last executing test programs: 7.982703755s ago: executing program 4 (id=8201): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140), 0x0, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) clock_gettime(0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000ecd804e900"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$inet(0x2, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c7515092", @ANYRES32=r9, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket(0x10, 0x803, 0x0) 6.516903731s ago: executing program 2 (id=8214): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000800}, 0x4000044) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000800000a88b360800000800455c001400"], 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r3 = socket(0x29, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000001ec0)=[{{&(0x7f00000007c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[], 0xe0}}, {{&(0x7f0000000cc0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x2, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x832000, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000800}, 0x4000044) (async) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000800000a88b360800000800455c001400"], 0x0) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) socket(0x29, 0x80805, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000001ec0)=[{{&(0x7f00000007c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[], 0xe0}}, {{&(0x7f0000000cc0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x2, 0x4000000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x832000, 0x0) (async) 5.924992008s ago: executing program 4 (id=8218): ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) 5.916818139s ago: executing program 2 (id=8219): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0xc, 0x0, &(0x7f0000000080)) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x1, @remote, 'ip_vti0\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote, 'team_slave_1\x00'}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000bc0)={r7, 0x1000, "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"}, &(0x7f0000000140)=0x1008) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r8, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8, 0x6}]}}]}]}, 0x3c}}, 0x0) (async) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x6, 0x3, 0x2, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a8008"], 0x44}}, 0x0) (async) r12 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r12, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f5f28290a9423debbb86f29ba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f926"}]}]}, 0xe0}], 0x1}, 0x40040) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 5.764828336s ago: executing program 4 (id=8221): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000801020000000000000000050000040900010073797a3000000000050003000100feff0b000480"], 0x34}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000048) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1d0, 0x1170, 0x1398, 0x0, 0x1170, 0x310, 0x1398, 0x1398, 0x310, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [0xff000000, 0xff, 0xff, 0xffffffff], @ipv4=@loopback, [0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0xff, 0xffffff00, 0xffffff00, 0xff], 0x4, 0x101, 0x87, 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x410, 0x300}, 0x41}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x6, 0x1, 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) unshare(0x20000400) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000030000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000003e140000000000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) bind$bt_hci(r9, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000000)="09000000010017", 0x7) unshare(0x440) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) r11 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) connect$inet6(r11, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x61844529}, 0x1c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r10, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, 0x0}}, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r7, 0x701, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10000080) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r7, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) socket(0x10, 0x80002, 0x0) 5.736289088s ago: executing program 2 (id=8222): unshare(0x22020400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8001, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) 5.545742628s ago: executing program 1 (id=8223): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x8e021608b5333487}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000a40)=""/4067, &(0x7f00000000c0)=0xfe3) 5.452811446s ago: executing program 2 (id=8224): listen(0xffffffffffffffff, 0xff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x28, 0x7, 0x2, 0x80}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, r1, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x50000}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a48}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044001}, 0x4001) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000480)={&(0x7f00000003c0)="bbce95e20f1865028bf4a4e872a18258fa2a3fc0eea8d4784698669accb2119f791bc2942583f2348137b06078722cabfc843feaf3c1b807eb30806497b5b8bc609359a59807751321512aadd63a9078b0e264bd82aa350f79ab8b209609d7bc657851039a2a314bd7595e2ba896a9d4d1047b460176b4190ef00ad048f81a333b0d74209e39ec33f799ea1e10ef3e6add08d7792bf0d251d51ffe4c2dd7fbe3b7", 0xa1}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = accept4(r0, &(0x7f0000000500)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000580)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x865e}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x4008000) bind$netlink(r5, &(0x7f00000006c0)={0x10, 0x0, 0x25dfdbfe, 0x20}, 0xc) r6 = socket(0x0, 0x0, 0x982) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r7, &(0x7f0000000900)=[{{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/117, 0x75}, {&(0x7f0000000840)=""/42, 0x2a}], 0x2, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x40000040, &(0x7f0000000940)={0x77359400}) r8 = accept4(r6, &(0x7f0000000980)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000a00)=0x80, 0x800) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x7c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0xd4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2f1}, {0x6, 0x11, 0x2}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) recvmmsg$unix(r7, &(0x7f0000003f00)=[{{&(0x7f0000000b80), 0x6e, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/109, 0x6d}, {&(0x7f0000000c80)=""/219, 0xdb}, {&(0x7f0000000d80)=""/36, 0x24}, {&(0x7f0000000dc0)=""/203, 0xcb}, {&(0x7f0000000ec0)=""/218, 0xda}, {&(0x7f0000000fc0)=""/238, 0xee}, {&(0x7f00000010c0)=""/83, 0x53}, {&(0x7f0000001140)=""/4, 0x4}, {&(0x7f0000001180)=""/75, 0x4b}], 0x9, &(0x7f00000012c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000001400), 0x6e, &(0x7f0000003800)=[{&(0x7f0000001480)}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/189, 0xbd}, {&(0x7f0000003580)=""/201, 0xc9}, {&(0x7f0000003680)=""/202, 0xca}, {&(0x7f0000003780)=""/115, 0x73}], 0x7, &(0x7f0000003880)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f00000039c0), 0x6e, &(0x7f0000003ac0)=[{&(0x7f0000003a40)=""/101, 0x65}], 0x1}}, {{&(0x7f0000003b00), 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003b80)=""/224, 0xe0}, {&(0x7f0000003c80)=""/229, 0xe5}, {&(0x7f0000003d80)=""/105, 0x69}], 0x3, &(0x7f0000003e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}], 0x4, 0x2, &(0x7f0000004000)={0x0, 0x989680}) unshare(0x20000080) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004080), r11) sendmsg$NL80211_CMD_TESTMODE(r12, &(0x7f0000004240)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004200)={&(0x7f00000040c0)={0x140, r16, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x13}}}}, [@NL80211_ATTR_TESTDATA={0x6b, 0x45, "b427f6300634fae62ce5ccf2274ed8d19f7af4ca9823574a6690e33d92b33eee355535086ba61a33ae6e183d184ce9de310fdb3aff6e72fe15695991e7e136f8e3bcde7f94c7076dd4a722ddca778169bc635b5cc6e4cd43c1591551bb103acb4a38d62593cc69"}, @NL80211_ATTR_TESTDATA={0xaa, 0x45, "b311b25d77d9a1c24101cdb2ed9d448b1c19e646443fa59aec3f8ff98e164ee150c597077f204f107380e269358a176c35f5fe55e6bd8d5693e1960b0982843f4007138fde0f5669e228ce7cea8ef9bb1f38654e8c96eb3f1ed41a8cbee1a79eb9e044243f6d0fa0daa55b75391372c6e0aaee9214f30f661cf220ac3023e79481daeac73e48e37cc799987184e749c46e80bbdf9f4f3ecec97107c1afe3fbd27d2c6718252a"}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000080}, 0xc884) socket$xdp(0x2c, 0x3, 0x0) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f00000042c0), r14) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r10, &(0x7f0000004380)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004340)={&(0x7f0000004300)={0x14, r17, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20024014) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000004480)={r9, &(0x7f00000043c0)="db5ed62452987a41b027467b93d04b41220823474500109f9461ce6456e05143fe26583b6f44632c3562c65634a4a88abd52ad86ef1b19d81815585ad3d343cc9d20ec8bf85754d382c7f364db64651ea4c536d4040f3f1ebbd8f9d07d543d0cef33e9ee1b5baae5c7b419bdfb7de7588e", &(0x7f0000004440)=@tcp=r13, 0x4}, 0x20) socket$inet_smc(0x2b, 0x1, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000044c0)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000004500), r15) getsockname$packet(0xffffffffffffffff, &(0x7f00000045c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004600)=0x14) 5.338064383s ago: executing program 4 (id=8226): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42008, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ipvlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000030000000000060400f8ffffff000088aa21390600000000000008030000000c000000000000020000000000005f00"], &(0x7f00000005c0)=""/226, 0x54, 0xe2, 0x1, 0x5}, 0x28) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {0xfff2, 0xe}, {0xc, 0xf}}, ["", "", ""]}, 0x24}}, 0x4) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x63}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000008800000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) 5.112281111s ago: executing program 1 (id=8228): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, 0x0}, 0x800) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd312", 0xc}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40c4) r4 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7, 0x4}}], 0x18, 0x20000001}, 0x20008000) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x34, 0x0, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa20000000fca3c1f890007020000f8ffffffb703000008000000b70400000100000085000000820000009500"/83], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r7, 0x29, 0x2d, &(0x7f0000000180)={0x4, {{0xa, 0x4e22, 0xff, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7}}, {{0xa, 0x4e23, 0x928, @mcast1, 0x5}}}, 0x108) 4.884854852s ago: executing program 0 (id=8231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f01640000000500530001000000080005000c"], 0x54}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f01640000000500530001000000080005000c"], 0x54}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000d4ef0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001340)=@newnexthop={0x34, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x0, 0x1}, {0x2, 0xb}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001340)=@newnexthop={0x34, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x0, 0x1}, {0x2, 0xb}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x48, 0x1411, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x48}, 0x1, 0x0, 0x0, 0x2400c8e5}, 0x8054) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x48, 0x1411, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x48}, 0x1, 0x0, 0x0, 0x2400c8e5}, 0x8054) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'virt_wifi0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, r8, 0xb97534d5fe9704cf, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080c3}, 0x24000000) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x0, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r12, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000140)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x51}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xc, &(0x7f0000000bc0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x51}}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.667215569s ago: executing program 0 (id=8233): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000010) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x38, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000800000000000006040000000300000001000084008000000400000001000000000000810030615f61612e305f"], 0x0, 0x46, 0x0, 0x1}, 0x28) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x78c5}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4801}, 0x20011) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x20008055) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000300)={@empty, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @remote}, {0x0, 0x0, 0x44, 0x0, @opaque="4c8ee586ae479e1db485f8cde1c09bf9d13eff7dd29937d3e3757af665ba984df9685198843710b99ce36037edd673cbf47c6503744e2d2ecf0043d6"}}}}}, 0x0) 4.459275175s ago: executing program 2 (id=8234): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x1e, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9ad1", 0x2}], 0x1}}], 0x2, 0x4000840) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_DPORT={0x6}, @RTA_NH_ID={0x8, 0x1e, 0x40}]}, 0x2c}}, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010004b0429bd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000013000000240012800b00010062726964676500001400028005000000000a00015c269220da669743bc991b3e00"/69], 0x50}}, 0x20000000) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000200)={r7, 0x5, 0x20}, &(0x7f00000001c0)=0x18) sendmmsg$inet_sctp(r1, &(0x7f0000000e80)=[{&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x1, @mcast1, 0x9}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000000c0)="951c0e7cb3b12db370d36c89b2d97df568c933fed8acf254a9b29c527653fb9c4d3d45a478e9f7c97b092fb63ab9fd16e44f11fa5e84c03d7dab5c67", 0x3c}, {&(0x7f00000002c0)="1a4e829c9221ce75b8d7e1873a70cf100947fc08704acfb3b03e9a1097c3a722882937178b3120628d11e9eb25a3899f7254e9521e86768e9725bc067cabdea39be712f29352342c1a36b0801ae46f1c72a6c803b4763fb52962084cb81725aec62d3a503d876b709a753749fbbed536232f23877e7d3247b48ffbe1ac0589f17099fd36d4efc8e2581788ca99fe87de058ab3e61d01a6e6aa47b0e065a19421a357ab398d79475850cf47df58891edfbb09eff723576b598e622bcf8ce7c0103109ce225bed6a39760e9d7f867e7f07a010967d36a25f57765af7218523b7", 0xdf}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000000400)="22c881051322afeeced748d9a8e412120d7385876cbbf63590de56cfebfb738730f5d60998f901af0f4dc32020c69a5f017c4c5a4efc3b157f3fc068e34fca07376a9eaa607c49a7c4f42008f240e2e0248c39107ae2f29f6ef7411d588b596117ea19fc6dc2a560300bdb45016da4c3342aadaa9881b7f62a051677caf7959c7716bcbbe751065808b05efa0fe40f80289a53dd115602b782ed0b0f9d7b9fb878b52f5318b173f4d6098307fac0fa9d0fcf5f178f14783ae37275e0bfe504f418c215857aef2af0c5706d87679e4c462966dda07fa88d1950010aaba2d74f393c97bcd07e7e908debbcec9501efda697f", 0xf1}, {&(0x7f0000000200)="88d58d35bd15c7f27e0e5d12", 0xc}, {&(0x7f0000000580)="4020bc3a850c194049adea19ec38398f8ff6f11cf60f79f862018c077e85ae1b4e2ec89ffe4f0fc380ca30ee187ee4d8aa5e5d9cf11d7a8e78ecb566e4c5863a8d59e48e754af6072ea441618600812f3a0536755359e059f58d71981436622449186a6fa88a707e961069d6e5d14e2f11bf2efb5f45ef746ce71c7c75cad277f73e6d7e93378272ba108d16a3831c843255a73318e853d35d5fa10b21ada5420e989a0a1f2c8cc260a90a088693e381a18f8564958b776f09dbe1b17a88fdc04566321a31e90f74fb9e9d87954782840249", 0xd2}, {&(0x7f0000000700)="117efc8344a8c13ce0e9394285954da826a6dc7a32c62fc4854fc059a145417dc98ec0264e2bbe73660eaa0ca08693ba6a19147c77e2b6a856b6c67dd24d8acee6c35505722d36b873cdf568a4f76d1c98d0d1e3d9ef533101c78ce305fa4438b14b1805674b1711e178e282e183666ae8613fd7f603fe56359639f7b142236c53ce91b4b5dc33844f8287425db424432aa1ba02da9f84a688bbea91040fa00087e0406a9184f107dba858c80ac0de0aad08", 0xb2}, {&(0x7f00000007c0)="817c7ef2162cc6f37983fed3f7eb560adb954d0d21c6e5af9e4ff80c085cc59d41812faee6b6bcf08a3a79176eaa1beb036b1f", 0x33}, {&(0x7f0000000800)="ef6334e695a066bd717780a5e6a536a759c71e29453700863ff23439feab043e6c5350cf58636f790c685329e9d733c64b99874cd09631b679f5d17ea77ab4a3d80a153917864c95bbe649c9ce43c5253a2119c1772ddffad4627cd6cf6b6b3b416cfc3e4f3e544bbca3bf74601f516d74103110be1da27b74bb292990c8bd970b6195872ff59de11af542b597d01f856b586eb8237faf53bee55415f61407d659b3ebc72f8693183e9ecfc96bbdde117e347aab34bd2304bc8fe11e0955a40a185aa30ef00f4b610a9a809c6febb353b625a7b2fb853b80fd4a9a6641052ca4", 0xe0}], 0x9, &(0x7f00000009c0)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0xfffff001}}, @init={0x18, 0x84, 0x0, {0x1, 0x7, 0xb55, 0x7237}}, @init={0x18, 0x84, 0x0, {0x6, 0x1ff, 0x7f, 0x7}}], 0x48, 0x40}, {&(0x7f0000000a40)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000002400)="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", 0x1000}], 0x1, 0x0, 0x0, 0x4}, {&(0x7f0000000ac0)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000b00)="932ef84d004600d6ba4e7e2cb36d352d227f1e87e83605d85cc2d5c6249797c60a1f393f2a9872c1e2da5354fee931d57c58468bbb6cd3e0aa4f", 0x3a}, {&(0x7f0000000b40)="854c868adf33502ee2533dc5fd4c0f1139c74057adddcc445155bb62d5135ae5f7757df45efcc0993b70cf5e735e66080253bf32d3ed91ebc11895f63ff0a482506961535163ff3287ec699e497101039999c75d5678f747f3b2ce0b2dc9e0fbe8ff19ecb766d5da8703d8e72ec3960caa06fe97ce83857a215fb081759a7097c874728899c24d9ac227d8c98d2191c32e49fc125b7c17bc1d981998285c6242b8c062f05e3e71866f3430bfed30a07cc74df4b73808b3876fc38a414d0236bbaa0d22e44fbf996091350a6ba3321e9adb7f0ce03e3bee39bdd7d5fdce01232bdb28d436500962868bcfb00929", 0xed}, {&(0x7f0000000c40)="a81c6f4ef230c531c50760317b8d7bfe3d1497786c789e6bd7761271bd79db38d9d9a662ff28e6e1259d8e6a73d69e65e1a5615d7dafcb4f22ac7d044b292001496925ff8173a31eaa358aac7313da28ef9970a156f570e32d762a355f5adb1e8ca0c1076ab0c6b4363fe401d09a6adffe880e65ce000e92fd51edf44a314b38acc0906b2a1fc76c0e600acfaa5e1a1bc1e946852ec1fb8e2aacfddbce0ba7ce0c908b419f283da0", 0xa8}, {&(0x7f0000000d00)="3554d56649ff84dce259bb7af5ae15303d19995cd9ccbcfb01546743285f8bcb7edb83adfacb462793112083e3e3a194d225309bedde68ebc93ce1921fdd553e218a0611ee234040f7847c09eac6c7f80423977fa19f311b58bce23d0bba575f571695e329c317161af000797f8d07bdc653d208e18da7648b135a2cc3b824e0313bf1e18bde136dd55b4c282ce1fb57dce89f8a0b9a0ec8e17c04970254fa093fda114db89810744539c19d3b906c176500c711c45ac415c8e8e2b1", 0xbc}], 0x4, &(0x7f0000000e00)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0xb4}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x8000, 0x8, 0x8, 0x6, 0xca9, 0x4, 0x2, r7}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x5}}], 0x60, 0x9c}], 0x3, 0x30048040) 4.250944194s ago: executing program 3 (id=8235): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, '\x00', 0x22}, 0x6}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, '\x00', 0x22}, 0x6}, 0x1c) socket(0x1e, 0x4, 0x0) (async) r4 = socket(0x1e, 0x4, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x0, 0x7ffe}, 0xc) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r4, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1, 0x0, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x2, 0x40002122, 0x0) (async) recvmmsg(r4, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1, 0x0, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x2, 0x40002122, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2712, &(0x7f00000003c0)=""/102394, &(0x7f0000000040)=0xffffffffffffff69) sendmsg$tipc(r4, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) (async) sendmsg$tipc(r4, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x4008000) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0xfffffe22, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x16) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0af0ff14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000003f0000009c600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b04000000f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcb9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f6b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670594acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a14281e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b6198366283c531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f674eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc8557f9a2e15483dbafb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d895a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5d1fe58a00c6855ada17dcbb20a2f03164292a1e4e53e4140224ba82b599de2604398b860906dccd87c1bf0e8d0cce2e34589ef2bd3672907b7604034d4697fa3f957622eaa59df5c02b307bceaf138b419ce49f4850328069ed4d5559babf388329d6605f74dc1c21c9f0f1aa9826ba2936f14affb0b06d0aeb1054b2d044cafe64979590000000000000000000000784de836bec51a9db6533248165f79bf47b13d6d2c83a7442632f60f9eb0cc4fa54e08e5e349cc3afdff6f3175a80c4015d380ee0880a8a822d0a630a864c823392420ec93fab6d4d98a53c8b75221a9576e8204169fa1046355a0342539527e882e7fcaf062f0733fc0fb97"], &(0x7f0000000340)='GPL\x00', 0x0, 0xfffffe22, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x16) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xfffffffffffffff1, r2, 0x101, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x28002889}, 0x811) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0206fe00030000002cbd7000e9dbdf2501001400a1000000"], 0x18}}, 0x68f4f00d3aa7dce4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42100}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd7}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0x1ff}}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000193c0)=@migrate={0x68, 0x21, 0x1, 0x3, 0x1, {{@in, @in6=@remote}}, [@policy_type={0xa, 0x10, {0x1}}, @policy_type={0xa}]}, 0x68}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000193c0)=@migrate={0x68, 0x21, 0x1, 0x3, 0x1, {{@in, @in6=@remote}}, [@policy_type={0xa, 0x10, {0x1}}, @policy_type={0xa}]}, 0x68}}, 0x0) 4.103924591s ago: executing program 3 (id=8236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff2, 0x2, 0xfffff001, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4c, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x3}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x5}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfd20}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x80000000}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x5}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x81}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000050}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.040954147s ago: executing program 1 (id=8237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x94, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xff, 0x64}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x8885}, 0x20000000) write$tun(r0, &(0x7f0000000140)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x14, 0x0, @opaque="6f841fcaf955c253e28c7ab3"}}}}}}, 0x3a) 1.250321959s ago: executing program 2 (id=8238): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @remote, 0x40, 0x0, 0x0, 0xfffffffe}}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000040)={'filter\x00', 0x0, [0x5, 0x3, 0x7, 0x9, 0xfffffffd]}, &(0x7f00000000c0)=0x54) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbbe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r7, &(0x7f0000000380)="0099d885", &(0x7f0000000480)=@tcp6=r4, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.227186299s ago: executing program 0 (id=8239): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="07000000010001", 0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000c900850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$l2tp6(r0, &(0x7f0000001080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0xfffffffe}, 0x20) 1.1289754s ago: executing program 1 (id=8240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x8100}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0xe000, 0x6, 0x2f, 0x0, @private=0xa010101, @empty}, {0xa001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffa}]}, 0x2c}}, 0x20044800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001e00)=ANY=[@ANYBLOB="240000002d0001002dbd7000ffdbdf2508005900ffffffff00"/36], 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0xc000) 1.052213185s ago: executing program 3 (id=8241): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r1}, 0x20) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x4a, &(0x7f00000003c0)=""/74, 0x40f00, 0x3, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0x1, 0x18c9d50b, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa1c}, 0x94) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000580)='\x00', 0xce8582, &(0x7f00000005c0)={@_ha_fsid={[0x7]}, {0x9554, 0x6a, 0x5, 0x4}}, 0x5, &(0x7f0000000600), &(0x7f0000000640)=0x35b}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={r0, 0xffffffffffffffff}, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f0000000980)={'tunl0\x00', 0x0, 0x40, 0x7800, 0x9, 0x3, {{0x22, 0x4, 0x0, 0x3c, 0x88, 0x67, 0x0, 0x1, 0x2f, 0x0, @multicast2, @private=0xa010101, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x54, 0x28, 0x1, 0x6, [{@loopback}, {@rand_addr=0x64010100, 0x8}, {@remote, 0x189524e1}, {@multicast1, 0xa}, {@multicast1, 0x1}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x101}, {@multicast1, 0xfffffffb}, {@multicast2, 0xedd}, {@remote, 0x5}]}, @lsrr={0x83, 0x1b, 0x29, [@loopback, @local, @broadcast, @local, @private=0xa010100, @empty]}]}}}}}) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, r3, 0x3, 0x2}, 0x50) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', 0x0, r3, 0x0, 0x5, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x1d, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0xe356}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x17a2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x42}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000008c0)='GPL\x00', 0x13, 0x4f, &(0x7f0000000900)=""/79, 0x41100, 0x38, '\x00', r7, @fallback=0x1d, r3, 0x8, &(0x7f0000000a80)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x3, &(0x7f0000000c80)=[r0, r0, r0, r8, r9, r2], &(0x7f0000000cc0)=[{0x1, 0x1, 0xc, 0x5}, {0x0, 0x5, 0x1, 0x8}, {0x4, 0x3, 0x5}], 0x10, 0x1347}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x13, &(0x7f0000000140)=@raw=[@exit, @ldst={0x1, 0x1, 0x1, 0xb, 0x3, 0xffffffffffffffff, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f0000000200)='syzkaller\x00', 0x6b8c, 0xa7, &(0x7f0000000240)=""/167, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0x10, 0x0, 0xa}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000380)=[{0x3, 0x4, 0x7, 0x1}, {0x1, 0x5, 0xd, 0x5}, {0x0, 0x1, 0x8, 0x7}, {0x1, 0x4, 0x10, 0x1}, {0x2, 0x3, 0x2, 0x6}, {0x2, 0x3, 0xf}], 0x10, 0x6}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000080)="5c250ed6087361df712bc884fed5", 0x0, 0x2ef8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaa0000aa0180c200000008ff"], 0x0) 1.007337634s ago: executing program 0 (id=8242): write(0xffffffffffffffff, 0x0, 0x0) 928.916174ms ago: executing program 4 (id=8243): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x54, 0x0, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x80000000]}, @CTA_TUPLE_ORIG={0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES64=r1], 0x0) 928.698986ms ago: executing program 3 (id=8244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xc8, r4}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x3ca}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x38}, 0x1, 0x0, 0x0, 0x40005}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 897.287524ms ago: executing program 0 (id=8245): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfb61cb0106df6c98}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x411, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, 0x86, 0x1e}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x93}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x1, @remote}, 0xa, 0xfffc}}, 0x26) sendmmsg$inet(r9, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)}}], 0x1a000, 0x8040) close(0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000200)=0xddc, 0x4) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x822}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r10, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000001c0)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0xa, 0x6, "abd955", 0x44, 0x2f, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0xf1, 0x0, 0x0, 0x0, 0x3, 0x8}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x4, {{0xf, 0x2, 0x7, 0x1, 0x1, 0x0, 0x7, 0x3}, 0x2, {0x8, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) 758.418427ms ago: executing program 1 (id=8246): socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000280)={0xfbc9, 0x1ff, 0x403, 0x80, 0x6, 0x2, 0xc}, 0x2d) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r6], 0x50}}, 0x2) 700.86092ms ago: executing program 4 (id=8247): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @fwd, @volatile, @volatile, @restrict={0x8, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x96}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xfffffffd}, 0x10}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$pptp(0x18, 0x1, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffffde}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x4000000}], 0x32, 0x400c0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/124, 0x7c}, {0x0}, {&(0x7f0000000800)=""/88, 0x58}, {&(0x7f00000002c0)=""/41, 0x29}], 0x4}, 0x40000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r6, 0x0, 0xf3a, 0x0) write(r6, &(0x7f0000000240)="94", 0x1) tee(r5, r11, 0x8f5, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x2a, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) write(r7, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 450.696432ms ago: executing program 3 (id=8248): r0 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffea6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES8=r0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004900)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080"], 0x24}}, 0xc0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000400)=0xffffff3f, 0xfffffffffffffed6) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000440)={0x0, @hci={0x1f, 0x0, 0x1}, @l2tp={0x2, 0x0, @empty, 0x4}, @ethernet={0x6, @random="a5ffc51cb5bc"}, 0x8322, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)='rose0\x00', 0x0, 0xfffffffffffffff5, 0x4}) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000080)=0x3, 0x4) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e22, @empty}, 0x41, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)='macvlan1\x00', 0x2, 0x1, 0x10}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) tee(r0, r5, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) 338.469536ms ago: executing program 1 (id=8249): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150700000fff00003506000002000000170600000ee5e50cbf250000000000001f650000000000007507000002000000170700004c0001000f75000000000000bf54000000000000070400000400f9ff2d3501000000000095000000000000000500000000000000950007000000000001722fabb733a0c857c7c45402000000a2d23da04d1ffc187fa1a2ba7ba030c7267c2de00435fd233cc0f0d9b2c3127c46b0f408398d09ee4dc258d726eae098804ce25df627a64ac7efde50fd7f1dd5b17ed764c33b06598bae66ea38541a7cd29032de94983dfab0e5043daf1b46bef5135c65377bdbe65d525743d88ef4b2ee62652b07f8a4b6e6155cecc13a5ddfab726eca91bd5fecb254ab358488c400330171128be291297947d47dc570a385a459ef8e6ada84e987cc0000f6991078a21788cab9d53ad890206ab56506ab08b294c09ea4536e0b9bb0627a03a1eb9cbe6958812a98abad49f42a6fb2b69c0880548c39f13f4cca63a87ad7ff8d1006cc6d95e406deb61b9c7ac3f35f1fdb27e70900001fd13d4a22fc90e5f7300c53f2b6e7e001058dc04b434e379fd5526b52990b04b183c21e6b974a4bf85567348c6c6a4404d987f71d81fe988ddc82dac01bbb43e006203a31b02f9519ffb29cd3508d7da829712c98381a672db9fa6a8eb38d784c913a804557c4577a22acb7b73c4aa0e07998734fdfbb0d262ef88b3b8cd1a8518dd8326f6367ed938a05c108cf2639e8799fd7cb018f08453fa863f8fb8178569d26a0a48e4498f88d15abbb22d955a162ac1fd3710c1255fbe3c6d1e84152c81ec0192e54d13dc5beebe3de27967e5d1aa8a6139056e3fb738d0ca46b0a1c63a29002e5b12314390ca075ecb43e0c6cd5af64c8b676316b9bff845ea0b20562f53c5b34314411bf3d4af06bdc3def9f2791d6d076ca72e319e6a9e1098bab878a9f1274a61ddee47abb54d8cf901e78bdb85f47ef37dd0daeb6403820ee8414042904917ea1b80a0000000000004c84018fd19fb3581ca1ff9fb5758d76929ec0502802869c51511c2c9dc56ead1449c038e4d2382d6ef61a7d9399cb"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xffffffffffffffa6, 0x0, 0xffffffffffffffff, 0x60}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 268.662282ms ago: executing program 0 (id=8250): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000800000000000000080000006b119e000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x173, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x3, 0xeffc}, &(0x7f0000000080)=0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbdf000060005004e22000314000400fe8000000200000000000000fcffff21060001000a00"/54], 0x3c}, 0x1, 0x0, 0x0, 0xc8d1}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe04, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000480)={r1, @in={{0x2, 0x4e22, @loopback}}, 0x401, 0x6e8, 0x3ff, 0x8, 0x3, 0x4e, 0xdd}, &(0x7f0000000540)=0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000580)={r8, @in={{0x2, 0x4e23, @remote}}, [0x5, 0x40, 0x80, 0x7ff, 0x0, 0x0, 0x7, 0x3, 0x5, 0x7, 0x5, 0x72b0, 0x80000000, 0x0, 0xd]}, &(0x7f0000000680)=0x100) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="180100008f080000000000000010000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207baff8ff00000000bfa100000000000064010000f8ffffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf91000000000000b702000001000000850000008500008d480000000000000095"], &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000400)={@dev={0xfe, 0x80, '\x00', 0x30}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x5, 0x1392, 0x2, 0x300, 0x8, 0x8, r7}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000240)="800000", 0x3, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0x9c, 0x6, @random="48802e59d488"}, 0x14) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r5, @ANYBLOB="ff07000000000000007fff000000000000000000", @ANYRES32=r7, @ANYRES32=r12, @ANYBLOB="01000000020000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e20, 0x6, @empty, 0x5}}, 0x401, 0x0, 0x13, 0x8001, 0x40, 0x9acf, 0x5}, 0x9c) 0s ago: executing program 3 (id=8251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff2, 0x2, 0xfffff001, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x2, 0xb}, {0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4c, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x3}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x5}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfd20}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x80000000}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x5}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x81}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000050}, 0x4010804) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): o params data found [ 880.472498][ T6052] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6374'. [ 880.763593][ T6072] xt_connbytes: Forcing CT accounting to be enabled [ 881.051969][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.082835][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.100910][ T5958] bridge_slave_0: entered allmulticast mode [ 881.121381][ T5958] bridge_slave_0: entered promiscuous mode [ 881.182178][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.200509][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.223985][ T5958] bridge_slave_1: entered allmulticast mode [ 881.240902][ T5958] bridge_slave_1: entered promiscuous mode [ 881.545995][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.570229][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.622336][ T5958] team0: Port device team_slave_0 added [ 881.639640][ T5958] team0: Port device team_slave_1 added [ 881.790889][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.809875][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.867054][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.880934][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.888628][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.917964][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.047796][ T6121] bond1: option xmit_hash_policy: invalid value (10) [ 882.060566][ T6121] bond1 (unregistering): Released all slaves [ 882.238989][ T5958] hsr_slave_0: entered promiscuous mode [ 882.270266][ T5958] hsr_slave_1: entered promiscuous mode [ 882.306819][ T5958] debugfs: 'hsr0' already exists in 'hsr' [ 882.312642][ T5958] Cannot create hsr debugfs directory [ 882.356183][ T4870] Bluetooth: hci4: command tx timeout [ 882.564527][ T6146] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.572329][ T6146] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.804238][ T6146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.824658][ T6146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.066065][ T6409] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.112314][ T6409] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.122226][ T6409] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.233244][ T6409] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.298240][ T6179] __nla_validate_parse: 3 callbacks suppressed [ 883.298262][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6398'. [ 883.458144][ T6187] netlink: 'syz.3.6398': attribute type 8 has an invalid length. [ 883.576123][ T6195] netlink: 'syz.2.6402': attribute type 1 has an invalid length. [ 883.650062][ T6195] bond2: entered promiscuous mode [ 883.656102][ T6195] 8021q: adding VLAN 0 to HW filter on device bond2 [ 883.664193][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6402'. [ 883.738132][ T5958] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.760118][ T5958] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.775555][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6402'. [ 883.886644][ T5958] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.918464][ T5958] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.931605][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6404'. [ 884.061498][ T5958] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.096009][ T5958] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.200569][ T5958] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 884.211164][ T6213] nbd1: detected capacity change from 0 to 1006632960 [ 884.234086][ T5958] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.283207][ T4870] block nbd1: Receive control failed (result -104) [ 884.437487][ T4870] Bluetooth: hci4: command tx timeout [ 884.634319][ T6226] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6407'. [ 884.825140][ T5958] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 884.843436][ T6236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6410'. [ 884.891422][ T5958] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 884.925417][ T5958] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 884.957609][ T5958] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 885.061760][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6411'. [ 885.299642][ T6251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6412'. [ 885.332370][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.340236][ T6224] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6408'. [ 885.366656][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6408'. [ 885.409422][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.441467][ T6410] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.448703][ T6410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.546268][ T6410] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.553543][ T6410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.100463][ T6270] syzkaller0: entered promiscuous mode [ 886.106505][ T6270] syzkaller0: entered allmulticast mode [ 886.334125][ T6279] netlink: 'syz.2.6417': attribute type 11 has an invalid length. [ 886.364451][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.396112][ T6279] netlink: 'syz.2.6417': attribute type 4 has an invalid length. [ 886.516392][ T4870] Bluetooth: hci4: command tx timeout [ 886.601348][ T5958] veth0_vlan: entered promiscuous mode [ 886.659064][ T5958] veth1_vlan: entered promiscuous mode [ 886.787547][ T5958] veth0_macvtap: entered promiscuous mode [ 886.817020][ T6308] netlink: 'syz.3.6419': attribute type 13 has an invalid length. [ 886.893732][ T5958] veth1_macvtap: entered promiscuous mode [ 886.934829][ T6299] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 887.001340][ T6299] syzkaller0: entered promiscuous mode [ 887.040816][ T6299] syzkaller0: entered allmulticast mode [ 887.137669][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.153969][ T6318] batadv0: entered promiscuous mode [ 887.176044][ T6318] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 887.249856][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.286555][ T6774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.308822][ T6774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.355208][ T6774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.413406][ T6774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.616101][ T6410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.624106][ T6410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.803572][ T6774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.821860][ T6774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.908868][ T6338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.293787][ T6360] syzkaller0: entered promiscuous mode [ 888.315547][ T6360] syzkaller0: entered allmulticast mode [ 888.533366][ T6370] __nla_validate_parse: 8 callbacks suppressed [ 888.533388][ T6370] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6435'. [ 888.569610][ T6370] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6435'. [ 888.601112][ T6370] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6435'. [ 888.669224][ T6373] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6436'. [ 888.726250][ T6373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6436'. [ 889.139592][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6439'. [ 889.157352][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6441'. [ 889.168848][ T6391] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6439'. [ 889.190048][ T6397] netlink: 'syz.0.6441': attribute type 5 has an invalid length. [ 889.220678][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6441'. [ 889.221370][ T6397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6441'. [ 889.336327][ T6397] geneve2: entered promiscuous mode [ 889.346193][ T6397] geneve2: entered allmulticast mode [ 889.354490][T30414] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 889.372194][T30414] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 889.403266][T30414] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 889.438184][T30414] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 889.580865][ T6412] bridge_slave_0: left allmulticast mode [ 889.588588][ T6412] bridge_slave_0: left promiscuous mode [ 889.627415][ T6416] netlink: 'syz.1.6443': attribute type 1 has an invalid length. [ 889.644353][ T6412] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.692243][ T6412] bridge_slave_1: left allmulticast mode [ 889.699602][ T6412] bridge_slave_1: left promiscuous mode [ 889.705504][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.721452][ T6412] bond0: (slave bond_slave_0): Releasing backup interface [ 889.733581][ T6412] bond0: (slave bond_slave_1): Releasing backup interface [ 889.780286][ T6412] team0: Port device team_slave_0 removed [ 889.821549][ T6412] team0: Port device team_slave_1 removed [ 889.844588][ T6412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 889.862437][ T6412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.897813][ T6412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 889.910081][ T6412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.949119][ T6412] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 889.999748][ T6414] netlink: 'syz.0.6444': attribute type 4 has an invalid length. [ 890.363613][ T6434] tipc: Started in network mode [ 890.395986][ T6434] tipc: Node identity a6a2dd56bf92, cluster identity 4711 [ 890.420511][ T6434] tipc: Enabled bearer , priority 0 [ 890.682209][ T6444] syzkaller0: entered promiscuous mode [ 890.704807][ T6444] syzkaller0: entered allmulticast mode [ 890.713283][ T6444] tipc: Resetting bearer [ 890.764577][ T6433] tipc: Resetting bearer [ 892.591961][ T6433] tipc: Disabling bearer [ 892.617471][ T6442] wlan1 speed is unknown, defaulting to 1000 [ 892.629234][ T8214] tipc: Node number set to 422632790 [ 893.086994][ T6482] netlink: 'syz.3.6458': attribute type 1 has an invalid length. [ 893.204213][ T6490] netlink: 'syz.0.6460': attribute type 30 has an invalid length. [ 893.273701][ T6489] bond4: (slave bridge6): making interface the new active one [ 893.297333][ T6489] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 893.426512][ T6464] wlan1 speed is unknown, defaulting to 1000 [ 894.247430][ T6498] wlan1 speed is unknown, defaulting to 1000 [ 894.323839][ T6521] __nla_validate_parse: 1 callbacks suppressed [ 894.323860][ T6521] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6465'. [ 894.361633][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6465'. [ 894.512747][ T6535] netlink: 'syz.2.6467': attribute type 1 has an invalid length. [ 894.791977][ T6535] 8021q: adding VLAN 0 to HW filter on device bond3 [ 894.812823][ T6539] vlan3: entered promiscuous mode [ 894.818512][ T6539] bond3: entered promiscuous mode [ 894.824132][ T6539] vlan3: entered allmulticast mode [ 894.834472][ T6539] bond3: entered allmulticast mode [ 894.981680][ T6542] bond3: (slave bridge4): making interface the new active one [ 895.001641][ T6542] bridge4: entered promiscuous mode [ 895.015834][ T6542] bridge4: entered allmulticast mode [ 895.033071][ T6542] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 895.199324][ T6518] wlan1 speed is unknown, defaulting to 1000 [ 895.296114][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6470'. [ 895.305148][ T6558] batadv_slave_1: entered promiscuous mode [ 895.356204][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6470'. [ 895.401305][ T6567] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6471'. [ 895.414003][ T6567] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6471'. [ 895.423609][ T6567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6471'. [ 895.447471][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6472'. [ 895.657682][ T6571] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6471'. [ 895.679330][ T6571] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6471'. [ 896.118319][ T6293] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.129101][ T6293] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.298763][ T6293] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.309673][ T6293] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.467492][ T6609] netlink: 'syz.1.6483': attribute type 1 has an invalid length. [ 896.913355][ T6624] vlan2: entered allmulticast mode [ 896.995771][ T6624] veth0_to_bond: entered allmulticast mode [ 897.676535][ T6620] wlan1 speed is unknown, defaulting to 1000 [ 898.307851][ T6694] netlink: 'syz.4.6504': attribute type 8 has an invalid length. [ 898.638376][ T6707] unsupported nlmsg_type 40 [ 898.944722][ T6711] bond1: option tlb_dynamic_lb: invalid value (5) [ 898.967585][ T6711] bond1 (unregistering): Released all slaves [ 899.012611][ T6410] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 899.033125][ T6410] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 899.063922][ T6717] netlink: 'syz.1.6510': attribute type 3 has an invalid length. [ 899.095937][ T6711] macsec1: entered promiscuous mode [ 899.233865][ T6410] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 899.245644][ T6410] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 899.346215][ T6725] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 899.354276][ T6725] syzkaller0: entered promiscuous mode [ 899.400837][ T6725] syzkaller0: entered allmulticast mode [ 899.434208][ T6739] __nla_validate_parse: 149 callbacks suppressed [ 899.434229][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6515'. [ 899.508938][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6515'. [ 899.519506][ T6739] netlink: 121 bytes leftover after parsing attributes in process `syz.2.6515'. [ 899.929447][ T6761] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6522'. [ 900.082464][ T6731] wlan1 speed is unknown, defaulting to 1000 [ 900.116577][ T6778] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 900.145710][ T6778] syzkaller1: linktype set to 270 [ 900.545966][ T6804] netlink: set zone limit has 8 unknown bytes [ 901.237720][ T6837] Bluetooth: MGMT ver 1.23 [ 901.355927][ T6842] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6541'. [ 901.556224][ T6855] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 901.581621][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6545'. [ 901.595324][ T6859] netlink: 620 bytes leftover after parsing attributes in process `syz.3.6545'. [ 901.747633][ T6861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.767216][ T6861] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.789047][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6546'. [ 901.837471][ T6861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 901.858533][ T6867] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6546'. [ 903.487348][ T6925] macsec1: entered promiscuous mode [ 903.503930][ T6931] rdma_op ffff888054a8d1f0 conn xmit_rdma 0000000000000000 [ 903.575998][ T6931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6547'. [ 904.073826][ T6953] netlink: 'syz.2.6556': attribute type 1 has an invalid length. [ 904.240979][ T6953] bond4: entered promiscuous mode [ 904.256142][ T6953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 904.389950][ T6929] wlan1 speed is unknown, defaulting to 1000 [ 905.834711][ T7033] netlink: 'syz.2.6573': attribute type 2 has an invalid length. [ 905.872694][ T7033] __nla_validate_parse: 5 callbacks suppressed [ 905.872716][ T7033] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6573'. [ 905.962839][ T7035] sctp: [Deprecated]: syz.3.6574 (pid 7035) Use of int in max_burst socket option. [ 905.962839][ T7035] Use struct sctp_assoc_value instead [ 905.990288][ T7037] netdevsim netdevsim4: Direct firmware load for - [ 905.990288][ T7037] failed with error -2 [ 906.018821][ T7037] netdevsim netdevsim4: Falling back to sysfs fallback for: - [ 906.018821][ T7037] [ 906.050839][ T7038] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.6575'. [ 907.240795][ T7070] syzkaller0: entered promiscuous mode [ 907.272151][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6584'. [ 907.274231][ T7070] syzkaller0: entered allmulticast mode [ 907.352842][ T7085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6585'. [ 907.385826][ T7081] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6585'. [ 907.504101][ T7096] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6587'. [ 907.528194][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6585'. [ 909.443545][ T7096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 909.598911][ T7122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6592'. [ 909.633228][ T7127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6592'. [ 909.672289][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6595'. [ 909.963164][ T7125] tipc: Enabled bearer , priority 0 [ 910.022325][ T7125] tipc: Resetting bearer [ 910.028507][ T7141] syzkaller0: entered promiscuous mode [ 910.072414][ T7141] syzkaller0: entered allmulticast mode [ 910.100576][ T7124] tipc: Resetting bearer [ 910.169254][ T7124] tipc: Disabling bearer [ 910.928682][ T7155] netlink: 'syz.2.6598': attribute type 62 has an invalid length. [ 910.972571][ T7164] wlan1 speed is unknown, defaulting to 1000 [ 912.706855][ T7224] __nla_validate_parse: 3 callbacks suppressed [ 912.706877][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6611'. [ 912.756651][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6611'. [ 912.798745][ T7226] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 912.817950][ T7226] bond1 (unregistering): Released all slaves [ 912.896420][ T7200] wlan1 speed is unknown, defaulting to 1000 [ 913.350541][ T7256] IPVS: set_ctl: invalid protocol: 75 172.20.20.187:20003 [ 914.257518][ T7279] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6623'. [ 914.285953][ T7279] netlink: 175 bytes leftover after parsing attributes in process `syz.2.6623'. [ 914.358341][ T7279] netlink: 'syz.2.6623': attribute type 10 has an invalid length. [ 914.370527][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6622'. [ 914.431223][ T7279] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.451369][ T1695] block nbd1: Possible stuck request ffff888026602800: control (read@0,4096B). Runtime 30 seconds [ 914.461022][ T7279] bond0: (slave team0): Enslaving as an active interface with an up link [ 914.466711][ T7284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6624'. [ 914.524279][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6624'. [ 914.574605][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6622'. [ 914.660959][ T7299] netlink: 'syz.3.6626': attribute type 32 has an invalid length. [ 914.685986][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6626'. [ 914.749468][ T7306] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 914.897925][ T7315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6630'. [ 915.264464][ T7336] netlink: 'syz.3.6632': attribute type 3 has an invalid length. [ 915.347528][ T7336] syz_tun: entered allmulticast mode [ 915.407123][ T7344] syz_tun: left allmulticast mode [ 915.524064][ T7353] netlink: 'syz.3.6636': attribute type 1 has an invalid length. [ 916.039879][ T7379] syzkaller0: entered promiscuous mode [ 916.069740][ T7379] syzkaller0: entered allmulticast mode [ 916.387349][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.439110][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.987521][ T7424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 917.051710][ T7424] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 917.061066][ T7424] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 917.279611][ T7439] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 917.527902][ T7451] syzkaller0: entered promiscuous mode [ 917.543439][ T7451] syzkaller0: entered allmulticast mode [ 917.562896][ T7449] ip6_vti0: entered allmulticast mode [ 917.570058][ T7451] 0: reclassify loop, rule prio 0, protocol 700 [ 917.610641][ T7454] syzkaller0: entered promiscuous mode [ 917.616694][ T7454] syzkaller0: entered allmulticast mode [ 917.863763][ T7460] sch_tbf: burst 2 is lower than device tunl0 mtu (1480) ! [ 917.898189][ T7464] netlink: 'syz.2.6662': attribute type 10 has an invalid length. [ 918.039266][ T7464] veth0_vlan: left promiscuous mode [ 918.065215][ T7464] veth0_vlan: entered promiscuous mode [ 918.118146][ T7478] __nla_validate_parse: 5 callbacks suppressed [ 918.118168][ T7478] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6663'. [ 918.137145][ T7464] team0: Device veth0_vlan failed to register rx_handler [ 918.197788][ T7478] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6663'. [ 918.503398][ T7489] netlink: 'syz.4.6666': attribute type 3 has an invalid length. [ 918.625706][ T7497] netlink: 'syz.1.6669': attribute type 10 has an invalid length. [ 918.635917][ T7497] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6669'. [ 918.674615][ T7497] dummy0: entered promiscuous mode [ 918.687961][ T7497] bridge0: port 1(dummy0) entered blocking state [ 918.695189][ T7497] bridge0: port 1(dummy0) entered disabled state [ 918.704347][ T7497] dummy0: entered allmulticast mode [ 918.745955][ T7489] syz_tun: entered allmulticast mode [ 918.872812][ T7489] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 918.912694][ T7494] ip6_vti0: left allmulticast mode [ 919.093684][ T7494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 919.122519][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 919.213061][ T7485] syz_tun: left allmulticast mode [ 919.264163][ T7522] lo: Caught tx_queue_len zero misconfig [ 919.270099][ T7522] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 919.278319][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6671'. [ 919.373681][ T7506] xt_CT: No such helper "syz0" [ 919.560917][ T7530] veth3: entered promiscuous mode [ 920.004549][ T7562] netlink: 'syz.4.6684': attribute type 33 has an invalid length. [ 920.032767][ T7562] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6684'. [ 920.107132][ T7564] netlink: 'syz.3.6685': attribute type 10 has an invalid length. [ 920.110683][ T7562] `: renamed from team0 (while UP) [ 920.364121][ T7579] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6689'. [ 921.148265][ T7589] wlan1 speed is unknown, defaulting to 1000 [ 922.412323][ T7674] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 922.436016][ T7676] tipc: Enabling of bearer rejected, failed to enable media [ 922.463150][ T7672] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6710'. [ 922.495846][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6712'. [ 922.533137][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6712'. [ 922.639141][ T7681] pimreg: tun_chr_ioctl cmd 1074025677 [ 922.645045][ T7681] pimreg: linktype set to 1 [ 923.352912][ T7725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6724'. [ 923.859897][ T7730] wlan1 speed is unknown, defaulting to 1000 [ 924.150934][ T7758] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6730'. [ 924.383235][ T7765] smc: net device hsr0 applied user defined pnetid SYZ2 [ 924.930835][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6738'. [ 925.106028][ T7802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6740'. [ 925.144681][ T7802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6740'. [ 925.336548][ T7815] tipc: Started in network mode [ 925.339889][ T7817] Bluetooth: MGMT ver 1.23 [ 925.349199][ T7815] tipc: Node identity 065a18c1d36d, cluster identity 4711 [ 925.367689][ T7815] tipc: Enabled bearer , priority 0 [ 925.406510][ T7815] syzkaller0: entered promiscuous mode [ 925.412353][ T7815] syzkaller0: entered allmulticast mode [ 925.434341][ T7815] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6742'. [ 925.581385][ T7814] tipc: Resetting bearer [ 925.662230][ T7814] tipc: Disabling bearer [ 925.698421][ T7834] xt_recent: hitcount (67108870) is larger than allowed maximum (65535) [ 926.357024][ T7862] gretap1: entered promiscuous mode [ 927.172964][ T7887] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6759'. [ 927.266015][ T7891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6760'. [ 927.336216][ T7850] wlan1 speed is unknown, defaulting to 1000 [ 927.395712][ T4870] Bluetooth: hci1: command tx timeout [ 927.599442][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6764'. [ 927.899526][ T7920] netlink: 'syz.3.6765': attribute type 1 has an invalid length. [ 927.909365][ T7919] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6767'. [ 928.257796][ T7922] bond5: (slave bridge7): making interface the new active one [ 928.266964][ T7922] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 928.876284][ T7949] xt_HMARK: proto mask must be zero with L3 mode [ 929.099171][ T7957] syzkaller0: entered promiscuous mode [ 929.113391][ T7957] syzkaller0: entered allmulticast mode [ 929.292773][ T7965] tipc: Enabled bearer , priority 0 [ 929.307721][ T7962] syzkaller0: entered promiscuous mode [ 929.323756][ T7962] syzkaller0: entered allmulticast mode [ 929.637563][ T7985] tipc: Resetting bearer [ 929.716715][ T7991] netlink: 'syz.0.6782': attribute type 4 has an invalid length. [ 929.981752][ T7961] tipc: Resetting bearer [ 930.074150][ T7961] tipc: Disabling bearer [ 930.103238][ T8009] syzkaller1: entered promiscuous mode [ 930.145512][ T8009] syzkaller1: entered allmulticast mode [ 930.376717][ T8017] batadv_slave_0: entered promiscuous mode [ 930.404452][ T8016] batadv_slave_0: left promiscuous mode [ 930.559148][ T8022] __nla_validate_parse: 2 callbacks suppressed [ 930.559171][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6789'. [ 930.840671][ T8002] wlan1 speed is unknown, defaulting to 1000 [ 931.372558][ T8006] wlan1 speed is unknown, defaulting to 1000 [ 933.155093][ T8133] netlink: 'syz.2.6812': attribute type 1 has an invalid length. [ 933.233392][ T8136] netlink: 'syz.4.6813': attribute type 5 has an invalid length. [ 933.246998][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6812'. [ 933.263473][ T8140] netlink: 'syz.0.6814': attribute type 3 has an invalid length. [ 933.357421][ T8133] 8021q: adding VLAN 0 to HW filter on device bond5 [ 933.481898][ T8147] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6814'. [ 933.597927][ T8154] netlink: 'syz.2.6817': attribute type 1 has an invalid length. [ 933.622918][ T8154] netlink: 'syz.2.6817': attribute type 2 has an invalid length. [ 933.635735][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6817'. [ 933.869287][ T8164] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.6819'. [ 934.023444][ T8168] bridge4: left promiscuous mode [ 934.041634][ T8168] bridge4: left allmulticast mode [ 934.051970][ T8168] veth3: left promiscuous mode [ 934.148782][ T8174] tipc: Enabling of bearer rejected, failed to enable media [ 934.336516][ T8185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6826'. [ 934.351588][ T8182] batadv0: left promiscuous mode [ 934.489039][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6824'. [ 934.631178][ T8182] geneve2: left promiscuous mode [ 934.641875][ T8182] geneve2: left allmulticast mode [ 934.670484][ T8191] pim6reg: entered allmulticast mode [ 934.679732][ T8194] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 934.685827][ T8198] hsr_slave_0: left promiscuous mode [ 934.743557][ T8198] hsr_slave_1: left promiscuous mode [ 934.787431][ T8198] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 934.819870][T25136] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 934.846032][ T6766] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 934.868515][ T6766] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 934.887552][ T6766] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 934.909195][ T8206] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6829'. [ 934.919300][ T8206] nbd: must specify at least one socket [ 935.620839][ T8254] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6839'. [ 935.668484][ T8256] xt_CONNSECMARK: invalid mode: 0 [ 935.851960][ T8273] netlink: 252 bytes leftover after parsing attributes in process `syz.0.6844'. [ 935.979045][ T8277] tipc: Enabled bearer , priority 0 [ 936.004394][ T8277] syzkaller0: entered promiscuous mode [ 936.020656][ T8277] syzkaller0: entered allmulticast mode [ 936.102046][ T8286] netlink: 67 bytes leftover after parsing attributes in process `syz.2.6847'. [ 936.139019][ T8276] tipc: Resetting bearer [ 936.256690][ T8276] tipc: Disabling bearer [ 936.529221][ T8311] dvmrp1: entered allmulticast mode [ 936.798536][ T8328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6856'. [ 936.850239][ T8322] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 936.928432][ T8330] netlink: 272 bytes leftover after parsing attributes in process `syz.3.6855'. [ 937.141582][ T8335] tipc: Started in network mode [ 937.149560][ T8338] netlink: 'syz.4.6858': attribute type 4 has an invalid length. [ 937.161839][ T8335] tipc: Node identity , cluster identity 4711 [ 937.175653][ T8335] tipc: Failed to obtain node identity [ 937.191003][ T8335] tipc: Enabling of bearer rejected, failed to enable media [ 937.220820][ T8340] syzkaller0: entered promiscuous mode [ 937.245723][ T8340] syzkaller0: entered allmulticast mode [ 937.584993][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6860'. [ 937.684973][ T8323] wlan1 speed is unknown, defaulting to 1000 [ 937.691317][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6860'. [ 938.366128][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6869'. [ 938.418413][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6870'. [ 938.513016][ T8396] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6871'. [ 938.739689][ T8405] netlink: 'syz.4.6872': attribute type 15 has an invalid length. [ 938.870183][ T8403] syzkaller0: entered promiscuous mode [ 938.906569][ T8403] syzkaller0: entered allmulticast mode [ 939.016382][ T8403] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:21 [ 939.058092][ T8403] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20001 [ 939.659039][ T8455] netlink: 'syz.4.6886': attribute type 5 has an invalid length. [ 939.715128][ T8444] syzkaller0: entered promiscuous mode [ 939.832405][ T8444] syzkaller0: entered allmulticast mode [ 939.876118][ T8456] pim6reg: entered allmulticast mode [ 940.125383][ T8492] 8021q: VLANs not supported on nlmon0 [ 940.174716][ T8484] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 940.191429][ T8484] bond6 (unregistering): Released all slaves [ 940.235059][ T8451] syzkaller0: entered promiscuous mode [ 940.242736][ T8451] syzkaller0: entered allmulticast mode [ 940.252181][ T7092] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.700364][ T7092] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.709490][ T7092] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.772928][ T8502] tipc: Enabling of bearer rejected, failed to enable media [ 942.796881][ T8521] __nla_validate_parse: 2 callbacks suppressed [ 942.796903][ T8521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6897'. [ 942.828407][ T8521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6897'. [ 942.850495][ T7092] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.026322][ T8529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6900'. [ 943.208874][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6903'. [ 943.346215][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6902'. [ 943.355157][ T8532] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6902'. [ 943.421846][ T8558] netlink: 'syz.3.6906': attribute type 2 has an invalid length. [ 943.435405][ T8558] netlink: 'syz.3.6906': attribute type 1 has an invalid length. [ 943.443735][ T8558] netlink: 'syz.3.6906': attribute type 1 has an invalid length. [ 943.649460][ T8565] netlink: 'syz.2.6907': attribute type 1 has an invalid length. [ 943.673201][ T8564] syzkaller1: entered promiscuous mode [ 943.725533][ T8564] syzkaller1: entered allmulticast mode [ 944.077857][ T8591] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6915'. [ 944.107459][ T8591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6915'. [ 944.186345][T25136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.198960][ T8584] syzkaller0: entered promiscuous mode [ 944.204671][ T8584] syzkaller0: entered allmulticast mode [ 944.219122][T25136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.316022][ T8603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6911'. [ 944.400576][ T8607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6917'. [ 944.523017][ T1695] block nbd1: Possible stuck request ffff888026602800: control (read@0,4096B). Runtime 60 seconds [ 944.577470][ T8603] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 945.329969][ T8616] xt_cgroup: invalid path, errno=-2 [ 945.458151][T25136] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.467140][T25136] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.504480][T25136] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.525553][T25136] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.920981][ T8682] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 945.960522][ T8681] netlink: 'syz.2.6934': attribute type 22 has an invalid length. [ 946.031995][ T6766] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 946.041728][ T6766] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 946.094094][ T6766] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 946.119401][ T6766] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 946.442168][ T8701] netlink: 'syz.2.6938': attribute type 4 has an invalid length. [ 946.478285][ T8701] netlink: 'syz.2.6938': attribute type 4 has an invalid length. [ 946.568570][ T8701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 946.964707][ T30] audit: type=1804 audit(1771467254.490:11): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6944" name="memory.events" dev="tmpfs" ino=974 res=1 errno=0 [ 947.027199][ T30] audit: type=1800 audit(1771467254.490:12): pid=8723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6944" name="memory.events" dev="tmpfs" ino=974 res=0 errno=0 [ 947.418502][ T8747] openvswitch: netlink: Tunnel attr 154 out of range max 16 [ 948.026984][ T8779] __nla_validate_parse: 11 callbacks suppressed [ 948.027006][ T8779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6957'. [ 948.158141][ T8787] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6960'. [ 948.224116][ T8781] syzkaller1: entered promiscuous mode [ 948.234370][ T8781] syzkaller1: entered allmulticast mode [ 948.628759][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6965'. [ 949.442407][ T8826] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6969'. [ 951.258991][ T8793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 951.269182][ T8800] netlink: 'syz.3.6962': attribute type 11 has an invalid length. [ 951.277739][ T8800] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.6962'. [ 951.621251][ T8850] netlink: 'syz.3.6976': attribute type 1 has an invalid length. [ 951.652504][ T8850] netlink: 'syz.3.6976': attribute type 2 has an invalid length. [ 951.725763][ T8856] netlink: 596 bytes leftover after parsing attributes in process `syz.4.6977'. [ 951.849540][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6980'. [ 951.868783][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6980'. [ 952.136224][ T8882] syzkaller0: entered promiscuous mode [ 952.142767][ T8882] syzkaller0: entered allmulticast mode [ 952.152946][ T8885] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 952.796797][ T8911] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6986'. [ 952.870923][ T6773] bond1 (unregistering): (slave geneve2): Releasing active interface [ 953.130670][ T6773] bond6 (unregistering): (slave bridge3): Releasing active interface [ 953.232621][ T6773] bond0 (unregistering): Released all slaves [ 953.244019][ T6773] bond1 (unregistering): Released all slaves [ 953.260939][ T6773] bond2 (unregistering): Released all slaves [ 953.282486][ T6773] bond3 (unregistering): Released all slaves [ 953.298829][ T6773] bond4 (unregistering): Released all slaves [ 953.314263][ T6773] bond5 (unregistering): Released all slaves [ 953.330408][ T6773] bond6 (unregistering): Released all slaves [ 954.983384][ T5187] udevd[5187]: worker [5611] /devices/virtual/block/nbd1 is taking a long time [ 955.562144][ T8908] tun0: tun_chr_ioctl cmd 1074025675 [ 955.567888][ T8908] tun0: persist enabled [ 955.656027][ T6773] 9: left promiscuous mode [ 955.757670][ T6773] : left promiscuous mode [ 955.933469][ T6773] tipc: Disabling bearer [ 955.940895][ T6773] tipc: Left network mode [ 956.398794][ T6773] mac80211_hwsim hwsim78 wlan1 (unregistering): left promiscuous mode [ 956.461467][ T8947] delete_channel: no stack [ 956.597235][ T8967] batman_adv: batadv0: Adding interface: dummy0 [ 956.603666][ T8967] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.658813][ T8967] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 957.673064][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7013'. [ 957.814650][ T6773] hsr_slave_0: left promiscuous mode [ 957.862039][ T6773] hsr_slave_1: left promiscuous mode [ 958.659011][ T9081] xt_l2tp: invalid flags combination: 0 [ 958.755567][ T9087] Cannot find set identified by id 65534 to match [ 958.849081][ T9088] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7027'. [ 958.878342][ T9088] ..0ªî{X¹¦: renamed from gretap0 [ 958.930720][ T9088] ..0ªî{X¹¦: entered allmulticast mode [ 958.958827][ T9088] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 958.985920][ T9091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7030'. [ 959.037295][ T6773] IPVS: stop unused estimator thread 0... [ 959.443481][ T9126] netlink: 'syz.3.7035': attribute type 9 has an invalid length. [ 959.809045][ T9101] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 959.998559][ T9146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7040'. [ 960.049454][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7042'. [ 960.219921][ T9151] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 960.625023][ T9175] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 960.669560][ T9175] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7050'. [ 960.984998][ T9198] lo: entered allmulticast mode [ 961.026644][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7056'. [ 961.042307][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7056'. [ 961.322753][ T9156] wlan1 speed is unknown, defaulting to 1000 [ 961.462249][ T9222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7063'. [ 961.503322][ T9222] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7063'. [ 963.175058][ T9294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7077'. [ 963.354598][ T9312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7081'. [ 963.385578][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7081'. [ 963.567866][ T9323] bridge0: entered allmulticast mode [ 963.681692][ T9331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7085'. [ 963.782298][ T9334] bridge0: left allmulticast mode [ 963.880804][ T9336] lo speed is unknown, defaulting to 1000 [ 963.910679][ T9336] lo speed is unknown, defaulting to 1000 [ 963.930747][ T9336] lo speed is unknown, defaulting to 1000 [ 964.020880][ T9336] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 964.133977][ T9336] lo speed is unknown, defaulting to 1000 [ 964.143942][ T9336] lo speed is unknown, defaulting to 1000 [ 964.154749][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7087'. [ 964.167367][ T9336] lo speed is unknown, defaulting to 1000 [ 964.177554][ T9336] lo speed is unknown, defaulting to 1000 [ 964.183944][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7087'. [ 964.205632][ T9342] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7088'. [ 964.221536][ T9336] lo speed is unknown, defaulting to 1000 [ 964.229855][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7087'. [ 964.244393][ T9336] lo speed is unknown, defaulting to 1000 [ 964.267183][ T9336] lo speed is unknown, defaulting to 1000 [ 964.274533][ T9336] lo speed is unknown, defaulting to 1000 [ 964.642331][ T9367] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7093'. [ 964.697969][ T9362] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 964.727198][ T9370] netlink: 332 bytes leftover after parsing attributes in process `syz.2.7094'. [ 964.747095][ T9370] netlink: 'syz.2.7094': attribute type 9 has an invalid length. [ 964.786217][ T9370] netlink: 'syz.2.7094': attribute type 10 has an invalid length. [ 964.978215][ T9362] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.183789][ T9362] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.203458][ T9397] netlink: 'syz.2.7100': attribute type 13 has an invalid length. [ 966.214621][ T9362] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.259056][ T6766] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.278500][ T6766] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.296282][ T6766] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.315602][ T6766] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.357740][ T6766] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.415572][ T6766] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.448140][ T6766] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.482740][ T6766] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.617782][T30415] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.684544][T30415] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.761568][ T6766] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 966.830264][T30415] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.070173][ T9470] syzkaller0: entered promiscuous mode [ 967.112846][ T9470] syzkaller0: entered allmulticast mode [ 967.409337][ T9489] netlink: 'syz.2.7114': attribute type 1 has an invalid length. [ 967.824384][T30415] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.855374][T30415] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.886233][T30415] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 967.914661][T30415] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 968.212453][ T9529] __nla_validate_parse: 10 callbacks suppressed [ 968.212475][ T9529] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7121'. [ 968.282041][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7121'. [ 968.343428][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7121'. [ 968.375077][ T9541] bridge_slave_1: left allmulticast mode [ 968.381880][ T9541] bridge_slave_1: left promiscuous mode [ 968.393502][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.423224][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7121'. [ 968.450630][ T9529] netlink: 348 bytes leftover after parsing attributes in process `syz.3.7121'. [ 968.480072][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7121'. [ 968.515618][ T9529] netlink: 348 bytes leftover after parsing attributes in process `syz.3.7121'. [ 968.524810][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7121'. [ 968.562227][ T9541] bridge_slave_0: left allmulticast mode [ 968.576341][ T9541] bridge_slave_0: left promiscuous mode [ 968.582183][ T9551] openvswitch: netlink: Message has 4 unknown bytes. [ 968.591212][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.682994][ T9547] geneve2: entered promiscuous mode [ 968.711154][ T9556] tipc: Enabling of bearer rejected, failed to enable media [ 968.738939][T25136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.761387][T25136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.781468][T25136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.811293][T25136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.974472][ T9570] bond1: option mode: invalid value (254) [ 969.015130][ T9570] bond1 (unregistering): Released all slaves [ 969.074666][ T9575] xt_connbytes: Forcing CT accounting to be enabled [ 969.140943][ T9575] tipc: Enabled bearer , priority 0 [ 969.451066][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7136'. [ 969.575202][ T9601] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 969.648473][ T9601] bond6 (unregistering): Released all slaves [ 969.919872][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7139'. [ 969.931359][ T9632] netlink: 'syz.4.7140': attribute type 12 has an invalid length. [ 969.958996][ T9632] bridge0: port 3(batadv0) entered blocking state [ 969.967101][ T9632] bridge0: port 3(batadv0) entered disabled state [ 969.973857][ T9632] batadv0: entered allmulticast mode [ 969.984721][ T9632] batadv0: entered promiscuous mode [ 969.993063][ T9632] batadv0: left allmulticast mode [ 969.999340][ T9632] batadv0: left promiscuous mode [ 970.004754][ T9632] bridge0: port 3(batadv0) entered disabled state [ 970.162851][ T9639] netlink: 'syz.3.7142': attribute type 1 has an invalid length. [ 970.234502][ T9639] 8021q: adding VLAN 0 to HW filter on device bond6 [ 970.389897][ T9641] bond6: (slave veth7): Enslaving as an active interface with a down link [ 970.417758][ T9642] batman_adv: batadv0: Removing interface: dummy0 [ 970.448937][ T9642] bond6: (slave dummy0): making interface the new active one [ 970.507152][ T9642] dummy0: entered promiscuous mode [ 970.513003][ T9642] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 970.578702][ T9647] openvswitch: netlink: Multiple metadata blocks provided [ 971.041543][ T9651] wlan1 speed is unknown, defaulting to 1000 [ 971.052416][ T9651] lo speed is unknown, defaulting to 1000 [ 971.886927][ T9673] wlan1 speed is unknown, defaulting to 1000 [ 971.896084][ T9673] lo speed is unknown, defaulting to 1000 [ 972.473343][ T9606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 973.384591][ T9726] __nla_validate_parse: 7 callbacks suppressed [ 973.384612][ T9726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7160'. [ 973.430254][ T9729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7160'. [ 973.794859][ T9750] syzkaller0: entered promiscuous mode [ 973.801428][ T9750] syzkaller0: entered allmulticast mode [ 973.999530][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7168'. [ 974.032029][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7168'. [ 974.600086][ T8613] block nbd1: Possible stuck request ffff888026602800: control (read@0,4096B). Runtime 90 seconds [ 976.477468][ T9788] netlink: 'syz.2.7176': attribute type 1 has an invalid length. [ 976.505799][ T9788] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7176'. [ 976.515023][ T9795] netlink: 'syz.1.7180': attribute type 1 has an invalid length. [ 976.558406][ T9800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7180'. [ 976.578114][ T9788] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7176'. [ 976.648577][ T9805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7180'. [ 976.680906][ T9788] netlink: 658 bytes leftover after parsing attributes in process `syz.2.7176'. [ 976.733617][ T9798] netlink: 'syz.2.7176': attribute type 1 has an invalid length. [ 976.778636][ T9811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7182'. [ 976.918141][ T9792] wlan1 speed is unknown, defaulting to 1000 [ 976.931292][ T9815] openvswitch: netlink: ufid size 5796 bytes exceeds the range (1, 16) [ 976.940494][ T9792] lo speed is unknown, defaulting to 1000 [ 976.963656][ T9815] openvswitch: netlink: Message has 16 unknown bytes. [ 977.525262][ T30] audit: type=1107 audit(1771467285.040:13): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 977.864317][ T9857] veth1_to_bridge: mtu less than device minimum [ 978.003377][ T9432] IPVS: starting estimator thread 0... [ 978.097981][ T9871] IPVS: using max 32 ests per chain, 76800 per kthread [ 978.518620][ T9851] wlan1 speed is unknown, defaulting to 1000 [ 978.570612][ T9851] lo speed is unknown, defaulting to 1000 [ 978.633214][ T9901] __nla_validate_parse: 4 callbacks suppressed [ 978.633284][ T9901] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7200'. [ 979.235878][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7206'. [ 979.250226][ T9929] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7207'. [ 979.306436][ T9929] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7207'. [ 979.342879][ T9929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7207'. [ 979.565918][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7210'. [ 979.623588][ T9947] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 979.641823][ T9945] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 979.673261][ T9953] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7211'. [ 979.846664][ T9961] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7214'. [ 979.935784][ T9959] netlink: 'syz.1.7213': attribute type 3 has an invalid length. [ 979.954173][ T9959] netlink: 'syz.1.7213': attribute type 2 has an invalid length. [ 979.974370][ T9959] netlink: 'syz.1.7213': attribute type 2 has an invalid length. [ 980.037187][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7215'. [ 980.068856][ T9974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7215'. [ 980.335758][ T9985] netlink: 'syz.1.7220': attribute type 1 has an invalid length. [ 980.352781][ T9985] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 981.013089][T10020] syzkaller0: entered promiscuous mode [ 981.029551][T10020] syzkaller0: entered allmulticast mode [ 981.068815][T10020] syzkaller0: left promiscuous mode [ 981.428433][T10035] netlink: 'syz.0.7229': attribute type 1 has an invalid length. [ 981.578460][T10035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 981.670814][ T6773] dummy0: left promiscuous mode [ 981.777843][T10041] bond1: (slave geneve4): making interface the new active one [ 981.799364][T10041] bond1: (slave geneve4): Enslaving as an active interface with an up link [ 981.816520][ T6300] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 981.836862][T10057] netlink: 'syz.4.7232': attribute type 3 has an invalid length. [ 981.844932][T10057] netlink: 'syz.4.7232': attribute type 1 has an invalid length. [ 981.883074][ T6300] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 981.897986][ T6300] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 981.986851][T10059] ipvlan2: entered promiscuous mode [ 982.079046][ T6300] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 982.288167][T10081] netlink: 'syz.2.7237': attribute type 7 has an invalid length. [ 982.674033][T10104] syzkaller0: entered promiscuous mode [ 982.680272][T10104] syzkaller0: entered allmulticast mode [ 982.776080][T10104] tipc: Enabled bearer , priority 0 [ 982.827640][T10111] netdevsim netdevsim4: Direct firmware load for - [ 982.827640][T10111] failed with error -2 [ 982.851750][T10111] netdevsim netdevsim4: Falling back to sysfs fallback for: - [ 982.851750][T10111] [ 982.855361][T10105] tipc: Resetting bearer [ 982.880365][T10115] netlink: 'syz.3.7243': attribute type 29 has an invalid length. [ 982.903554][T10103] tipc: Resetting bearer [ 982.948336][T10103] tipc: Disabling bearer [ 982.957234][T10121] unsupported nla_type 58 [ 983.006228][T10115] netlink: 'syz.3.7243': attribute type 29 has an invalid length. [ 983.362869][T10139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 983.380798][T10138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 983.808927][T10166] __nla_validate_parse: 8 callbacks suppressed [ 983.808944][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7254'. [ 984.953816][T10220] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7263'. [ 985.002255][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 985.070357][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7264'. [ 985.274617][T10229] netlink: 7920 bytes leftover after parsing attributes in process `syz.2.7265'. [ 985.322769][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7266'. [ 985.415337][T30416] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 985.445541][T30416] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 985.453922][T30416] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 985.521910][T30416] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 985.532973][T10245] netlink: 'syz.2.7269': attribute type 1 has an invalid length. [ 985.662173][T10250] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7270'. [ 985.924448][T10266] tipc: Started in network mode [ 985.935886][T10266] tipc: Node identity 5640cee25ab1, cluster identity 4711 [ 985.949100][T10266] tipc: Enabled bearer , priority 0 [ 985.964772][T10271] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 985.987479][T10273] syzkaller0: entered promiscuous mode [ 985.998058][T10273] syzkaller0: entered allmulticast mode [ 986.011703][T10271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7276'. [ 986.139411][T10266] tipc: Resetting bearer [ 986.173997][T10264] tipc: Resetting bearer [ 986.227278][T10280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7279'. [ 986.276072][T10264] tipc: Disabling bearer [ 986.327689][T10277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7277'. [ 986.337123][T10277] netlink: 'syz.2.7277': attribute type 1 has an invalid length. [ 986.403754][T10281] tipc: Enabled bearer , priority 0 [ 986.426222][T10290] syzkaller0: entered promiscuous mode [ 986.431781][T10290] syzkaller0: entered allmulticast mode [ 986.544204][T10281] tipc: Resetting bearer [ 986.584213][T10278] tipc: Resetting bearer [ 986.623625][T10278] tipc: Disabling bearer [ 986.642314][T10299] netlink: 'syz.2.7281': attribute type 1 has an invalid length. [ 986.827655][T10296] bond7: option all_slaves_active: invalid value (13) [ 986.859248][T10296] bond7 (unregistering): Released all slaves [ 986.919966][T10309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7281'. [ 987.156587][T10303] bond7 (unregistering): Released all slaves [ 987.550492][T10313] syzkaller0: entered promiscuous mode [ 987.585544][T10313] syzkaller0: entered allmulticast mode [ 990.588685][T10371] __nla_validate_parse: 3 callbacks suppressed [ 990.588703][T10371] netlink: 5120 bytes leftover after parsing attributes in process `syz.4.7292'. [ 990.947302][T10380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7293'. [ 993.351341][T10350] tipc: Started in network mode [ 993.356866][T10350] tipc: Node identity , cluster identity 4711 [ 993.363156][T10350] tipc: Failed to obtain node identity [ 993.369310][T10350] tipc: Enabling of bearer rejected, failed to enable media [ 993.440031][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7292'. [ 993.629263][ T4870] Bluetooth: hci4: link tx timeout [ 993.635102][ T4870] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 993.899319][T10412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7301'. [ 993.949987][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7301'. [ 994.154476][T10428] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7304'. [ 994.242310][T10428] xt_CT: You must specify a L4 protocol and not use inversions on it [ 994.324876][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7300'. [ 994.393658][T12997] IPVS: starting estimator thread 0... [ 994.485575][T10440] IPVS: using max 28 ests per chain, 67200 per kthread [ 994.567374][T10450] netlink: 'syz.3.7306': attribute type 3 has an invalid length. [ 994.925964][T10466] netlink: 'syz.1.7309': attribute type 2 has an invalid length. [ 995.001869][T10466] : entered promiscuous mode [ 995.159649][T10475] netlink: 'syz.3.7311': attribute type 10 has an invalid length. [ 995.419042][T10479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 995.721028][T10494] tipc: Resetting bearer [ 995.724726][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 995.926707][T10433] wlan1 speed is unknown, defaulting to 1000 [ 995.960468][T10433] lo speed is unknown, defaulting to 1000 [ 996.086486][T10508] netlink: 'syz.3.7316': attribute type 15 has an invalid length. [ 996.115163][T10508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7316'. [ 996.172114][T10508] bond0: option resend_igmp: invalid value (196616) [ 996.215997][T10508] bond0: option resend_igmp: allowed values 0 - 255 [ 996.769054][T10480] wlan1 speed is unknown, defaulting to 1000 [ 996.824354][T10480] lo speed is unknown, defaulting to 1000 [ 996.885512][T10528] geneve2: entered promiscuous mode [ 997.220174][T10542] netlink: 'syz.1.7323': attribute type 3 has an invalid length. [ 997.244771][T10542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7323'. [ 997.618995][T10555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7326'. [ 997.634294][T10560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7328'. [ 997.650874][T10559] netlink: 71 bytes leftover after parsing attributes in process `syz.0.7327'. [ 998.087680][T10580] openvswitch: netlink: Missing key (keys=40, expected=80) [ 998.983740][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7342'. [ 998.996770][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7341'. [ 999.032843][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7342'. [ 999.068119][T10622] macsec1: entered promiscuous mode [ 999.173465][T10627] tipc: Enabling of bearer rejected, failed to enable media [ 999.194660][T10633] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7346'. [ 999.291107][T10640] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7345'. [ 999.375948][T10640] hsr_slave_1 (unregistering): left promiscuous mode [ 999.591461][T10655] netlink: 'syz.2.7350': attribute type 5 has an invalid length. [ 999.638396][T10655] geneve2: entered promiscuous mode [ 999.665475][T10655] geneve2: entered allmulticast mode [ 999.707663][ T3488] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 36209 - 0 [ 999.725595][ T3488] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 36209 - 0 [ 999.761685][ T3488] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 36209 - 0 [ 999.789303][ T3488] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 36209 - 0 [ 999.950859][T10629] wlan1 speed is unknown, defaulting to 1000 [ 1000.010274][T10629] lo speed is unknown, defaulting to 1000 [ 1000.488032][T10683] netlink: Conntrack attr has 3 unknown bytes [ 1000.598444][T10683] bond2: option ad_select: invalid value (34) [ 1000.609922][T10683] bond2 (unregistering): Released all slaves [ 1000.642834][T10659] wlan1 speed is unknown, defaulting to 1000 [ 1000.787165][T10659] lo speed is unknown, defaulting to 1000 [ 1000.968580][T10698] batman_adv: batadv0: Adding interface: dummy0 [ 1001.006111][T10698] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.045285][T10698] batman_adv: batadv0: Interface activated: dummy0 [ 1001.232106][T10717] netlink: zone id is out of range [ 1001.237618][T10717] netlink: zone id is out of range [ 1001.242878][T10717] netlink: zone id is out of range [ 1001.248876][T10717] netlink: zone id is out of range [ 1001.254148][T10717] netlink: zone id is out of range [ 1001.270885][T10717] netlink: zone id is out of range [ 1001.276627][T10717] netlink: zone id is out of range [ 1001.281987][T10717] netlink: zone id is out of range [ 1001.648465][T10735] __nla_validate_parse: 7 callbacks suppressed [ 1001.648485][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7366'. [ 1001.904089][T10713] wlan1 speed is unknown, defaulting to 1000 [ 1001.940379][T10713] lo speed is unknown, defaulting to 1000 [ 1001.991903][T10751] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7370'. [ 1002.016188][T10751] netlink: 'syz.4.7370': attribute type 1 has an invalid length. [ 1002.232832][T10762] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7371'. [ 1002.488987][T10773] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1002.579414][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7374'. [ 1002.851464][T10787] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7376'. [ 1002.895173][T10787] ..0ªî{X¹¦: renamed from gretap0 (while UP) [ 1002.989157][T10787] ..0ªî{X¹¦: entered allmulticast mode [ 1003.181724][T10810] netlink: 872 bytes leftover after parsing attributes in process `syz.2.7380'. [ 1003.237739][T10815] bridge0: port 1(ip6gretap0) entered blocking state [ 1003.244616][T10815] bridge0: port 1(ip6gretap0) entered disabled state [ 1003.261184][T10810] netlink: 872 bytes leftover after parsing attributes in process `syz.2.7380'. [ 1003.284643][T10815] ip6gretap0: entered allmulticast mode [ 1003.314072][T10815] ip6gretap0: entered promiscuous mode [ 1003.392146][T10814] tipc: Enabled bearer , priority 0 [ 1003.470179][T10803] syzkaller0: entered promiscuous mode [ 1003.505525][T10803] syzkaller0: entered allmulticast mode [ 1003.636118][T10798] syzkaller0: entered promiscuous mode [ 1003.641719][T10798] syzkaller0: entered allmulticast mode [ 1003.656968][T10814] tipc: Resetting bearer [ 1003.750762][T10802] tipc: Resetting bearer [ 1003.793832][T10802] tipc: Disabling bearer [ 1004.090563][T10850] netlink: 'syz.0.7389': attribute type 1 has an invalid length. [ 1004.268208][T10850] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1004.529032][T10878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7394'. [ 1004.558627][T10877] xt_hashlimit: size too large, truncated to 1048576 [ 1004.565543][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7394'. [ 1004.678461][ T8613] block nbd1: Possible stuck request ffff888026602800: control (read@0,4096B). Runtime 120 seconds [ 1005.402567][T10923] netlink: 'syz.4.7403': attribute type 1 has an invalid length. [ 1005.414307][T10923] netlink: 240 bytes leftover after parsing attributes in process `syz.4.7403'. [ 1006.099328][T10954] bond3: option ad_actor_sys_prio: invalid value (0) [ 1006.130937][T10954] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1006.157467][T10954] bond3 (unregistering): Released all slaves [ 1006.349182][T10963] netlink: 'syz.4.7413': attribute type 1 has an invalid length. [ 1006.797726][T10983] tipc: Enabling of bearer rejected, failed to enable media [ 1006.849015][T10979] __nla_validate_parse: 8 callbacks suppressed [ 1006.849036][T10979] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7418'. [ 1007.119433][T10994] tipc: Failed to remove unknown binding: 66,0,0/0:155859281/155859283 [ 1007.136714][T10996] netlink: 'syz.0.7423': attribute type 1 has an invalid length. [ 1007.177782][T10996] netlink: 'syz.0.7423': attribute type 2 has an invalid length. [ 1007.185760][T11000] netlink: 'syz.0.7423': attribute type 1 has an invalid length. [ 1007.185784][T11000] netlink: 'syz.0.7423': attribute type 2 has an invalid length. [ 1007.210670][T11004] netlink: 'syz.4.7422': attribute type 1 has an invalid length. [ 1007.220418][T11003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7425'. [ 1007.240940][T10994] tipc: Failed to remove unknown binding: 66,0,0/0:155859281/155859282 [ 1007.255748][T10994] tipc: Failed to remove unknown binding: 66,0,0/0:155859281/155859283 [ 1007.292433][T10994] tipc: Failed to remove unknown binding: 66,0,0/0:155859281/155859282 [ 1007.323875][T11004] bond2: entered promiscuous mode [ 1007.332986][T11004] bond2: entered allmulticast mode [ 1007.339521][T11004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1007.396776][T11002] tipc: Enabled bearer , priority 0 [ 1007.421865][T11002] syzkaller0: entered promiscuous mode [ 1007.449181][T11002] syzkaller0: entered allmulticast mode [ 1007.575204][T11002] tipc: Resetting bearer [ 1007.595321][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7424'. [ 1007.694422][T10998] tipc: Resetting bearer [ 1007.762918][T10998] tipc: Disabling bearer [ 1007.860154][T11040] bond_slave_1: Device is already in use. [ 1008.026668][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7430'. [ 1008.218136][T11049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7433'. [ 1008.242727][T11049] tipc: Enabling of bearer rejected, failed to enable media [ 1008.386064][T11058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7436'. [ 1008.971737][T11074] syzkaller0: entered promiscuous mode [ 1008.996022][T11074] syzkaller0: entered allmulticast mode [ 1009.004748][T11078] netlink: 'syz.3.7441': attribute type 11 has an invalid length. [ 1009.039742][T11074] net_ratelimit: 44 callbacks suppressed [ 1009.039764][T11074] 0: reclassify loop, rule prio 0, protocol 800 [ 1009.134504][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7440'. [ 1009.179332][T11074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7440'. [ 1009.190420][T11074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7440'. [ 1009.203106][T11081] syzkaller0: entered promiscuous mode [ 1009.205607][T11074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7440'. [ 1009.224257][T11081] syzkaller0: entered allmulticast mode [ 1009.261162][T11084] tipc: Started in network mode [ 1009.295626][T11084] tipc: Node identity 9ee1748496e6, cluster identity 4711 [ 1009.360287][T11084] tipc: Enabled bearer , priority 0 [ 1009.529812][T11080] tipc: Resetting bearer [ 1009.593326][T11080] tipc: Disabling bearer [ 1010.084056][T11125] veth0: entered promiscuous mode [ 1010.122793][T11125] netlink: 'syz.1.7450': attribute type 4 has an invalid length. [ 1010.181596][T11125] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1010.261693][T11123] veth0: left promiscuous mode [ 1010.871595][T11170] netlink: 'syz.1.7459': attribute type 9 has an invalid length. [ 1011.925712][T11175] wlan1 speed is unknown, defaulting to 1000 [ 1012.003973][T11175] lo speed is unknown, defaulting to 1000 [ 1012.168662][T11217] netlink: 'syz.4.7470': attribute type 2 has an invalid length. [ 1012.217094][T11217] __nla_validate_parse: 12 callbacks suppressed [ 1012.217117][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7470'. [ 1012.272867][T11217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7470'. [ 1012.282866][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7470'. [ 1012.325119][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7470'. [ 1012.447122][T11227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7472'. [ 1012.479239][T11227] nbd: must specify a size in bytes for the device [ 1012.508003][T11219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7471'. [ 1012.519077][T11227] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7472'. [ 1012.547585][T11227] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7472'. [ 1012.557956][T11219] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7471'. [ 1012.575515][T11227] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7472'. [ 1012.734785][T11219] gretap1: entered promiscuous mode [ 1012.849202][T11194] wlan1 speed is unknown, defaulting to 1000 [ 1012.914122][T11194] lo speed is unknown, defaulting to 1000 [ 1013.677439][T11248] netlink: zone id is out of range [ 1013.682632][T11248] netlink: zone id is out of range [ 1013.720197][T11248] netlink: zone id is out of range [ 1013.730328][T11248] netlink: zone id is out of range [ 1013.794973][T11254] siw: device registration error -23 [ 1013.812720][T11248] netlink: zone id is out of range [ 1013.845858][T11248] netlink: zone id is out of range [ 1013.882086][T11248] netlink: zone id is out of range [ 1015.779172][T11312] ip6tnl2: entered allmulticast mode [ 1015.817723][T11310] block nbd6: Unsupported socket: should be TCP or UNIX. [ 1015.843602][T11281] syzkaller1: entered promiscuous mode [ 1015.856707][T11281] syzkaller1: entered allmulticast mode [ 1016.545746][ T3488] netdevsim netdevsim1 ÿÿÿÿÿÿ: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.564848][ T3488] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.667819][T11285] wlan1 speed is unknown, defaulting to 1000 [ 1016.687420][ T3488] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.725027][ T3488] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1016.757431][T11285] lo speed is unknown, defaulting to 1000 [ 1017.285987][T11323] IPv6: Can't replace route, no match found [ 1017.478512][T11296] xt_CT: No such helper "pptp" [ 1017.825621][T11368] netlink: 'syz.4.7497': attribute type 2 has an invalid length. [ 1017.833606][T11368] __nla_validate_parse: 7 callbacks suppressed [ 1017.833633][T11368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7497'. [ 1018.073843][T11370] syzkaller0: entered promiscuous mode [ 1018.235470][T11370] syzkaller0: entered allmulticast mode [ 1018.879972][T11422] netlink: 'syz.2.7501': attribute type 10 has an invalid length. [ 1018.931739][T11422] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7501'. [ 1021.183247][T11398] tipc: Enabling of bearer rejected, failed to enable media [ 1021.251938][T11422] team0: Port device geneve0 added [ 1021.285483][ T66] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1021.294297][ T66] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1021.379015][ T66] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1021.407251][ T66] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1021.432508][T11435] netlink: 'syz.1.7503': attribute type 13 has an invalid length. [ 1021.452702][T11435] netlink: 14589 bytes leftover after parsing attributes in process `syz.1.7503'. [ 1021.496516][T11436] bond6: (slave dummy0): Releasing active interface [ 1021.547208][T11436] batman_adv: batadv0: Adding interface: dummy0 [ 1021.553810][T11436] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.623204][T11444] openvswitch: netlink: Key type 148 is out of range max 32 [ 1021.635047][T11436] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1021.693150][T11442] bridge10: entered promiscuous mode [ 1021.709215][T11442] bridge10: entered allmulticast mode [ 1021.714963][T11448] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7508'. [ 1021.731725][T11442] team0: Port device bridge10 added [ 1021.739198][T11449] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7508'. [ 1021.910762][T11448] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1021.938335][T11448] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.052701][T11459] netlink: 'syz.0.7511': attribute type 2 has an invalid length. [ 1022.066041][T11450] delete_channel: no stack [ 1022.111885][T11448] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.135733][T11448] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.243787][T11475] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7516'. [ 1022.362012][T11448] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.386115][T11448] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.399963][T11487] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7518'. [ 1022.446106][T11478] tipc: Enabled bearer , priority 0 [ 1022.473645][T11481] syzkaller0: entered promiscuous mode [ 1022.486922][T11481] syzkaller0: entered allmulticast mode [ 1022.516275][T11478] tipc: Resetting bearer [ 1022.600228][T11448] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.656552][T11448] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.759234][T11477] tipc: Resetting bearer [ 1022.828882][T11477] tipc: Disabling bearer [ 1023.026974][T11505] syzkaller0: entered promiscuous mode [ 1023.032651][T11505] syzkaller0: entered allmulticast mode [ 1023.040819][ T3488] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.062205][ T3488] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.124094][ T3488] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.137282][ T3488] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.181986][ T3488] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1023.202676][ T3488] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.389762][T11522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7525'. [ 1023.399083][T11522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7525'. [ 1025.910094][ T6300] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1025.930790][ T6300] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.963195][ T4870] Bluetooth: hci5: command 0x0406 tx timeout [ 1026.083080][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7536'. [ 1026.198270][T11570] team0 (unregistering): Port device team_slave_0 removed [ 1026.233132][T11570] team0 (unregistering): Port device team_slave_1 removed [ 1026.241621][T11577] siw: device registration error -23 [ 1026.347882][T11578] syzkaller0: entered promiscuous mode [ 1026.355527][T11578] syzkaller0: entered allmulticast mode [ 1026.465200][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7540'. [ 1027.159487][T11636] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1027.452867][ T3488] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1027.470215][T11636] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1027.516488][ T3488] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1027.634376][T11658] netlink: 'syz.1.7554': attribute type 4 has an invalid length. [ 1027.681305][T11658] ipt_REJECT: ECHOREPLY no longer supported. [ 1027.816091][T11665] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7555'. [ 1028.499555][T11696] netlink: 'syz.2.7562': attribute type 3 has an invalid length. [ 1028.522262][T11696] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7562'. [ 1028.851040][T11716] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1028.870137][T11716] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7569'. [ 1028.920135][T11716] openvswitch: netlink: Flow actions attr not present in new flow. [ 1029.005952][T11716] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7569'. [ 1029.065699][T11716] openvswitch: netlink: Flow actions attr not present in new flow. [ 1029.233459][T11729] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7571'. [ 1029.263326][T11730] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7571'. [ 1029.294197][T11729] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7571'. [ 1029.340300][T11730] ..0ªî{X¹¦: entered promiscuous mode [ 1029.358866][T11730] ..0ªî{X¹¦: left allmulticast mode [ 1029.556272][T11743] netlink: 'syz.1.7575': attribute type 1 has an invalid length. [ 1029.608280][T11741] netlink: 'syz.4.7574': attribute type 1 has an invalid length. [ 1029.690220][T11743] bond2: entered promiscuous mode [ 1029.709776][T11743] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1029.746647][T11745] bond2: (slave veth5): making interface the new active one [ 1029.755046][T11745] veth5: entered promiscuous mode [ 1029.766714][T11745] bond2: (slave veth5): Enslaving as an active interface with an up link [ 1029.781375][T11753] netlink: 'syz.4.7574': attribute type 1 has an invalid length. [ 1029.809533][T11722] wlan1 speed is unknown, defaulting to 1000 [ 1029.832158][T11722] lo speed is unknown, defaulting to 1000 [ 1029.872105][T11756] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7576'. [ 1030.219053][T11778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7580'. [ 1030.602604][T11796] netlink: 'syz.1.7584': attribute type 13 has an invalid length. [ 1030.781150][T11796] syzkaller0: entered promiscuous mode [ 1030.787213][T11796] syzkaller0: entered allmulticast mode [ 1030.901671][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7587'. [ 1031.590558][T11846] can: request_module (can-proto-0) failed. [ 1032.153361][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7594'. [ 1034.179799][T11815] wlan1 speed is unknown, defaulting to 1000 [ 1034.202095][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7594'. [ 1034.225028][ T6300] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.246039][T11815] lo speed is unknown, defaulting to 1000 [ 1034.267726][ T6300] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.296526][ T6300] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.390788][ T6300] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1034.425864][T11879] 8021q: VLANs not supported on ip6tnl0 [ 1034.649967][T11893] netlink: 'syz.3.7601': attribute type 11 has an invalid length. [ 1034.675881][T11893] netlink: 'syz.3.7601': attribute type 11 has an invalid length. [ 1034.715599][T11893] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7601'. [ 1034.765791][ T8613] block nbd1: Possible stuck request ffff888026602800: control (read@0,4096B). Runtime 150 seconds [ 1035.016012][T11907] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1035.057053][T11907] team0: Device macvlan3 is already an upper device of the team interface [ 1035.379510][T11926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7607'. [ 1035.423246][T11926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7607'. [ 1035.612111][T11932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1035.724705][T11939] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7607'. [ 1036.082801][T11968] netlink: 'syz.0.7615': attribute type 11 has an invalid length. [ 1036.134670][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7615'. [ 1036.189840][T11974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7616'. [ 1036.316180][T11976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7617'. [ 1036.376343][T11983] netlink: 'syz.0.7619': attribute type 1 has an invalid length. [ 1036.516515][T11991] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1036.579328][T11976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.595167][T11976] batadv0: mtu less than device minimum [ 1036.607899][T11976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1036.620323][T11976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1036.632245][T11976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1036.643809][T11976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1036.655582][T11976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1036.667650][T11976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1036.679512][T11976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1036.691455][T11976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1036.703276][T11976] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1036.738417][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.759666][T12000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7619'. [ 1036.881332][T11988] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1036.890892][T11988] bond3: (slave bond4): making interface the new active one [ 1036.916072][T11988] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1036.956293][T11987] tunl0: Caught tx_queue_len zero misconfig [ 1037.000669][T11996] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 1037.050517][T11983] vlan3: entered promiscuous mode [ 1037.060227][T11983] bond3: entered promiscuous mode [ 1037.065343][T11983] bond4: entered promiscuous mode [ 1037.072339][T11983] bond3: (slave vlan3): Opening slave failed [ 1037.290922][T12018] netlink: 'syz.2.7624': attribute type 1 has an invalid length. [ 1037.325561][T12018] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7624'. [ 1037.353605][T12025] netlink: 'syz.3.7623': attribute type 3 has an invalid length. [ 1038.688095][T12061] wlan1 speed is unknown, defaulting to 1000 [ 1038.711278][T12061] lo speed is unknown, defaulting to 1000 [ 1039.154551][T12125] batman_adv: batadv0: Interface activated: dummy0 [ 1039.897630][T12151] __nla_validate_parse: 7 callbacks suppressed [ 1039.897654][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7652'. [ 1040.041145][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7654'. [ 1040.100047][T12163] tipc: Enabled bearer , priority 10 [ 1040.119055][T12163] syzkaller0: entered promiscuous mode [ 1040.141181][T12163] syzkaller0: entered allmulticast mode [ 1040.221342][T12163] tipc: Resetting bearer [ 1040.237724][T12168] netlink: 388 bytes leftover after parsing attributes in process `syz.0.7656'. [ 1040.317890][T12161] tipc: Resetting bearer [ 1040.420304][T12161] tipc: Disabling bearer [ 1040.844470][T12183] wlan1 speed is unknown, defaulting to 1000 [ 1040.854595][T12183] lo speed is unknown, defaulting to 1000 [ 1041.162428][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7662'. [ 1041.539247][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7667'. [ 1042.034455][T12244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7672'. [ 1042.066107][T12244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7672'. [ 1042.149615][T12251] syzkaller0: entered promiscuous mode [ 1042.155166][T12251] syzkaller0: entered allmulticast mode [ 1042.463587][T12259] geneve3: entered promiscuous mode [ 1042.501342][T12259] geneve3: entered allmulticast mode [ 1042.646375][T12267] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7678'. [ 1042.796275][T12270] x_tables: duplicate underflow at hook 1 [ 1042.954114][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7683'. [ 1042.980017][T12294] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7683'. [ 1043.607720][T12328] netlink: 'syz.4.7690': attribute type 1 has an invalid length. [ 1043.636879][T12329] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1043.719980][T12324] xt_l2tp: wrong L2TP version: 0 [ 1043.775305][T12328] bond3: entered promiscuous mode [ 1043.793983][T12328] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1044.009042][T12347] x_tables: duplicate underflow at hook 2 [ 1044.278398][T12374] netlink: 'syz.1.7694': attribute type 2 has an invalid length. [ 1044.304564][T12316] delete_channel: no stack [ 1044.732110][T12386] geneve4: entered promiscuous mode [ 1044.785764][T12325] wlan1 speed is unknown, defaulting to 1000 [ 1044.878049][T12325] lo speed is unknown, defaulting to 1000 [ 1045.078785][T12415] __nla_validate_parse: 4 callbacks suppressed [ 1045.078807][T12415] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7702'. [ 1045.104987][T12410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7704'. [ 1045.114803][T12410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7704'. [ 1045.136438][T12413] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7705'. [ 1045.273792][T12416] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.305947][T12416] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.439145][T12416] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.458233][T12416] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.609082][T12416] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.637906][T12416] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.732724][T12416] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.745703][T12416] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.789187][T12448] netlink: 'syz.3.7710': attribute type 11 has an invalid length. [ 1045.828012][T12441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7709'. [ 1045.984100][T12457] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7711'. [ 1046.144499][ T3488] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.163642][ T3488] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.332441][ T133] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.352719][ T133] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.427216][T12475] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1046.455060][ T133] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.473750][ T133] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.512091][ T133] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1046.533747][ T133] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.797479][T12466] wlan1 speed is unknown, defaulting to 1000 [ 1046.808135][T12466] lo speed is unknown, defaulting to 1000 [ 1047.596632][T12537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7725'. [ 1048.387792][T12565] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.7733'. [ 1048.611864][T12569] tipc: Enabled bearer , priority 0 [ 1048.636505][T12583] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7736'. [ 1048.756312][T12575] syzkaller0: entered promiscuous mode [ 1048.815868][T12575] syzkaller0: entered allmulticast mode [ 1048.962506][T12575] tipc: Resetting bearer [ 1049.019367][T12600] pim6reg1: entered allmulticast mode [ 1049.328766][T12567] tipc: Resetting bearer [ 1049.459034][T12567] tipc: Disabling bearer [ 1049.497074][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7742'. [ 1049.541074][T12619] netlink: 'syz.2.7742': attribute type 3 has an invalid length. [ 1049.574719][T12623] netlink: 'syz.3.7744': attribute type 7 has an invalid length. [ 1049.599029][T12623] netlink: 'syz.3.7744': attribute type 8 has an invalid length. [ 1049.647931][T12623] erspan0: entered promiscuous mode [ 1049.680300][T12623] gretap0: entered promiscuous mode [ 1049.705144][T12623] erspan0: left promiscuous mode [ 1049.728752][T12623] gretap0: left promiscuous mode [ 1049.810054][T12573] wlan1 speed is unknown, defaulting to 1000 [ 1049.895065][T12632] netlink: 'syz.1.7746': attribute type 4 has an invalid length. [ 1049.920412][ T6300] syzkaller0: tun_net_xmit 76 [ 1049.934298][ T6300] syzkaller0: tun_net_xmit 48 [ 1049.945719][ T9429] syzkaller0: tun_net_xmit 76 [ 1049.945843][T12573] lo speed is unknown, defaulting to 1000 [ 1049.987383][T12632] netlink: 'syz.1.7746': attribute type 4 has an invalid length. [ 1050.059065][T12638] netlink: 'syz.3.7747': attribute type 3 has an invalid length. [ 1050.157530][T12648] __nla_validate_parse: 2 callbacks suppressed [ 1050.157547][T12648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7750'. [ 1052.299295][T12654] netlink: 'syz.1.7751': attribute type 10 has an invalid length. [ 1052.315120][T12654] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7751'. [ 1052.342714][T12656] netlink: 'syz.1.7751': attribute type 10 has an invalid length. [ 1052.376920][T12656] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7751'. [ 1052.546832][T12672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7755'. [ 1052.564656][T12672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7755'. [ 1052.599101][T12672] geneve2: entered promiscuous mode [ 1052.604442][T12672] geneve2: entered allmulticast mode [ 1052.650777][ T3488] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.686259][ T3488] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.708576][ T3488] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.722109][ T3488] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.783017][T12683] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7758'. [ 1052.798004][T12684] netlink: 'syz.0.7756': attribute type 5 has an invalid length. [ 1052.976572][T12697] netlink: 'syz.3.7757': attribute type 39 has an invalid length. [ 1053.063055][T12700] netlink: 568 bytes leftover after parsing attributes in process `syz.2.7761'. [ 1053.279047][T12695] macsec1: left promiscuous mode [ 1053.331402][ T3488] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.360198][ T3488] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1053.425672][ T3488] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.434110][ T3488] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1053.559307][ T3488] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.588277][ T3488] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1053.604511][T12716] tipc: Enabled bearer , priority 0 [ 1053.651388][ T30] audit: type=1804 audit(1771467361.180:14): pid=12722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7764" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=1802 res=1 errno=0 [ 1053.681011][T12720] syzkaller0: entered promiscuous mode [ 1053.683158][ T30] audit: type=1800 audit(1771467361.180:15): pid=12722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7764" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=1802 res=0 errno=0 [ 1053.713422][T12720] syzkaller0: entered allmulticast mode [ 1053.731322][ T3488] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1053.760494][ T3488] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1053.883637][T12716] tipc: Resetting bearer [ 1053.941297][T12715] tipc: Resetting bearer [ 1054.125310][T12715] tipc: Disabling bearer [ 1054.381813][T12751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7770'. [ 1054.414586][T12724] wlan1 speed is unknown, defaulting to 1000 [ 1054.433173][T12724] lo speed is unknown, defaulting to 1000 [ 1055.409218][T12811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7782'. [ 1055.844208][T12835] syzkaller0: entered promiscuous mode [ 1055.866011][T12835] syzkaller0: entered allmulticast mode [ 1056.069063][T12797] wlan1 speed is unknown, defaulting to 1000 [ 1056.080900][T12797] lo speed is unknown, defaulting to 1000 [ 1056.208961][T12847] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7791'. [ 1056.374003][T12853] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1056.917266][T12875] tipc: Enabled bearer , priority 0 [ 1056.982189][T12875] syzkaller0: entered promiscuous mode [ 1057.012979][T12875] syzkaller0: entered allmulticast mode [ 1057.141058][T12888] pim6reg1: entered promiscuous mode [ 1057.165569][T12888] pim6reg1: entered allmulticast mode [ 1057.197615][T12875] tipc: Resetting bearer [ 1057.313209][T12875] tipc: Disabling bearer [ 1057.428375][T12908] xt_NFQUEUE: number of total queues is 0 [ 1057.466551][T12904] netlink: 'syz.0.7808': attribute type 1 has an invalid length. [ 1057.576293][T12920] ip6gre1: entered promiscuous mode [ 1057.582194][T12920] ip6gre1: entered allmulticast mode [ 1057.714325][T12926] netlink: 'syz.4.7810': attribute type 2 has an invalid length. [ 1057.735190][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7814'. [ 1057.776290][T12928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7814'. [ 1057.927450][T12942] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7813'. [ 1059.619837][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7834'. [ 1060.543687][T12929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1060.789344][T13033] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7839'. [ 1060.798663][T13033] netlink: 19 bytes leftover after parsing attributes in process `syz.1.7839'. [ 1060.830647][T13033] netlink: 19 bytes leftover after parsing attributes in process `syz.1.7839'. [ 1060.856363][T13028] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7837'. [ 1060.886336][T13037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7840'. [ 1061.036887][T13037] bond7: entered promiscuous mode [ 1061.086469][T13037] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1061.142961][T13037] bond7 (unregistering): Released all slaves [ 1061.468411][T13062] ip6tnl0: Caught tx_queue_len zero misconfig [ 1061.496745][T13062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7845'. [ 1061.658430][T13035] wlan1 speed is unknown, defaulting to 1000 [ 1061.702783][T13035] lo speed is unknown, defaulting to 1000 [ 1061.731500][T13072] netlink: 'syz.2.7847': attribute type 1 has an invalid length. [ 1061.892000][T13074] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1061.931681][T13074] bond7: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 1061.942569][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7847'. [ 1061.967137][T13074] bond7: (slave vxcan1): making interface the new active one [ 1061.976337][T13074] bond7: (slave vxcan1): Enslaving as an active interface with an up link [ 1062.049281][T13080] dvmrp6: entered allmulticast mode [ 1062.059259][T13079] bond7 (unregistering): (slave vxcan1): Releasing backup interface [ 1062.095646][T13079] bond7 (unregistering): Released all slaves [ 1062.502254][T13097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7852'. [ 1062.938898][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7855'. [ 1063.031201][T13117] macvtap1: entered promiscuous mode [ 1063.051085][T13117] bridge0: entered promiscuous mode [ 1063.075037][T13117] bridge0: port 3(macvtap1) entered blocking state [ 1063.102732][T13117] bridge0: port 3(macvtap1) entered disabled state [ 1063.109398][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7858'. [ 1063.136158][T13117] macvtap1: entered allmulticast mode [ 1063.151892][T13117] bridge0: entered allmulticast mode [ 1063.164635][T13117] macvtap1: left allmulticast mode [ 1063.182262][T13117] bridge0: left allmulticast mode [ 1063.201195][T13117] bridge0: left promiscuous mode [ 1063.526087][ T30] audit: type=1800 audit(1771467371.050:16): pid=13152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7864" name=CB dev="tmpfs" ino=1498 res=0 errno=0 [ 1063.584199][T13146] tipc: Enabling of bearer rejected, failed to enable media [ 1063.841365][T13174] syzkaller0: entered promiscuous mode [ 1063.876451][T13174] syzkaller0: entered allmulticast mode [ 1064.082982][T13184] net_ratelimit: 51 callbacks suppressed [ 1064.083001][T13184] netlink: zone id is out of range [ 1064.124548][T13184] netlink: zone id is out of range [ 1064.147569][T13184] netlink: zone id is out of range [ 1064.163515][T13184] netlink: zone id is out of range [ 1064.183543][T13184] netlink: zone id is out of range [ 1064.209300][T13184] netlink: zone id is out of range [ 1064.225134][T13184] netlink: zone id is out of range [ 1064.819095][T13230] hsr_slave_1 (unregistering): left promiscuous mode [ 1064.839597][ T8613] block nbd1: Possible stuck request ffff888026602800: control (read@0,4096B). Runtime 180 seconds [ 1065.090605][T13234] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1065.128079][T13234] bond0: (slave bond3): Enslaving as an active interface with an up link [ 1065.173467][T13251] netlink: 'syz.4.7880': attribute type 1 has an invalid length. [ 1065.242604][T13253] tipc: Resetting bearer [ 1065.580096][T13193] wlan1 speed is unknown, defaulting to 1000 [ 1065.682322][T13193] lo speed is unknown, defaulting to 1000 [ 1065.861772][T13291] __nla_validate_parse: 7 callbacks suppressed [ 1065.861794][T13291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7890'. [ 1065.896055][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7889'. [ 1066.230100][T13309] netlink: 'syz.1.7894': attribute type 30 has an invalid length. [ 1066.379391][T13312] netlink: 'syz.4.7896': attribute type 2 has an invalid length. [ 1067.514094][T13343] wlan1 speed is unknown, defaulting to 1000 [ 1067.570270][T13343] lo speed is unknown, defaulting to 1000 [ 1067.800371][T13386] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7910'. [ 1068.387279][T13413] netlink: 'syz.4.7916': attribute type 4 has an invalid length. [ 1068.442468][T13418] netlink: 'syz.4.7916': attribute type 4 has an invalid length. [ 1068.993030][T13443] netlink: 'syz.2.7922': attribute type 1 has an invalid length. [ 1069.062736][T13443] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1069.511951][T13468] tipc: Enabled bearer , priority 0 [ 1069.591959][T13468] tipc: Resetting bearer [ 1069.770326][T13466] tipc: Disabling bearer [ 1070.151908][T13506] tipc: Enabled bearer , priority 0 [ 1070.273081][T13506] tipc: Disabling bearer [ 1070.610671][T13530] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7942'. [ 1070.673528][T13532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7942'. [ 1070.731078][T13530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7942'. [ 1070.761626][T13530] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7942'. [ 1070.800706][T13530] tipc: Invalid UDP bearer configuration [ 1070.800770][T13530] tipc: Enabling of bearer rejected, failed to enable media [ 1071.595174][T13579] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7951'. [ 1071.908997][T13597] netlink: 'syz.4.7959': attribute type 29 has an invalid length. [ 1071.920602][T13601] netlink: 'syz.4.7959': attribute type 29 has an invalid length. [ 1071.959490][T13597] netlink: 500 bytes leftover after parsing attributes in process `syz.4.7959'. [ 1072.077791][T13612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7960'. [ 1072.155109][T13611] tipc: Enabled bearer , priority 0 [ 1072.215036][T13611] tipc: Resetting bearer [ 1072.336700][T13610] tipc: Disabling bearer [ 1072.523381][T13573] wlan1 speed is unknown, defaulting to 1000 [ 1072.539983][T13573] lo speed is unknown, defaulting to 1000 [ 1072.702319][T13638] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7966'. [ 1073.186400][T13664] netlink: 'syz.0.7972': attribute type 3 has an invalid length. [ 1073.230448][T13660] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7971'. [ 1073.280502][T13660] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7971'. [ 1074.435875][T13724] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 1074.594007][T13731] netlink: 428 bytes leftover after parsing attributes in process `syz.2.7982'. [ 1074.635659][T13731] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7982'. [ 1074.823398][T13742] syzkaller0: entered promiscuous mode [ 1074.876693][T13742] syzkaller0: entered allmulticast mode [ 1074.899970][ T30] audit: type=1107 audit(1771467382.430:17): pid=13741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1075.039028][T13673] wlan1 speed is unknown, defaulting to 1000 [ 1075.060987][T13673] lo speed is unknown, defaulting to 1000 [ 1075.171520][T13755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7987'. [ 1075.456241][T13771] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7990'. [ 1076.692206][T13822] __nla_validate_parse: 2 callbacks suppressed [ 1076.692225][T13822] netlink: 41 bytes leftover after parsing attributes in process `syz.4.7995'. [ 1076.951298][T13834] tipc: Enabling of bearer rejected, failed to enable media [ 1076.987214][T13837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8002'. [ 1077.018781][T13834] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8000'. [ 1077.120382][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8001'. [ 1077.376115][T13856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8006'. [ 1077.477654][T13856] Cannot find del_set index 2 as target [ 1077.579477][T13863] netlink: 165240 bytes leftover after parsing attributes in process `syz.3.8008'. [ 1077.744940][T13867] netlink: 'syz.1.8009': attribute type 12 has an invalid length. [ 1077.834332][T13867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8009'. [ 1078.035858][ T6767] wlan0: Trigger new scan to find an IBSS to join [ 1078.044997][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8012'. [ 1078.074949][T13844] wlan1 speed is unknown, defaulting to 1000 [ 1078.137665][T13844] lo speed is unknown, defaulting to 1000 [ 1078.237484][T13891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1079.545866][T13921] syzkaller0: entered promiscuous mode [ 1079.556570][T13921] syzkaller0: entered allmulticast mode [ 1079.679923][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8020'. [ 1079.806111][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8020'. [ 1080.655285][T13953] geneve5: entered promiscuous mode [ 1080.727059][T13953] geneve5: entered allmulticast mode [ 1080.740846][T13953] netlink: 'syz.2.8026': attribute type 1 has an invalid length. [ 1080.832547][T13960] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1080.884194][T13964] geneve5: entered promiscuous mode [ 1080.937973][ T3488] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.971374][ T3488] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.080207][ T6773] wlan0: Trigger new scan to find an IBSS to join [ 1081.844921][ T3488] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.853555][ T3488] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.115226][T14004] xt_hashlimit: size too large, truncated to 1048576 [ 1082.144525][T14009] __nla_validate_parse: 5 callbacks suppressed [ 1082.144550][T14009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8038'. [ 1082.165023][T14010] syzkaller0: entered promiscuous mode [ 1082.172054][T14010] syzkaller0: entered allmulticast mode [ 1082.184322][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8037'. [ 1082.224000][T14011] bridge_slave_0 (unregistering): left allmulticast mode [ 1082.247347][ T51] block nbd6: Receive control failed (result -1) [ 1082.265899][T14011] bridge_slave_0 (unregistering): left promiscuous mode [ 1082.304943][T14011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.213068][T14048] netlink: 'syz.3.8044': attribute type 29 has an invalid length. [ 1083.265670][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8046'. [ 1083.310485][T14058] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8046'. [ 1083.377927][T14050] netlink: 204 bytes leftover after parsing attributes in process `syz.1.8046'. [ 1083.398991][T14058] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8046'. [ 1083.427823][T14061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8047'. [ 1083.434504][T14050] openvswitch: netlink: Flow key attr not present in new flow. [ 1083.523250][T14061] netlink: 'syz.0.8047': attribute type 2 has an invalid length. [ 1083.570395][T14061] netlink: 'syz.0.8047': attribute type 11 has an invalid length. [ 1083.649666][T14061] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8047'. [ 1083.933455][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8053'. [ 1083.987485][T14087] batman_adv: batadv0: Interface deactivated: dummy0 [ 1084.036764][ T6300] wlan0: Trigger new scan to find an IBSS to join [ 1084.449236][T14067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8048'. [ 1084.488836][T14067] IPv6: Can't replace route, no match found [ 1084.861398][T14088] wlan1 speed is unknown, defaulting to 1000 [ 1084.875206][T14088] lo speed is unknown, defaulting to 1000 [ 1084.972948][ T6300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.386205][T14174] tipc: Enabled bearer , priority 0 [ 1086.407985][T14175] syzkaller0: entered promiscuous mode [ 1086.413741][T14175] syzkaller0: entered allmulticast mode [ 1086.538155][T14175] tipc: Resetting bearer [ 1086.607470][T14175] tipc: Disabling bearer [ 1086.832083][T14195] syzkaller0: entered promiscuous mode [ 1086.845117][T14195] syzkaller0: entered allmulticast mode [ 1087.270964][T14201] wlan1 speed is unknown, defaulting to 1000 [ 1087.281095][T14201] lo speed is unknown, defaulting to 1000 [ 1087.593883][T14217] __nla_validate_parse: 13 callbacks suppressed [ 1087.593907][T14217] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8080'. [ 1087.897760][T14217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8080'. [ 1088.215615][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8085'. [ 1088.275748][T14242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8085'. [ 1088.698922][T14261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8087'. [ 1088.831563][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8090'. [ 1088.846062][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8090'. [ 1089.095240][T14280] netlink: 'syz.4.8094': attribute type 1 has an invalid length. [ 1089.124701][T14280] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8094'. [ 1089.191357][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8095'. [ 1089.232515][T14287] netlink: 'syz.0.8096': attribute type 23 has an invalid length. [ 1089.440478][T14300] netlink: 'syz.4.8097': attribute type 10 has an invalid length. [ 1089.473190][T14300] veth1_vlan: entered allmulticast mode [ 1089.488613][T14300] veth1_vlan: left promiscuous mode [ 1089.531487][T14305] xt_hashlimit: size too large, truncated to 1048576 [ 1089.566662][T14300] `: Device veth1_vlan failed to register rx_handler [ 1089.645726][T14310] dummy0: Caught tx_queue_len zero misconfig [ 1089.685884][T14312] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 1090.263478][T14345] xt_NFQUEUE: number of total queues is 0 [ 1090.292905][T14346] x_tables: duplicate underflow at hook 2 [ 1090.460887][T14348] netlink: 'syz.2.8109': attribute type 21 has an invalid length. [ 1090.519600][T14348] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8109'. [ 1090.673074][T14327] veth0: entered promiscuous mode [ 1090.689645][T14327] veth0 (unregistering): left promiscuous mode [ 1090.739276][T14354] netlink: 'syz.0.8105': attribute type 1 has an invalid length. [ 1090.881214][T14325] wlan1 speed is unknown, defaulting to 1000 [ 1090.909392][T14325] lo speed is unknown, defaulting to 1000 [ 1091.342684][T14370] bond0: entered promiscuous mode [ 1091.356470][T14370] team0: entered promiscuous mode [ 1091.371999][T14370] geneve0: entered promiscuous mode [ 1091.478694][T14370] bond0: left promiscuous mode [ 1091.483578][T14370] team0: left promiscuous mode [ 1091.498958][T14370] geneve0: left promiscuous mode [ 1091.608436][T14338] wlan1 speed is unknown, defaulting to 1000 [ 1091.619104][T14338] lo speed is unknown, defaulting to 1000 [ 1092.002279][T14402] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1092.788783][T14422] __nla_validate_parse: 2 callbacks suppressed [ 1092.788806][T14422] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8121'. [ 1093.117428][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8123'. [ 1093.130197][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8123'. [ 1093.143192][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8123'. [ 1093.160893][T14426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8123'. [ 1093.173457][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8123'. [ 1093.260860][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8123'. [ 1093.294521][T14449] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.8128'. [ 1093.319415][T14449] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1093.326174][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8123'. [ 1093.339047][T14449] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8128'. [ 1093.744592][T14482] netlink: 'syz.3.8135': attribute type 4 has an invalid length. [ 1093.790965][T14482] bond0: Caught tx_queue_len zero misconfig [ 1093.937817][T14485] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1093.964505][T14485] bond4 (unregistering): Released all slaves [ 1094.041237][T14490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1094.118593][T14429] wlan1 speed is unknown, defaulting to 1000 [ 1094.143830][T14429] lo speed is unknown, defaulting to 1000 [ 1094.440263][T14508] nbd: must specify a size in bytes for the device [ 1094.482558][T14512] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 1094.506871][T14506] syzkaller1: entered promiscuous mode [ 1094.525832][T14506] syzkaller1: entered allmulticast mode [ 1094.728782][T14523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.807154][T14523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.846803][T14523] bond0 (unregistering): Released all slaves [ 1094.920156][ T8613] block nbd1: Possible stuck request ffff888026602800: control (read@0,4096B). Runtime 210 seconds [ 1095.040733][T14527] tipc: Enabled bearer , priority 0 [ 1095.248577][T14532] syzkaller0: entered promiscuous mode [ 1095.262924][T14532] syzkaller0: entered allmulticast mode [ 1095.279905][T14532] tipc: Resetting bearer [ 1095.365215][T14526] tipc: Resetting bearer [ 1097.558191][T14526] tipc: Disabling bearer [ 1097.594977][ T8216] tipc: Node number set to 134706308 [ 1097.710832][T14570] netlink: 'syz.3.8153': attribute type 15 has an invalid length. [ 1097.741846][T14570] netlink: 'syz.3.8153': attribute type 46 has an invalid length. [ 1097.931947][T14582] netlink: 'syz.2.8157': attribute type 2 has an invalid length. [ 1097.942306][T14579] netlink: 'syz.1.8156': attribute type 1 has an invalid length. [ 1097.981074][T14582] __nla_validate_parse: 185 callbacks suppressed [ 1097.981096][T14582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8157'. [ 1098.017904][T14584] bond5 (unregistering): Released all slaves [ 1098.122950][T14579] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1098.134843][T14599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8159'. [ 1098.365107][T14610] ipt_ECN: cannot use operation on non-tcp rule [ 1098.865033][T14633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8168'. [ 1098.974329][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8169'. [ 1099.117776][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.136736][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.343894][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8175'. [ 1099.540901][T14666] xt_TCPMSS: Only works on TCP SYN packets [ 1099.598055][T14668] syzkaller1: entered promiscuous mode [ 1099.611391][T14668] syzkaller1: entered allmulticast mode [ 1100.067333][T14687] pimreg: entered allmulticast mode [ 1100.498021][T14718] bridge0: entered allmulticast mode [ 1100.531349][T14718] dummy0: left allmulticast mode [ 1100.542881][T14718] bridge0: port 1(dummy0) entered disabled state [ 1100.738908][ T30] audit: type=1800 audit(1771467408.270:18): pid=14691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8183" name="memory.events" dev="tmpfs" ino=2294 res=0 errno=0 [ 1100.843704][T14728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1101.075079][T14739] netlink: 296 bytes leftover after parsing attributes in process `syz.4.8194'. [ 1101.584910][T14772] netlink: 'syz.1.8199': attribute type 11 has an invalid length. [ 1101.740289][T14784] xt_bpf: check failed: parse error [ 1102.083227][T14801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8201'. [ 1102.678109][T14820] netlink: 'syz.1.8211': attribute type 7 has an invalid length. [ 1102.729725][T14820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8211'. [ 1103.348876][T14843] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.373621][T14855] netlink: 324 bytes leftover after parsing attributes in process `syz.0.8216'. [ 1103.387297][T14843] batman_adv: batadv0: Interface activated: dummy0 [ 1103.396011][T14843] batadv0: mtu less than device minimum [ 1103.403119][T14843] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1103.415502][T14843] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1103.427443][T14843] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1103.439349][T14843] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1103.450468][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8217'. [ 1103.452739][T14843] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1103.471422][T14843] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1103.483205][T14843] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1103.495065][T14843] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1103.508706][T14859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8217'. [ 1104.072743][T14879] xt_CT: No such helper "syz0" [ 1104.307897][T14898] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8225'. [ 1104.338263][T14898] netlink: 'syz.0.8225': attribute type 1 has an invalid length. [ 1104.392868][T14898] geneve5: left promiscuous mode [ 1104.433181][T14906] sit0: Caught tx_queue_len zero misconfig [ 1104.465535][T14906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8227'. [ 1104.761168][T14924] netlink: 'syz.0.8231': attribute type 11 has an invalid length. [ 1104.786636][T14926] netlink: 'syz.0.8231': attribute type 11 has an invalid length. [ 1105.027873][T14935] netlink: 'syz.3.8232': attribute type 4 has an invalid length. [ 1105.168990][T14910] syzkaller0: entered promiscuous mode [ 1105.220103][T14910] syzkaller0: entered allmulticast mode [ 1105.246173][T14947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8234'. [ 1105.249858][T14938] NFSD: Failed to start, no listeners configured. [ 1105.257703][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8234'. [ 1108.787179][T15000] netlink: 'syz.0.8245': attribute type 13 has an invalid length. [ 1108.925266][T15007] netlink: 'syz.4.8247': attribute type 1 has an invalid length. [ 1109.140354][T15010] vlan2: entered promiscuous mode [ 1109.166752][T15010] vlan2: entered allmulticast mode [ 1109.186959][T15010] hsr_slave_1: entered allmulticast mode [ 1109.219469][T15026] netlink: 22 bytes leftover after parsing attributes in process `syz.4.8247'. [ 1109.378109][T15007] bond4: entered promiscuous mode [ 1109.383403][T15007] bond4: entered allmulticast mode [ 1109.399827][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8249'. [ 1109.425284][T15007] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1109.447306][T15030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8249'. [ 1109.458941][ T133] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.489325][ T133] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.519943][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8248'. [ 1109.589137][T15014] erspan1: entered allmulticast mode [ 1109.627725][T15014] bond4: (slave erspan1): making interface the new active one [ 1109.647743][T15014] erspan1: entered promiscuous mode [ 1109.663071][T15014] [ 1109.665487][T15014] ============================================ [ 1109.671677][T15014] WARNING: possible recursive locking detected [ 1109.677873][T15014] syzkaller #0 Not tainted [ 1109.682417][T15014] -------------------------------------------- [ 1109.688608][T15014] syz.4.8247/15014 is trying to acquire lock: [ 1109.694748][T15014] ffff8880562c8558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1109.704674][T15014] [ 1109.704674][T15014] but task is already holding lock: [ 1109.712085][T15014] ffff8880567b4158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1109.722015][T15014] [ 1109.722015][T15014] other info that might help us debug this: [ 1109.730119][T15014] Possible unsafe locking scenario: [ 1109.730119][T15014] [ 1109.737699][T15014] CPU0 [ 1109.741021][T15014] ---- [ 1109.744349][T15014] lock(&qdisc_xmit_lock_key#3); [ 1109.749480][T15014] lock(&qdisc_xmit_lock_key#3); [ 1109.754587][T15014] [ 1109.754587][T15014] *** DEADLOCK *** [ 1109.754587][T15014] [ 1109.762769][T15014] May be due to missing lock nesting notation [ 1109.762769][T15014] [ 1109.771135][T15014] 10 locks held by syz.4.8247/15014: [ 1109.776726][T15014] #0: ffffffff90123948 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1109.786293][T15014] #1: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1109.795436][T15014] #2: ffffffff8e75e100 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 1109.805455][T15014] #3: ffff88803181a228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x3850 [ 1109.818171][T15014] #4: ffff8880567b4158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 1109.828629][T15014] #5: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 1109.837586][T15014] #6: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 1109.847416][T15014] #7: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 1109.856474][T15014] #8: ffffffff8e75e100 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 1109.866492][T15014] #9: ffff888029ec2228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1002/0x3850 [ 1109.879210][T15014] [ 1109.879210][T15014] stack backtrace: [ 1109.885157][T15014] CPU: 0 UID: 0 PID: 15014 Comm: syz.4.8247 Not tainted syzkaller #0 PREEMPT(full) [ 1109.885194][T15014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1109.885210][T15014] Call Trace: [ 1109.885219][T15014] [ 1109.885228][T15014] dump_stack_lvl+0xe8/0x150 [ 1109.885262][T15014] print_deadlock_bug+0x279/0x290 [ 1109.885293][T15014] __lock_acquire+0x253f/0x2cf0 [ 1109.885318][T15014] ? skb_network_protocol+0x23d/0x3f0 [ 1109.885347][T15014] ? netif_skb_features+0x9bc/0xe40 [ 1109.885381][T15014] ? sch_direct_xmit+0x15f/0x4c0 [ 1109.885410][T15014] lock_acquire+0x106/0x330 [ 1109.885432][T15014] ? sch_direct_xmit+0x15f/0x4c0 [ 1109.885472][T15014] _raw_spin_lock+0x2e/0x40 [ 1109.885496][T15014] ? sch_direct_xmit+0x15f/0x4c0 [ 1109.885527][T15014] sch_direct_xmit+0x15f/0x4c0 [ 1109.885571][T15014] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1109.885601][T15014] ? __kasan_slab_alloc+0x6c/0x80 [ 1109.885629][T15014] ? arp_create+0x180/0xa00 [ 1109.885655][T15014] ? arp_send_dst+0xa7/0x2a0 [ 1109.885684][T15014] __dev_queue_xmit+0x1538/0x3850 [ 1109.885721][T15014] ? __dev_queue_xmit+0x274/0x3850 [ 1109.885753][T15014] ? arpt_do_table+0x261/0x1ec0 [ 1109.885778][T15014] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1109.885813][T15014] ? __pfx_arpt_do_table+0x10/0x10 [ 1109.885836][T15014] ? rcu_is_watching+0x15/0xb0 [ 1109.885870][T15014] ? NF_HOOK+0xa2/0x3c0 [ 1109.885898][T15014] NF_HOOK+0x33a/0x3c0 [ 1109.885926][T15014] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1109.885954][T15014] ? NF_HOOK+0xa2/0x3c0 [ 1109.885979][T15014] ? __pfx_NF_HOOK+0x10/0x10 [ 1109.886004][T15014] ? lock_acquire+0x106/0x330 [ 1109.886026][T15014] ? __pfx_arp_xmit_finish+0x10/0x10 [ 1109.886054][T15014] ? inet_addr_type_dev_table+0x25/0x190 [ 1109.886085][T15014] arp_xmit+0x16c/0x270 [ 1109.886109][T15014] ? arp_xmit+0x23/0x270 [ 1109.886137][T15014] arp_solicit+0xbe0/0xe40 [ 1109.886168][T15014] ? arp_solicit+0x119/0xe40 [ 1109.886197][T15014] ? __pfx_arp_solicit+0x10/0x10 [ 1109.886228][T15014] ? __neigh_event_send+0xe9d/0x14a0 [ 1109.886251][T15014] ? __pfx_arp_solicit+0x10/0x10 [ 1109.886278][T15014] __neigh_event_send+0xf05/0x14a0 [ 1109.886306][T15014] neigh_resolve_output+0x198/0x750 [ 1109.886330][T15014] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 1109.886368][T15014] ? ip_finish_output2+0x3c2/0x1070 [ 1109.886396][T15014] ip_finish_output2+0xca9/0x1070 [ 1109.886424][T15014] ? ip_skb_dst_mtu+0x109/0xa50 [ 1109.886451][T15014] ? ip_finish_output+0x33a/0x3f0 [ 1109.886478][T15014] ip_output+0x29f/0x450 [ 1109.886503][T15014] ? ip_output+0x5b/0x450 [ 1109.886528][T15014] iptunnel_xmit+0x59f/0xa00 [ 1109.886575][T15014] ip_tunnel_xmit+0x193a/0x1f20 [ 1109.886615][T15014] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 1109.886646][T15014] ? __pfx_gre_build_header+0x10/0x10 [ 1109.886673][T15014] ? kmem_cache_free+0x180/0x610 [ 1109.886701][T15014] ? pskb_expand_head+0x356/0x1320 [ 1109.886732][T15014] __gre_xmit+0x19e/0x240 [ 1109.886771][T15014] ? __pfx___gre_xmit+0x10/0x10 [ 1109.886800][T15014] erspan_xmit+0xa81/0x1670 [ 1109.886825][T15014] ? __lock_acquire+0x146e/0x2cf0 [ 1109.886856][T15014] ? __pfx_erspan_xmit+0x10/0x10 [ 1109.886888][T15014] dev_hard_start_xmit+0x2cd/0x7f0 [ 1109.886924][T15014] sch_direct_xmit+0x251/0x4c0 [ 1109.886960][T15014] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1109.886990][T15014] ? alb_fasten_mac_swap+0x639/0xf60 [ 1109.887012][T15014] ? bond_select_active_slave+0x850/0xd40 [ 1109.887032][T15014] ? bond_enslave+0x22a5/0x3c40 [ 1109.887064][T15014] __dev_queue_xmit+0x1538/0x3850 [ 1109.887111][T15014] ? __dev_queue_xmit+0x274/0x3850 [ 1109.887146][T15014] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1109.887179][T15014] ? rcu_is_watching+0x15/0xb0 [ 1109.887204][T15014] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 1109.887228][T15014] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 1109.887294][T15014] ? alb_send_lp_vid+0x14e/0x550 [ 1109.887403][T15014] alb_send_lp_vid+0x348/0x550 [ 1109.887432][T15014] ? dev_addr_mod+0x354/0x520 [ 1109.887460][T15014] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 1109.887485][T15014] ? __pfx_alb_set_slave_mac_addr+0x10/0x10 [ 1109.887517][T15014] alb_send_learning_packets+0x12c/0x300 [ 1109.887551][T15014] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 1109.887577][T15014] ? alb_swap_mac_addr+0x230/0x340 [ 1109.887603][T15014] alb_fasten_mac_swap+0x639/0xf60 [ 1109.887630][T15014] bond_alb_handle_active_change+0xc6d/0xf30 [ 1109.887657][T15014] ? __pfx_bond_alb_handle_active_change+0x10/0x10 [ 1109.887695][T15014] ? __local_bh_enable_ip+0xd0/0x130 [ 1109.887721][T15014] bond_change_active_slave+0x106e/0x35f0 [ 1109.887750][T15014] ? __pfx_bond_change_active_slave+0x10/0x10 [ 1109.887792][T15014] ? __queue_work+0x1a1/0xf90 [ 1109.887819][T15014] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1109.887846][T15014] ? mod_delayed_work_on+0xdf/0x190 [ 1109.887877][T15014] bond_select_active_slave+0x909/0xd40 [ 1109.887901][T15014] ? __pfx_bond_select_active_slave+0x10/0x10 [ 1109.887922][T15014] ? __pfx_bond_set_carrier+0x10/0x10 [ 1109.887955][T15014] ? netdev_is_rx_handler_busy+0x56/0x120 [ 1109.887986][T15014] ? __pfx_bond_handle_frame+0x10/0x10 [ 1109.888009][T15014] bond_enslave+0x22a5/0x3c40 [ 1109.888028][T15014] ? sock_def_readable+0x2ff/0x530 [ 1109.888075][T15014] ? __pfx_bond_enslave+0x10/0x10 [ 1109.888103][T15014] ? __pfx___dev_notify_flags+0x10/0x10 [ 1109.888127][T15014] ? __dev_change_flags+0x51e/0x690 [ 1109.888154][T15014] ? mutex_is_locked+0x17/0x50 [ 1109.888181][T15014] do_set_master+0x533/0x6d0 [ 1109.888210][T15014] rtnl_newlink_create+0x6af/0xb70 [ 1109.888243][T15014] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1109.888271][T15014] ? __pfx___mutex_lock+0x10/0x10 [ 1109.888305][T15014] ? ns_capable+0x89/0xe0 [ 1109.888330][T15014] rtnl_newlink+0x1666/0x1be0 [ 1109.888360][T15014] ? __pfx_rtnl_newlink+0x10/0x10 [ 1109.888381][T15014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.888421][T15014] ? kasan_quarantine_put+0xbb/0x1f0 [ 1109.888448][T15014] ? lockdep_hardirqs_on+0x7a/0x110 [ 1109.888478][T15014] ? nlmon_xmit+0xb0/0x100 [ 1109.888507][T15014] ? kmem_cache_free+0x180/0x610 [ 1109.888548][T15014] ? __lock_acquire+0x6b5/0x2cf0 [ 1109.888577][T15014] ? __local_bh_enable_ip+0xd0/0x130 [ 1109.888602][T15014] ? lockdep_hardirqs_on+0x7a/0x110 [ 1109.888628][T15014] ? __dev_queue_xmit+0x274/0x3850 [ 1109.888658][T15014] ? __local_bh_enable_ip+0xd0/0x130 [ 1109.888683][T15014] ? __dev_queue_xmit+0x274/0x3850 [ 1109.888717][T15014] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1109.888747][T15014] ? __pfx_rtnl_newlink+0x10/0x10 [ 1109.888770][T15014] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1109.888794][T15014] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1109.888816][T15014] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1109.888837][T15014] ? ref_tracker_free+0x693/0x840 [ 1109.888870][T15014] ? __copy_skb_header+0xa3/0x4a0 [ 1109.888898][T15014] ? __pfx_ref_tracker_free+0x10/0x10 [ 1109.888934][T15014] netlink_rcv_skb+0x232/0x4b0 [ 1109.888957][T15014] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1109.888981][T15014] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1109.889007][T15014] ? netlink_deliver_tap+0x2e/0x1b0 [ 1109.889033][T15014] netlink_unicast+0x80f/0x9b0 [ 1109.889069][T15014] ? __pfx_netlink_unicast+0x10/0x10 [ 1109.889101][T15014] ? netlink_sendmsg+0x650/0xb40 [ 1109.889121][T15014] ? skb_put+0x11b/0x210 [ 1109.889147][T15014] netlink_sendmsg+0x813/0xb40 [ 1109.889174][T15014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1109.889198][T15014] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1109.889227][T15014] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1109.889259][T15014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1109.889280][T15014] ____sys_sendmsg+0xa68/0xad0 [ 1109.889308][T15014] ? __might_fault+0xaf/0x130 [ 1109.889337][T15014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1109.889369][T15014] ? import_iovec+0x73/0xa0 [ 1109.889392][T15014] ___sys_sendmsg+0x2a5/0x360 [ 1109.889419][T15014] ? __lock_acquire+0x6b5/0x2cf0 [ 1109.889444][T15014] ? __pfx____sys_sendmsg+0x10/0x10 [ 1109.889474][T15014] ? futex_wait+0x29a/0x380 [ 1109.889514][T15014] ? __fget_files+0x2a/0x420 [ 1109.889542][T15014] ? __fget_files+0x3a0/0x420 [ 1109.889569][T15014] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1109.889597][T15014] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1109.889631][T15014] ? rcu_is_watching+0x15/0xb0 [ 1109.889662][T15014] do_syscall_64+0x14d/0xf80 [ 1109.889691][T15014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.889712][T15014] ? trace_irq_disable+0x37/0x100 [ 1109.889738][T15014] ? clear_bhb_loop+0x40/0x90 [ 1109.889762][T15014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.889797][T15014] RIP: 0033:0x7fa27b59c629 [ 1109.889817][T15014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.889838][T15014] RSP: 002b:00007fa27c3a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1109.889862][T15014] RAX: ffffffffffffffda RBX: 00007fa27b816090 RCX: 00007fa27b59c629 [ 1109.889879][T15014] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1109.889893][T15014] RBP: 00007fa27b632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1109.889907][T15014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1109.889921][T15014] R13: 00007fa27b816128 R14: 00007fa27b816090 R15: 00007fffd705a158 [ 1109.889947][T15014] [ 1110.779151][T15014] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 1110.792888][T15029] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1110.799218][ T133] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.833564][T15014] syz.4.8247 (15014) used greatest stack depth: 16584 bytes left [ 1110.840729][ T133] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.873023][T14979] wlan1 speed is unknown, defaulting to 1000 [ 1110.898046][T14979] lo speed is unknown, defaulting to 1000 [ 1114.159444][ T5187] udevd[5187]: worker [5611] /devices/virtual/block/nbd1 timeout; kill it [ 1114.168624][ T5187] udevd[5187]: seq 41425 '/devices/virtual/block/nbd1' killed [ 1117.316136][T30415] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)