last executing test programs: 6.456358275s ago: executing program 4 (id=7036): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r3) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fdfffffffcffffff2600000008000300", @ANYRES32=r4, @ANYBLOB="38002f80"], 0x54}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, &(0x7f0000000040)) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, 0x0, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, 0x0, 0x810) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@gettfilter={0x3c, 0x2e, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1d, 0x5}, {0x0, 0xc}, {0x3, 0x8}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0xffff4bbd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r10, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r11}]}, 0x3c}, 0x1, 0x620b}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r13) sendmsg$netlink(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 3.734067492s ago: executing program 4 (id=7042): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x30, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x10000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ffc}]}, 0x30}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x34, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}, @FRA_FLOW={0x8, 0xb, 0x9}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e23}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x44890) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r4) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r5, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 3.184688077s ago: executing program 4 (id=7048): syz_emit_ethernet(0xeb, &(0x7f0000000540)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@generic={0x88ca, "a6a32a236aa8565819cd877781ee8f124986aa7b4cabec1d04e0a3224a53f2356e4d6c53cdb2e90ee4287364c7e6d7713721e40367c10ffd9bb3c63b46f45a3563751c1393aa53ff163e1dea3b6367598573ea5e18ed9283b11989835da8c730ab873ce6d384bb810af0d1fec0080a16b1aa931288ac188a8001e4384f46fe3d511620a6d6bc8af331d04158de624d070bef405a6501373c10e7cbfc5ff4c631ea47bd07a9186fd9df2a1316c5b73d5381a83fa32665838ed08f610dbc5737ff9a890afd38d1e5f0b78f61659ea70a85a8ed518b7f0fcac3ad"}}}, &(0x7f0000000640)={0x1, 0x4, [0x876, 0x471, 0x7e4, 0xdb5]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa49e15e7b9d310800452d0074006600000301907864010101ac1414bb0b00907800090000465c000c00657b9840010004e00000017f000001070354862a000000030607abcbae4ca307048cfb0511bdc32e2c00000000000000c7f9ada7070814abd80c709a9404010083134cac141428ffffffffe0000002ac1414bb84e3d3839b6727c8141ab15157fddd4811b5f403b4ed6e91ed5450a704760b50746721c747ddfdf988ef4134b02da1eb3b030b908e4262cc6199c64f20a9ad87b738f0273b522e518b279f3d5bb7d152d90539b968400177d9afa9ad4ff0323743a2c3084f7891ee6bf5937242"], 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000380)={0xfffffc, 0x9, 0x0, 0x5}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000010005000000000800040001000000", 0x24) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="440000002c00010000000000fcdbdf253400f2800c001900"], 0x44}], 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="a0000000290001"], 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast2, 0x1}, 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r10, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010d00000000000000000c00000004000580"], 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYRES16=r11], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xc9, &(0x7f0000000440)=""/201, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0xffffffff}, 0x10}, 0x94) 3.179164135s ago: executing program 0 (id=7049): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000140)={{0xffffffffffffffff, &(0x7f0000000000)='*\\\x00', 0x430282, &(0x7f0000000040)={@align=0x8, {0x7, 0x6, 0x4, 0x1200000000000}}, 0x3ff, &(0x7f0000000080), &(0x7f00000000c0)=0xe0000000}, {[0x81, 0x15a, 0xfffffffb, 0x1000]}, 0x10001, 0x0, &(0x7f0000000100)}) clock_gettime(0x0, &(0x7f00000017c0)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000001740)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000001480)=[{&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4}}, {{&(0x7f00000014c0)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001540)=""/196, 0xc4}], 0x1, &(0x7f0000001680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}], 0x2, 0x1, &(0x7f0000001800)={r1, r2+60000000}) ioctl$BTRFS_IOC_ENCODED_READ(r6, 0x80809440, &(0x7f0000001bc0)={&(0x7f0000001b80)=[{&(0x7f0000001840)="61b740aacdafbe625ea55887b8f9e4911fe7a162ff62b447b2d2b6e9ccbf187d1054a1cc24c5d99b8f512be3ddd7a08da05b8e9c03ff395e2e730ee97ddba329639a019b961fb1703650d8c7267499fb93fc86a1f1392cc4d1b25c668ac9e15ec47379818e1fdef324ff1794e456327fb5f120da0b90cf158f61f1fccdd03dddc5ddfe1ef47f0db370c20048deef54e3688b22db7ca480709d4982d370472d6c02b6ba791a4edfe9ae25f18af9413641fb96caa62cc31d6a20a244e9255110d21265635c4fab4766bdcf19396813c4dcc5e2b51a9b517a81c997652827d3", 0xde}, {&(0x7f0000001940)="ad2f8682d77485bf746b9a82345c5b647d3b502db140a82ed849ad7db473fe5c95021388a67331bdcc7578f63150652f834a63bb88dbf1717253e8c0c1c192512533f2871ea9e4d29394ef29e5eb38681a750194f3bf9ce53c6f059ebbd05d670df892592debd312fcafec8c5af5ffa1625ebf0bf960962a1c42f8417758ec55a0186d673a11417bd854874bbe91216762dd8b950c16f9ae7cfb9f1fe54272d5ead2d4b1fe9def6114a88676b749df7be587d9bed956151a9ebc3b6c6a0b5b9fe3f309406319", 0xc6}, {&(0x7f0000001a40)="3f093f98972ea7d56c7f944d2a053aa514fedb8c0bef7326a340ccbfdb6e144060c7a43451ce9c59a659d8d27076b0ce2ad60e44b901910c535ef5d90a38466e214652c201b2d84d96b5f19365734c6f36c86b5381c0101517993ed19af83b6bb740db2b36260f52188cc1d6673811edf8197837605a978d3dc6669a497c42d94c72d63832e7b6b2787391d329d797972c3fb1759f8ea85c136c44932c38fad13999e79db70b379756b857ccffafa9300dfa64483856b6e20c2b6ec95bbe3b82a3fbf1250878d4f60318d01b81c41431c22046633ba176082f01506fa7a64bda5fd876c072e2ce6486d6d4ea5ccb62", 0xef}, {&(0x7f0000001b40)="611ae1ad797c801df86f498c66f266e3af06669f582584e4426d27eac5bb55cad220f75ca1", 0x25}], 0x4, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x7, 0x0, 0x4}) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001c80), r5) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x28, r12, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008810}, 0x90) write$cgroup_int(r10, &(0x7f0000001d80)=0x2000, 0x12) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e00), r5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000001ec0)={'erspan0\x00', &(0x7f0000001e40)={'gre0\x00', 0x0, 0x7, 0x80, 0x4, 0x5, {{0x17, 0x4, 0x1, 0x7, 0x5c, 0x65, 0x0, 0x9, 0x2f, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xf, 0xf5, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @lsrr={0x83, 0x17, 0x23, [@dev={0xac, 0x14, 0x14, 0x26}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x1f, 0x7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000001f80)={'ip6gre0\x00', &(0x7f0000001f00)={'syztnl1\x00', 0x0, 0x2f, 0x62, 0x7f, 0x8, 0x2, @private2, @private0, 0x1, 0x7800, 0x4, 0x6f95ce34}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001fc0)={@dev, @empty, 0x0}, &(0x7f0000002000)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000002100)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x70, r13, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000800) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r18 = openat$cgroup(r17, &(0x7f0000002180)='syz0\x00', 0x200002, 0x0) r19 = openat$cgroup_ro(r3, &(0x7f00000021c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) r20 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002240), r9) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000002280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r19, &(0x7f0000002380)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x54, r20, 0x82, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r21}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x401}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000096}, 0x40) syz_genetlink_get_family_id$batadv(&(0x7f00000023c0), r9) sendto$unix(r5, &(0x7f0000002400)="72aa296cae392b69173c128dfc5a790301030a1d46e84a9e14450968c5ac32640a7d8e33a37e95b1898076855544fec968a78d1608e58141cfa31fd7673a", 0x3e, 0x80, &(0x7f0000002440)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r22 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002500), r9) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000002800)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002540)={0x24c, r22, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff3f5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5f3d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xac}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x866}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x401}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4bc3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffc9af}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x280000}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000010) r23 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002880), r11) sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000002b00)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002ac0)={&(0x7f00000028c0)={0x1f4, r23, 0x10c, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x1d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "d8207461f8f2f5f326fdd4c89393cc681aaf5d4419"}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'broadcast-link\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4b, 0x4, "61ea6bd152f73b7223e13094b4a86760f96d7f1bc38bda4f7c8eb084dfd829fb56cebade2da5ed3429300e2b71ed11ac91bc687009499e0ab5b05f5f5ed9e7c4effe7e824727a3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x43, 0x5, "d04bd7baaf7f5a626a812972a4f2c9ef8dc1998305bddeba2cc52ce2e6923691394744aab49f752c7d84e9e2bb73c94985b3f01ef5e928982d888e81c1ada1"}, @ETHTOOL_A_BITSET_VALUE={0x96, 0x4, "a4ab429e96712331b9728dd860c061fefd783c965cb029c6ffbaaa8c77b315d18c94a95ff105515d94de5bf21d00525525f6b6e9998ae92d4bd9d64b48dc50e70592b5bca62ef54974dfab137bbb998dabddcfa22285b1d879bb22db1665c8e5a65e31cbc285f4f7c553c5465a506dc52739c4f43e235847df3c447487ec11e4a09bfa2cd364606307a6ee38b3262f01588f"}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xffff}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r24 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002d40)=@bpf_ext={0x1c, 0x18, &(0x7f0000002b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x2, 0x3, 0x3, 0xb, 0x9, 0x100, 0xffffffffffffffff}, @exit, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r19}}, @alu={0x7, 0x1, 0x7, 0xb, 0x4, 0x1, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002c00)='syzkaller\x00', 0xfffffe00, 0x20, &(0x7f0000002c40)=""/32, 0x40f00, 0x20, '\x00', r16, 0x0, r9, 0x8, &(0x7f0000002c80)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000002cc0)={0x2, 0x7, 0xfffffff9, 0x7fff}, 0x10, 0x13b35, r0, 0x0, &(0x7f0000002d00)=[r7, r5, r6, r3, r8, r3, r10, r11, r3], 0x0, 0x10, 0x68}, 0x94) close(r24) ioctl$FS_IOC_GETFSMAP(r18, 0xc0c0583b, &(0x7f0000002e00)={0x0, 0x0, 0x4, 0x0, '\x00', [{0xd94d, 0x0, 0xffff, 0x5, 0x200, 0x1}, {0x35, 0x1, 0x3, 0x8a, 0x10000000, 0xd}], ['\x00', '\x00', '\x00', '\x00']}) getsockopt$IP_SET_OP_GET_FNAME(r8, 0x1, 0x53, &(0x7f0000002fc0)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000003000)=0x2c) syz_genetlink_get_family_id$smc(&(0x7f0000003040), r0) clock_gettime(0x6, &(0x7f0000003080)) 3.148974731s ago: executing program 2 (id=7051): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) sendto$inet6(r0, &(0x7f0000000040)="a3752ace8055db95165bb25205ee9432b1890641dfabe6348bd4b55a5f2350979edb65b6a2dea7bd27ba8a4c418a45b986cd1d7da0125195dd97873529ab148b967814e9703e46ed070751cbcc64ba83dc62a2718a7f3d0e1437be72acf02c349799ba84dcd15d99ae686ae28dd22541a53ed77379c14cbb8b22cdab86e08d6b2db138ccd54737e2a4153b16ecb9632dbf6f998bbd0f5a709531892f089ae1392c25624b6f808f17bc34b1184fb348399e75949b03c60e0872c4b8bf58e025d3b2afd63a38", 0xc5, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x3}, 0x1c) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003940)={0x14, 0x2d, 0x4, 0xfffffffe, 0x25dfdbff, {0x16, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4c855}, 0xc000) 2.918073345s ago: executing program 0 (id=7053): ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, @hci={0x1f, 0x3, 0x4}, @hci={0x1f, 0x4, 0x3}, @can, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0xa, 0x5}) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 2.883043664s ago: executing program 2 (id=7054): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000340)={r0, &(0x7f0000000100)='\x00', 0x110000, &(0x7f0000000240)={@align=0x2, {0xfc00, 0x3, 0x9, 0x5}}, 0x8, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x1}) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x98, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x42}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2161}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0x220, 0xffffffff, 0x0, 0x220, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv6=@empty, @icmp_id=0x65, @gre_key=0x732}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [0x0, 0xffffffff], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) connect$can_j1939(r7, &(0x7f0000000580)={0x1d, r8, 0x3, {0x2}, 0x2}, 0x18) (async) writev(r7, &(0x7f00000007c0)=[{&(0x7f0000000800)="3874517c2edc", 0xfdef}, {0x0}], 0x2) (async) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r6, r5, 0x25, 0x8, @void}, 0x10) close(r9) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006c000000720a00ff00000000730a9fff00000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 2.716687916s ago: executing program 2 (id=7055): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RANGE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) (async) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) sendmsg(r3, &(0x7f0000000100)={0x0, 0xfffffffffffffdb4, &(0x7f0000000140)=[{&(0x7f0000000040)="4a0000001100766ef3e8245f05bf8d4d037ad763e42c21", 0x17}], 0x1, 0x0, 0x0, 0x14}, 0x0) (async, rerun: 64) setsockopt$inet_int(r2, 0x0, 0x16, 0x0, 0x0) (async) write(r0, &(0x7f0000000000)="380000000100be", 0x7) r4 = socket(0x5, 0x80002, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4055}, 0x41) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e0001002bdf2500000000ee00000000", @ANYRES32=r8, @ANYBLOB="0500"], 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@bridge_delvlan={0x24, 0x71, 0x200, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x4}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c044) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="152500177b72ee65d14893d8bc9b8fd2732574ae069ef7fa624c3ec1e68e88938f1686c8a08873235dc60e116fd9d49b6da178dad3c62d3c8b17c056ac8bd00cd9215e7ca35e96153d64b213a17883718f2a32a1eac89c42e37bf8184a36dd9dd87e606b4f22ab87b27470c0559f895a7ca1cdd10d740bdfeb1d6deaf763dd1b0d034078e3b1b0b9f6e6fbab7c889acb9152c1cf282c326a80d6b4c68473b9a2f4d93cac162785d9664c8e727c00cac99fd38486dd3b03506b13ed17f60f98c2efdc81d820be98f1ef385c041cfe25b4c9503fdd71d5e63580f1166be40c278f975cb079152724fc66e1834180317bf6e844", @ANYBLOB="1ef65b88d8404ed14372eddff327e2860b66455f8791e38c7b562a04d1ef00004292c42d77233327ad7d6d3a60e39e3113d40a2bb0874c81118951952d4c9b", @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRESDEC=r4, @ANYRES16=r4], 0x48}}, 0x4000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r11 = socket(0x40000000015, 0x5, 0x0) bind$inet(r11, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r11, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000003"], 0x20}, 0x0) r12 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000327bd7000fbdbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r13, @ANYBLOB], 0x60}, 0x1, 0x400000000000000, 0x0, 0x10}, 0x24000010) (async) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) (async, rerun: 64) socket(0xf, 0x80000, 0x9) (rerun: 64) 2.689451555s ago: executing program 0 (id=7056): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000080)=0x8) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_CARRIER={0x5, 0x21, 0x4}]}, 0x28}}, 0x0) 2.133448417s ago: executing program 4 (id=7061): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000000314010000000000000000002500020073797a5f6465766963655f6e616d655f33325f63686172735f31323334353637000000000800410073697700070033006c6f00"], 0x48}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x8e}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x6}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x7}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES32], 0x38}}, 0x0) 1.772807782s ago: executing program 1 (id=7062): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) 1.655742796s ago: executing program 1 (id=7064): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=@migrate={0x50, 0x15, 0x1, 0x0, 0x1, {{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x1400000}}, 0x50}}, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000a80)={&(0x7f0000000080), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000700)=""/197, 0xc5}], 0x1, &(0x7f0000000940)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}, 0x40010100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x42, 0x1, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffff92d, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'tunl0\x00', r5, 0x8000, 0x700, 0x7e5c, 0x100, {{0x6, 0x4, 0x2, 0x39, 0x18, 0x65, 0x0, 0x40, 0x29, 0x0, @multicast1, @local, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x100, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x5, 0xb}, {0xffff}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x87, "d49172a207af042957c55eeca97341e2"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240440e0}, 0x4890) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @random="2abcd265829d"}, 0x14) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000300), 0x4) write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[], 0xfdef) r10 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r10, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @local}}}], 0x20}, 0x6008844) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket$unix(0x1, 0x2, 0x0) getsockopt(r13, 0x1, 0x7, &(0x7f0000000040)=""/177, &(0x7f0000000100)=0xb1) sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000120a01040000000000000000020000000900010073797a30000000000900020073797a31000000000800034000000008130004800f000100756e636f6e66696e65640000140000001100010000000000000000000200000a"], 0x90}}, 0x4) close(r11) 1.295873577s ago: executing program 1 (id=7066): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6805000000000000000c00"/20, @ANYBLOB="e0cb1764a8e8d0614cad8e0da8413f09fec46276914b059981f94ef3438a82c00c83306916c0ca77375b3b448ae5d7bf26bd0cfbac640f37d9cddafb6aab280290371914c62a2f4bd77347f5fc99bb46ce03ffb257344c88a86585", @ANYRES32=r1, @ANYRESOCT=r2, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESDEC=r2], 0x68}, 0x1, 0x0, 0x0, 0x488d0}, 0x20040080) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1.201166123s ago: executing program 3 (id=7067): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) socket$nl_route(0x10, 0x3, 0x0) 1.16450992s ago: executing program 0 (id=7068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x6c, 0xb, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000710447000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x50, '\x00', 0x0, @sk_msg}, 0xfffffffffffffe6a) 1.076558083s ago: executing program 4 (id=7069): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x1004}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x28, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) (async) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000004980)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@base={0x1, 0x3, 0x800, 0x7, 0x18000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x0, @value, @void, @value=r3}, 0x50) (async) r4 = socket$kcm(0xa, 0x3, 0x3a) (async) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0xb, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x4000000) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000040)='ct\x00', 0x188400, &(0x7f0000000080)={@_ha_fsid={[0xb886, 0x2]}, {0x2, 0x280, 0x81, 0xaf5}}, 0x7, &(0x7f00000000c0), &(0x7f00000001c0)=0xfffffffb}) bind$rxrpc(r6, &(0x7f0000000300)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x728, @empty, 0x5}}, 0x24) (async) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x220, 0x30, 0x51b, 0x0, 0x0, {}, [{0x20c, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{}, 0xfffffffffffffffd}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xf8, 0x0, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010103}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x220}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x40, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="8280a32e0114010126bd701a0adbdf4d"], 0x10}}, 0x40004) (async) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r7, 0x111, 0x3, 0x1, 0x4) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="3801000021000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000000000001000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b26b6e0000000000e8001100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bbff02000000000000000000000000000100"/240], 0x138}}, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000580)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@dstopts={0x67}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, "111363", 0x3ff, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [@routing={0x3c, 0x10, 0x0, 0xa3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @empty, @remote, @loopback, @remote, @private1={0xfc, 0x1, '\x00', 0x4}]}, @hopopts={0x3a, 0x1d8, '\x00', [@generic={0x2, 0xebf, "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"}]}], "ab0924172f9c2a1d"}}}}}}, 0xfce) (async) recvmmsg(r5, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000040, 0x0) 1.004309864s ago: executing program 3 (id=7070): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x1755aa5670968b55, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0xa}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x1755aa5670968b55, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0xa}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) 796.949535ms ago: executing program 0 (id=7071): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x0, 0x111, 0x4b4, 0x1f0, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00, 0xffffff00], [], 'ipvlan0\x00', 'caif0\x00', {}, {0xff}, 0x6, 0xfe}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@hl={{0x28}, {0x8dde9cf0fcc298ce, 0x6}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x59, 0x0, {0xfff}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [0x0, 0xff, 0xff], 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4917, 0x0, 0x4, 0x9, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000005fc0)={'filter\x00', 0x4}, 0x68) socket(0x200000000000011, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000005e80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000080)}, {&(0x7f0000000300)}, {&(0x7f0000000340)="ec8b8c4bf16ef994f0ac9e0413268a17fed4c782b831dc2fcb0a7a2eca608cceba537951dedbebcf1fd8e079f738197f0e302c13177f9568437476361dd492b7cc12db7f7b4eab907882f9b8017361", 0x4f}], 0x3, &(0x7f0000000780)=[@ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x5}]}, @cipso={0x86, 0x9, 0xffffffffffffffff, [{0x2, 0x3, '\''}]}, @ra={0x94, 0x4, 0x1}, @end]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end, @timestamp_prespec={0x44, 0x4, 0x22, 0x3, 0x4}, @rr={0x7, 0x17, 0x34, [@empty, @remote, @broadcast, @local, @loopback]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0xc0}}, {{&(0x7f0000000440)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000540)="1c70af8ea587ac75af7c552d37fbbdf3580d79093a6a9a07e8f255dc1996fef8b6106d55cae77722820bb28636ae8ad0f1b365dbf65946f991f633aa5020ab643fc7b3b6dae8d7db71c67dbbceace89023fe90d2da62d773bf773a5fb085843994f7638664579c4093fdb914c5542d776593d453a696ff4891f065eb3f8a50e25fcf1e", 0x83}, {&(0x7f0000000600)="7916e4e290ae3246a91b6d85f22f5043e59c207ee88e8b3dc4e80b7eaeb74d3de65ffa0ee7127ab1db5bcf0b0fe35abf8a0a0d2e91a46970051f97205d29e812595c4c6548cb38452942f5767dd2871c0216e2317703106b1e34559be5c183421321b8f4d862c2afd13b9ad86a28b7a86ed6f6d1ff5d81d152cd8806985e3f4b3a8e045f87", 0x85}, {&(0x7f00000009c0)="11322fc47dd828aac9b3752fb5406c537fdda01beafdc61237aa0e3fc67bab40b12ba9c221d0426f5f1efe20bb341b92aebc2049d4de0b0f52e6bbe6df4ba6c60ceeffb7eda5fa0c23ddfa8229e6c1f5f21a8ab1ea4fdd69c8d0109a1d6fed8b00f09b1260a35d63953981de14b2c26bdd85d754c772cd0ec50dcecd7191ec2fd9adf4f9f8427f63d3469f0713950b344fa9", 0x92}, {&(0x7f00000006c0)="cf4b0458ebd6b9b4b5be86ebd6378e6796e03b609898c61515bcdac76dcb3b55bc80fd8d4aadfaa35d76d0c673d563c645d880c6e7e1e0ccd5551718266c7dde4d572b700b2c", 0x46}, {&(0x7f0000000a80)="1e95366ba7d19164728701b1cb401dd88209467af076a91f07be1fd530f2e3280f011105d5f1193549ac67c35acc7d1dbd142ed7074eb66053db5d9266c49ceaff105b8e8899cf357b18dbaf5919aabf2b9265a020dc8664105edfe33f0889cb447eaa0168c180d14109482366f633017c2249295faf46932ca681d35a4faf60e17fe94a2804bb24ba7871b0c365763706ec83b70108682b8ad486174434644a614c3bcf393c2fbdcb130756040178c2b198931975a8afd32a573e440d1cc2e141f3c572a8d36f2131237717631018653a43bf80cd9b15cced7d7bf39652dbdb", 0xe0}, {&(0x7f0000000b80)="2d01a08efc5280451e3b13e5e2e7c7b32543f335b2ca5297aaca728fff1bff3285ab5ead2f913dc8908a1519701de37e42e95688dea259e7fbc0b352978a5e641585005a04de91c82c03c2974d981520a925", 0x52}, {&(0x7f0000000480)="47a3", 0x2}, {&(0x7f0000000c00)="a298b563e756234d85213e7d56f13fc3ddc8ad561d44b1296e5a52788f3a94a3317b6d6efcce00788b", 0x29}], 0x8}}, {{&(0x7f0000000cc0)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003100)=[{&(0x7f0000000d00)="011fbf1c7c984d82", 0x8}, {&(0x7f0000000d40)="938d5579eddc876f3ef559f6030f901bb3605c896612028137f1227fef89e12277b8172d7923d8aa9aeaf38437ff6880dc0f095c180e1a3bcc1dfac23de34c1f88bd8793d1624ea9df4e3439c6360283d7330d502492224c8bfaf488b2808006f03b345a932d3f723082b6fdd2aa049d46476f2981c8125c0a188e13ebada4d1", 0x80}, {&(0x7f0000000dc0)="a81e3b36b5169e9936b1de089a336ba97522f22df933e9289e4a3fcad8f709b9b6d051ec691a02f17fc2d5c90f7151cb3050dbbdda016bdc7626a71f0d1d5f88f60cec78f3820e8beb94f578eecc7b0dc2a12cd27869ed621dcaa9bee7438d88ec82bad2cdda794006d4c10afe76b577be7721aa0c", 0x75}, {&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000001e40)="34eac430e52ea78f9b83775420f653c38bca2fab48de97884b441de213e8c0a91ede42bccbfe2d7b24c298c834ea67a9cd1bb4607323775e204e2c72c45391212dc0e86c27912b490e86a76b626dfa915c6c202b328f8cd8894b48e5786d304496ecf705414199b12ce46b55915e2dad4f05d632598d50c2f736089305636af20b080bdec35fa5b11b39c9b5a91d8fa8be355226254d718201f2e612109623c0389294224b8c4fa8dc6ad9baed843d9af178d795285f01ce1f02811e01f4b2fef97758ecea4cae0309b0668462e69559e464a96a165d146e5d6ed5", 0xdb}, {&(0x7f0000001f40)="ec3156d8faa0224aa93ab040430bddbc337e59651833dc3e97a1076f1fa5334de813b33cf34e1646810ca69523569f87152b", 0x32}, {&(0x7f0000001f80)="7b9812d77e9ad3431f62e2e29b0b0ea68d6c93f5d318a70287e0d27c6e8a61a83246", 0x22}, {0x0}, {&(0x7f0000002040)="1ff83b54edd38dd3a2b76c", 0xb}], 0x9, &(0x7f00000031c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0xc0, 0x0, 0x7, {[@rr={0x7, 0x7, 0xf3, [@broadcast]}, @ra={0x94, 0x4}, @generic={0x94, 0x7, "38424ea2b5"}, @ssrr={0x89, 0xf, 0x65, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_addr={0x44, 0x34, 0x68, 0x1, 0x3, [{@broadcast, 0xa}, {@rand_addr=0x64010102, 0x6}, {@loopback, 0x20}, {@empty, 0x1000}, {@broadcast, 0x3}, {@broadcast, 0x5ed}]}, @timestamp_prespec={0x44, 0x4, 0x62, 0x3, 0x3}, @timestamp_addr={0x44, 0x54, 0x4a, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0x391e}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast, 0x5}, {@broadcast, 0x8001}, {@empty, 0x940}, {@empty, 0x4}, {@remote, 0x7}, {@multicast2, 0xed4}, {@local, 0x2}]}]}}}], 0x108}}], 0x3, 0x804) 795.915983ms ago: executing program 1 (id=7072): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 744.517663ms ago: executing program 3 (id=7073): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="2110000000000000180012800b00010067656e657665000008000280040010"], 0x38}, 0x1, 0x0, 0x0, 0x4044005}, 0x814) r0 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgro\x94mU', 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000540)='cgroup.events\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000000000000000080045000020000000000073907800000300e000000100000000000c907801000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3400000018000100200000000000000002009400ff00fe09008c00000600150003000000100016800c000280080001"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001300050026bd7000ffdbdf25070fef93", @ANYRES32=r5, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r3, &(0x7f0000000100), &(0x7f00000001c0)=""/5}, 0x20) preadv(r2, &(0x7f0000001a00)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0x9, 0x6c8) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x8e10) 680.496849ms ago: executing program 0 (id=7074): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f00000000c0)={0x604, 0x2, 0x3, 0xffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @loopback, 0x4}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x5, &(0x7f0000001f80)=ANY=[@ANYBLOB="18380000030034a500000000010000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ad8efa05fd9614ff"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001100)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000001f40)) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f00000039c0)=[{&(0x7f0000001140)="8a3deb7cc711", 0x6}], 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000440)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="a00000002100ef0027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffcf990ff5dba65728e245f4741d0326100000000000a18e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe800000000000000000000000000011ac1414aa00000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) sendmmsg(r6, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000003640)="5941b6690b28b91f567c25bbcaa2b564eeb5fddd3d207db0f687df60b86a5e9f9ea80c610666d07c096d22df226e1205de8850c81651e879147afa0da1b9a3b4f5ab36836d15c492548e5380d63994b6a2271727e17261a76a641e4e7074eff2b5ba7481eb0d89dc42b7100a4f14fb74ec5769578d6a5004db8cfe18ee6aa47496038f1a7f126e4daed80b51747fa0e9c679152972eb243e59ce01c5078f804065f879ad9dca2206d4a72265d99c8021b04092c19f0f5d5749b0db0a314b0d00", 0xc0}, {&(0x7f0000003d40)="f4aa9819ac8c640f4289c8a7acf1c17eccbc3e1bec24ea8df3eb1abc63e0cd165edfb47e821abdb87e75f9361c2f365aaa8e10536381241739170a62f1fe45079d988dc5b2252c2828d831b109958548c59d04a1f44e3a4a048d05286dd258bcd120e3bc238aa6ca6afd0eda9e595fd81adabe99907fd60e7a3cd497fb531865f62739c2ab2b5c3698527ab4e7b6a6be810cce9d2df65b92b92214975270666386", 0xa1}], 0x2, &(0x7f0000003e40)=[{0x80, 0x113, 0xc72, "953df1d6f5ad3ec22f8191319cb4f19c127c0d6819c9381b7fcf17a0a55865e99d4992f8df21f9d1104e61451af560f2e197bca7a3271110d3b6cef67862ba09b53fff6f91a245e2679518f8a92e8a70f08b371fe5898a8d6cae9889e4167b4ead46644ac6e8da3a943a5e"}, {0xe8, 0x114, 0x2000400, "3a41a0cd20ef73537fdd418e0f5380762b194e3dde2291513f932926f109782da1c50370d5db1e5d96523daa23fbe4a877b5a608bdd9c8a7a26114bd57cee21b8349325721f15a9ba6ea580fe035dfe03d36f88efdc754b2692e6c94a1ed909ce4fb492c58bb52e8f93b305785e752649f7e0f804aa63adf513c6610549701844cd87991bc0e3a0918eb4700b4a5cce7a15e984f21ae381ff477f64357a6ab29482f5261b49fafb9d024634524b901434d9679dcb95a490c5b95d3cdff0ea3b34d6063ce377fafac021af9bf9d1a05cf7b74f2023e"}, {0x98, 0x119, 0xc, "9977a0680ca4a377c859e2c58a358e661a6bc786f4888b11523d60e45d35358813a08bd3b8fa764f178988233c88f89b41d1200d86e8ec001ca76494e4fba3db04b6cf5e8f622312dfa2867d3aba5337d311113d647d13072f6ce937870a26323f5c53f97e589564e17d00e2425bd5069d069637ee07b87a5b69da299ded5d56376d14bd3322ff40"}, {0x70, 0x111, 0x5, "3a2b9ec2f0818601e37cb10f7a3dd1301815d0eeff7d55dd5a5e8ee206115101e66315ca0b29fca86b8b5a6f36e5af3837a8818652f9b21087c32eb526661dc74db4cc05a5e00ae60e7081f09995c74a60926019cb192a3201c35ba15dd6"}], 0x270}}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f00000040c0)="36064dd0c1da8e348407122c429bbfb7d3ebadb600b698bcddae092ba93c1cfe40b5f3d6c2fb8ec3510d35310c6cdf5a72285be4364005560646d775e6a6c819ed58e6d4312c4b4d99cc510fc8987040f2a2401c17f53729de0a701dae788d19d3149d16c26b07c548c0e56b9bf554dfcbc14d93b6b01f6245ba6c9e95ac5aa4fd33c8c65fbbd9179517a66b2785aa428795bce9792eaa141877a5744c374f84629269a172d98ef2a690b75f33164afb5942bf3125de615a872fe3d9edf2de7791619113352941a9655044a822d8beb071f6810b88a06b3bad6ddd3e35fefd33f080", 0xe2}], 0x1, &(0x7f0000004200)=[{0x18, 0x114, 0x1, "b5fee111616c"}], 0x18}}, {{&(0x7f0000001c40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)="b5fdf552a255ce73c7bc3590ceeb0da6e8c1", 0x12}, {&(0x7f0000001d00)="7082e8d0c5d5a75eb3760ca4d7093d9e95cf57242ec20c436a97f9dd591d667e14e1f08121d50628cba46c12fb24", 0x2e}, {&(0x7f0000001d40)="32e80489791195760a742795c5b5819046aff275ab8d9d95ef2b44ce09583bb70732099e46ed0ca559ea08aaa517723c18bf8103d579f007a7242ac125ec75ef21f5", 0x42}], 0x3, &(0x7f0000004400)=ANY=[@ANYBLOB="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"], 0x1230}}, {{&(0x7f0000003040)=@in6={0xa, 0x4e20, 0x6, @local, 0xdd52}, 0x80, &(0x7f0000003580)=[{&(0x7f0000000580)="c905950f70221fa982d1d960f50d8c179c2f658a910edb8b85d52d1dc9320d68a2b7eca2ef6ede7e31855f7a941059a80c824b8f3f58997274b8c6ebc30429c302f8b1698a047035026958f7cdf6354985d86f566701c538450d032a37a7dc02cee8e5f0965f2794c3ba0234956c1ca0b03c660d5778622283abd727e900d2ba9b20c24db2e053202b97e762", 0x8c}, {&(0x7f0000003180)}, {&(0x7f00000031c0)="f564d8bf7dbfa80861af27ff2c023cfd7fc6aec3d5c54a9b3f0f29fa92", 0x1d}, {&(0x7f0000003200)="af14dcf1a3e347a5fe036e32fedfadf27180b0ae1cf0a380dde1f7abf9a2f169b8ee6c29d5a287a6579920a3d91e8e8187", 0x31}, {&(0x7f0000003240)="e4b4bf831ce5546aaa31569b7f918483abc275c1f441e1c2daf71ccff8c6170180124d65f46820ac80b51a50e713d4d19b20993d104384c5ab1f3e8d37fb723a71c7bbba901e6c41622ceaf9082cc9bb16a132f4cc7f92964c4ad698ab17c5b3f4887e7e9f2e02b4cd040d7485", 0x6d}, {&(0x7f00000032c0)="2f9b28980eb7fc2654553d17fbb9a5", 0xf}, {&(0x7f0000003300)="6ea4e7682a14997781714628c6ceac116d3974b84e0a915892d577e505784cf6d3e2e97bb0543f4979735353f3b44bd0523213c161cf0370918753b37d8e00045df590d72538902ee43f6ea09ebf3db443e48bef999122656bee9856677f0de952ba903706da8ca0cc2c27b686d2df3c237654566aaca99c", 0x78}, {&(0x7f0000001e00)="56c23997c51661e1a182829a03e37e97da3ac89986eb9e1c46f95bd54b3a8a6b4a5ec7bf41ef44cb1643c5fd3082c2a0d4f80daa406d96d3060b963d6e3fb5870858613adced61f56d873358f85a2572dda20fe53cbdf2775e1e501d655987102f42f96521e32d1047a7a4393e4dce8e1a2e566e7d5f8b53670ce7b5d98adf3ba640375926294bed848fdd0c740eec6921af35e7b3ffbeba2539f5b608d33f788d6c073935af3cdd872e4ed31903dac0e11c35e8590e1579007c52035259441a854a38c450d5070368a63da40ddf082dd984de964513af614d73c73ab81e6c62fbad0d21c7ef728aea88851ac196b21ed377e0f912235ff342adc9b85d7c26775698c13d", 0x104}, {&(0x7f00000033c0)="f35137415d62fcc90e619e35d36e23d2f0e8d5ea4f7b508058be6c225dddacd3a32f53e82371bf5419e945f5a91b87e76b00a6ab2930d7f7649a41960aa383f67ab1b9b16d01f804c5883df084a3a18cc880e0e44e9bc1b19a377d3b2f6d143596a54cde96cdb309c8a7b39edbde65b73e9eeac1ae9aceac7fd91741422bdcde5864ea4d39aa2ae1b79719884801ddbbb542c646116120c77f013a5f17ca2f04ffc553006f4619215cb632d3a1d1fcefcfcaa2909529e17a38d99527c08e79d996d9f20ad30ad93d0272f2d2b9b652161640f840cd771108", 0xd8}, {&(0x7f00000034c0)="d7006244469e0f8ee4222aae46418b09027de99e473c01aa06e7ed48394942a5ab23f342518215fd45c04b78cbb205382ed8f8845201c8f3bee7b5fc1c6ce77f2db65a604b3fd49d956d6c61a4ea03efc3bddc6f31574ef1c8aa17b2a117f4e161c4a2e19fe8eb12f3111d98f7a4e44f5be7f2b658c815d152ee7d457dca71a77b7ebc9e13", 0x85}], 0xa, &(0x7f0000003640)}}, {{&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x1, 0x2, 0x1, 0x4, {0xa, 0x4e20, 0x2, @private2, 0xffe}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)="d6972be5b85272bef36d59c3a41dd4f313dc7be888545302b1325f5e0db4dcc0fec8e0c8fc455033f2f2f7612bec2736150a9c84c199045251045fee946a112f28ed93d671988de3e2d9f994d9bd0c4bcd078f90396ef8f0ee1305bd2d98c1bcbc57e4499645b8eeb8d1f2b74558987c545c77ec1c258501a53676337a9a8cbf6ed0b6c85e6ce5d99a49d19eb18260f3ee8e57a7216159c75cab326e344524acb39f6d74a5191edcf42b9aec3c3e455bd3b5b8580900267d903f29f15d858741dc538dabe8fbc1fb7811670b1c5b64c1c8361ad483d3fe462f461a328f05fa3033fe9759d4b9ab25b23872e6811aff47ce79961003ef", 0xf6}, {&(0x7f0000000280)="f364ce706645697ca6f4b0839b7d7f5b3aaf4fb2ea5d5834e55fb09e150584c9ea266a3880db72c0970b928608f5b33445fcbb9e3fcebcd8cb3ad2687c1d", 0x3e}], 0x2}}, {{&(0x7f0000003940)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000003b80)=[{&(0x7f00000039c0)="df4effcc35c1d54bb997b6e2beb3224c5ba90df7d060a937ee89681a3fd27ccbda0fb8d16613260a8df55ac8d29aae6e74872cce2aa957d67eb3e153f237adb9a1deeef3a4c44c1a7e9892012fda5a40cb8d016de628334abf2c43d6bdab6600a7dd073a30a6ba25c241ac0ae501a8bf22661cb7d4920964076f06c7830c791ade1ab5af999ae57f766b34b45f0ae277", 0x90}, {&(0x7f0000003700)="92d69cca654aef99a6293b866921af1331ae3b7f3fd1ab1cbb285134e0e4a684469ec8fa80a90869ec01cfc8cb4d8fee89416472e79b0d83e0f9654c0816553301077d2d5735d5a8ecb90786fa3ea1f57a7a3b168d2f78703ec4bfca2ad873f5f7e4225b3a5b6245f4afd96639eda80405dd58d8f2f772ee7df590c008fff0902af1a2a88eb0f3f9e4b7592c53314c10d77ba288376274c13039533eda209165dda09e8fb6ffc13ccdcb7aef08f38b040000004528b38e69c5a2e663c2a0883ac881e051cc6e49bc7ee9b741d1f0c667f72254113c9262d26b4a74dc72df92f5778416b00356dae011df762bcc5f5c35268ec991e4daf2fc6921fc746b03355d777a1e7e887fe974bfcbf63685e3f4de1e063d236047bd5e65f6ccbdc0e4da99167bccf13f373657c98e85d0f7c9b8d9dfd7dd5b861bd60a23f796a55d5b6ab43c5b882822d54d1eac4e91b6d84c27a97c6c9668d832e8a54a808105e03afded3fe64190065e5fe54b478b7b69d814800180b522db3a01ef0debd3b15e6ccbb8a152ed63baa32b4ea1b95ee68471307b", 0x190}], 0x2, &(0x7f0000003bc0)=[{0xa8, 0x10e, 0xbf6, "10873141dd90a4663ed649ecacb99ccb311a5b762b52b09691ac706426d1a6a5c7cdd2ebac4eb4b3638b9285697f62d991d165b9739bd844a806611ae4e99a159da6f608898beb6672e920178fb4a51c5d48be7c4f8cced60bcf3322599c76b9b6d993e13845a451f8848742ea19382b2311543a73ccfa802329fb52911392d6085c11c5d5810c58c0c0ffd09345091dc23c260869e6bc05"}], 0xa8}}, {{&(0x7f00000004c0)=@x25, 0x80, &(0x7f0000001800)=[{&(0x7f0000000540)="f3ee83c8c49a7b973e42209279ae7e4412f54ec2fb62fb3a3ba92527", 0x1c}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="40bf90a5ecf3e212dcfed29dae470f3d28e71684e4af15b2d5f7e4431ca3bfced0aa7b07f6b1d0e0bf61ab8d9f4cf040482d3a7dbc924a6e797d2365d3c03db6ae62caf0a814132d6849f37f00b6cc13b0bd318b39c40c704509d108ed95f44703ae751c51e54d195008a53057e33eb4d8b2ede830a0259820297d857cb288f9d6a34d2ae1af3fb56057d94cf1c13416b0e2a5d9cd8abb1fc21b23aed5469ed15d6eba", 0xe6}, {&(0x7f0000001780)="d65c24ad0af317d310484293b6ee44192d99121dedbea4a4733ec6220818f2022dfc0682ed0fbaad86886db9790bdcfcacd23f74fb1b042000a238cba555617f2bb59cfc085a162d0d68476d561321edc272dd", 0x53}], 0x4, &(0x7f0000001840)=[{0xd8, 0x117, 0x5, "583974eab517f58bd7accd676ecea5c6f2b1de4852d4d1a04e731b04747139c211f590e87014a41ee1ecbc383bf74afeb9ee710f656ec6f27faecafc75ae42ca111b21ccfa0000000000005faf4ee4d477600a0bb35be0c487a307831f5ba67e8762c2e3a33b58977fad87ab3d6da5477bbae1fd3fd7e28b6d4ef8f6e28ecbbb3eef8541e11ee64bb40fdaf5690a3b91cb635ff1688287b083e53cb9740aab32546a1dc5b130d484c30dbfd482ce726f04327b80cf0cd9113fee383c133522a5093ba9"}, {0xd8, 0x116, 0xffffffff, "b90c656d308e1b1689ed436f2c4efa1c55ffee61f00c16e7a06be5d9096cc4f815f0b0069d3383117718dd191420c7bbdab94ad29652f9ce36654eef65e52fd24b16fff9d849cdfb8ba46ef16cb09f2ad504b063efce5a5eaf47ded119869263fda4c58d2486405ce64c5c1c87d35fb324f8dc8ea0b474b74e2eb14732c28789a52a14db7dc671d928cc48dc3500049b41c6e7545edda961a2ef01af8b1d10030bbb315c5aa626c0de1766505803b2341f76273b1c8d8bde24d2ccb67b32749e201529b76ca8"}, {0x60, 0x84, 0x30, "bf34ad5271683854c334a26e45aeceb8a29973efcd9fc5c9cbc6bb35f0d4b3c089553b21b126ef17c517a1252443d5483e29642729272ab168290d4f874476f9c2c5c50ada0dd8be04f351d228c7"}, {0x50, 0x116, 0x6, "3d4347c4bb134beb4cd5b4a8269be5886120acca0e0cd407525df083119e73aaa315116dfe22d47812067bc65887a8122cdcabe6bc7b2781d7efd8eae95f"}, {0x78, 0x3a, 0xa, "8a2de0578af3b5a489dde781a0e66bba514f27dda56b58901e6c3e3a4dfd6489c532de666500791544a4cfaa613478c69db0b17a01f1631db4ff8f49c61db0c245cbbbcbdec003238893fafc32d864984a81fc51d1a38096b3f1e1b66832316b44"}, {0x108, 0x1, 0x3, "c9e697afc93f60ad512dc0f7cac0c1caeb2d561b657d172a253745765371f9a3961b2f7a6b527af993b25d65be0d83b4f0ff1337c36b46450f73dfc0431f775ac2d6425c21b62d8c61be5ca341adc6dcd4fafb7b3b762e448f6ff14bfd18ca922d83501ec85683b500ac24779a5cbfff31b1dd43fc019afb3a0dc514a5727533b82f3ae6429497dde275eb81592aa603127b16e3c7fbeed189ca6589f38460b7f0e3932ff7950d3f586f680dc9c55199c13aeab9010d4a1d5e43f45bbd764e3f8a504df63cd2922d690bd3f2e6c6e3cfa4ae11986794f70f61c2e0c27ca346638ced8baad5488527a1183bdc8bf6e8461ef50f"}], 0x3e0}}], 0x7, 0x840) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) 618.791906ms ago: executing program 2 (id=7075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 419.08226ms ago: executing program 3 (id=7076): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r2, @ANYBLOB="010300000000000800030000000000000000", @ANYRES32=r3, @ANYBLOB="9c005a8098000180290002004e2d54512103123d203147194a33414d16362100124820002d10504e534038320b3103500800000014000500f7fffeff020005000800fcff0800cd0b140005000000020006000000090004000900ff0f05000700020000000500060001000000140003000300ff7f0b0009000400060005000900050007000100000014000500090094ba010005000100ec0102000500"], 0xb8}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) 340.681205ms ago: executing program 2 (id=7077): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1) socket(0x9, 0x800, 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="501000000206010100000000000000000c0000000c00078005001500010000000500010006000000050005000a001acb4dbd26000005000400000000000900020073797a43843410000c000300686173"], 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x34, &(0x7f0000000240)={&(0x7f0000000040)={0x1, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "5e3dba8ae862e81c"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}}, 0x40000) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x1, 0x767, 0xffffffff, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "35cf52530599b474"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x51) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r5, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r5, 0x4008586f, &(0x7f0000000180)={0xfffffff9, 0x3ff}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r6, 0x8931, &(0x7f0000000000)={'bond_slave_0\x00', @ifru_addrs=@nl=@unspec}) 320.303134ms ago: executing program 4 (id=7078): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmsg(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x20021) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b00)=@newchain={0x30, 0x1e, 0x1, 0x1, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x4044004) (async) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x7, @none, 0x399d, 0x1}, 0xe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r3}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="580ac4ff0000000071107600000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000240)={r0, &(0x7f0000000100)='memory.events\x00', 0x0, &(0x7f0000000140)={@_ha_fsid={[0x8, 0x7]}, {0xff, 0xffff, 0x0, 0x73a8}}, 0x3, &(0x7f0000000180), &(0x7f0000000200)=0x7}) getsockname(r4, &(0x7f0000000280)=@sco={0x1f, @none}, &(0x7f0000000300)=0x80) 270.299496ms ago: executing program 1 (id=7079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x840000000002, 0x3, 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @private=0xa010100}], 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1b8, 0x206, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0xffffffff, 0x0, 'tunl0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x1}, 0x1ea, 0xc0, 0x120, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket3={{0x28}, 0x1}, @common=@icmp={{0x28}, {0x12, "e07c", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x2, 0x3, 0x1, 0x2, 0x7], 0x2, 0x5}, {0x0, [0x3, 0x6f455bfb4ce26171, 0x6, 0x6, 0x2, 0x21debfafc4f76fce], 0x3}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xe2002454fb7b9fcc, 0xff, 'team0\x00', 'gre0\x00', {}, {0xff}, 0x8, 0x2, 0x5}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0xf9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100000a0900010073797a30000000000900030073617a30000000006c000000060a010400000000000000000100fffe08000b40000000003c0004803800018008000100636d70002c0002800800014000000004080002400000000010000380090001002a8e27e2fa00000008000140000000140900010073797a30"], 0xe0}}, 0x0) 104.011299ms ago: executing program 3 (id=7080): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}}, 0x88}, 0x1, 0x0, 0x0, 0x20040840}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="7c020000190001000000000000000000fe0700000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x27c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x70, 0x400, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xfff9, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x40, 0x2}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040094) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600c0a3500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002002228dc5300"], 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r8 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x541b, &(0x7f0000000240)={'sit0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000010180)=ANY=[@ANYBLOB="4c00004047000701feffffffffffffff017c0020380004804922c3c9", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x24048001}, 0x2000c000) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r10, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) syz_extract_tcp_res(&(0x7f0000000140), 0x2, 0x7fffffff) syz_extract_tcp_res(&(0x7f00000001c0), 0x4, 0x901) 102.666015ms ago: executing program 1 (id=7081): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000001b00), &(0x7f00000004c0)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc0000000}]}, 0xa0}, 0x1, 0xfffff000}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x84, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_MARK_MASK={0x8}, @CTA_LABELS_MASK={0x14, 0x17, [0x5, 0xffffffff, 0x1ff, 0x40]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 10.044815ms ago: executing program 2 (id=7082): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840000000a0601010000000000000000010000000900020073797a310000000005000100070000000800094000000008540008"], 0x84}}, 0x0) sendto$inet6(r0, &(0x7f0000000080)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}, {&(0x7f00000006c0)="2e826f42ebcfca23d29c3605dbb299f1884b78c57ef1f54b8d9dcc625e86c927919e47d4e14d59ff5e382b45b97fcd16ded33bd6706e091fd88af6", 0x3b}, {0x0}], 0x4, &(0x7f0000000a00)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004f80)="a5bb383d4f50927604", 0x9}], 0x1}}], 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840000000a0601010000000000000000010000000900020073797a310000000005000100070000000800094000000008540008"], 0x84}}, 0x0) (async) sendto$inet6(r0, &(0x7f0000000080)="046bf184b7b7f1a55a5a9c11a44b7193cf786d2f6e3e7d299a814d1a26591bf94e10", 0xfffffffffffffd33, 0x0, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}, {&(0x7f00000006c0)="2e826f42ebcfca23d29c3605dbb299f1884b78c57ef1f54b8d9dcc625e86c927919e47d4e14d59ff5e382b45b97fcd16ded33bd6706e091fd88af6", 0x3b}, {0x0}], 0x4, &(0x7f0000000a00)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004f80)="a5bb383d4f50927604", 0x9}], 0x1}}], 0x3, 0x10) (async) 0s ago: executing program 3 (id=7083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x78, 0xf, 0x8, 0x201, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x8}, [@generic="48de0550bb74f08dbf628f98aa7521279d0ea8058c34d85bc22d9b3bc818b0d9a17d01a20c68e0552902c74790c060aa7ded0a2ff8d392d373c535bd2eff3bda88beb4861fe787d9914dc6331271e96515f60124b631f46b7492c6424f2c58070b"]}, 0x78}, 0x1, 0x0, 0x0, 0x20000810}, 0x840) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xb940, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000140), &(0x7f00000001c0)=r3}, 0x20) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.3.5765'. [ 787.639278][T28680] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5765'. [ 787.639374][T28680] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5765'. [ 787.639484][T28680] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5765'. [ 787.639579][T28680] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5765'. [ 787.639675][T28680] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5765'. [ 787.639776][T28680] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5765'. [ 787.639872][T28680] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5765'. [ 788.081837][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 788.082458][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 788.303752][T28695] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 788.450072][T28698] netlink: 'syz.1.5769': attribute type 1 has an invalid length. [ 788.610394][T28698] 8021q: adding VLAN 0 to HW filter on device bond4 [ 789.440507][T28738] ip_tables: iptables: counters copy to user failed while replacing table [ 790.110583][T28767] sctp: [Deprecated]: syz.0.5785 (pid 28767) Use of int in max_burst socket option deprecated. [ 790.110583][T28767] Use struct sctp_assoc_value instead [ 790.268494][T28767] 8021q: adding VLAN 0 to HW filter on device bond6 [ 790.919902][T28784] xt_IDLETIMER: timeout value is zero [ 790.968430][ T30] audit: type=1107 audit(1790106989.779:18): pid=28786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=';' /yhԀKQ?k/^*,b,rėVqb~tffW0}f7' [ 791.089602][T28791] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 791.114119][T28784] xt_IDLETIMER: timeout value is zero [ 791.473959][T28807] bridge0: port 3(team0) entered blocking state [ 791.474420][T28807] bridge0: port 3(team0) entered disabled state [ 791.474787][T28807] team0: entered allmulticast mode [ 791.474805][T28807] team_slave_1: entered allmulticast mode [ 791.494874][T28807] team0: entered promiscuous mode [ 791.494895][T28807] team_slave_1: entered promiscuous mode [ 791.921139][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 792.355890][T28839] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 792.980317][T28855] __nla_validate_parse: 31 callbacks suppressed [ 792.980335][T28855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5809'. [ 794.242985][T28904] FAULT_INJECTION: forcing a failure. [ 794.242985][T28904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.243023][T28904] CPU: 0 UID: 0 PID: 28904 Comm: syz.4.5820 Not tainted syzkaller #0 PREEMPT(full) [ 794.243063][T28904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 794.243077][T28904] Call Trace: [ 794.243123][T28904] [ 794.243187][T28904] dump_stack_lvl+0xe8/0x150 [ 794.243315][T28904] should_fail_ex+0x410/0x560 [ 794.243399][T28904] _copy_from_user+0x2d/0xb0 [ 794.243493][T28904] ___sys_sendmsg+0x1c6/0x360 [ 794.243578][T28904] ? __lock_acquire+0x747/0x2de0 [ 794.243624][T28904] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.243651][T28904] ? kstrtouint+0x6e/0xe0 [ 794.243702][T28904] ? __fget_files+0x2a/0x420 [ 794.243744][T28904] ? __fget_files+0x3a2/0x420 [ 794.243774][T28904] __sys_sendmmsg+0x273/0x4d0 [ 794.243801][T28904] ? __pfx___sys_sendmmsg+0x10/0x10 [ 794.243835][T28904] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 794.243930][T28904] ? ksys_write+0x242/0x270 [ 794.243967][T28904] ? __pfx_ksys_write+0x10/0x10 [ 794.243999][T28904] __x64_sys_sendmmsg+0xa0/0xc0 [ 794.244023][T28904] do_syscall_64+0x166/0x520 [ 794.244143][T28904] ? trace_irq_disable+0x3b/0x140 [ 794.244178][T28904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.244210][T28904] ? clear_bhb_loop+0x70/0xc0 [ 794.244232][T28904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.244249][T28904] RIP: 0033:0x7fcce019e159 [ 794.244296][T28904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.244344][T28904] RSP: 002b:00007fcce1046028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 794.244391][T28904] RAX: ffffffffffffffda RBX: 00007fcce0426090 RCX: 00007fcce019e159 [ 794.244404][T28904] RDX: fffffffffffffd9e RSI: 000020000000a540 RDI: 0000000000000003 [ 794.244417][T28904] RBP: 00007fcce1046090 R08: 0000000000000000 R09: 0000000000000000 [ 794.244427][T28904] R10: 0000000004000041 R11: 0000000000000246 R12: 0000000000000001 [ 794.244438][T28904] R13: 00007fcce0426128 R14: 00007fcce0426090 R15: 00007ffdca565558 [ 794.244473][T28904] [ 794.429047][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ac5ec00: rx timeout, send abort [ 794.652905][T28907] veth0_to_hsr: mtu less than device minimum [ 794.765851][T28910] bond0: invalid NS target :: specified for addition [ 794.765879][T28910] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 794.817816][T27076] bond0: (slave bridge0): link status definitely down, disabling slave [ 794.864696][T27076] bond0: (slave netdevsim1): link status definitely down, disabling slave [ 794.870665][T28910] tipc: Enabling of bearer rejected, already enabled [ 794.916402][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad59c00: rx timeout, send abort [ 794.929307][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ac5ec00: abort rx timeout. Force session deactivation [ 795.416453][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad59c00: abort rx timeout. Force session deactivation [ 795.427443][T28936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5828'. [ 795.722704][ T6366] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 795.724518][T28948] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5833'. [ 795.724705][T28948] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5833'. [ 795.724874][T28948] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5833'. [ 795.725042][T28948] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5833'. [ 795.725207][T28948] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5833'. [ 795.725380][T28948] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5833'. [ 795.725558][T28948] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5833'. [ 795.725727][T28948] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5833'. [ 795.960459][T28942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 795.982698][T28955] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 796.379555][T28961] A link change request failed with some changes committed already. Interface 04rB may have been left with an inconsistent configuration, please check. [ 796.427126][T28967] FAULT_INJECTION: forcing a failure. [ 796.427126][T28967] name failslab, interval 1, probability 0, space 0, times 0 [ 796.427156][T28967] CPU: 0 UID: 0 PID: 28967 Comm: syz.0.5837 Not tainted syzkaller #0 PREEMPT(full) [ 796.427175][T28967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 796.427185][T28967] Call Trace: [ 796.427193][T28967] [ 796.427201][T28967] dump_stack_lvl+0xe8/0x150 [ 796.427232][T28967] should_fail_ex+0x410/0x560 [ 796.427256][T28967] ? __alloc_skb+0x1db/0x7a0 [ 796.427341][T28967] should_failslab+0xa8/0x100 [ 796.427386][T28967] ? __alloc_skb+0x1db/0x7a0 [ 796.427404][T28967] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 796.427436][T28967] ? __alloc_skb+0x18d/0x7a0 [ 796.427457][T28967] ? __alloc_skb+0x1db/0x7a0 [ 796.427483][T28967] __alloc_skb+0x1db/0x7a0 [ 796.427507][T28967] alloc_skb_with_frags+0xc6/0x760 [ 796.427560][T28967] ? __lock_acquire+0x747/0x2de0 [ 796.427586][T28967] sock_alloc_send_pskb+0x878/0x990 [ 796.427635][T28967] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 796.427665][T28967] ? j1939_sk_sendmsg+0x5c5/0x12d0 [ 796.427774][T28967] ? __local_bh_enable_ip+0xd6/0x140 [ 796.427816][T28967] j1939_sk_sendmsg+0x6ac/0x12d0 [ 796.427855][T28967] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 796.427883][T28967] ? apparmor_socket_sendmsg+0x98/0x360 [ 796.427946][T28967] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 796.427968][T28967] sock_sendmsg_nosec+0x13a/0x180 [ 796.427989][T28967] ____sys_sendmsg+0x54e/0x850 [ 796.428019][T28967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 796.428052][T28967] ? import_iovec+0x73/0xa0 [ 796.428077][T28967] ___sys_sendmsg+0x2a5/0x360 [ 796.428099][T28967] ? __lock_acquire+0x747/0x2de0 [ 796.428121][T28967] ? __pfx____sys_sendmsg+0x10/0x10 [ 796.428150][T28967] ? kstrtouint+0x6e/0xe0 [ 796.428203][T28967] ? __fget_files+0x2a/0x420 [ 796.428226][T28967] ? __fget_files+0x3a2/0x420 [ 796.428260][T28967] __sys_sendmmsg+0x273/0x4d0 [ 796.428289][T28967] ? __pfx___sys_sendmmsg+0x10/0x10 [ 796.428322][T28967] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 796.428360][T28967] ? ksys_write+0x242/0x270 [ 796.428395][T28967] ? __pfx_ksys_write+0x10/0x10 [ 796.428427][T28967] __x64_sys_sendmmsg+0xa0/0xc0 [ 796.428453][T28967] do_syscall_64+0x166/0x520 [ 796.428474][T28967] ? trace_irq_disable+0x3b/0x140 [ 796.428491][T28967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.428509][T28967] ? clear_bhb_loop+0x70/0xc0 [ 796.428532][T28967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.428550][T28967] RIP: 0033:0x7f409db9e159 [ 796.428567][T28967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.428580][T28967] RSP: 002b:00007f409ea84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 796.428600][T28967] RAX: ffffffffffffffda RBX: 00007f409de26090 RCX: 00007f409db9e159 [ 796.428613][T28967] RDX: fffffffffffffd9e RSI: 000020000000a540 RDI: 0000000000000003 [ 796.428625][T28967] RBP: 00007f409ea84090 R08: 0000000000000000 R09: 0000000000000000 [ 796.428636][T28967] R10: 0000000004000041 R11: 0000000000000246 R12: 0000000000000001 [ 796.428647][T28967] R13: 00007f409de26128 R14: 00007f409de26090 R15: 00007ffc7a03a3d8 [ 796.428677][T28967] [ 796.588113][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806883a400: rx timeout, send abort [ 797.085938][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806883a000: rx timeout, send abort [ 797.088166][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806883a400: abort rx timeout. Force session deactivation [ 797.493572][T28997] netlink: 'syz.1.5847': attribute type 1 has an invalid length. [ 797.585991][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806883a000: abort rx timeout. Force session deactivation [ 797.638040][T29004] netlink: 'syz.2.5848': attribute type 20 has an invalid length. [ 797.666538][T29004] netlink: 'syz.2.5848': attribute type 20 has an invalid length. [ 797.719958][T27081] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.741237][ T6366] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.742213][T16496] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.742249][T16496] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 798.164042][T29026] FAULT_INJECTION: forcing a failure. [ 798.164042][T29026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.164073][T29026] CPU: 1 UID: 0 PID: 29026 Comm: syz.3.5856 Not tainted syzkaller #0 PREEMPT(full) [ 798.164094][T29026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 798.164105][T29026] Call Trace: [ 798.164112][T29026] [ 798.164119][T29026] dump_stack_lvl+0xe8/0x150 [ 798.164150][T29026] should_fail_ex+0x410/0x560 [ 798.164175][T29026] _copy_from_user+0x2d/0xb0 [ 798.164199][T29026] kstrtouint_from_user+0xd6/0x180 [ 798.164222][T29026] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 798.164250][T29026] ? lock_acquire+0x115/0x350 [ 798.164274][T29026] proc_fail_nth_write+0x8e/0x210 [ 798.164336][T29026] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 798.164370][T29026] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 798.164397][T29026] vfs_write+0x296/0xba0 [ 798.164432][T29026] ? __pfx_vfs_write+0x10/0x10 [ 798.164460][T29026] ? __fget_files+0x2a/0x420 [ 798.164488][T29026] ? __fget_files+0x3a2/0x420 [ 798.164510][T29026] ? __fget_files+0x2a/0x420 [ 798.164543][T29026] ksys_write+0x150/0x270 [ 798.164572][T29026] ? __pfx_ksys_write+0x10/0x10 [ 798.164609][T29026] do_syscall_64+0x166/0x520 [ 798.164638][T29026] ? trace_irq_disable+0x3b/0x140 [ 798.164657][T29026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.164676][T29026] ? clear_bhb_loop+0x70/0xc0 [ 798.164697][T29026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.164715][T29026] RIP: 0033:0x7fe07535e98e [ 798.164733][T29026] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 798.164748][T29026] RSP: 002b:00007fe076294fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 798.164767][T29026] RAX: ffffffffffffffda RBX: 00007fe0762956c0 RCX: 00007fe07535e98e [ 798.164780][T29026] RDX: 0000000000000001 RSI: 00007fe0762950a0 RDI: 0000000000000005 [ 798.164790][T29026] RBP: 00007fe076295090 R08: 0000000000000000 R09: 0000000000000000 [ 798.164800][T29026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.164810][T29026] R13: 00007fe075626038 R14: 00007fe075625fa0 R15: 00007ffe5fe527e8 [ 798.164841][T29026] [ 798.403713][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803671cc00: rx timeout, send abort [ 798.904364][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803671cc00: abort rx timeout. Force session deactivation [ 798.904508][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803671d000: rx timeout, send abort [ 799.319371][T29063] __nla_validate_parse: 32 callbacks suppressed [ 799.319392][T29063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5864'. [ 799.405087][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803671d000: abort rx timeout. Force session deactivation [ 799.526799][T29068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 799.832314][T27084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.832343][T27084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.358697][T29099] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.5874'. [ 800.358723][T29099] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.5874'. [ 800.529684][T29101] netlink: 304 bytes leftover after parsing attributes in process `syz.4.5876'. [ 800.624086][T29105] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5877'. [ 800.720668][T29112] netlink: 'syz.2.5879': attribute type 4 has an invalid length. [ 800.723564][T29112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5879'. [ 800.862410][T29122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5883'. [ 800.862516][T29122] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5883'. [ 800.989537][T29128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5885'. [ 801.107625][T29131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5885'. [ 801.775058][T29164] netlink: 'syz.2.5892': attribute type 1 has an invalid length. [ 801.874086][T29164] 8021q: adding VLAN 0 to HW filter on device bond10 [ 802.423515][T29195] netlink: 'syz.1.5900': attribute type 4 has an invalid length. [ 803.009020][T29218] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 803.237615][T29228] sctp: [Deprecated]: syz.3.5910 (pid 29228) Use of int in maxseg socket option. [ 803.237615][T29228] Use struct sctp_assoc_value instead [ 803.458535][ C1] vcan0: j1939_tp_rxtimer: 0xffff888074038c00: rx timeout, send abort [ 803.919281][T29252] ip_tables: iptables: counters copy to user failed while replacing table [ 803.939421][T29252] netlink: 'syz.1.5919': attribute type 1 has an invalid length. [ 803.958585][ C1] vcan0: j1939_tp_rxtimer: 0xffff888074038c00: abort rx timeout. Force session deactivation [ 803.958778][ C1] vcan0: j1939_tp_rxtimer: 0xffff888074039000: rx timeout, send abort [ 804.458816][ C1] vcan0: j1939_tp_rxtimer: 0xffff888074039000: abort rx timeout. Force session deactivation [ 804.668727][T29277] __nla_validate_parse: 6 callbacks suppressed [ 804.668749][T29277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5926'. [ 804.668763][T29277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5926'. [ 804.703009][T29277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5926'. [ 804.703032][T29277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5926'. [ 805.082349][T29291] pim6reg: entered allmulticast mode [ 805.083571][T29291] pim6reg: left allmulticast mode [ 805.332565][T29300] netlink: 'syz.3.5936': attribute type 3 has an invalid length. [ 805.332773][T29300] netlink: 'syz.3.5936': attribute type 3 has an invalid length. [ 805.462072][T29312] netlink: 'syz.3.5936': attribute type 3 has an invalid length. [ 805.462266][T29312] netlink: 'syz.3.5936': attribute type 3 has an invalid length. [ 805.499205][T26074] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 805.505580][T26074] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 805.508444][T26074] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 805.512818][T26074] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 805.548049][T26074] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 806.275440][T29342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5941'. [ 806.521029][T29351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5942'. [ 806.596047][T29352] netlink: 'syz.3.5942': attribute type 16 has an invalid length. [ 807.255373][T29374] netlink: 'syz.2.5949': attribute type 1 has an invalid length. [ 807.349664][T29381] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5949'. [ 807.376479][T29374] bond11: entered promiscuous mode [ 807.376869][T29374] 8021q: adding VLAN 0 to HW filter on device bond11 [ 807.601868][ T4935] Bluetooth: hci0: command tx timeout [ 807.758081][T29310] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.758307][T29310] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.758437][T29310] bridge_slave_0: entered allmulticast mode [ 807.760137][T29310] bridge_slave_0: entered promiscuous mode [ 807.774851][T29310] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.775077][T29310] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.775204][T29310] bridge_slave_1: entered allmulticast mode [ 807.779747][T29310] bridge_slave_1: entered promiscuous mode [ 807.823027][T29310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.827164][T29310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.866901][T29310] team0: Port device team_slave_0 added [ 807.870469][T29310] team0: Port device team_slave_1 added [ 807.908846][T29310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.908863][T29310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.908992][T29310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.912474][T29310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.912487][T29310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.912508][T29310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 807.988215][T29310] hsr_slave_0: entered promiscuous mode [ 807.995203][T29310] hsr_slave_1: entered promiscuous mode [ 807.996127][T29310] debugfs: 'hsr0' already exists in 'hsr' [ 807.996144][T29310] Cannot create hsr debugfs directory [ 808.335580][T29310] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.335614][T29310] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.513050][T29310] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.513084][T29310] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.619112][T29310] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.626311][T29310] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.692173][T29310] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.692206][T29310] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.143756][T29418] bridge_slave_1: entered promiscuous mode [ 809.262284][T29345] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 809.338548][T29310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 809.452565][T29310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 809.453774][T29310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 809.492367][T29310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 809.497132][T29310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 809.560321][T29310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 809.572346][T29310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 809.603810][T29310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 809.681704][ T4935] Bluetooth: hci0: command tx timeout [ 809.688190][T29426] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.5956'. [ 810.036910][T29452] netlink: 'syz.0.5960': attribute type 1 has an invalid length. [ 810.036930][T29452] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5960'. [ 810.039424][T29451] netlink: 'syz.0.5960': attribute type 1 has an invalid length. [ 810.039440][T29451] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5960'. [ 810.107282][T29310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.332346][T29310] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.356123][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.356226][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.372469][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.372566][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.706416][T29472] netlink: 'syz.2.5967': attribute type 17 has an invalid length. [ 810.706438][T29472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5967'. [ 810.706469][T29472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5967'. [ 810.751711][T29477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5968'. [ 810.778354][T29472] gretap0: entered promiscuous mode [ 810.804914][T29472] gretap0: left promiscuous mode [ 811.096021][T29492] ip_tables: iptables: counters copy to user failed while replacing table [ 811.497604][T29501] veth0_to_bond: entered allmulticast mode [ 811.614636][T29515] Bluetooth: MGMT ver 1.23 [ 811.705608][T29515] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5976'. [ 811.764372][ T4935] Bluetooth: hci0: command tx timeout [ 811.878634][T29524] sctp: [Deprecated]: syz.1.5980 (pid 29524) Use of struct sctp_assoc_value in delayed_ack socket option. [ 811.878634][T29524] Use struct sctp_sack_info instead [ 811.898476][T29524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.294068][T29310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.607084][T29548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5986'. [ 812.650494][T29552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5987'. [ 812.676207][T29552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5987'. [ 812.870020][T29564] x_tables: duplicate underflow at hook 2 [ 813.300030][T29310] veth0_vlan: entered promiscuous mode [ 813.344835][T29310] veth1_vlan: entered promiscuous mode [ 813.473225][T29310] veth0_macvtap: entered promiscuous mode [ 813.486475][T29310] veth1_macvtap: entered promiscuous mode [ 813.564986][T29310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.637593][T29310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.692112][T25551] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.692987][T25551] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.693024][T25551] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.693055][T25551] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.842663][ T4935] Bluetooth: hci0: command tx timeout [ 814.122341][T29652] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 814.160097][T29560] workqueue: Failed to create a rescuer kthread for wq "nfc24_nci_tx_wq": -EINTR [ 814.418895][ T6366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.418915][ T6366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.668748][T29657] syzkaller1: entered promiscuous mode [ 814.668769][T29657] syzkaller1: entered allmulticast mode [ 814.686129][ T6366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.686149][ T6366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.961346][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 815.257134][T29675] netlink: 'syz.1.5998': attribute type 1 has an invalid length. [ 815.365225][T29681] __nla_validate_parse: 2 callbacks suppressed [ 815.365246][T29681] netlink: 4384 bytes leftover after parsing attributes in process `syz.2.6000'. [ 815.440661][T29681] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6000'. [ 815.445535][T29681] netlink: 'syz.2.6000': attribute type 8 has an invalid length. [ 815.702040][T29687] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6002'. [ 815.891458][T29685] wireguard: wg2: Could not create IPv4 socket [ 816.177377][T26074] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 816.198372][T26074] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 816.199292][T26074] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 816.200665][T26074] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 816.236148][T26074] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 816.620381][T29717] netlink: 'syz.1.6011': attribute type 2 has an invalid length. [ 816.713566][T29718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6011'. [ 817.207971][T27084] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.208006][T27084] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.590112][T27084] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.597654][T27084] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.891931][T27084] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.891964][T27084] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.908741][T29749] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 818.305336][T27084] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.305368][T27084] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.321933][ T4935] Bluetooth: hci5: command tx timeout [ 819.918776][T29790] team0: Device ipvlan0 failed to register rx_handler [ 820.389316][T27084] pimreg3: left allmulticast mode [ 820.406257][ T4935] Bluetooth: hci5: command tx timeout [ 820.624505][T29817] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6036'. [ 821.700174][T27084] bond5 (unregistering): (slave geneve3): Releasing active interface [ 821.834632][T27084] bond4 (unregistering): (slave bridge0): Releasing active interface [ 821.879428][T27084] bond0 (unregistering): Released all slaves [ 821.888992][T27084] bond1 (unregistering): Released all slaves [ 821.910274][T27084] bond2 (unregistering): Released all slaves [ 821.928236][T27084] bond3 (unregistering): Released all slaves [ 821.957787][T27084] bond4 (unregistering): Released all slaves [ 821.972569][T27084] bond5 (unregistering): Released all slaves [ 822.005490][T27084] bond6 (unregistering): Released all slaves [ 822.049633][T29817] veth2: entered promiscuous mode [ 822.049655][T29817] veth2: entered allmulticast mode [ 822.090058][T29824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6036'. [ 822.134107][T29801] syz_tun: entered promiscuous mode [ 822.407705][T29801] veth1_macvtap: entered promiscuous mode [ 822.482382][ T4935] Bluetooth: hci5: command tx timeout [ 822.496885][T29801] erspan0: entered promiscuous mode [ 822.657829][T29801] 8021q: adding VLAN 0 to HW filter on device bond6 [ 822.674991][T29801] 8021q: adding VLAN 0 to HW filter on device bond7 [ 822.678806][T29801] 8021q: adding VLAN 0 to HW filter on device bond9 [ 822.727121][T29854] SET target dimension over the limit! [ 822.976170][T16496] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.976262][T16496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.012228][T29866] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 823.064761][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 823.157381][T27084] ovs-dp0: left promiscuous mode [ 823.311517][T29871] ip_tables: iptables: counters copy to user failed while replacing table [ 823.369268][T29873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6046'. [ 823.420598][ T4935] block nbd3: Receive control failed (result -107) [ 823.462757][T29876] ip_tables: iptables: counters copy to user failed while replacing table [ 823.466580][T29874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6046'. [ 823.597450][ T4935] block nbd4: Receive control failed (result -32) [ 823.646252][T29882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6048'. [ 823.646289][T29882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6048'. [ 823.646301][T29882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6048'. [ 823.694372][T29870] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6047'. [ 823.744203][T27084] tipc: Disabling bearer [ 823.770312][T27084] tipc: Left network mode [ 823.868840][T29695] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.870080][T29695] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.870401][T29695] bridge_slave_0: entered allmulticast mode [ 823.898135][T29695] bridge_slave_0: entered promiscuous mode [ 823.924564][T29695] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.924982][T29695] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.925292][T29695] bridge_slave_1: entered allmulticast mode [ 823.981905][T29695] bridge_slave_1: entered promiscuous mode [ 824.077897][T29695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.473329][T29922] Bluetooth: hci0: unsupported parameter 5135 [ 824.473350][T29922] Bluetooth: hci0: unsupported parameter 8192 [ 824.473361][T29922] Bluetooth: hci0: unsupported parameter 5135 [ 824.473372][T29922] Bluetooth: hci0: unsupported parameter 8192 [ 824.514004][T29924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6053'. [ 824.563671][ T4935] Bluetooth: hci5: command tx timeout [ 824.595904][T29926] Cannot find add_set index 4 as target [ 825.487910][T29695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.584520][T29922] syzkaller0: left promiscuous mode [ 825.584630][T29922] syzkaller0: left allmulticast mode [ 825.675458][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 825.847471][T29695] team0: Port device team_slave_0 added [ 825.936355][T29942] sctp: [Deprecated]: syz.4.6057 (pid 29942) Use of int in maxseg socket option. [ 825.936355][T29942] Use struct sctp_assoc_value instead [ 826.199096][T29695] team0: Port device team_slave_1 added [ 826.199960][T29938] veth0: entered promiscuous mode [ 826.276208][T29938] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 826.454238][T29695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.454256][T29695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.454277][T29695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.456341][T29695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.456355][T29695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.456378][T29695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.479760][T29937] veth0: left promiscuous mode [ 826.547848][T29695] hsr_slave_0: entered promiscuous mode [ 826.550039][T29695] hsr_slave_1: entered promiscuous mode [ 826.555899][T29695] debugfs: 'hsr0' already exists in 'hsr' [ 826.555919][T29695] Cannot create hsr debugfs directory [ 826.856113][T29974] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6061'. [ 826.915189][T29974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 826.989532][T27084] hsr_slave_0: left promiscuous mode [ 826.996729][T27084] hsr_slave_1: left promiscuous mode [ 827.244964][T29986] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.6062'. [ 827.296622][T27084] veth1_macvtap: left promiscuous mode [ 827.303279][T27084] veth0_macvtap: left promiscuous mode [ 827.303401][T27084] veth1_vlan: left promiscuous mode [ 827.303461][T27084] veth0_vlan: left promiscuous mode [ 827.326522][T29990] netlink: 'syz.2.6062': attribute type 11 has an invalid length. [ 827.626075][T30001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6067'. [ 827.626100][T30001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6067'. [ 829.024270][T30001] vlan0: entered promiscuous mode [ 829.036632][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 829.161694][T16496] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 829.325935][T30022] netlink: 'syz.3.6071': attribute type 21 has an invalid length. [ 829.325958][T30022] IPv6: NLM_F_CREATE should be specified when creating new route [ 829.482458][T30028] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6073'. [ 829.842943][T30038] rB: entered promiscuous mode [ 829.879657][T27084] IPVS: stop unused estimator thread 0... [ 829.897838][T30038] netlink: 'syz.2.6076': attribute type 2 has an invalid length. [ 829.897861][T30038] A link change request failed with some changes committed already. Interface 04rB may have been left with an inconsistent configuration, please check. [ 830.527278][T30064] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6082'. [ 830.527325][T30064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6082'. [ 830.527336][T30064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6082'. [ 830.560248][T30049] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6079'. [ 830.671227][T30061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6081'. [ 832.893884][T30140] ip6_vti0: entered promiscuous mode [ 832.930390][T30140] __nla_validate_parse: 3 callbacks suppressed [ 832.930411][T30140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6095'. [ 833.127579][T29695] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 833.215193][T29695] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 833.216313][T29695] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 833.263203][T29695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 833.267808][T29695] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 833.310178][T29695] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 833.330500][T29695] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 833.378154][T29695] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 833.456520][T30150] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6098'. [ 833.459343][T30162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6099'. [ 833.459377][T30162] netlink: 'syz.3.6099': attribute type 5 has an invalid length. [ 833.459392][T30162] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6099'. [ 833.576719][T30168] netlink: 'syz.4.6100': attribute type 11 has an invalid length. [ 833.636210][T30162] geneve3: entered promiscuous mode [ 833.636386][T30162] geneve3: entered allmulticast mode [ 833.663520][ T6366] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 833.685934][ T6363] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 833.690763][T16496] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 833.860547][T30174] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6101'. [ 834.048397][T30185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6103'. [ 834.260060][T29695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.365609][T29695] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.404310][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.404413][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.463056][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.463160][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.799716][T30212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6108'. [ 834.997535][T30217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 836.076564][T29695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.251147][T26074] Bluetooth: hci3: command 0x0405 tx timeout [ 836.252672][T29695] veth0_vlan: entered promiscuous mode [ 836.285775][T29695] veth1_vlan: entered promiscuous mode [ 836.368384][T29695] veth0_macvtap: entered promiscuous mode [ 836.380230][T29695] veth1_macvtap: entered promiscuous mode [ 836.496665][T29695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.610378][T29695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.627066][T30281] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6119'. [ 836.663124][T30281] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6119'. [ 836.722162][T30175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 836.851720][ T6363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.021645][T16496] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.026727][T16498] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.072633][ T6363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.758815][T30319] syzkaller0: entered promiscuous mode [ 837.758837][T30319] syzkaller0: entered allmulticast mode [ 837.839389][T25548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.839410][T25548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.362810][T30345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6127'. [ 838.362843][T30345] netlink: 'syz.3.6127': attribute type 5 has an invalid length. [ 838.362856][T30345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6127'. [ 843.215354][T25548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.215376][T25548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.493350][T30365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6130'. [ 843.588003][T30364] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.6129'. [ 843.588130][T30364] 0XD: renamed from gretap0 [ 843.588876][T30362] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.6129'. [ 843.624467][T30364] 0XD: entered allmulticast mode [ 843.628888][T30362] 1XD: renamed from 00XD (while UP) [ 843.921208][T30376] syzkaller0: entered promiscuous mode [ 843.922341][T30376] syzkaller0: entered allmulticast mode [ 843.929925][T30376] 0: reclassify loop, rule prio 0, protocol 700 [ 844.127714][T26074] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 844.139653][T26074] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 844.167538][T26074] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 844.195375][T26074] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 844.209771][T26074] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 844.609504][T30392] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6135'. [ 844.677651][T30391] netlink: 'syz.0.6137': attribute type 15 has an invalid length. [ 844.719716][T30396] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6138'. [ 844.837773][T30391] netlink: 'syz.0.6137': attribute type 15 has an invalid length. [ 844.841400][T27082] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 844.841616][T27082] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 844.841648][T27082] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 844.841677][T27082] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 845.099230][T30410] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6140'. [ 845.310430][T30410] syzkaller0: entered promiscuous mode [ 845.310454][T30410] syzkaller0: entered allmulticast mode [ 845.508638][T27076] tipc: Subscription rejected, illegal request [ 845.771490][T30434] nbd: must specify at least one socket [ 845.779219][T30436] nbd: must specify at least one socket [ 846.245662][ T4935] Bluetooth: hci2: command tx timeout [ 846.356225][T30458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6149'. [ 848.336724][ T4935] Bluetooth: hci2: command tx timeout [ 850.413034][ T4935] Bluetooth: hci2: command tx timeout [ 850.846089][T30460] veth1_vlan: entered promiscuous mode [ 850.846211][T30460] macvlan0: entered promiscuous mode [ 851.204961][T30471] syzkaller0: entered promiscuous mode [ 851.204985][T30471] syzkaller0: entered allmulticast mode [ 851.425156][T30479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6155'. [ 851.425183][T30479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6155'. [ 851.435693][T30483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6155'. [ 851.435719][T30483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6155'. [ 851.690241][T30489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6156'. [ 851.690268][T30489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6156'. [ 852.491749][ T4935] Bluetooth: hci2: command tx timeout [ 852.726857][T30537] openvswitch: netlink: Multiple metadata blocks provided [ 852.772527][T30379] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.773021][T30379] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.773586][T30379] bridge_slave_0: entered allmulticast mode [ 852.780069][T30379] bridge_slave_0: entered promiscuous mode [ 852.836002][T30379] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.836086][T30379] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.836225][T30379] bridge_slave_1: entered allmulticast mode [ 852.841050][T30379] bridge_slave_1: entered promiscuous mode [ 853.256645][T30379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.356906][T30379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.545166][T30379] team0: Port device team_slave_0 added [ 853.561518][T30379] team0: Port device team_slave_1 added [ 853.609664][T30558] ip_tables: iptables: counters copy to user failed while replacing table [ 853.679051][T30379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.679068][T30379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.679092][T30379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.690445][T30379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.690462][T30379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.690485][T30379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.932557][T30379] hsr_slave_0: entered promiscuous mode [ 853.936830][T30379] hsr_slave_1: entered promiscuous mode [ 853.937493][T30379] debugfs: 'hsr0' already exists in 'hsr' [ 853.937510][T30379] Cannot create hsr debugfs directory [ 854.100264][T30569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6179'. [ 854.640943][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 854.644739][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.009349][T30600] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6188'. [ 855.009377][T30600] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6188'. [ 855.295798][T30379] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.295831][T30379] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.295851][T30379] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 855.298967][T30614] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6190'. [ 855.495142][T30379] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.495177][T30379] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.495201][T30379] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 855.836180][T30379] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.836210][T30379] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.836230][T30379] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 855.937913][ T4935] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 855.939908][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 856.008552][T30634] Cannot find del_set index 4 as target [ 856.533640][T30652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 856.540210][T30379] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 856.586787][T30379] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 856.591229][T30379] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 856.627230][T30379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 856.637050][T30379] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 856.696012][T30379] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 856.697082][T30379] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 856.737483][T30379] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 856.770464][T30650] __nla_validate_parse: 6 callbacks suppressed [ 856.770486][T30650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6198'. [ 857.277685][T30686] netlink: 'syz.1.6206': attribute type 10 has an invalid length. [ 857.277707][T30686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6206'. [ 857.308543][T30379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.310337][T30687] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6204'. [ 857.310361][T30687] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6204'. [ 857.395765][T30379] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.444535][T27081] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.444628][T27081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.468043][T30690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6207'. [ 857.473049][T16496] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.473180][T16496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.708922][T30694] bond1: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 857.753895][T30694] bond1 (unregistering): Released all slaves [ 857.917371][T30379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 858.205989][T30711] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6213'. [ 858.714295][T30734] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 859.197388][T30379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.468196][T30379] veth0_vlan: entered promiscuous mode [ 859.498541][T30379] veth1_vlan: entered promiscuous mode [ 859.668756][T30379] veth0_macvtap: entered promiscuous mode [ 859.697866][T30761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 859.705517][T30379] veth1_macvtap: entered promiscuous mode [ 859.849609][T30379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.874482][T30379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.934412][T16496] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.934603][T16496] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.073595][T27081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.084300][T16498] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.369871][T30776] netlink: 'syz.1.6233': attribute type 11 has an invalid length. [ 860.369892][T30776] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6233'. [ 860.399044][T27081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.399066][T27081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.436383][T30774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6231'. [ 860.439093][T30772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6231'. [ 860.449346][T30774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6231'. [ 860.583002][ T6363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.583026][ T6363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.713293][T30793] netlink: 'syz.1.6236': attribute type 7 has an invalid length. [ 860.852945][T30797] netlink: 'syz.2.6237': attribute type 25 has an invalid length. [ 861.369677][T30806] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 861.370116][T30806] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 861.848711][ T4935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 861.870613][ T4935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 861.885549][ T4935] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 861.911316][ T4935] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 861.913524][ T4935] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 862.069662][T18424] syz_tun (unregistering): left allmulticast mode [ 862.318692][T30831] __nla_validate_parse: 33 callbacks suppressed [ 862.318714][T30831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6246'. [ 862.338404][T30831] Bluetooth: hci0: unsupported parameter 5135 [ 862.338426][T30831] Bluetooth: hci0: unsupported parameter 8192 [ 862.338437][T30831] Bluetooth: hci0: unsupported parameter 5135 [ 862.338448][T30831] Bluetooth: hci0: unsupported parameter 8192 [ 863.144727][T30850] ip6gre1: entered promiscuous mode [ 863.144750][T30850] ip6gre1: entered allmulticast mode [ 863.868455][T30873] lo: entered promiscuous mode [ 863.886269][T30873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 863.947593][T30876] netlink: 'syz.2.6259': attribute type 1 has an invalid length. [ 864.002617][T26074] Bluetooth: hci4: command tx timeout [ 864.098317][T30876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6259'. [ 864.130202][T30878] bridge1: entered promiscuous mode [ 864.130224][T30878] bridge1: entered allmulticast mode [ 864.150042][T30878] team0: Port device bridge1 added [ 864.154809][T30887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6259'. [ 864.156899][T30885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6261'. [ 864.262435][T30874] 8021q: adding VLAN 0 to HW filter on device bond13 [ 864.268845][T30874] bond12: (slave bond13): making interface the new active one [ 864.270403][T30874] bond12: (slave bond13): Enslaving as an active interface with an up link [ 864.272818][T30879] batman_adv: batadv0: Adding interface: veth0 [ 864.272832][T30879] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.272855][T30879] batman_adv: batadv0: Interface activated: veth0 [ 864.274982][T30883] bridge0: port 3(team0) entered blocking state [ 864.275978][T30883] bridge0: port 3(team0) entered disabled state [ 864.276262][T30883] team0: entered allmulticast mode [ 864.276277][T30883] team_slave_0: entered allmulticast mode [ 864.276592][T30883] team_slave_1: entered allmulticast mode [ 864.319049][T30883] team0: entered promiscuous mode [ 864.321740][T30883] team_slave_0: entered promiscuous mode [ 864.322534][T30883] team_slave_1: entered promiscuous mode [ 864.327658][T30883] bridge0: port 3(team0) entered blocking state [ 864.327741][T30883] bridge0: port 3(team0) entered forwarding state [ 864.446329][T30876] 8021q: adding VLAN 0 to HW filter on device bond12 [ 864.485646][T30885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.485672][T30885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.590301][T30892] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6263'. [ 864.692638][T30885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 864.692662][T30885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.693849][T30885] batman_adv: batadv0: Interface deactivated: veth0 [ 864.693866][T30885] batman_adv: batadv0: Removing interface: veth0 [ 864.699433][T30895] netlink: 'syz.2.6264': attribute type 7 has an invalid length. [ 864.983915][T30900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6265'. [ 864.983950][T30900] netlink: 'syz.3.6265': attribute type 10 has an invalid length. [ 864.983965][T30900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6265'. [ 865.333735][T30906] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 865.335333][T30906] bond1 (unregistering): Released all slaves [ 865.423924][T30810] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.424135][T30810] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.424278][T30810] bridge_slave_0: entered allmulticast mode [ 865.426257][T30810] bridge_slave_0: entered promiscuous mode [ 865.475445][T30810] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.475545][T30810] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.475715][T30810] bridge_slave_1: entered allmulticast mode [ 865.477316][T30810] bridge_slave_1: entered promiscuous mode [ 865.567033][T30918] netlink: 'syz.3.6271': attribute type 4 has an invalid length. [ 865.637954][T30810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.676151][T30810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.895815][T30924] netlink: 'syz.0.6270': attribute type 20 has an invalid length. [ 865.895836][T30924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6270'. [ 865.896072][T30924] netlink: 'syz.0.6270': attribute type 20 has an invalid length. [ 865.896086][T30924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6270'. [ 865.908477][T30928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6273'. [ 866.020839][T30810] team0: Port device team_slave_0 added [ 866.055503][T30810] team0: Port device team_slave_1 added [ 866.082403][T26074] Bluetooth: hci4: command tx timeout [ 866.376621][T30810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.376638][T30810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.376660][T30810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.380170][T30810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.380185][T30810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.380207][T30810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.605971][T30941] 0{X: renamed from gretap0 (while UP) [ 866.656456][T30941] 0{X: entered allmulticast mode [ 866.656884][T30941] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 866.817611][T30810] hsr_slave_0: entered promiscuous mode [ 866.819389][T30810] hsr_slave_1: entered promiscuous mode [ 866.838380][T30810] debugfs: 'hsr0' already exists in 'hsr' [ 866.838403][T30810] Cannot create hsr debugfs directory [ 867.176282][T30954] netlink: 'syz.0.6281': attribute type 11 has an invalid length. [ 867.323881][T30810] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.451978][T30963] __nla_validate_parse: 2 callbacks suppressed [ 867.451998][T30963] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6283'. [ 867.506449][T30965] ip_tables: iptables: counters copy to user failed while replacing table [ 867.536386][T30963] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6283'. [ 867.578566][T30967] netlink: 'syz.3.6285': attribute type 10 has an invalid length. [ 867.806378][T30810] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.877738][T30967] veth1_macvtap: left promiscuous mode [ 867.897518][T30967] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 868.116681][T30810] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.166501][T26074] Bluetooth: hci4: command tx timeout [ 868.228640][T16498] IPVS: starting estimator thread 0... [ 868.350629][T30988] IPVS: using max 30 ests per chain, 72000 per kthread [ 868.543466][T30810] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.594602][T30993] IPVS: lc: TCP 127.0.0.1:5376 - no destination available [ 868.605501][T16496] IPVS: starting estimator thread 0... [ 868.692770][T30995] IPVS: using max 29 ests per chain, 69600 per kthread [ 868.717036][T30973] 0{X: left allmulticast mode [ 868.847549][T31002] netlink: 'syz.3.6292': attribute type 1 has an invalid length. [ 869.039279][T31004] netlink: 'syz.3.6292': attribute type 10 has an invalid length. [ 869.039302][T31004] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6292'. [ 869.039574][T31004] dummy0: entered promiscuous mode [ 869.453521][T30810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 869.469575][T30810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 869.477965][T30810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 869.494744][T30810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 869.498675][T30810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 869.516420][T30810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 869.518104][T30810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 869.539842][T30810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 869.543845][T31015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6295'. [ 869.789781][T31015] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 869.789876][T31015] syzkaller1: Refused to change device type [ 869.857129][T31034] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6299'. [ 870.079392][T31037] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6300'. [ 870.241878][T26074] Bluetooth: hci4: command tx timeout [ 870.287272][T31046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6303'. [ 870.337483][T31044] sctp: [Deprecated]: syz.0.6302 (pid 31044) Use of int in maxseg socket option. [ 870.337483][T31044] Use struct sctp_assoc_value instead [ 870.366873][T30810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.487863][T30810] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.578425][T31053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6304'. [ 870.633993][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.634098][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.642381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.690271][T27076] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.690383][T27076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.776995][T31058] tipc: Enabling of bearer rejected, failed to enable media [ 870.777297][T31060] : renamed from virt_wifi0 [ 871.539354][T31078] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 871.594984][T31086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6313'. [ 872.011942][T31095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6316'. [ 872.658318][T30810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.996538][T31125] netlink: 'syz.0.6324': attribute type 1 has an invalid length. [ 873.067908][T30810] veth0_vlan: entered promiscuous mode [ 873.123878][T30810] veth1_vlan: entered promiscuous mode [ 873.239179][T31122] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6323'. [ 873.268050][T30810] veth0_macvtap: entered promiscuous mode [ 873.283499][T30810] veth1_macvtap: entered promiscuous mode [ 873.329976][T30810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.354468][T30810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.438046][T27082] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.438132][T27081] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.469865][T31130] xt_socket: unknown flags 0xc [ 873.583881][ T6366] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.596316][ T6366] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.716834][T16496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.716925][T16496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.926752][T31135] lo: left promiscuous mode [ 873.986196][T31138] wlan1: mtu less than device minimum [ 873.987189][ T6363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.987207][ T6363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.761130][T31164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6333'. [ 874.878800][ T4935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 874.890036][ T4935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 874.897734][ T4935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 874.898515][ T4935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 874.899079][ T4935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 875.316341][T31173] netlink: 'syz.3.6335': attribute type 4 has an invalid length. [ 875.672692][T31181] netlink: 'syz.4.6338': attribute type 8 has an invalid length. [ 875.672953][T31181] sch_fq: defrate 0 ignored. [ 875.674709][T31181] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6338'. [ 875.674732][T31181] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6338'. [ 876.078238][T31193] bond1: option min_links: invalid value (18446744073709551614) [ 876.078263][T31193] bond1: option min_links: allowed values 0 - 2147483647 [ 876.080020][T31193] bond1 (unregistering): Released all slaves [ 876.107250][T31204] x_tables: duplicate underflow at hook 2 [ 876.139015][T31195] tipc: Started in network mode [ 876.139044][T31195] tipc: Node identity ac1414aa, cluster identity 4711 [ 876.140128][T31195] tipc: New replicast peer: 172.20.20.187 [ 876.145037][T31195] tipc: Enabled bearer , priority 10 [ 876.435255][T31210] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 876.555308][T16496] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.555346][T16496] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.555368][T16496] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 876.628438][T31215] pim6reg: entered allmulticast mode [ 876.937481][T31220] netlink: 'syz.4.6349': attribute type 83 has an invalid length. [ 876.968662][T26074] Bluetooth: hci3: command tx timeout [ 877.033449][T16496] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.033484][T16496] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.033507][T16496] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 877.175398][T31229] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6350'. [ 877.237844][T31228] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6350'. [ 877.286304][T27143] tipc: Node number set to 2886997162 [ 877.289072][T31234] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6352'. [ 877.479011][T16496] bond0: (slave netdevsim1): Releasing backup interface [ 877.526316][T16496] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.526349][T16496] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.526373][T16496] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 877.692281][T31244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6356'. [ 877.723529][T31244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6356'. [ 877.814704][T16496] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.814737][T16496] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.814761][T16496] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 878.166930][T31265] netlink: 'syz.4.6361': attribute type 1 has an invalid length. [ 878.186133][T31266] netlink: 'syz.1.6360': attribute type 1 has an invalid length. [ 878.201844][ T6363] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.601890][T26074] Bluetooth: hci2: ISO packet for unknown connection handle 2723 [ 878.640394][T31281] bridge3: entered promiscuous mode [ 878.663364][T31281] bond1: (slave bridge3): making interface the new active one [ 878.666691][T31281] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 878.696702][ T6363] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.696865][T27081] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.696902][T27081] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.712501][T31284] bridge4: entered promiscuous mode [ 878.734153][T31284] bond1: (slave bridge4): Enslaving as a backup interface with an up link [ 879.042050][T26074] Bluetooth: hci3: command tx timeout [ 879.296825][T31166] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.296982][T31166] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.297166][T31166] bridge_slave_0: entered allmulticast mode [ 879.299207][T31166] bridge_slave_0: entered promiscuous mode [ 879.303036][T31166] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.303193][T31166] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.303578][T31166] bridge_slave_1: entered allmulticast mode [ 879.305248][T31166] bridge_slave_1: entered promiscuous mode [ 879.360139][T31166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.368153][T31166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.424780][T31166] team0: Port device team_slave_0 added [ 879.431796][T31166] team0: Port device team_slave_1 added [ 879.594818][T31166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.594835][T31166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.594857][T31166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.645321][T16496] bridge_slave_1: left allmulticast mode [ 879.645348][T16496] bridge_slave_1: left promiscuous mode [ 879.648171][T16496] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.734451][T16496] bridge_slave_0: left allmulticast mode [ 879.734479][T16496] bridge_slave_0: left promiscuous mode [ 879.734691][T16496] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.317193][T31332] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 881.122087][T26074] Bluetooth: hci3: command tx timeout [ 881.435135][T16496] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 881.654364][T16496] bond2 (unregistering): (slave gretap2): Releasing active interface [ 881.742577][T16496] bond3 (unregistering): (slave geneve4): Releasing active interface [ 881.819917][T16496] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 882.045575][T16496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 882.050063][T16496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 882.075649][T16496] bond0 (unregistering): Released all slaves [ 882.090247][T16496] bond1 (unregistering): Released all slaves [ 882.113984][T16496] bond2 (unregistering): Released all slaves [ 882.136706][T16496] bond3 (unregistering): Released all slaves [ 882.179444][T16496] bond4 (unregistering): Released all slaves [ 882.201015][T16496] bond5 (unregistering): Released all slaves [ 882.226846][T16496] bond6 (unregistering): Released all slaves [ 882.255909][T16496] bond7 (unregistering): (slave bond8): Releasing backup interface [ 882.256841][T16496] bond7 (unregistering): Released all slaves [ 882.291160][T16496] bond8 (unregistering): Released all slaves [ 882.327609][T16496] bond9 (unregistering): Released all slaves [ 882.357568][T16496] bond10 (unregistering): Released all slaves [ 882.378512][T16496] bond11 (unregistering): Released all slaves [ 882.408831][T16496] bond12 (unregistering): (slave bond13): Releasing backup interface [ 882.409542][T16496] bond12 (unregistering): Released all slaves [ 882.448167][T16496] bond13 (unregistering): Released all slaves [ 882.502352][T31166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.502373][T31166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.502397][T31166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.545979][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 882.746369][T31166] hsr_slave_0: entered promiscuous mode [ 882.760121][T31166] hsr_slave_1: entered promiscuous mode [ 882.771054][T31166] debugfs: 'hsr0' already exists in 'hsr' [ 882.771079][T31166] Cannot create hsr debugfs directory [ 882.973842][T31359] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.6371'. [ 882.973868][T31359] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.6371'. [ 883.122348][T31365] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 883.214300][T26074] Bluetooth: hci3: command tx timeout [ 883.488186][T16496] tipc: Disabling bearer [ 883.488338][T16496] tipc: Left network mode [ 883.817413][T31385] netlink: 'syz.4.6377': attribute type 2 has an invalid length. [ 884.149284][T31400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6379'. [ 884.219371][T31396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6381'. [ 884.250164][T31399] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6381'. [ 885.361390][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 885.599252][T31436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6388'. [ 885.870632][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 886.223183][T31453] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.6392'. [ 886.502006][T16496] veth1_vlan: left allmulticast mode [ 886.502300][T16496] veth1_macvtap: left promiscuous mode [ 886.502328][T16496] veth0_macvtap: left promiscuous mode [ 886.502463][T16496] veth1_vlan: left promiscuous mode [ 886.502532][T16496] veth0_vlan: left promiscuous mode [ 886.820525][T31468] netlink: 'syz.1.6395': attribute type 9 has an invalid length. [ 886.820546][T31468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6395'. [ 887.188805][T31476] netlink: 'syz.4.6396': attribute type 1 has an invalid length. [ 887.674146][T16496] team0 (unregistering): Port device team_slave_1 removed [ 888.026328][T31476] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 888.367096][T31489] nbd: couldn't find a device at index 0 [ 888.423913][T31501] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 888.509680][T31501] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 888.607658][T31501] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 888.618132][T31497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6399'. [ 888.677739][T31501] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 888.719298][T31501] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 888.793481][T31501] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 888.830385][T16496] IPVS: stop unused estimator thread 0... [ 888.846123][T31501] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 888.904264][T31501] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 888.941729][T31501] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 888.959784][T31521] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6401'. [ 888.978112][T31502] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 888.980151][T31502] bond3 (unregistering): Released all slaves [ 888.999709][T31501] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 889.449542][T31526] netlink: 'syz.4.6402': attribute type 21 has an invalid length. [ 889.449567][T31526] IPv6: NLM_F_CREATE should be specified when creating new route [ 889.449816][T31526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 889.449827][T31526] IPv6: NLM_F_CREATE should be set when creating new route [ 889.449866][T31526] IPv6: NLM_F_CREATE should be set when creating new route [ 889.449888][T31526] IPv6: NLM_F_CREATE should be set when creating new route [ 889.608178][T31166] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 889.640474][T31166] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 889.654296][T31166] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 889.697633][T31166] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 889.713338][T31166] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 889.734648][T31166] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 889.737604][T31166] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 889.774188][T31166] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 890.051575][T31555] ip6t_srh: unknown srh match flags 4000 [ 890.372793][T31166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.410371][T31166] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.428645][T25551] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.428749][T25551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.447005][T25551] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.447134][T25551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.409545][T31166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.520605][T31166] veth0_vlan: entered promiscuous mode [ 891.546191][T31166] veth1_vlan: entered promiscuous mode [ 891.608733][T31166] veth0_macvtap: entered promiscuous mode [ 891.616819][T31166] veth1_macvtap: entered promiscuous mode [ 891.648429][T31166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.664329][T31166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.752222][T27084] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.753055][T27084] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.753089][T27084] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.753119][T27084] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.941668][ T6366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.941689][ T6366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.039786][T27076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.039808][T27076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.661337][ T6366] team0: left allmulticast mode [ 895.661361][ T6366] team_slave_1: left allmulticast mode [ 895.662806][ T6366] team0: left promiscuous mode [ 895.662840][ T6366] team_slave_1: left promiscuous mode [ 895.663321][ T6366] bridge0: port 3(team0) entered disabled state [ 895.665998][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.668395][ T6366] bridge_slave_0: left allmulticast mode [ 895.668416][ T6366] bridge_slave_0: left promiscuous mode [ 895.668580][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.729924][ T6366] batman_adv: batadv0: Interface deactivated: gretap3 [ 895.963289][ T6366] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 896.283419][ T6366] erspan0 (unregistering): left promiscuous mode [ 896.333122][ T6366] gretap0 (unregistering): left promiscuous mode [ 896.373137][ T6366] batman_adv: batadv0: Removing interface: gretap2 [ 896.428858][ T6366] batman_adv: batadv0: Removing interface: gretap3 [ 896.792499][ T6366] bond0 (unregistering): Released all slaves [ 896.812886][ T6366] bond1 (unregistering): Released all slaves [ 896.829861][ T6366] bond2 (unregistering): Released all slaves [ 896.848729][ T6366] bond3 (unregistering): Released all slaves [ 896.869630][ T6366] bond4 (unregistering): Released all slaves [ 896.897392][ T6366] bond5 (unregistering): Released all slaves [ 896.917720][ T6366] bond6 (unregistering): Released all slaves [ 896.934720][ T6366] bond7 (unregistering): Released all slaves [ 896.959503][ T6366] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 896.968421][ T6366] bond8 (unregistering): Released all slaves [ 896.981572][ T6366] bond9 (unregistering): Released all slaves [ 896.998300][ T6366] bond10 (unregistering): Released all slaves [ 897.197084][ T6366] tipc: Disabling bearer [ 897.197206][ T6366] tipc: Left network mode [ 898.464236][ T6366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.464422][ T6366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.466643][ T6366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.466824][ T6366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.555662][ T6366] veth0_macvtap: left promiscuous mode [ 898.556147][ T6366] veth1_vlan: left promiscuous mode [ 898.557415][ T6366] veth0_vlan: left promiscuous mode [ 899.267155][ T6366] team0 (unregistering): Port device team_slave_1 removed [ 900.185441][ T6366] IPVS: stop unused estimator thread 0... [ 902.002681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.058515][T31717] netlink: 'syz.3.6412': attribute type 12 has an invalid length. [ 913.058539][T31717] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6412'. [ 913.080835][T31717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 913.425608][T31726] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 913.429257][T31726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6416'. [ 913.507833][T31728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6417'. [ 913.598260][T31733] ipt_ECN: cannot use operation on non-tcp rule [ 913.720273][T31735] ip6t_srh: unknown srh match flags 4000 [ 913.881540][T31737] ip6gre1: entered allmulticast mode [ 914.220622][T31752] netlink: 'syz.4.6426': attribute type 4 has an invalid length. [ 914.220881][T31752] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6426'. [ 914.633625][T31769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6429'. [ 914.633657][T31769] netlink: 'syz.0.6429': attribute type 5 has an invalid length. [ 914.633671][T31769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6429'. [ 914.633799][T31768] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6429'. [ 914.706854][T31770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6429'. [ 914.725267][T31769] geneve2: entered promiscuous mode [ 914.725440][T31769] geneve2: entered allmulticast mode [ 914.902609][T31770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.917013][T31770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.996352][T31770] bond0 (unregistering): Released all slaves [ 915.117823][T16496] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 915.117872][T16496] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 915.117903][T16496] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 915.117933][T16496] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 915.356088][T31788] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6433'. [ 915.412259][T31788] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6433'. [ 915.791994][T31805] ipt_ECN: cannot use operation on non-tcp rule [ 916.238613][T31823] ip_tables: iptables: counters copy to user failed while replacing table [ 916.897720][T31848] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.938634][T31848] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.232669][T31848] netlink: 'syz.2.6453': attribute type 1 has an invalid length. [ 917.232694][T31848] netlink: 'syz.2.6453': attribute type 1 has an invalid length. [ 917.498905][T31875] lo: entered promiscuous mode [ 917.499079][T31875] netlink: 'syz.4.6458': attribute type 2 has an invalid length. [ 917.499096][T31875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 917.499307][T31875] netlink: 'syz.4.6458': attribute type 2 has an invalid length. [ 917.499320][T31875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 917.499888][T31875] netlink: 'syz.4.6458': attribute type 2 has an invalid length. [ 917.499903][T31875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 917.500119][T31875] netlink: 'syz.4.6458': attribute type 2 has an invalid length. [ 917.500131][T31875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 917.500326][T31875] netlink: 'syz.4.6458': attribute type 2 has an invalid length. [ 917.500343][T31875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 917.500536][T31875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 917.657420][T31875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 918.146055][T31904] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 918.147830][T31904] bond1 (unregistering): Released all slaves [ 918.596297][T31920] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 918.711586][T31925] validate_nla: 60 callbacks suppressed [ 918.711609][T31925] netlink: 'syz.0.6473': attribute type 1 has an invalid length. [ 918.714368][T31926] __nla_validate_parse: 76 callbacks suppressed [ 918.714387][T31926] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6472'. [ 918.864801][T31925] bond0: option mode: invalid value (7) [ 918.887898][T31925] bond0 (unregistering): Released all slaves [ 918.911391][T31943] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6472'. [ 918.912410][T31936] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6472'. [ 918.949211][T31951] netlink: 'syz.0.6473': attribute type 10 has an invalid length. [ 918.949231][T31951] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6473'. [ 919.162523][T31933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6474'. [ 919.221098][T31951] dummy0: entered promiscuous mode [ 919.235026][T31933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6474'. [ 919.304672][T27084] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.304714][T27084] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.304744][T27084] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.333972][T27076] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.371432][T31965] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 919.412442][T31960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6478'. [ 919.496393][T31969] netlink: 516 bytes leftover after parsing attributes in process `syz.4.6480'. [ 919.718550][T31973] netlink: 'syz.4.6481': attribute type 1 has an invalid length. [ 919.763658][T31973] bond3: entered promiscuous mode [ 919.764108][T31973] 8021q: adding VLAN 0 to HW filter on device bond3 [ 919.809079][T31973] bond3: (slave bridge5): making interface the new active one [ 919.809105][T31973] bridge5: entered promiscuous mode [ 919.810080][T31973] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 919.869284][T31973] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6481'. [ 920.093843][T31976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6486'. [ 920.325540][T31988] 8021q: VLANs not supported on ip_vti0 [ 920.670079][ T30] audit: type=1107 audit(1790107119.479:19): pid=32004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='LQ9ˤ?i)f JҺT:rf2i;pL{{8:.dw]3"ވo=C,'8!z7-4~JZĸEu]Gs8߃[=Zk\b\' [ 921.047296][T32015] netlink: 'syz.1.6493': attribute type 1 has an invalid length. [ 921.170059][T32019] ksmbd: Unknown IPC event: 1, ignore. [ 921.204141][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 922.534833][T32059] netlink: 'syz.2.6506': attribute type 4 has an invalid length. [ 923.299686][T32106] netlink: 'syz.3.6515': attribute type 2 has an invalid length. [ 923.322981][T32106] netlink: 'syz.3.6515': attribute type 2 has an invalid length. [ 923.419875][T32115] netlink: 'syz.3.6519': attribute type 1 has an invalid length. [ 923.489033][T32115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 923.513870][T32122] bond1: (slave geneve2): making interface the new active one [ 923.517735][T32122] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 923.559490][T32119] xfrm1: entered promiscuous mode [ 923.559511][T32119] xfrm1: entered allmulticast mode [ 923.727137][T32124] __nla_validate_parse: 8 callbacks suppressed [ 923.727157][T32124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6517'. [ 923.859963][T32136] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6524'. [ 924.277172][T32148] wireguard: wg2: Could not create IPv4 socket [ 924.538677][T32155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6529'. [ 924.538728][T32155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6529'. [ 924.587097][T32155] geneve2: entered promiscuous mode [ 925.111244][T32168] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.119177][T32168] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.298626][T32187] netlink: 'syz.2.6536': attribute type 12 has an invalid length. [ 925.407007][T32189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6539'. [ 925.409222][T32193] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6540'. [ 925.510405][T32188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6539'. [ 925.530932][T32188] netlink: 'syz.4.6539': attribute type 10 has an invalid length. [ 925.581780][T32193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6540'. [ 925.585043][T32196] netlink: 'syz.4.6539': attribute type 10 has an invalid length. [ 928.412343][T32188] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 928.416743][T32188] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 928.806866][T32241] netlink: 'syz.1.6549': attribute type 33 has an invalid length. [ 928.843565][T32238] netlink: 'syz.0.6547': attribute type 2 has an invalid length. [ 928.921670][T32241] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 928.949112][T32241] bond1 (unregistering): Released all slaves [ 929.023377][T32246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6550'. [ 929.304016][T32254] netlink: 352 bytes leftover after parsing attributes in process `syz.2.6554'. [ 929.307922][T32254] syzkaller0: entered promiscuous mode [ 929.307942][T32254] syzkaller0: entered allmulticast mode [ 929.574819][T32270] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6557'. [ 929.609197][T32267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6556'. [ 929.609779][T32271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6556'. [ 929.657310][T32273] netlink: 'syz.0.6557': attribute type 15 has an invalid length. [ 929.693416][T32273] netlink: 'syz.0.6557': attribute type 15 has an invalid length. [ 929.818221][T32280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6559'. [ 930.096337][T32294] netlink: 'syz.2.6562': attribute type 1 has an invalid length. [ 930.378816][T32294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 930.429896][T32309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6563'. [ 930.429918][T32309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6563'. [ 930.513082][T32297] bond1: (slave veth0_to_bond): making interface the new active one [ 930.514552][T32297] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 930.978767][T32322] xt_REDIRECT: bad rangesize 26624. [ 931.151208][T32334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6572'. [ 931.157519][T32331] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6574'. [ 931.446675][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 931.638041][T32349] gretap0: entered promiscuous mode [ 931.736237][T32358] 0{X: renamed from gretap0 [ 931.752318][T32358] 0{X: left promiscuous mode [ 931.752489][T32358] 0{X: entered allmulticast mode [ 931.775334][T32358] net_ratelimit: 58 callbacks suppressed [ 931.775351][T32358] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 931.833432][T32355] ip6gre1: entered promiscuous mode [ 931.833454][T32355] ip6gre1: entered allmulticast mode [ 932.225662][T32370] netlink: 'syz.1.6584': attribute type 16 has an invalid length. [ 932.225683][T32370] netlink: 'syz.1.6584': attribute type 17 has an invalid length. [ 932.267402][T32372] netlink: 'syz.1.6584': attribute type 2 has an invalid length. [ 933.054661][T32370] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.054845][T32370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.059513][T32370] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.059636][T32370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.294652][T32370] geneve2: left promiscuous mode [ 933.294676][T32370] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 933.294915][T32369] syzkaller1: entered promiscuous mode [ 933.294929][T32369] syzkaller1: entered allmulticast mode [ 933.624069][T32389] gretap1: entered promiscuous mode [ 933.767596][T32401] netlink: 'syz.3.6592': attribute type 4 has an invalid length. [ 933.798782][T32401] gretap0: entered promiscuous mode [ 933.798807][T32401] gretap0: entered allmulticast mode [ 933.973760][T32398] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.034797][T32407] __nla_validate_parse: 10 callbacks suppressed [ 934.034817][T32407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6595'. [ 934.172620][T32425] netlink: 'syz.0.6597': attribute type 1 has an invalid length. [ 934.299930][T32426] netlink: 'syz.0.6597': attribute type 1 has an invalid length. [ 934.299952][T32426] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6597'. [ 934.300073][T32426] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.302252][T32426] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.302366][T32426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.393196][T32432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6599'. [ 934.428405][T32432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6599'. [ 934.448874][T32432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6599'. [ 934.466808][T32432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6599'. [ 934.483932][T32432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6599'. [ 934.489102][T32432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6599'. [ 934.537506][T32435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6598'. [ 934.554888][T32435] veth2: entered promiscuous mode [ 934.554910][T32435] veth2: entered allmulticast mode [ 934.557056][T32432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6599'. [ 934.925178][T32443] ip6gre1: entered promiscuous mode [ 934.925209][T32443] ip6gre1: entered allmulticast mode [ 935.069839][T16498] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 935.071043][T16498] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 935.112655][T25595] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 935.171256][T32454] netlink: 'syz.0.6601': attribute type 4 has an invalid length. [ 935.222181][T25595] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 935.708134][T32462] netlink: 'syz.0.6606': attribute type 11 has an invalid length. [ 936.002333][T25595] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 936.105744][T32489] netlink: 'syz.1.6611': attribute type 10 has an invalid length. [ 936.762686][T32488] netlink: 'syz.3.6608': attribute type 1 has an invalid length. [ 936.800369][T32489] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 936.817649][T32489] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 936.820917][T32491] hsr_slave_0: left promiscuous mode [ 936.848093][T32491] hsr_slave_1: left promiscuous mode [ 937.660307][T32523] macsec1: entered promiscuous mode [ 938.268953][T32542] netlink: zone id is out of range [ 938.268969][T32542] netlink: zone id is out of range [ 938.268978][T32542] netlink: zone id is out of range [ 938.287553][T32542] netlink: zone id is out of range [ 938.287568][T32542] netlink: zone id is out of range [ 938.287576][T32542] netlink: zone id is out of range [ 938.287583][T32542] netlink: zone id is out of range [ 938.287608][T32542] netlink: zone id is out of range [ 938.287615][T32542] netlink: zone id is out of range [ 938.287623][T32542] netlink: zone id is out of range [ 938.641479][ T4935] Bluetooth: hci5: command 0x0406 tx timeout [ 938.880817][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 939.510344][T32604] __nla_validate_parse: 23 callbacks suppressed [ 939.510363][T32604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6640'. [ 939.685916][T32612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6643'. [ 939.798301][T32608] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 939.798329][T32608] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 939.848406][T32616] netlink: 3604 bytes leftover after parsing attributes in process `syz.2.6644'. [ 940.064776][T32625] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6646'. [ 940.100141][T32626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6647'. [ 940.284098][T32631] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6649'. [ 940.945684][T32671] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 941.050571][T32671] bond0: entered allmulticast mode [ 941.052694][T32671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.079567][T32676] netlink: 'syz.3.6659': attribute type 21 has an invalid length. [ 941.116038][T32676] netlink: 'syz.3.6659': attribute type 1 has an invalid length. [ 941.119984][T32676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6659'. [ 941.120023][T32676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6659'. [ 941.221758][T32684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6661'. [ 941.377125][T32693] netlink: 'syz.2.6663': attribute type 4 has an invalid length. [ 941.464902][T32696] netlink: 'syz.2.6663': attribute type 4 has an invalid length. [ 941.547830][T32696] netlink: 'syz.2.6663': attribute type 4 has an invalid length. [ 941.561244][T32708] netlink: 'syz.2.6663': attribute type 4 has an invalid length. [ 941.577224][T32693] bond2: Unable to set up delay as MII monitoring is disabled [ 941.608454][T32693] bond2 (unregistering): Released all slaves [ 941.815983][T32710] bond2: Unable to set up delay as MII monitoring is disabled [ 941.819461][T32710] bond2 (unregistering): Released all slaves [ 942.283161][T32727] syzkaller1: entered promiscuous mode [ 942.283346][T32727] syzkaller1: entered allmulticast mode [ 942.749553][T32745] xt_hl: Unknown Hop Limit match mode: 206 [ 942.794169][T32741] netlink: 'syz.4.6673': attribute type 13 has an invalid length. [ 942.799453][T32741] netlink: 252 bytes leftover after parsing attributes in process `syz.4.6673'. [ 943.004875][T32755] pimreg: entered allmulticast mode [ 943.611887][ T308] veth3: entered allmulticast mode [ 943.823667][ T308] veth5: entered allmulticast mode [ 943.900319][ T321] syzkaller1: entered promiscuous mode [ 943.900344][ T321] syzkaller1: entered allmulticast mode [ 943.958537][ T334] mac80211_hwsim hwsim68 syzkaller0: entered promiscuous mode [ 943.958722][ T334] mac80211_hwsim hwsim68 syzkaller0: entered allmulticast mode [ 944.517470][ T357] bridge_slave_1 (unregistering): left allmulticast mode [ 944.517496][ T357] bridge_slave_1 (unregistering): left promiscuous mode [ 944.517617][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.703746][ T366] __nla_validate_parse: 7 callbacks suppressed [ 944.703765][ T366] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6701'. [ 944.780418][ T373] Bluetooth: hci0: unsupported parameter 5135 [ 944.780447][ T373] Bluetooth: hci0: unsupported parameter 8192 [ 944.780460][ T373] Bluetooth: hci0: unsupported parameter 5135 [ 944.780471][ T373] Bluetooth: hci0: unsupported parameter 8192 [ 944.814785][ T372] net_ratelimit: 8 callbacks suppressed [ 944.814803][ T372] ip_tables: iptables: counters copy to user failed while replacing table [ 945.515435][ T395] netlink: 'syz.0.6704': attribute type 10 has an invalid length. [ 945.516527][ T395] veth0_vlan: entered allmulticast mode [ 945.665424][ T395] team0: Device veth0_vlan failed to register rx_handler [ 946.223574][ T409] syzkaller1: entered promiscuous mode [ 946.223742][ T409] syzkaller1: entered allmulticast mode [ 946.439119][ T417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6714'. [ 946.657450][ T429] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 946.802861][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 947.500201][ T461] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6728'. [ 947.787139][ T480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6732'. [ 947.805782][ T482] netlink: 'syz.0.6733': attribute type 7 has an invalid length. [ 947.805802][ T482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6733'. [ 947.805830][ T482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6733'. [ 948.028167][ T494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6736'. [ 948.028376][ T494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6736'. [ 948.028570][ T494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6736'. [ 948.070131][ T494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6736'. [ 948.217756][ T499] debugfs: '1^!' already exists in 'ieee80211' [ 948.730826][ T520] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 949.108142][ T525] x_tables: duplicate underflow at hook 1 [ 949.456417][ T5279] veth1_vlan: left promiscuous mode [ 950.230234][ T583] sctp: [Deprecated]: syz.0.6751 (pid 583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 950.230234][ T583] Use struct sctp_sack_info instead [ 950.231491][ T583] sctp: [Deprecated]: syz.0.6751 (pid 583) Use of int in maxseg socket option. [ 950.231491][ T583] Use struct sctp_assoc_value instead [ 950.245187][ T583] __nla_validate_parse: 67 callbacks suppressed [ 950.245206][ T583] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6751'. [ 950.494527][ T590] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6754'. [ 951.919399][T27076] IPVS: starting estimator thread 0... [ 952.001354][ T650] IPVS: using max 35 ests per chain, 84000 per kthread [ 952.144261][ T656] IPVS: set_ctl: invalid protocol: 20 59.0.1.3:8892 [ 956.811808][ T686] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6771'. [ 956.817705][ T686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6771'. [ 956.963394][ T686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6771'. [ 956.963431][ T686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6771'. [ 957.105720][ T699] netlink: 1788 bytes leftover after parsing attributes in process `syz.2.6771'. [ 957.331170][ T686] syzkaller0: entered promiscuous mode [ 957.331347][ T686] syzkaller0: entered allmulticast mode [ 957.401837][ T718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6778'. [ 961.530833][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 962.167456][ T731] ip6gre2: entered promiscuous mode [ 962.167623][ T731] ip6gre2: entered allmulticast mode [ 962.589782][ T760] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 962.708729][ T760] netlink: 576 bytes leftover after parsing attributes in process `syz.0.6786'. [ 962.713675][ T762] netlink: 576 bytes leftover after parsing attributes in process `syz.0.6786'. [ 962.916694][ T776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6790'. [ 963.166031][ T786] veth7: entered allmulticast mode [ 963.593031][ T806] xt_l2tp: v2 doesn't support IP mode [ 963.963799][ T820] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6804'. [ 963.978650][ T820] SET target dimension over the limit! [ 964.239830][ T823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6806'. [ 964.471338][ T830] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6811'. [ 964.471372][ T830] netlink: 'syz.2.6811': attribute type 8 has an invalid length. [ 964.471385][ T830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6811'. [ 965.278271][ T865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 965.406857][ T872] bond1 (unregistering): Released all slaves [ 965.624243][ T878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 965.701729][ T891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 965.771972][ T896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 966.472095][ T927] openvswitch: netlink: Message has 8 unknown bytes. [ 966.472130][ T927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 966.639418][ T939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6832'. [ 966.639439][ T939] netlink: 13 bytes leftover after parsing attributes in process `syz.3.6832'. [ 966.749530][ T939] veth9: entered promiscuous mode [ 966.749798][ T940] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20000 [ 966.817311][ T943] netlink: 'syz.2.6831': attribute type 1 has an invalid length. [ 966.965824][ T958] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6833'. [ 967.033465][ T943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 967.057174][ T951] bond1: (slave veth0_to_bond): Releasing active interface [ 967.113109][ T951] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 967.282321][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.309893][ T968] openvswitch: netlink: Duplicate key (type 6). [ 967.371547][ T969] openvswitch: netlink: Duplicate key (type 6). [ 967.681081][ T975] sctp: Trying to GSO but underlying device doesn't support it. [ 967.970488][ T986] Bluetooth: MGMT ver 1.23 [ 968.027168][ T975] veth3: entered promiscuous mode [ 968.371159][ T1005] __nla_validate_parse: 2 callbacks suppressed [ 968.371180][ T1005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6843'. [ 968.405524][ T1007] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6842'. [ 968.406346][ T1008] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.6842'. [ 968.562935][ T4935] Bluetooth: hci4: ACL packet for unknown connection handle 3484 [ 968.643111][T16498] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 968.643323][T16498] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 968.673253][T27144] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 968.744144][ T1022] Dead loop on virtual device ip6_vti0 (net 577), fix it urgently! [ 968.773974][ T1027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6847'. [ 969.020045][ T1036] syzkaller1: entered promiscuous mode [ 969.020067][ T1036] syzkaller1: entered allmulticast mode [ 969.065755][ T1036] IPv6: NLM_F_CREATE should be specified when creating new route [ 969.122974][T27144] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 969.224884][ T1048] netlink: 'syz.3.6849': attribute type 1 has an invalid length. [ 969.361322][ T4935] Bluetooth: hci2: command 0x0406 tx timeout [ 969.446400][ T1058] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6852'. [ 969.472756][ T1062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6849'. [ 969.511358][ T1067] Bluetooth: hci0: unsupported parameter 5135 [ 969.511381][ T1067] Bluetooth: hci0: unsupported parameter 8192 [ 969.511394][ T1067] Bluetooth: hci0: unsupported parameter 5135 [ 969.511406][ T1067] Bluetooth: hci0: unsupported parameter 8192 [ 969.601406][T27144] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 971.846791][ T1050] 8021q: adding VLAN 0 to HW filter on device bond3 [ 971.859048][ T1050] bond2: (slave bond3): making interface the new active one [ 971.869933][ T1050] bond2: (slave bond3): Enslaving as an active interface with an up link [ 971.892191][ T1051] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 971.914054][ T1062] 8021q: adding VLAN 0 to HW filter on device bond2 [ 972.403100][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 972.404851][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 972.475826][ T1115] syzkaller1: entered promiscuous mode [ 972.475847][ T1115] syzkaller1: entered allmulticast mode [ 972.478226][ T1115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6861'. [ 972.478514][ T1115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6861'. [ 972.519129][ T1116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6862'. [ 972.870670][ T1121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6863'. [ 973.064692][ T1132] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 973.099838][ T1127] 8021q: adding VLAN 0 to HW filter on device bond4 [ 973.555744][ T1146] syzkaller0: entered promiscuous mode [ 973.555767][ T1146] syzkaller0: entered allmulticast mode [ 973.721882][ T1152] __nla_validate_parse: 2 callbacks suppressed [ 973.721903][ T1152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6874'. [ 974.426937][ T1168] syzkaller1: entered promiscuous mode [ 974.426960][ T1168] syzkaller1: entered allmulticast mode [ 974.562826][ T1194] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20000 [ 975.244563][ T1225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6888'. [ 975.505327][ T1235] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6891'. [ 975.505985][ T1235] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6891'. [ 975.507127][ T1235] netlink: 'syz.3.6891': attribute type 11 has an invalid length. [ 975.507144][ T1235] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6891'. [ 976.327283][ T1237] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:21 [ 976.448962][ T1243] netlink: 'syz.3.6894': attribute type 2 has an invalid length. [ 976.644331][ T1251] bond5 (unregistering): Released all slaves [ 976.831638][ T1257] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6897'. [ 977.699698][ T1202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 978.028493][ T1269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 978.029462][ T1270] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6903'. [ 978.066484][T26074] Bluetooth: hci5: ISO packet too small [ 978.492363][ T1294] netlink: 'syz.0.6907': attribute type 4 has an invalid length. [ 978.492384][ T1294] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6907'. [ 978.494129][ T1295] netlink: 'syz.0.6907': attribute type 4 has an invalid length. [ 978.494146][ T1295] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6907'. [ 978.809303][ T1308] netlink: 'syz.0.6910': attribute type 1 has an invalid length. [ 978.893110][ T1308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 978.979796][ T1308] bond1: (slave geneve4): making interface the new active one [ 978.995354][ T1308] bond1: (slave geneve4): Enslaving as an active interface with an up link [ 979.240123][ T1322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6914'. [ 979.543509][ T1340] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 979.814126][ T1353] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 979.816792][ T1353] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 979.979713][ T1360] IPVS: set_ctl: invalid protocol: 51 172.20.20.53:20003 [ 980.081896][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 980.164966][ T1362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6926'. [ 980.416803][ T1371] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 980.486325][ T1371] bond3 (unregistering): Released all slaves [ 980.489169][ T1380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6929'. [ 980.804140][ T1391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6931'. [ 980.971889][ T1383] ipt_ECN: cannot use operation on non-tcp rule [ 981.137282][ T1405] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6934'. [ 981.269468][ T1399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6935'. [ 981.554965][ T1420] netlink: 'syz.0.6940': attribute type 1 has an invalid length. [ 981.554988][ T1420] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6940'. [ 981.594997][ T1419] netlink: 'syz.0.6940': attribute type 3 has an invalid length. [ 981.595018][ T1419] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6940'. [ 981.783520][ T1429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6943'. [ 982.042083][ T1437] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 982.334496][ T1447] SET target dimension over the limit! [ 982.523312][ T1454] macvlan0: entered promiscuous mode [ 982.716086][ T1462] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6954'. [ 982.781049][ T1459] syzkaller1: entered promiscuous mode [ 982.781235][ T1459] syzkaller1: entered allmulticast mode [ 983.109728][ T1488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 983.114920][ T1489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 983.164479][ T1491] netlink: 'syz.2.6962': attribute type 1 has an invalid length. [ 983.319608][ T1494] xt_connbytes: Forcing CT accounting to be enabled [ 983.319660][ T1494] xt_CT: You must specify a L4 protocol and not use inversions on it [ 983.336109][ T1493] xt_CT: You must specify a L4 protocol and not use inversions on it [ 983.353797][ T1499] netlink: 'syz.0.6965': attribute type 1 has an invalid length. [ 983.392189][ T1493] Bluetooth: hci0: unsupported parameter 5161 [ 983.392213][ T1493] Bluetooth: hci0: unsupported parameter 8192 [ 983.392224][ T1493] Bluetooth: hci0: unsupported parameter 5161 [ 983.392235][ T1493] Bluetooth: hci0: unsupported parameter 8192 [ 983.413783][ T1502] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 983.423409][ T1504] openvswitch: netlink: Message has 8 unknown bytes. [ 983.931340][ T1523] netlink: 'syz.0.6972': attribute type 1 has an invalid length. [ 983.931363][ T1523] netlink: 'syz.0.6972': attribute type 2 has an invalid length. [ 983.990000][ T1523] mac80211_hwsim hwsim68 syzkaller0: left promiscuous mode [ 983.990027][ T1523] mac80211_hwsim hwsim68 syzkaller0: left allmulticast mode [ 984.156961][ T1531] erspan0: entered promiscuous mode [ 984.158741][ T1531] vlan2: entered promiscuous mode [ 984.288462][ T1534] netlink: 'syz.1.6975': attribute type 3 has an invalid length. [ 984.291650][ T1544] Bluetooth: hci0: unsupported parameter 5135 [ 984.291668][ T1544] Bluetooth: hci0: unsupported parameter 8192 [ 984.291679][ T1544] Bluetooth: hci0: unsupported parameter 5135 [ 984.291689][ T1544] Bluetooth: hci0: unsupported parameter 8192 [ 984.303066][ T1546] __nla_validate_parse: 5 callbacks suppressed [ 984.303084][ T1546] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6976'. [ 984.667598][ T1558] netlink: 'syz.3.6979': attribute type 1 has an invalid length. [ 984.678054][ T1563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6981'. [ 984.722506][ T4935] Bluetooth: hci4: command 0x0406 tx timeout [ 984.756315][ T1558] bond5: entered promiscuous mode [ 984.760005][ T1558] 8021q: adding VLAN 0 to HW filter on device bond5 [ 984.885461][ T1566] bond5: (slave bridge4): making interface the new active one [ 984.885485][ T1566] bridge4: entered promiscuous mode [ 984.887851][ T1566] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 985.235074][ T1581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6985'. [ 985.389799][ T1581] nbd5: detected capacity change from 0 to 63 [ 985.451779][ T1593] x_tables: duplicate underflow at hook 2 [ 985.498716][T26074] block nbd5: Receive control failed (result -104) [ 986.324134][ T1647] netlink: 'syz.3.7001': attribute type 4 has an invalid length. [ 986.324777][ T1647] netlink: 'syz.3.7001': attribute type 4 has an invalid length. [ 986.415064][ T1650] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6999'. [ 986.629526][ T1659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7003'. [ 987.189661][ T1685] netlink: 165 bytes leftover after parsing attributes in process `syz.2.7007'. [ 987.407933][ T1689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7009'. [ 987.420130][ T1689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7009'. [ 987.622823][ T1696] validate_nla: 2 callbacks suppressed [ 987.622843][ T1696] netlink: 'syz.2.7011': attribute type 10 has an invalid length. [ 987.625174][ T1696] syz_tun: entered promiscuous mode [ 987.771170][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 987.792384][ T1699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7012'. [ 988.323217][ T4935] Bluetooth: hci3: command 0x0405 tx timeout [ 989.526092][ T1659] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 990.320780][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 990.468176][ T1705] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7014'. [ 990.578144][T27082] IPVS: starting estimator thread 0... [ 990.664819][ T1744] IPVS: using max 41 ests per chain, 98400 per kthread [ 990.923683][ T1762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7026'. [ 991.053929][ T1762] bond2: entered promiscuous mode [ 991.054109][ T1762] bond2: entered allmulticast mode [ 991.458309][ T1787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7030'. [ 991.587540][ T1794] netlink: 'syz.0.7031': attribute type 97 has an invalid length. [ 991.587563][ T1794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7031'. [ 991.587585][ T1794] netlink: 'syz.0.7031': attribute type 97 has an invalid length. [ 991.587600][ T1794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7031'. [ 991.789703][ T1804] Dead loop on virtual device ip6_vti0 (net 595), fix it urgently! [ 991.888124][ T1804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.188346][ T1822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7036'. [ 992.242886][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 994.349672][ T1785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 994.719017][T25551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.719038][T25551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.800889][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 994.996415][ T1845] netlink: 'syz.0.7047': attribute type 13 has an invalid length. [ 995.034358][ T1841] IPv6: sit2: Disabled Multicast RS [ 995.135132][ T1849] bridge0: port 3(dummy0) entered blocking state [ 995.135237][ T1849] bridge0: port 3(dummy0) entered disabled state [ 995.135409][ T1849] dummy0: entered allmulticast mode [ 995.140091][ T1849] bridge0: port 3(dummy0) entered blocking state [ 995.140237][ T1849] bridge0: port 3(dummy0) entered forwarding state [ 995.253454][ T1851] netlink: 'syz.4.7048': attribute type 25 has an invalid length. [ 995.509799][ T1863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7052'. [ 995.509821][ T1863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7052'. [ 996.158046][ T1889] syzkaller0: entered promiscuous mode [ 996.158076][ T1889] syzkaller0: entered allmulticast mode [ 996.437298][ T1892] lo speed is unknown, defaulting to 1000 [ 996.462526][ T1892] lo speed is unknown, defaulting to 1000 [ 996.496623][ T1892] lo speed is unknown, defaulting to 1000 [ 996.497618][ T1892] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 996.497648][ T1892] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 996.497682][ T1892] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 996.603594][ T1899] lo: entered allmulticast mode [ 996.604058][ T1898] lo: left allmulticast mode [ 996.616670][ T1892] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 996.866211][ T1892] lo speed is unknown, defaulting to 1000 [ 996.868200][ T1892] lo speed is unknown, defaulting to 1000 [ 996.870070][ T1892] lo speed is unknown, defaulting to 1000 [ 996.877343][ T1892] lo speed is unknown, defaulting to 1000 [ 996.923774][ T1892] lo speed is unknown, defaulting to 1000 [ 996.948584][ T1892] lo speed is unknown, defaulting to 1000 [ 996.976032][ T1892] lo speed is unknown, defaulting to 1000 [ 996.993209][ T1892] lo speed is unknown, defaulting to 1000 [ 997.015683][ T1892] lo speed is unknown, defaulting to 1000 [ 997.043824][ T1892] lo speed is unknown, defaulting to 1000 [ 997.057678][ T1907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7065'. [ 997.165680][ T1911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7066'. [ 997.256557][ T1914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7069'. [ 997.315138][ T1911] team0: Port device team_slave_0 removed [ 997.481838][ T1925] xt_hl: Unknown Hop Limit match mode: 206 [ 997.839588][ T1932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 998.123056][ T1944] SET target dimension over the limit! [ 998.140180][ T1944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7079'. [ 998.196274][ T1946] netlink: 'syz.4.7078': attribute type 9 has an invalid length. [ 998.266451][ T1950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 998.383943][ T1934] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7074'. [ 998.390335][ T1954] [ 998.401712][ T1954] ====================================================== [ 998.408950][ T1954] WARNING: possible circular locking dependency detected [ 998.416057][ T1954] syzkaller #0 Not tainted [ 998.420467][ T1954] ------------------------------------------------------ [ 998.427530][ T1954] syz.1.7081/1954 is trying to acquire lock: [ 998.434591][ T1954] ffffffff8ee90160 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600 [ 998.444007][ T1954] [ 998.444007][ T1954] but task is already holding lock: [ 998.451712][ T1954] ffff888050711d38 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 998.461213][ T1954] [ 998.461213][ T1954] which lock already depends on the new lock. [ 998.461213][ T1954] [ 998.472019][ T1954] [ 998.472019][ T1954] the existing dependency chain (in reverse order) is: [ 998.481722][ T1954] [ 998.481722][ T1954] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 998.489341][ T1954] __might_fault+0xcb/0x130 [ 998.494366][ T1954] _copy_from_iter+0x100/0x1660 [ 998.499767][ T1954] tcp_sendmsg_locked+0x20cf/0x5400 [ 998.505579][ T1954] tcp_sendmsg+0x2f/0x50 [ 998.510350][ T1954] sock_sendmsg_nosec+0x10e/0x180 [ 998.516329][ T1954] sock_write_iter+0x2de/0x3e0 [ 998.521618][ T1954] vfs_write+0x612/0xba0 [ 998.526401][ T1954] ksys_write+0x150/0x270 [ 998.531272][ T1954] do_syscall_64+0x166/0x520 [ 998.536398][ T1954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.543525][ T1954] [ 998.543525][ T1954] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 998.551693][ T1954] lock_sock_nested+0x41/0x100 [ 998.556986][ T1954] inet_shutdown+0x6a/0x390 [ 998.562122][ T1954] nbd_mark_nsock_dead+0x2cb/0x550 [ 998.567933][ T1954] recv_work+0x1cee/0x1e10 [ 998.572873][ T1954] process_scheduled_works+0xc3d/0x1630 [ 998.578934][ T1954] worker_thread+0xa47/0xfb0 [ 998.584057][ T1954] kthread+0x38b/0x480 [ 998.588900][ T1954] ret_from_fork+0x514/0xb70 [ 998.594142][ T1954] ret_from_fork_asm+0x1a/0x30 [ 998.599444][ T1954] [ 998.599444][ T1954] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 998.607080][ T1954] __mutex_lock+0x19d/0x1550 [ 998.612201][ T1954] nbd_queue_rq+0x373/0xff0 [ 998.617213][ T1954] blk_mq_dispatch_rq_list+0x499/0x1990 [ 998.623327][ T1954] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 998.630237][ T1954] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 998.637003][ T1954] blk_mq_run_work_fn+0x16c/0x300 [ 998.642547][ T1954] process_scheduled_works+0xc3d/0x1630 [ 998.648610][ T1954] worker_thread+0xa47/0xfb0 [ 998.653710][ T1954] kthread+0x38b/0x480 [ 998.658295][ T1954] ret_from_fork+0x514/0xb70 [ 998.663398][ T1954] ret_from_fork_asm+0x1a/0x30 [ 998.668675][ T1954] [ 998.668675][ T1954] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 998.675877][ T1954] __mutex_lock+0x19d/0x1550 [ 998.680979][ T1954] nbd_queue_rq+0xc1/0xff0 [ 998.685909][ T1954] blk_mq_dispatch_rq_list+0x499/0x1990 [ 998.691965][ T1954] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 998.698807][ T1954] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 998.705297][ T1954] blk_mq_run_work_fn+0x16c/0x300 [ 998.710839][ T1954] process_scheduled_works+0xc3d/0x1630 [ 998.716903][ T1954] worker_thread+0xa47/0xfb0 [ 998.722007][ T1954] kthread+0x38b/0x480 [ 998.726611][ T1954] ret_from_fork+0x514/0xb70 [ 998.731793][ T1954] ret_from_fork_asm+0x1a/0x30 [ 998.737104][ T1954] [ 998.737104][ T1954] -> #3 (set->srcu){.+.+}-{0:0}: [ 998.744228][ T1954] __synchronize_srcu+0xc9/0x2f0 [ 998.749715][ T1954] elevator_switch+0x1e8/0x7b0 [ 998.755044][ T1954] elevator_change+0x2fa/0x480 [ 998.760312][ T1954] elevator_set_default+0x375/0x440 [ 998.766028][ T1954] blk_register_queue+0x3f3/0x4e0 [ 998.771646][ T1954] __add_disk+0x6b8/0xdb0 [ 998.776487][ T1954] add_disk_fwnode+0x100/0x3a0 [ 998.781850][ T1954] nbd_dev_add+0x733/0xb60 [ 998.786770][ T1954] nbd_init+0x168/0x1f0 [ 998.791872][ T1954] do_one_initcall+0x250/0x870 [ 998.797146][ T1954] do_initcall_level+0x10a/0x1a0 [ 998.802613][ T1954] do_initcalls+0x59/0xa0 [ 998.807458][ T1954] kernel_init_freeable+0x29d/0x3e0 [ 998.813173][ T1954] kernel_init+0x22/0x1d0 [ 998.818015][ T1954] ret_from_fork+0x514/0xb70 [ 998.823110][ T1954] ret_from_fork_asm+0x1a/0x30 [ 998.828384][ T1954] [ 998.828384][ T1954] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 998.836189][ T1954] __mutex_lock+0x19d/0x1550 [ 998.841314][ T1954] elevator_change+0x1af/0x480 [ 998.846597][ T1954] elevator_set_none+0xb5/0x140 [ 998.851953][ T1954] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 998.858271][ T1954] nbd_start_device+0x189/0xb30 [ 998.863626][ T1954] nbd_genl_connect+0x167d/0x1cd0 [ 998.869162][ T1954] genl_family_rcv_msg_doit+0x233/0x340 [ 998.875350][ T1954] genl_rcv_msg+0x614/0x7a0 [ 998.880361][ T1954] netlink_rcv_skb+0x226/0x4a0 [ 998.885677][ T1954] genl_rcv+0x28/0x40 [ 998.890164][ T1954] netlink_unicast+0x7bd/0x940 [ 998.895449][ T1954] netlink_sendmsg+0x813/0xb40 [ 998.900724][ T1954] sock_sendmsg_nosec+0x13a/0x180 [ 998.906271][ T1954] ____sys_sendmsg+0x54e/0x850 [ 998.911545][ T1954] ___sys_sendmsg+0x2a5/0x360 [ 998.916728][ T1954] __x64_sys_sendmsg+0x1b1/0x290 [ 998.922173][ T1954] do_syscall_64+0x166/0x520 [ 998.927274][ T1954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.933677][ T1954] [ 998.933677][ T1954] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 998.942285][ T1954] blk_alloc_queue+0x544/0x690 [ 998.947569][ T1954] __blk_mq_alloc_disk+0x194/0x390 [ 998.953198][ T1954] nbd_dev_add+0x494/0xb60 [ 998.958128][ T1954] nbd_init+0x168/0x1f0 [ 998.962800][ T1954] do_one_initcall+0x250/0x870 [ 998.968094][ T1954] do_initcall_level+0x10a/0x1a0 [ 998.973570][ T1954] do_initcalls+0x59/0xa0 [ 998.978413][ T1954] kernel_init_freeable+0x29d/0x3e0 [ 998.984127][ T1954] kernel_init+0x22/0x1d0 [ 998.988978][ T1954] ret_from_fork+0x514/0xb70 [ 998.994071][ T1954] ret_from_fork_asm+0x1a/0x30 [ 998.999434][ T1954] [ 998.999434][ T1954] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 999.006629][ T1954] __lock_acquire+0x164c/0x2de0 [ 999.011988][ T1954] lock_acquire+0x115/0x350 [ 999.016997][ T1954] fs_reclaim_acquire+0x71/0x100 [ 999.022436][ T1954] prepare_alloc_pages+0x149/0x600 [ 999.028056][ T1954] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 999.034393][ T1954] alloc_pages_mpol+0x21e/0x390 [ 999.039910][ T1954] folio_alloc_mpol_noprof+0x39/0x160 [ 999.045824][ T1954] vma_alloc_folio_noprof+0xe1/0x1e0 [ 999.051636][ T1954] do_pte_missing+0x173a/0x34b0 [ 999.056997][ T1954] handle_mm_fault+0x1a53/0x3750 [ 999.062448][ T1954] do_user_addr_fault+0x746/0x1340 [ 999.068096][ T1954] exc_page_fault+0x6a/0xc0 [ 999.073197][ T1954] asm_exc_page_fault+0x26/0x30 [ 999.078582][ T1954] rep_movs_alternative+0x11/0xa0 [ 999.084121][ T1954] _copy_to_iter+0x255/0x1810 [ 999.089826][ T1954] llc_ui_getsockopt+0x356/0x460 [ 999.095404][ T1954] do_sock_getsockopt+0x6ae/0x7e0 [ 999.100941][ T1954] __x64_sys_getsockopt+0x1a4/0x240 [ 999.106748][ T1954] do_syscall_64+0x166/0x520 [ 999.111852][ T1954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.118261][ T1954] [ 999.118261][ T1954] other info that might help us debug this: [ 999.118261][ T1954] [ 999.128505][ T1954] Chain exists of: [ 999.128505][ T1954] fs_reclaim --> sk_lock-AF_INET --> &mm->mmap_lock [ 999.128505][ T1954] [ 999.141035][ T1954] Possible unsafe locking scenario: [ 999.141035][ T1954] [ 999.148821][ T1954] CPU0 CPU1 [ 999.154201][ T1954] ---- ---- [ 999.159582][ T1954] rlock(&mm->mmap_lock); [ 999.163994][ T1954] lock(sk_lock-AF_INET); [ 999.171182][ T1954] lock(&mm->mmap_lock); [ 999.178065][ T1954] lock(fs_reclaim); [ 999.182136][ T1954] [ 999.182136][ T1954] *** DEADLOCK *** [ 999.182136][ T1954] [ 999.190327][ T1954] locks held by syz.1.7081/1954: 2, last CPU#0: [ 999.196620][ T1954] #0: ffff88807e8a5260 (sk_lock-AF_LLC){+.+.}-{0:0}, at: llc_ui_getsockopt+0xb5/0x460 [ 999.206454][ T1954] #1: ffff888050711d38 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 999.216387][ T1954] [ 999.216387][ T1954] stack backtrace: [ 999.222265][ T1954] CPU: 0 UID: 0 PID: 1954 Comm: syz.1.7081 Not tainted syzkaller #0 PREEMPT(full) [ 999.231904][ T1954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 999.241946][ T1954] Call Trace: [ 999.245218][ T1954] [ 999.248137][ T1954] dump_stack_lvl+0xe8/0x150 [ 999.252728][ T1954] print_circular_bug+0x2e2/0x300 [ 999.257754][ T1954] check_noncircular+0x12f/0x150 [ 999.262683][ T1954] __lock_acquire+0x164c/0x2de0 [ 999.267524][ T1954] ? lock_acquire+0x115/0x350 [ 999.272189][ T1954] lock_acquire+0x115/0x350 [ 999.276689][ T1954] ? prepare_alloc_pages+0x149/0x600 [ 999.281970][ T1954] ? __lock_acquire+0x747/0x2de0 [ 999.286899][ T1954] fs_reclaim_acquire+0x71/0x100 [ 999.291829][ T1954] ? prepare_alloc_pages+0x149/0x600 [ 999.297099][ T1954] prepare_alloc_pages+0x149/0x600 [ 999.302200][ T1954] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 999.307995][ T1954] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 999.314311][ T1954] ? __pfx_policy_nodemask+0x10/0x10 [ 999.319585][ T1954] ? __lock_acquire+0x747/0x2de0 [ 999.324509][ T1954] alloc_pages_mpol+0x21e/0x390 [ 999.329358][ T1954] folio_alloc_mpol_noprof+0x39/0x160 [ 999.334725][ T1954] vma_alloc_folio_noprof+0xe1/0x1e0 [ 999.340003][ T1954] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 999.345994][ T1954] ? lock_acquire+0x115/0x350 [ 999.350676][ T1954] do_pte_missing+0x173a/0x34b0 [ 999.355522][ T1954] handle_mm_fault+0x1a53/0x3750 [ 999.360454][ T1954] ? handle_mm_fault+0xf1/0x3750 [ 999.365390][ T1954] ? __pfx_handle_mm_fault+0x10/0x10 [ 999.370687][ T1954] ? __lock_acquire+0x747/0x2de0 [ 999.375619][ T1954] ? lock_mm_and_find_vma+0xa7/0x340 [ 999.380898][ T1954] do_user_addr_fault+0x746/0x1340 [ 999.386001][ T1954] exc_page_fault+0x6a/0xc0 [ 999.390491][ T1954] asm_exc_page_fault+0x26/0x30 [ 999.395323][ T1954] RIP: 0010:rep_movs_alternative+0x11/0xa0 [ 999.401126][ T1954] Code: c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 67 04 00 66 2e 0f 1f [ 999.420737][ T1954] RSP: 0018:ffffc9000e0f7a98 EFLAGS: 00050202 [ 999.426793][ T1954] RAX: ffffffff84dc6f00 RBX: ffffc9000e0f7c60 RCX: 0000000000000004 [ 999.434770][ T1954] RDX: 0000000000000000 RSI: ffffc9000e0f7c60 RDI: 0000200000001b00 [ 999.442747][ T1954] RBP: ffffc9000e0f7c10 R08: 0000000000000003 R09: 0000000000000004 [ 999.450807][ T1954] R10: dffffc0000000000 R11: fffff52001c1ef8c R12: 1ffff92001c1efba [ 999.458782][ T1954] R13: 0000200000001b00 R14: ffffc9000e0f7de0 R15: 0000000000000004 [ 999.466760][ T1954] ? _copy_to_iter+0x1a0/0x1810 [ 999.471613][ T1954] _copy_to_iter+0x255/0x1810 [ 999.476281][ T1954] ? __pfx__copy_to_iter+0x10/0x10 [ 999.481384][ T1954] ? llc_ui_getsockopt+0xb5/0x460 [ 999.486404][ T1954] ? __local_bh_enable_ip+0xd6/0x140 [ 999.491767][ T1954] llc_ui_getsockopt+0x356/0x460 [ 999.496700][ T1954] ? __pfx_llc_ui_getsockopt+0x10/0x10 [ 999.502156][ T1954] do_sock_getsockopt+0x6ae/0x7e0 [ 999.507195][ T1954] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 999.512761][ T1954] ? __fget_files+0x3a2/0x420 [ 999.517607][ T1954] ? __fget_files+0x2a/0x420 [ 999.522207][ T1954] __x64_sys_getsockopt+0x1a4/0x240 [ 999.527403][ T1954] do_syscall_64+0x166/0x520 [ 999.532031][ T1954] ? trace_irq_disable+0x3b/0x140 [ 999.537053][ T1954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.543123][ T1954] ? clear_bhb_loop+0x70/0xc0 [ 999.547788][ T1954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.553664][ T1954] RIP: 0033:0x7f6ca759e159 [ 999.558075][ T1954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.577851][ T1954] RSP: 002b:00007f6ca852a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 999.586261][ T1954] RAX: ffffffffffffffda RBX: 00007f6ca7825fa0 RCX: 00007f6ca759e159 [ 999.594224][ T1954] RDX: 0000000000000002 RSI: 000000000000010c RDI: 0000000000000004 [ 999.602181][ T1954] RBP: 00007f6ca763506b R08: 00002000000004c0 R09: 0000000000000000 [ 999.610138][ T1954] R10: 0000200000001b00 R11: 0000000000000246 R12: 0000000000000000 [ 999.618104][ T1954] R13: 00007f6ca7826038 R14: 00007f6ca7825fa0 R15: 00007ffe8f91cfb8 [ 999.626173][ T1954] [ 999.790548][ T1960] xt_hashlimit: size too large, truncated to 1048576 [ 999.871079][ T1962] openvswitch: netlink: Missing valid actions attribute. [ 1000.462361][ T1962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.466121][ T1962] bridge_slave_0 (unregistering): left allmulticast mode [ 1000.466146][ T1962] bridge_slave_0 (unregistering): left promiscuous mode [ 1000.466198][ T1962] bridge0: port 1(bridge_slave_0) entered disabled state