last executing test programs: 3.488836244s ago: executing program 2 (id=6928): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@var={0x4, 0x0, 0x0, 0xe, 0x1, 0x2}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x5}, @const={0x9, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x30, 0x0, 0x5f, 0x61, 0x2f]}}, &(0x7f0000000140)=""/178, 0x47, 0xb2, 0x1, 0x4, 0x10000}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@var={0x4, 0x0, 0x0, 0xe, 0x1, 0x2}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x5}, @const={0x9, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x30, 0x0, 0x5f, 0x61, 0x2f]}}, &(0x7f0000000140)=""/178, 0x47, 0xb2, 0x1, 0x4, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xff04, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={r3, 0x4, 0x29, 0xffffffffffffffa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={r3, 0x4, 0x29, 0xffffffffffffffa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r4, 0x89e1, &(0x7f0000003180)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="54a40344d69dd91900000000000000711183030089658b084cc7fee477761c1c050000007310008076f36906e38b5d81"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 2.894907483s ago: executing program 4 (id=6939): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) (rerun: 32) sendmsg$inet(r2, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 2.779031922s ago: executing program 1 (id=6944): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r5, 0x400454cd, 0x300) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x393e8ca8ff5a06a9, 0xffffffff}, 0x14}}, 0x0) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0x401c5820, &(0x7f00000004c0)={0x0, 0x0, 0x5}) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@int=0xfffffe01, 0x4) (async) connect$inet6(r0, &(0x7f0000001380)={0xa, 0x4e22, 0x1000, @private0, 0x9b}, 0x1c) (async) r7 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2.706856452s ago: executing program 4 (id=6945): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000001c0)={0x7fffffff}, 0x10) (async) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008104e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x44004) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x168, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x138, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x2}, @TCA_GRED_DPS={0x10, 0x3, {0x7, 0x4, 0x0, 0x7}}]}}]}, 0x168}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c0000000000000095000000009edf12131a0ad7b9d1dfff3c5600000018100000", @ANYRES32, @ANYBLOB="00000000000000000500000000e0d1c3872d000000950000000052e900"], &(0x7f0000000140)='GPL\x00', 0x6, 0x96, &(0x7f0000000080)=""/150, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 2.633959484s ago: executing program 4 (id=6947): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) (async) mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0xff}}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8b1b78881c57d48cbc969c6278d4bcb420f93b67740f14c24634c64fd0899d59a075f6d141f8da7479216c49f05bfa61bc45585fb008c1ff6d40", 0x3a) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 2.550980153s ago: executing program 2 (id=6949): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delrule={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_DST={0x14, 0x7, @loopback}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x38}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x2, @local}, 0x10) 2.498116595s ago: executing program 3 (id=6950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="e3da956882712b8900299f8014c1b8a6d3c2bb82457a5152299c4b72aa0a3588c28c4facc02939541f", @ANYRES16=r1, @ANYBLOB="000028bd7000fedbdf250c00000008000600ff7f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x240000c0}, 0x8000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000100)={'filter\x00', 0x0, [0x4, 0x6, 0xd5, 0x8, 0x9]}, &(0x7f0000000000)=0x54) r6 = socket$inet(0x2, 0x80001, 0x84) listen(r6, 0xaca) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r9, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "a64d99383abc3f1af59eea6c"}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x2000040) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x2000c044) 2.428665657s ago: executing program 4 (id=6951): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x88, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x4, 0x0, {0x5, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x300, 0x3, 0x1}}, @void, @void, @val={0x76, 0x6, {0x4, 0x80, 0x7, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x40025}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="df4800000000000000000c0000002c00038028000380140001800800810002000000050002000000000010000180090002007369743000000000180001801400020073697430"], 0x58}}, 0x0) 2.286940825s ago: executing program 3 (id=6952): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 2.28439449s ago: executing program 2 (id=6953): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x50c40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x4000}) 2.242175937s ago: executing program 3 (id=6954): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000019c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000001740)={0x25c, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x5, 0x4}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2}, @NL80211_ATTR_SCAN_SUPP_RATES={0x228, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, "2228f25b47a903b4cc64635e621f092bd8aa834ac0acfaaa5157196b"}, @NL80211_BAND_60GHZ={0xaf, 0x2, "768aa596ef38b4228e35d63d9b704e628d1d75578722b1487ccf2cb7bcd0daee16df3469036bb0e26ef1a2acb21b92b09b498436c3f5ad2e8da0f4a5c560b7c8b42d6d339f8508487d8dc6e6ec1010adbce23abfd0e58b4fd472b964abfc2dfc6e226c4ba00445d2fb6af2115ba5cb2848e542ef27e435bb184fdcd6cd5d565c3868d04b86fa67cbba47057f1d12611a300a195bd289adc841cc17576e6f3e43d3fd30fc2d9021ace72687"}, @NL80211_BAND_6GHZ={0x78, 0x3, "80995f630ea6de85a0204b6e1c309a0954554b555b6f53b0ec283946321a215b3fdd0638c3a5e3008404cce2003ae41a1ed6f2816c21e989d6ad7ba6878b2194777b69957896d445a43292b0ea4d2be706404a90b8c50d83028b228600d78ad5868e4fbde07be896c3dd3dd06926b54b7268b3ae"}, @NL80211_BAND_2GHZ={0xdb, 0x0, "8d8479317418636d05369f1499fa1d93d92cc60b6c4f0764392c8b0d909785df3bbd04eb353af2f86c1aec9c2f0e5332e7bf7897b0446c204ec7d192f00e6737b1a8b26f8c1c7e8603b25882e6c1f0b12bc6ee4c50885ac1a6e792ad2c41a7b8fe287cbe6dcc436120492e278bee6463db84615a98df5a46de108aaa9a7de4caa423f8e9dd90d5f1b093421a23afe545087875cf5b5449e9e853bae101921de036eb5a486908b88b8157310674af6e25ac22a0eb3a82d9d618432b60e2315cc0cee71f8010423fdc794bb2ab27aca4a0afb65a7017e324"}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x1}]}, 0x25c}, 0x1, 0x0, 0x0, 0x845}, 0x1) writev(r0, &(0x7f0000000140)=[{&(0x7f00000006c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c1000ff00000000000000", 0x58}], 0x1) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="968e7cb49cde2e3999e2ebd073bf00d82aedb5b0e2ac565806ccacd0e0e6219760aaf4bd44235ea7ebfce6596c97c8b0b4be6abf7b5c33df2ad8ae44d4bc6fa4fb8305fe6f34a8277db77b3600a8b876e659a19d90207ff3151524", 0x5b}, {&(0x7f0000000080)="c11b671807b795f1510032b62ca2ed90b77042705d99479afb481804e2adeeb46299074075a69160069beaaa4d528cc9653fc398944efdc90b39e5f1b1fb03661f", 0x41}, {&(0x7f0000000100)="ba44ad411c8b56c918373ca2c332e325099ce1d5537508efae99", 0x1a}, {&(0x7f0000000180)="22c07785c2067b443fc897b097b9e87887a59d0f41868d3db4fb6454d53b5e6b2138bd7a26d1f6dd96ab1edc9ff115437b5124c25451c3f8b3e21d9d65f09f44e258023ded5d90be9bd66d320b421a912b6d1ecc606f899af7ee34c58212367ee3d1456c7ff542e0c06259f97f7833ccc09dffbe9f35ff8b0aa684ab3ce193847e2ae16ff0c2edf5207d2fb168bcc85f269d91ff539619f6be952d126e6e3931f2fad9517cada04fcf7025002c0f0b3a8fad86f6537de542ab", 0xb9}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000000240)="bf64c07a1698584f871bc22420dc6a24dbe9663cd655aa7d3caa323f35f0da3426543a9096c839b205ba979c0809a5cf3de0ea09a7b255dac2e4fd3dcea0428f4f27f87c591eba556b90c11e5c75e4ffc8ba754a7067f45796946f2040dff55b9001", 0x62}, {&(0x7f00000002c0)="029f166ceb0c33572439cdd6760e1167f55075d5057ddda6490da948ce696d24f7d896e8a38115599ed4492af050b3b66be2dd1cf5c42424e791b4c4c4a86e165d3f66195316fd27a6350aa15068a43dcf3a0b6a74ab7595941fd697b38604c0ad6f6172f5841f49", 0x68}, {&(0x7f0000000340)="bd7268ee133c2565902656ab1abe95416445f4283e8d47b6700c30629b4ecf5af01042a8c1e48e77c077e9b7dc3b4d70d4a590c9fb32a524065327d3d870edc87ba821c4f613ac90098bf4d8cfbd1119cd34d4b12e56f3578ceb86cfcf9d740b3acc7c327dc6497d489893e93e20b655ecd261e64f05a67e768a8373cbcd7fa102a0b369e264616fff6b851f21ec75e108e041d32f90e022533d82f68ae3bd1bbb2be9206325bef15c2a0f04aa27", 0xae}, {&(0x7f0000000400)="7335a76693ceb566e9e54b3e5699fb4c1ce70761ccbd6199294c8ed0cc9ca8e918afa1368014efda9f6b1ab4f5c718e368f73f", 0x33}, {&(0x7f0000000440)="8a7d723ecbffe74c1727c5d5a520d98c879f97b03d140700ad65be93c4f74406725e1f10649666b77da1eff54639b593a6856012dc64f86ac9f7858e6821", 0x3e}], 0xa, &(0x7f0000000540)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_u8={{0x11}}], 0x60}, 0x4c098) 2.179167248s ago: executing program 3 (id=6955): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="08000a00e408"], 0x44}}, 0x20008040) 1.942533894s ago: executing program 0 (id=6956): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000040)={r2, @in6={{0x2, 0x0, 0x0, @empty}}}, &(0x7f0000000300)=0x90) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a48d98c9afc70fe6d000000090000000000000021aca4", @ANYRES8=r1, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = socket$alg(0x26, 0x5, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x20000805}, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r7, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) (async, rerun: 32) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x24}}, 0x0) (async) bind$alg(r4, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f00000000c0)="ffffffff", 0x4) (async, rerun: 32) syz_emit_ethernet(0xb9, &(0x7f0000000240)={@remote, @remote, @val={@val={0x88a8, 0x6, 0x1, 0x3}, {0x8100, 0x6}}, {@llc_tr={0x11, {@snap={0x54, 0x1, "948c", '{R^', 0x6001, "baf2125358994c84e2f58d53a0bc3ce05ba02c8c29f69de1db64959684c56117748244437d206f5734c1ccbb51e07bf4afd0743e1982d301d178848e29e73c1045109f99865b0c2cbb8d947e634e536dafaa5a887303e07688b41f991d8d43820f78edaac7c1f0d96a5f49112baacf56de93aa66b2364e5049406215a10ce4670f701d854157a5c0a19a17419f58d1a280d2369be517f87bb21b"}}}}}, 0x0) 1.874004694s ago: executing program 0 (id=6957): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r0, r0, 0x2f, 0x20, 0x4}, 0x20) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) close(r4) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000280001"], 0xb8}}, 0x0) 744.776049ms ago: executing program 1 (id=6958): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="0400848038002d800a000000010181010101000004"], 0x58}, 0x1, 0x0, 0x0, 0x4000011}, 0x40000) (async) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r4, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) (async, rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}]}, 0x20}}, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa4, r9, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x100000, 0x0}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x64, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="0800b123e7ef003f", 0x8}], 0x1, &(0x7f0000000000)=ANY=[], 0x40}, 0x20000000) 634.595401ms ago: executing program 0 (id=6959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3b6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'syz_tun\x00', 0x400}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1, 0x8, 0x5, {0x77359400}, {}, {0x2}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x3c, 0x1, 0x0, 0x0, "2ef53bc2edb3df71b68aa827bb196c751bb7fb5c4cf6d91006dae0f8535ca5346c10a1170a2ac4914430e36b923457215467e394867d25b7b725597e0d361758"}}, 0x80}}, 0x43004) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe3a) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000107010100000000000000000203400000000000000004"], 0x20}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20000080) 634.004468ms ago: executing program 2 (id=6960): r0 = socket$inet(0x2, 0x800, 0x0) (async, rerun: 64) socket$inet_icmp(0x2, 0x2, 0x1) (rerun: 64) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000240)=0x2, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c8a070700000000000000", @ANYRES16=r4, @ANYBLOB="01000001000000000000090000000800010001000000050008000b0000000500070016000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc004) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r3) (async) listen(r2, 0x4000000) 629.207579ms ago: executing program 4 (id=6961): r0 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x10, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000080) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x10, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000080) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380000003e000701fefffffffcffffff017c000008004280040008000c00018006000600800a00001000028009000c"], 0x38}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000048000000180a0101000b000000000000010000000900020073797a30f9ff00000900010073797a30"], 0xe8}}, 0x0) 584.866374ms ago: executing program 3 (id=6962): syz_emit_ethernet(0x5e, &(0x7f0000001780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x28, 0x3a, 0xff, @remote, @local, {[@fragment={0x87, 0x0, 0x40, 0x0, 0x0, 0x15, 0x64}, @fragment={0x84, 0x0, 0x2, 0x1, 0x0, 0x11, 0x68}], @ndisc_na={0x92, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x1c}}}}}, 0x36) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$ax25(0x3, 0x5, 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000000c0005800c0001007061796c6f6164000c00028008000240000000050900010073797a30000000000900020073797a3200"], 0xa8}}, 0x0) sendmsg$inet(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000100)="4472bb6eed8dd8ff7987f03bc2fea8f86e6f214a2a019eea7d2c4ad64eef505a773fd0d17a88e2fee0bd27ae4015b4bba3485d788bae2221308a13b499962662d9aa509af5526feecdc41a3f235abc0155d596b2aec58e77b9b8b67d3ac985cbccecf441c51308120b571ec4ba3453d08c7bd0520f822ed439944eec8a56d437c814d1950cc2bcbb394444c3dd2f85a7be922d246e194feea101cbdbb8af435d3a0a6036de173e5ca5e721e29d4e752d75187f4c06075d44d021714c33ef7c1cd0445120082f5f083de8eb728f6ae8a26d984d17fb2db8bfd660ab2da2f2", 0xde}, {&(0x7f0000000200)="aee2bcb0731a7c2056bd39d2714ced0faa304fa4c1bd896b3be9513822d06e3d7fb9178fe2d69300a0ad9dac906d134f9073e1c490b01c95ffd8b20558c82784e9553bf2349d91b2d00d82a92b6fe9e16399e911bc73238607145cc7b3d8221ac58830ffdec0466b2e9071055d83911aa3d341e560b9e7efec9c64195b0357821c00cbe14e05a8279638be176b51e130bd4275a97c98fe8d0f013e4be18dfa79c8a4d32102c24d", 0xa7}, {&(0x7f00000002c0)="af0cc2547f0c266e8a557554b117b1e4521e4bf4afb7617738830ab7ea4df8fd7185bdf27d493503ccb36542ebb267445e9d084ca819595a58d147b09c9bd63ecc3034cbf8574c35e0fde25008b5dac2f82531f6f22d7b4095d27559c0abad7ae1574d9e58382f22d9c59e1ab3f3dbec1f236ff313634300f003708f558156eac2070e878218b7e65e98d0c5048a5267fafade65f9062ef9abf2f85e3c38d0703f3402c5e3b7624a0bdb6c9fa5fd5c4369bf1eef915fbfc127f18aed586bfbd1fcfbbdf376c05ed4cdb566ac9210e50d0eca5b3bc703d612c0cebe60326ee0275f63c25372c7a3672bcd803982d4716c86ae68c6c920", 0xf6}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000000)="da8c10afb73fd48200d009edeb8ee279b3550170", 0x14}, {&(0x7f00000013c0)="aa7e28de15645722a83d9bed77806163d69ee638a6fb9e0ffebf11fee1ee789ee7ad8833e68807bbcb8be7fda93fa0b2322341b82bdc86af8cfc0d803b08893b3359050b21a9d51faa7aac45c8b2364f9886b92cc77d32f3cf644cfba8318fe0df478009166f778fb79f8069d8a135f2da", 0x71}, {&(0x7f0000001440)="4862ccd6e8244120a5c4e3d690c1df410689493d2020dfc090d74b67082c28c710fc0f10f486a146f85f023c48959b4bfabf3af8c8a022cc2dfbf364e944c1474f0fe20131e1d835b7f73d984631bbacc7bea28c136b13825cb62c899010a30f84b183a25ec02e168391be900bf9aa24d4fdd44149d2b08959f99786e911e642a8e316bf84e39b5d1d0ff7cb39b3a01d41920b1362554dbd7fd921d66c453e7b17ec1296d56fb8cc2817c8b64d4c8854abbd7dcd7612d46a7389870190bd67986c4155377ffb0c756f06146b78d142a6df1490702281bc7e48c423698bc393991c370f30511cacf306433a7e60d841d0efc02eed3ca30ce9", 0xf8}, {&(0x7f0000001540)="d1ed57c7d8aec721060c993323f8f1ea40e3c851eaff268d4184581b17c53a7852f41b8fbf167caeaf219076fbc3cf70195032d94a1458d1e4bc48c49a5abd3e8c5243dc336e81e1156f51fdf1a37a45dbcae16bf11e701fb9a6896d3a95b01eb9d8f4f87ac261c2ada0c044ba123194e8a9928017f3cfeb57f41b0ab142efc8993d1479858ac985586dc5ff2df185fff72ab891c75d37aac8fc63d1f95a4a7ebc63d25a7989e866", 0xa8}, {&(0x7f0000001600)="90507aa915590bce8e9d72d5465f626363311313ebdb5510d5b9189dc0b8062bfe17aa95d6724ed9d7572ccb046a110b0cbc2daedb976c49da2f916ef60a2377832ddf7136cde8b3a2a8fe745ab86eec0a23", 0x52}], 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000400000000000000340000400000000000000000"], 0x18}, 0x40000) 575.118144ms ago: executing program 1 (id=6963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="2000000000000000000000000400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=@tcp6, 0x1}, 0x20) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x50}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000000c0)="881df9f50be115bcebde61befe76a0cb1712dbf5a8967e261e97b04ce9f4848fae8901d5b5d690be3e0b310a44c2cb8a73eac2a3252f5fea6d4496f994f79b861568930c6d7d596e8c263258606319b3cbcf4627752a01e285b4216db804579468fd433254f04d575d11982057c919f20c4c8cc19f10584793e925d078507bd7b952efb877", &(0x7f00000001c0)=@udp=r1, 0x1}, 0x20) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0xa0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 402.757129ms ago: executing program 4 (id=6964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="160000000000000005000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000009074061d0dc7b8117d79291900000400000000e8ff0000000000c30a00000000"], 0x48) unshare(0x22020400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r0, 0x0, 0x0, 0x4}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0xc000) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0xf0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg0\x00'}) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtaction={0x14, 0x30, 0x200}, 0x14}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000060000000008001e0002"], 0x30}}, 0x4090) 396.02398ms ago: executing program 1 (id=6965): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x14, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f933a3c92b", 0x14}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200fffec4ecf04ecf24000180090001006861736800000000140002800800014000000003080002400000000a0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/140], 0x7c}}, 0x0) bpf$PROG_LOAD(0x1e, &(0x7f0000000840)={0x16, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206052000000000000000000000000005000400000000000900020073797a300000000014000780080013402000000008000640000a1900050005000a000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140)=0x6, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYBLOB="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"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000001000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007204800000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) r5 = accept4$tipc(r1, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x800) close(r5) 357.266652ms ago: executing program 2 (id=6966): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000018001c12ab5ee47800001800000002000000000000000000000400000000000000000000000b000000000000d60336a6b90732f98833357909687f79d0e9191223c2fd90742aab1862cebfc9"], 0x0, 0x32}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000910c0000bfa30000000000000703000000feffff7a0af0ff0d00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000009000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa00000000690e000000000000008b798b4f7458d1863cc67c4c6a06fa28e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc7a65d073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f838f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b32176066599783568628f0309c3a01716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d247714358d8b170c3b5cad11f72cd9d88e56b95fe9f3de5cfcfa5c1da8ba181580d9db035efe38834de171b64f4b4c1b242786dcc5679e3d0613cdf05b02d7ad4f3b8af27a696e9b8809c2d68fddfcbd451e81d37c11f95094b91fff61ab9e69780b133d1dbca5a78695131c34c855dd793f90ca3973a4bd5606151b3600373d2bbfb7b3638e713e7275af06107949ff5dffe24d3c448ae6e4646b346fe0a21eef1e55d0659eac930d00000000000ff52b98317c45417b900a47c1ae1103c09fc173c1cf28bf7ef7a61523c6b2dbb35f5ae29877bb8e1b3e257056c0d205d391ed7b2089a72a93885b9fc8430ff"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={0x0, 0x33fe0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5}, 0x8}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r2}, 0x38) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe8000000000000000000000000000002001000000000000000000000000000200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000002001000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000230bd506000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000008d8300000000000000000000440008"], 0x16c}}, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x401, 0x10, 0xa, 0x3}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000003c0)={0x6, 0x38, 0x8205, 0xc42a, 0xd, 0x5, 0x7f, 0xfffffff8, r5}, 0x20) sendto$inet6(r0, &(0x7f0000000400)="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", 0x1000, 0x4048040, 0x0, 0x0) 311.673065ms ago: executing program 0 (id=6967): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000080000000610f000fae1cdd7ba0c9034e00000000000800"/37], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="1806000000000000000000000200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000b409bcedb1013c36a19c055f8b4bc829045595bfc549e12e3f5606725c85fbc7b1ef3172e274b994476435b58361f8def85e5744ab2cadf34dfc544dce9c426cd1be8c82f22ea6254c1d69c451b5408bfdd8294ea358a548343a308898d9ed280440826e4e6351220f8a15db543b43d296bc43ff967aabc5d67e69f21f59aed63e2e1c70c9c61415a717d1a748f0515963deee5f9da60e99fb8933844b4fd90cfb15786d308544e40044f6e71bacb4116bcdcb19ae7e06d175302bc673b02b2f8b5b4b79a76607b11a9f3c6ff29188"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000016009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x400, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e23}]}}]}, 0x4c}}, 0x24004000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x7800, 0x20, 0x9, 0x7, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x65, 0x0, 0x3, 0x4, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0x1c, 0xc0, 0x1, 0xd, [{@local, 0xfffffffa}, {@multicast1, 0x6}, {@loopback, 0xfffffff9}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x40, 0x10, 0x0, 0xa, {{0x1a, 0x4, 0x1, 0x7, 0x68, 0x68, 0x0, 0x1, 0x29, 0x0, @loopback, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0xe7, 0x3, 0xd, [{@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x8}]}, @rr={0x7, 0x13, 0xbb, [@local, @remote, @empty, @dev={0xac, 0x14, 0x14, 0xf}]}, @timestamp_prespec={0x44, 0x1c, 0x5b, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x8}, {@rand_addr=0x64010101, 0x7}, {@multicast2, 0x8}]}, @timestamp={0x44, 0x10, 0x28, 0x0, 0x2, [0x100, 0x3, 0x4]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000600)={'syztnl0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x8, 0x1, 0xc, 0x6d3, {{0x6, 0x4, 0x0, 0x20, 0x18, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x4) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="50040000", @ANYRES16=r3, @ANYBLOB="000328bd7000fbdbdf250000000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r5, @ANYBLOB="ac01028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400001800003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00011b24000100656e61626c6564000000000000000000000000000000000000000000000000001c000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400000010030010000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="080007000000000008000100", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040028040000"], 0x450}, 0x1, 0x0, 0x0, 0x854}, 0x4000040) r14 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r16 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r16, 0x84, 0x22, &(0x7f0000000080)={0x634c, 0x9, 0x6, 0x0, r15}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r15, 0x7}, 0x8) 202.635415ms ago: executing program 3 (id=6968): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090003", 0x17}], 0x1}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x80000001}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000002000)="f838b39ffa3563660f9814b4227413e01fae8c141a89fc121c5f52b430714dbfc5ba621390d85264f9f52ca984710f2881e3212a01c3034108a0c02d4e919f4ee18f640d365b63ac188f41180848d0d665f4579b93862a15f7b4b028f4cde79106a7d282246ac8139032e3c2b4b18924f0edb1a8bd986355a2cbad0104572adf7a986e927e0db561b8f711c7e23bbc1a5623b3704c55b2692a59ccb07d2a2de3321a476d3603ede9dbf268e67a43b491d980dbaa47e4e23c1f84379261076492f0a46598b1c2913db95ece9a9707d220f22aa438f29329ffef4cd6ebfd65ef97015949009f057d45c159173d7cb724e10037930e6674b18b607ef8d9a31fffa75579b4946adda7aaef92c894dea722960f333e0091f1f5119cfa9b4bef09d038545b640136210c93c329ed414e9dd66d3fe95ccca9ad614a1a97ca69c24fbeba68b23b2e00f86112e449979f4c982d2979740ff35eab13b861a6fb82c4cc90cf90275bf3029088558f16ca95d0056f0896131b4d62a85b6e3934bc9cef4824ca26d4a3042eb245243cc85a3c0fd1a477f4d22e55df0552f741d66995b0aac6115b7b9a455cd63d72ccd475eaaffd61bd680c9f3c622ca346afd8d8fc0097b61ad9ab12334f087a67c7db8010f7c096ac58b249dc453e705e6b70b9716f2b25be92b1eb2ea4059a580075ebeb08638351a23d7b00a8c28b989904e77edb5ac8824d97efec33916d5b90b359072a96490a2debe5f1b32fc52376a9168bd5407e6ca04ea62810ed78d584756600c738c189cd84c53ba8c86ba3340486e57e79c5068ca821e5e5622a977810e7536fe2d1bfe4125ffbdd0ad9f9b83266cd64570926612d130929c2112250755a1df6d8adb07d1d3b757cfea3a4b5e1cbfb061ec435c3f827ac25b40c556365dd410eff71a6ad47ffa5c832f44dc5fcf6a8cdae20850759df64b043b16a8782ee71de81812b06b2162dcc87eb34277dfd6ab7978e67653a8ec3a72a403478929a8cad89bba6088b54cfcbb25d1c3274dc8568229f1145c645c7e9fa9f28567d379bad2b467ce245223784576ec5b1cc2568153646b56ceaabb10396ab678b01ea61c28feba102284136d015cd8ce0c745ba0e8e2839ae928396b3446d7f824443ae92a8607196458799bc39ed67215a616366b7cfc2e216846441260d2dfd4c42039ca35bc53e1fb7885996ee8a1570e98a726e8a263898a6c9d885b4c88b81c6457587ed1959a02da5fb1ed3ae1decc14927c610010ce21f7297899167cea2231a99dc8b031e20c4d05987ff27ec2ecf9f90ccbad959e976ff9d2945d8975c9c4241fbd89af9164d3d0fc3fb12108304b33d6f50115362a518be54dd7b4bf213cd6f27a0257b8087f16b03997a68342f8ad5d253e27bab8f838211d79ae58cb0eb560c9994e3731c25cc3bf2e0ffbf13e746733da1f77c8b7f0ec2c93a9a27b7d56577f4aec10c270ddea7dc5b3f64feebf979aac54d155b903e4a7c946860d83d7aa53b80ecf86ec8d524a3d9ef3bb6b3d9b867f32282742b9e5792eddc0d466ac6e90971005d172d27cdbfa731e4cb1e5d6426a85d2d0bea19c7f27e3e6f781420bb79b7111e8959f99ea92b72a10c9c86f4f38e6700c93d9274f4572483ec8982e84fde86d11dc73a032cc66b5488a2945ee317ac4005aa33831e7737d3813e82618b9eecb8e454097622fd0bfd2a00994a223ac70d1f76ff21e64c886ba1fb8cea1fce2f8fd7221762f8925d17ee19eb345c631ea22cada57858fddf46753d894778012a7a5058b5765f9c96db357e9a7791a1edc2d7cd687ea67a63ed30f269c89f44530eaa5707faf6f1b897916e6df4df59e950d0ce371fdb54eedaf1ac74b51fb250a1e527439c67ae0945e5405f1ab6804732bf58c3744df95727d763de1f354a3945b9f8830c1c44ba02755ca10c9f765cab0f1bc3d3344aa91c468ead490629d19e64dcffe653d246832987a348f4284a95b53d9e661d2b6fb6509f45e7658ad3ef9985777fdc16b285e7534051ab31f50b365fee48302a13ae582446ef24213763c85f41210e34e8215ef3ad0d88c4369282bddabe3fae7ed243a08887647cdaf5b21b95d2cf03384ab5c9c19cec2bb04e016faba9c9c735803187f677377b84e3738635a49f452baee5060a4421d1eaa17aee81fa4ff6f9321d777a73128ab73affe7916491b6fd68a16e61b9d9f3a6f92769abe47542e4cb6501960d1a5ada70413cd2d19944891e65c67ec8979b5ee02468391a364d3bba313c4cf9ae99f364578c94b5554cb86a0f1ed71cc12cc6c4c4c8ba4d47b76c71d8dbd495bb608283b8edc2a02e74aea7073f07580e533e2d2fa2277c7bbc321ec1a42ddec9e120b85e8a6141400c6726692a58addb880c481a37dc0a6db923f9efae3c4ac3ab8f0c385d2cadf0620edfccb6896c98814f434ee126339f4ca360357faf27c49ae3bfec7b5b83e9b24f8b6fca947c15cb7ca433448f892af38725d337b2117b73fdce163c72d86f351cbd23c5e6da8fe4bb898da60a541cd719aced686896e20d8acff58365a4f75bf42333b7c29cadd998d7b1ff0977b119219e632d59818809827e1b3ecba476d259d2e55135f37138fd071ee7b42ace788aff5bef0df7cac215af38dadf99b6cd287139ccb4dd9a9c5ccb31c00a3a30b93ae95c78e67761143b711cccc2b13eff4ffee045cfb3efa4b15252f00c9ef41d4e9f537cf4270b5ff42454723f8f2b8501185f21bfe35e1013e01121ffae3a97333e8948498df714cdc6409e44f94e27bb995590badbc01f579e28fc3061f8997f556d7aff8f956a20b31f4ec87906e5d0cde8d8c8a44f0f3099fc8ae279af5968a02bb4b1fa06e9ba1629aac46ba0dc796f7813885d43717e332e0484a30383e374e26ab50afbc64883e8cfc7198904f877a09a75f05b189f0c8dcf42a452762d38c3bc3e261888cf4af346d1d87be963d66724ca46ad395784edc7e7956bac538b5adbc86d6ef51b708d548b5470f927700566332ec8b563909dbad42e90afff46e8b33fc66852d75bb2c3249cf12d21dc57be32c06a070d62dbc8b037f422cbb4ff7753e90eca15f28f24c1a5e37e3bb466d1448cc2693f198c8e8c75dc663f3254ac1a6e7d52756a6da5d755fbf301425c60650ababed9928efbeb8bb1bb9994742926763c43a2108cea9d5fd5a640879574d20ee3d4974f5647ca44353904927215b7918570c88e245ecc2385167fd1ca83618c821331d54d06b43224c3d6681db55d4b09d27db7915bb274051162b02a6cd64e8c4b0996650e0367652d652ef64fc13a8b3ed88c88e9532b56a2019c02583854f1952c028f82cffbcc030f370d193646b9aa076dc05fa057ca8769775140b55751297fa91698a9a82b89a614d96dfc153c52845913025ecc8984d333feaa50eca0002a885abb3ad5b513cc8409b040bac9ed8529a1a76c270a4df5b005356ac4220cd134d9434f901e6e7d96a374c80e4ed81977f36b27424304d879fe0889b50ada1da72a78e0070e35dc5ebb43d7c61ff52ff55e50ad298b00b97ad944dd161aed95f4009889927c24469403899bdd6dd7f8ecc195d6f5c9375164b331f915a29851d9b0230d07bab955091a141059a150d972739100035ae05c2bf9d8911e6b6171a6b4c2bcaa0e8567cf2a29fb6cb8adfe29e42e88094c36fa4e07bef31149bbd7d5166b620385bf422c51b4523e3eacab56ad54ee70d84572874a967779b737de35724502a3daaefc4ce1074bb11e9aad6879deb132ac240047af4e5e572edb5f122955a7b142b7bd96ef3cd069746f4b1dce2c94b6bf19e934a9d4f6edf3207172f1893cd8d35ed94f8ccda3d8ba3e7c5f886598bf8946df83fdd6a391c3b268b631c89ab7f2434bc02d3ecef208e236d06a4f14d1353012341ded0342cd2d580bbd0f88a14c56b4b9f12c2dece02fe02418c23e6d10b7d9ac6648165e47adf1857a4d0bb25c096aa510ce9f77671703bf7f887908fabcfcb26a7f1fca177ae3686e5e1db1bef474d155204ecd610d71fd90512192504f0cfc44fc38de414ffc5571ae72be4351c86d63be507982114afc33e38ee81a05910dafb240d4527082f85c61861233aeae8f3da8e2814c35ef709024ba08b53d5e26b8b855d8fd273012777c4517601252f7977189e9960667e8fb7c81fe544454c0ef2891c2fea071da9f9e2861b9cf50f74edf1baf98fb8e32d291e107603dd52b8f4225f50239e893f7320dc448305bb8f1f9ecdfe4480b7cb99095243cc576496b7d2a6ef2326b908ca525cae402b41ce45da7cc2f5356fab22a3693ef4107b9ee5cf150f8b263ba6868525ddb8e4e7c212f5764366025e5f1a1904eb7348269ae9a83aa5185be2e375f90883ed71bb7f542463ec0477042b91b88a8b1776e4e15333668bbf70271961ae39eb797e30f86dfd9a6b6393bbeeb47a43bf694b57b9e5dd4f312d3ebfa2040ea49a1700eab21c00ce2252ce3f68a5c65e0f390daa867cec74de2bddba3324dcec88d1c0c8850b4240d85fb5115410086924d5b6059b68a82d2a56edb7e535d8006be9771a5744167d06fa9f61e2e8e0e01a72b569b8ec559d2e776300077d535bcb55c89b732daf4438fafa26171a965bae949770a074f511abb445a34d26142d8dcfa5c66863ce79fde3d4f39bd205be5e4ce365ef0db4b9beca1c64784ee020af1c89094879134ab8e7511ec1f0127dca4ba124b53c4c11a169f1757ad8b59829202f4afa77d8c8b8d8755297e4c31c5b8500b39a4f884146b19522e5142bcd5fe6531607a421f17989c1c1b34d587f45690444a589c3d2153a8bfb50cf7fa0045603ac64a3ed43c0b15936b829949e5059e22782b418b245d08945155a80e24d468612fc9b59c285b53ba6cf553df1f189a1951858892655c8151c2c4b3bec9e315c8c418070405e4ef6a0f62e2469a0c4fa42058b516b941f2a25380b5a042b055bb94447046a507d7e6c12432ddeaf91482416f87b2f16bc0c219deb6c0c5cd3b400e7b9039e720232c56b15360961c30ba4b8e18fee5405018efd8e58215b434c6843e0b8be3967bd398d965f56347c7f320d6ac8636e57608091e2dc5700cff7203453fa3a563221bd1e742b09647084c602dd2ec7fbef818e1cea31616c76c6cf0964cc5b467c213045888d5ab16061f1fbd6c9318c9fc56848387326283a50d6579af007481788db0579c46b234c7c9e960cee926c1c944cbca122188bc215618ba717f4c6bcd4b4e6cde50bf9b43b67663001e581f5dc55086d8f197b7fcaa9f305f2f499f97403d0a68efb55e99916721ecfa16d9d0ea8a504c2be80a1afbc6e164973be524e82db0e69694d38afe22620bbd2862e27a180ef3fb6b07069dd3f5939438edbcd5031964490d202e95f799fe63de55fca280b4315a1e2d8dd52e8cf6e86e8f376f477de7e729410bd0544997de7359c77b4a6e0e21abbfd07e25fbcbf015e687d779b283e8aeb98309795296595feabe56ed322a1a8c90a36fd29c1471cabd0e32d6022988fae5fecb5dcbe1e8b2552e0a97f35b92c774a79aa6b1f117218ddbe97686ab63d61d95f160293aca171398cf3b3bb01fd8b529767166ed5a76ad17f3c217fcd8d9d9c85afa113f85eb65befb9c9029b34f24cda431b98217b7f43c79f9250ecd4828fb46023b6e8083f25e4d4c34056834159860dca5f529052c6c3b6c23993231862c9326076d88f4447a753ed5be0a6bfc34bac7d8fe34187b1d4f6f6cee1313052057225c88f9f0ba3e", 0xfe41}, {&(0x7f0000000300)="9b364acaa018d77f8143825708d8", 0x1}], 0x1000000000000029, 0xa) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket(0x23, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfe69, &(0x7f0000000140)={&(0x7f0000000380)="88d8ce92d5ad3dd44a5bb374edbeca0340d4e4a988e635195bd3649ee665826aa815edf7c20c023f1e6bc15230a100a43bb54102d560016d295b8732368d8f5a70fdb707c4690274c4aeeec92a3c14c3df08d49975ab732387d494ecf0fc10255dfff5bfbf13f4c5062a2bc1baf64037f27fc2af790d98d9fa8616438315ebea71300264b9a46e07000000946963141010f378325d5cc3bb99b560863c60265b0f30e28001966a7a7e2987a8cebc8e45b4a0525ab748f4a02160000000000000", 0xc0}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4c090) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000100)={0xc0, 0x800, 0x6, 0x9}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bond0\x00'}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x82) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', r3, 0x7800, 0x7, 0xfffffeff, 0x100, {{0x6, 0x4, 0x2, 0x35, 0x18, 0x65, 0x0, 0x8, 0x29, 0x0, @empty, @local, {[@ra={0x94, 0x4}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@gettfilter={0x24, 0x2e, 0x4, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xd, 0x1}, {0xc, 0x3}}}, 0x24}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES16=r4], 0xf0}, 0x1, 0x0, 0x0, 0x24048081}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) socket$rxrpc(0x21, 0x2, 0x2) 202.308457ms ago: executing program 2 (id=6969): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x8, 0x18}, 0xc) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000480)={&(0x7f0000000100)="0f0cecc19c61f3580047cbd52e8104755f28b36dae1d5e1344d1f5b92ae3bea58c6b8542bca8b2654a91e02349ce8cadf29411e7129881a4560a4ae281f92fbdc292db2c015b0eb26e8277d11f01688ea59ebd03c46b12fa0cdebc1e87023f9b6eae7634bf5b52c86a9c5d22407a1d95f6561bf3abb22bf815f437bbb0345421e4f8a3df70767d17a0a47304c47c93abb6d6570c74ad6d9a023a7c8f89694af90f235db8", &(0x7f00000001c0)=""/154, &(0x7f0000000280)="da69b629839e950cebd2b1c9886a740a24d4542cca7f1a5ba79836e448c5b2e3a8afcf9a4421398d998a2b3a7524446a19236b870c48b63120fe49cade32f38c97714cdd78553e4c82deee390bf2f1659f145cb6992302c262817b8c4c8efe53530c28908048b072b3c9f2a85c2ef31595e9dbbab1321fc3d293965ed5aefb0bb950cbb7b22b53520b457db2c48cdbae658ad3112b1a5a8f4eb6182a0ed289c0e496d91ee6d10652801dec3e0f307bb216a926ce7ad3a8106571cf483b50a51a409160783a7637a63aa83d583ed1e28232272c0d497cf6d351d3579546", &(0x7f0000000380)="724f5816ae4c84e3eeed656680cc886decafd0ad7f0a4e5d7fba3d235b39f1df5f102d9f6c85fabf3b956d9fbfb7bb83c8c8ad3444d8ab4b0b383d1c52c1f27ddbed8629b2d7a3957fabc91a18a02da21a2daa4272b96fef056d069daae26fa75104c838652ec7695bdcf455f9a37b3ba8dacff3b1c0b62d7444bf7166472f7c1f743e9f4aa76d78e9c7118bc2fc85c5e8b32ab578cf78360cd9cfa2788180ecff91853aa61958f11cbff895cc89751a1ac17793a275377c00f066827077c4868a5f8785921cb818080b13a7fde32c49b6dfae36c2f6def3", 0x4, r1, 0x4}, 0x38) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000480)={&(0x7f0000000100)="0f0cecc19c61f3580047cbd52e8104755f28b36dae1d5e1344d1f5b92ae3bea58c6b8542bca8b2654a91e02349ce8cadf29411e7129881a4560a4ae281f92fbdc292db2c015b0eb26e8277d11f01688ea59ebd03c46b12fa0cdebc1e87023f9b6eae7634bf5b52c86a9c5d22407a1d95f6561bf3abb22bf815f437bbb0345421e4f8a3df70767d17a0a47304c47c93abb6d6570c74ad6d9a023a7c8f89694af90f235db8", &(0x7f00000001c0)=""/154, &(0x7f0000000280)="da69b629839e950cebd2b1c9886a740a24d4542cca7f1a5ba79836e448c5b2e3a8afcf9a4421398d998a2b3a7524446a19236b870c48b63120fe49cade32f38c97714cdd78553e4c82deee390bf2f1659f145cb6992302c262817b8c4c8efe53530c28908048b072b3c9f2a85c2ef31595e9dbbab1321fc3d293965ed5aefb0bb950cbb7b22b53520b457db2c48cdbae658ad3112b1a5a8f4eb6182a0ed289c0e496d91ee6d10652801dec3e0f307bb216a926ce7ad3a8106571cf483b50a51a409160783a7637a63aa83d583ed1e28232272c0d497cf6d351d3579546", &(0x7f0000000380)="724f5816ae4c84e3eeed656680cc886decafd0ad7f0a4e5d7fba3d235b39f1df5f102d9f6c85fabf3b956d9fbfb7bb83c8c8ad3444d8ab4b0b383d1c52c1f27ddbed8629b2d7a3957fabc91a18a02da21a2daa4272b96fef056d069daae26fa75104c838652ec7695bdcf455f9a37b3ba8dacff3b1c0b62d7444bf7166472f7c1f743e9f4aa76d78e9c7118bc2fc85c5e8b32ab578cf78360cd9cfa2788180ecff91853aa61958f11cbff895cc89751a1ac17793a275377c00f066827077c4868a5f8785921cb818080b13a7fde32c49b6dfae36c2f6def3", 0x4, r1, 0x4}, 0x38) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x100}}]}, 0x24}}, 0x0) 181.996204ms ago: executing program 1 (id=6970): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001000)=ANY=[@ANYBLOB="80010000100001000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a6faffff000000000000000033000000fe8000006d69778700000000000000bbe7d43a6e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014d0000000000a0000000000000000000000480001007467723136302d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003006465666c61746500"/312], 0x180}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000140)=@ethtool_channels={0x3d, 0xd, 0x4, 0x6, 0x3, 0x7, 0xc70d, 0x7fffffff, 0x4}}) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x4040000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0xac}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)={0x34, r8, 0x1, 0x0, 0x2, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffff, 0x9}, {}, {0x1, 0x6}}}, 0x24}}, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000003c0)=0x480, 0x4) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x0, [0xffff, 0x6], 0x7f}, 0x10) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000340)=""/118, &(0x7f00000000c0)=0x76) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)={0x78, r11, 0x801, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e208ec153e"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "00000000f1ff451e041bffff00"}]}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "d16178fea8"}]}]}, 0x78}}, 0x0) 176.961115ms ago: executing program 0 (id=6971): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[], 0xdc}}, 0x80000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000140)=0x219049d521c81725) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r2}, &(0x7f0000000100)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x200}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 724.517µs ago: executing program 1 (id=6972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8b1c}]}, 0x44}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000814}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000300)=0x2000000000000000, 0x8) (async) r6 = socket$netlink(0x10, 0x3, 0x4) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x57}]}, &(0x7f0000000080)=0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000680)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e3031d32944bf20590000a2bc5603ca00000f7f8907000020008d42188fedc22eedc6d100000101ff0000000309", 0x48}], 0x1) (async) connect$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, @host}, 0x10) 0s ago: executing program 0 (id=6973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000004840)={{0x3, @null, 0x9}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast]}, 0x48) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x1, &(0x7f00000018c0), &(0x7f00000079c0)=0x4) unshare(0x2020400) r4 = socket(0x840000000002, 0x3, 0x100) setsockopt$sock_int(r4, 0x1, 0x1a, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x8, 0x200, 0xfff, 0x6}, &(0x7f0000000180)=0x10) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0xffffffffffffffff, &(0x7f0000000580)=0x4e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="7b0033008000de00ffffffffffff080211000000e9b78e575a633466fc3c000000000000640001400006020202020202010003010e040610970000ffff05120037029f71b28398051fe28cfa771e7a3a0e3c040180a91c2d1a02000c0200000000000000fa00eeff0f0000000700"], 0x98}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000880) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001, 0x100010, r2, 0xa383a000) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, 0x13, 0xffffffffffffffff, 0x179f000) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) kernel console output (not intermixed with test programs): speed is unknown, defaulting to 1000 [ 429.428475][T24429] netlink: 'syz.3.5421': attribute type 39 has an invalid length. [ 429.997872][T24463] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5432'. [ 430.014668][T24461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5430'. [ 430.028739][T24464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5433'. [ 430.280765][T24483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.301779][T24485] netlink: 'syz.2.5439': attribute type 32 has an invalid length. [ 430.310228][T24485] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 430.444330][T24500] veth1_to_bridge: entered promiscuous mode [ 430.470304][T24500] veth1_to_bridge: entered allmulticast mode [ 430.849972][T24525] veth1_to_batadv: entered promiscuous mode [ 431.049496][T24542] openvswitch: netlink: Unknown key attributes 2 [ 431.054891][T24543] netlink: 'syz.2.5455': attribute type 1 has an invalid length. [ 431.327780][T24560] ip6t_srh: unknown srh match flags 536B [ 431.583933][T24580] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 431.739505][T24590] xt_TPROXY: Can be used only with -p tcp or -p udp [ 431.782887][T24588] bond8: entered promiscuous mode [ 431.789681][T24588] bond8: entered allmulticast mode [ 431.802813][T24588] 8021q: adding VLAN 0 to HW filter on device bond8 [ 431.844514][T24588] tipc: Enabled bearer , priority 0 [ 431.875015][T24588] syzkaller0: entered promiscuous mode [ 431.926788][T24588] syzkaller0: entered allmulticast mode [ 432.013404][T24596] tipc: Resetting bearer [ 432.053289][T24607] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 432.090058][T24587] tipc: Resetting bearer [ 432.205252][T24587] tipc: Disabling bearer [ 432.703251][T24660] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 432.723556][T24650] syzkaller0: mtu less than device minimum [ 432.951803][T24673] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 432.991045][T24673] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 433.020261][T24674] __nla_validate_parse: 10 callbacks suppressed [ 433.020277][T24674] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5498'. [ 433.064205][T24676] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5499'. [ 433.089091][T24676] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5499'. [ 433.443246][T24706] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5505'. [ 433.663427][T24715] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5509'. [ 433.720964][T24715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5509'. [ 433.740032][T24715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5509'. [ 433.752325][T24715] netlink: 'syz.3.5509': attribute type 13 has an invalid length. [ 433.968444][T24725] lo: left promiscuous mode [ 434.169744][T24744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5520'. [ 434.464208][T24725] wg2: left promiscuous mode [ 434.475814][T24725] wg2: left allmulticast mode [ 434.826326][T24754] openvswitch: netlink: IP tunnel TTL not specified. [ 434.932238][T24725] hsr0: left promiscuous mode [ 434.943378][T24725] hsr0: left allmulticast mode [ 434.948485][T24725] hsr_slave_0: left allmulticast mode [ 434.953858][T24725] hsr_slave_1: left allmulticast mode [ 435.303776][T24725] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.315339][T24725] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.324275][T24725] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.333817][T24725] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.434420][T24725] bond1: left promiscuous mode [ 435.440164][T24725] bond2: left promiscuous mode [ 435.444938][T24725] bond2: left allmulticast mode [ 435.465126][T24725] veth3: left allmulticast mode [ 435.471098][T24725] ip6gre1: left allmulticast mode [ 435.486568][T24725] vlan0: left allmulticast mode [ 435.491456][T24725] veth0_vlan: left allmulticast mode [ 435.502394][T24725] vlan0: left promiscuous mode [ 435.508103][T24725] macvtap1: left promiscuous mode [ 435.513153][T24725] macvtap1: left allmulticast mode [ 435.534787][T24725] veth7: left promiscuous mode [ 435.696185][T24747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5522'. [ 435.976840][T24773] openvswitch: netlink: Unknown key attributes 2 [ 436.213244][T24800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5535'. [ 436.390937][T24806] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 436.508386][T24810] netlink: 'syz.2.5539': attribute type 12 has an invalid length. [ 436.556487][T24810] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 436.567400][T24817] netlink: 'syz.2.5539': attribute type 10 has an invalid length. [ 436.612835][T24817] team0: left allmulticast mode [ 436.746020][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 437.202778][T24855] netlink: 'syz.2.5555': attribute type 10 has an invalid length. [ 437.214764][T24855] veth0_vlan: left promiscuous mode [ 437.224477][T24855] veth0_vlan: entered promiscuous mode [ 437.244364][T24855] team0: Device veth0_vlan failed to register rx_handler [ 437.377136][T24860] netlink: 'syz.0.5558': attribute type 15 has an invalid length. [ 437.750174][T24884] tipc: Enabling of bearer rejected, already enabled [ 437.825980][T24887] tipc: Resetting bearer [ 438.402848][T24947] __nla_validate_parse: 7 callbacks suppressed [ 438.402866][T24947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5584'. [ 438.526234][T24944] veth0_to_bond: left allmulticast mode [ 438.532163][T24944] bridge3: port 1(veth0_to_bond) entered blocking state [ 438.557389][T24944] bridge3: port 1(veth0_to_bond) entered disabled state [ 438.583832][T24944] veth0_to_bond: entered allmulticast mode [ 438.593347][T24944] veth0_to_bond: entered promiscuous mode [ 438.752723][T24966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.824334][T24964] bond9: entered allmulticast mode [ 438.830031][T24964] 8021q: adding VLAN 0 to HW filter on device bond9 [ 438.863247][T24962] bond10: entered allmulticast mode [ 438.869525][T24962] 8021q: adding VLAN 0 to HW filter on device bond10 [ 438.960546][T24953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5585'. [ 439.156685][T24986] dvmrp0: entered allmulticast mode [ 439.290537][T24997] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5601'. [ 439.691711][T25012] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5607'. [ 439.723701][T25015] netlink: 212320 bytes leftover after parsing attributes in process `syz.3.5608'. [ 439.887515][T25023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5610'. [ 439.928204][T25023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5610'. [ 439.938613][T25029] ip6gre3: entered allmulticast mode [ 439.991968][T25033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5615'. [ 440.050501][T25035] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.5614'. [ 440.620147][T25083] xt_l2tp: unknown flags: 18 [ 440.775258][T25097] netlink: 'syz.3.5631': attribute type 1 has an invalid length. [ 440.790216][T25097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5631'. [ 441.060562][T25116] syzkaller1: entered promiscuous mode [ 441.074641][T25116] syzkaller1: entered allmulticast mode [ 441.246889][T25128] netlink: 'syz.3.5643': attribute type 10 has an invalid length. [ 441.258312][T25128] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 441.268934][T25128] netlink: 'syz.3.5643': attribute type 1 has an invalid length. [ 441.384571][T25137] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 441.661809][T25145] veth11: entered allmulticast mode [ 441.770069][T25157] netlink: 'syz.1.5649': attribute type 29 has an invalid length. [ 442.077749][T25176] netlink: 'syz.3.5657': attribute type 3 has an invalid length. [ 442.099620][T25176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.134479][T25176] ip6erspan0: entered promiscuous mode [ 442.345966][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 442.735564][T25220] netlink: 'syz.1.5670': attribute type 1 has an invalid length. [ 442.756053][T25220] netlink: 'syz.1.5670': attribute type 1 has an invalid length. [ 442.873311][T25230] batadv_slave_1: left allmulticast mode [ 443.286603][T25259] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 443.304495][T25267] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 443.442924][T25275] geneve0: left allmulticast mode [ 443.466528][T25275] team0: Port device geneve0 removed [ 443.496339][T25275] bond0: (slave wlan1): Releasing backup interface [ 443.642940][T25290] gtp0: entered promiscuous mode [ 443.659595][T25290] gtp0: entered allmulticast mode [ 443.679662][T25300] __nla_validate_parse: 12 callbacks suppressed [ 443.679677][T25300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5685'. [ 443.756461][T25300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5685'. [ 443.791644][T25300] netlink: 'syz.2.5685': attribute type 5 has an invalid length. [ 443.985245][T25312] pim6reg: entered allmulticast mode [ 444.388108][T25339] netlink: 'syz.4.5700': attribute type 1 has an invalid length. [ 444.408306][T25339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5700'. [ 445.054789][T25389] set match dimension is over the limit! [ 445.091046][T25382] veth0: entered promiscuous mode [ 445.155281][T25381] veth0: left promiscuous mode [ 445.218246][T25401] netlink: ct family unspecified [ 445.227772][T25401] openvswitch: netlink: Actions may not be safe on all matching packets [ 445.242789][T25402] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5719'. [ 445.358892][T25405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5720'. [ 445.397256][T25406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.529336][T25414] netlink: 'syz.4.5725': attribute type 1 has an invalid length. [ 445.557753][T25416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5727'. [ 445.596916][T25421] netlink: 'syz.0.5726': attribute type 1 has an invalid length. [ 445.604684][T25421] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5726'. [ 445.662795][T25414] veth13: entered promiscuous mode [ 445.683447][T25414] bond12: (slave veth13): Enslaving as a backup interface with a down link [ 445.692712][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5726'. [ 445.716827][T25421] netlink: 'syz.0.5726': attribute type 23 has an invalid length. [ 445.756067][T25416] netlink: 'syz.2.5727': attribute type 1 has an invalid length. [ 445.848648][T25434] lo speed is unknown, defaulting to 1000 [ 445.859135][T25434] lo speed is unknown, defaulting to 1000 [ 445.873444][T25434] lo speed is unknown, defaulting to 1000 [ 446.240541][T25434] infiniband syz0: set down [ 446.245211][T25434] infiniband syz0: added lo [ 446.254463][ T5934] lo speed is unknown, defaulting to 1000 [ 446.289443][T25434] RDS/IB: syz0: added [ 446.293996][T25434] smc: adding ib device syz0 with port count 1 [ 446.306384][T25434] smc: ib device syz0 port 1 has pnetid [ 446.354535][ T5934] lo speed is unknown, defaulting to 1000 [ 446.369848][T25434] lo speed is unknown, defaulting to 1000 [ 446.565631][T25475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5742'. [ 446.631962][T25434] lo speed is unknown, defaulting to 1000 [ 446.646067][T25477] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 446.728743][T25479] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5743'. [ 447.111746][T25503] validate_nla: 1 callbacks suppressed [ 447.111776][T25503] netlink: 'syz.2.5749': attribute type 10 has an invalid length. [ 447.130081][T25503] geneve0: left allmulticast mode [ 447.138559][T25503] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.176340][T25503] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.196717][T25503] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.205585][T25503] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.227603][T25503] team0: Port device geneve0 added [ 447.300684][T25434] lo speed is unknown, defaulting to 1000 [ 447.776858][T25434] lo speed is unknown, defaulting to 1000 [ 448.268436][T25571] sctp: [Deprecated]: syz.2.5767 (pid 25571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 448.268436][T25571] Use struct sctp_sack_info instead [ 448.559786][T25434] lo speed is unknown, defaulting to 1000 [ 448.710604][T25582] __nla_validate_parse: 6 callbacks suppressed [ 448.710628][T25582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5772'. [ 448.761702][T25589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5775'. [ 448.812688][T25591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5777'. [ 448.861049][T25591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5777'. [ 448.902707][T25591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5777'. [ 449.099846][T25434] lo speed is unknown, defaulting to 1000 [ 449.170431][T25616] netlink: 'syz.2.5781': attribute type 1 has an invalid length. [ 449.227522][T25616] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 449.615074][T25647] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5788'. [ 449.672430][T25650] netlink: 'syz.0.5790': attribute type 1 has an invalid length. [ 449.859593][T25653] can: request_module (can-proto-0) failed. [ 449.908473][T25657] can: request_module (can-proto-0) failed. [ 449.920595][T25434] lo speed is unknown, defaulting to 1000 [ 450.036883][T25671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5795'. [ 450.091064][T25672] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 450.116651][T25671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5795'. [ 450.198039][T25678] dvmrp0: entered allmulticast mode [ 450.223311][T25678] dvmrp0: left allmulticast mode [ 450.243402][T25678] dvmrp1: left allmulticast mode [ 450.344508][T25434] lo speed is unknown, defaulting to 1000 [ 450.498141][T25691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5800'. [ 450.743532][T25701] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5804'. [ 450.788299][T25701] xt_TCPMSS: Only works on TCP SYN packets [ 451.242331][T25717] xt_CT: No such helper "snmp" [ 451.338366][T25728] netlink: 'syz.1.5808': attribute type 1 has an invalid length. [ 451.439873][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 451.449512][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 451.458206][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 451.466671][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 451.475116][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 451.579771][ T1164] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.616456][ T1164] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.647134][ T1164] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 57982 - 0 [ 451.713092][T25750] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.917685][ T1164] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.928994][ T1164] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.939523][ T1164] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 57982 - 0 [ 451.969667][T25762] macvtap2: entered promiscuous mode [ 451.975186][T25762] vlan0: entered promiscuous mode [ 451.981083][T25762] macvtap2: entered allmulticast mode [ 451.986861][T25762] vlan0: entered allmulticast mode [ 451.991994][T25762] veth0_vlan: entered allmulticast mode [ 452.003474][T25762] vlan0: left allmulticast mode [ 452.009334][T25762] veth0_vlan: left allmulticast mode [ 452.014638][T25762] vlan0: left promiscuous mode [ 452.053095][T25750] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.128469][ T1164] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.165903][ T1164] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.196263][ T1164] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 57982 - 0 [ 452.238744][ T30] audit: type=1107 audit(1753172912.377:7): pid=25768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 452.258788][T25750] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.303402][T25734] lo speed is unknown, defaulting to 1000 [ 452.354774][ T1164] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.378424][ T1164] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.389978][ T1164] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 57982 - 0 [ 452.422254][T25734] lo speed is unknown, defaulting to 1000 [ 452.435137][T25750] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.560216][T25785] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 452.623168][T25788] syz.3.5826: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 452.646934][T25788] CPU: 1 UID: 0 PID: 25788 Comm: syz.3.5826 Not tainted 6.16.0-rc6-syzkaller-00131-g53b2fb6b05cd #0 PREEMPT(full) [ 452.646960][T25788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 452.646975][T25788] Call Trace: [ 452.646984][T25788] [ 452.646992][T25788] dump_stack_lvl+0x189/0x250 [ 452.647023][T25788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.647047][T25788] ? __pfx__printk+0x10/0x10 [ 452.647073][T25788] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 452.647099][T25788] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 452.647126][T25788] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 452.647155][T25788] warn_alloc+0x214/0x310 [ 452.647172][T25788] ? stack_depot_save_flags+0x40/0x900 [ 452.647197][T25788] ? __pfx_warn_alloc+0x10/0x10 [ 452.647217][T25788] ? kasan_save_track+0x4f/0x80 [ 452.647242][T25788] ? xskq_create+0x56/0x170 [ 452.647260][T25788] ? xsk_init_queue+0xb0/0x110 [ 452.647275][T25788] ? xsk_setsockopt+0x43f/0x710 [ 452.647302][T25788] ? do_sock_setsockopt+0x17c/0x1b0 [ 452.647327][T25788] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 452.647352][T25788] ? do_syscall_64+0xfa/0x3b0 [ 452.647372][T25788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.647417][T25788] __vmalloc_node_range_noprof+0x125/0x12f0 [ 452.647478][T25788] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 452.647515][T25788] ? __kasan_kmalloc+0x93/0xb0 [ 452.647545][T25788] vmalloc_user_noprof+0xad/0xf0 [ 452.647596][T25788] ? xskq_create+0xbf/0x170 [ 452.647616][T25788] xskq_create+0xbf/0x170 [ 452.647639][T25788] xsk_init_queue+0xb0/0x110 [ 452.647660][T25788] xsk_setsockopt+0x43f/0x710 [ 452.647693][T25788] ? __pfx_xsk_setsockopt+0x10/0x10 [ 452.647725][T25788] ? __fget_files+0x2a/0x420 [ 452.647743][T25788] ? aa_sock_opt_perm+0x74/0x110 [ 452.647772][T25788] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 452.647793][T25788] ? __pfx_xsk_setsockopt+0x10/0x10 [ 452.647826][T25788] do_sock_setsockopt+0x17c/0x1b0 [ 452.647859][T25788] __x64_sys_setsockopt+0x13f/0x1b0 [ 452.647893][T25788] do_syscall_64+0xfa/0x3b0 [ 452.647914][T25788] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.647934][T25788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.647959][T25788] ? clear_bhb_loop+0x60/0xb0 [ 452.647982][T25788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.648007][T25788] RIP: 0033:0x7f4cb698e9a9 [ 452.648027][T25788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.648044][T25788] RSP: 002b:00007f4cb781c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 452.648065][T25788] RAX: ffffffffffffffda RBX: 00007f4cb6bb5fa0 RCX: 00007f4cb698e9a9 [ 452.648079][T25788] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 452.648091][T25788] RBP: 00007f4cb6a10d69 R08: 0000000000000004 R09: 0000000000000000 [ 452.648103][T25788] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.648116][T25788] R13: 0000000000000000 R14: 00007f4cb6bb5fa0 R15: 00007ffe194d68a8 [ 452.648148][T25788] [ 452.649743][T25788] Mem-Info: [ 452.680496][T25791] netlink: 'syz.4.5827': attribute type 1 has an invalid length. [ 452.697693][T25750] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.766239][T25788] active_anon:9376 inactive_anon:0 isolated_anon:0 [ 452.766239][T25788] active_file:1512 inactive_file:39991 isolated_file:0 [ 452.766239][T25788] unevictable:768 dirty:71 writeback:0 [ 452.766239][T25788] slab_reclaimable:12610 slab_unreclaimable:128692 [ 452.766239][T25788] mapped:29118 shmem:1419 pagetables:1188 [ 452.766239][T25788] sec_pagetables:0 bounce:0 [ 452.766239][T25788] kernel_misc_reclaimable:0 [ 452.766239][T25788] free:1284805 free_pcp:15199 free_cma:0 [ 452.945481][T25750] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.950786][T25788] Node 0 active_anon:37504kB inactive_anon:0kB active_file:6048kB inactive_file:159760kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116472kB dirty:284kB writeback:0kB shmem:4140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:15264kB pagetables:4608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 452.950851][T25788] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 452.950908][T25788] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 452.950972][T25788] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 452.951024][T25788] Node 0 DMA32 free:1227756kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37456kB inactive_anon:0kB active_file:6048kB inactive_file:158184kB unevictable:1536kB writepending:280kB present:3129332kB managed:2558500kB mlocked:0kB bounce:0kB free_pcp:39636kB local_pcp:19592kB free_cma:0kB [ 452.951090][T25788] lowmem_reserve[]: 0 0 1 1 1 [ 452.951139][T25788] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 452.951201][T25788] lowmem_reserve[]: 0 0 0 0 0 [ 452.951249][T25788] Node 1 Normal free:3895880kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21252kB local_pcp:15108kB free_cma:0kB [ 452.951314][T25788] lowmem_reserve[]: 0 0 0 0 0 [ 452.951368][T25788] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB [ 453.254093][T25750] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.256801][T25788] 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 453.285271][T25750] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.290345][T25788] Node 0 DMA32: 590*4kB (UM) 366*8kB (UME) 60*16kB (ME) 20*32kB (ME) 17*64kB (M) 15*128kB (ME) 92*256kB (UME) 69*512kB (UME) 19*1024kB (UME) 8*2048kB (UM) 274*4096kB (UM) = 1226920kB [ 453.345439][T25788] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 453.359712][T25788] Node 1 Normal: 202*4kB (U) 58*8kB (UME) 47*16kB (UME) 111*32kB (UME) 26*64kB (UME) 6*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3895880kB [ 453.382185][T25788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.393920][T25788] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 453.406859][T25788] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.418901][T25788] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 453.429329][T25788] 42918 total pagecache pages [ 453.434073][T25788] 0 pages in swap cache [ 453.438605][T25788] Free swap = 124996kB [ 453.442930][T25788] Total swap = 124996kB [ 453.450757][T25788] 2097051 pages RAM [ 453.454883][T25788] 0 pages HighMem/MovableOnly [ 453.459781][T25788] 425384 pages reserved [ 453.463949][T25788] 0 pages cma reserved [ 453.546604][ T5863] Bluetooth: hci0: command tx timeout [ 453.872708][ T1164] dvmrp0 (unregistering): left allmulticast mode [ 454.266586][ T1164] bond0 (unregistering): (slave bond5): Releasing backup interface [ 454.275193][ T1164] bond0 (unregistering): Released all slaves [ 454.368001][ T1164] bond1 (unregistering): Released all slaves [ 454.459365][ T1164] bond2 (unregistering): Released all slaves [ 454.551031][ T1164] bond3 (unregistering): Released all slaves [ 454.565384][ T1164] bond4 (unregistering): Released all slaves [ 454.662996][ T1164] bond5 (unregistering): Released all slaves [ 454.677763][ T1164] bond6 (unregistering): Released all slaves [ 454.691147][ T1164] bond7 (unregistering): Released all slaves [ 454.704792][ T1164] bond8 (unregistering): Released all slaves [ 454.858317][ T1164] tipc: Disabling bearer [ 454.884802][ T1164] tipc: Left network mode [ 455.019296][ T1164] IPVS: stopping master sync thread 25672 ... [ 455.336058][T25734] chnl_net:caif_netlink_parms(): no params data found [ 455.405529][T25837] netlink: 'syz.1.5838': attribute type 2 has an invalid length. [ 455.420946][T25843] sctp: [Deprecated]: syz.4.5841 (pid 25843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 455.420946][T25843] Use struct sctp_sack_info instead [ 455.635932][ T5863] Bluetooth: hci0: command tx timeout [ 455.987971][T25848] lo speed is unknown, defaulting to 1000 [ 455.995499][T25848] lo speed is unknown, defaulting to 1000 [ 456.044780][T25874] __nla_validate_parse: 6 callbacks suppressed [ 456.044796][T25874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5845'. [ 456.209174][T25879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5849'. [ 456.247492][T25881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5850'. [ 456.282623][T25882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5849'. [ 456.312513][T25882] netlink: 'syz.1.5849': attribute type 7 has an invalid length. [ 456.320975][T25882] netlink: 'syz.1.5849': attribute type 8 has an invalid length. [ 456.350735][T25884] Bluetooth: MGMT ver 1.23 [ 456.361552][T25882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5849'. [ 456.505647][ T1164] hsr_slave_0: left promiscuous mode [ 456.511725][ T1164] hsr_slave_1: left promiscuous mode [ 456.537729][ T1164] veth0_macvtap: left allmulticast mode [ 456.543685][ T1164] veth1_macvtap: left promiscuous mode [ 456.552899][ T1164] veth0_macvtap: left promiscuous mode [ 456.558889][ T1164] veth1_vlan: left promiscuous mode [ 456.863987][ T1164] pimreg3 (unregistering): left allmulticast mode [ 457.497330][T25734] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.504484][T25734] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.514307][T25734] bridge_slave_0: entered allmulticast mode [ 457.523943][T25734] bridge_slave_0: entered promiscuous mode [ 457.538034][T25734] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.545172][T25734] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.556656][T25734] bridge_slave_1: entered allmulticast mode [ 457.564333][T25734] bridge_slave_1: entered promiscuous mode [ 457.673966][T25897] netlink: 'syz.2.5854': attribute type 32 has an invalid length. [ 457.681970][T25897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5854'. [ 457.706542][ T5863] Bluetooth: hci0: command tx timeout [ 457.732220][T25734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.743740][T25897] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 457.888510][T25734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.932621][T25907] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5858'. [ 458.099161][T25734] team0: Port device team_slave_0 added [ 458.124415][T25915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5861'. [ 458.129320][T25734] team0: Port device team_slave_1 added [ 458.161257][ T1164] IPVS: stop unused estimator thread 0... [ 458.208614][T25915] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5861'. [ 458.369844][T25734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.388041][T25734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.421492][T25734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.516676][T25734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.540594][T25734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.579044][T25734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.607562][T25930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5864'. [ 458.652386][T25933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.921409][T25734] hsr_slave_0: entered promiscuous mode [ 458.946787][T25734] hsr_slave_1: entered promiscuous mode [ 458.963289][T25734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.984021][T25734] Cannot create hsr debugfs directory [ 459.343073][T25963] xt_hashlimit: size too large, truncated to 1048576 [ 459.411029][T25969] xt_hashlimit: size too large, truncated to 1048576 [ 459.514507][T25971] : renamed from bridge_slave_0 (while UP) [ 459.787351][ T5863] Bluetooth: hci0: command tx timeout [ 460.005346][T25985] lo: left allmulticast mode [ 460.017997][T25985] tunl0: left allmulticast mode [ 460.047189][T25985] gre0: left allmulticast mode [ 460.079721][T25985] gretap0: left allmulticast mode [ 460.108636][T25985] erspan0: left allmulticast mode [ 460.137461][T25985] ip_vti0: left allmulticast mode [ 460.164721][T25985] ip6_vti0: left allmulticast mode [ 460.215244][T25985] sit0: left allmulticast mode [ 460.241022][T25985] ip6tnl0: left allmulticast mode [ 460.250782][T25985] ip6gre0: left allmulticast mode [ 460.267198][T25985] ip6gretap0: left allmulticast mode [ 460.275447][T25985] bridge0: left allmulticast mode [ 460.283400][T25985] vcan0: left allmulticast mode [ 460.289527][T25985] bond0: left allmulticast mode [ 460.295318][T25985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.305679][T25985] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.318146][T25985] dummy0: left allmulticast mode [ 460.328248][T25985] nlmon0: left allmulticast mode [ 460.338480][T25985] vxcan0: left allmulticast mode [ 460.344333][T25985] vxcan1: left allmulticast mode [ 460.354312][T25985] veth0: left allmulticast mode [ 460.374735][T25985] wg1: left allmulticast mode [ 460.389565][T25985] wg2: left allmulticast mode [ 460.397233][T25985] veth0_to_bridge: left allmulticast mode [ 460.406212][T25985] bridge_slave_0: left allmulticast mode [ 460.412666][T25985] veth1_to_bridge: left allmulticast mode [ 460.420268][T25985] bridge_slave_1: left allmulticast mode [ 460.430667][T25985] bond_slave_0: left allmulticast mode [ 460.447884][T25985] veth0_to_team: left allmulticast mode [ 460.455044][T25985] team_slave_0: left allmulticast mode [ 460.462892][T25985] veth1_to_team: left allmulticast mode [ 460.473011][T25985] team_slave_1: left allmulticast mode [ 460.480303][T25985] veth0_to_batadv: left allmulticast mode [ 460.490455][T25985] veth1_to_batadv: left allmulticast mode [ 460.499527][T25985] veth0_to_hsr: left allmulticast mode [ 460.507452][T25985] veth1_to_hsr: left allmulticast mode [ 460.516879][T25985] veth1_virt_wifi: left allmulticast mode [ 460.523933][T25985] veth0_virt_wifi: left allmulticast mode [ 460.531577][T25985] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 460.541041][T25985] veth1_vlan: left promiscuous mode [ 460.547218][T25985] veth1_vlan: left allmulticast mode [ 460.553949][T25985] veth0_vlan: left promiscuous mode [ 460.560654][T25985] veth0_vlan: entered promiscuous mode [ 460.569418][T25985] vlan0: left allmulticast mode [ 460.574791][T25985] vlan1: left allmulticast mode [ 460.584909][T25985] veth1_vlan: entered promiscuous mode [ 460.595435][T25985] veth1_vlan: entered allmulticast mode [ 460.601716][T25985] macvlan1: left allmulticast mode [ 460.607591][T25985] veth1_vlan: left allmulticast mode [ 460.613929][T25985] ipvlan0: left allmulticast mode [ 460.620150][T25985] ipvlan1: left allmulticast mode [ 460.625202][T25985] veth0_vlan: left allmulticast mode [ 460.631816][T25985] veth1_macvtap: left promiscuous mode [ 460.638525][T25985] veth1_macvtap: left allmulticast mode [ 460.645570][T25985] veth0_macvtap: left promiscuous mode [ 460.651326][T25985] veth0_macvtap: left allmulticast mode [ 460.658106][T25985] veth0_macvtap: entered promiscuous mode [ 460.663846][T25985] veth0_macvtap: entered allmulticast mode [ 460.670467][T25985] macvtap0: left allmulticast mode [ 460.675630][T25985] veth0_macvtap: left allmulticast mode [ 460.682654][T25985] veth1_macvtap: entered promiscuous mode [ 460.688527][T25985] veth1_macvtap: entered allmulticast mode [ 460.694542][T25985] macsec0: left allmulticast mode [ 460.700342][T25985] veth1_macvtap: left allmulticast mode [ 460.708423][T25985] geneve1: left allmulticast mode [ 460.717897][T25985] : left allmulticast mode [ 460.723685][T25985] ip6tnl1: left allmulticast mode [ 460.730087][T25985] gretap1: left allmulticast mode [ 460.737270][T25985] bridge1: left allmulticast mode [ 460.743504][T25985] bond1: left allmulticast mode [ 460.749082][T25985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.757596][T25985] veth2: left allmulticast mode [ 460.763243][T25985] veth3: left allmulticast mode [ 460.769104][T25985] vlan2: left allmulticast mode [ 460.774044][T25985] veth1: left allmulticast mode [ 460.780237][T25985] bond2: left allmulticast mode [ 460.786586][T25985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.795497][T25985] bond3: left allmulticast mode [ 460.801254][T25985] 8021q: adding VLAN 0 to HW filter on device bond3 [ 460.808703][T25985] gretap2: left allmulticast mode [ 460.814941][T25985] bridge2: left allmulticast mode [ 460.830805][T25985] 8021q: adding VLAN 0 to HW filter on device bond5 [ 460.840407][T25985] hsr0: left allmulticast mode [ 460.845200][T25985] syz_tun: left allmulticast mode [ 460.850463][T25985] batadv_slave_0: left allmulticast mode [ 460.859092][T25985] 8021q: adding VLAN 0 to HW filter on device bond6 [ 460.868485][T25985] 8021q: adding VLAN 0 to HW filter on device bond7 [ 460.875910][T25985] bond8: left promiscuous mode [ 460.880713][T25985] bond8: left allmulticast mode [ 460.891367][T25985] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.899854][T25985] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.908196][T25985] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.916912][T25985] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.932936][T25985] 8021q: adding VLAN 0 to HW filter on device bond9 [ 460.943126][T25992] team0: No ports can be present during mode change [ 460.960989][T25994] vlan0: entered promiscuous mode [ 460.975063][T25994] team0: Port device vlan0 added [ 460.989197][ T1096] bridge3: port 1(veth0_to_bond) entered blocking state [ 460.996262][ T1096] bridge3: port 1(veth0_to_bond) entered forwarding state [ 461.065371][T25999] tipc: Enabled bearer , priority 0 [ 461.219495][T19243] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 461.241382][T19243] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 461.249324][ T5945] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 461.250515][T26020] __nla_validate_parse: 7 callbacks suppressed [ 461.250562][T26020] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5889'. [ 461.302425][T25734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 461.306480][ T5945] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 461.328000][T25734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 461.363424][T25734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 461.363486][T26017] netlink: 'syz.3.5886': attribute type 1 has an invalid length. [ 461.390974][T25734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 461.470578][T26040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5891'. [ 461.548362][T14414] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 461.859000][T25734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.953338][T25734] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.988521][T26062] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5898'. [ 461.988549][T26061] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5898'. [ 462.009572][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.016783][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.038888][T26061] netlink: 'syz.2.5898': attribute type 1 has an invalid length. [ 462.057688][ T5945] tipc: Node number set to 3481676123 [ 462.067692][T19243] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.074881][T19243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.105402][T26066] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5899'. [ 462.173895][T26067] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 462.214516][T26076] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 462.318984][T25734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.418498][T26085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5903'. [ 462.505326][T26084] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.540152][T26084] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.708990][T26084] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.724215][T26094] xt_hashlimit: size too large, truncated to 1048576 [ 462.725928][T26084] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.788061][T26096] tipc: Enabling of bearer rejected, already enabled [ 462.862226][T26084] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.879595][T26084] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.933853][T26103] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5905'. [ 463.095013][T26096] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 463.108694][T26096] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 463.123334][T26096] tipc: Resetting bearer [ 463.144943][T19243] tipc: Resetting bearer [ 463.220171][T26084] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.234177][T26084] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.287011][T25734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.385644][T25734] veth0_vlan: entered promiscuous mode [ 463.404501][T25734] veth1_vlan: entered promiscuous mode [ 463.458385][T25734] veth0_macvtap: entered promiscuous mode [ 463.474395][T25734] veth1_macvtap: entered promiscuous mode [ 463.508420][T25734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.534353][T25734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.553035][T25734] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.564698][T25734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.579597][T25734] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.591289][T25734] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.599022][T26120] netlink: 'syz.4.5912': attribute type 1 has an invalid length. [ 463.616287][T26120] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5912'. [ 463.629348][T26084] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.638326][T26084] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.663823][T26084] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.693442][T26084] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.735467][T26084] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.753343][T26084] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.803316][T26084] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.817715][T26084] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.991718][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.025590][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.110851][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.123284][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.127975][T26137] netlink: 'syz.4.5916': attribute type 1 has an invalid length. [ 464.174188][T26137] 8021q: adding VLAN 0 to HW filter on device bond13 [ 464.305249][T26142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5918'. [ 464.321901][T26142] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5918'. [ 464.406911][T26148] netlink: 'syz.0.5802': attribute type 1 has an invalid length. [ 464.906950][T26167] sctp: [Deprecated]: syz.1.5925 (pid 26167) Use of int in max_burst socket option. [ 464.906950][T26167] Use struct sctp_assoc_value instead [ 464.977301][T26172] netlink: 'syz.2.5928': attribute type 11 has an invalid length. [ 465.103271][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 465.116931][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 465.131092][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 465.147549][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 465.166782][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 465.192822][T26181] openvswitch: netlink: IP tunnel dst address not specified [ 465.277912][T26176] lo speed is unknown, defaulting to 1000 [ 465.330794][T26176] lo speed is unknown, defaulting to 1000 [ 465.545893][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 465.649896][T26190] 8021q: VLANs not supported on sit0 [ 465.709418][T26193] netlink: 'syz.1.5935': attribute type 4 has an invalid length. [ 465.737033][T26190] can: request_module (can-proto-0) failed. [ 466.504447][ T49] bond0 (unregistering): Released all slaves [ 466.620300][ T49] bond1 (unregistering): Released all slaves [ 466.722372][ T49] bond2 (unregistering): Released all slaves [ 466.741399][ T49] bond3 (unregistering): Released all slaves [ 466.756999][ T49] bond4 (unregistering): Released all slaves [ 466.879022][ T49] bond5 (unregistering): Released all slaves [ 466.895383][ T49] bond6 (unregistering): Released all slaves [ 466.903772][ T5863] block nbd1: Receive control failed (result -32) [ 466.903772][ T5854] block nbd4: Receive control failed (result -32) [ 466.911243][ T5849] block nbd3: Receive control failed (result -32) [ 466.912813][ T5857] block nbd0: Receive control failed (result -32) [ 466.919069][T26217] block nbd8: Receive control failed (result -32) [ 466.926212][ T5867] block nbd6: Receive control failed (result -32) [ 466.931451][T26216] block nbd7: Receive control failed (result -32) [ 466.938586][ T51] block nbd5: Receive control failed (result -32) [ 466.945092][T26221] block nbd11: Receive control failed (result -32) [ 466.951880][T26219] block nbd10: Receive control failed (result -32) [ 466.974581][T26220] block nbd12: Receive control failed (result -32) [ 466.985662][T26218] block nbd9: Receive control failed (result -32) [ 466.998661][ T49] bond7 (unregistering): Released all slaves [ 467.016381][ T49] bond8 (unregistering): Released all slaves [ 467.147190][ T49] bond9 (unregistering): Released all slaves [ 467.237318][T26218] Bluetooth: hci5: command tx timeout [ 467.275264][ T49] bond10 (unregistering): Released all slaves [ 467.295026][ T49] bond11 (unregistering): Released all slaves [ 467.316261][ T49] bond12 (unregistering): (slave veth13): Releasing backup interface [ 467.335084][ T49] bond12 (unregistering): Released all slaves [ 467.462754][ T49] bond13 (unregistering): Released all slaves [ 467.641917][ T49] tipc: Left network mode [ 467.668028][T26233] __nla_validate_parse: 5 callbacks suppressed [ 467.668049][T26233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5942'. [ 467.702691][ T49] IPVS: stopping master sync thread 22482 ... [ 467.731433][T26176] chnl_net:caif_netlink_parms(): no params data found [ 468.269185][T26176] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.276986][T26176] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.284168][T26176] bridge_slave_0: entered allmulticast mode [ 468.302790][T26176] bridge_slave_0: entered promiscuous mode [ 468.384394][T26176] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.396022][T26176] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.403289][T26176] bridge_slave_1: entered allmulticast mode [ 468.423967][T26176] bridge_slave_1: entered promiscuous mode [ 468.569097][T26176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.582808][T26176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.633936][T26176] team0: Port device team_slave_0 added [ 468.643344][T26176] team0: Port device team_slave_1 added [ 468.755365][T26176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.762635][T26176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.790720][T26176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.804267][T26176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.811958][T26176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.838556][T26176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.865194][ T49] hsr_slave_0: left promiscuous mode [ 468.876446][ T49] hsr_slave_1: left promiscuous mode [ 469.308606][T26218] Bluetooth: hci5: command tx timeout [ 469.835055][T26272] netlink: 'syz.3.5954': attribute type 1 has an invalid length. [ 469.857783][T26279] netlink: 'syz.3.5954': attribute type 1 has an invalid length. [ 469.981330][T26279] netlink: 'syz.3.5954': attribute type 1 has an invalid length. [ 469.983961][T26283] netlink: 'syz.3.5954': attribute type 1 has an invalid length. [ 470.075036][T26276] bridge5: entered promiscuous mode [ 470.080514][T26276] bridge5: entered allmulticast mode [ 470.108337][T26279] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 470.117551][T26283] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 470.259966][T26293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5955'. [ 470.298426][T26176] hsr_slave_0: entered promiscuous mode [ 470.319247][T26176] hsr_slave_1: entered promiscuous mode [ 470.346246][T26176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.363134][T26176] Cannot create hsr debugfs directory [ 470.781547][ T49] IPVS: stop unused estimator thread 0... [ 471.322388][T26348] netlink: 'syz.2.5970': attribute type 1 has an invalid length. [ 471.335988][T26347] netlink: 'syz.2.5970': attribute type 1 has an invalid length. [ 471.392883][T26218] Bluetooth: hci5: command tx timeout [ 471.398018][T26347] bond11: entered promiscuous mode [ 471.403975][T26347] 8021q: adding VLAN 0 to HW filter on device bond11 [ 471.480385][T26351] 8021q: adding VLAN 0 to HW filter on device bond12 [ 471.492818][T26351] bond11: (slave bond12): making interface the new active one [ 471.501282][T26351] bond12: entered promiscuous mode [ 471.507932][T26351] bond11: (slave bond12): Enslaving as an active interface with an up link [ 471.547955][T26176] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 471.565048][T26176] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 471.601966][T26176] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 471.636990][T26176] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 471.763035][T26376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5976'. [ 471.777317][T26379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5976'. [ 471.807402][T26176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.853923][T26376] netlink: 'syz.3.5976': attribute type 1 has an invalid length. [ 471.922843][T26176] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.963558][T26392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5975'. [ 471.979454][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.986792][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.064233][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.071485][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.104579][T26397] netlink: 'syz.0.5979': attribute type 12 has an invalid length. [ 472.113325][T26397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5979'. [ 472.154322][T26397] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.163610][T26397] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.173506][T26397] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.182290][T26397] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.377317][T26386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5978'. [ 472.721331][T26176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.750125][T26432] IPVS: set_ctl: invalid protocol: 53157 172.20.20.187:20002 [ 472.824943][T26437] sctp: [Deprecated]: syz.1.5987 (pid 26437) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.824943][T26437] Use struct sctp_sack_info instead [ 472.970455][T26443] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 472.995667][T26444] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 473.016741][T26445] x_tables: duplicate underflow at hook 2 [ 473.163221][T26457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5991'. [ 473.174691][T26453] syz.3.5992 (26453) used obsolete PPPIOCDETACH ioctl [ 473.463039][T26468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5995'. [ 473.476025][T26218] Bluetooth: hci5: command tx timeout [ 473.509951][T26470] openvswitch: netlink: Unknown key attributes 2 [ 473.614120][T26176] veth0_vlan: entered promiscuous mode [ 473.639922][T26474] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 473.694471][T26176] veth1_vlan: entered promiscuous mode [ 473.801212][T26176] veth0_macvtap: entered promiscuous mode [ 473.827925][T26176] veth1_macvtap: entered promiscuous mode [ 473.855684][T26176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.890418][T26176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.961764][T26176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.972734][T26176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.991690][T26176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.014394][T26176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.312332][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.331386][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.348339][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 474.402437][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.430735][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.612963][T26525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6011'. [ 474.643855][T26529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6012'. [ 474.679321][T26529] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6012'. [ 474.705561][T26534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6012'. [ 474.721644][T26529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6012'. [ 474.746988][T26529] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6012'. [ 474.792263][T26529] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6012'. [ 474.968636][T26546] syz_tun: entered allmulticast mode [ 474.982688][T26546] netlink: 'syz.2.6016': attribute type 1 has an invalid length. [ 475.031811][T26546] netlink: 'syz.2.6016': attribute type 1 has an invalid length. [ 475.076203][T26546] netlink: 'syz.2.6016': attribute type 1 has an invalid length. [ 475.084405][T26546] netlink: 'syz.2.6016': attribute type 2 has an invalid length. [ 475.105912][T26546] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6016'. [ 475.137887][T26543] syz_tun: left allmulticast mode [ 475.412628][T26569] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 475.942750][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.968421][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.057287][T26600] netlink: 'syz.4.6032': attribute type 1 has an invalid length. [ 476.116208][T26219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 476.125548][T26219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 476.133667][T26219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 476.141964][T26219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 476.149950][T26219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 476.160715][T26600] netlink: 'syz.4.6032': attribute type 1 has an invalid length. [ 476.191746][T26591] bond1: entered promiscuous mode [ 476.197029][T26591] bond1: entered allmulticast mode [ 476.202616][T26591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.212577][T26592] netlink: 'syz.4.6032': attribute type 1 has an invalid length. [ 476.232526][T26592] netlink: 'syz.4.6032': attribute type 1 has an invalid length. [ 476.245614][T26603] tc_dump_action: action bad kind [ 476.373384][T26613] netlink: zone id is out of range [ 476.378733][T26613] netlink: zone id is out of range [ 476.383931][T26613] netlink: zone id is out of range [ 476.393426][T26613] netlink: zone id is out of range [ 476.399153][T26613] netlink: zone id is out of range [ 476.409135][T26613] netlink: zone id is out of range [ 476.414348][T26613] netlink: zone id is out of range [ 476.425088][T26613] netlink: zone id is out of range [ 476.441792][T26601] lo speed is unknown, defaulting to 1000 [ 476.445757][T26613] netlink: zone id is out of range [ 476.486510][T26601] lo speed is unknown, defaulting to 1000 [ 476.742729][T26636] netlink: 'syz.4.6044': attribute type 1 has an invalid length. [ 477.100542][T26661] ksmbd: Unknown IPC event: 3, ignore. [ 477.262627][T26671] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 477.304344][T26601] chnl_net:caif_netlink_parms(): no params data found [ 477.568436][T26691] tipc: Enabling of bearer rejected, already enabled [ 477.628795][T26601] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.646349][T26601] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.654594][T26601] bridge_slave_0: entered allmulticast mode [ 477.662454][T26601] bridge_slave_0: entered promiscuous mode [ 477.694320][T26601] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.706598][T26601] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.732372][T26601] bridge_slave_1: entered allmulticast mode [ 477.747646][T26601] bridge_slave_1: entered promiscuous mode [ 477.780576][T26704] bridge0: entered allmulticast mode [ 477.849537][T26601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.931263][T26691] lo speed is unknown, defaulting to 1000 [ 477.940503][T26601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.975990][T26691] lo speed is unknown, defaulting to 1000 [ 478.096686][T26601] team0: Port device team_slave_0 added [ 478.121324][T26601] team0: Port device team_slave_1 added [ 478.225011][T26721] netlink: 'syz.0.6065': attribute type 10 has an invalid length. [ 478.266675][T26218] Bluetooth: hci1: command tx timeout [ 478.320978][T26721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.373476][T26721] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 478.587308][T26601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.594451][T26601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.612071][T26735] __nla_validate_parse: 13 callbacks suppressed [ 478.612089][T26735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6072'. [ 478.649100][T26601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.707232][T26601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.716933][T26601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.749885][T26601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.765257][T26740] nbd: must specify a size in bytes for the device [ 478.780627][T26740] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6071'. [ 478.790417][T26735] bridge3: port 1(veth0_to_bond) entered disabled state [ 478.816245][T26740] net_ratelimit: 396 callbacks suppressed [ 478.816283][T26740] openvswitch: netlink: Flow actions attr not present in new flow. [ 478.830323][T26735] veth0_to_bond: left allmulticast mode [ 478.845903][T26735] veth0_to_bond: left promiscuous mode [ 478.851877][T26735] bridge3: port 1(veth0_to_bond) entered disabled state [ 478.890069][T26735] bridge6: port 1(veth0_to_bond) entered blocking state [ 478.904509][T26735] bridge6: port 1(veth0_to_bond) entered disabled state [ 478.912496][T26735] veth0_to_bond: entered allmulticast mode [ 478.922901][T26735] veth0_to_bond: entered promiscuous mode [ 479.031515][T26741] syzkaller1: entered promiscuous mode [ 479.037718][T26741] syzkaller1: entered allmulticast mode [ 479.091890][T26601] hsr_slave_0: entered promiscuous mode [ 479.110324][T26601] hsr_slave_1: entered promiscuous mode [ 479.124474][T26601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.133613][T26601] Cannot create hsr debugfs directory [ 479.552494][T26764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6077'. [ 479.670062][T26765] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6077'. [ 479.707634][T26771] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6077'. [ 479.748103][T26764] bond13 (unregistering): Released all slaves [ 479.851505][T26601] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.885917][T26601] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 479.954034][T26785] rdma_rxe: rxe_newlink: failed to add lo [ 480.017618][T26601] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.030759][T26601] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 480.161111][T26792] vlan0: left promiscuous mode [ 480.242144][T26792] 8021q: adding VLAN 0 to HW filter on device bond10 [ 480.257103][T14408] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 480.276679][T26792] bridge5: left promiscuous mode [ 480.281787][T26792] bridge5: left allmulticast mode [ 480.288035][T26792] bond11: left promiscuous mode [ 480.293016][T26792] bond12: left promiscuous mode [ 480.308850][T19243] bridge6: port 1(veth0_to_bond) entered blocking state [ 480.315979][T19243] bridge6: port 1(veth0_to_bond) entered forwarding state [ 480.344150][T26601] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.356196][T26218] Bluetooth: hci1: command tx timeout [ 480.366591][T26601] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 480.452855][T26601] bond0: (slave netdevsim0): Releasing backup interface [ 480.470299][T26601] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.495788][T26601] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 480.616321][T14408] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 480.807970][T26601] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 480.861481][T26601] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 480.912659][T26601] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 480.928721][T26818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6089'. [ 480.947797][T26601] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 481.212121][T26841] netlink: 'syz.4.6096': attribute type 1 has an invalid length. [ 481.294206][T26601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.379181][T26601] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.414271][T19243] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.421480][T19243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.423932][T26855] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6098'. [ 481.459629][T26855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6098'. [ 481.479135][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.486315][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.495302][T26855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6098'. [ 481.819056][T26873] siw: device registration error -23 [ 481.873927][T26879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6104'. [ 482.150571][T26601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.154200][T26895] netlink: 'syz.2.6110': attribute type 1 has an invalid length. [ 482.207152][T26895] netlink: 'syz.2.6110': attribute type 4 has an invalid length. [ 482.252592][T26601] veth0_vlan: entered promiscuous mode [ 482.302388][T26601] veth1_vlan: entered promiscuous mode [ 482.413731][T26601] veth0_macvtap: entered promiscuous mode [ 482.428167][T26218] Bluetooth: hci1: command tx timeout [ 482.468934][T26908] C: renamed from team_slave_0 (while UP) [ 482.483591][T26908] netlink: 'syz.4.6114': attribute type 1 has an invalid length. [ 482.491677][T26908] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 482.527563][T26601] veth1_macvtap: entered promiscuous mode [ 482.549879][T26912] tipc: Enabling of bearer rejected, already enabled [ 482.589559][T26905] batadv1: entered allmulticast mode [ 482.628184][T26601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.641604][T26906] batadv1: entered allmulticast mode [ 482.683573][T26601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.722627][T26601] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.750239][T26601] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.763761][T26601] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.772753][T26601] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.990079][T19243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.012840][T19243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.079619][T19243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.110866][T19243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.403863][T26947] netlink: 'syz.1.6124': attribute type 1 has an invalid length. [ 484.143685][T26952] __nla_validate_parse: 7 callbacks suppressed [ 484.143704][T26952] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6024'. [ 484.478359][T26966] netlink: 'syz.4.6133': attribute type 1 has an invalid length. [ 484.500851][T26966] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6133'. [ 484.510204][T26218] Bluetooth: hci1: command tx timeout [ 484.523122][T26966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6133'. [ 484.583576][T26977] x_tables: unsorted underflow at hook 3 [ 484.603832][T26978] netlink: 'syz.2.6132': attribute type 4 has an invalid length. [ 484.616739][T26977] x_tables: unsorted underflow at hook 3 [ 484.676311][T26977] x_tables: unsorted underflow at hook 3 [ 484.684207][T26969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6132'. [ 484.817583][T26984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6136'. [ 485.131220][T16572] syz_tun (unregistering): left promiscuous mode [ 485.150175][T26219] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 485.160219][T26219] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 485.177919][T26219] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 485.187501][T26219] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 485.195587][T26219] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 485.242300][T27008] sctp: [Deprecated]: syz.0.6144 (pid 27008) Use of struct sctp_assoc_value in delayed_ack socket option. [ 485.242300][T27008] Use struct sctp_sack_info instead [ 485.306965][T27011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6143'. [ 485.347730][T27011] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 485.378642][T27004] lo speed is unknown, defaulting to 1000 [ 485.385429][T27004] lo speed is unknown, defaulting to 1000 [ 485.400849][T27013] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6143'. [ 485.472596][T27018] team0: entered promiscuous mode [ 485.491359][T27018] geneve0: entered promiscuous mode [ 485.511852][T27018] vlan0: entered promiscuous mode [ 485.530586][T27017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6145'. [ 485.766391][T27014] team0: left promiscuous mode [ 485.771647][T27014] geneve0: left promiscuous mode [ 485.806483][T27014] vlan0: left promiscuous mode [ 486.049092][T27037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6152'. [ 486.383783][T27055] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 486.469005][T27063] netlink: 'syz.4.6158': attribute type 3 has an invalid length. [ 486.516894][T27063] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6158'. [ 486.672506][T27072] openvswitch: netlink: Key type 16144 is out of range max 32 [ 486.732233][T27004] chnl_net:caif_netlink_parms(): no params data found [ 486.893570][T27004] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.901633][T27004] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.916556][T27004] bridge_slave_0: entered allmulticast mode [ 486.924315][T27004] bridge_slave_0: entered promiscuous mode [ 486.975070][T27004] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.983150][T27004] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.990812][T27004] bridge_slave_1: entered allmulticast mode [ 486.999555][T27004] bridge_slave_1: entered promiscuous mode [ 487.057410][T27004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.070724][T27004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.125453][T27004] team0: Port device team_slave_0 added [ 487.134891][T27004] team0: Port device team_slave_1 added [ 487.180249][T27004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.187741][T27004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.220758][T27004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.234095][T27004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.238971][T26219] Bluetooth: hci3: command tx timeout [ 487.248237][T27004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.291375][T27004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.425370][T27004] hsr_slave_0: entered promiscuous mode [ 487.438608][T27004] hsr_slave_1: entered promiscuous mode [ 487.444996][T27004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.453931][T27004] Cannot create hsr debugfs directory [ 487.487320][T27111] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 487.494925][T27111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.615638][T27113] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.644659][T27085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 487.650854][T27113] gretap1: entered promiscuous mode [ 487.691947][T27113] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 487.844554][T27115] macvlan2: entered promiscuous mode [ 487.857612][T27115] macvlan2: entered allmulticast mode [ 487.864673][T27115] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 487.937165][T27004] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.088977][T27004] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.261155][T27004] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.318399][T27142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.326847][T27142] batadv_slave_0: entered promiscuous mode [ 488.351101][T27004] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.684491][T27004] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 488.705019][T27004] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 488.729089][T27004] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 488.753105][T27004] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 488.949547][T27004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.040789][T27004] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.091879][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.099212][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.208420][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.215589][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.306312][T26219] Bluetooth: hci3: command tx timeout [ 489.800182][T27222] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 489.833070][T27223] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 489.872931][T27222] __nla_validate_parse: 5 callbacks suppressed [ 489.872947][T27222] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6199'. [ 489.873698][T27230] netlink: 348 bytes leftover after parsing attributes in process `syz.4.6201'. [ 490.138852][T27004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.159266][T27243] netlink: 'syz.4.6205': attribute type 2 has an invalid length. [ 490.227577][T27243] netlink: 'syz.4.6205': attribute type 1 has an invalid length. [ 490.232915][T27004] veth0_vlan: entered promiscuous mode [ 490.235326][T27243] netlink: 'syz.4.6205': attribute type 10 has an invalid length. [ 490.235343][T27243] netlink: 236 bytes leftover after parsing attributes in process `syz.4.6205'. [ 490.303467][T27004] veth1_vlan: entered promiscuous mode [ 490.363568][T27004] veth0_macvtap: entered promiscuous mode [ 490.394461][T27004] veth1_macvtap: entered promiscuous mode [ 490.470727][T27004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.493633][T27004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.548410][T27004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.559622][T27004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.572122][T27004] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.584688][T27004] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.615253][T27260] vxcan1: entered allmulticast mode [ 490.621783][T27262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6211'. [ 490.674490][T27263] vxcan1: left allmulticast mode [ 490.785304][T27268] netlink: 'syz.3.6214': attribute type 2 has an invalid length. [ 490.806502][T27268] netlink: 'syz.3.6214': attribute type 1 has an invalid length. [ 490.831133][T19243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.856333][T19243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.015936][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.045978][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.274576][T27288] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6219'. [ 491.324731][T27291] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6220'. [ 491.386630][T26219] Bluetooth: hci3: command tx timeout [ 491.627372][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 492.051648][T27320] x_tables: duplicate underflow at hook 1 [ 492.064210][T27320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6231'. [ 492.112812][T27321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6230'. [ 492.151027][T14408] hid-generic 0005:020F:5505.0001: unknown main item tag 0x0 [ 492.166576][T27322] netlink: 468 bytes leftover after parsing attributes in process `syz.3.6231'. [ 492.185259][T14408] hid-generic 0005:020F:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz1] on aa:aa:aa:aa:aa:aa [ 492.203910][T26218] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 492.224017][T26218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 492.233917][T26218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 492.242509][T26218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 492.250299][T26218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 492.358042][T27330] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6232'. [ 492.427840][T17000] syz_tun (unregistering): left promiscuous mode [ 492.600726][T19243] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.636308][T19243] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.763498][T27324] lo speed is unknown, defaulting to 1000 [ 492.819614][T27324] lo speed is unknown, defaulting to 1000 [ 492.950442][T19243] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.972652][T19243] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.263179][T19243] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.291182][T19243] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.466223][T26218] Bluetooth: hci3: command tx timeout [ 493.512932][T19243] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.592138][T19243] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.184190][T27384] bridge_slave_0: left allmulticast mode [ 494.228624][T27384] bridge_slave_0: left promiscuous mode [ 494.234388][T27384] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.295910][T27384] bridge_slave_1: left allmulticast mode [ 494.301603][T27384] bridge_slave_1: left promiscuous mode [ 494.314214][T27384] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.334000][T27384] bond0: (slave bond_slave_0): Releasing backup interface [ 494.349081][T26218] Bluetooth: hci2: command tx timeout [ 494.362474][T27384] bond0: (slave bond_slave_1): Releasing backup interface [ 494.398788][T27384] team0: Port device C removed [ 494.414489][T27384] team0: Port device team_slave_1 removed [ 494.421747][T27384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.431076][T27384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.441635][T27384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.449966][T27384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.472137][T27384] bond2: (slave gretap1): Releasing backup interface [ 494.542652][T19243] veth0_to_bond: left allmulticast mode [ 494.548453][T19243] veth0_to_bond: left promiscuous mode [ 494.554232][T19243] bridge6: port 1(veth0_to_bond) entered disabled state [ 495.077259][T27421] __nla_validate_parse: 5 callbacks suppressed [ 495.077285][T27421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6257'. [ 495.101057][T19243] team0: Port device geneve0 removed [ 495.462204][T19243] bond0 (unregistering): Released all slaves [ 495.556276][T26218] Bluetooth: hci3: command tx timeout [ 495.569181][T19243] bond1 (unregistering): Released all slaves [ 495.674993][T19243] bond2 (unregistering): Released all slaves [ 495.781347][T19243] bond3 (unregistering): Released all slaves [ 495.885075][T19243] bond4 (unregistering): Released all slaves [ 495.989426][T19243] bond5 (unregistering): Released all slaves [ 496.090039][T19243] bond6 (unregistering): Released all slaves [ 496.205261][T19243] bond7 (unregistering): Released all slaves [ 496.304471][T19243] bond8 (unregistering): Released all slaves [ 496.412261][T19243] bond9 (unregistering): Released all slaves [ 496.425867][T26218] Bluetooth: hci2: command tx timeout [ 496.527174][T19243] bond10 (unregistering): Released all slaves [ 496.632007][T19243] bond11 (unregistering): (slave bond12): Releasing backup interface [ 496.644277][T19243] bond11 (unregistering): Released all slaves [ 496.745358][T19243] bond12 (unregistering): Released all slaves [ 496.968202][T27324] chnl_net:caif_netlink_parms(): no params data found [ 497.079737][T27430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6260'. [ 497.093728][T27432] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6258'. [ 497.184818][T27432] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6258'. [ 497.270505][T27432] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6258'. [ 497.364738][T27451] netlink: 'syz.4.6263': attribute type 83 has an invalid length. [ 497.373488][T27451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6263'. [ 497.396723][T27432] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6258'. [ 497.488941][T27432] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6258'. [ 497.489034][T27324] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.515293][T27324] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.525266][T27324] bridge_slave_0: entered allmulticast mode [ 497.534293][T27324] bridge_slave_0: entered promiscuous mode [ 497.562864][T27324] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.573636][T27324] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.581895][T27324] bridge_slave_1: entered allmulticast mode [ 497.603875][T27324] bridge_slave_1: entered promiscuous mode [ 497.612987][T27432] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6258'. [ 497.695506][T27432] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6258'. [ 497.750138][T27324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.800803][T27324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.901443][T27324] team0: Port device team_slave_0 added [ 497.922850][T27324] team0: Port device team_slave_1 added [ 498.073689][T27324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.083816][T27483] netlink: 'syz.4.6274': attribute type 1 has an invalid length. [ 498.092604][T27324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.122078][T27324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.140071][T27480] bond0: entered promiscuous mode [ 498.145225][T27480] bond_slave_0: entered promiscuous mode [ 498.152155][T27480] bond_slave_1: entered promiscuous mode [ 498.158580][T27480] batadv0: entered promiscuous mode [ 498.170196][T27480] bond0: left promiscuous mode [ 498.174990][T27480] bond_slave_0: left promiscuous mode [ 498.181894][T27480] bond_slave_1: left promiscuous mode [ 498.194371][T27480] batadv0: left promiscuous mode [ 498.214946][T27324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.223558][T27324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.257021][T27324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.291265][T27486] !: renamed from dummy0 (while UP) [ 498.403170][T27324] hsr_slave_0: entered promiscuous mode [ 498.411353][T27324] hsr_slave_1: entered promiscuous mode [ 498.425456][T27324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.433285][T27324] Cannot create hsr debugfs directory [ 498.507069][T26218] Bluetooth: hci2: command tx timeout [ 498.595228][T27501] syzkaller1: entered promiscuous mode [ 498.610683][T27501] syzkaller1: entered allmulticast mode [ 498.687310][T19243] : left promiscuous mode [ 498.865644][T19243] tipc: Disabling bearer [ 498.878303][T19243] tipc: Left network mode [ 499.475946][T19243] batadv_slave_0: left promiscuous mode [ 499.547501][T19243] veth1_macvtap: left promiscuous mode [ 499.553594][T19243] veth0_macvtap: left promiscuous mode [ 499.588423][T19243] veth1_vlan: left promiscuous mode [ 499.594124][T19243] veth0_vlan: left promiscuous mode [ 499.813529][T27511] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 499.858524][T19243] pimreg3 (unregistering): left allmulticast mode [ 500.100248][T19243] team0 (unregistering): Port device vlan0 removed [ 500.586131][T26218] Bluetooth: hci2: command tx timeout [ 500.723737][T27539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.750691][T27540] __nla_validate_parse: 14 callbacks suppressed [ 500.750710][T27540] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6289'. [ 500.973921][T27324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 501.016476][T27559] netlink: 'syz.1.6297': attribute type 1 has an invalid length. [ 501.025583][T27559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6297'. [ 501.053704][T27324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 501.055546][T27563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6296'. [ 501.085390][T27560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6297'. [ 501.120598][T27324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 501.197640][T27324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 501.347629][T27581] netlink: 'syz.0.6300': attribute type 1 has an invalid length. [ 501.355414][T27581] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6300'. [ 501.358412][T27585] netlink: 192 bytes leftover after parsing attributes in process `syz.3.6303'. [ 501.383878][T27581] netlink: 'syz.0.6300': attribute type 1 has an invalid length. [ 501.420165][T19243] IPVS: stop unused estimator thread 0... [ 501.571330][T27324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.594467][T27598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.627956][T27324] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.652729][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.660001][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.769054][T27602] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.776906][T27602] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.025381][T27602] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 502.073027][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.080230][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.329412][T27629] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.6312'. [ 502.349625][T27631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6313'. [ 502.564752][T27642] tipc: Started in network mode [ 502.576314][T27642] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 502.586792][T27642] tipc: Enabled bearer , priority 12 [ 502.594241][T27643] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6317'. [ 502.755675][T27324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.873533][T27324] veth0_vlan: entered promiscuous mode [ 502.904008][T27324] veth1_vlan: entered promiscuous mode [ 502.926217][T27661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6322'. [ 503.036158][T27324] veth0_macvtap: entered promiscuous mode [ 503.073985][T27663] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000 [ 503.108123][T27324] veth1_macvtap: entered promiscuous mode [ 503.149681][T27670] lo speed is unknown, defaulting to 1000 [ 503.165190][T27324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.198639][T27324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.224330][T27670] lo speed is unknown, defaulting to 1000 [ 503.254611][T27324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.288069][T27324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.314497][T27324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.340048][T27324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.375548][T27689] netlink: 'syz.1.6330': attribute type 2 has an invalid length. [ 503.429238][T27683] netlink: 'syz.1.6330': attribute type 4 has an invalid length. [ 503.605310][T27693] bond0: entered promiscuous mode [ 503.677935][T19243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.703985][T19243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.712108][T14408] tipc: Node number set to 10070698 [ 503.856532][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.906364][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.047918][T27712] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 504.885577][T27754] netlink: 'syz.0.6349': attribute type 6 has an invalid length. [ 504.953478][T27756] Cannot find del_set index 5 as target [ 505.870227][T27812] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 505.936463][T27828] Cannot find del_set index 4 as target [ 506.178973][T27836] netlink: 'syz.0.6371': attribute type 2 has an invalid length. [ 506.223343][T27836] __nla_validate_parse: 11 callbacks suppressed [ 506.223360][T27836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6371'. [ 506.261966][T27851] openvswitch: netlink: IP tunnel TTL not specified. [ 506.399268][T27857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6375'. [ 506.408302][T27857] netlink: 'syz.4.6375': attribute type 30 has an invalid length. [ 506.473824][T27857] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.483489][T27857] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.493779][T27857] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.503189][T27857] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.609484][T27868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6377'. [ 506.965315][T27883] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 507.018071][T27883] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 507.111454][T27890] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6383'. [ 507.188910][T27895] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6384'. [ 507.223249][T27888] bond1: entered promiscuous mode [ 507.228583][T27888] bond1: entered allmulticast mode [ 507.234503][T27888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.326292][T27906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6387'. [ 507.370830][T27888] bond1 (unregistering): Released all slaves [ 507.400933][T27906] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6387'. [ 507.631345][T27914] syzkaller0: entered promiscuous mode [ 507.637100][T27914] syzkaller0: entered allmulticast mode [ 507.703891][T27920] netlink: 'syz.2.6391': attribute type 21 has an invalid length. [ 507.925544][T27920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6391'. [ 508.343236][T27921] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.356312][T27921] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.368270][T27931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6393'. [ 508.535026][T27940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6396'. [ 508.549755][T27940] netlink: 'syz.2.6396': attribute type 5 has an invalid length. [ 508.622033][T27921] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.641863][T27921] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.673606][T27940] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 508.686497][T27940] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 508.704905][T27940] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 508.717915][T27940] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 508.727843][T27940] geneve2: entered promiscuous mode [ 508.733071][T27940] geneve2: entered allmulticast mode [ 508.791825][T27921] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.832119][T27921] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.894920][T27951] ip_vti0: entered allmulticast mode [ 508.925220][T27950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.945591][T27921] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.957419][T27921] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.115099][T27956] Unknown options in mask 1f4 [ 509.140955][T27921] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.150058][T27921] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.165494][T27959] lo speed is unknown, defaulting to 1000 [ 509.184901][T27921] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.195243][T27921] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.211928][T27962] netlink: 'syz.2.6404': attribute type 10 has an invalid length. [ 509.250522][T27959] lo speed is unknown, defaulting to 1000 [ 509.258738][T27962] veth0_macvtap: left promiscuous mode [ 509.288743][T27921] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.312298][T27921] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.384964][T27921] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.437958][T27921] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.468054][T27967] v: renamed from ip6_vti0 (while UP) [ 510.157944][T27993] lo speed is unknown, defaulting to 1000 [ 510.177774][T27993] lo speed is unknown, defaulting to 1000 [ 510.464893][T28009] xt_TPROXY: Can be used only with -p tcp or -p udp [ 510.527023][T28012] netlink: 'syz.2.6418': attribute type 1 has an invalid length. [ 510.595283][T14414] IPVS: starting estimator thread 0... [ 510.695792][T28014] IPVS: using max 27 ests per chain, 64800 per kthread [ 510.712577][T28016] SET target dimension over the limit! [ 510.864306][T28023] netlink: 'syz.2.6420': attribute type 1 has an invalid length. [ 510.879270][T28023] team0: Cannot enslave team device to itself [ 510.926172][T28025] netlink: 'syz.3.6422': attribute type 11 has an invalid length. [ 511.231349][T28040] x_tables: duplicate underflow at hook 1 [ 511.515645][T28050] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 511.702689][T28062] __nla_validate_parse: 9 callbacks suppressed [ 511.702708][T28062] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6436'. [ 511.842306][T28072] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6439'. [ 511.867514][T28072] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6439'. [ 511.940210][T28080] x_tables: duplicate underflow at hook 1 [ 512.019826][T19243] tipc: Resetting bearer [ 512.217010][T28095] ipt_rpfilter: unknown options [ 512.250969][T28095] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 512.321899][T28102] netlink: 512 bytes leftover after parsing attributes in process `syz.4.6445'. [ 512.433040][T19243] tipc: Disabling bearer [ 512.640866][T19243] team0: Port device geneve0 removed [ 513.053446][T19243] tipc: Disabling bearer [ 513.316566][T19243] bond1 (unregistering): Released all slaves [ 513.424645][T19243] bond2 (unregistering): Released all slaves [ 513.526776][T19243] bond3 (unregistering): Released all slaves [ 513.622956][T19243] bond4 (unregistering): Released all slaves [ 513.646807][T19243] bond5 (unregistering): Released all slaves [ 513.662151][T19243] bond6 (unregistering): Released all slaves [ 513.769163][T19243] bond7 (unregistering): Released all slaves [ 513.784543][T19243] bond8 (unregistering): Released all slaves [ 513.887500][T19243] bond9 (unregistering): Released all slaves [ 513.901288][T19243] bond10 (unregistering): Released all slaves [ 514.053249][T19243] bond0 (unregistering): Released all slaves [ 514.166258][T19243] bond11 (unregistering): Released all slaves [ 514.414594][T28126] xt_hashlimit: size too large, truncated to 1048576 [ 514.519125][T28135] netlink: 2080 bytes leftover after parsing attributes in process `syz.4.6454'. [ 514.796202][T28141] netlink: 'syz.2.6459': attribute type 2 has an invalid length. [ 515.058352][T28162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6465'. [ 515.080418][T28165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6466'. [ 515.140891][T28174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6466'. [ 515.784104][T28192] netlink: 'syz.2.6475': attribute type 1 has an invalid length. [ 515.814333][T28192] netlink: 'syz.2.6475': attribute type 4 has an invalid length. [ 515.828447][T28192] netlink: 192 bytes leftover after parsing attributes in process `syz.2.6475'. [ 515.922522][T28201] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 516.179732][T19243] tipc: Disabling bearer [ 516.187461][T19243] tipc: Left network mode [ 516.554834][T19243] hsr_slave_0: left promiscuous mode [ 516.560966][T19243] hsr_slave_1: left promiscuous mode [ 516.609675][T19243] veth0_macvtap: left allmulticast mode [ 516.656131][T19243] pimreg (unregistering): left allmulticast mode [ 517.217118][T28215] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6486'. [ 517.251653][T28217] netlink: 'syz.2.6487': attribute type 1 has an invalid length. [ 517.372537][T28230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6491'. [ 517.384606][T28230] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 517.393115][T28230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.414377][T28228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6488'. [ 517.527216][T28237] netlink: 212296 bytes leftover after parsing attributes in process `syz.0.6493'. [ 517.546886][T28237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6493'. [ 518.069969][T28251] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6495'. [ 518.097345][T28251] 0ªX¹¦D: renamed from gretap0 (while UP) [ 518.125281][T28254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6496'. [ 518.163278][T28251] 0ªX¹¦D: entered allmulticast mode [ 518.177799][T28256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6497'. [ 518.188181][T28251] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 518.379086][T28268] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 518.558649][T28274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6501'. [ 518.609634][T19243] IPVS: stop unused estimator thread 0... [ 518.631866][T28274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6501'. [ 518.635559][T28277] netlink: 'syz.2.6500': attribute type 1 has an invalid length. [ 518.705378][T28277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 518.821779][T28285] netlink: 'syz.0.6505': attribute type 39 has an invalid length. [ 518.894105][T28283] tipc: Enabled bearer , priority 0 [ 518.902227][T28283] syzkaller0: entered promiscuous mode [ 518.913490][T28283] syzkaller0: entered allmulticast mode [ 518.972363][T28283] tipc: Resetting bearer [ 519.031256][T28282] tipc: Resetting bearer [ 519.134139][T28282] tipc: Disabling bearer [ 519.249887][T28304] vlan2: entered promiscuous mode [ 519.255059][T28304] macsec0: entered promiscuous mode [ 520.097916][T28360] netlink: 'syz.1.6524': attribute type 13 has an invalid length. [ 520.106109][T28360] netlink: 'syz.1.6524': attribute type 58 has an invalid length. [ 520.117361][T28359] netlink: 'syz.3.6525': attribute type 3 has an invalid length. [ 520.131998][T28359] (unnamed net_device) (uninitialized): option mode: invalid value (148) [ 520.277633][T28369] netlink: 'syz.3.6528': attribute type 178 has an invalid length. [ 520.905996][T26218] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 520.940592][T28413] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.951177][T28413] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.989373][T28413] tipc: Resetting bearer [ 520.995085][T28413] tipc: Resetting bearer [ 521.069931][ T1164] tipc: Resetting bearer [ 521.294321][T28431] lo speed is unknown, defaulting to 1000 [ 521.333530][T28431] lo speed is unknown, defaulting to 1000 [ 521.373424][T28450] netlink: 'syz.3.6551': attribute type 12 has an invalid length. [ 521.815419][T28463] netlink: 'syz.1.6556': attribute type 1 has an invalid length. [ 521.824295][T28463] netlink: 'syz.1.6556': attribute type 3 has an invalid length. [ 522.021838][T28481] netlink: 'syz.1.6559': attribute type 21 has an invalid length. [ 522.074912][T28482] netlink: 'syz.1.6559': attribute type 21 has an invalid length. [ 522.086301][T28481] netlink: 'syz.1.6559': attribute type 4 has an invalid length. [ 522.254417][T28490] ip6gre2: entered allmulticast mode [ 522.303982][T28488] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.313993][T28488] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.322789][T28488] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.332194][T28488] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.359539][T28495] __nla_validate_parse: 16 callbacks suppressed [ 522.359554][T28495] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6562'. [ 522.383692][T28488] vxlan0: entered promiscuous mode [ 522.413216][T28488] vxlan0: entered allmulticast mode [ 522.440438][T28496] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6564'. [ 522.487965][T28497] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 522.575413][T28497] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.585330][T28497] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.885230][T28521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6568'. [ 523.321268][T28542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6574'. [ 523.374532][T28545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6574'. [ 523.644816][T28560] tipc: Started in network mode [ 523.660353][T28560] tipc: Node identity aeb92e0f30c, cluster identity 4711 [ 523.678942][T28560] tipc: Enabled bearer , priority 0 [ 523.727976][T28561] syzkaller0: entered promiscuous mode [ 523.743651][T28561] syzkaller0: entered allmulticast mode [ 523.824803][T28561] tipc: Resetting bearer [ 523.893442][T28561] tipc: Disabling bearer [ 524.126513][T28587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6584'. [ 524.236137][T28591] netlink: 'syz.3.6587': attribute type 11 has an invalid length. [ 524.332363][T28595] ipt_REJECT: TCP_RESET invalid for non-tcp [ 524.480999][T28604] xt_recent: Unsupported userspace flags (00000061) [ 524.702479][T28619] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6598'. [ 524.740624][T28623] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6596'. [ 524.843848][T14408] IPVS: starting estimator thread 0... [ 524.968279][T28632] IPVS: using max 28 ests per chain, 67200 per kthread [ 525.127915][T28651] lo speed is unknown, defaulting to 1000 [ 525.135068][T28651] lo speed is unknown, defaulting to 1000 [ 525.162197][T28653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6606'. [ 525.276393][T28654] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6606'. [ 525.361709][T28662] IPVS: ip_vs_add_dest(): server weight less than zero [ 525.368952][T14414] IPVS: starting estimator thread 0... [ 525.432535][T28665] bond0: left promiscuous mode [ 525.439689][T28665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.455795][T28663] IPVS: using max 28 ests per chain, 67200 per kthread [ 525.594790][T28669] syzkaller0: entered promiscuous mode [ 525.600365][T28669] syzkaller0: entered allmulticast mode [ 526.297931][T28698] netlink: 'syz.2.6616': attribute type 11 has an invalid length. [ 526.306851][T28698] netlink: 'syz.2.6616': attribute type 11 has an invalid length. [ 526.670434][ T59] wlan1: Trigger new scan to find an IBSS to join [ 527.804971][T28713] batman_adv: batadv0: Adding interface: dummy0 [ 527.813495][T28713] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.851877][T28715] __nla_validate_parse: 3 callbacks suppressed [ 527.851895][T28715] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6620'. [ 527.903355][T28713] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 527.940187][T28719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6622'. [ 528.147203][T28727] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6625'. [ 528.178895][T28727] validate_nla: 6 callbacks suppressed [ 528.178914][T28727] netlink: 'syz.2.6625': attribute type 1 has an invalid length. [ 528.214137][T28727] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.6625'. [ 528.258079][T28731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6626'. [ 528.316331][T28735] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20000 [ 528.407113][T28735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6624'. [ 528.434986][T28733] lo speed is unknown, defaulting to 1000 [ 528.443674][T28735] sit0: entered promiscuous mode [ 528.469284][T28735] sit0: entered allmulticast mode [ 528.501843][T28733] lo speed is unknown, defaulting to 1000 [ 528.592228][T28742] bond0: entered allmulticast mode [ 528.772149][T28749] lo speed is unknown, defaulting to 1000 [ 528.841463][T28754] Cannot find del_set index 17 as target [ 528.903398][T28749] lo speed is unknown, defaulting to 1000 [ 529.442202][T28753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6632'. [ 529.461130][T28753] netlink: 'syz.2.6632': attribute type 13 has an invalid length. [ 529.480462][T28753] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6632'. [ 529.625981][ T1104] wlan1: Trigger new scan to find an IBSS to join [ 529.782976][T28792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6644'. [ 529.807195][T28792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6644'. [ 529.928950][T28792] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 529.966763][T28795] netlink: 'syz.4.6645': attribute type 1 has an invalid length. [ 529.984961][T28795] netlink: 'syz.4.6645': attribute type 2 has an invalid length. [ 530.027461][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 530.102942][T28798] syzkaller1: entered promiscuous mode [ 530.108902][T28798] syzkaller1: entered allmulticast mode [ 530.285417][T28800] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 530.622376][T28817] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 530.741866][T28821] lo speed is unknown, defaulting to 1000 [ 530.772218][T28821] lo speed is unknown, defaulting to 1000 [ 531.107216][T28846] netlink: 'syz.3.6662': attribute type 30 has an invalid length. [ 531.160193][T28848] netlink: 'syz.4.6663': attribute type 7 has an invalid length. [ 531.160579][T28849] netlink: 'syz.3.6662': attribute type 30 has an invalid length. [ 531.207255][T28846] netlink: 'syz.3.6662': attribute type 30 has an invalid length. [ 531.281651][T28848] : entered promiscuous mode [ 531.301773][T28849] netlink: 'syz.3.6662': attribute type 30 has an invalid length. [ 531.429619][T28856] netlink: 'syz.4.6665': attribute type 29 has an invalid length. [ 531.776903][T28865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 531.824887][T28867] 8021q: adding VLAN 0 to HW filter on device bond2 [ 531.837560][T28867] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 531.861719][T28867] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 531.904390][T28871] veth3: entered promiscuous mode [ 531.914665][T28871] bond2: (slave veth3): Enslaving as an active interface with a down link [ 532.056393][ C0] Unknown status report in ack skb [ 532.098905][T28870] syzkaller0: entered promiscuous mode [ 532.104486][T28870] syzkaller0: entered allmulticast mode [ 532.590287][ T1104] wlan1: Trigger new scan to find an IBSS to join [ 532.997535][T28912] __nla_validate_parse: 14 callbacks suppressed [ 532.997549][T28912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6680'. [ 533.393352][T28923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6684'. [ 533.518077][ T36] wlan1: Creating new IBSS network, BSSID 02:e4:15:79:6b:3b [ 534.271565][T28923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6684'. [ 534.440683][T28932] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 534.463638][T14414] IPVS: starting estimator thread 0... [ 534.566098][T28933] IPVS: using max 30 ests per chain, 72000 per kthread [ 534.632535][T28943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6690'. [ 534.674879][T28943] geneve2: entered promiscuous mode [ 534.740758][T28952] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 534.994953][T28971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6698'. [ 535.286880][T28986] syzkaller1: entered promiscuous mode [ 535.294764][T28986] syzkaller1: entered allmulticast mode [ 535.305464][T28986] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 535.311212][T28991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6702'. [ 535.330122][T28986] validate_nla: 1 callbacks suppressed [ 535.330136][T28986] netlink: 'syz.2.6703': attribute type 10 has an invalid length. [ 535.565631][T28986] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 535.606397][T29000] Bluetooth: MGMT ver 1.23 [ 535.620023][T28994] bridge_slave_0: left allmulticast mode [ 535.637876][T28994] bridge_slave_0: left promiscuous mode [ 535.657645][T28994] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.682667][T28994] bridge_slave_1: left allmulticast mode [ 535.700528][T28994] bridge_slave_1: left promiscuous mode [ 535.713808][T28994] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.743025][T28994] bond0: (slave bond_slave_0): Releasing backup interface [ 535.765660][T28994] bond0: (slave bond_slave_1): Releasing backup interface [ 535.813144][T28994] team0: Port device team_slave_0 removed [ 535.828650][T28994] team0: Port device team_slave_1 removed [ 535.835410][T28994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.843049][T28994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.858801][T28994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.867262][T28994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.894558][T28994] bond0: (slave wlan1): Releasing backup interface [ 535.924477][T28994] bond2: (slave veth3): Releasing active interface [ 536.008504][T29010] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6708'. [ 536.101799][T29014] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6710'. [ 536.115134][T29015] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6710'. [ 536.147657][T29012] netlink: 'syz.1.6709': attribute type 21 has an invalid length. [ 536.155636][T29012] netlink: 'syz.1.6709': attribute type 6 has an invalid length. [ 536.172967][T29012] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6709'. [ 536.762863][T29054] netlink: 'syz.1.6720': attribute type 25 has an invalid length. [ 536.835312][T29058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.952259][T29062] batman_adv: batadv0: Removing interface: dummy0 [ 537.004882][T29062] bridge_slave_0: left allmulticast mode [ 537.053813][T29062] bridge_slave_0: left promiscuous mode [ 537.094068][T29062] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.121686][T29062] bridge_slave_1: left allmulticast mode [ 537.129508][T29062] bridge_slave_1: left promiscuous mode [ 537.135367][T29062] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.149922][T26219] Bluetooth: hci2: command 0x0405 tx timeout [ 537.166699][T29062] bond0: (slave bond_slave_0): Releasing backup interface [ 537.178513][T29062] bond0: (slave bond_slave_1): Releasing backup interface [ 537.202088][T29062] team0: Port device team_slave_0 removed [ 537.214893][T29062] team0: Port device team_slave_1 removed [ 537.222395][T29062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.231378][T29062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.239248][T29062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.268670][T29079] hsr_slave_0: left promiscuous mode [ 537.274591][T29079] hsr_slave_1: left promiscuous mode [ 537.477459][T29096] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 537.547693][T29097] tipc: Started in network mode [ 537.552954][T29097] tipc: Node identity 80000001, cluster identity 4711 [ 537.567207][T29097] tipc: Node number set to 2147483649 [ 537.599187][T29102] netlink: 'syz.1.6733': attribute type 10 has an invalid length. [ 537.727767][T29102] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 537.971488][T29121] x_tables: duplicate underflow at hook 2 [ 538.161884][T29132] __nla_validate_parse: 12 callbacks suppressed [ 538.161902][T29132] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6743'. [ 538.210420][T29132] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6743'. [ 538.286782][T29142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6747'. [ 538.692944][T29165] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6758'. [ 538.713990][T29169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.933279][T29181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6763'. [ 538.933498][T29182] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 539.073323][T29182] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 539.273396][T29200] netlink: 'syz.2.6769': attribute type 3 has an invalid length. [ 539.283867][T29200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6769'. [ 539.352263][T29200] veth5: entered promiscuous mode [ 539.931445][T29236] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6781'. [ 540.113464][T29245] IPv6: sit1: Disabled Multicast RS [ 540.156371][T29253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6787'. [ 540.167855][T29254] openvswitch: netlink: Multiple metadata blocks provided [ 540.331000][T29260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6790'. [ 540.647753][T29277] lo speed is unknown, defaulting to 1000 [ 540.655071][T29277] lo speed is unknown, defaulting to 1000 [ 541.220759][T29308] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 541.222253][T29311] x_tables: duplicate underflow at hook 2 [ 541.252700][T29311] x_tables: duplicate underflow at hook 1 [ 541.326328][T29317] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6808'. [ 542.189959][T29378] netlink: 'syz.1.6822': attribute type 21 has an invalid length. [ 542.210636][T29378] IPv6: NLM_F_CREATE should be specified when creating new route [ 542.253587][T29378] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 542.260890][T29378] IPv6: NLM_F_CREATE should be set when creating new route [ 542.268181][T29378] IPv6: NLM_F_CREATE should be set when creating new route [ 542.275420][T29378] IPv6: NLM_F_CREATE should be set when creating new route [ 543.037451][ T3494] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 543.047767][T29421] netlink: 'syz.0.6834': attribute type 1 has an invalid length. [ 543.109248][T29421] 8021q: adding VLAN 0 to HW filter on device bond2 [ 543.223081][T29432] __nla_validate_parse: 6 callbacks suppressed [ 543.223099][T29432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6836'. [ 543.246087][T29432] openvswitch: netlink: nsh attr 0 has unexpected len 2048 expected 0 [ 543.255769][T29432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.372964][T29436] x_tables: duplicate underflow at hook 1 [ 543.380689][T29430] bridge_slave_0: default FDB implementation only supports local addresses [ 543.403614][T29421] macvtap1: entered promiscuous mode [ 543.410301][T29421] bond2: entered promiscuous mode [ 543.415801][T29421] macvtap1: entered allmulticast mode [ 543.421472][T29421] bond2: entered allmulticast mode [ 543.428377][T29421] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 543.699562][T29454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6843'. [ 543.833550][T29466] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6847'. [ 543.903442][T29456] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.903955][T29471] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6849'. [ 543.921460][T29456] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.155884][T29456] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.197803][T29456] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.348567][T29456] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.369522][T29456] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.444500][T29495] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20002 [ 544.582504][T29456] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.660202][T29456] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.837315][T29514] netlink: 'syz.4.6858': attribute type 83 has an invalid length. [ 544.900036][T29456] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.948221][T29456] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.010058][T29456] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.025854][T29456] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.034872][T29524] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6862'. [ 545.054681][T29524] netlink: 'syz.4.6862': attribute type 33 has an invalid length. [ 545.067215][T29456] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.104916][T29456] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.147123][T29456] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.155337][T29456] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.278006][T29531] nbd: must specify at least one socket [ 545.489336][T29553] veth0: entered promiscuous mode [ 545.506496][T29553] netlink: 71 bytes leftover after parsing attributes in process `syz.0.6871'. [ 545.619162][T29552] veth0: left promiscuous mode [ 545.742086][T29572] netlink: 'syz.3.6874': attribute type 11 has an invalid length. [ 545.765199][T29575] IPv6: sit1: Disabled Multicast RS [ 545.782263][T29575] sit1: entered allmulticast mode [ 545.792045][T29574] netlink: 'syz.0.6876': attribute type 1 has an invalid length. [ 545.871601][T29571] lo speed is unknown, defaulting to 1000 [ 545.893436][T29571] lo speed is unknown, defaulting to 1000 [ 545.922721][T29577] netlink: 51 bytes leftover after parsing attributes in process `syz.3.6874'. [ 546.599448][T29600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6882'. [ 547.007094][T29626] veth1_to_bond: entered allmulticast mode [ 547.176063][T29624] veth1_to_bond: left allmulticast mode [ 547.293424][T29641] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 547.320129][T29639] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6895'. [ 547.363296][T29639] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 547.377422][T29643] Cannot find add_set index 0 as target [ 547.385889][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 547.645453][T29665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6901'. [ 547.688310][T29665] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 547.692115][T29668] netlink: 'syz.4.6903': attribute type 2 has an invalid length. [ 547.941978][T29675] bond2: entered promiscuous mode [ 547.972082][T29675] bond2: entered allmulticast mode [ 547.984818][T29675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 548.078086][T29684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 548.459141][T29715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6917'. [ 548.461222][T29710] bridge_slave_0: entered promiscuous mode [ 548.734088][T29740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6923'. [ 548.789025][T29746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6922'. [ 548.816739][T29744] bond2: entered promiscuous mode [ 548.821875][T29744] bond2: entered allmulticast mode [ 548.827985][T29744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 548.853377][T29748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6924'. [ 548.864732][T29748] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6924'. [ 549.122925][T29765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6929'. [ 549.150207][T29765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6929'. [ 549.169142][T29765] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6929'. [ 549.325261][T29777] netlink: 'syz.0.6932': attribute type 15 has an invalid length. [ 549.548404][T29797] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6938'. [ 549.863310][T29826] IPv6: NLM_F_CREATE should be specified when creating new route [ 549.874181][T29826] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6946'. [ 549.992844][T29833] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 550.000164][T29833] IPv6: NLM_F_CREATE should be set when creating new route [ 550.016262][T29833] veth0: entered promiscuous mode [ 550.167873][T29832] veth0: left promiscuous mode [ 551.774904][T29856] macsec1: entered allmulticast mode [ 551.780676][T29856] team0: entered allmulticast mode [ 551.794425][T29856] team0: left allmulticast mode [ 552.513385][ T1164] tipc: Resetting bearer [ 552.618586][ T1164] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 552.630523][ T1164] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 552.640129][ T1164] CPU: 1 UID: 0 PID: 1164 Comm: kworker/u8:8 Not tainted 6.16.0-rc6-syzkaller-00131-g53b2fb6b05cd #0 PREEMPT(full) [ 552.652304][ T1164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 552.662363][ T1164] Workqueue: netns cleanup_net [ 552.667141][ T1164] RIP: 0010:ip6_mc_clear_src+0x119/0x4e0 [ 552.672780][ T1164] Code: ff ff ff e8 c9 0a 42 01 89 c5 31 ff 89 c6 e8 fe ab 94 f7 85 ed 74 45 e8 b5 a7 94 f7 eb 05 e8 ae a7 94 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 18 b9 f6 f7 49 8b 2c 24 49 8d 7c [ 552.692389][ T1164] RSP: 0018:ffffc90003a5f158 EFLAGS: 00010206 [ 552.698481][ T1164] RAX: 000000001fffe000 RBX: 1ffff1100aac4b02 RCX: ffff8880266f1e00 [ 552.706467][ T1164] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 552.714438][ T1164] RBP: 0000000000000001 R08: ffffffff8fa1d6f7 R09: 1ffffffff1f43ade [ 552.722413][ T1164] R10: dffffc0000000000 R11: fffffbfff1f43adf R12: 00000000ffff0000 [ 552.730387][ T1164] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888055625810 [ 552.738359][ T1164] FS: 0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 552.747288][ T1164] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.753875][ T1164] CR2: 0000001b3231fffc CR3: 0000000069134000 CR4: 00000000003526f0 [ 552.761849][ T1164] Call Trace: [ 552.765129][ T1164] [ 552.768061][ T1164] __ipv6_dev_mc_dec+0x30d/0x390 [ 552.773010][ T1164] __ipv6_ifa_notify+0x43d/0xac0 [ 552.777957][ T1164] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 552.783422][ T1164] ? __lock_acquire+0xab9/0xd20 [ 552.788276][ T1164] ? __local_bh_enable_ip+0x12d/0x1c0 [ 552.793650][ T1164] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.798847][ T1164] ? __local_bh_enable_ip+0x12d/0x1c0 [ 552.804218][ T1164] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 552.809954][ T1164] addrconf_ifdown+0xe69/0x1880 [ 552.814809][ T1164] ? tls_dev_event+0x717/0xec0 [ 552.819571][ T1164] ? __pfx_addrconf_ifdown+0x10/0x10 [ 552.824864][ T1164] addrconf_notify+0x1bc/0x1010 [ 552.829724][ T1164] notifier_call_chain+0x1b3/0x3e0 [ 552.834840][ T1164] dev_close_many+0x29c/0x410 [ 552.839527][ T1164] ? __pfx_dev_close_many+0x10/0x10 [ 552.844733][ T1164] unregister_netdevice_many_notify+0x834/0x2320 [ 552.851073][ T1164] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 552.857856][ T1164] ? unregister_netdevice_queue+0x1b3/0x380 [ 552.863749][ T1164] ? __pfx___might_resched+0x10/0x10 [ 552.869039][ T1164] ? __pfx_call_rcu+0x10/0x10 [ 552.873719][ T1164] ? net_generic+0x1e/0x240 [ 552.878577][ T1164] ? remove_nexthop+0xdf/0x180 [ 552.883348][ T1164] ops_undo_list+0x3dc/0x990 [ 552.887945][ T1164] ? __pfx_ops_undo_list+0x10/0x10 [ 552.893065][ T1164] cleanup_net+0x4c5/0x800 [ 552.897490][ T1164] ? __pfx_cleanup_net+0x10/0x10 [ 552.902434][ T1164] ? _raw_spin_unlock_irq+0x23/0x50 [ 552.907647][ T1164] ? process_scheduled_works+0x9ef/0x17b0 [ 552.913366][ T1164] ? process_scheduled_works+0x9ef/0x17b0 [ 552.919089][ T1164] process_scheduled_works+0xae1/0x17b0 [ 552.924660][ T1164] ? __pfx_process_scheduled_works+0x10/0x10 [ 552.930653][ T1164] worker_thread+0x8a0/0xda0 [ 552.935256][ T1164] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 552.941610][ T1164] ? __kthread_parkme+0x7b/0x200 [ 552.946596][ T1164] kthread+0x70e/0x8a0 [ 552.950686][ T1164] ? __pfx_worker_thread+0x10/0x10 [ 552.955818][ T1164] ? __pfx_kthread+0x10/0x10 [ 552.960439][ T1164] ? _raw_spin_unlock_irq+0x23/0x50 [ 552.965653][ T1164] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.970865][ T1164] ? __pfx_kthread+0x10/0x10 [ 552.975470][ T1164] ret_from_fork+0x3fc/0x770 [ 552.980065][ T1164] ? __pfx_ret_from_fork+0x10/0x10 [ 552.985190][ T1164] ? __switch_to_asm+0x39/0x70 [ 552.989986][ T1164] ? __switch_to_asm+0x33/0x70 [ 552.994753][ T1164] ? __pfx_kthread+0x10/0x10 [ 552.999350][ T1164] ret_from_fork_asm+0x1a/0x30 [ 553.004127][ T1164] [ 553.007154][ T1164] Modules linked in: [ 553.012747][ T1164] ---[ end trace 0000000000000000 ]--- [ 553.047841][ T1164] RIP: 0010:ip6_mc_clear_src+0x119/0x4e0 [ 553.053608][ T1164] Code: ff ff ff e8 c9 0a 42 01 89 c5 31 ff 89 c6 e8 fe ab 94 f7 85 ed 74 45 e8 b5 a7 94 f7 eb 05 e8 ae a7 94 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 18 b9 f6 f7 49 8b 2c 24 49 8d 7c [ 553.080654][ T1164] RSP: 0018:ffffc90003a5f158 EFLAGS: 00010206 [ 553.087485][ T1164] RAX: 000000001fffe000 RBX: 1ffff1100aac4b02 RCX: ffff8880266f1e00 [ 553.095608][ T1164] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 553.104091][T29897] netlink: 'syz.3.6968': attribute type 10 has an invalid length. [ 553.112031][ T1164] RBP: 0000000000000001 R08: ffffffff8fa1d6f7 R09: 1ffffffff1f43ade [ 553.120092][ T1164] R10: dffffc0000000000 R11: fffffbfff1f43adf R12: 00000000ffff0000 [ 553.128499][ T1164] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888055625810 [ 553.138591][ T1164] FS: 0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 553.147949][ T1164] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 553.154617][ T1164] CR2: 00007fde5ac8cf98 CR3: 000000000df38000 CR4: 00000000003526f0 [ 553.166152][ T1164] Kernel panic - not syncing: Fatal exception [ 553.172611][ T1164] Kernel Offset: disabled [ 553.177140][ T1164] Rebooting in 86400 seconds..