 0x8, 0x5c, 0x68, 0x0, 0x0, 0x4, 0x0, @broadcast, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x3c, 0xbe, 0x3, 0x8, [{@private=0xa010102, 0x7}, {@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@remote}, {@rand_addr=0x64010100, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0x1000}]}, @lsrr={0x83, 0xb, 0xe9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'erspan0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x40, 0x20, 0x2, 0x7, {{0x12, 0x4, 0x0, 0xb, 0x48, 0x68, 0x0, 0x1, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x88, 0x1, 0xb, [{@multicast2, 0x6}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0xcc, [@remote, @remote, @private=0xa010102, @loopback]}, @generic={0x89, 0xe, "f8a32f769556e069d8a2321a"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'erspan0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x40, 0x20, 0x2, 0x7, {{0x12, 0x4, 0x0, 0xb, 0x48, 0x68, 0x0, 0x1, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x88, 0x1, 0xb, [{@multicast2, 0x6}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0xcc, [@remote, @remote, @private=0xa010102, @loopback]}, @generic={0x89, 0xe, "f8a32f769556e069d8a2321a"}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'ip_vti0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'syztnl1\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x2, 0xebc9, {{0x6, 0x4, 0x0, 0xc, 0x18, 0x65, 0x0, 0xaa, 0x4, 0x0, @broadcast, @multicast1, {[@ra={0x94, 0x4}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000780)={@mcast1, 0x0}, &(0x7f00000007c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000880)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x58, &(0x7f00000008c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000980)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x7f, 0x9, 0x40, @initdev={0xfe, 0x88, '\x00', 0xf7, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x0, 0x4, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'ip6tnl0\x00', 0x0, 0x4, 0xd9, 0xed, 0x3, 0x1, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x8, 0xba, 0xffff}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ac0)={'syztnl0\x00', &(0x7f0000000a40)={'ip6tnl0\x00', 0x0, 0x4, 0xd9, 0xed, 0x3, 0x1, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x8, 0xba, 0xffff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x11, 0x2, 0x4, @private2, @loopback, 0x1, 0x80, 0x0, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x11, 0x2, 0x4, @private2, @loopback, 0x1, 0x80, 0x0, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000bc0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000bc0)={'vcan0\x00', 0x0}) getsockname$packet(r1, &(0x7f0000000c00)={0x11, 0x0, 0x0}, &(0x7f0000000c40)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000000c80)={0x714, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xcf}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x260, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8eee}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc7a}}, {0x8, 0x7, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffe00}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}]}}, {{0x8, 0x1, r14}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x69}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3d}}}]}}, {{0x8, 0x1, r15}, {0x4}}, {{0x8, 0x1, r16}, {0x18c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7fff, 0x4, 0x1, 0x7ff}, {0xfffa, 0x0, 0x71, 0x8}, {0xfffe, 0x8, 0x1, 0xe}, {0x6, 0x6, 0x65, 0xce}, {0x43, 0x1, 0x87, 0xf}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}]}}, {{0x8, 0x1, r19}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r21}}}]}}]}, 0x714}, 0x1, 0x0, 0x0, 0x4000090}, 0x4810) r22 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000001440)={0x1f, 0x0, @fixed}, &(0x7f0000001480)=0xe, 0x80000) setsockopt$bt_l2cap_L2CAP_LM(r22, 0x6, 0x3, &(0x7f00000014c0)=0x28, 0x4) (async) setsockopt$bt_l2cap_L2CAP_LM(r22, 0x6, 0x3, &(0x7f00000014c0)=0x28, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000001500), &(0x7f0000001540)=0x14) 9.918922149s ago: executing program 2 (id=6018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, r1, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x20, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 9.757356073s ago: executing program 2 (id=6022): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x42, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x24004840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x42, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x24004840) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 9.682679315s ago: executing program 2 (id=6023): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000e100000095000000000000001a42d4f421a7be9b3315accb3048c4aca6d08ff8060f28a9ab63efab0e68b1dab174155a4874249ec6ee0299ede615a47b6f5e6e12de1d93761314b902a35ba0ff45a45140eab714fd3c798dba30e44ef0f8369fa7ca53174073ffefad22dc7ac1feb6a2d62f635f3f45f57e8d431d1bd13b622cc5d83f7095a2f41f7115f06dc82e3937edb9fce1e5ee3e0d198cfccf754a6efbef781839e37a7d087dcfb469e403c9dde48816"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x27, &(0x7f0000000640)=""/159, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x43) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x2, 0x3000000}) 9.582585201s ago: executing program 2 (id=6026): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) socket(0x80000000000000a, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) listen(r1, 0x50) (async) sendmsg$inet(r1, &(0x7f00000019c0)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000380)="8cefbb785a23", 0x6}], 0x1}, 0x4000) (async, rerun: 64) r2 = socket(0x80000000000000a, 0x2, 0x0) (rerun: 64) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffd, @mcast1={0xff, 0x7}, 0xc}}, {{0xa, 0x4e20, 0x8a, @remote, 0x1000}}}, 0x108) (async) close(r2) 4.294545086s ago: executing program 3 (id=6091): r0 = socket(0x2, 0x3, 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x310, 0xf0, 0xffffffff, 0xf0, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'batadv0\x00', 'veth0_to_batadv\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x3, @ipv6=@mcast2, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @icmp_id=0x6b, @icmp_id=0x65}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x36}, @ipv4=@multicast2, @gre_key=0x400, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x151000, 0x0) ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f0000000140)) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, &(0x7f0000000000), 0x4) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) pread64(r3, &(0x7f0000000340)=""/69, 0x45, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0x6a0000e0}, 0x6e) 1.779079998s ago: executing program 1 (id=6123): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x2, 0x9, 0x0, 0x2, 0x2}, 0x10}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r4, 0x40}, &(0x7f0000000040)=0x8) 1.660639836s ago: executing program 1 (id=6125): r0 = socket(0x28, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x10000b9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f00000002c0), 0x69) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24000094) r6 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f00000000c0)={0x20000000}) 1.631212702s ago: executing program 0 (id=6126): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000009c0)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000200)="7da5c1", 0x3}], 0x1, &(0x7f0000000980)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x9, 0xb, 0x4, 0x8, 0x80000000, 0x7cd5, 0x1}}], 0x30, 0x4040081}, 0x90f0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110bd000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 1.486154041s ago: executing program 0 (id=6127): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @remote, @multicast, @loopback}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef000000000000000000000000060003000a0000000800010000000000240002"], 0x4c}}, 0x0) 1.451729595s ago: executing program 0 (id=6128): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000090280500140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=r2], 0x44}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000040)={0x3, 0x42, "0545f287f6658ce38faca54ab804a347a351a12aa7d49d1f0288a21feca7c25bc5762c98d679081d3fdb5f68fe9504fb72cdbf6b301bf9e93ace320a720d793d8f78"}) 1.338494044s ago: executing program 0 (id=6130): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="2110000000000000180012800b00010067656e657665000008000280040010"], 0x38}, 0x1, 0x0, 0x0, 0x4044005}, 0x814) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x4, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.326680547s ago: executing program 1 (id=6131): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="28c95400", @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x40080) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r1, 0xfffffffc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) (async) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="28c95400", @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x40080) (async) 1.283742406s ago: executing program 4 (id=6132): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710800e835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/181, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xffffffffffffff8b}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0xfffffe22, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x16) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) r1 = socket(0x2b, 0x80801, 0x1) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x20000000) recvfrom(r1, 0x0, 0x0, 0x40012002, 0x0, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a09000000000000000000020000000900010073797a30000000000900020073797a300000000074000000160a01040000000000000000020000020900020073797a30000000000900010073797a3000000000080007400000000240000380080002400000000108000140000000002c000380140001007767300000000000000000000000000014000100767863616e310000000000000000000014000000110001"], 0xc8}}, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, 0x0) (async) pread64(r3, 0x0, 0x0, 0x100008) (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c000}, 0x10) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x600080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000c060101000000000000000000000005050001000700000038e463f9a4788369b0a358f4cba6d5fde78c066380f1afc654509130f8dad5bb0b83fd18b5daa8b31083786bcaad8253a0516898ed6a"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4048010) 1.099619164s ago: executing program 3 (id=6133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x60, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x448555c7}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0xdc705bb5638ea69}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x240400c0}, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r3) (async) getsockopt$nfc_llcp(r3, 0x118, 0x0, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r5, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r7, 0x1, 0x29, 0x0, 0x0) (async) bind$bt_hci(r7, 0x0, 0x0) (async) recvmmsg(r7, &(0x7f0000000cc0), 0x0, 0x0, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, 0x0, 0x0, 0x0) shutdown(r8, 0x1) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, 0x0, 0x4) sendmsg$BATADV_CMD_GET_MESH(r3, 0x0, 0x24000001) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x14}}, 0x20000000) (async) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r10, @ANYBLOB="010025bd7000fbdbdf25030000000c00030000000000000000000c0008000100000000000000340007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB="0c000200000000000000000006000a00295b00000c00050024000000000000000c000600000000000000000008000100", @ANYBLOB], 0xb0}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000080) 1.05434692s ago: executing program 1 (id=6134): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000180)='3', 0x1}], 0x1) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000090000001c001a80180002801400018008000c000300000008001b00040000001400350065727370616e30000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (rerun: 32) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, &(0x7f0000000380)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x12, &(0x7f0000000280)=0xfffffffe, 0x15) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000006c0)="0c030200590214120600002fbcf706e10500000086ddffff1144ee0100010000000000cb00009d984839539249ef2caf8c35d8389890378832de7be9103c2077eae6c17e3c4f995e6a69", 0x4a}], 0x1}, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) (async) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r12, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) setsockopt$packet_int(r12, 0x107, 0x13, &(0x7f0000000000)=0x9, 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x48811) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.051274408s ago: executing program 0 (id=6135): pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x25a5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x0, 0x22, 0xd9, &(0x7f00000002c0)="063dc4f4f4a313eced33fb8e6f9535cc3badddd7ef8bcfd525ae07ab5b3eda1d5eab", &(0x7f0000000680)=""/217, 0x10000, 0x0, 0x3f, 0x26, &(0x7f0000000780)="eda23e479c8528b4778ed69d857be8e23266631dfcc68fa16ad42fae908243bcb76e6677391a3fe4cfc1cf5de0ba128096af3484f4efb86b1c6bd859121377", &(0x7f00000007c0)="d20515f297ae5421c74cdfff5e84f991085c5b398cfce206aee8c956c66d6f642087d32df31c", 0x0, 0x0, 0x6}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10902, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000240)={r9, 0x3f, 0x8, 0xf9a, 0x100, 0x41}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000952d05985be4704bbae3de08704a094e313d80", @ANYRES32=0x0, @ANYBLOB="46060900000800001c00128009000100626f6e64000000000c0002800800090003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x59}, {0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0x8}, 0xffffffffffffffff, {[0xead4, 0x2, 0x3, 0x5, 0x1, 0x101, 0x9, 0xa]}}, 0x5c) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.048858335s ago: executing program 4 (id=6136): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000140)=@ethtool_regs={0x4, 0x4}}) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x34, r2, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c890}, 0x4080000) 952.350343ms ago: executing program 3 (id=6137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000400)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @x25={0x2, 0x2, 0x0, "5d1131846429864fd168cd48a8f352411dd59d"}}, 0x24) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x138, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}, 0x6e6bb2}, [@migrate={0xe8, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty}, {@in=@empty, @in=@private, @in6=@remote, @in6=@mcast2}]}]}, 0x138}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000001800)={0x0, 0xea60}, 0x10) read(r3, &(0x7f0000008840)=""/4096, 0x1000) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001340)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120a000d0000000401a80016000a003a40f8ff070000000000004dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000005fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29bf1d809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 838.210537ms ago: executing program 4 (id=6138): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x4012, 0xffffffffffffffff, 0x80000000000) r0 = socket$tipc(0x1e, 0x5, 0x0) unshare(0x2040400) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000000)=0xffffff80, 0x4) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}]}, 0x68}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) accept4$tipc(r6, &(0x7f00000001c0)=@name, &(0x7f0000000300)=0x10, 0x80000) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000004060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002800a00010071756f74610000001c0003004cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a300000000009000200737904320000000014000000a7bea31100010000000000000000000300000a"], 0x9c}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4000001) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x50, 0xffffffffffffffff, 0xeed35000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000800000001000000020000060400000001000000000000000200000000000000002e51ea2e5f610082f530d2de28269c41e31f3daddc62c78a3589b9b4dfc52c0dd373b49384aba41dc0e029"], &(0x7f00000004c0)=""/226, 0x3c, 0xe2, 0x1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) 773.851009ms ago: executing program 4 (id=6139): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x13) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x114, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xe4, 0x2, [@TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x736}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x8b2}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS={0x44, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xd05}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x34}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xa2b}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfbff}]}]}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x18}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_FLOWER_KEY_MPLS_OPTS={0x58, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x54, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x3}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x7}]}}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000080)=0x400) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001d40)=@newtfilter={0x13f0, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x13bc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x8, 0xa}}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_MASK={0x8, 0x5, 0xf}, @TCA_FW_ACT={0x138c, 0x4, [@m_vlan={0x118, 0x11, 0x0, 0x0, {{0x9}, {0x4}, {0xea, 0x6, "fd54355197dfc4dd23951a4400d09d40901a1040fbf596b8a934f0056e73c58ee74cdd1dfc69af2cdd363a0a08a99aa63bbedb7d38ab12d4febcb158577399d0fa9a3d0a4765a403b2713f24e70d807aa4ac52dd8b80580d9249e2690fb884d527976305d332bb475651bd5cbb203486d32699ff0cbd692484cd232824f46f8ea0b73122bfa201c119ee01c851d241b9dcddeadec2bf142802ef867f9cd3db1244d96913ca62059255513da48978323268de8fb92d7f04ccb0d54a44e71312bba9bdc768a68aacf80cbd0c8601b1a73a333cc6e496f6acc7856f1cf0051b1c8e7c46f160863a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x78, 0x17, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x200}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1de4}]}, {0x3b, 0x6, "18f285f7d63e8c25916e58dcceed0e35996c7440b8f4233fbb15cdba33c269d49240b403ba2d353e3c15ee9ab56d90a420c1f8ff504989"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_gact={0xf4c, 0xa, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x125, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x7, 0x4, 0x7, 0xf}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0xfff, 0x4, 0x80000000, 0x6}}]}, {0xee4, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x10c, 0x15, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x0, 0x2, 0x4a10}, 0x3}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3c2, 0x7, 0x10000000, 0x4, 0x3}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0x7, 0xfffffffd, 0x5}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1000, 0x8, 0x4, 0x7}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10000, 0x6, 0x3, 0x1, 0x6}, 0x8}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfff, 0xc9, 0x8, 0x7, 0x5}, 0xe}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x5, 0x4, 0x7}, 0x7d}}]}, {0x19, 0x6, "53d251f78df0bf8128912499d1c4d18768bc1a3ddd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0xc4, 0xe, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfaca, 0x3, 0x2, 0xd, 0x7d53}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x93bd, 0x6, 0x9, 0x9d68}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xf7fff801}]}, {0x45, 0x6, "ae89c8089692d53f5217dfbbb8761f1669cc33571008b58b8a0b78edbc4634a1a09d11eec6a739b06b0ff3e8053e7b77d48de5b6544f45286e22550d56416ca70d"}, {0xc, 0x7, {0x20406d3039a2302a}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xdc, 0x20, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x200, 0x80000001, 0x3, 0x6, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x401, 0x4, 0x9, 0x9}}, @TCA_DEF_DATA={0xb, 0x3, 'ctinfo\x00'}]}, {0x72, 0x6, "003d42b1c523ec690e91d0f6927d690804410cc58dfba746230f54c8eb591caa96244d6fb7d4d27aabdbf20f69144ee8dae01e78687f6a1f330a6a5cf5cba84deda111c2d17c9073e328219ddcb813cd50085c540311f3a06dc0008a65abab4148c065a47d31fb2bd0f90ee91f19"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6b}]}, 0x13f0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xf, 0xf}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 580.25841ms ago: executing program 1 (id=6140): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000814}, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x8, 0x70bd37, 0x80000000, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x881) recvfrom$unix(r2, &(0x7f00000003c0)=""/194, 0xc2, 0x120, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {}]}, 0x108) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200029bd7000fbdbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c305f64726f7073000000001041a104b116fceab52c3c3c9f5e4701b6bb1edf3f02198c781ff63d8818aadf1bc28e32efa6651e5a2d5514fda0e844bb202dbc893489f2f0256c8b4895d4c284d1f687665af83d2977252ce3d45b267365418659b00ed5420078516b05414da40a53cab6e69245ec0454a91bd6ca398f16cc37db538c1118a283b73e9ec5732747d655e245a8290d"], 0x70}, 0x1, 0x0, 0x0, 0x400dc}, 0x848) r6 = socket$alg(0x26, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x9, 0x80, 0x81, 0x90, r3, 0x2, '\x00', 0x0, r7, 0x2, 0x5, 0x5, 0x9}, 0x50) socket$pppl2tp(0x18, 0x1, 0x1) bind$alg(r2, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0600"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) r9 = accept4$alg(r6, 0x0, 0x0, 0x800) sendmsg$alg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f5a9496032", 0x5}], 0x1}, 0x55) 471.099901ms ago: executing program 3 (id=6141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x6], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r4 = accept4(r0, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x80, 0x800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000740)=0xe8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000940)=0x0) r7 = getuid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r12 = syz_open_procfs$namespace(r9, &(0x7f0000001780)='ns/ipc\x00') r13 = getpid() sendmmsg$unix(r8, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, r11}}}, @cred={{0x1c, 0x1, 0x2, {r13, r10}}}, @rights={{0x18, 0x1, 0x1, [r12, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000980)={0x0}, &(0x7f00000009c0)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a00)=0x0) r16 = getgid() sendmsg$netlink(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)={0x2040, 0x19, 0x10, 0x70bd29, 0x25dfdbfd, "", [@nested={0x2030, 0xc, 0x0, 0x1, [@nested={0x202c, 0x114, 0x0, 0x1, [@generic="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", @nested={0x4, 0x4d}, @nested={0x4, 0xe4}, @nested={0x4, 0x11d}, @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x4, 0x76}, @nested={0x4, 0x7a}, @generic="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"]}]}]}, 0x2040}, {&(0x7f0000000800)={0xe8, 0x23, 0x100, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x10, 0x7a, 0x0, 0x1, [@nested={0x4, 0x129}, @typed={0x8, 0x12c, 0x0, 0x0, @fd=r4}]}, @typed={0x4, 0x153}, @nested={0x74, 0x15f, 0x0, 0x1, [@nested={0x4, 0xee}, @generic="0b31b8fdb4632f49dbe265db282d661a946fb5d9368f01c9f9b45856ad0cf302aa3ff635d2e82656e46ae1af331058c48e2d9836d156867c6fbbbaefb78412002812086006ab7072c5f1c847a9199898b1b897cf4f729bf12fc775978c08c958e2031612fbe9f07d", @nested={0x4, 0x27}]}, @typed={0x46, 0xd2, 0x0, 0x0, @binary="25a16eb25fd566f3fc83a347638235ea28048532a5f6e7ebd6f8ba6c9a28029d86773bb137f9082ba27454a9ceddc01d1ec0ff2cb7927f4ff2721065de50ec3cf888"}, @typed={0x8, 0x72, 0x0, 0x0, @uid=r5}]}, 0xe8}], 0x2, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r11}}}, @rights={{0x18, 0x1, 0x1, [r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}], 0x58, 0x20008084}, 0x48004) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r18 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r18, 0x8916, &(0x7f0000000340)={'ipvlan0\x00', {0x2, 0x4e23, @private=0xac141437}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r17, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x4004000) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001", @ANYRES64], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 467.259524ms ago: executing program 1 (id=6142): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r5, @ANYBLOB="08000200ac14"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) (async) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r6, &(0x7f00000002c0)="906f91535c90b185a31297bc6b6c92865a51789c7ad993492b56775d525fe1a8506fee5cc02e1da16e0af5a41382060a90e01d71cff5a47229fd6a78d2a90191a887072a5098182057d920020d9bac2b8a527ea6196865e12de0bead91efc92ed61c1afe027525697e329b8b5938e3d3b9e2"}, 0x20) 466.588631ms ago: executing program 4 (id=6143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x44}, 0x1, 0x1000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000040a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c0002800800024000000000080003400000000108000140000000000900010073797a30000000000900020073797a320000000005000740c9000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe04, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0xec}, 0x48) 226.599004ms ago: executing program 3 (id=6144): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r3, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3401000017000100000000000000000000000000000000000000ffffffffffff0000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbac1414bb00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00b7f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000093c0b077000200000000000000000000000000000000000000000000000000b06b7e000000000000000000000000000000000000000000000000000c0008000800080000316b"], 0x134}}, 0x0) 220.492464ms ago: executing program 4 (id=6145): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f0000000000), 0x0}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x3, 0x4, 0x7, 0x0, 0x1}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=@newtfilter={0x878, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x8001, 0x80000001, 0x5, 0xd03cbcd, 0x9, 0x5, 0x400, 0xffff, 0xf2, 0x6, 0xf0, 0xe9, 0x7, 0x4, 0x3, 0x4, 0x1, 0xedb, 0x9, 0x5, 0x7eb, 0x7, 0x0, 0x200, 0x6, 0x5, 0x5, 0x100, 0x6, 0xffffffff, 0xf6e, 0x5, 0xfffffbff, 0x81, 0x3, 0x1, 0x7, 0x1, 0x1, 0x7, 0x8, 0xffff8001, 0xfffffff7, 0x4, 0x9c5, 0x5, 0x5, 0xff, 0x5a9f, 0x4, 0x8, 0x100, 0x8, 0x0, 0xff, 0xc2e, 0x9, 0x1, 0xf, 0x7ff, 0x34, 0x9, 0xb6d4, 0x5, 0x7, 0x44d, 0x43b, 0x8, 0x6, 0x2, 0x4, 0x3, 0x6, 0x8, 0xfff, 0x9, 0x7, 0x5, 0x7fff, 0x80, 0x2, 0x7, 0x0, 0x225, 0x4, 0x4, 0x1, 0x1, 0x4, 0x3, 0x0, 0x10000, 0x6, 0x2, 0x1ff, 0x10001, 0x2, 0x5, 0x200, 0x0, 0xffffff6d, 0x6c93, 0x3, 0xd5, 0x9, 0x10001, 0x0, 0x4, 0x101, 0x8, 0x10001, 0xffffffff, 0x0, 0xffffffff, 0x7, 0x1, 0x4, 0x4, 0x8, 0x110, 0x3, 0x7, 0x7, 0x3, 0x7, 0x7, 0x5bc, 0xfffffff3, 0x58, 0x0, 0x80, 0x800, 0x6, 0x9, 0x3ff, 0x9, 0xfffffffa, 0x81, 0x7, 0x3, 0x8, 0x1, 0x10001, 0x0, 0xf9b0, 0x2, 0x5, 0x0, 0x9, 0x5, 0x3, 0x7, 0x2, 0x8a, 0x6, 0x2, 0xb09, 0x200, 0x100, 0xffffff40, 0x1, 0x6, 0x80000001, 0xed0, 0x66, 0x0, 0x80000000, 0x1, 0x5c, 0xfffffc01, 0x60b, 0x8, 0x1, 0x6, 0x3, 0x7, 0x6b, 0x7fffffff, 0xfffffff6, 0x6, 0xfb, 0x2, 0x40, 0xd4, 0x2, 0x4, 0x6, 0x7ff, 0x2, 0x6c0453b7, 0x7, 0x6, 0xee, 0x4, 0x0, 0xd14f, 0x9cd, 0xfffff0bc, 0x10000, 0x4, 0x2, 0x95, 0x5, 0x8, 0x100, 0x5, 0xfffff3c3, 0x6, 0x401, 0x0, 0xffffffff, 0x4, 0xec, 0x1, 0x7, 0x4, 0x9, 0x7, 0x7, 0x2, 0x400, 0x1ff, 0x8, 0x4, 0x1000, 0xeda5, 0xc7b, 0x3, 0x6, 0x6, 0x730, 0xfffffffa, 0x80000000, 0x7ff, 0x6, 0x9, 0x7, 0x48, 0x9b, 0x5, 0x51, 0xbf7, 0x1, 0x6, 0x9, 0x8, 0x2, 0x78, 0x5, 0x1, 0x2f, 0x8, 0x8, 0x1, 0x8001, 0x7f]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x8, 0x5, 0x7fff, 0x0, 0x3, 0x1, 0x0, 0x9, 0x7bba3b63, 0x101, 0x6, 0x400, 0x2, 0x4, 0x8711, 0x4, 0x2c, 0xfffffff9, 0xc, 0x7, 0xd8dc, 0x8, 0x7, 0x7, 0x8, 0x522, 0x1ff, 0x3, 0x10001, 0x1, 0x7, 0x9, 0x7, 0x4, 0x7fff, 0x7, 0x7fffffff, 0x2cca, 0x7fffffff, 0x4, 0x66f, 0x3, 0xfffffc01, 0x8, 0x5, 0x3, 0xa, 0x1000, 0x1, 0x213c, 0x1, 0x7, 0xff, 0x1, 0x6, 0x9, 0x3ff, 0x7, 0x9, 0x4, 0x46dc6052, 0xb21, 0xffffffc1, 0x2, 0x6, 0x101, 0x9fd, 0x7, 0x9, 0xd, 0xc, 0x353, 0x4, 0x4, 0x43, 0x8, 0x1ff, 0x6, 0x28, 0x4, 0x7, 0x3, 0x2, 0x7, 0x0, 0x8, 0xa6, 0xebfa, 0x8, 0x2, 0x7, 0x9a, 0x3, 0x5, 0x81, 0xbc1, 0xcaa8c3e6, 0x2, 0x81, 0x6, 0x10000000, 0x1, 0x7, 0x9, 0x3, 0x3, 0x7fff, 0x4, 0x3, 0x0, 0xfffffff8, 0x1, 0x5, 0x6, 0x7, 0x7fff, 0x4, 0x4, 0x8b, 0x4, 0x2, 0x9, 0x3, 0x4, 0x80000000, 0x7, 0x8, 0x0, 0x3f9f26e9, 0x8ca, 0x3, 0x29, 0x1, 0x2, 0x5, 0x6, 0x5, 0xe61, 0xc, 0x8, 0x10001, 0xca7, 0x7, 0x7, 0x200, 0x2, 0x3, 0x3, 0x3, 0xc8, 0x4, 0x9, 0x200, 0xbff, 0x3, 0x4, 0xc, 0x6, 0xe29a, 0x1000, 0x4, 0x55756530, 0x564f, 0x9, 0xffff6755, 0x2, 0x7fff, 0x65ef, 0xdd, 0x7, 0x6, 0x6, 0x5, 0x8, 0x9, 0x80, 0x1, 0xffffffff, 0x5, 0x3, 0x5, 0x9, 0x8001, 0x7, 0xe, 0x6, 0x7, 0xfffffff9, 0x4, 0x6, 0x8001, 0x8, 0x3, 0x10000, 0x100, 0x1ff, 0xf, 0x8c, 0xffff8000, 0x3, 0x1, 0x200, 0x3, 0x1, 0xd, 0x0, 0x4, 0x3, 0x6, 0x7, 0x0, 0x3, 0x5, 0x180, 0x5, 0x4, 0x7ff, 0x8, 0x7, 0x0, 0x7, 0x0, 0x5504, 0x0, 0x0, 0x7, 0xffffbf52, 0x9, 0xff, 0x6, 0xcee, 0x14, 0x6, 0x4, 0x4, 0xffff, 0xfffffff7, 0x9, 0x6, 0x81, 0x7, 0x0, 0x926e, 0x47b7, 0x0, 0x100, 0x1, 0x8, 0x1, 0xfffffff7, 0x8, 0xffff0001, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x4, 0x6b, 0x2, 0x0, {0x13, 0x1, 0x8, 0xb, 0x72, 0x5}, {0xa, 0x0, 0x5, 0x0, 0x100, 0x9}, 0x8, 0x3ff, 0x8}}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f0000000000), 0x0}, 0x20) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237788bb71f36b177a80fb78c7699c74e891a0c708000100544545000900020073797a3200000000140000001100010000000000000000000100000a2c2f2878e98bde1da104ab3a2ed8daf8c975a267d4bd3e05c51c92d8844575e5863355bfa16f140d038f8d8730cfad340001b208ef439cfc3e41b84f1284fd29a1c01e719d058a3036f6583efdab33a38254b3cc727c890ba4f39ad37c6aa7ecdcc11ebde6244ac962c30250fb282f59b2d88b4cbb71647eaf11837bac3cd8"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x3, 0x4, 0x7, 0x0, 0x1}, 0x48) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=@newtfilter={0x878, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x8001, 0x80000001, 0x5, 0xd03cbcd, 0x9, 0x5, 0x400, 0xffff, 0xf2, 0x6, 0xf0, 0xe9, 0x7, 0x4, 0x3, 0x4, 0x1, 0xedb, 0x9, 0x5, 0x7eb, 0x7, 0x0, 0x200, 0x6, 0x5, 0x5, 0x100, 0x6, 0xffffffff, 0xf6e, 0x5, 0xfffffbff, 0x81, 0x3, 0x1, 0x7, 0x1, 0x1, 0x7, 0x8, 0xffff8001, 0xfffffff7, 0x4, 0x9c5, 0x5, 0x5, 0xff, 0x5a9f, 0x4, 0x8, 0x100, 0x8, 0x0, 0xff, 0xc2e, 0x9, 0x1, 0xf, 0x7ff, 0x34, 0x9, 0xb6d4, 0x5, 0x7, 0x44d, 0x43b, 0x8, 0x6, 0x2, 0x4, 0x3, 0x6, 0x8, 0xfff, 0x9, 0x7, 0x5, 0x7fff, 0x80, 0x2, 0x7, 0x0, 0x225, 0x4, 0x4, 0x1, 0x1, 0x4, 0x3, 0x0, 0x10000, 0x6, 0x2, 0x1ff, 0x10001, 0x2, 0x5, 0x200, 0x0, 0xffffff6d, 0x6c93, 0x3, 0xd5, 0x9, 0x10001, 0x0, 0x4, 0x101, 0x8, 0x10001, 0xffffffff, 0x0, 0xffffffff, 0x7, 0x1, 0x4, 0x4, 0x8, 0x110, 0x3, 0x7, 0x7, 0x3, 0x7, 0x7, 0x5bc, 0xfffffff3, 0x58, 0x0, 0x80, 0x800, 0x6, 0x9, 0x3ff, 0x9, 0xfffffffa, 0x81, 0x7, 0x3, 0x8, 0x1, 0x10001, 0x0, 0xf9b0, 0x2, 0x5, 0x0, 0x9, 0x5, 0x3, 0x7, 0x2, 0x8a, 0x6, 0x2, 0xb09, 0x200, 0x100, 0xffffff40, 0x1, 0x6, 0x80000001, 0xed0, 0x66, 0x0, 0x80000000, 0x1, 0x5c, 0xfffffc01, 0x60b, 0x8, 0x1, 0x6, 0x3, 0x7, 0x6b, 0x7fffffff, 0xfffffff6, 0x6, 0xfb, 0x2, 0x40, 0xd4, 0x2, 0x4, 0x6, 0x7ff, 0x2, 0x6c0453b7, 0x7, 0x6, 0xee, 0x4, 0x0, 0xd14f, 0x9cd, 0xfffff0bc, 0x10000, 0x4, 0x2, 0x95, 0x5, 0x8, 0x100, 0x5, 0xfffff3c3, 0x6, 0x401, 0x0, 0xffffffff, 0x4, 0xec, 0x1, 0x7, 0x4, 0x9, 0x7, 0x7, 0x2, 0x400, 0x1ff, 0x8, 0x4, 0x1000, 0xeda5, 0xc7b, 0x3, 0x6, 0x6, 0x730, 0xfffffffa, 0x80000000, 0x7ff, 0x6, 0x9, 0x7, 0x48, 0x9b, 0x5, 0x51, 0xbf7, 0x1, 0x6, 0x9, 0x8, 0x2, 0x78, 0x5, 0x1, 0x2f, 0x8, 0x8, 0x1, 0x8001, 0x7f]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x8, 0x5, 0x7fff, 0x0, 0x3, 0x1, 0x0, 0x9, 0x7bba3b63, 0x101, 0x6, 0x400, 0x2, 0x4, 0x8711, 0x4, 0x2c, 0xfffffff9, 0xc, 0x7, 0xd8dc, 0x8, 0x7, 0x7, 0x8, 0x522, 0x1ff, 0x3, 0x10001, 0x1, 0x7, 0x9, 0x7, 0x4, 0x7fff, 0x7, 0x7fffffff, 0x2cca, 0x7fffffff, 0x4, 0x66f, 0x3, 0xfffffc01, 0x8, 0x5, 0x3, 0xa, 0x1000, 0x1, 0x213c, 0x1, 0x7, 0xff, 0x1, 0x6, 0x9, 0x3ff, 0x7, 0x9, 0x4, 0x46dc6052, 0xb21, 0xffffffc1, 0x2, 0x6, 0x101, 0x9fd, 0x7, 0x9, 0xd, 0xc, 0x353, 0x4, 0x4, 0x43, 0x8, 0x1ff, 0x6, 0x28, 0x4, 0x7, 0x3, 0x2, 0x7, 0x0, 0x8, 0xa6, 0xebfa, 0x8, 0x2, 0x7, 0x9a, 0x3, 0x5, 0x81, 0xbc1, 0xcaa8c3e6, 0x2, 0x81, 0x6, 0x10000000, 0x1, 0x7, 0x9, 0x3, 0x3, 0x7fff, 0x4, 0x3, 0x0, 0xfffffff8, 0x1, 0x5, 0x6, 0x7, 0x7fff, 0x4, 0x4, 0x8b, 0x4, 0x2, 0x9, 0x3, 0x4, 0x80000000, 0x7, 0x8, 0x0, 0x3f9f26e9, 0x8ca, 0x3, 0x29, 0x1, 0x2, 0x5, 0x6, 0x5, 0xe61, 0xc, 0x8, 0x10001, 0xca7, 0x7, 0x7, 0x200, 0x2, 0x3, 0x3, 0x3, 0xc8, 0x4, 0x9, 0x200, 0xbff, 0x3, 0x4, 0xc, 0x6, 0xe29a, 0x1000, 0x4, 0x55756530, 0x564f, 0x9, 0xffff6755, 0x2, 0x7fff, 0x65ef, 0xdd, 0x7, 0x6, 0x6, 0x5, 0x8, 0x9, 0x80, 0x1, 0xffffffff, 0x5, 0x3, 0x5, 0x9, 0x8001, 0x7, 0xe, 0x6, 0x7, 0xfffffff9, 0x4, 0x6, 0x8001, 0x8, 0x3, 0x10000, 0x100, 0x1ff, 0xf, 0x8c, 0xffff8000, 0x3, 0x1, 0x200, 0x3, 0x1, 0xd, 0x0, 0x4, 0x3, 0x6, 0x7, 0x0, 0x3, 0x5, 0x180, 0x5, 0x4, 0x7ff, 0x8, 0x7, 0x0, 0x7, 0x0, 0x5504, 0x0, 0x0, 0x7, 0xffffbf52, 0x9, 0xff, 0x6, 0xcee, 0x14, 0x6, 0x4, 0x4, 0xffff, 0xfffffff7, 0x9, 0x6, 0x81, 0x7, 0x0, 0x926e, 0x47b7, 0x0, 0x100, 0x1, 0x8, 0x1, 0xfffffff7, 0x8, 0xffff0001, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x4, 0x6b, 0x2, 0x0, {0x13, 0x1, 0x8, 0xb, 0x72, 0x5}, {0xa, 0x0, 0x5, 0x0, 0x100, 0x9}, 0x8, 0x3ff, 0x8}}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) 131.463447ms ago: executing program 3 (id=6146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x3, 0x0, {@in6_addr=@mcast2, 0x86dd}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x44}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='memory.swap.events\x00', 0x0, 0x0) 0s ago: executing program 0 (id=6147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@local}}, &(0x7f00000005c0)=0xe8) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfa, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x88, r10, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x4a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x801}, @device_b, @device_a, @initial, {0x5, 0x5}, @value=@ver_80211n={0x0, 0x7984, 0x2, 0x2, 0x0, 0x2}}, 0x2810, 0x2, {0x0, 0x6, @default_ap_ssid}, @val, @val={0x2d, 0x1a, {0x1, 0x0, 0x4, 0x0, {0x2, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x6, 0x9, 0xfe}}}}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40003}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x146e}]]}, 0x88}, 0x1, 0x0, 0x0, 0x6a845ecb4f243e70}, 0x24008080) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r6, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x62}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40804}, 0x200000c0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @remote}, 0x2, 0x4, 0x1, 0x1}}, 0x26) kernel console output (not intermixed with test programs): 1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.492333][T21887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 648.572013][T15270] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.585196][T15270] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.594346][T21891] lo speed is unknown, defaulting to 1000 [ 648.600098][T21898] __nla_validate_parse: 5 callbacks suppressed [ 648.600111][T21898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4222'. [ 648.620178][T21891] lo speed is unknown, defaulting to 1000 [ 648.628221][T21891] wlan1 speed is unknown, defaulting to 1000 [ 649.081649][T21919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4229'. [ 649.108474][T21923] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4230'. [ 649.199095][T21922] lo speed is unknown, defaulting to 1000 [ 649.227299][T21922] lo speed is unknown, defaulting to 1000 [ 649.237628][T21930] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4231'. [ 649.248702][T21922] wlan1 speed is unknown, defaulting to 1000 [ 649.523768][T21940] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4233'. [ 649.677332][T21944] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4234'. [ 649.709578][T21944] netlink: 35 bytes leftover after parsing attributes in process `syz.1.4234'. [ 649.735326][T21944] netlink: 'syz.1.4234': attribute type 5 has an invalid length. [ 649.744436][T21944] netlink: 'syz.1.4234': attribute type 6 has an invalid length. [ 649.756373][T21944] netlink: 35 bytes leftover after parsing attributes in process `syz.1.4234'. [ 653.040786][T21983] syzkaller0: entered promiscuous mode [ 653.057240][T21983] syzkaller0: entered allmulticast mode [ 653.668970][T22019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4251'. [ 653.704680][T22019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4251'. [ 653.750162][T22019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4251'. [ 653.775243][T22019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4251'. [ 653.870089][T22033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 653.921012][T22025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 654.036170][T22049] x_tables: unsorted entry at hook 1 [ 654.062065][T22047] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4257'. [ 654.074623][ T30] audit: type=1107 audit(1784049391.508:15): pid=22041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 654.080551][T22047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.297958][T22056] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4260'. [ 654.307106][T22056] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4260'. [ 654.858795][T22092] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 654.906563][T22096] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 654.951670][ T1176] team0: left allmulticast mode [ 654.964714][ T1176] team_slave_0: left allmulticast mode [ 654.985570][T10007] IPVS: starting estimator thread 0... [ 654.992393][ T1176] team_slave_1: left allmulticast mode [ 655.010256][T22106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4274'. [ 655.014231][ T1176] geneve1: left allmulticast mode [ 655.047300][ T1176] team0: left promiscuous mode [ 655.052237][ T1176] team_slave_0: left promiscuous mode [ 655.060717][ T1176] team_slave_1: left promiscuous mode [ 655.067816][ T1176] geneve1: left promiscuous mode [ 655.079374][ T1176] bridge0: port 3(team0) entered disabled state [ 655.107576][T22104] IPVS: using max 39 ests per chain, 93600 per kthread [ 655.116110][ T1176] bridge_slave_1: left allmulticast mode [ 655.121911][ T1176] bridge_slave_1: left promiscuous mode [ 655.128560][ T1176] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.140329][ T1176] bridge_slave_0: left allmulticast mode [ 655.146122][ T1176] bridge_slave_0: left promiscuous mode [ 655.152011][ T1176] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.210237][ T1176] pim6reg: left allmulticast mode [ 655.216202][ T1176] pimreg3: left allmulticast mode [ 655.378618][ T1176] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 655.602246][ T1176] bond8 (unregistering): (slave vti0): Releasing backup interface [ 655.627437][ T1176] vti0 (unregistering): left promiscuous mode [ 655.666489][ T1176] erspan0 (unregistering): left promiscuous mode [ 655.701060][ T1176] gretap0 (unregistering): left promiscuous mode [ 655.759337][ T1176] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 655.863734][ T1176] bond12 (unregistering): (slave geneve3): Releasing active interface [ 655.887007][ T1176] team0: Port device geneve1 removed [ 655.974456][ T1176] team0: Port device bridge3 removed [ 655.983680][ T1176] bond10 (unregistering): (slave bridge4): Releasing active interface [ 656.003700][ T1176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.020527][ T1176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.031052][ T1176] bond0 (unregistering): Released all slaves [ 656.043851][ T1176] bond1 (unregistering): Released all slaves [ 656.067034][ T1176] bond2 (unregistering): Released all slaves [ 656.105612][ T1176] bond3 (unregistering): Released all slaves [ 656.120054][T22147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4283'. [ 656.136257][ T1176] bond4 (unregistering): (slave bond5): Releasing backup interface [ 656.144843][ T1176] bond4 (unregistering): Released all slaves [ 656.161447][ T1176] bond5 (unregistering): Released all slaves [ 656.178313][ T1176] bond6 (unregistering): Released all slaves [ 656.194145][ T1176] bond7 (unregistering): Released all slaves [ 656.211276][ T1176] bond8 (unregistering): Released all slaves [ 656.226226][ T1176] bond9 (unregistering): Released all slaves [ 656.249648][ T1176] bond10 (unregistering): Released all slaves [ 656.266477][ T1176] bond11 (unregistering): Released all slaves [ 656.282582][ T1176] bond12 (unregistering): Released all slaves [ 656.301477][ T1176] bond13 (unregistering): Released all slaves [ 656.527616][T22151] netlink: 'syz.1.4284': attribute type 5 has an invalid length. [ 656.567793][T22151] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 656.601924][ T1176] : left promiscuous mode [ 656.758761][T22174] openvswitch: netlink: Message has 1 unknown bytes. [ 656.781741][T22173] openvswitch: netlink: Message has 1 unknown bytes. [ 657.007594][ T1176] tipc: Disabling bearer [ 657.021919][ T1176] tipc: Left network mode [ 657.310003][T22207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4297'. [ 657.615630][T22218] macsec0: entered promiscuous mode [ 657.622478][T22218] bridge0: entered promiscuous mode [ 657.637444][T22218] macsec0: entered allmulticast mode [ 657.651481][T22218] bridge0: entered allmulticast mode [ 657.668709][T22198] syzkaller0: entered promiscuous mode [ 657.676566][T22198] syzkaller0: entered allmulticast mode [ 657.730012][T22222] lo speed is unknown, defaulting to 1000 [ 657.739107][T22222] lo speed is unknown, defaulting to 1000 [ 657.792933][T22222] wlan1 speed is unknown, defaulting to 1000 [ 657.827237][T22234] netlink: 'syz.2.4303': attribute type 178 has an invalid length. [ 657.940242][T22237] netlink: 'syz.3.4304': attribute type 1 has an invalid length. [ 658.149745][T22237] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 658.312565][T22241] netlink: 'syz.2.4305': attribute type 23 has an invalid length. [ 658.343935][T22244] syzkaller1: entered promiscuous mode [ 658.404364][T22244] syzkaller1: entered allmulticast mode [ 658.595295][ T5638] Bluetooth: hci1: command 0x0406 tx timeout [ 658.894903][T22276] IPv6: NLM_F_CREATE should be specified when creating new route [ 659.407756][T22294] netlink: 'syz.3.4316': attribute type 1 has an invalid length. [ 659.437441][ T1176] hsr_slave_0: left promiscuous mode [ 659.451955][ T1176] hsr_slave_1: left promiscuous mode [ 659.631090][ T1176] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 659.962091][ T1176] team0 (unregistering): Port device team_slave_1 removed [ 659.977670][ T1176] team0 (unregistering): Port device team_slave_0 removed [ 660.090886][T15270] smbdirect: ib_dev[syz2] removed [ 660.100269][T10029] lo speed is unknown, defaulting to 1000 [ 660.116895][T22314] netlink: 'syz.1.4319': attribute type 1 has an invalid length. [ 660.124690][T10029] syz2: Port: 1 Link DOWN [ 660.157289][T22314] __nla_validate_parse: 5 callbacks suppressed [ 660.157302][T22314] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4319'. [ 660.217018][T22314] netlink: 'syz.1.4319': attribute type 1 has an invalid length. [ 660.223463][T22302] lo speed is unknown, defaulting to 1000 [ 660.238394][T22302] wlan1 speed is unknown, defaulting to 1000 [ 660.304346][T22329] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4321'. [ 660.333146][T22331] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4321'. [ 660.507694][ T1176] IPVS: stop unused estimator thread 0... [ 660.589871][T22337] netlink: 'syz.1.4322': attribute type 1 has an invalid length. [ 660.689628][T22342] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4323'. [ 660.805295][T22346] syzkaller1: entered promiscuous mode [ 660.823923][T22346] syzkaller1: entered allmulticast mode [ 660.880892][T22351] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4322'. [ 660.906117][T22342] 0·: renamed from hsr0 (while UP) [ 660.914169][T22342] 0·: entered allmulticast mode [ 660.920343][T22342] hsr_slave_0: entered allmulticast mode [ 660.926441][T22342] hsr_slave_1: entered allmulticast mode [ 660.932749][T22342] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 661.366722][T22366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.412382][ T7129] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 661.484522][ T7129] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 661.540093][ T7129] bond0: now running without any active interface! [ 661.594546][T22380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4332'. [ 661.653235][T22380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4332'. [ 661.689162][T22380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4332'. [ 661.732212][T22380] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4332'. [ 662.268596][T22413] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4339'. [ 662.522879][T22425] netlink: 'syz.3.4342': attribute type 4 has an invalid length. [ 663.508631][T22452] block nbd0: not configured, cannot reconfigure [ 663.977758][T22464] 8021q: adding VLAN 0 to HW filter on device bond4 [ 664.030564][T22464] bond0: (slave bond4): Enslaving as an active interface with an up link [ 664.109191][T22466] syz_tun: entered promiscuous mode [ 664.122335][T22466] syz_tun: entered allmulticast mode [ 664.133180][T22466] team0: Port device syz_tun added [ 664.296502][T22479] vlan1: entered allmulticast mode [ 664.324017][T22479] bond0: entered allmulticast mode [ 664.348944][T22479] ªªªªªª: entered allmulticast mode [ 664.368867][T22479] bond_slave_1: entered allmulticast mode [ 664.387398][T22479] bond4: entered allmulticast mode [ 664.467916][T22487] netlink: 'syz.1.4352': attribute type 1 has an invalid length. [ 664.638267][T22487] bond6: entered promiscuous mode [ 664.693022][T22487] 8021q: adding VLAN 0 to HW filter on device bond6 [ 664.805756][T22483] bond6: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 664.827438][T22483] bond6: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 664.852050][T22483] bond6: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 664.973721][T22486] bond6: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 664.995796][T22486] bond6: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 665.048829][ T30] audit: type=1804 audit(1784049402.478:16): pid=22512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4358" name="/newroot/214/cgroup.controllers" dev="tmpfs" ino=1111 res=1 errno=0 [ 665.120906][ T30] audit: type=1800 audit(1784049402.478:17): pid=22512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4358" name="cgroup.controllers" dev="tmpfs" ino=1111 res=0 errno=0 [ 665.224616][T22522] __nla_validate_parse: 4 callbacks suppressed [ 665.224627][T22522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4360'. [ 665.242056][T22516] netlink: 'syz.2.4359': attribute type 1 has an invalid length. [ 665.336247][T22529] tipc: Enabling of bearer rejected, failed to enable media [ 665.345602][T22534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4362'. [ 665.531196][T22544] syzkaller0: entered promiscuous mode [ 665.538828][T22544] syzkaller0: entered allmulticast mode [ 665.583304][T22552] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4366'. [ 665.896139][T22568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4374'. [ 665.937662][T22567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4374'. [ 666.078124][T22581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4376'. [ 666.130631][T22581] 8021q: adding VLAN 0 to HW filter on device bond6 [ 666.137903][T22585] team0: left promiscuous mode [ 666.138010][T22581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4376'. [ 666.142919][T22585] team_slave_0: left promiscuous mode [ 666.157723][T22585] team_slave_1: left promiscuous mode [ 666.163251][T22585] syz_tun: left promiscuous mode [ 666.169857][T22585] bridge0: port 3(team0) entered disabled state [ 666.179768][T22585] bridge_slave_1: left promiscuous mode [ 666.186385][T22585] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.195213][T22585] bridge_slave_0: left allmulticast mode [ 666.200857][T22585] bridge_slave_0: left promiscuous mode [ 666.206925][T22585] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.222600][T22581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4376'. [ 666.247750][T22581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4376'. [ 666.257417][T22581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4376'. [ 666.374765][T22592] netlink: 'syz.2.4378': attribute type 17 has an invalid length. [ 666.390584][T22592] gretap0: entered promiscuous mode [ 666.398568][T22592] gretap0: left promiscuous mode [ 666.550077][T22600] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 668.889694][T22572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 669.071420][T22616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.149816][T22621] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 669.181041][T22628] pim6reg: entered allmulticast mode [ 669.286774][T22636] sctp: [Deprecated]: syz.1.4392 (pid 22636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 669.286774][T22636] Use struct sctp_sack_info instead [ 669.439047][T22643] x_tables: unsorted underflow at hook 4 [ 669.658291][T22658] tipc: Invalid UDP bearer configuration [ 669.658341][T22658] tipc: Enabling of bearer rejected, failed to enable media [ 669.820103][T22673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.848346][T22668] lo: left promiscuous mode [ 669.889458][T22668] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 670.020438][T22678] netlink: 'syz.2.4406': attribute type 13 has an invalid length. [ 670.681224][T22710] xt_TCPMSS: Only works on TCP SYN packets [ 670.789669][T22721] __nla_validate_parse: 36 callbacks suppressed [ 670.789685][T22721] netlink: 576 bytes leftover after parsing attributes in process `syz.0.4419'. [ 671.098802][T22741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4424'. [ 671.180740][T22753] netlink: 'syz.1.4426': attribute type 32 has an invalid length. [ 671.415915][T22766] lo: Caught tx_queue_len zero misconfig [ 671.492690][T22775] veth1: Caught tx_queue_len zero misconfig [ 671.627228][T22780] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4434'. [ 671.638098][T22780] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4434'. [ 671.753504][T22784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 671.788555][T22786] Bluetooth: MGMT ver 1.23 [ 671.927172][T22791] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 672.019211][T22797] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4442'. [ 672.091120][T22804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4441'. [ 672.142484][T22804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4441'. [ 672.442130][T22833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 672.587377][T22835] netlink: 'syz.4.4450': attribute type 1 has an invalid length. [ 672.638929][T22835] nbd: error processing sock list [ 672.671311][T22840] netlink: 'syz.4.4450': attribute type 2 has an invalid length. [ 672.853942][T22850] netlink: 'syz.1.4456': attribute type 4 has an invalid length. [ 672.892688][T22850] netlink: 'syz.1.4456': attribute type 4 has an invalid length. [ 672.923302][T22859] 8021q: adding VLAN 0 to HW filter on device bond3 [ 672.949828][T22855] syzkaller0: entered promiscuous mode [ 672.963180][T22855] syzkaller0: entered allmulticast mode [ 673.137863][T22866] netlink: 'syz.1.4460': attribute type 1 has an invalid length. [ 673.257085][T22866] 8021q: adding VLAN 0 to HW filter on device bond7 [ 673.307129][T22871] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 673.392860][T22879] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4463'. [ 673.403402][T22866] 8021q: adding VLAN 0 to HW filter on device bond8 [ 673.417986][T22866] bond7: (slave bond8): Enslaving as an active interface with a down link [ 673.803482][T22912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4472'. [ 673.864038][T22912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4472'. [ 674.736032][T22956] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 674.922725][T22966] x_tables: duplicate underflow at hook 2 [ 675.572198][T22982] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 675.648532][T22982] bond3 (unregistering): Released all slaves [ 675.724083][T22993] netlink: 'syz.4.4498': attribute type 1 has an invalid length. [ 675.914610][T22993] lo speed is unknown, defaulting to 1000 [ 675.932873][T22993] wlan1 speed is unknown, defaulting to 1000 [ 675.941702][T23004] veth0_to_bond: Caught tx_queue_len zero misconfig [ 675.981576][T23004] __nla_validate_parse: 3 callbacks suppressed [ 675.981590][T23004] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4502'. [ 676.103360][T23008] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4505'. [ 676.121445][T23010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4506'. [ 676.247304][T23020] Unsupported ieee802154 address type: 0 [ 676.296501][T23017] 8021q: adding VLAN 0 to HW filter on device bond9 [ 676.326733][T23017] bond9 (unregistering): Released all slaves [ 676.369761][T23019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4508'. [ 676.559084][T23026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4511'. [ 676.581529][T23028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4512'. [ 676.713204][T23038] netlink: 'syz.3.4511': attribute type 1 has an invalid length. [ 676.820086][T23045] netlink: 'syz.3.4511': attribute type 13 has an invalid length. [ 676.892885][T23046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4515'. [ 677.233204][T23064] openvswitch: netlink: IPv6 tunnel dst address is zero [ 677.251382][T23065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4522'. [ 677.270940][T23066] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4520'. [ 677.323215][T23073] xt_hashlimit: overflow, try lower: 3/0 [ 677.426868][T23075] geneve2: entered promiscuous mode [ 677.433399][T23075] geneve2: entered allmulticast mode [ 677.440757][ T7129] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 677.465817][ T7129] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 677.486475][ T7129] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 677.499849][ T7129] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 677.532575][T23077] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4524'. [ 677.642618][T23083] netlink: 'syz.1.4526': attribute type 1 has an invalid length. [ 677.725981][T23083] 8021q: adding VLAN 0 to HW filter on device bond9 [ 677.765586][T23093] macvlan2: entered promiscuous mode [ 677.775377][T23093] macvlan2: entered allmulticast mode [ 677.782279][T23093] bond9: entered promiscuous mode [ 677.790030][T23093] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 677.799525][T23096] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 677.818124][T23093] bond9: left promiscuous mode [ 677.899564][T23100] xt_hashlimit: overflow, rate too high: 0 [ 678.195649][T23112] netlink: 'syz.1.4536': attribute type 10 has an invalid length. [ 678.693870][T23130] syzkaller1: left promiscuous mode [ 678.705481][T23130] syzkaller1: left allmulticast mode [ 678.924377][T23138] netlink: 'syz.3.4542': attribute type 4 has an invalid length. [ 679.422689][T23173] netlink: 'syz.3.4545': attribute type 5 has an invalid length. [ 679.565904][T23190] netlink: 'syz.0.4556': attribute type 1 has an invalid length. [ 679.596139][T23190] bond3: (slave geneve2): making interface the new active one [ 679.604107][T23190] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 679.613204][ T7129] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 679.625069][ T7129] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 679.633983][ T7129] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 679.644611][ T7129] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 682.067947][T23147] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 682.247219][T23223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.283620][T23225] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 682.483278][T23245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 682.490974][T23243] __nla_validate_parse: 8 callbacks suppressed [ 682.490988][T23243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4571'. [ 682.534893][T23247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4572'. [ 682.554538][T23247] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4572'. [ 682.626325][T23250] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 682.950366][T23275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 683.022139][T23272] lo speed is unknown, defaulting to 1000 [ 683.062417][T23272] wlan1 speed is unknown, defaulting to 1000 [ 683.090785][T23276] netlink: 'syz.4.4579': attribute type 39 has an invalid length. [ 683.210633][T23287] vxcan1: entered allmulticast mode [ 683.217933][T23289] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4585'. [ 683.238363][T23289] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4585'. [ 683.258734][T23289] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4585'. [ 683.274896][T15270] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 683.299107][T15270] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 683.344076][T15270] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 683.379846][T15270] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 683.419824][T23297] netlink: 'syz.3.4587': attribute type 1 has an invalid length. [ 683.472065][T23299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4588'. [ 683.498392][T23297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4587'. [ 683.554234][T23305] netlink: 576 bytes leftover after parsing attributes in process `syz.3.4587'. [ 683.825182][T23318] bond0: Caught tx_queue_len zero misconfig [ 684.045834][T23333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4597'. [ 684.227562][T23341] IPv6: NLM_F_CREATE should be specified when creating new route [ 684.245929][T23341] openvswitch: netlink: IP tunnel dst address not specified [ 684.380119][T23347] netlink: 'syz.3.4602': attribute type 8 has an invalid length. [ 684.594344][T23359] netlink: 'syz.3.4606': attribute type 1 has an invalid length. [ 684.645927][T23356] syz_tun: entered promiscuous mode [ 684.694282][T23368] netlink: 'syz.2.4608': attribute type 1 has an invalid length. [ 684.751743][T23359] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 684.769734][T23368] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 684.990521][T23384] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 685.168410][T23393] netlink: 'syz.1.4615': attribute type 10 has an invalid length. [ 685.178466][T23393] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 685.206935][T23397] netlink: 'syz.1.4615': attribute type 10 has an invalid length. [ 685.224839][T23397] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 686.229656][T23465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.812530][T23502] netlink: 'syz.4.4645': attribute type 11 has an invalid length. [ 686.831177][T23503] xt_l2tp: wrong L2TP version: 0 [ 687.051430][ T5638] block nbd0: Receive control failed (result -32) [ 687.142557][T23524] netlink: 'syz.1.4651': attribute type 18 has an invalid length. [ 687.180621][T23525] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 687.207754][T23525] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 687.225709][T23525] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 687.422767][T23537] netlink: 'syz.2.4656': attribute type 6 has an invalid length. [ 687.820010][T23556] __nla_validate_parse: 20 callbacks suppressed [ 687.820030][T23556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4661'. [ 687.827487][T23554] syzkaller0: entered promiscuous mode [ 687.854391][T23556] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4661'. [ 687.870069][T23554] syzkaller0: entered allmulticast mode [ 687.893391][T23556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4661'. [ 687.911937][T23554] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 687.926299][T23556] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4661'. [ 687.970218][T23563] syzkaller0: entered promiscuous mode [ 687.982558][T23563] syzkaller0: entered allmulticast mode [ 688.115935][T23571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4663'. [ 688.182168][T23571] team0: Port device team_slave_0 removed [ 688.591282][T23597] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4669'. [ 688.641004][T23599] veth0_to_team: Caught tx_queue_len zero misconfig [ 689.189931][T23641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4679'. [ 689.231554][T23638] netlink: 'syz.3.4678': attribute type 21 has an invalid length. [ 689.291168][T23638] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 689.292996][T23646] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 689.316308][T23638] bond5 (unregistering): Released all slaves [ 689.584843][T23665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4684'. [ 689.608598][T23665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.686183][T23665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.802742][T23671] veth3: entered allmulticast mode [ 689.830545][T23684] netlink: 'syz.0.4689': attribute type 1 has an invalid length. [ 689.850816][T23684] netlink: 'syz.0.4689': attribute type 4 has an invalid length. [ 689.882357][T23684] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4689'. [ 690.029808][T23692] syzkaller0: entered promiscuous mode [ 690.051353][T23692] syzkaller0: entered allmulticast mode [ 690.270629][T23709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4698'. [ 690.311400][T23709] netlink: 'syz.1.4698': attribute type 1 has an invalid length. [ 690.650588][T23717] v: renamed from veth0_vlan (while UP) [ 691.068770][T23749] netlink: 'syz.0.4707': attribute type 1 has an invalid length. [ 691.153043][T23742] bond5 (unregistering): Released all slaves [ 691.454209][T23761] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 691.662440][T23774] netlink: 'syz.1.4718': attribute type 7 has an invalid length. [ 691.666655][T23770] bridge0: port 4(vlan3) entered disabled state [ 691.677138][T23770] bridge0: port 3(dummy0) entered disabled state [ 691.680969][T23774] netlink: 'syz.1.4718': attribute type 8 has an invalid length. [ 691.683648][T23770] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.698454][T23770] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.807959][T23770] bridge0: port 4(vlan3) entered blocking state [ 691.814386][T23770] bridge0: port 4(vlan3) entered forwarding state [ 691.821188][T23770] bridge0: port 3(dummy0) entered blocking state [ 691.827664][T23770] bridge0: port 3(dummy0) entered forwarding state [ 691.834416][T23770] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.841594][T23770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.849078][T23770] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.856253][T23770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.873955][T23770] bridge0: left promiscuous mode [ 691.879202][T23770] bridge0: left allmulticast mode [ 691.945706][T23779] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 692.005537][T23779] bond5 (unregistering): Released all slaves [ 692.060172][T23770] bridge0: port 4(vlan3) entered disabled state [ 692.066697][T23770] bridge0: port 3(dummy0) entered disabled state [ 692.073206][T23770] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.080453][T23770] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.173811][T23793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.681581][T23812] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 693.047811][T23809] netlink: 'syz.4.4728': attribute type 21 has an invalid length. [ 693.435809][T23836] blkio.reset_stats is deprecated [ 693.468560][T23836] __nla_validate_parse: 9 callbacks suppressed [ 693.468576][T23836] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4738'. [ 693.482210][T23839] SET target dimension over the limit! [ 693.492481][T23836] IPv6: NLM_F_CREATE should be specified when creating new route [ 693.511905][T23836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4738'. [ 693.544252][T23841] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4741'. [ 693.557368][T23844] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4741'. [ 693.572063][T23846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4742'. [ 693.581481][T23846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4742'. [ 693.700462][T23853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4744'. [ 693.950331][T23872] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 693.968384][T23873] netlink: 284 bytes leftover after parsing attributes in process `syz.0.4750'. [ 694.050932][T23878] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4752'. [ 694.095443][T23878] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4752'. [ 694.608526][T23908] bond0: left promiscuous mode [ 694.666125][T23917] bridge0: port 3(gretap0) entered blocking state [ 694.690111][T23917] bridge0: port 3(gretap0) entered disabled state [ 694.708823][T23917] gretap0: entered allmulticast mode [ 694.739512][T23917] gretap0: entered promiscuous mode [ 694.763268][T23917] bridge0: port 3(gretap0) entered blocking state [ 694.769857][T23917] bridge0: port 3(gretap0) entered forwarding state [ 694.827817][T23928] netlink: 'syz.0.4768': attribute type 83 has an invalid length. [ 695.155701][T23949] SET target dimension over the limit! [ 695.207506][T23944] bond5: option resend_igmp: invalid value (32767) [ 695.224454][T23944] bond5: option resend_igmp: allowed values 0 - 255 [ 695.251541][T23944] bond5 (unregistering): Released all slaves [ 695.331733][T23963] block nbd1: Unsupported socket: should be TCP or UNIX. [ 695.370933][T23964] netlink: 'syz.0.4780': attribute type 1 has an invalid length. [ 696.087944][T24015] xt_hashlimit: size too large, truncated to 1048576 [ 696.446817][T24024] macvtap0: entered promiscuous mode [ 696.481498][T24024] macvtap0: entered allmulticast mode [ 696.495771][T24024] veth1_vlan: entered allmulticast mode [ 696.530358][T24030] bridge5: entered allmulticast mode [ 696.556393][T24037] netlink: 'syz.0.4802': attribute type 4 has an invalid length. [ 696.732602][T24050] netlink: 'syz.3.4805': attribute type 1 has an invalid length. [ 696.778183][T24055] netlink: 'syz.0.4806': attribute type 1 has an invalid length. [ 696.786222][T24055] netlink: 'syz.0.4806': attribute type 1 has an invalid length. [ 697.182370][T24078] netlink: 'syz.3.4814': attribute type 2 has an invalid length. [ 697.206127][T24078] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 697.213987][T24078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.386768][T24087] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 697.669424][T24101] netlink: 'syz.1.4821': attribute type 2 has an invalid length. [ 697.701479][T24104] syzkaller0: entered promiscuous mode [ 697.715371][T24104] syzkaller0: entered allmulticast mode [ 697.733765][T24104] netlink: 'syz.4.4823': attribute type 1 has an invalid length. [ 697.762817][T24104] netlink: 'syz.4.4823': attribute type 2 has an invalid length. [ 698.009193][T24128] x_tables: duplicate entry at hook 2 [ 698.224454][T24141] openvswitch: netlink: IPv4 tunnel dst address is zero [ 698.471925][T24164] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 698.509880][T24164] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 698.538711][T24164] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 698.585818][T24164] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 698.681112][T24180] __nla_validate_parse: 75 callbacks suppressed [ 698.681129][T24180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4846'. [ 698.892669][ T3340] smbdirect: ib_dev[syz2] removed [ 698.965413][T24192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4848'. [ 698.978435][T24191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4849'. [ 699.402338][T24211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4856'. [ 699.606125][T24219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 699.831366][T24235] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 699.867099][T24238] netlink: 'syz.2.4864': attribute type 83 has an invalid length. [ 700.134271][T24247] bridge0: port 2(bridge_slave_1) entered listening state [ 700.171794][T24247] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.270202][T24256] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 701.065580][T24283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4879'. [ 701.304311][T24296] netlink: 284 bytes leftover after parsing attributes in process `syz.3.4883'. [ 701.398070][T24300] syzkaller0: entered promiscuous mode [ 701.418396][T24300] syzkaller0: entered allmulticast mode [ 701.618243][T24314] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4888'. [ 702.252872][T24341] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 702.313443][T24341] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 702.442543][T24348] syzkaller0: entered promiscuous mode [ 702.475260][T24348] syzkaller0: entered allmulticast mode [ 703.009007][T24364] lo: entered allmulticast mode [ 703.019627][T24364] tunl0: entered allmulticast mode [ 703.037385][T24364] gre0: entered allmulticast mode [ 703.065332][T24364] tipc: Resetting bearer [ 703.085944][T24364] gretap0: entered allmulticast mode [ 703.097720][T24364] erspan0: entered allmulticast mode [ 703.103972][T24364] ip_vti0: entered allmulticast mode [ 703.120916][T24364] ip6_vti0: entered allmulticast mode [ 703.127861][T24364] sit0: entered allmulticast mode [ 703.133454][T24364] ip6tnl0: entered allmulticast mode [ 703.141218][T24364] ip6gre0: entered allmulticast mode [ 703.287025][T24386] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4905'. [ 703.372113][T24393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4907'. [ 703.477652][T24397] syzkaller0: entered promiscuous mode [ 703.501179][T24405] netlink: 'syz.1.4909': attribute type 3 has an invalid length. [ 703.509226][T24397] syzkaller0: entered allmulticast mode [ 703.712508][T24411] vcan1: entered promiscuous mode [ 703.740784][T24411] vcan1: entered allmulticast mode [ 703.798297][T24418] gre0: entered promiscuous mode [ 703.816605][T24418] gre0: entered allmulticast mode [ 704.250286][T24435] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4916'. [ 704.412728][T24439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4917'. [ 704.470077][T24432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4914'. [ 704.725255][T24460] Bluetooth: MGMT ver 1.23 [ 704.846887][T24464] netlink: 'syz.0.4924': attribute type 8 has an invalid length. [ 704.880067][T24464] syzkaller0: entered promiscuous mode [ 704.885709][T24464] syzkaller0: entered allmulticast mode [ 705.017783][T24471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 707.393595][T24440] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 707.632183][T24486] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4927'. [ 707.680978][T24485] tipc: Started in network mode [ 707.698425][T24485] tipc: Node identity 3e1e01842864, cluster identity 4711 [ 707.705910][T24485] tipc: Enabled bearer , priority 0 [ 707.719461][T24489] netlink: 'syz.4.4931': attribute type 83 has an invalid length. [ 707.881084][T24485] syzkaller0: entered promiscuous mode [ 707.909593][T24485] syzkaller0: entered allmulticast mode [ 707.931102][T24500] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4934'. [ 707.940268][T24485] tipc: Resetting bearer [ 707.962292][T24493] tc_dump_action: action bad kind [ 707.992014][T24484] tipc: Resetting bearer [ 708.425517][T24534] netlink: 'syz.1.4940': attribute type 10 has an invalid length. [ 708.433641][T24534] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4940'. [ 710.336871][T24484] tipc: Disabling bearer [ 710.351551][T24534] geneve1: entered allmulticast mode [ 710.365991][T24534] team0: Port device geneve1 added [ 710.386388][T10032] tipc: Node number set to 377094532 [ 710.397955][ T7133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.437362][ T7133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.478594][ T7133] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.522814][ T7133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.656862][T24556] netlink: 'syz.2.4945': attribute type 7 has an invalid length. [ 710.668661][T24556] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4945'. [ 710.757724][T24556] lo speed is unknown, defaulting to 1000 [ 710.762867][T24566] netlink: 'syz.3.4949': attribute type 1 has an invalid length. [ 710.794670][T24556] wlan1 speed is unknown, defaulting to 1000 [ 710.795710][T24566] netlink: 'syz.3.4949': attribute type 2 has an invalid length. [ 711.008548][T24581] netlink: 'syz.0.4953': attribute type 8 has an invalid length. [ 711.061399][T24584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4955'. [ 711.135461][T24584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4955'. [ 711.144068][T24586] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 711.170036][T24586] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 711.184452][T24586] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 711.209190][T24590] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4953'. [ 711.231434][T24591] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4955'. [ 711.318690][T24594] netlink: 'syz.4.4958': attribute type 21 has an invalid length. [ 711.348225][T24594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4958'. [ 711.408806][T24581] siw: device registration error -23 [ 711.582932][T24603] Cannot find add_set index 0 as target [ 711.637184][T24606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4963'. [ 711.780072][T24615] netlink: 'syz.4.4966': attribute type 17 has an invalid length. [ 711.836619][T24619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4966'. [ 711.867001][T24619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4966'. [ 712.073140][T24627] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4970'. [ 712.660957][T24663] netlink: 'syz.4.4981': attribute type 29 has an invalid length. [ 712.780489][T24663] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 712.808632][T24663] bond4 (unregistering): Released all slaves [ 713.108840][T24689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.109700][T24685] policy can only be matched on NF_INET_PRE_ROUTING [ 713.133759][T24685] unable to load match [ 713.392086][T24709] IPVS: Unknown mcast interface: vcan0 [ 713.641223][T24720] syzkaller0: entered promiscuous mode [ 713.657138][T24720] syzkaller0: entered allmulticast mode [ 713.959624][T24734] xt_TPROXY: Can be used only with -p tcp or -p udp [ 713.980318][T24736] xfrm2: entered promiscuous mode [ 713.995022][T24736] xfrm2: entered allmulticast mode [ 714.027381][T24732] netlink: 'syz.0.5003': attribute type 10 has an invalid length. [ 714.073076][T24732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.101955][T24732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.129025][T24732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.132082][T24740] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 714.144974][T24732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.182857][T24740] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 714.232005][T24740] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 714.260603][T24740] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 714.283436][T24740] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 714.324623][T24740] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 714.358612][T24740] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 714.388507][T24740] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 714.403195][T24740] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 714.434444][T24740] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 714.471553][T24758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 714.816724][T24774] netlink: 'syz.3.5015': attribute type 1 has an invalid length. [ 714.918579][T24774] bond5: entered promiscuous mode [ 714.924232][T24774] 8021q: adding VLAN 0 to HW filter on device bond5 [ 714.951636][T24783] syzkaller0: entered promiscuous mode [ 714.957335][T24783] syzkaller0: entered allmulticast mode [ 715.294856][T24803] openvswitch: netlink: Flow actions attr not present in new flow. [ 715.509534][T24815] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 716.095385][T24858] __nla_validate_parse: 14 callbacks suppressed [ 716.095403][T24858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5038'. [ 716.142336][T24860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5037'. [ 716.169453][T24858] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5038'. [ 716.233192][T24860] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 716.325837][T24872] netlink: 260 bytes leftover after parsing attributes in process `syz.1.5037'. [ 716.614801][T24893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5049'. [ 716.958196][T24897] sctp: [Deprecated]: syz.2.5051 (pid 24897) Use of int in max_burst socket option. [ 716.958196][T24897] Use struct sctp_assoc_value instead [ 717.418442][T24938] openvswitch: netlink: IPv4 tun info is not correct [ 717.476892][T24941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5061'. [ 717.514206][T24944] netlink: 'syz.0.5062': attribute type 1 has an invalid length. [ 717.635754][T24948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5064'. [ 717.689758][T24948] vlan4: entered allmulticast mode [ 718.039154][T24975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 718.770839][T25005] netlink: 'syz.0.5083': attribute type 2 has an invalid length. [ 718.812180][T25005] : entered promiscuous mode [ 718.818122][T25010] bridge0: port 3(gretap0) entered blocking state [ 718.824789][T25010] bridge0: port 3(gretap0) entered disabled state [ 718.856753][T25010] gretap0: entered allmulticast mode [ 718.897406][T25010] gretap0: entered promiscuous mode [ 719.016448][T25021] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5088'. [ 719.099085][T25026] netlink: 'syz.0.5090': attribute type 12 has an invalid length. [ 719.131177][T25023] syzkaller0: entered promiscuous mode [ 719.156492][T25023] syzkaller0: entered allmulticast mode [ 719.178033][T25023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5089'. [ 719.227953][T25026] bond4: option primary_reselect: invalid value (255) [ 719.246859][T25026] bond4 (unregistering): Released all slaves [ 719.493883][T25051] syzkaller1: entered promiscuous mode [ 719.522541][T25051] syzkaller1: entered allmulticast mode [ 719.675964][T25061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5097'. [ 720.067560][T25080] netlink: 'syz.1.5103': attribute type 1 has an invalid length. [ 720.272565][T25092] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 720.467521][T25109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.498094][T25109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.953675][T25133] bridge4: entered allmulticast mode [ 721.254478][T25148] __nla_validate_parse: 2 callbacks suppressed [ 721.254495][T25148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5125'. [ 721.285418][T25145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.342305][T25150] bond10: (slave vti0): The slave device specified does not support setting the MAC address [ 721.353175][T25150] bond10: (slave vti0): Error -95 calling set_mac_address [ 722.654862][T25167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5130'. [ 722.716672][T25170] Cannot find add_set index 0 as target [ 722.752913][T25164] ip6tnl0: Caught tx_queue_len zero misconfig [ 722.974820][T25167] netlink: 'syz.0.5130': attribute type 1 has an invalid length. [ 723.004251][T25167] netlink: 'syz.0.5130': attribute type 3 has an invalid length. [ 723.027487][T25167] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5130'. [ 723.099621][T25162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.126691][T25162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.257643][T25193] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 723.307696][T25193] bond4 (unregistering): Released all slaves [ 723.516151][T25195] h: entered promiscuous mode [ 723.682834][T25162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.704833][T25162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.923160][T25162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.955787][T25162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.064265][T25239] geneve3: entered promiscuous mode [ 724.144388][T25244] tipc: Enabling of bearer rejected, failed to enable media [ 724.329558][T25248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5149'. [ 724.343719][ T1176] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.370571][ T1176] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.396783][T25250] netlink: 'syz.2.5148': attribute type 12 has an invalid length. [ 724.407349][ T1176] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.431995][ T1176] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.462842][ T9918] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.472210][ T9918] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.498810][ T9918] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.507373][ T9918] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.524257][T25262] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 724.761508][T25265] bond6: option min_links: invalid value (18446744073709551614) [ 724.779878][T25265] bond6: option min_links: allowed values 0 - 2147483647 [ 724.789760][T25265] bond6 (unregistering): Released all slaves [ 724.926106][T25282] bridge0: port 4(vlan3) entered blocking state [ 724.932553][T25282] bridge0: port 4(vlan3) entered forwarding state [ 724.939373][T25282] bridge0: port 3(dummy0) entered blocking state [ 724.945862][T25282] bridge0: port 3(dummy0) entered forwarding state [ 724.952638][T25282] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.959858][T25282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.967320][T25282] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.974517][T25282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.126954][T25294] Cannot find set identified by id 65534 to match [ 725.141621][T25297] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5162'. [ 725.398020][T25315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5166'. [ 725.409587][T25316] netlink: 'syz.0.5167': attribute type 11 has an invalid length. [ 725.455371][T25316] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5167'. [ 725.478116][T25319] netlink: 'syz.0.5167': attribute type 11 has an invalid length. [ 725.508104][T25322] netlink: 'syz.3.5168': attribute type 2 has an invalid length. [ 725.516798][T25319] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5167'. [ 725.659958][T25324] netlink: 'syz.1.5169': attribute type 3 has an invalid length. [ 725.681208][T25324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5169'. [ 725.805559][T25332] netlink: 'syz.4.5173': attribute type 10 has an invalid length. [ 725.834394][T25332] bridge0: port 3(dummy0) entered disabled state [ 725.878414][T25332] dummy0: left allmulticast mode [ 725.888701][T25332] dummy0: left promiscuous mode [ 725.893910][T25332] bridge0: port 3(dummy0) entered disabled state [ 725.920879][T25332] team0: Port device dummy0 added [ 726.028565][T25347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5177'. [ 726.569780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 726.582370][ C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 726.836302][T25387] openvswitch: netlink: Missing valid actions attribute. [ 726.864024][T25387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.877345][T25379] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.897334][T25390] __nla_validate_parse: 1 callbacks suppressed [ 726.897349][T25390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5191'. [ 726.971415][T25394] netlink: 'syz.1.5192': attribute type 13 has an invalid length. [ 727.008595][T25395] netlink: 'syz.1.5192': attribute type 13 has an invalid length. [ 727.057081][T25394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5192'. [ 727.097935][T25395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5192'. [ 727.126401][T25394] netlink: 'syz.1.5192': attribute type 13 has an invalid length. [ 727.185704][T25394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5192'. [ 727.208214][T25395] netlink: 'syz.1.5192': attribute type 13 has an invalid length. [ 727.257122][T25395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5192'. [ 727.341002][T25410] team0 (unregistering): Port device team_slave_0 removed [ 727.384398][T25410] team0 (unregistering): Port device team_slave_1 removed [ 727.872837][T25446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5202'. [ 728.050713][T25458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5205'. [ 728.070310][T25458] netlink: 'syz.3.5205': attribute type 7 has an invalid length. [ 728.086627][T25458] netlink: 'syz.3.5205': attribute type 8 has an invalid length. [ 728.094651][T25458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5205'. [ 728.095478][T25456] vlan2: entered promiscuous mode [ 728.135958][T25459] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5205'. [ 728.370806][T25473] syzkaller1: left promiscuous mode [ 728.382815][T25473] syzkaller1: left allmulticast mode [ 728.474418][T25479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5211'. [ 728.487779][T25479] openvswitch: netlink: EtherType 0 is less than min 600 [ 728.490263][ T5290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 728.892350][T25498] 8021q: adding VLAN 0 to HW filter on device bond4 [ 729.127071][T25527] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.151280][T25526] xt_hashlimit: size too large, truncated to 1048576 [ 729.177514][T25529] x_tables: unsorted entry at hook 3 [ 729.181813][T25527] openvswitch: netlink: Duplicate key (type 6). [ 729.254474][T25533] »»»»»»: renamed from vxcan1 [ 729.316442][T25538] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 729.742597][T25558] validate_nla: 3 callbacks suppressed [ 729.742614][T25558] netlink: 'syz.0.5231': attribute type 62 has an invalid length. [ 729.876806][T25565] bond9: entered promiscuous mode [ 729.882037][T25565] bond9: entered allmulticast mode [ 729.888280][T25565] 8021q: adding VLAN 0 to HW filter on device bond9 [ 729.900753][T25572] lo: entered allmulticast mode [ 729.922989][T25572] tunl0: entered allmulticast mode [ 729.931573][T25572] gre0: entered allmulticast mode [ 729.950705][T25572] gretap0: entered allmulticast mode [ 729.973594][T25572] erspan0: entered allmulticast mode [ 729.987837][T25572] ip_vti0: entered allmulticast mode [ 730.002830][T25572] ip6_vti0: entered allmulticast mode [ 730.022578][T25572] sit0: entered allmulticast mode [ 730.046779][T25572] ip6tnl0: entered allmulticast mode [ 730.065708][T25572] ip6gre0: entered allmulticast mode [ 730.086937][T25572] syz_tun: entered allmulticast mode [ 730.156451][T25583] syzkaller0: entered promiscuous mode [ 730.194420][T25583] syzkaller0: entered allmulticast mode [ 730.240071][T25586] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 730.268312][T25586] bond1: (slave lo): Enslaving as an active interface with an up link [ 730.278415][T25586] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 730.388621][T25596] netlink: 'syz.3.5243': attribute type 2 has an invalid length. [ 730.439487][T25596] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 730.456364][T25602] xt_hashlimit: overflow, rate too high: 0 [ 731.464633][T25643] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 731.692234][T25649] IPv6: NLM_F_CREATE should be specified when creating new route [ 731.704208][T25649] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 731.711486][T25649] IPv6: NLM_F_CREATE should be set when creating new route [ 731.717494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 731.917466][T25658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.261842][T25654] __nla_validate_parse: 5 callbacks suppressed [ 733.261860][T25654] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5253'. [ 733.306183][T25654] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5253'. [ 733.414785][T25664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5256'. [ 733.473674][T25667] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5257'. [ 733.686694][T25687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5264'. [ 733.703737][T25686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5263'. [ 733.918400][T25707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5268'. [ 733.951582][T25707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5268'. [ 734.042936][T25709] Cannot find add_set index 4 as target [ 734.061846][T25711] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5270'. [ 734.294527][T25729] netlink: 'syz.0.5277': attribute type 1 has an invalid length. [ 734.371555][T25736] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5277'. [ 734.474819][T25729] 8021q: adding VLAN 0 to HW filter on device bond5 [ 735.218707][T25787] SET target dimension over the limit! [ 735.883241][T25818] tc_dump_action: action bad kind [ 735.911892][T25820] netlink: 'syz.4.5303': attribute type 3 has an invalid length. [ 736.057419][T25829] netlink: 'syz.3.5306': attribute type 1 has an invalid length. [ 736.222422][T25838] tipc: Enabling of bearer rejected, failed to enable media [ 736.420319][T25847] syzkaller0: entered promiscuous mode [ 736.435508][T25847] syzkaller0: entered allmulticast mode [ 736.929494][T25895] netlink: 'syz.1.5325': attribute type 1 has an invalid length. [ 737.007311][T25895] 8021q: adding VLAN 0 to HW filter on device bond11 [ 737.037586][T25906] bond11: (slave geneve3): making interface the new active one [ 737.047701][T25906] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 737.231216][T25905] vlan4: entered allmulticast mode [ 737.241249][T25905] bridge5: entered allmulticast mode [ 737.313707][T25917] bridge5: port 1(erspan0) entered blocking state [ 737.325272][T25917] bridge5: port 1(erspan0) entered disabled state [ 737.342148][T25917] erspan0: entered allmulticast mode [ 737.357317][T25917] erspan0: entered promiscuous mode [ 737.370246][T25917] bridge5: port 1(erspan0) entered blocking state [ 737.376851][T25917] bridge5: port 1(erspan0) entered forwarding state [ 737.699040][T25941] lo speed is unknown, defaulting to 1000 [ 737.730197][T25941] wlan1 speed is unknown, defaulting to 1000 [ 738.748646][T25984] __nla_validate_parse: 16 callbacks suppressed [ 738.748665][T25984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5344'. [ 738.778714][T26006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5350'. [ 738.788310][T26006] veth0: Caught tx_queue_len zero misconfig [ 738.839684][T26007] tipc: Enabling of bearer rejected, failed to enable media [ 738.862398][T26006] syzkaller0: entered promiscuous mode [ 738.887005][T26006] syzkaller0: entered allmulticast mode [ 739.046291][T26014] x_tables: duplicate underflow at hook 1 [ 739.342989][T26023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.398953][T26023] lo: left allmulticast mode [ 739.421442][T26023] tunl0: left allmulticast mode [ 739.446798][T26023] gre0: left allmulticast mode [ 739.476844][T26023] gretap0: left allmulticast mode [ 739.486783][T26035] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 739.494227][T26023] erspan0: left allmulticast mode [ 739.506314][T26023] ip_vti0: left allmulticast mode [ 739.512452][T26023] ip6_vti0: left allmulticast mode [ 739.523417][T26023] sit0: left allmulticast mode [ 739.537048][T26023] ip6tnl0: left allmulticast mode [ 739.554380][T26023] ip6gre0: left allmulticast mode [ 739.579217][T26023] syz_tun: left allmulticast mode [ 739.750032][T26023] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 739.800966][T26041] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 739.918304][T26053] netlink: 'syz.4.5363': attribute type 1 has an invalid length. [ 739.939658][T26051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5364'. [ 739.950090][T26051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5364'. [ 739.974350][T26053] 8021q: adding VLAN 0 to HW filter on device bond5 [ 740.044181][T26059] netlink: 'syz.2.5366': attribute type 1 has an invalid length. [ 740.061375][T26061] veth1_macvtap: left promiscuous mode [ 740.149519][T26059] 8021q: adding VLAN 0 to HW filter on device bond10 [ 740.186043][T26065] bond10: (slave gretap1): making interface the new active one [ 740.198271][T26065] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 740.548598][T26090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5374'. [ 740.581642][ T30] audit: type=1804 audit(1784049478.008:18): pid=26096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5377" name="/newroot/506/cgroup.controllers" dev="tmpfs" ino=2585 res=1 errno=0 [ 740.610747][ T30] audit: type=1800 audit(1784049478.008:19): pid=26096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5377" name="cgroup.controllers" dev="tmpfs" ino=2585 res=0 errno=0 [ 740.751037][T26106] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5381'. [ 740.768737][T26107] netlink: 'syz.0.5380': attribute type 1 has an invalid length. [ 740.891953][T26116] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5380'. [ 740.905583][T26113] syzkaller0: entered promiscuous mode [ 740.929327][T26113] syzkaller0: entered allmulticast mode [ 741.109982][T26122] openvswitch: netlink: Key type 256 is out of range max 32 [ 741.122641][T26122] syzkaller0: entered promiscuous mode [ 741.130717][T26122] syzkaller0: entered allmulticast mode [ 741.151135][T26126] bridge0: port 3(syz_tun) entered blocking state [ 741.168758][T26126] bridge0: port 3(syz_tun) entered disabled state [ 741.187115][T26126] syz_tun: entered allmulticast mode [ 741.199199][T26126] syz_tun: left allmulticast mode [ 741.216058][T26130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5389'. [ 741.225172][T26130] netlink: 'syz.2.5389': attribute type 10 has an invalid length. [ 741.234210][T26130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5389'. [ 741.326763][T26136] geneve3: entered promiscuous mode [ 741.339204][T26136] geneve3: entered allmulticast mode [ 741.350668][T26138] netlink: 'syz.3.5391': attribute type 8 has an invalid length. [ 741.370204][T26138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5391'. [ 741.509454][T26144] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 741.656162][T26162] GUP no longer grows the stack in syz.3.5399 (26162): 200000003000-20000000a000 (200000001000) [ 741.667854][T26162] CPU: 0 UID: 0 PID: 26162 Comm: syz.3.5399 Not tainted syzkaller #0 PREEMPT(full) [ 741.667879][T26162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 741.667891][T26162] Call Trace: [ 741.667898][T26162] [ 741.667907][T26162] dump_stack_lvl+0xe8/0x150 [ 741.667944][T26162] __get_user_pages+0x238c/0x2720 [ 741.667980][T26162] ? __gup_longterm_locked+0xc3b/0x15c0 [ 741.668026][T26162] __gup_longterm_locked+0xd52/0x15c0 [ 741.668050][T26162] ? lock_acquire+0x106/0x350 [ 741.668137][T26162] gup_fast_fallback+0x1d8c/0x20e0 [ 741.668157][T26162] ? lockdep_hardirqs_on+0x7a/0x110 [ 741.668217][T26162] ? __pfx_gup_fast_fallback+0x10/0x10 [ 741.668241][T26162] ? is_valid_gup_args+0x11f/0x200 [ 741.668263][T26162] ? get_user_pages_fast+0x4d/0xb0 [ 741.668285][T26162] __iov_iter_get_pages_alloc+0x378/0xa40 [ 741.668377][T26162] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 741.668410][T26162] iov_iter_get_pages2+0x5e/0xa0 [ 741.668441][T26162] __se_sys_vmsplice+0x7b5/0x1660 [ 741.668489][T26162] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 741.668521][T26162] ? __pfx_futex_wake+0x10/0x10 [ 741.668634][T26162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.668658][T26162] do_syscall_64+0x174/0x580 [ 741.668683][T26162] ? trace_irq_disable+0x3b/0x140 [ 741.668708][T26162] ? clear_bhb_loop+0x40/0x90 [ 741.668733][T26162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.668753][T26162] RIP: 0033:0x7f911c79de59 [ 741.668771][T26162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.668788][T26162] RSP: 002b:00007f911d5ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 741.668809][T26162] RAX: ffffffffffffffda RBX: 00007f911ca25fa0 RCX: 00007f911c79de59 [ 741.668824][T26162] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 741.668836][T26162] RBP: 00007f911c833e6f R08: 0000000000000000 R09: 0000000000000000 [ 741.668848][T26162] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 741.668859][T26162] R13: 00007f911ca26038 R14: 00007f911ca25fa0 R15: 00007ffe9357eff8 [ 741.668893][T26162] [ 741.900073][T26164] netlink: 'syz.4.5400': attribute type 4 has an invalid length. [ 742.559809][T26186] syzkaller0: entered promiscuous mode [ 742.565383][T26186] syzkaller0: entered allmulticast mode [ 744.493832][T26189] openvswitch: netlink: IP tunnel dst address not specified [ 744.504137][T26189] netlink: 'syz.2.5405': attribute type 1 has an invalid length. [ 744.534557][T26189] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 744.549527][T26152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 744.602848][T26191] __nla_validate_parse: 2 callbacks suppressed [ 744.602863][T26191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5405'. [ 744.674345][T26189] veth5: entered promiscuous mode [ 744.747331][T26198] xt_hashlimit: size too large, truncated to 1048576 [ 744.759743][T26191] 8021q: adding VLAN 0 to HW filter on device bond11 [ 744.762717][ T1176] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 744.794583][T26196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5407'. [ 744.830115][T26196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5407'. [ 744.838824][T26204] pim6reg: entered allmulticast mode [ 744.845497][T26196] netlink: 'syz.1.5407': attribute type 12 has an invalid length. [ 744.886468][T26196] netlink: 'syz.1.5407': attribute type 11 has an invalid length. [ 744.952007][T26211] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5411'. [ 744.963609][ T57] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 744.993973][T26212] xt_l2tp: v2 doesn't support IP mode [ 745.451745][T26245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5421'. [ 745.485136][T26245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5421'. [ 745.496040][T26245] netlink: 'syz.1.5421': attribute type 15 has an invalid length. [ 745.540266][T26246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5421'. [ 745.545789][T26254] ip6tnl2: entered allmulticast mode [ 745.571710][T26246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5421'. [ 745.586156][T26245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5421'. [ 745.603012][T26245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5421'. [ 745.692333][ T57] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 745.717764][ T57] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 745.743387][ T57] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 745.777607][ T57] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 745.821008][ T57] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 745.862203][ T57] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 745.883574][ T57] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 745.931604][ T57] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 746.405200][T26286] gre0: entered promiscuous mode [ 746.423606][T26286] gre0: entered allmulticast mode [ 746.651088][T26305] openvswitch: netlink: EtherType 0 is less than min 600 [ 747.153023][T26323] bond6: entered promiscuous mode [ 747.160034][T26323] bond6: entered allmulticast mode [ 747.167524][T26323] 8021q: adding VLAN 0 to HW filter on device bond6 [ 747.630790][T26357] syz_tun: entered allmulticast mode [ 747.662529][T26360] netlink: 'syz.0.5449': attribute type 10 has an invalid length. [ 747.860546][T26373] IPVS: length: 134 != 8 [ 747.888142][T26356] syz_tun: left allmulticast mode [ 748.297451][T26400] netlink: 'syz.0.5457': attribute type 21 has an invalid length. [ 748.335109][T26396] netlink: 'syz.0.5457': attribute type 21 has an invalid length. [ 748.461325][ T5290] v: left promiscuous mode [ 748.513858][T10028] v: entered promiscuous mode [ 748.911414][T26416] netlink: 'syz.0.5464': attribute type 39 has an invalid length. [ 748.964853][T26416] hsr_slave_0: left promiscuous mode [ 748.993441][T26416] hsr_slave_1: left promiscuous mode [ 749.710331][T26460] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 749.739366][T26460] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 749.772902][T26460] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 749.808902][T26460] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 749.973432][T26460] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 749.990650][T26460] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 750.062970][T26460] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 750.088933][T26460] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 750.141934][T26474] __nla_validate_parse: 16 callbacks suppressed [ 750.141950][T26474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5477'. [ 750.519932][T26495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5481'. [ 750.611839][T26495] team_slave_0 (unregistering): left allmulticast mode [ 750.624231][T26495] team0: Port device team_slave_0 removed [ 750.722248][T26514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5488'. [ 751.219319][T26542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5494'. [ 751.273135][T26547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5494'. [ 751.333873][T26550] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5498'. [ 751.372734][T26548] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5493'. [ 751.616456][T26574] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5503'. [ 752.041430][T26600] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 752.133388][T26602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5510'. [ 752.156647][T26602] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 752.175507][T26607] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 752.197687][T26602] netlink: 596 bytes leftover after parsing attributes in process `syz.4.5510'. [ 752.421619][T26617] syzkaller1: entered promiscuous mode [ 752.447917][T26617] syzkaller1: entered allmulticast mode [ 753.144593][T26672] netlink: 'syz.2.5527': attribute type 10 has an invalid length. [ 753.176343][T26672] netlink: 'syz.2.5527': attribute type 10 has an invalid length. [ 753.191260][T26674] netlink: zone id is out of range [ 753.197817][T26674] netlink: zone id is out of range [ 753.212919][T26674] netlink: zone id is out of range [ 753.404014][T26686] hsr_slave_1 (unregistering): left promiscuous mode [ 753.852968][T26692] sch_tbf: burst 0 is lower than device lo mtu (65499) ! [ 754.004839][T26700] team0 (unregistering): Port device team_slave_1 removed [ 754.039794][T26712] ksmbd: Unknown IPC event: 1, ignore. [ 754.043964][T26700] team0 (unregistering): Port device dummy0 removed [ 754.070116][T26712] netlink: 'syz.1.5539': attribute type 1 has an invalid length. [ 754.134211][T26715] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 754.162237][T26712] bond13: entered promiscuous mode [ 754.169204][T26717] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 754.170756][T26712] 8021q: adding VLAN 0 to HW filter on device bond13 [ 754.538855][T26736] netlink: 'syz.0.5546': attribute type 3 has an invalid length. [ 755.073778][T26767] netlink: 'syz.3.5554': attribute type 1 has an invalid length. [ 755.110615][T26767] netlink: 'syz.3.5554': attribute type 2 has an invalid length. [ 755.213906][T26777] __nla_validate_parse: 12 callbacks suppressed [ 755.213923][T26777] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5558'. [ 755.423206][T26784] syzkaller0: entered promiscuous mode [ 755.443430][T26784] syzkaller0: entered allmulticast mode [ 755.540371][T26791] veth0_to_bridge: entered promiscuous mode [ 755.564390][T26790] veth0_to_bridge: left promiscuous mode [ 755.579877][T26796] netlink: 'syz.1.5562': attribute type 1 has an invalid length. [ 755.927877][T26813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 756.001172][T26819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5568'. [ 756.290067][T26830] macvlan2: entered promiscuous mode [ 756.317907][T26830] macvlan2: entered allmulticast mode [ 756.428743][T26851] netlink: 'syz.4.5576': attribute type 32 has an invalid length. [ 756.464439][T26851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5576'. [ 756.522063][T26858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5578'. [ 756.576939][T26861] netlink: 'syz.1.5579': attribute type 1 has an invalid length. [ 756.610576][T26851] bond7: option coupled_control: invalid value (156) [ 756.626555][T26861] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5579'. [ 756.648789][T26866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5580'. [ 756.666940][T26851] bond7 (unregistering): Released all slaves [ 756.681585][T26861] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 757.088354][T26884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 757.158489][T26884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5587'. [ 757.240808][T26884] bond14: Invalid ad_actor_system MAC address. [ 757.248104][T26884] bond14: option ad_actor_system: invalid value (1) [ 757.259560][T26884] bond14 (unregistering): Released all slaves [ 757.284867][T26888] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.441977][T26891] syzkaller0: entered promiscuous mode [ 757.460969][T26891] syzkaller0: entered allmulticast mode [ 757.518174][T26903] syzkaller0: entered promiscuous mode [ 757.530315][T26903] syzkaller0: entered allmulticast mode [ 757.546472][T26913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5595'. [ 759.601495][T26922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5597'. [ 759.649403][T26922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5597'. [ 759.749114][T26930] team0 (unregistering): Port device team_slave_0 removed [ 759.762493][T26930] team0 (unregistering): Port device team_slave_1 removed [ 759.786100][T26928] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 760.158520][T26950] netlink: 'syz.3.5607': attribute type 29 has an invalid length. [ 760.234035][T26957] __nla_validate_parse: 6 callbacks suppressed [ 760.234053][T26957] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5611'. [ 760.305525][T26962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5612'. [ 760.367665][T26964] netlink: 51 bytes leftover after parsing attributes in process `syz.0.5613'. [ 760.371206][T26953] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 760.413535][T26953] bond7: (slave vti0): Error -95 calling set_mac_address [ 760.757286][T26975] netlink: 'syz.3.5617': attribute type 1 has an invalid length. [ 760.768143][T26979] netlink: 236 bytes leftover after parsing attributes in process `syz.2.5616'. [ 760.809858][T26987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5617'. [ 760.838269][T26975] 8021q: adding VLAN 0 to HW filter on device bond6 [ 761.312994][T27018] netlink: 'syz.4.5627': attribute type 1 has an invalid length. [ 761.592450][T27034] lo: MTU too low for tipc bearer [ 761.604839][T27034] tipc: Enabling of bearer rejected, failed to enable media [ 761.727362][T27037] syzkaller0: entered promiscuous mode [ 761.745050][T27037] syzkaller0: entered allmulticast mode [ 761.966598][T27054] netlink: 'syz.4.5641': attribute type 3 has an invalid length. [ 761.985360][T27054] netlink: 'syz.4.5641': attribute type 3 has an invalid length. [ 762.007983][T27054] netlink: 'syz.4.5641': attribute type 3 has an invalid length. [ 762.361394][T27076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5646'. [ 762.373242][T27077] netlink: 'syz.2.5645': attribute type 14 has an invalid length. [ 762.427311][T27076] syzkaller1: entered promiscuous mode [ 762.445565][T27076] syzkaller1: entered allmulticast mode [ 762.942106][T27100] FAULT_INJECTION: forcing a failure. [ 762.942106][T27100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 762.979279][T27100] CPU: 1 UID: 0 PID: 27100 Comm: syz.0.5650 Not tainted syzkaller #0 PREEMPT(full) [ 762.979305][T27100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 762.979316][T27100] Call Trace: [ 762.979324][T27100] [ 762.979332][T27100] dump_stack_lvl+0xe8/0x150 [ 762.979364][T27100] should_fail_ex+0x40c/0x560 [ 762.979391][T27100] _copy_from_iter+0x1d3/0x1660 [ 762.979414][T27100] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 762.979439][T27100] ? rcu_is_watching+0x15/0xb0 [ 762.979503][T27100] ? trace_kmem_cache_alloc+0x29/0xe0 [ 762.979526][T27100] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 762.979549][T27100] ? __pfx__copy_from_iter+0x10/0x10 [ 762.979572][T27100] ? __alloc_skb+0x276/0x7a0 [ 762.979659][T27100] ? __alloc_skb+0x276/0x7a0 [ 762.979689][T27100] ? netlink_sendmsg+0x650/0xb40 [ 762.979759][T27100] ? skb_put+0x112/0x210 [ 762.979787][T27100] netlink_sendmsg+0x6c0/0xb40 [ 762.979815][T27100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.979840][T27100] ? aa_sock_msg_perm+0xf1/0x1b0 [ 762.979866][T27100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.979884][T27100] sock_sendmsg_nosec+0x13a/0x180 [ 762.979909][T27100] ____sys_sendmsg+0x54e/0x850 [ 762.979942][T27100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 762.979979][T27100] ? import_iovec+0x73/0xa0 [ 762.980008][T27100] ___sys_sendmsg+0x2a5/0x360 [ 762.980033][T27100] ? __lock_acquire+0x683/0x2cf0 [ 762.980060][T27100] ? __pfx____sys_sendmsg+0x10/0x10 [ 762.980121][T27100] ? __fget_files+0x2a/0x420 [ 762.980145][T27100] ? __fget_files+0x3a2/0x420 [ 762.980179][T27100] __x64_sys_sendmsg+0x1b1/0x290 [ 762.980209][T27100] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 762.980262][T27100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.980283][T27100] do_syscall_64+0x174/0x580 [ 762.980309][T27100] ? trace_irq_disable+0x3b/0x140 [ 762.980332][T27100] ? clear_bhb_loop+0x40/0x90 [ 762.980355][T27100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.980373][T27100] RIP: 0033:0x7fbfded9de59 [ 762.980391][T27100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.980407][T27100] RSP: 002b:00007fbfdfced028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.980426][T27100] RAX: ffffffffffffffda RBX: 00007fbfdf025fa0 RCX: 00007fbfded9de59 [ 762.980440][T27100] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 762.980451][T27100] RBP: 00007fbfdfced090 R08: 0000000000000000 R09: 0000000000000000 [ 762.980462][T27100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.980478][T27100] R13: 00007fbfdf026038 R14: 00007fbfdf025fa0 R15: 00007ffc442ae528 [ 762.980510][T27100] [ 763.327986][T27081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5647'. [ 763.417872][T27102] syzkaller0: entered promiscuous mode [ 763.423701][T27102] syzkaller0: entered allmulticast mode [ 763.632611][T27127] IPv6: addrconf: prefix option has invalid lifetime [ 766.050738][T27163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5661'. [ 766.101023][T27153] x_tables: duplicate underflow at hook 2 [ 766.167067][T27171] netlink: 'syz.1.5663': attribute type 1 has an invalid length. [ 766.256316][T27178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5664'. [ 766.281602][T27171] 8021q: adding VLAN 0 to HW filter on device bond14 [ 766.289275][T27178] openvswitch: netlink: EtherType 0 is less than min 600 [ 766.472408][T27188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 766.791822][T27207] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5671'. [ 766.893093][T27215] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 767.122972][T27225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5679'. [ 767.252503][T27230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5681'. [ 767.285591][T27230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5681'. [ 767.287062][T27233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5681'. [ 767.332749][T27233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5681'. [ 767.345105][T27235] netlink: 'syz.1.5682': attribute type 1 has an invalid length. [ 767.369777][T27238] netlink: 'syz.3.5684': attribute type 15 has an invalid length. [ 767.375774][T27240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5683'. [ 767.409082][T27240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5683'. [ 767.415535][T27235] 8021q: adding VLAN 0 to HW filter on device bond15 [ 767.430593][T27241] netlink: 'syz.1.5682': attribute type 10 has an invalid length. [ 767.611583][T27251] xt_hashlimit: size too large, truncated to 1048576 [ 767.659703][T27257] netlink: 'syz.4.5690': attribute type 1 has an invalid length. [ 767.669538][T27260] Unsupported ieee802154 address type: 0 [ 767.788947][T27257] 8021q: adding VLAN 0 to HW filter on device bond8 [ 767.820013][T27262] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 767.840119][T27262] bond8: entered allmulticast mode [ 768.193985][T27284] openvswitch: netlink: Actions may not be safe on all matching packets [ 768.520038][T27309] sock: sock_set_timeout: `syz.0.5701' (pid 27309) tries to set negative timeout [ 768.530791][T27309] IPv6: NLM_F_CREATE should be specified when creating new route [ 832.835628][T27324] bridge8: entered promiscuous mode [ 832.842090][T27324] bridge8: entered allmulticast mode [ 833.101636][T27348] __nla_validate_parse: 4 callbacks suppressed [ 833.101653][T27348] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5709'. [ 833.288877][T27362] sit0: Caught tx_queue_len zero misconfig [ 833.402886][T27366] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 833.593766][T27381] nft_compat: unsupported protocol 0 [ 833.840897][T27396] erspan0: entered promiscuous mode [ 833.861028][T27396] erspan0: left allmulticast mode [ 833.878268][T27396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5723'. [ 833.907722][T27391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5723'. [ 834.171954][T27406] syzkaller0: entered allmulticast mode [ 834.242349][T27406] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 834.506709][T27420] netlink: 'syz.2.5729': attribute type 1 has an invalid length. [ 834.528369][T27420] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5729'. [ 834.556283][T27423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5730'. [ 834.601771][T27432] netlink: 'syz.0.5732': attribute type 1 has an invalid length. [ 835.694758][T27485] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5744'. [ 835.822720][T27487] syzkaller0: entered promiscuous mode [ 835.828458][T27487] syzkaller0: entered allmulticast mode [ 837.038380][T27525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5755'. [ 838.858281][T27529] netdevsim netdevsim2 : renamed from netdevsim0 [ 839.034397][T27534] openvswitch: netlink: IP tunnel TTL not specified. [ 839.062256][T27539] netlink: 'syz.3.5760': attribute type 1 has an invalid length. [ 839.062902][T27534] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5758'. [ 839.164306][T27539] 8021q: adding VLAN 0 to HW filter on device bond7 [ 839.191311][T27545] bond7: (slave geneve2): making interface the new active one [ 839.204004][T27545] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 839.423667][T27560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5766'. [ 839.464565][T27560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5766'. [ 839.489300][T27560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5766'. [ 839.555763][T27567] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 839.806930][T27584] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5774'. [ 839.858393][T27594] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 839.870957][T27592] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.5777'. [ 839.927189][T27598] netlink: 'syz.0.5779': attribute type 2 has an invalid length. [ 840.037881][T27604] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5779'. [ 840.064151][T27607] netlink: 'syz.2.5780': attribute type 64 has an invalid length. [ 840.089522][T27611] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5782'. [ 840.094437][T27604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5779'. [ 840.160311][T27598] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5779'. [ 840.216491][T27618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 840.241631][T27618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.285769][T27618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 840.310885][T27618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.365969][T27622] syzkaller0: entered allmulticast mode [ 840.751525][T27641] netlink: 'syz.4.5792': attribute type 5 has an invalid length. [ 840.754072][T27634] netlink: 'syz.0.5788': attribute type 3 has an invalid length. [ 840.780831][T27640] gtp3: entered allmulticast mode [ 840.802781][T27640] team0: Device gtp3 is of different type [ 840.856234][T27634] syzkaller0: entered promiscuous mode [ 840.873348][T27634] syzkaller0: entered allmulticast mode [ 841.309687][T27670] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 841.333524][T27670] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 841.394556][T27687] netlink: 'syz.2.5805': attribute type 10 has an invalid length. [ 841.398665][T27684] IPVS: Scheduler module ip_vs_sip not found [ 841.474468][T27694] Bluetooth: MGMT ver 1.23 [ 841.617116][T27697] syzkaller0: entered promiscuous mode [ 841.622772][T27697] syzkaller0: entered allmulticast mode [ 841.761807][T27710] netlink: 'syz.2.5809': attribute type 5 has an invalid length. [ 844.013678][T27732] netlink: 'syz.1.5815': attribute type 4 has an invalid length. [ 844.039417][T27737] ipvlan2: entered promiscuous mode [ 844.311560][T27757] __nla_validate_parse: 16 callbacks suppressed [ 844.311579][T27757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5821'. [ 844.341413][T27758] netlink: 'syz.2.5822': attribute type 39 has an invalid length. [ 844.462714][T27759] nbd: must specify a size in bytes for the device [ 844.473672][T27763] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 844.600873][T27765] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5824'. [ 844.601446][T27774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5826'. [ 844.639698][T27774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5826'. [ 844.657310][T27774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5826'. [ 844.833364][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5830'. [ 844.989377][T27796] can: request_module (can-proto-4) failed. [ 845.124597][T27812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5830'. [ 845.283661][T27822] syzkaller0: entered promiscuous mode [ 845.292685][T27822] syzkaller0: entered allmulticast mode [ 845.506301][T27838] netlink: 'syz.1.5841': attribute type 12 has an invalid length. [ 845.523793][T27838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5841'. [ 845.579147][T27841] Unsupported ieee802154 address type: 0 [ 845.767707][T27848] syzkaller1: entered promiscuous mode [ 845.793526][T27848] syzkaller1: entered allmulticast mode [ 845.822780][T27848] netlink: 'syz.1.5845': attribute type 10 has an invalid length. [ 845.864542][T27848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5845'. [ 845.992543][T27850] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 845.999848][T27861] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5848'. [ 846.022998][T27861] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 846.037608][T27850] bond8 (unregistering): Released all slaves [ 846.120066][T27848] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 846.383527][T27854] rds_bind: 55 callbacks suppressed [ 846.383544][T27854] RDS: rds_bind could not find a transport for fe80::23, load rds_tcp or rds_rdma? [ 846.446611][T27854] xt_ipcomp: unknown flags 1D [ 846.508958][T27878] netlink: 'syz.3.5854': attribute type 39 has an invalid length. [ 846.795515][T27891] pim6reg527: entered allmulticast mode [ 846.813976][T27888] netlink: 'syz.1.5856': attribute type 1 has an invalid length. [ 846.848150][T27888] netlink: 'syz.1.5856': attribute type 1 has an invalid length. [ 846.877714][T27888] netlink: 'syz.1.5856': attribute type 1 has an invalid length. [ 846.897481][T27888] netlink: 'syz.1.5856': attribute type 1 has an invalid length. [ 846.921452][T27888] netlink: 'syz.1.5856': attribute type 1 has an invalid length. [ 846.984132][T27902] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 847.008901][T27902] bond9 (unregistering): Released all slaves [ 847.097172][T27916] netlink: 'syz.3.5864': attribute type 4 has an invalid length. [ 847.121902][T27916] netlink: 'syz.3.5864': attribute type 4 has an invalid length. [ 847.372748][T27923] syzkaller0: entered promiscuous mode [ 847.380678][T27923] syzkaller0: entered allmulticast mode [ 847.506407][ T5647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 847.518462][ T5647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 847.527985][ T5647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 847.540306][ T5647] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 847.548574][ T5647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 847.571527][T27931] syzkaller0: entered promiscuous mode [ 847.595775][T27931] syzkaller0: entered allmulticast mode [ 847.651632][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 847.673681][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 847.685149][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 847.694639][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 847.723295][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 847.948767][T27947] bond9: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 847.979053][T27947] bond9 (unregistering): Released all slaves [ 848.034081][T27951] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 848.047988][T27951] bond9 (unregistering): Released all slaves [ 848.101450][T16743] syz_tun (unregistering): left allmulticast mode [ 848.143215][T16743] team0: Port device syz_tun removed [ 848.514543][ T9918] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 848.526469][ T9918] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 848.537327][ T9918] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.583688][T27987] team_slave_1: Caught tx_queue_len zero misconfig [ 848.657535][ C0] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 848.697415][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 848.710438][ C0] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 848.739083][T27988] veth1_macvtap: entered promiscuous mode [ 848.813793][T27988] 8021q: adding VLAN 0 to HW filter on device bond7 [ 848.823141][T27988] 8021q: adding VLAN 0 to HW filter on device bond8 [ 848.842589][ T9919] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 848.851107][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.858769][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.878147][T27993] tipc: Enabled bearer , priority 0 [ 848.887068][T27996] syzkaller0: entered promiscuous mode [ 848.892738][T27996] syzkaller0: entered allmulticast mode [ 848.916305][ T148] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.925828][ T148] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.013414][ T9918] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 849.027036][ C0] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 849.040586][ T9918] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 849.052161][ T9918] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.086554][ T148] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.108100][T27987] tipc: Resetting bearer [ 849.179875][T27982] tipc: Resetting bearer [ 849.221986][T27982] tipc: Disabling bearer [ 849.235852][T27934] lo speed is unknown, defaulting to 1000 [ 849.308698][ T9918] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 849.334248][ T9918] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 849.346817][ T9918] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.399662][T27934] wlan1 speed is unknown, defaulting to 1000 [ 849.482791][ T9918] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 849.494557][ T9918] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 849.507409][ T9918] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.633959][T28026] syzkaller0: entered promiscuous mode [ 849.647654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 849.652532][T28026] syzkaller0: entered allmulticast mode [ 849.660466][ C0] bridge0: received packet on vlan3 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 849.796046][ T5638] Bluetooth: hci4: command tx timeout [ 850.093590][ T9918] pim6reg527: left allmulticast mode [ 850.599787][ T9918] tipc: Disabling bearer [ 850.618433][T28075] __nla_validate_parse: 19 callbacks suppressed [ 850.618450][T28075] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5901'. [ 850.684792][ T9918] bond11 (unregistering): (slave geneve3): Releasing active interface [ 850.705071][ T9918] geneve1 (unregistering): left allmulticast mode [ 850.712173][ T9918] team0: Port device geneve1 removed [ 850.773753][ T9918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.784611][ T9918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 850.793904][ T9918] bond0 (unregistering): Released all slaves [ 850.809704][ T9918] bond1 (unregistering): (slave lo): Releasing backup interface [ 850.817909][ T9918] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 850.830158][ T9918] bond1 (unregistering): Released all slaves [ 850.845739][ T9918] bond2 (unregistering): Released all slaves [ 850.859845][ T9918] bond3 (unregistering): Released all slaves [ 850.874019][ T9918] bond4 (unregistering): Released all slaves [ 850.896146][ T9918] bond5 (unregistering): Released all slaves [ 850.910479][ T9918] bond6 (unregistering): Released all slaves [ 850.925335][ T9918] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 850.935159][ T9918] bond7 (unregistering): (slave bond8): Releasing active interface [ 850.943616][ T9918] bond7 (unregistering): Released all slaves [ 850.965207][ T9918] bond8 (unregistering): Released all slaves [ 850.978836][ T9918] bond9 (unregistering): Released all slaves [ 850.992287][ T9918] bond10 (unregistering): Released all slaves [ 851.012343][ T9918] bond11 (unregistering): Released all slaves [ 851.026497][ T9918] bond12 (unregistering): Released all slaves [ 851.041029][ T9918] bond13 (unregistering): Released all slaves [ 851.061207][ T9918] bond14 (unregistering): Released all slaves [ 851.074778][ T9918] bond15 (unregistering): Released all slaves [ 851.390257][ T9918] tipc: Left network mode [ 851.642325][T28100] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5907'. [ 851.694880][T28108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5907'. [ 851.701105][T28106] ip6_vti0: entered promiscuous mode [ 851.746831][T28106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5908'. [ 851.885069][ T5638] Bluetooth: hci4: command tx timeout [ 852.012634][ T9918] IPVS: stopping backup sync thread 25538 ... [ 852.148931][T28118] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5912'. [ 852.181356][T28130] netlink: 'syz.2.5915': attribute type 8 has an invalid length. [ 852.352081][T28123] syzkaller0: entered promiscuous mode [ 852.380247][T28123] syzkaller0: entered allmulticast mode [ 852.488520][T28148] netlink: 6208 bytes leftover after parsing attributes in process `syz.3.5918'. [ 852.697877][T27934] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.713984][T27934] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.724399][T27934] bridge_slave_0: entered allmulticast mode [ 852.751806][T27934] bridge_slave_0: entered promiscuous mode [ 852.884622][T27934] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.915745][T27934] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.947065][T27934] bridge_slave_1: entered allmulticast mode [ 852.965947][T28172] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5923'. [ 852.979818][T27934] bridge_slave_1: entered promiscuous mode [ 852.993361][T28172] openvswitch: netlink: Message has 512 unknown bytes. [ 853.017418][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 853.141270][T27934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.155165][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 853.169434][T27934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.206988][T28192] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5928'. [ 853.224548][T28193] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5928'. [ 853.287322][T28172] syzkaller0: entered promiscuous mode [ 853.309377][T28172] syzkaller0: entered allmulticast mode [ 853.359073][T27934] team0: Port device team_slave_0 added [ 853.394089][T27934] team0: Port device team_slave_1 added [ 853.849646][T27934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.878451][T27934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.940512][T28223] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5936'. [ 853.949740][T27934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.961119][ T5638] Bluetooth: hci4: command tx timeout [ 853.974826][T27934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.987578][T27934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.045514][T27934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.103794][T28231] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 854.103794][T28231] Please contact the netfilter-devel mailing list or update your nftables rules. [ 854.158073][ T9918] hsr_slave_0: left promiscuous mode [ 854.175528][ T9918] hsr_slave_1: left promiscuous mode [ 854.249874][T28238] netlink: 'syz.3.5939': attribute type 3 has an invalid length. [ 854.676506][ T9918] team_slave_1 (unregistering): left allmulticast mode [ 854.684253][ T9918] team0 (unregistering): Port device team_slave_1 removed [ 854.794765][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 854.988868][T27934] hsr_slave_0: entered promiscuous mode [ 854.996276][T27934] hsr_slave_1: entered promiscuous mode [ 855.347539][ T9918] IPVS: stop unused estimator thread 0... [ 855.383574][T28278] ipvlan0: Caught tx_queue_len zero misconfig [ 855.597752][ T30] audit: type=1804 audit(1784049593.028:20): pid=28288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5953" name="/newroot/582/cgroup.controllers" dev="tmpfs" ino=2987 res=1 errno=0 [ 855.661935][ T30] audit: type=1800 audit(1784049593.028:21): pid=28288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5953" name="cgroup.controllers" dev="tmpfs" ino=2987 res=0 errno=0 [ 855.888938][T28308] netlink: 'syz.4.5958': attribute type 7 has an invalid length. [ 855.910213][T28308] __nla_validate_parse: 2 callbacks suppressed [ 855.910228][T28308] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5958'. [ 856.035701][ T5638] Bluetooth: hci4: command tx timeout [ 856.511169][T27934] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 856.541967][T27934] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 856.563125][T27934] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 856.581523][T27934] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 856.633466][T27934] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 856.699059][T27934] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 856.725981][T27934] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 856.763920][T27934] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 856.802799][T28334] sctp: [Deprecated]: syz.3.5962 (pid 28334) Use of int in max_burst socket option. [ 856.802799][T28334] Use struct sctp_assoc_value instead [ 856.824855][T28323] syzkaller1: entered promiscuous mode [ 856.852532][T28323] syzkaller1: entered allmulticast mode [ 857.132863][T28353] xt_CT: You must specify a L4 protocol and not use inversions on it [ 857.253567][T27934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.356199][T27934] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.373082][T28362] netlink: 816 bytes leftover after parsing attributes in process `syz.4.5968'. [ 857.401301][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.408477][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.450089][T28359] syzkaller1: entered promiscuous mode [ 857.456003][T28359] syzkaller1: entered allmulticast mode [ 857.467451][ T9918] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.474665][ T9918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.493621][T28359] xt_hashlimit: size too large, truncated to 1048576 [ 857.789641][T28384] nft_compat: unsupported protocol 0 [ 858.241337][T28410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 858.308021][T28410] netlink: 'syz.0.5979': attribute type 4 has an invalid length. [ 858.326116][T28416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5978'. [ 858.456559][T28422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5980'. [ 858.659229][T27934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.702582][T28434] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5983'. [ 858.800052][T27934] veth0_vlan: entered promiscuous mode [ 858.832563][T27934] veth1_vlan: entered promiscuous mode [ 858.886170][T27934] veth0_macvtap: entered promiscuous mode [ 858.912728][T27934] veth1_macvtap: entered promiscuous mode [ 858.975961][T27934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.030197][T27934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.078859][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.101965][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.122923][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.151917][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.179871][T28408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 861.284025][T28534] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 861.298178][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.312757][T28535] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 861.340292][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.418153][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.432688][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.635099][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 861.937963][T28572] xt_hashlimit: size too large, truncated to 1048576 [ 861.998219][T28574] Cannot find del_set index 3 as target [ 862.010348][T28575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5997'. [ 862.014442][T28578] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 862.047125][T28575] bridge: RTM_NEWNEIGH with invalid ether address [ 862.133238][T28575] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5997'. [ 862.160865][T28575] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5997'. [ 862.191659][T28581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5997'. [ 862.224089][T28581] bridge: RTM_NEWNEIGH with invalid ether address [ 862.524130][T28602] netlink: 'syz.4.6006': attribute type 4 has an invalid length. [ 862.541309][T28608] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6008'. [ 862.646176][T28613] tipc: Can't bind to reserved service type 2 [ 862.653009][T28613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6010'. [ 862.689022][T28613] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6010'. [ 862.711789][T28613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6010'. [ 862.757332][T28613] block nbd0: reconnected socket [ 862.774596][T28613] nbd: socks must be embedded in a SOCK_ITEM attr [ 862.787817][ T5638] block nbd0: Receive control failed (result -32) [ 862.893178][T28625] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6012'. [ 863.174712][T28643] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 863.391099][T28649] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 863.419364][T28649] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 863.885539][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 864.024140][T28687] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6033'. [ 864.311728][T28708] xt_addrtype: ipv6 does not support BROADCAST matching [ 864.456065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 864.842672][T28728] netlink: 'syz.4.6044': attribute type 1 has an invalid length. [ 864.909456][T27936] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 864.927056][T27936] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 864.941492][T27936] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 864.956512][T27936] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 864.964630][T27936] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 865.128911][T28728] 8021q: adding VLAN 0 to HW filter on device bond9 [ 865.162113][T28735] bond9: (slave gretap2): making interface the new active one [ 865.173528][T28735] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 865.378736][T28753] netlink: 'syz.3.6050': attribute type 1 has an invalid length. [ 865.408960][T28756] netlink: 'syz.4.6051': attribute type 21 has an invalid length. [ 865.410334][T28759] netlink: 'syz.0.6052': attribute type 1 has an invalid length. [ 865.440468][T28756] IPv6: NLM_F_CREATE should be specified when creating new route [ 865.450235][T28762] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 865.466827][T28755] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 865.477133][T28756] netlink: 'syz.4.6051': attribute type 1 has an invalid length. [ 865.533449][T28753] 8021q: adding VLAN 0 to HW filter on device bond9 [ 865.860074][T28791] netlink: 'syz.0.6057': attribute type 1 has an invalid length. [ 865.957901][T28791] 8021q: adding VLAN 0 to HW filter on device bond8 [ 865.994403][T28730] lo speed is unknown, defaulting to 1000 [ 866.024644][T28730] wlan1 speed is unknown, defaulting to 1000 [ 866.111208][T28809] netlink: 'syz.4.6061': attribute type 2 has an invalid length. [ 866.297998][T28815] netlink: 'syz.3.6062': attribute type 2 has an invalid length. [ 866.330279][T28815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 866.998612][T27936] Bluetooth: hci5: command tx timeout [ 867.137896][T28844] erspan0: entered promiscuous mode [ 867.173966][T28844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.253918][T28844] 8021q: adding VLAN 0 to HW filter on device bond2 [ 867.265963][T28844] 8021q: adding VLAN 0 to HW filter on device bond3 [ 867.278572][T28864] netlink: 'syz.1.6075': attribute type 10 has an invalid length. [ 867.280191][T28844] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 867.286890][T28864] __nla_validate_parse: 11 callbacks suppressed [ 867.286904][T28864] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6075'. [ 867.302021][T28844] 8021q: adding VLAN 0 to HW filter on device eth0 [ 867.317217][T28844] 8021q: adding VLAN 0 to HW filter on device eth1 [ 867.326051][T28844] 8021q: adding VLAN 0 to HW filter on device eth2 [ 867.335207][T28844] 8021q: adding VLAN 0 to HW filter on device eth3 [ 867.350614][T28844] 8021q: adding VLAN 0 to HW filter on device bond8 [ 867.394465][T28859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6071'. [ 867.440970][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.448173][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.488691][T28864] team0: Port device geneve1 added [ 867.534746][T28873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6077'. [ 867.558250][T28730] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.573535][T28730] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.583894][T28730] bridge_slave_0: entered allmulticast mode [ 867.596579][T28730] bridge_slave_0: entered promiscuous mode [ 867.614146][T28730] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.623046][T28730] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.631017][T28730] bridge_slave_1: entered allmulticast mode [ 867.641211][T28730] bridge_slave_1: entered promiscuous mode [ 867.690401][T28875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6079'. [ 867.722091][T28730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.752630][T28730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.850240][T28877] lo speed is unknown, defaulting to 1000 [ 867.852943][T28730] team0: Port device team_slave_0 added [ 867.871308][T28730] team0: Port device team_slave_1 added [ 867.887950][T28877] wlan1 speed is unknown, defaulting to 1000 [ 868.000684][T28730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.016911][T28730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.066790][T28730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.103145][T28897] syz_tun: entered allmulticast mode [ 868.118778][T28730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.134410][T28730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.175019][T28730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.197405][T28892] syzkaller0: entered promiscuous mode [ 868.202948][T28892] syzkaller0: entered allmulticast mode [ 868.293525][T28897] dvmrp8: entered allmulticast mode [ 868.408788][T28730] hsr_slave_0: entered promiscuous mode [ 868.420618][T28730] hsr_slave_1: entered promiscuous mode [ 868.427704][T28730] debugfs: 'hsr0' already exists in 'hsr' [ 868.433559][T28730] Cannot create hsr debugfs directory [ 868.500439][T28910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6088'. [ 868.649497][T28916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.656778][T28916] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 868.671650][T28916] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 868.740554][T28916] bond0: (slave wireguard0): making interface the new active one [ 868.753916][T28916] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 868.920472][T28896] syz_tun: left allmulticast mode [ 869.076782][T27936] Bluetooth: hci5: command tx timeout [ 869.207594][ T148] bond0: (slave bond4): link status definitely down, disabling slave [ 869.398490][T28730] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.433572][T28730] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.549326][T28951] block nbd0: Unsupported socket: should be TCP or UNIX. [ 869.873243][T28730] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 869.886740][T28730] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.023447][T28965] netlink: 'syz.4.6104': attribute type 1 has an invalid length. [ 870.024193][T28966] netlink: 'syz.4.6104': attribute type 1 has an invalid length. [ 870.088764][T28730] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.111580][T28730] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.219266][T28976] IPVS: length: 252 != 8 [ 870.231706][T28976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6106'. [ 870.300444][T28730] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.312836][T28730] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.629757][T28998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6113'. [ 870.730911][T29008] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6115'. [ 870.862414][T28730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 870.886864][T28730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 870.896455][T28730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 870.920375][T28730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 870.935598][T28730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 870.953090][T28730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 870.961324][T28730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 870.971985][T28730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 871.019352][T29030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6119'. [ 871.049074][T29030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6119'. [ 871.103395][T28730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.136398][T28730] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.151175][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.158355][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.170519][T27936] Bluetooth: hci5: command tx timeout [ 871.206593][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.213741][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.148567][T29097] netlink: 'syz.0.6135': attribute type 1 has an invalid length. [ 872.154297][T28730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.310742][T29105] 8021q: adding VLAN 0 to HW filter on device bond10 [ 872.319581][T29110] netlink: 'syz.3.6137': attribute type 13 has an invalid length. [ 872.327979][T29110] netlink: 'syz.3.6137': attribute type 58 has an invalid length. [ 872.336613][T29110] __nla_validate_parse: 2 callbacks suppressed [ 872.336638][T29110] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6137'. [ 872.346706][T29105] bond9: (slave bond10): making interface the new active one [ 872.360050][T29111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6135'. [ 872.369219][T29105] bond9: (slave bond10): Enslaving as an active interface with an up link [ 872.408075][T29097] bond9: (slave gretap2): Enslaving as a backup interface with an up link [ 872.547073][T28730] veth0_vlan: entered promiscuous mode [ 872.620407][T28730] veth1_vlan: entered promiscuous mode [ 872.650879][T29118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6142'. [ 872.673822][T29122] netlink: 'syz.4.6143': attribute type 26 has an invalid length. [ 872.685489][T29122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6143'. [ 872.698309][T29118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6142'. [ 872.711867][T29122] netlink: 'syz.4.6143': attribute type 26 has an invalid length. [ 872.720546][T29122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6143'. [ 872.722104][T29118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6142'. [ 872.751712][T29118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6142'. [ 872.764193][T28730] veth0_macvtap: entered promiscuous mode [ 872.789001][T29118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6142'. [ 872.796643][T28730] veth1_macvtap: entered promiscuous mode [ 872.817619][T29118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6142'. [ 872.863430][T28730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.899992][T28730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.943281][ T148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.967444][ T148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.990605][ T148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.028509][T29137] INFO: trying to register non-static key. [ 873.034332][T29137] The code is fine but needs lockdep annotation, or maybe [ 873.041434][T29137] you didn't initialize this object before use? [ 873.047673][T29137] turning off the locking correctness validator. [ 873.053994][T29137] CPU: 1 UID: 0 PID: 29137 Comm: syz.0.6147 Not tainted syzkaller #0 PREEMPT(full) [ 873.054013][T29137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 873.054023][T29137] Call Trace: [ 873.054029][T29137] [ 873.054035][T29137] dump_stack_lvl+0xe8/0x150 [ 873.054064][T29137] assign_lock_key+0x133/0x150 [ 873.054090][T29137] register_lock_class+0xcc/0x2e0 [ 873.054112][T29137] __lock_acquire+0xab/0x2cf0 [ 873.054131][T29137] ? kmem_cache_free+0x182/0x650 [ 873.054150][T29137] ? kern_path+0xd1/0x150 [ 873.054169][T29137] ? nfsd_nl_unlock_filesystem_doit+0x189/0x370 [ 873.054217][T29137] ? genl_family_rcv_msg_doit+0x233/0x340 [ 873.054280][T29137] ? genl_rcv_msg+0x614/0x7a0 [ 873.054296][T29137] ? netlink_rcv_skb+0x226/0x4a0 [ 873.054342][T29137] ? genl_rcv+0x28/0x40 [ 873.054357][T29137] ? netlink_unicast+0x7bb/0x940 [ 873.054376][T29137] ? netlink_sendmsg+0x813/0xb40 [ 873.054389][T29137] ? sock_sendmsg_nosec+0x13a/0x180 [ 873.054406][T29137] ? ____sys_sendmsg+0x54e/0x850 [ 873.054427][T29137] ? ___sys_sendmsg+0x2a5/0x360 [ 873.054447][T29137] ? __x64_sys_sendmsg+0x1b1/0x290 [ 873.054468][T29137] ? do_syscall_64+0x174/0x580 [ 873.054489][T29137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.054509][T29137] ? nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 873.054533][T29137] lock_acquire+0x106/0x350 [ 873.054551][T29137] ? nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 873.054572][T29137] ? net_generic+0x1e/0x240 [ 873.054593][T29137] ? net_generic+0x1e/0x240 [ 873.054610][T29137] ? net_generic+0x1e/0x240 [ 873.054628][T29137] _raw_spin_lock+0x2e/0x40 [ 873.054645][T29137] ? nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 873.054663][T29137] nfsd4_cancel_copy_by_sb+0x10d/0x840 [ 873.054682][T29137] ? kasan_quarantine_put+0xbb/0x1f0 [ 873.054700][T29137] ? lockdep_hardirqs_on+0x7a/0x110 [ 873.054721][T29137] ? kern_path+0xd1/0x150 [ 873.054738][T29137] ? __pfx_nfsd4_cancel_copy_by_sb+0x10/0x10 [ 873.054759][T29137] ? kern_path+0xd1/0x150 [ 873.054777][T29137] nfsd_nl_unlock_filesystem_doit+0x248/0x370 [ 873.054794][T29137] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 873.054809][T29137] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 873.054827][T29137] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 873.054849][T29137] genl_family_rcv_msg_doit+0x233/0x340 [ 873.054869][T29137] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 873.054891][T29137] ? bpf_lsm_capable+0x9/0x20 [ 873.054910][T29137] ? security_capable+0x7e/0x2c0 [ 873.054993][T29137] genl_rcv_msg+0x614/0x7a0 [ 873.055013][T29137] ? __pfx_genl_rcv_msg+0x10/0x10 [ 873.055030][T29137] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 873.055051][T29137] netlink_rcv_skb+0x226/0x4a0 [ 873.055073][T29137] ? __pfx_genl_rcv_msg+0x10/0x10 [ 873.055092][T29137] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 873.055118][T29137] ? down_read+0x2be/0x330 [ 873.055133][T29137] genl_rcv+0x28/0x40 [ 873.055148][T29137] netlink_unicast+0x7bb/0x940 [ 873.055172][T29137] netlink_sendmsg+0x813/0xb40 [ 873.055189][T29137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.055204][T29137] ? aa_sock_msg_perm+0xf1/0x1b0 [ 873.055220][T29137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.055233][T29137] sock_sendmsg_nosec+0x13a/0x180 [ 873.055250][T29137] ____sys_sendmsg+0x54e/0x850 [ 873.055273][T29137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 873.055298][T29137] ? import_iovec+0x73/0xa0 [ 873.055322][T29137] ___sys_sendmsg+0x2a5/0x360 [ 873.055343][T29137] ? __lock_acquire+0x683/0x2cf0 [ 873.055363][T29137] ? __pfx____sys_sendmsg+0x10/0x10 [ 873.055386][T29137] ? futex_wait+0x2a2/0x390 [ 873.055413][T29137] ? __fget_files+0x2a/0x420 [ 873.055431][T29137] ? __fget_files+0x3a2/0x420 [ 873.055454][T29137] __x64_sys_sendmsg+0x1b1/0x290 [ 873.055479][T29137] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 873.055507][T29137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.055522][T29137] do_syscall_64+0x174/0x580 [ 873.055542][T29137] ? trace_irq_disable+0x3b/0x140 [ 873.055561][T29137] ? clear_bhb_loop+0x40/0x90 [ 873.055577][T29137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.055599][T29137] RIP: 0033:0x7fbfded9de59 [ 873.055614][T29137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.055628][T29137] RSP: 002b:00007fbfdfced028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 873.055645][T29137] RAX: ffffffffffffffda RBX: 00007fbfdf025fa0 RCX: 00007fbfded9de59 [ 873.055656][T29137] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000005 [ 873.055666][T29137] RBP: 00007fbfdee33e6f R08: 0000000000000000 R09: 0000000000000000 [ 873.055676][T29137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 873.055685][T29137] R13: 00007fbfdf026038 R14: 00007fbfdf025fa0 R15: 00007ffc442ae528 [ 873.055703][T29137] [ 873.517880][T29137] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 873.529785][T29137] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 873.538199][T29137] CPU: 1 UID: 0 PID: 29137 Comm: syz.0.6147 Not tainted syzkaller #0 PREEMPT(full) [ 873.547582][T29137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 873.557638][T29137] RIP: 0010:nfsd4_cancel_copy_by_sb+0x161/0x840 [ 873.563894][T29137] Code: 48 42 80 3c 31 00 74 0f 48 8b 7c 24 10 e8 17 bb 4c ff 48 8b 44 24 10 48 8b 5c 24 18 48 c1 e3 04 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 f0 ba 4c ff 48 8b 03 48 39 d8 48 [ 873.583500][T29137] RSP: 0018:ffffc90003897280 EFLAGS: 00010246 [ 873.589564][T29137] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff1100ab1900d [ 873.597522][T29137] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90003897200 [ 873.605486][T29137] RBP: ffffc90003897370 R08: 0000000000000003 R09: 0000000000000004 [ 873.613441][T29137] R10: dffffc0000000000 R11: fffff52000712e40 R12: ffffc90003897300 [ 873.621398][T29137] R13: 1ffff92000712e98 R14: dffffc0000000000 R15: 1ffff92000712e5c [ 873.629360][T29137] FS: 00007fbfdfced6c0(0000) GS:ffff888125058000(0000) knlGS:0000000000000000 [ 873.638449][T29137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 873.645020][T29137] CR2: 000000110c2f8926 CR3: 000000007b798000 CR4: 00000000003526f0 [ 873.652979][T29137] Call Trace: [ 873.656246][T29137] [ 873.659166][T29137] ? kasan_quarantine_put+0xbb/0x1f0 [ 873.664452][T29137] ? kern_path+0xd1/0x150 [ 873.668776][T29137] ? __pfx_nfsd4_cancel_copy_by_sb+0x10/0x10 [ 873.674750][T29137] ? kern_path+0xd1/0x150 [ 873.679075][T29137] nfsd_nl_unlock_filesystem_doit+0x248/0x370 [ 873.685128][T29137] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 873.691699][T29137] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 873.698014][T29137] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 873.704332][T29137] genl_family_rcv_msg_doit+0x233/0x340 [ 873.709867][T29137] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 873.715934][T29137] ? bpf_lsm_capable+0x9/0x20 [ 873.720600][T29137] ? security_capable+0x7e/0x2c0 [ 873.725535][T29137] genl_rcv_msg+0x614/0x7a0 [ 873.730027][T29137] ? __pfx_genl_rcv_msg+0x10/0x10 [ 873.735038][T29137] ? __pfx_nfsd_nl_unlock_filesystem_doit+0x10/0x10 [ 873.741616][T29137] netlink_rcv_skb+0x226/0x4a0 [ 873.746371][T29137] ? __pfx_genl_rcv_msg+0x10/0x10 [ 873.751383][T29137] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 873.756663][T29137] ? down_read+0x2be/0x330 [ 873.761064][T29137] genl_rcv+0x28/0x40 [ 873.765034][T29137] netlink_unicast+0x7bb/0x940 [ 873.769794][T29137] netlink_sendmsg+0x813/0xb40 [ 873.774547][T29137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.779817][T29137] ? aa_sock_msg_perm+0xf1/0x1b0 [ 873.784740][T29137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.790009][T29137] sock_sendmsg_nosec+0x13a/0x180 [ 873.795022][T29137] ____sys_sendmsg+0x54e/0x850 [ 873.799779][T29137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 873.805059][T29137] ? import_iovec+0x73/0xa0 [ 873.809555][T29137] ___sys_sendmsg+0x2a5/0x360 [ 873.814222][T29137] ? __lock_acquire+0x683/0x2cf0 [ 873.819152][T29137] ? __pfx____sys_sendmsg+0x10/0x10 [ 873.824346][T29137] ? futex_wait+0x2a2/0x390 [ 873.828848][T29137] ? __fget_files+0x2a/0x420 [ 873.833426][T29137] ? __fget_files+0x3a2/0x420 [ 873.838094][T29137] __x64_sys_sendmsg+0x1b1/0x290 [ 873.843039][T29137] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 873.848517][T29137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.854576][T29137] do_syscall_64+0x174/0x580 [ 873.859164][T29137] ? trace_irq_disable+0x3b/0x140 [ 873.864184][T29137] ? clear_bhb_loop+0x40/0x90 [ 873.868864][T29137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.874757][T29137] RIP: 0033:0x7fbfded9de59 [ 873.879166][T29137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.898760][T29137] RSP: 002b:00007fbfdfced028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 873.907164][T29137] RAX: ffffffffffffffda RBX: 00007fbfdf025fa0 RCX: 00007fbfded9de59 [ 873.915125][T29137] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000005 [ 873.923081][T29137] RBP: 00007fbfdee33e6f R08: 0000000000000000 R09: 0000000000000000 [ 873.931038][T29137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 873.938997][T29137] R13: 00007fbfdf026038 R14: 00007fbfdf025fa0 R15: 00007ffc442ae528 [ 873.946964][T29137] [ 873.949981][T29137] Modules linked in: [ 873.955607][T29137] ---[ end trace 0000000000000000 ]--- [ 873.961092][T29137] RIP: 0010:nfsd4_cancel_copy_by_sb+0x161/0x840 [ 873.965343][T27936] Bluetooth: hci5: command tx timeout [ 873.968750][T29137] Code: 48 42 80 3c 31 00 74 0f 48 8b 7c 24 10 e8 17 bb 4c ff 48 8b 44 24 10 48 8b 5c 24 18 48 c1 e3 04 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 f0 ba 4c ff 48 8b 03 48 39 d8 48 [ 873.992669][T29137] RSP: 0018:ffffc90003897280 EFLAGS: 00010246 [ 873.998780][T29137] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffff1100ab1900d [ 873.999181][ T148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.006784][T29137] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90003897200 [ 874.006801][T29137] RBP: ffffc90003897370 R08: 0000000000000003 R09: 0000000000000004 [ 874.006814][T29137] R10: dffffc0000000000 R11: fffff52000712e40 R12: ffffc90003897300 [ 874.006827][T29137] R13: 1ffff92000712e98 R14: dffffc0000000000 R15: 1ffff92000712e5c [ 874.006841][T29137] FS: 00007fbfdfced6c0(0000) GS:ffff888125058000(0000) knlGS:0000000000000000 [ 874.006858][T29137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 874.006872][T29137] CR2: 000000110c2f8926 CR3: 000000007b798000 CR4: 00000000003526f0 [ 874.071586][T29137] Kernel panic - not syncing: Fatal exception [ 874.077916][T29137] Kernel Offset: disabled [ 874.082227][T29137] Rebooting in 86400 seconds..