last executing test programs: 1.785827314s ago: executing program 1 (id=7847): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0xa, 0xa}, {0xfff3, 0x4}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0xa, 0xa}, {0xfff3, 0x4}}}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @multicast, 'nr0\x00'}}, 0x1e) (async) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @multicast, 'nr0\x00'}}, 0x1e) close(r2) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xc, 0x4, 0x0, 0x5}]}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4008000010003704000000000061000000000000", @ANYRES32=0x0, @ANYBLOB="8b04040000000400140012800a00010069706f6962000000040002800a000100bbbbbbbbbbbb0000"], 0x40}}, 0x88890) 1.716812389s ago: executing program 1 (id=7848): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr(camellia))\x00'}, 0x58) (async) close(r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c001480080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x3, 0x3, 0x301}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000200000000004e00000008000300", @ANYRES32=r6, @ANYBLOB="1c005a80180001801400030006000200fdff030003000500ca000600"], 0x38}}, 0x0) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000400)) (async) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022abd7000fbdbdf253400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900a6a000003e00000008001f01000000001400fe00dc7365eb0f30bbf31feb3481b9f5b8f10600fd00030000000600fd00000100000600fd00090000000b003400c72c7614a3368da5873d255208afa4b7618aea00"], 0x68}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000001) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv4_getnetconf={0x24, 0x52, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x850) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x508d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x258, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x244, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x11, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x128, 0xa, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1200, 0xd04, 0x4, 0xafae, 0xb91b}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x4, 0x0, 0x4af, 0xffff}, 0x2, r9}}]}, {0xbc, 0x6, "f1f18fdb9f70fd074f2fc127a736f189b1cc9cb2714604b5469b8896e150a102195d6dd007aa267fd071e8f4f1c82ed0c8b77492d36ef04fe0cf5c48a14e579dc862bbf824f7b5198569c6e3734e36e33a5535dfcb496372dbb3f27adb7bcc3f8198ff1652b99a018fbab7da62c7fae8cd1220f59105cc2d695482c229a13a10d4d8d91fa74eeb64bcdb46726789694f1996771730b004722a7952a66aa66a717ea42c54fa67060d94511b023d10b7ee9d877466cb335731"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0xc8, 0x3, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xe9f, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x1d28, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xa3, 0x10000000, 0x34e, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x89, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x258}}, 0x0) 1.623126925s ago: executing program 1 (id=7853): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0) (async) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x12, &(0x7f0000000180)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x72}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xef39}}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in6=@local, 0x4e23, 0x9, 0x4e22, 0x4, 0x2, 0x0, 0x80, 0x1d, r1, r2}, {0x8000, 0x3, 0xffff, 0x5, 0x400, 0x2, 0x3, 0xfe}, {0x9, 0x100000001, 0x5, 0x6}, 0xcde0, 0x6e6bb2, 0x2, 0x1, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x3c}, 0x2, @in=@multicast1, 0x3502, 0x4, 0x3, 0x1, 0x5, 0x0, 0x80000000}}, 0xe8) 1.619754119s ago: executing program 1 (id=7855): unshare(0x20000400) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000401a00010000000000000000001c000000fc00fe0700000000"], 0x1c}}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r4}, 0x20) bind$unix(r2, &(0x7f0000000600)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r7 = socket(0x1, 0x803, 0x0) sendto$unix(r7, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="f3a338b733d11009e7686d1a9832bf3fe6dabd87b064db8e1ff6ad183ad1b82e67fb42ba0c9c2bfccc98aa540d9e373eac5ffe25139cb7926053603abc16e4ac79847961414100"/81, @ANYRES16=r11, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8098004}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="16012dbd70007aaca5f510232fb50000000800030001000000080004000600000008000400d1"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYRESHEX=r6, @ANYRES32, @ANYRESHEX=0x0], 0x40}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r9, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400040}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000b2", @ANYRES16=0x0, @ANYRES8=r4, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4048811}, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 1.239312492s ago: executing program 2 (id=7869): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "8c7457ff8f99b8233ba7d81496e1da69"}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) sendmmsg$alg(r1, &(0x7f0000003700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) 1.168372949s ago: executing program 0 (id=7870): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x28}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f00000004c0)={{r1, &(0x7f0000000040)='cgroup.controllers\x00', 0x40082, &(0x7f0000000080)={@_ha_fsid={[0x93, 0x3]}, {0x40, 0x8001, 0xd4a, 0x1}}, 0x4, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x7}, 0x2, &(0x7f0000000480)=[{0x3, 0xffc7, &(0x7f00000002c0)='*{+/\x00', &(0x7f0000000540)="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", 0x103, 0x12}, {0x1, 0x2, &(0x7f00000003c0)='--*\x00', &(0x7f0000000400)="e646a8650b9eab9a75c00651139b36ee16fef1525af147ae46c55af4c912bee29a162156bbec237ee906979f0f9890f2e97959ac9f404133661b8609c8fcb94d47ef0fe005", 0x45}]}) ioctl$SIOCPNDELRESOURCE(r0, 0x89ee, &(0x7f0000000300)) 1.166930294s ago: executing program 2 (id=7871): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 1.107833008s ago: executing program 2 (id=7874): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) sendmmsg$inet(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="cd5927a8b2", 0x5}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000440)="b56271f6e2f56edf4bb39065bfd75fbd22e0b2a2772cd884ff2d113cfdcf4e7932b81a003acf9f2afc875f33968f735d3a7f64addeb32da5444e2e9acdbc15d9e3dd085cf6f5deca1cf1fe7a37648587afde9f9cc4a1198193dfc88b1f160cd9e748f6f1a6d34e903390c849a2dc", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000840)="864761cc2a4fa4b53178cd021d3713212fb7e687604f4cc1aa7add4c6d4e5bdc1432719890c54decddc7b930e7743e7cbe8524d30f14cf710e263d8302bdd91ba2dbae4f8a5b6c7c89d39b129f23752d4bbb3bdd3945bf8c5ca7d53287912cce62157d3ef6dd42812b78c53c4675bab7dcd479f3c9cdb0e8a91f03e5db4effd3935023612707770d9516fabc3b30ec9b51134197ce404ee9487ed5f9bb83b75f2ebe99", 0xa3}, {&(0x7f0000000900)="b348ccb74c8ea72731cd9c970918e117dcdfa29d5d39deea148dd605a1b548d60b3200a0b3d2639bb6d3ff4cae5c6e150fca7b4d1de68249117013ae9f6fec97b2ca4b7382f2c1314a07924e37701bf17e2ea3d37d06e0f64da27250f6af9c8dc23ecae9a9d70c57be73e9999c4c737627041dee83eba804e18318d3068162b803c84f12321569838ec11e47c47e45fdd57c7ff3faf3f0f0eadf50e6debbba54530563ccacaa9cd8358df1560a51e7e608afff2a9ebd5d1f9c86272830c4a175b35ececad54267482c240956b6c43729ffe6c9f5733296ccf6", 0xd9}, {&(0x7f0000000a00)="4d3f57e70db59e0944d4226db8bcd80b02c93d47a7e55f317898160144bbd32c0fe35f7666ab7b687ad5e86cae021c3f7b5d063399a222900cae23cb6aac08bb1296e9f3d1a1aea02a5df87b6ac9f047fb83abb7b657e5900573aac359d8b4b2ee268946990ff88c8a1ab6d0c243282dafda3f8cc2af52aba61981348f8486f6fb15244896c27dd26d4ac2f5cf31807baceca47a58df2fc864e13c92df6d51883561ed8df8bae3e579a201b5dec9cb0ec5ad55b1483759", 0xb7}, {&(0x7f0000000e40)="f29f2f17a19088d5ccab9b4f2ab14299a37c09347645f2083e1790e33c5a2bbe89cd7cbcd4522334a18b9c3927cc2cbcf47040cc3e0eaf9013ed375ed8ab164390c22440567bee468a8516ddad83265ba6d448b4858e8b5d5426591cdcdc8d4692fb885b97875a8d24aac430b8fa4318bb8c2f8f760e0a49291e02c353519a0167153a1018997d713b49b5c51ae8cd5323de83478181aedb6499dc7bc1b28606abf74efd1a13a8228b23c44c6ee04d41a3975eaaecf64abd66d82fe28ecd86469e6e30f102c24acfb3f2d48e679e394e41b2022b1c", 0xd5}, {&(0x7f0000000f40)="2d0028385fdb0c4b34d683a6362131f4c3b0ad5980e39bc77df265deb900e5a376fd57730800ccfceb1325f1776b7eb144077b94abdc0a1c063ca7c265d801a3c64ada3e22a8b72390f11f7b846df58e9601555bcce532371547416555719f96", 0x60}], 0x5}}], 0x3, 0x42054) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="15000020", @ANYRES16=r2, @ANYBLOB="01002cbd70000e00000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x20040801) 1.016029435s ago: executing program 2 (id=7875): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r3, 0x3) accept4(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) syz_emit_ethernet(0x4e, &(0x7f00000019c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6080a08300180000fc010000000000000000000000000000fe8000000000000000000000000000bb0002000000000000040100040100c20402"], 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000280)=0xfffff908, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x74}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010001fff000000200100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800b00010067656e65766500000c00028005000c000100000008000a00", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.011667802s ago: executing program 0 (id=7877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x3, 0x40) setsockopt(r1, 0xff, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) socket$packet(0x11, 0x3, 0x300) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x24, r3, 0x11, 0x70bf26, 0xffffffff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) 864.073989ms ago: executing program 2 (id=7880): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x75}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@ipv4_newroute={0x34, 0x18, 0x8, 0x0, 0x0, {0x2, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x8, 0x2, 'pci\x00'}}}]}, 0x34}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001300050026bd7000ffdbdf25070fef93", @ANYRES32=r2, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={r5, 0xc, "72ba9660eef10e550f91e6ad"}, &(0x7f00000001c0)=0x14) 863.437382ms ago: executing program 0 (id=7881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={'veth0\x00', {0x2, 0x4e20, @private=0xa010101}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000100)={0x0, r0, r1, 0x1dd, 0x7, '\x00', {0x3ff, 0x4d3, 0x7, 0x9, 0xfffffffe, 0x0, 0x4, 0xa0, {0x7, 0x80000000}, {0xfffffffffffffffe, 0x5}, {0x8, 0x4}, 0x4, 0x1, 0x2, 0x33d7, 0xd5d, 0x6, 0x4, 0x1935, 0x7f, 0x1cc, '\x00', 0x9, 0x100, 0x8, 0x1000}}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000001c0), 0x4) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, &(0x7f0000000300)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x101, 0x0, {0x0, 0x2710}, {0x77359400}, {0x1, 0x1, 0x1}, 0x1, @can={{0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "a263843a410f1406"}}, 0x48}}, 0x4004000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}]]}, 0x24}, 0x1, 0x0, 0x0, 0x240040c1}, 0x4) ioctl$OCFS2_IOC_UNRESVSP64(r3, 0x4030582b, &(0x7f0000000480)={0x0, 0x0, 0x5, 0x7ff, 0x10000, 0x8}) ioctl$sock_netdev_private(r3, 0x89f8, &(0x7f00000004c0)="ad622bc94595cf5141ecf64d428e3e0ec3c14e1f4e6e48e5be0c3cae061e9b8dafbc96d0423aa5cd42765ccd1b15ec5cc8bf9922225f699f6d16ee1a9a96be06f61ceb64be75d1aa374ed6cdc6d43612bc1f80f39e695f5850a757d4388b9eeaea3fd9cfee00be99c61afcc53e9e524a85f73f4794d082b8c0aef2e8c494647496f2ce64098cbd63810cbf473db53e9741007f33d27054a7") sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x108, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000080) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000680)=0x0) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000006c0)={0x0, r7, 0xffffffffffffffff}, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000840)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000b40)={{r5}, r10, 0x18, @inherit={0x90, &(0x7f0000000a80)={0x0, 0x9, 0x40, 0xffffffffffffffdf, {0xc, 0x9, 0x7, 0x4, 0x9}, [0x6, 0x7fffffff, 0x0, 0x4, 0x8, 0x1, 0x6, 0x80000001, 0xb8]}}, @subvolid=0x7e7}) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000001b40)=0x5, 0x4) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001bc0), r5) getsockname$packet(0xffffffffffffffff, &(0x7f0000001c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001c40)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000001d80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0xa0, r11, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xb}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000001dc0)=0x81, 0x4) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e40), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x34, r13, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x2, 0xa, @l2={'eth', 0x3a, 'wlan1\x00'}}}}, ["", "", "", ""]}, 0x34}}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) 733.878049ms ago: executing program 1 (id=7884): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000100)=0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="3814004dc3ff53cd0000000000000000020000000000000700000000060015000400000014e7158010000880060002800600010000000000"], 0x38}}, 0x0) 584.332696ms ago: executing program 0 (id=7888): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000014"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}]}}]}, 0x4c}}, 0x2000a100) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000dc0)='vxcan1\x00') 518.288671ms ago: executing program 3 (id=7889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x61a000, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000200)="2e9b5b00ace03dd65193dfb6c5619a3d86dd606706000014060000000000449c34dcf74b5c85cd6d59f500f8f4a81543b0c1", 0x32}, {&(0x7f00000001c0)="0600", 0x2}, {&(0x7f0000000740)="37bcb3983785", 0x6}], 0x3) 512.881388ms ago: executing program 1 (id=7890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x64, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xf, 0xe}, {0x0, 0xfff1}, {0xc, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x38}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x41090) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xe, 0xf}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x80) setsockopt(r2, 0x7, 0x7, &(0x7f0000000080), 0x0) r9 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x37dcf0a771ea3fcc, 0x1, 0x2, 0x2, 0x28, @empty, @mcast1, 0x40, 0x700, 0x2, 0x6}}) 460.150231ms ago: executing program 4 (id=7891): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x6, 0x4, 0x8, {0x7, 0x0, 0x6, 0x80, 0x2}, {0x0, 0x2, 0x1, 0xc05, 0x77}, 0x2, 0x5, 0xffffffff}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}}, 0x0) 453.918839ms ago: executing program 0 (id=7892): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x64, @none, 0xc, 0x2}, 0xe) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0xa}, {0x7, 0x3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x20040044) 448.120423ms ago: executing program 4 (id=7893): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000a40)={{r0, &(0x7f0000000240)='netdevsim0\x00', 0x88600, &(0x7f0000000280)={@align=0x78cc, {0x6, 0x0, 0x100, 0x3000000000000000}}, 0xe, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0xa}, 0x4, &(0x7f00000009c0)=[{0x1, 0x5, &(0x7f0000000400)='netdevsim0\x00', &(0x7f0000000540)="b7b169c763f3e959aee06bb932fd1150bc84c5297552801f62d81beb9e7e14918fc5b1ae27faf63b764d34355819a40be55600426fdf23aee6eaf3bf82df2ac2d2c3f9b015d71f9befab1dfc9b1b67714333d78b0d18052f9eae9cb0b5abee471064d4b04788833cb9dc8f4c528969ea050c297e41bddb2ded4431396a4e5553915c7ee781387663672d07e27916e5c8aa6627765e42538688de71b5423c5716ecd5b90fb7ae3bb02163efbbde10e41bae0a5cdcffc0155a2ef19dbdff91c8539904df1e24dc2b84cfe840d7a0171022a0b92f4f7f565ebaa0dabcbebaadd5a405609ba434a66eca29cdb9", 0xeb, 0x2}, {0x1, 0x2, &(0x7f0000000640)=':^:p\r\x00', &(0x7f0000000680)="0a274734ea557d55b13303cc3228e9193c6435a356061c46a1072cb5b811da23935fd104818a689bef6635e1f84fbf25c74e930917cb4695530f9e13021d5f19abfbdfe27a8950c8314c63f056771af68f98b815ced65d53719f9c3dc087a9f56b344c7fce915a576f20462c1016676c0ad9f593b596fb739b6421938b1899b2e61c79a18d9edbcfd015c378650be503aab1f7", 0x93, 0x3a}, {0x3, 0x95, &(0x7f0000000740)='netdevsim0\x00', &(0x7f0000000780)="61df17785ec6a5052f73957cb6aaf36f99dd0c6492b3639abbae8dcb50cf2da449127fa95a5b5a2d4244cef1029423a968d9d9a1db49fdd6f1269d23a7a40161f3ce3a24b771e31d5b953ce0e2e10337e8210d117f14c26cfc48e43a40cad2eb1e54d900c01588b46d67afa73b282d72fc2831ca2f54042a3b473774e240c4ebaed71fe2f1077e70fae5e87dd41a84fd641ad6d9d536bd4fb178785d6215687c97b3914b41ed44b28bfa435b10a91807df553ddbf74cb0d390027558ab26280afcc412307db8544dab979361466e811116bf4c94f705da974a4a0c864b9a78dca8ee3d9b3db3b2ef6b046f9561a7016a1bf52a164b2454193186ca32", 0xfc, 0x28}, {0x3, 0x9, &(0x7f0000000880)='netdevsim0\x00', &(0x7f00000008c0)="67ec41f6a08480331cb7c6b520f849c22a398a4c14ecd9fd23dc95adcae5136df378a61fb99eaeb4ca223fa745d17bbf54ae92b193f73886138a8dde85b4e57ca2d89601b732f8788986da9de172cc8b8126ec2fa4f0eef0cb312511e0e1e20ebe0d084f3f6be76e0d426b65f6d502160188cd6f63fb73f56514f1be2b66aca7ee69d59ca730d91a9d566ac94d7f7227aa8a0b5f22a7afcbbe346108f61f90c3cb9ee6c9979e77b5572d6b452ae57c3d83ab44f73eedb80046ba8632cfb987db01469c9818a8bb828c8fe3216c36d0a420d718db8d59e9355d4c29e5654674bc8b68c6ec06e5ff", 0xe7, 0x10}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x6, 0xb2, 0x40000a8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) (async, rerun: 64) close(r4) (rerun: 64) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000001c0)={r12, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) (async) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000ac0)={r12, 0x4, 0x1, 0xfffffffe}, &(0x7f0000000b00)=0x10) 359.826989ms ago: executing program 3 (id=7894): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8, 0x0, 0x0, 0x100, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdc4, 0x0, 0x0, 0x8, 0x5e55b37311de6d89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES16=r1, @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) (async) r5 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbc4253100000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00R\x00', @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) gettid() (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x8, 0x0}, 0x8) (async) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb7e1e037f00000000", @ANYRES32=r8, @ANYBLOB="0200000000008000800012000800010076746936740002006000"], 0xa0}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000000a060102001a00000000000007000003267328206a8dae6ab8b67d58274ebf96480b1e06e3fcbc2ad9769fdc1adc0bf12e25f9a97dd5d2318837e3b018a4da7f8b80f26d"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000800711082ef0000000006000000800000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x41000, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6}, 0x10, r6}, 0x94) socket$inet6(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r11}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_RT_PRIORITY={0x8, 0x9, 0x71a8}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x104}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x40001) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000180)={'wpan4\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r13) 295.779779ms ago: executing program 3 (id=7895): syz_emit_ethernet(0xd6, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0xa0, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x0, 0x4, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @srh={0x6, 0x8, 0x4, 0x4, 0x9, 0x10, 0xc, [@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}}}, 0x0) 287.370728ms ago: executing program 0 (id=7896): getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x50, "34e6822c94dffae49bbbbd7d8a4d4c62ac9f0de5c01a540f70507646217b6e8ab8b978ed7cf8c25ac207f07b5c77714d2858a6c8a60a89e762086a4155e16c1ec91a5fe82ea38ba2663bc54033acaae7"}, &(0x7f0000000080)=0x58) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r0, 0xf, 0x1}, &(0x7f0000000100)=0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f0000000140)) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, r2, 0x6de01000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={r1, 0xf}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000200)={r4, 0x3820}, 0x8) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e24, 0x8, @mcast2, 0xffff}}, 0x6, 0xfffffc95, 0x0, 0x7, 0x8}, &(0x7f0000000300)=0x98) r6 = socket$inet6_sctp(0xa, 0x8914b8962e63e905, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000340)={0x8, {{0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xa19d}}}, 0x88) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x30, 0xffffffffffffffff, 0x180000000) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000400)={r5, 0x30, "a7af32b8fe79b1027c24fdeb8de693de3a49ccd7b08e9bc041cf5ccd301cd3c6f5d94436e739fd641e0bf33377c850a7"}, &(0x7f0000000440)=0x38) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000480)={r4, 0x85, "6d98ccfddd6a69bc99e4ea89921082e4f917863c213bada400e3be254df4462333a90f2e31f7497ac5c782ef5842d19ba423e1838580e1672583bfcedcc80fd8b0f0384e19f7baf7339bc9a305663b40cdaaff14bf90cd982e83a1fb3f4b44cabdff8d242fcdc655967bf7bfcf04184c25f8e9ebbd16685fe9eb2da02f0b078be72fd51f0d"}, &(0x7f0000000540)=0x8d) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000580)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x4, @empty, 0x2}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x906e, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, @in6={0xa, 0x4e22, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, @in={0x2, 0x4e22, @broadcast}], 0x94) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r7, 0x84, 0x74, &(0x7f0000000640), &(0x7f0000000680)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f00000006c0)={r8, 0x81, "89b297aeef0c1464c6aee7916796a11acaea65d18c4b91512c004d1e07f93959ad36ddf0f56c8f20c3c0f2ba297e839a883a6be50e51ccfc04554952364c038bc80bba472d17164ae5b249fe63467feecafd24d31962b26fcce563f05cbfab88e23701b258247066b8998506e09a3147aecb7d0aed5fe5a3e5ab34f13ee5579185"}, &(0x7f0000000780)=0x89) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f00000007c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000800)=0x20) r11 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$BTRFS_IOC_ENCODED_READ(r11, 0x80809440, &(0x7f0000000c00)={&(0x7f0000000b80)=[{&(0x7f0000000840)="6b25312ad168fb4aba6ef328d4d59a93c10dfd7cf03b4e6056dccb15933dd8a1d3dd8fb6c9bc03551e4212e391306edae50a9f7988410706b46c9b12c56c2656dad54fb63bfda4fa37093b701ef9323406f7e59c7396d9485550a770f226f4", 0x5f}, {&(0x7f00000008c0)="ccf3849a0d696b71c432d569becb57be2506d52c6c125d57bb61427bd927ecc19e5c24e518678512cd7b", 0x2a}, {&(0x7f0000000900)="e383417685ffdb4de74aed59af8d504abf5914e34147de0c4671b95667a4b506d5514f6be3d2c4e52e48b114cac231d4609f07b27dc0d7cecd1151d0e4452d2c90a2f96ac5bed614db32", 0x4a}, {&(0x7f0000000980)="f45d6b5dfbfac7d413bde03d8f8ff813739712e1f4ae729dbc41cb9c5af5064b1a52fe7d43855751663b373157f2b52b", 0x30}, {&(0x7f00000009c0)="03f83350b6d61f3f7c948e22072d0c08908ef594924bc261b53c2f22dd887ae485a7910226443a205b00681fc09e33ebefdd24ceb4d04557a8d1a8c8d7a1f209c08b48555629864bde7fd8cd36d43fe0521317fe48e73feec21ea1041941fab79f8f4f094776e81bac8962e14509632e940ec892a0", 0x75}, {&(0x7f0000000a40)="a806c0ea6f891fa4adfb7efeaf7237894368ac64effd0e5d81864f583f2e2b5dd79ae19c49bca2b4106d41a54bd8e8f8d631d68be2b2360732d59e6e73dc0c1d926525a109365151982191c2dcfc447257077c37de35122a31e5ec4ca111c262dce6edc8e1470aa7500f44f82b1b", 0x6e}, {&(0x7f0000000ac0)="3bb46212752507dec6579ecf5c67caaed45ca75f708bb8b717c98b37ec9782e5fcd5fda28a06dd5aae2c248e9c2db0c4f0793db5b48b7ade289542fcdc0d5a31df4a8a6ec97085a6392de4e308f5677532417be6d8eca251399cb16d2895a2445eeb710c20035175e6bc7326bf25d0054c7300a10b6ed3a1601194ee84369f459feab698561a9b8b7c1f06d3047a3e39ef9c467376783e149eae411ae2a9ff2214a2d3afdbb0767e834b", 0xaa}], 0x7, 0x100, 0x0, 0x36, 0x2, 0xfffffffffffffffd, 0x6, 0x3}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000cc0)={r10, 0x5}, 0x8) r12 = socket$nl_route(0x10, 0x3, 0x0) readv(r12, &(0x7f0000001240)=[{&(0x7f0000000d00)=""/86, 0x56}, {&(0x7f0000000d80)=""/201, 0xc9}, {&(0x7f0000000e80)=""/243, 0xf3}, {&(0x7f0000000f80)=""/9, 0x9}, {&(0x7f0000000fc0)=""/29, 0x1d}, {&(0x7f0000001000)=""/27, 0x1b}, {&(0x7f0000001040)=""/124, 0x7c}, {&(0x7f00000010c0)=""/46, 0x2e}, {&(0x7f0000001100)=""/113, 0x71}, {&(0x7f0000001180)=""/150, 0x96}], 0xa) r13 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r13, 0x65, 0x1, &(0x7f0000001300)=[{{0x2, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}], 0x8) 216.472826ms ago: executing program 4 (id=7897): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000002b80)=[{&(0x7f00000007c0)="27031c00f40e1400020000000000000006e1f000000089090000000283fcf91a82963d2bd4b836", 0x27}, {&(0x7f0000001b40)="7d586d16062b1e1b9685b88189e0093982f6994b8df2fe56386ed999f1b34b06f2f69618bf033adc88f5360397a115f725e1165f4333f06cbce55a5f20f3095d1492f30e34c2e78534aa2059bcdd5e6c215f8a1d23f5b78a8119bd6c6c6e104923606c286343b114791a0a866bcccd0fb4fa8a960d6e7a59fd52884294b949a1a028d0fd8aefa6ee1070863365ffdfc3ab2876f7423594e3ff0182a3b92a89c520da42a9f85e2a1d51842ad30dab67f17c9938c758102e63c18870f229e0ffd2398686915f863c49fdc6e949856be1d47dac4f6d56e49c9fe34ec3306a64761d6fce755e911854ad8aaf1eb5411bdd83773c3dbf8a774f02e39ce9a13692a2e62e497588697b3406011dff49e483b7af2e2ab2324cdb0854dd9c05fcd9f7891d3f4d166b88a26a1463ac7f87ab1108eb14620661c1eb302caa7417ef79e463c0447f90f85a5b7c8dfed05edcd6cd56eb526a10b859e6e23f7e8d0911defae5937f74d4b60e05992585a3a88d7234c77a5038ae4c84942a6dd682094421a9d22e412f8500823a9482dcddef53022db0e12a7ba36547b7a62e5a22279966bf8c9783d5ca2ebcff237bbbc50ae48f87e4bca97b69279826358efe838bd7a503a2d42ee1989e9302a221882e5d149588122a48becb9d21da437bd16fb3f5de45b8a2098d7597c2d12229f5887719ffeacbf702dd2ca8d3208c56f125a4e90207112d664a279eefb37ed3bd9cd4087a1ade4f8afb23bdf540d2342c714425a382c9c70dc444caa1cccb4f378851829702787c5386caed6b9361e8525cb6b25a8caaf3c6090b43a981f03dcc806caaf5d70750859be2de86be08795188b55538e5bb687bacd577d8d8c12dbdd6fb1f180a19012a052d563fef0ed3a87b3df41a64331db2bf12473d38e03160cc18210425e4aeb63766899824508ba8bdf44f97351d1c9d0fd503863bc10443ec1636cd29a611cc2df523eb995d909d1a4f2807853f6f3dc238d59306367fb25ef0b43be8b4b74d49eb1e0a5fd0b2d682b9f42203026c279b470e31da23e41bfa3fb17fcdeca7b27a14a9fcc1b0e6d41efe6f5b357eaff60460cf61fe3ddddb1cf9b19569f98dc79f1280ae1e163f5b2d8efee979ec17d6108d82443189cffb15baca91855646745d319bae3d6cae9dfbb9bbe70d20e74ac9e55b06bf40eb987112f8cd370f212f03c996baf884d4dab522a23d98bd3699fa244c5abac50a9650d199d9ef94ea932edf2153e02c9ec9c2d3d516a128584e4071b6f8aa04727f2703e80523504880b921d4326d648ba677bc920567e5282e4630c0e414b24e5c0799ca1ced216786aec82fe9687b3f924dfef531b3bc2686a1e3042885bfe23445a7c15dce0090a701bca3125e0e17f6e6d3496e599ee2ac90c6d6bb21d2e42ce7cb018ec5d8097d074393a5700c646f7c7ca8d0a81f3d6babdf028ef740f2272a5f2bf8f6978c3c6167f49fb5383e286e603ea58251409f6eb9412387fba434d6a2adae5d87ad5b3eae0b990f4a2860d4eaf4f36cd16762361514b9a5b20523c57771b87b921631113d5a1400de65766c57a2b94939cb4170afbd9cbd1be74832bcb81a8c2ceff17bdb76751ca2b7a2aed7f880ee1e3064271b456bd78f1e7cdf192ddc495a9356ce36d95d75b01616528bfdca5523ab300b1221b1690cb76bc41125b67fed8d04d6115cd2afd8569c1c5c25a007ab9638168d6c16ff4bb4e62cb4f723f43758675e7139c12690ecb34fb9334cf54aefd4d91adda73842bccd2e4d5ce192a92a8a6984156df13fef823cbdcf87ca87dd4d6a1d7a61ce161d319c72a0936a05b0da86fa08091436af30ea6234bffe2c163f9b521c2f886aef8b715a7e48055204172228ad64278968ccd01db0df89806cc8557e5f8a66fcf1dadae893f0b51db73c8035846fee2461fb272546d3b6b96ff24d0beff07ef96c2d157fd751d76079276effada716a933be58bf3ffc4b16fcea0736a508fb73e92cffdf72a7be5accce5fe0d62d79f7776945c474339c89452cc7e02ea69585d2451a1b21b8c3d9f785e62eb55e4927435165e95d807144f82355a8ab35c144c2e9cbfb7e7880344960fbe96283b828a403279d6aefcef8a9d88f615a3ee576d86c6d708d65b959d5954b95ace30f1e6beb145e0d41f544f78791034f325b12af763004ecb9f045c66f9a6812ab148a3ca4d28076c81829e7e41f2dbc65d814c6561cf9209e7d723917fb3e657a3d9f60d65ebac8d7e7e7fe94ddf8e3cf360cb65097d1ac76b893fd730ce923cf96cb6b6e5782b83b10f289621b82c37cafe04c8c5a521d3c6a43f6d15941aaa428bc22db8d53255aa217ffe8e0b02334a2bade0960066e9c84f9713b9912cfb55223d3bd17f3d3df7825bc03e3739a7cdf7e1a3ce0b77df0c6b3bb566922f52e85fbfb3f9dbcd46bf18f1a6734a3ca727a316f750d1d03eaad603674fecb1ec7d879e771c1c37b6c97b098717b40553a13d6a4831c557ab449614f780e68becfeffb8c2af86a3be388658ae1a86d4715f0c7892ffc39158d2f8348ce98eed5fe0ab1afcbd256a5f464867ddcfd077f12f6c8716859c9a46b007191455558efe2f5c4c816104f4515e96d461331d9e69dbdfa6d8e23bb9c5b8012726819f365d50f258ef30d675876fd95e06791864af2e6b4fc08e0f8162341c0cc0f5d238bd8b25e1036ef8f111c69818391237571330e174793350c9c2aada62f21108e144abe0b86ae2711e5f81cf0c1c7b9f89d36b144feada6aae488fc2f613d3868e388a141794162268b33aa35a5096259127328f22811be740daccb6bb78967e24be01cadf0c7344d1a4f01a94b3daaa4d4193ac1a6e651346a3ac7637ff852526ece318a40e9479189163d8f8d17593d0f5354c141a6461922ffbd80ea70105dcc903c3318ee185aba86f314a8b32afdc5b03c4ff9dcd227a79e7744249743cd9b7ac651ce2528aee678c6608b373a9acc9906c3b97263a94a20a7af97d558ce3035879eb4ff6fbf0292a9debcf5bb28e681ed31fc929f7899036b6825c1e7bf9bbef7f92049bbc3047bd0a4315f7d2359cf8956c02f4c28a4ec3d1a8964ed79b52d2f0f2e8e8fa2987fd088f0afd26feda64efde38412ac3b0c1af45e4a56755b1e80d4879e8b1a63cdb0ddc834021db256305fe6f57b86927dbffce49269edcdd4938063f677a007ff4b0cfe3a304acdb665e3ceb0c4ca5398398a16ed9bfab650cda3e99e4872e5e4507a59263d0e7fbdda2414e3608466626becce4d4c4bc620a1c5824fcaf9e6f7394e6b954f5001de631b84148fd8e71f14dbd046c2aba8260c1c4467e6099ba569950bfc102a3e5d3e42bd65d6c11f61b91b9a9e0ede1ee8ee807803d3b2215989657f86d1e5f9289fc2823d64f9a0abfff0f3acbd4558e2bb02be2b15e84732f140672f72978b6e159ced84cf399f02824fb72828ef8cb2982dc1c1a0de6efa442dfc7e28b58fc67c752518fcd5b6ca58b626adaa3ffe1161eb586497841454ff80c96d70e4686885d94b84336c82f554fbcfaee9ff26924e478227b54895f0a14bd497f17924bc64a59ccc77fa322a75bd3f0d5278de02c2020e7b57f3ec63274dd4d5f921a9de61b39b068e093a9fddedb10a6b3cbc2567bfad1013c2c19fcb4e74708fc68c28472df82c85700248514cc294877762bf5371c7507f46614e015fbcecf3b273dd73266b45113146464a3eaf46bdb7118f91a87c85c955b971b427e9cb284ec8667a7797b59261c97a9698b9d448128c4042c1c23fbd4f69b009cb812fdfd534713d75889153bc86bf7616d7aafd0e1251bfe3c21632b6b265620e87f1c3f4889276529f256aeaff16aadc02554d59ea1664317494d7fe675fa814abe2d590c1eb425e7df8dd30887fbc2541b12d0ca36062a522074738e75399865a4dd142ceafe90f76cf505a34d30a2aafc211a7a753cc93342b6f107902b3656c127c401e2d00a68720279200065885982b4a553f29b3e9512621f2d7ea7ca521b3281d92ec844eb42997a53f819bafe1dd5d5c9b20a8aa2370cd8c6f4d554f87f2df542ec8a221218c1ad2df9ad9184d57e7aa0341805dc4b3b8f61697c1a365ec543d74ecb4a58bdd0a30b8245d82753616ef6f6a2bfcc661af785903c9022e092449f1ef5bc7d55217a56f7e8bd91243db88fc408d82dd6f9aee62f0558212e8d53b6b50947d4999d751186b81fcac95d0e2dc7612ee5573d88c44887c2963d33a468189d9e76ed98e77aa67509bc168272e737dee018a93e125637abf2355b449b87bb8fd502af240e73a6aa250ae823c5df567ddabd017adbf54790007a9d777a16d23c9f1ab300125dad2b9d91217527b518018590a1ea53ce6008622f30810b2bdc503fe6d8593a3e72be54c540bb34fafe134077569712c96e1cc7047d3578119ffc545779b6bffb7e40a955cd96abd57f0cab09d787f063606e7aded4678908965f41b6353bdf295f38572aed0281162dcab62b69f9fcbcf8373d1f304fda317b69724284bd2b1c1aa4f8b96b580870944612317559978f471dd47c605f64e656f67f8c8eea0e135ac2f04c8d09fe6cbfdf9110313ef90c3cc936bc8d4e4994856edaaa4e7d4a207da2136fdabe6c686c44b9c262c28f828b332d1cba03e5b9fb0f27692dd5068e4d99096ce52c25b0a3a9cc0665ca9f24d9d782a427276c4f06bb97cd03b02add5fe55035cf63061b7d2543d85822f698583e664bce8a7146694de9651e84f2dbba325c7d32015b413206a2605b5bd7bf681b14099264d82ff98f0abd6c5c4a500a10c7c32587bfed5e592f971e6ace5026a4977a7d91a89eb579651d1c50b800d8e8c7fd9389bb8ba3c4e4642854695dd1299a726d6edbbfee72a608b4d44df4d6b3355af506199c3c061bb94f6d841ff16f9d77e750aaf4fab6682af32277813cd892a9eadb0f98fe5cd2cac80e5b678f65094f11d0d13d380a385ee0d43a7b5204f09a2dec453047353b40b53602da5d1dc4f3f22f5d8b6e28b21ee3ed19876b38d4515a7293a9c2c32d0e52cccb359395ba27ea38e2dab9eb8e6593eaec15ecf9a25bf1354533a025a0eefa9c846355128b8d6973db2eb91bac31614f9d9d0d51f", 0xe2e}, {&(0x7f0000000240)="7cdb015fbb1990080000006a837b6487d32d2fb46cbd1523147f0741e032cef721aadbc1994f1d49784b25a274803a7caf917f73a677974c21ab81963cf096b4a6efb03d0a69ef39458a06a2bccd5f12f4584d19a07664fe933703f7f6030000003abfd437d1e03de09e6074561fe98ba01cb61fdd3c53bdba305901d7103513c9c2b71ea428a38f832416f3ca22ccc552044f00ff3570a9ab9cf26b9af6af17547bf7f4e1762be569a68ddff0edf9f2d21b53644c04dee00e429612b41c", 0xbe}], 0x3}, 0x2004408d) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070200003900000000000000080009000d000000", 0x24) 215.512859ms ago: executing program 3 (id=7898): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x8c10}, 0x24004001) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)={0x3d0, r4, 0x2c7beee228947575, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x68, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3451}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc372}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ad71c6f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc647}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x360ff1b6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf72f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57ef88f6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf56}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x814}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xf4, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f914da9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb4fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x103cbf3b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee08}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d7b85aa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x552b047}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdeca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75f0f940}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3911fc40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f5c14ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe272}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5760213f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x41f8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5424}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8f6}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f942b8c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29013648}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5155b1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x503f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e709cc8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ff0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc31f}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2843fb98}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x377d582a}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21b76a3c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59b30604}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a8de99}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x98, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d5591a7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x418f4857}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ab888c3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1895cc73}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x482e318b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x617c9e71}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x13c, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b9f94be}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6bef6f31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46ac8827}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x421a5cf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x387ff21d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2192500f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30114768}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d9006fd}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d9f7dc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9a7f2a7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38aa3fcd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3608247}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x381d087f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd88562a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x380fff84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3288dafb}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x193f96aa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1141ba97}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x327f31cf}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a532883}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x532b1e3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x581ac621}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c1de3a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x70, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x493c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa37f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f9286c8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf4de}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5e0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd789}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f5a}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57193567}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d0b7fc6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x66b8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19c929d0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d678fc8}]}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x42056}, 0x4008001) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1e}]}, 0x58}, 0x1, 0x0, 0x0, 0x8081}, 0x4000001) (async) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1e}]}, 0x58}, 0x1, 0x0, 0x0, 0x8081}, 0x4000001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r6, 0x300, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x40000) socket(0x10, 0x2, 0x5) (async) r7 = socket(0x10, 0x2, 0x5) connect$inet6(r7, &(0x7f0000000a80)={0xa, 0x4e20, 0xff, @private0, 0x3}, 0x1c) (async) connect$inet6(r7, &(0x7f0000000a80)={0xa, 0x4e20, 0xff, @private0, 0x3}, 0x1c) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0xe, 0x4, 0x338, 0xffffffff, 0x0, 0x100, 0x1e0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000bc0), {[{{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x204}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0xfff9, 0x9, [0x3a, 0x3c, 0x3, 0xe, 0x3c, 0x14, 0x6, 0x1d, 0x14, 0x19, 0x2f, 0x40, 0x1, 0x1f, 0x21, 0x14], 0x1, 0xd, 0x1000}}}, {{@ip={@remote, @broadcast, 0xff, 0xff000000, 'wg2\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x29, 0x1, 0x22}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@inet=@ipcomp={{0x30}, {[0x4d6, 0x4d6], 0x1}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "17991e2c76e7e303efaa47426a6fd0dc85e4aa09783ce9c501c5352e1110"}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x50, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) recvmmsg$unix(r7, &(0x7f0000002fc0)=[{{&(0x7f0000001100)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/172, 0xac}, {&(0x7f0000002240)=""/29, 0x1d}, {&(0x7f0000002280)=""/112, 0x70}], 0x4}}, {{&(0x7f0000002340), 0x6e, &(0x7f00000027c0)=[{&(0x7f00000023c0)=""/210, 0xd2}, {&(0x7f00000024c0)=""/194, 0xc2}, {&(0x7f00000025c0)=""/27, 0x1b}, {&(0x7f0000002600)=""/172, 0xac}, {&(0x7f00000026c0)=""/67, 0x43}, {&(0x7f0000002740)=""/82, 0x52}], 0x6}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f0000002a00)=[{&(0x7f00000028c0)=""/124, 0x7c}, {&(0x7f0000002940)=""/143, 0x8f}], 0x2, &(0x7f0000002a40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000002b40), 0x6e, &(0x7f0000002d40)=[{&(0x7f0000002bc0)=""/140, 0x8c}, {&(0x7f0000002c80)=""/16, 0x10}, {&(0x7f0000002cc0)=""/97, 0x61}], 0x3, &(0x7f0000002d80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000002e40), 0x6e, &(0x7f0000002ec0), 0x0, &(0x7f0000002f00)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}}], 0x5, 0x2042, &(0x7f0000003100)) (async) recvmmsg$unix(r7, &(0x7f0000002fc0)=[{{&(0x7f0000001100)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/172, 0xac}, {&(0x7f0000002240)=""/29, 0x1d}, {&(0x7f0000002280)=""/112, 0x70}], 0x4}}, {{&(0x7f0000002340), 0x6e, &(0x7f00000027c0)=[{&(0x7f00000023c0)=""/210, 0xd2}, {&(0x7f00000024c0)=""/194, 0xc2}, {&(0x7f00000025c0)=""/27, 0x1b}, {&(0x7f0000002600)=""/172, 0xac}, {&(0x7f00000026c0)=""/67, 0x43}, {&(0x7f0000002740)=""/82, 0x52}], 0x6}}, {{&(0x7f0000002840)=@abs, 0x6e, &(0x7f0000002a00)=[{&(0x7f00000028c0)=""/124, 0x7c}, {&(0x7f0000002940)=""/143, 0x8f}], 0x2, &(0x7f0000002a40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xf8}}, {{&(0x7f0000002b40), 0x6e, &(0x7f0000002d40)=[{&(0x7f0000002bc0)=""/140, 0x8c}, {&(0x7f0000002c80)=""/16, 0x10}, {&(0x7f0000002cc0)=""/97, 0x61}], 0x3, &(0x7f0000002d80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000002e40), 0x6e, &(0x7f0000002ec0), 0x0, &(0x7f0000002f00)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}}], 0x5, 0x2042, &(0x7f0000003100)) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000003200)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x28, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x81) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000003200)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x28, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x81) syz_genetlink_get_family_id$devlink(&(0x7f0000003280), r14) (async) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000003280), r14) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r11, &(0x7f00000033c0)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003380)={&(0x7f00000032c0)={0x94, r15, 0x600, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6b0}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xbae0}, {0x6, 0x11, 0xe94}, {0x8, 0x15, 0x2}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) r16 = syz_genetlink_get_family_id$wireguard(&(0x7f0000003440), r9) sendmsg$WG_CMD_SET_DEVICE(r13, &(0x7f0000003840)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003800)={&(0x7f0000003480)={0x344, r16, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x15c, 0x8, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "af8046ed8918f54098796f3fbf97fc01c5fabaab37273cb2b096edbb3d0276a8"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x553a51ae534db4b4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @private0, 0x287}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x80, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "079d79de01dd3390f38682a24b05d8e5d8b22f2d3635a3c5e7484c9ef430b91b"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x75}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xc}, @WGDEVICE_A_PEERS={0x98, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @private0, 0x4}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ed80a53214370126b4065da35e73288dc6badcac934b9b1099700ac833729a7a"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x108, 0x8, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1c6191de9389dfa06c2836ae0708501e30b773f09f9319e661640cf710439a1f"}, @WGPEER_A_ALLOWEDIPS={0xb4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x29b, @mcast1, 0x69a4}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x21}]}]}]}, 0x344}, 0x1, 0x0, 0x0, 0x2000840}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r17, 0x8933, &(0x7f0000003880)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r17, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003980)={&(0x7f0000003900)={0x5c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x34, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000003a40)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000003a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r10, &(0x7f0000003b00)={&(0x7f0000003a00), 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x24, r6, 0x100, 0x1, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6a}, @val={0x8, 0x3, r18}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xd5}, 0x24048051) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b40), 0xffffffffffffffff) 206.74723ms ago: executing program 4 (id=7899): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="b702000026f90000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f17e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b534dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9c638bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b6fbce3f897226c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7bfa0f000000000000c346dfebd31a0806000000020000000000000048f941b13d924bcf334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c063f7130856f756436303767d2e24f29e5dad9796edb697a6ea1182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf701627825be61e036c9eae11b300b3ec832a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570d338f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a411f450f173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75ee905000000d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f60d8000000053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef660200a99b5c0c20b378065fac4ef9ac2d00000060e5d3f1749feaecf69ba83a71caa9bdddc679f1b826f54b6563ebbe1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270106181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cd2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ed65af3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e687098295d6a66bff091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea264fcfb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0b2e9f3bb90613508c00a292a0c5b87a4f8ff35eba73ce9ebf77d0c842063a7b42c757d828678d38e6a868eaead4f19cdeb7cfc100ceabb4a3999cce5d36ecfe80def20f7187bab75515226f4d9b30e0567612210d492468781999ce795522b726bdf37b15e9afde32a7052cc909efe6ae7804e5044f9f7ae2d8cb08cca312c557bff04cf1fbb0dcfe8ac000000000000000000000072b043a07864ef74028bd9ac8c169da129bf1f6776d2e5884cebc50666d334417ddafcc381b0cfbd65d6036d3a15bc680f424efff16edc05758d5be24f42b8dbe920e7823cb0ce62afb1246dc9d4c6b56e391c30e7ef3c1b9b3a9cb202dac5a2eb2516ee891b3e6f23fa95a2d86fd65c02476321b830c4ae1c0a414420dbd16ca220"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x1fc2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000851000000200000085000000c400000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0xf2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x8001, 0x4}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf250300000008000300", @ANYRES32=r5], 0x28}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%ps \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x0, 0x7, 0x1ff, 0x5, {{0x2f, 0x4, 0x1, 0x7, 0xbc, 0x67, 0x0, 0x0, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0x10, [@broadcast, @rand_addr=0x64010100, @broadcast, @multicast2, @private=0xa010100, @multicast2, @multicast2, @multicast1]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x27, 0x6c, [@local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2, @multicast1]}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x41, 0x2, [{0x1, 0xa, "524530aab95ab8d6"}, {0x5, 0x7, "c1d459b9bc"}, {0x5, 0xd, "6a75dc971ff56db18f4925"}, {0x6, 0xe, "c180e9874e7758b64592e51a"}, {0x7, 0xa, "804904c70dd7c908"}, {0x7, 0x5, "06e082"}]}, @noop, @timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x0, [{@broadcast, 0xb3fe}]}, @noop]}}}}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%-010d \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x1d, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x58b8ee7f, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0xe}, @map_fd, @map_fd={0x18, 0xa, 0x1, 0x0, r3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @jmp={0x5, 0x0, 0xb, 0x1c65b6d1f59c0261, 0xb, 0x100, 0xfffffffffffffffc}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0x992a, 0x6f, &(0x7f0000000540)=""/111, 0x40f00, 0x1, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x2, 0xd4, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000840)=[r9], &(0x7f0000000880)=[{0x5, 0x4, 0xf}, {0x5, 0x3, 0x1, 0x9}, {0x3, 0x2, 0xb, 0x8}]}, 0x94) 129.856064ms ago: executing program 4 (id=7900): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1, 0x0}, 0x8) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000950e000000000000c1560000850000001900000095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x24000004) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) close(r5) 51.904192ms ago: executing program 4 (id=7901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2981000e0086dd6d002008000811ff20010000000000000000000000000001ff0200000000000000000000fc0000014f194e200008907814245320baa78e00e067da8cbac8f2f779dde670c71013c928e1af904601175c94a2242ed3a2097e35989218b814f3f8f6891aafa76b149ad00c7067e09ec602afde72db0de2d8e4c86b0b48d7f85ce74d896c97a1dd53247bf81088dd04f571f74e6f8bccce19def9467b6df4238937bf874ab186a0ce6af5a92bb82552b2c124265162d04cb8c0aea8276b740fda01e5fa35bbf3d38a0f60e4bc08890fae87"], 0x42) (async) r3 = socket(0x10, 0x803, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) close(0x4) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x9801, 0x20005}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc}}}]}, 0x8b}, 0x1, 0x0, 0x0, 0x4048040}, 0x4000080) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x70bd28, 0x3, {0x0, 0x0, 0x0, r7, 0x7bd00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x40104) 50.063543ms ago: executing program 3 (id=7902): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001ec0), 0xffffffffffffffff) 36.457501ms ago: executing program 2 (id=7903): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x2400140}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x40008e45}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 0s ago: executing program 3 (id=7904): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x93}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) kernel console output (not intermixed with test programs): 1, 0] type 2 family 0 port 6081 - 0 [ 441.063620][ T7640] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.092362][ T7640] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.111318][ T7640] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.254505][ T8794] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.282343][ T8794] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.359040][ T8792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.393068][ T8792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.396946][T27263] siw: device registration error -23 [ 441.460757][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888052a5e800: abort rx timeout. Force session deactivation [ 441.463062][T27274] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 441.505396][T27273] syzkaller0: entered promiscuous mode [ 441.533703][T27273] syzkaller0: entered allmulticast mode [ 441.591471][T27286] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 441.623914][T27284] syzkaller0: entered promiscuous mode [ 441.632568][T27284] syzkaller0: entered allmulticast mode [ 441.708723][T27296] syzkaller0: entered promiscuous mode [ 441.723193][T27296] syzkaller0: entered allmulticast mode [ 441.763531][T27296] tipc: Started in network mode [ 441.769897][T27296] tipc: Node identity da889af7dda8, cluster identity 4711 [ 441.777180][T27296] tipc: Enabled bearer , priority 0 [ 441.808334][T27305] 8021q: adding VLAN 0 to HW filter on device bond10 [ 441.830987][T27296] tipc: Resetting bearer [ 441.857260][T27295] tipc: Resetting bearer [ 441.887410][T27295] tipc: Disabling bearer [ 442.434525][T27362] netlink: 'syz.4.6049': attribute type 5 has an invalid length. [ 442.460306][ T5628] Bluetooth: hci5: command tx timeout [ 442.477961][T27373] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.513221][T27373] bridge_slave_0 (unregistering): left allmulticast mode [ 442.531326][T27373] bridge_slave_0 (unregistering): left promiscuous mode [ 442.548563][T27373] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.652327][T27388] bridge7: entered allmulticast mode [ 443.075367][T27442] sch_tbf: burst 21990 is lower than device lo mtu (32783) ! [ 443.094527][T27440] ipt_ECN: cannot use operation on non-tcp rule [ 443.194434][T27445] __nla_validate_parse: 10 callbacks suppressed [ 443.194453][T27445] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6075'. [ 443.257662][T27457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6078'. [ 443.273104][T27457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6078'. [ 443.363690][T27464] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6081'. [ 443.392896][T27468] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 443.416992][T27468] netlink: 'syz.3.6083': attribute type 21 has an invalid length. [ 443.431831][T27468] netlink: 'syz.3.6083': attribute type 22 has an invalid length. [ 443.443144][T27468] netlink: 'syz.3.6083': attribute type 23 has an invalid length. [ 443.452273][T27468] netlink: 'syz.3.6083': attribute type 25 has an invalid length. [ 443.460754][T27468] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6083'. [ 443.766598][T27502] syzkaller0: entered promiscuous mode [ 443.772866][T27502] syzkaller0: entered allmulticast mode [ 443.936255][T27515] netlink: 'syz.1.6098': attribute type 1 has an invalid length. [ 443.945829][T27517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6099'. [ 443.961948][T27515] bond11: entered promiscuous mode [ 443.967436][T27515] 8021q: adding VLAN 0 to HW filter on device bond11 [ 443.990195][T27515] 8021q: adding VLAN 0 to HW filter on device bond11 [ 443.998349][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055bf8000: rx timeout, send abort [ 444.009799][T27515] bond11: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 444.021486][T27515] bond11: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 444.034758][T27515] bond11: (slave ip6gre3): making interface the new active one [ 444.043172][T27515] ip6gre3: entered promiscuous mode [ 444.051224][T27515] bond11: (slave ip6gre3): Enslaving as an active interface with an up link [ 444.116066][T27529] netlink: 'syz.4.6103': attribute type 1 has an invalid length. [ 444.167236][T27537] netlink: 'syz.1.6105': attribute type 83 has an invalid length. [ 444.220661][T27544] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6106'. [ 444.306356][T27548] bond5: entered promiscuous mode [ 444.321125][T27548] bond5: entered allmulticast mode [ 444.326683][T27548] 8021q: adding VLAN 0 to HW filter on device bond5 [ 444.382861][T27558] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 444.466109][T27566] IPv6: Can't replace route, no match found [ 444.475794][T27566] IPv6: Can't replace route, no match found [ 444.498456][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055bf8400: rx timeout, send abort [ 444.507576][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055bf8000: abort rx timeout. Force session deactivation [ 444.539922][ T5628] Bluetooth: hci5: command tx timeout [ 444.690352][T27588] netlink: 'syz.4.6123': attribute type 3 has an invalid length. [ 444.717907][T27594] tipc: Failed to obtain node identity [ 444.726451][T27594] tipc: Enabling of bearer rejected, failed to enable media [ 444.740654][T27588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6123'. [ 444.901377][T27611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6131'. [ 444.961500][T27611] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6131'. [ 445.006845][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055bf8400: abort rx timeout. Force session deactivation [ 445.017695][T27626] netlink: 'syz.4.6133': attribute type 1 has an invalid length. [ 448.213085][T27643] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.283180][T27675] validate_nla: 2 callbacks suppressed [ 448.283197][T27675] netlink: 'syz.3.6149': attribute type 49 has an invalid length. [ 448.313216][T27678] netlink: 'syz.2.6148': attribute type 1 has an invalid length. [ 448.377751][T27684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6151'. [ 448.390549][T27687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6150'. [ 448.467674][T27675] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 448.507859][T27675] ip6gretap0: entered promiscuous mode [ 448.521956][T27675] ip6gretap0: entered allmulticast mode [ 448.568057][T27678] bond1: entered promiscuous mode [ 448.574540][T27678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 448.610786][T27678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6148'. [ 448.622155][T27698] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 448.626935][T27678] netlink: 'syz.2.6148': attribute type 13 has an invalid length. [ 448.643998][T27678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6148'. [ 448.664210][T27701] openvswitch: netlink: Flow actions attr not present in new flow. [ 448.695768][T27701] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6156'. [ 448.837230][T27721] bridge0: port 4(gretap0) entered disabled state [ 448.843890][T27721] bridge0: port 3(vlan2) entered disabled state [ 448.850457][T27721] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.857773][T27721] bridge0: port 1(1¾x9ÿ) entered disabled state [ 448.946182][T27727] netlink: 'syz.3.6165': attribute type 10 has an invalid length. [ 449.161686][T27748] team_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 449.228840][T27753] 0: reclassify loop, rule prio 0, protocol 700 [ 449.249877][T27758] 0: reclassify loop, rule prio 0, protocol 700 [ 449.325172][T27775] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 449.325172][T27775] Please contact the netfilter-devel mailing list or update your nftables rules. [ 449.358944][ T7640] tipc: Subscription rejected, illegal request [ 449.446047][T27767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6174'. [ 449.575447][T27792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6180'. [ 449.625342][T27799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6183'. [ 449.712023][T27806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6185'. [ 449.732692][T27805] macvtap1: entered promiscuous mode [ 449.738175][T27805] vlan0: entered promiscuous mode [ 449.750888][T27805] vlan0: left promiscuous mode [ 449.773075][T27806] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.780705][T27806] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.784820][T27807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.803998][T27814] netlink: 'syz.0.6188': attribute type 21 has an invalid length. [ 449.817329][T27814] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6188'. [ 449.853002][T27805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.963122][T27827] netlink: 'syz.4.6192': attribute type 21 has an invalid length. [ 449.978397][T27827] IPv6: NLM_F_CREATE should be specified when creating new route [ 449.988625][T27804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.104402][T27839] bridge8: entered promiscuous mode [ 450.111781][T27839] bridge8: entered allmulticast mode [ 450.164436][T27851] netlink: 'syz.0.6196': attribute type 4 has an invalid length. [ 450.545112][T27865] netlink: 'syz.3.6198': attribute type 1 has an invalid length. [ 450.594953][T27870] netlink: 'syz.3.6200': attribute type 1 has an invalid length. [ 450.616701][T27870] bond10: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 450.635045][T27870] veth3: entered promiscuous mode [ 450.644034][T27870] bond10: (slave veth3): Enslaving as a backup interface with a down link [ 450.655835][ T7640] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 450.656615][T27870] 8021q: adding VLAN 0 to HW filter on device bond10 [ 450.769347][ T8797] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 450.804441][T27881] bond0: Caught tx_queue_len zero misconfig [ 453.061243][T27832] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 453.158662][T27905] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 453.208575][T27907] syzkaller0: entered promiscuous mode [ 453.224377][T27907] syzkaller0: entered allmulticast mode [ 453.346856][T27917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 453.385695][T27928] __nla_validate_parse: 13 callbacks suppressed [ 453.385714][T27928] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6216'. [ 453.411248][T27928] netlink: 4100 bytes leftover after parsing attributes in process `syz.1.6216'. [ 453.421257][T27928] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 453.472623][T27934] netlink: 284 bytes leftover after parsing attributes in process `syz.3.6219'. [ 453.487057][T27934] ip6tnl0: Caught tx_queue_len zero misconfig [ 453.644856][T27953] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6225'. [ 453.705741][ T29] audit: type=1800 audit(1782337455.720:16): pid=27958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6226" name="memory.events" dev="tmpfs" ino=220 res=0 errno=0 [ 453.749785][T27964] netlink: 'syz.2.6229': attribute type 21 has an invalid length. [ 453.758394][T27964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6229'. [ 453.773543][ T29] audit: type=1804 audit(1782337455.720:17): pid=27958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.6226" name="/newroot/39/memory.events" dev="tmpfs" ino=220 res=1 errno=0 [ 453.793435][T27966] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 453.855703][T27976] netlink: 'syz.2.6233': attribute type 1 has an invalid length. [ 453.857593][T27972] tipc: Enabled bearer , priority 0 [ 453.915908][T27976] 8021q: adding VLAN 0 to HW filter on device bond4 [ 453.923474][T27972] syzkaller0: entered promiscuous mode [ 453.930168][T27972] syzkaller0: entered allmulticast mode [ 453.977850][T27972] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 454.035747][T27972] tipc: Resetting bearer [ 454.135581][T27969] tipc: Resetting bearer [ 454.158874][T27969] tipc: Disabling bearer [ 454.184625][T28013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6242'. [ 454.294301][T28026] ipvlan2: entered promiscuous mode [ 454.325130][T28024] syzkaller1: entered promiscuous mode [ 454.333858][T28024] syzkaller1: entered allmulticast mode [ 454.417818][T28042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6248'. [ 454.431447][T28042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6248'. [ 454.475420][T28034] tipc: Resetting bearer [ 454.475940][T28044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6251'. [ 454.503840][T28044] netlink: 'syz.1.6251': attribute type 5 has an invalid length. [ 454.528096][T28044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6251'. [ 454.553171][T28048] netlink: 'syz.1.6251': attribute type 1 has an invalid length. [ 454.561515][T28046] netlink: 'syz.0.6252': attribute type 1 has an invalid length. [ 454.570630][T28048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.593098][T28050] openvswitch: netlink: Flow actions attr not present in new flow. [ 454.821760][T28067] netlink: 'syz.1.6260': attribute type 1 has an invalid length. [ 454.874126][T28067] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 454.904765][T28075] lo speed is unknown, defaulting to 1000 [ 455.178506][T28099] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 455.271568][T28095] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 455.278273][T28108] openvswitch: netlink: Missing key (keys=40, expected=100) [ 455.300862][T28107] openvswitch: netlink: Missing key (keys=40, expected=100) [ 455.314083][T28075] lo speed is unknown, defaulting to 1000 [ 455.326626][T28107] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 455.534218][ T7871] IPVS: starting estimator thread 0... [ 455.542172][T28119] netlink: 'syz.2.6275': attribute type 4 has an invalid length. [ 455.580425][T28119] netlink: 'syz.2.6275': attribute type 4 has an invalid length. [ 455.643439][T28124] IPVS: using max 54 ests per chain, 129600 per kthread [ 455.801125][T28143] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 456.139398][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 456.544108][T28218] xt_time: unknown flags 0xf4 [ 456.591675][T28220] netlink: 'syz.3.6298': attribute type 1 has an invalid length. [ 456.657316][T28228] ±ÿª¨úrBº“: renamed from lo [ 456.696500][T28233] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 456.784943][T28240] smc: net device team0 applied user defined pnetid SYZ2 [ 456.965279][ T1123] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.983640][ T1123] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.002912][T28266] netlink: 'syz.4.6307': attribute type 1 has an invalid length. [ 457.016901][ T1123] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.059279][ T1123] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.421011][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 457.430067][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 457.448599][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 457.462330][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 457.471082][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 457.682481][T28304] : entered promiscuous mode [ 457.713516][T28309] sctp: [Deprecated]: syz.3.6319 (pid 28309) Use of int in max_burst socket option. [ 457.713516][T28309] Use struct sctp_assoc_value instead [ 457.763973][T28297] only policy match revision 0 supported [ 457.763992][T28297] unable to load match [ 457.873625][T28320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 457.876310][T28320] netlink: zone id is out of range [ 457.914454][T28320] netlink: zone id is out of range [ 457.942671][T28320] netlink: zone id is out of range [ 457.962849][T28320] netlink: zone id is out of range [ 458.013980][T28320] netlink: zone id is out of range [ 458.168288][T28334] bond11: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 458.241219][T28334] bond11 (unregistering): Released all slaves [ 458.258390][T28338] bridge0: port 4(syz_tun) entered blocking state [ 458.265683][T28338] bridge0: port 4(syz_tun) entered disabled state [ 458.275894][T28338] syz_tun: entered allmulticast mode [ 458.292659][T28338] syz_tun: entered promiscuous mode [ 458.306082][T28345] macvtap1: entered promiscuous mode [ 458.318220][T28345] macvtap1: entered allmulticast mode [ 458.324428][T28345] veth1_vlan: entered allmulticast mode [ 458.336934][T28346] macvtap2: entered promiscuous mode [ 458.343094][T28346] macvtap2: entered allmulticast mode [ 458.399659][T28290] lo speed is unknown, defaulting to 1000 [ 458.461637][T28357] __nla_validate_parse: 17 callbacks suppressed [ 458.461658][T28357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6327'. [ 458.626686][T28290] lo speed is unknown, defaulting to 1000 [ 459.088772][T28378] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 459.102238][T28378] bond6 (unregistering): Released all slaves [ 459.134137][T28383] ipvlan0: Caught tx_queue_len zero misconfig [ 459.322017][T28393] validate_nla: 1 callbacks suppressed [ 459.322034][T28393] netlink: 'syz.0.6336': attribute type 1 has an invalid length. [ 459.375599][T28393] netlink: 476 bytes leftover after parsing attributes in process `syz.0.6336'. [ 459.385803][T28393] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.6336'. [ 459.479584][T28290] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.491836][T28290] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.499688][ T5630] Bluetooth: hci2: command tx timeout [ 459.500121][T28290] bridge_slave_0: entered allmulticast mode [ 459.516195][T28290] bridge_slave_0: entered promiscuous mode [ 459.525593][T28290] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.533501][T28290] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.543153][T28290] bridge_slave_1: entered allmulticast mode [ 459.550489][T28290] bridge_slave_1: entered promiscuous mode [ 459.607702][T28290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.622408][T28415] net_ratelimit: 57 callbacks suppressed [ 459.622427][T28415] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 459.635353][T28290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.688509][T28290] team0: Port device team_slave_0 added [ 459.707215][T28290] team0: Port device team_slave_1 added [ 459.763742][T28290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.771856][T28290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.799029][T28290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.813708][T28290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.822018][T28290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.854691][T28429] SET target dimension over the limit! [ 459.860729][T28290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.921128][T28290] hsr_slave_0: entered promiscuous mode [ 459.938793][T28290] hsr_slave_1: entered promiscuous mode [ 459.954137][T28290] debugfs: 'hsr0' already exists in 'hsr' [ 459.967827][T28290] Cannot create hsr debugfs directory [ 460.075587][T28445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6350'. [ 460.113436][T28448] netlink: 'syz.0.6351': attribute type 1 has an invalid length. [ 460.183417][T28290] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.244968][T28456] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6352'. [ 460.274441][T28290] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.364178][T28458] bond5: option resend_igmp: invalid value (32767) [ 460.380186][T28458] bond5: option resend_igmp: allowed values 0 - 255 [ 460.401793][T28458] bond5 (unregistering): Released all slaves [ 460.447643][T28290] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.538040][T28290] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.593637][T28470] syzkaller1: entered promiscuous mode [ 460.607002][T28470] syzkaller1: entered allmulticast mode [ 460.815263][T28290] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 460.845468][T28290] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 460.865529][T28290] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 460.922652][T28290] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 460.957024][T28290] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 460.985780][T28290] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.011854][T28290] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 461.045080][T28290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.191091][T28525] siw: device registration error -23 [ 461.247324][T28290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.388905][T28532] veth5: entered allmulticast mode [ 461.412134][T28551] netlink: 'syz.0.6369': attribute type 21 has an invalid length. [ 461.427274][T28290] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.468932][T28536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6369'. [ 461.494276][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.501666][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.518795][T28555] netlink: 'syz.2.6370': attribute type 10 has an invalid length. [ 461.533755][T28551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6369'. [ 461.557161][T28555] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6370'. [ 461.572420][T28552] syzkaller1: entered promiscuous mode [ 461.585662][ T5630] Bluetooth: hci2: command tx timeout [ 461.602933][T28552] syzkaller1: entered allmulticast mode [ 461.612532][ T8794] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.619981][ T8794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.186008][T28589] netlink: 'syz.4.6373': attribute type 8 has an invalid length. [ 463.217451][T28290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.283587][T28290] veth0_vlan: entered promiscuous mode [ 463.306070][T28290] veth1_vlan: entered promiscuous mode [ 463.357337][T28290] veth0_macvtap: entered promiscuous mode [ 463.378070][T28290] veth1_macvtap: entered promiscuous mode [ 463.412360][T28290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.427569][T28290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.457954][ T76] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.474060][ T76] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.612120][ T76] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.622681][ T76] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.659465][ T5630] Bluetooth: hci2: command tx timeout [ 464.309991][T28545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.320351][T28532] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6368'. [ 464.377203][T28607] netlink: 'syz.2.6375': attribute type 5 has an invalid length. [ 464.386185][T28606] netlink: 'syz.2.6375': attribute type 5 has an invalid length. [ 464.397823][T28606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6375'. [ 464.407247][T28607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6375'. [ 464.535422][T28610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6376'. [ 464.560438][T28611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.571340][ T8792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.580953][ T8792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.637420][ T8797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.672165][ T8797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.755901][T28614] syzkaller0: entered promiscuous mode [ 464.766043][T28614] syzkaller0: entered allmulticast mode [ 464.783161][T28627] tipc: Enabling of bearer rejected, failed to enable media [ 464.993416][T28637] ip6gre1: entered allmulticast mode [ 465.116681][T28651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6388'. [ 465.149278][T28646] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.156663][T28646] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.200303][T28646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.214039][T28646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.273987][ T8794] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.294155][ T8794] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.335310][ T8794] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.361254][T28659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6390'. [ 465.373994][ T8794] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.399515][T28660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6391'. [ 465.627242][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 465.635536][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 465.645242][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 465.654048][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 465.664527][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 465.742119][ T5630] Bluetooth: hci2: command tx timeout [ 465.926186][T28687] syzkaller1: entered promiscuous mode [ 465.942424][T28687] syzkaller1: entered allmulticast mode [ 466.047302][T28696] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6401'. [ 466.075347][T28696] netlink: 'syz.2.6401': attribute type 8 has an invalid length. [ 466.086002][T28696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6401'. [ 466.107029][T28673] lo speed is unknown, defaulting to 1000 [ 466.288565][T28673] lo speed is unknown, defaulting to 1000 [ 466.530011][T28719] netlink: 'syz.1.6408': attribute type 12 has an invalid length. [ 466.611469][T28722] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6409'. [ 466.785665][T28733] syzkaller0: entered promiscuous mode [ 466.794307][T28733] syzkaller0: entered allmulticast mode [ 466.932677][T28673] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.941962][T28673] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.950708][T28673] bridge_slave_0: entered allmulticast mode [ 466.957771][T28673] bridge_slave_0: entered promiscuous mode [ 466.975966][T28673] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.984680][T28673] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.992950][T28673] bridge_slave_1: entered allmulticast mode [ 467.000635][T28673] bridge_slave_1: entered promiscuous mode [ 467.032683][T28673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.045982][T28673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.325764][T28673] team0: Port device team_slave_0 added [ 467.353404][T28673] team0: Port device team_slave_1 added [ 467.377821][T28673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.389572][T28673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.464935][T28673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.492085][T28673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.500501][T28673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.527920][T28673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.588633][T28673] hsr_slave_0: entered promiscuous mode [ 467.597754][T28673] hsr_slave_1: entered promiscuous mode [ 467.604102][T28673] debugfs: 'hsr0' already exists in 'hsr' [ 467.610400][T28673] Cannot create hsr debugfs directory [ 467.709825][T28673] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.725835][T28673] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.742675][ T5630] Bluetooth: hci0: command tx timeout [ 467.774122][T28673] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.784099][T28673] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.831925][T28673] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.844384][T28673] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.861894][T28803] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 467.886536][T28673] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.898106][T28673] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.006245][T28813] netlink: 'syz.2.6436': attribute type 13 has an invalid length. [ 468.014932][T28814] netlink: 'syz.2.6436': attribute type 13 has an invalid length. [ 468.095944][T28673] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 468.121803][T28673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.138730][T28673] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 468.156762][T28673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.166138][T28673] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 468.187792][T28673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.208015][T28673] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 468.242882][T28673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.677923][T28856] bond1: option miimon: invalid value (18446744073709486085) [ 468.687284][T28856] bond1: option miimon: allowed values 0 - 2147483647 [ 468.701966][T28856] bond1 (unregistering): Released all slaves [ 468.762594][T28852] team0 (unregistering): Port device team_slave_0 removed [ 468.772783][T28852] team0 (unregistering): Port device team_slave_1 removed [ 468.813666][T28673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.857032][T28673] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.887569][ T8797] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.894799][ T8797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.931709][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.939009][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.965494][T28885] IPv6: NLM_F_CREATE should be specified when creating new route [ 469.080907][T28893] sctp: [Deprecated]: syz.0.6455 (pid 28893) Use of int in maxseg socket option. [ 469.080907][T28893] Use struct sctp_assoc_value instead [ 469.386015][T28927] tun0: tun_chr_ioctl cmd 1074025675 [ 469.392756][T28927] tun0: persist enabled [ 469.402170][T28927] openvswitch: netlink: Missing key (keys=40, expected=80) [ 469.526373][T28924] syzkaller0: entered promiscuous mode [ 469.532870][T28924] syzkaller0: entered allmulticast mode [ 469.545100][T28673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.652237][T28673] veth0_vlan: entered promiscuous mode [ 469.687654][T28673] veth1_vlan: entered promiscuous mode [ 469.752561][T28673] veth0_macvtap: entered promiscuous mode [ 469.768181][T28673] veth1_macvtap: entered promiscuous mode [ 469.793771][T28673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.817394][T28673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.826285][ T5630] Bluetooth: hci0: command tx timeout [ 469.842082][ T8794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.852285][ T8794] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.868144][ T8794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.878306][ T8794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.954196][ T8792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.978595][ T8792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.016910][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.041580][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.145629][T28986] bond0: (slave bond_slave_0): Releasing backup interface [ 470.163790][T28988] netlink: 'syz.4.6480': attribute type 1 has an invalid length. [ 470.174357][T28988] __nla_validate_parse: 14 callbacks suppressed [ 470.174373][T28988] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6480'. [ 470.415626][T29012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6488'. [ 470.528971][T29025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6493'. [ 470.546715][T29025] openvswitch: netlink: VLAN attribute unexpected. [ 470.590797][T29027] veth5: entered allmulticast mode [ 470.686916][T29037] netlink: 'syz.1.6497': attribute type 1 has an invalid length. [ 470.715934][T29040] bond1: (slave bridge1): making interface the new active one [ 470.725112][T29040] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 470.736647][T29042] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6498'. [ 470.747296][T29042] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6498'. [ 471.097924][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 471.108427][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 471.119113][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 471.128043][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 471.136313][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 471.231341][T29074] Cannot find del_set index 4 as target [ 471.317696][ T7872] IPVS: starting estimator thread 0... [ 471.365699][T16890] syz_tun (unregistering): left allmulticast mode [ 471.384463][T16890] syz_tun (unregistering): left promiscuous mode [ 471.393210][T16890] bridge0: port 4(syz_tun) entered disabled state [ 471.441215][T29082] IPVS: using max 42 ests per chain, 100800 per kthread [ 471.552120][T29087] syzkaller0: entered promiscuous mode [ 471.567818][T29087] syzkaller0: entered allmulticast mode [ 471.664694][T29116] netlink: 388 bytes leftover after parsing attributes in process `syz.2.6514'. [ 471.687805][T29116] SET target dimension over the limit! [ 471.781601][T29112] bond1: Unable to set up delay as MII monitoring is disabled [ 471.803527][T29112] bond1 (unregistering): Released all slaves [ 471.899815][ T5630] Bluetooth: hci0: command tx timeout [ 471.902677][T29066] lo speed is unknown, defaulting to 1000 [ 471.947527][T29135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6517'. [ 471.983874][T29138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6520'. [ 472.128420][T29153] syzkaller0: entered promiscuous mode [ 472.145900][T29155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6523'. [ 472.162714][T29158] netlink: 212 bytes leftover after parsing attributes in process `syz.3.6525'. [ 472.172364][T29066] lo speed is unknown, defaulting to 1000 [ 472.204703][T29158] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 472.244573][T29163] syzkaller0: entered promiscuous mode [ 472.265463][T29163] syzkaller0: entered allmulticast mode [ 472.381107][T29167] openvswitch: netlink: IP tunnel dst address not specified [ 472.644383][T29200] Bluetooth: MGMT ver 1.23 [ 472.805342][T29066] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.820873][T29066] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.830949][T29066] bridge_slave_0: entered allmulticast mode [ 472.838842][T29066] bridge_slave_0: entered promiscuous mode [ 472.854920][T29066] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.867910][T29066] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.877475][T29066] bridge_slave_1: entered allmulticast mode [ 472.886374][T29066] bridge_slave_1: entered promiscuous mode [ 472.914154][T29066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.926068][T29066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.962174][T29066] team0: Port device team_slave_0 added [ 472.970963][T29066] team0: Port device team_slave_1 added [ 472.994624][T29066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.002070][T29066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.032017][T29066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.045338][T29066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.053267][T29066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.085955][T29066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.173227][T29066] hsr_slave_0: entered promiscuous mode [ 473.180645][ T5630] Bluetooth: hci4: command tx timeout [ 473.182234][T29066] hsr_slave_1: entered promiscuous mode [ 473.193467][T29066] debugfs: 'hsr0' already exists in 'hsr' [ 473.199857][T29066] Cannot create hsr debugfs directory [ 473.316540][T29244] netlink: 'syz.2.6546': attribute type 10 has an invalid length. [ 473.364629][T29244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.373276][T29244] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 473.411360][T29247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.430955][T29247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.452216][T29247] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 473.462575][T29252] netlink: 'syz.3.6549': attribute type 1 has an invalid length. [ 473.465645][T29247] bond0 (unregistering): Released all slaves [ 473.616686][T29264] sctp: [Deprecated]: syz.4.6554 (pid 29264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.616686][T29264] Use struct sctp_sack_info instead [ 473.678512][T29271] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 473.702948][T29266] netlink: 'syz.3.6555': attribute type 10 has an invalid length. [ 473.746137][T29266] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.756499][T29266] bond0: (slave team0): Enslaving as an active interface with an up link [ 473.934531][T29066] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 473.944600][T29066] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 473.954227][T29066] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 473.972294][T29066] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 473.979891][ T5630] Bluetooth: hci0: command tx timeout [ 474.005034][T29066] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 474.016718][T29304] netlink: 'syz.2.6565': attribute type 1 has an invalid length. [ 474.019001][T29066] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 474.055810][T29066] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 474.076579][T29066] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 474.105091][T29304] bond0: (slave geneve2): making interface the new active one [ 474.113976][T29304] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 474.128843][ T76] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 474.138657][ T76] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 474.158495][T29319] xt_TCPMSS: Only works on TCP SYN packets [ 474.198669][ T76] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 474.208067][ T76] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 474.221976][T29320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.290799][T29325] geneve3: entered promiscuous mode [ 474.321065][T29066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.338994][T29066] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.355376][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.362630][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.396943][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.404198][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.453560][T29066] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 474.474959][T29066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 474.691316][T29356] netlink: 'syz.2.6576': attribute type 1 has an invalid length. [ 474.701664][T29066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.761159][T29066] veth0_vlan: entered promiscuous mode [ 474.779055][T29066] veth1_vlan: entered promiscuous mode [ 474.817113][T29066] veth0_macvtap: entered promiscuous mode [ 474.828375][T29066] veth1_macvtap: entered promiscuous mode [ 474.853069][T29066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.871629][T29066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.885476][ T1123] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.904027][ T1123] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.923463][ T1123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.942309][ T1123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.993537][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.002894][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.030043][T29372] lo speed is unknown, defaulting to 1000 [ 475.052978][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.070550][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.077928][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888047994800: rx timeout, send abort [ 475.086434][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888047994800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 475.261740][ T5630] Bluetooth: hci4: command tx timeout [ 475.282799][T29383] __nla_validate_parse: 10 callbacks suppressed [ 475.282818][T29383] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6584'. [ 475.320184][ T5710] bridge0: entered promiscuous mode [ 475.363026][T29383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6584'. [ 475.371314][T29372] lo speed is unknown, defaulting to 1000 [ 475.388279][T29383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6584'. [ 475.464441][T29389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.578317][T29398] sctp: [Deprecated]: syz.0.6588 (pid 29398) Use of int in max_burst socket option. [ 475.578317][T29398] Use struct sctp_assoc_value instead [ 475.781871][T29417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6596'. [ 475.792367][T29415] syzkaller0: entered promiscuous mode [ 475.800195][T29415] syzkaller0: entered allmulticast mode [ 475.836953][T29415] tipc: Enabled bearer , priority 0 [ 475.853466][ T8794] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.865603][T29419] ±ÿ: renamed from lo (while UP) [ 475.872227][T29425] bridge_slave_1: left allmulticast mode [ 475.878163][T29425] bridge_slave_1: left promiscuous mode [ 475.885712][T29425] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.895814][T29425] bridge_slave_0: left allmulticast mode [ 475.904022][T29425] bridge_slave_0: left promiscuous mode [ 475.911258][T29425] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.925692][ T8794] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.935940][ T8794] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.951455][ T8794] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.981061][T29431] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 476.061128][T29438] openvswitch: netlink: IP tunnel dst address not specified [ 476.146547][T29444] kthread_run failed with err -4 [ 476.175199][T29442] tipc: Started in network mode [ 476.188704][T29442] tipc: Node identity fa38eb07bd95, cluster identity 4711 [ 476.198108][T29442] tipc: Enabled bearer , priority 0 [ 476.206594][T29442] syzkaller0: entered promiscuous mode [ 476.208147][T29452] netlink: 'syz.0.6605': attribute type 11 has an invalid length. [ 476.213846][T29442] syzkaller0: entered allmulticast mode [ 476.260534][T29442] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 476.281970][T29442] tipc: Resetting bearer [ 476.607020][T29414] tipc: Resetting bearer [ 476.644734][T29414] tipc: Disabling bearer [ 476.892259][T29436] tipc: Resetting bearer [ 476.915620][T29436] tipc: Disabling bearer [ 476.983226][T29507] ipvlan0: Caught tx_queue_len zero misconfig [ 477.032214][T29520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6622'. [ 477.168267][T29534] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6624'. [ 477.341174][ T5630] Bluetooth: hci4: command tx timeout [ 477.428282][T29549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6628'. [ 477.462271][T29549] netlink: 'syz.1.6628': attribute type 5 has an invalid length. [ 477.478843][T29553] xt_cluster: node mask cannot exceed total number of nodes [ 477.490577][T29549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6628'. [ 477.515881][T29549] geneve2: entered promiscuous mode [ 477.534082][T29549] geneve2: entered allmulticast mode [ 477.554009][ T1123] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 477.580338][ T1123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 477.610847][ T1123] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 477.638616][ T1123] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 477.656331][T29558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6630'. [ 477.667684][T29562] netlink: 'syz.1.6631': attribute type 4 has an invalid length. [ 477.783176][T29567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6634'. [ 478.027413][T29585] nbd: device at index 64 is going down [ 478.040004][T29584] netlink: 'syz.4.6639': attribute type 4 has an invalid length. [ 478.083599][T29584] netlink: 'syz.4.6639': attribute type 4 has an invalid length. [ 478.137454][T25773] udevd[25773]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 478.167677][T29601] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 478.182318][T29601] nbd: couldn't find a device at index 0 [ 478.303597][T29615] No such timeout policy "syz0" [ 478.411057][T29623] syzkaller0: entered promiscuous mode [ 478.422566][T29623] syzkaller0: entered allmulticast mode [ 478.456066][T29625] vlan2: entered allmulticast mode [ 478.511878][T29632] netlink: 'syz.4.6652': attribute type 1 has an invalid length. [ 478.676914][T29655] netlink: 'syz.4.6657': attribute type 1 has an invalid length. [ 478.717503][T29655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.773475][T29667] netlink: 'syz.0.6661': attribute type 1 has an invalid length. [ 478.796775][T29655] bond1: (slave ip6gretap1): making interface the new active one [ 478.817286][T29655] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 478.833141][ T1123] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.868312][T29674] macvtap1: entered promiscuous mode [ 478.877123][T29674] team0: Device macvtap1 failed to register rx_handler [ 478.908398][ T1123] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.924744][ T1123] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.934090][ T1123] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.420249][ T5630] Bluetooth: hci4: command tx timeout [ 481.770043][T29667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 481.783232][T29694] __nla_validate_parse: 11 callbacks suppressed [ 481.783249][T29694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6664'. [ 481.800782][T29694] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6664'. [ 481.812592][T29694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6664'. [ 481.908960][T29717] x_tables: duplicate underflow at hook 1 [ 482.194393][T29756] openvswitch: netlink: IP tunnel TTL not specified. [ 482.206285][T29749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6680'. [ 482.287090][T29759] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6683'. [ 482.324189][T29761] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6684'. [ 482.360079][T29766] netlink: 'syz.1.6686': attribute type 62 has an invalid length. [ 482.384595][T29770] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 482.412236][T29768] syzkaller0: entered promiscuous mode [ 482.420200][T29768] syzkaller0: entered allmulticast mode [ 482.420727][T29759] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6683'. [ 482.457315][T29759] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6683'. [ 482.507420][T29781] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 482.594326][T29793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.610946][T29784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6693'. [ 482.612311][T29794] veth0_to_team: Caught tx_queue_len zero misconfig [ 482.628559][T29795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.732299][T29807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6696'. [ 482.923134][T29822] netlink: 'syz.0.6702': attribute type 11 has an invalid length. [ 483.123307][T29834] bridge_slave_0: left promiscuous mode [ 483.136230][T29834] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.172786][T29834] bridge_slave_1: left allmulticast mode [ 483.186639][T29834] bridge_slave_1: left promiscuous mode [ 483.196914][T29834] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.224521][T29834] bond0: (slave bond_slave_0): Releasing backup interface [ 483.250851][T29834] bond0: (slave bond_slave_1): Releasing backup interface [ 483.286346][T29834] team0: Port device team_slave_0 removed [ 483.297912][T29834] team0: Port device team_slave_1 removed [ 483.306806][T29834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.327534][T29834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.343736][T29834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.353127][T29834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.366328][T29834] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 483.390633][T29860] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.536731][T29872] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 483.556561][T29878] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 483.827376][T29898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 483.958164][T29909] lo: Caught tx_queue_len zero misconfig [ 484.033748][T29911] 8021q: adding VLAN 0 to HW filter on device bond2 [ 484.086718][T29929] nbd: couldn't find a device at index 0 [ 484.252577][T29947] netlink: 'syz.0.6736': attribute type 1 has an invalid length. [ 484.451600][T29963] xt_CT: No such helper "snmp" [ 484.616470][T29993] netlink: 'syz.2.6746': attribute type 1 has an invalid length. [ 484.696561][T29982] bond5: (slave gretap1): making interface the new active one [ 484.705087][T29982] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 484.725218][T29997] veth7: entered promiscuous mode [ 484.730423][T29997] veth7: entered allmulticast mode [ 484.946401][T30022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.181932][T30046] syzkaller0: entered promiscuous mode [ 485.187607][T30046] syzkaller0: entered allmulticast mode [ 485.205939][T30046] tipc: Started in network mode [ 485.211483][T30046] tipc: Node identity e6b8c157b42b, cluster identity 4711 [ 485.218855][T30046] tipc: Enabled bearer , priority 0 [ 485.232183][T30045] tipc: Resetting bearer [ 485.246628][T30045] tipc: Disabling bearer [ 485.386374][T30057] xt_nat: multiple ranges no longer supported [ 485.482139][T30066] syzkaller0: entered promiscuous mode [ 485.487785][T30066] syzkaller0: entered allmulticast mode [ 485.763579][T30093] netlink: 'syz.2.6781': attribute type 10 has an invalid length. [ 485.904747][T30108] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 486.257884][T30153] gretap2: entered promiscuous mode [ 486.297177][T30155] netlink: 'syz.1.6797': attribute type 6 has an invalid length. [ 486.316538][T30155] netlink: 'syz.1.6797': attribute type 5 has an invalid length. [ 486.376776][T30168] netlink: 'syz.2.6801': attribute type 24 has an invalid length. [ 486.499050][T30183] netlink: 'syz.2.6806': attribute type 2 has an invalid length. [ 486.560438][T30188] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 486.571828][T30188] bond2 (unregistering): Released all slaves [ 486.754313][T30213] netlink: 'syz.4.6814': attribute type 1 has an invalid length. [ 486.784411][T30213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 486.816317][T30217] netlink: 'syz.2.6815': attribute type 1 has an invalid length. [ 486.842033][T30217] bond6: entered promiscuous mode [ 486.847580][T30217] 8021q: adding VLAN 0 to HW filter on device bond6 [ 486.907053][T30227] __nla_validate_parse: 26 callbacks suppressed [ 486.907072][T30227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6819'. [ 487.097807][T30245] openvswitch: netlink: IP tunnel dst address not specified [ 487.133530][T30249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6826'. [ 487.178247][T30258] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6829'. [ 487.182980][T30257] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.6828'. [ 487.205272][T30170] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 487.214192][T30170] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 487.232447][T30170] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 487.248351][T30170] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 487.263674][T30263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6831'. [ 487.275297][T30264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6831'. [ 487.284058][T30170] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 487.293305][T30170] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 487.386745][T30275] syzkaller0: entered promiscuous mode [ 487.398792][T30277] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6835'. [ 487.399884][T30275] syzkaller0: entered allmulticast mode [ 487.462024][T30280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6836'. [ 487.683450][T30303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6844'. [ 487.862988][T30231] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 487.977035][T30170] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 487.980424][T30325] : renamed from hsr0 (while UP) [ 487.996065][T30170] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 488.052000][T30331] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6849'. [ 488.327223][T30355] netlink: 'syz.0.6855': attribute type 1 has an invalid length. [ 488.377206][ T7864] IPVS: starting estimator thread 0... [ 488.405462][T30358] IPVS: set_ctl: invalid protocol: 0 172.20.20.45:19999 [ 488.414433][T30361] syzkaller0: entered promiscuous mode [ 488.428698][T30361] syzkaller0: entered allmulticast mode [ 488.479471][T30362] IPVS: using max 45 ests per chain, 108000 per kthread [ 488.724646][T30394] netlink: 'syz.3.6867': attribute type 1 has an invalid length. [ 488.778905][T30394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.925746][T30394] bond1: (slave geneve2): making interface the new active one [ 488.984809][T30394] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 488.989836][T30416] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 489.184316][T30439] netlink: 'syz.1.6877': attribute type 1 has an invalid length. [ 489.483926][T30472] tipc: Failed to remove unknown binding: 66,1,1/0:1117051843/1117051845 [ 489.896062][T30495] nbd: must specify at least one socket [ 489.911392][T30495] netlink: 'syz.0.6889': attribute type 1 has an invalid length. [ 490.803275][T30582] syzkaller0: entered promiscuous mode [ 490.816348][T30582] syzkaller0: entered allmulticast mode [ 490.977360][T30603] bond8: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 490.998016][T30603] bond8 (unregistering): Released all slaves [ 491.279724][T30621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.303582][T30622] tipc: Enabled bearer , priority 0 [ 491.334868][T30622] syzkaller0: entered promiscuous mode [ 491.345294][T30622] syzkaller0: entered allmulticast mode [ 491.363509][T30622] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 491.391300][T30622] tipc: Resetting bearer [ 491.406798][T30622] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 491.445142][T30620] tipc: Resetting bearer [ 491.485914][T30620] tipc: Disabling bearer [ 491.955884][T30665] bond3: entered promiscuous mode [ 491.962793][T30672] netlink: 'syz.0.6934': attribute type 49 has an invalid length. [ 491.963035][T30665] 8021q: adding VLAN 0 to HW filter on device bond3 [ 492.013954][T30676] xt_socket: unknown flags 0x8 [ 492.023882][T30680] netlink: 'syz.0.6934': attribute type 19 has an invalid length. [ 492.054801][T30665] 8021q: adding VLAN 0 to HW filter on device bond3 [ 492.095219][T30665] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 492.131202][T30665] bond3: (slave sit1): Error -95 calling set_mac_address [ 492.139119][T30692] netlink: 'syz.1.6939': attribute type 24 has an invalid length. [ 492.195284][T30692] pimreg3: entered allmulticast mode [ 492.256146][T30698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.368463][T30705] geneve3: entered promiscuous mode [ 492.398019][T30705] __nla_validate_parse: 22 callbacks suppressed [ 492.398038][T30705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6943'. [ 492.468137][T30717] tipc: Started in network mode [ 492.498595][T30717] tipc: Node identity ac14140f, cluster identity 4711 [ 492.506492][T30717] tipc: New replicast peer: 255.255.255.255 [ 492.514609][T30717] tipc: Enabled bearer , priority 10 [ 492.603406][T30733] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6954'. [ 492.686610][T30740] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6956'. [ 492.721539][T30740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6956'. [ 492.734090][T30753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6960'. [ 492.786179][ T14] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.800119][T30753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6960'. [ 492.808111][T30757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6961'. [ 492.818706][ T14] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.838826][T30757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6961'. [ 492.845785][ T14] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.851682][T30757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6961'. [ 492.888118][T30771] netlink: 'syz.2.6964': attribute type 1 has an invalid length. [ 492.893925][ T14] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.896928][T30757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6961'. [ 493.105124][T30803] netlink: 'syz.0.6969': attribute type 1 has an invalid length. [ 493.112005][T30791] netlink: 'syz.0.6969': attribute type 1 has an invalid length. [ 493.418735][T30834] netlink: zone id is out of range [ 493.433493][T30834] netlink: zone id is out of range [ 493.454479][T30834] netlink: zone id is out of range [ 493.467562][T30834] netlink: zone id is out of range [ 493.488243][T30834] netlink: zone id is out of range [ 493.505081][T30834] netlink: zone id is out of range [ 493.513616][T30834] netlink: zone id is out of range [ 493.518982][T30834] netlink: zone id is out of range [ 493.527714][T30834] netlink: zone id is out of range [ 493.691540][ T5710] tipc: Node number set to 2886997007 [ 493.697369][T30848] netlink: 'syz.3.6985': attribute type 26 has an invalid length. [ 494.242624][T30886] syzkaller1: entered promiscuous mode [ 494.256189][T30886] syzkaller1: entered allmulticast mode [ 494.314700][T30900] syzkaller0: entered promiscuous mode [ 494.499635][T30919] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 494.705775][T30953] netlink: 'syz.4.7016': attribute type 1 has an invalid length. [ 494.745102][T30949] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 494.802416][T30953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 494.810944][T30961] ip_vti0: entered promiscuous mode [ 494.955453][T30974] netlink: 'syz.4.7023': attribute type 1 has an invalid length. [ 494.969923][T30974] netlink: 'syz.4.7023': attribute type 7 has an invalid length. [ 494.978154][T30974] netlink: 'syz.4.7023': attribute type 8 has an invalid length. [ 494.987526][T30974] NCSI netlink: No device for ifindex 65584 [ 494.997599][T30975] tipc: Started in network mode [ 495.007258][T30975] tipc: Node identity , cluster identity 4711 [ 495.096733][T30983] ip6tnl0: Caught tx_queue_len zero misconfig [ 495.218154][T30998] tunl0: entered promiscuous mode [ 495.238359][T30998] netlink: 'syz.1.7032': attribute type 4 has an invalid length. [ 495.437935][T31018] tipc: Enabled bearer , priority 0 [ 495.446016][T31018] syzkaller0: entered promiscuous mode [ 495.460028][T31018] syzkaller0: entered allmulticast mode [ 495.486727][T31018] tipc: Resetting bearer [ 495.543599][T31027] bond5: (slave ip6_vti0): Device is not bonding slave [ 495.551851][T31027] bond5: option active_slave: invalid value (ip6_vti0) [ 495.561267][T31027] bond5 (unregistering): Released all slaves [ 495.708621][T31045] netlink: 'syz.3.7044': attribute type 97 has an invalid length. [ 495.833574][T31055] netlink: 'syz.3.7048': attribute type 1 has an invalid length. [ 495.841632][T31055] netlink: 'syz.3.7048': attribute type 2 has an invalid length. [ 495.915083][T31064] netlink: 'syz.4.7051': attribute type 5 has an invalid length. [ 495.955309][T31064] geneve4: entered promiscuous mode [ 495.962503][T31064] geneve4: entered allmulticast mode [ 495.973032][ T14] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 495.990663][ T14] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 496.001103][ T14] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 496.016909][ T14] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 496.187673][T31013] tipc: Resetting bearer [ 496.208022][T31013] tipc: Disabling bearer [ 496.358561][T31105] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 1, id = 0 [ 496.492338][T31115] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 496.588413][T31119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 496.604119][T31122] vlan3: entered promiscuous mode [ 496.610212][T31122] bond2: entered promiscuous mode [ 496.616495][T31122] vlan3: entered allmulticast mode [ 496.637166][T31122] bond2: entered allmulticast mode [ 496.801864][T31137] syzkaller0: entered promiscuous mode [ 496.807565][T31137] syzkaller0: entered allmulticast mode [ 496.815928][T31136] bridge0: Device is already in use. [ 497.067377][T31161] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 497.078971][T31161] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 497.092860][T31161] bond5: (slave ip6gre1): making interface the new active one [ 497.111863][T31161] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 497.225392][T31171] 8021q: adding VLAN 0 to HW filter on device bond6 [ 497.267630][T31171] bond6: (slave veth11): Enslaving as an active interface with a down link [ 497.292258][T31171] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 497.300190][T31171] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 497.510499][ T5630] block nbd3: Receive control failed (result -32) [ 497.648701][T31216] __nla_validate_parse: 57 callbacks suppressed [ 497.648722][T31216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7101'. [ 497.702572][T31221] syzkaller1: entered promiscuous mode [ 497.708541][T31221] syzkaller1: entered allmulticast mode [ 497.723444][T31221] ipt_REJECT: ECHOREPLY no longer supported. [ 497.858391][T31238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7110'. [ 498.328131][T31274] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20004 [ 498.353509][T31276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7122'. [ 498.373955][T31274] netlink: 212 bytes leftover after parsing attributes in process `syz.2.7121'. [ 498.414293][T31281] net_ratelimit: 48 callbacks suppressed [ 498.414311][T31281] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 498.489401][T31281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.593794][T31297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7127'. [ 498.782324][T31316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7135'. [ 498.792217][T31316] openvswitch: netlink: Flow actions attr not present in new flow. [ 498.891515][T31328] xt_hashlimit: size too large, truncated to 1048576 [ 499.035859][T31341] batadv1: entered allmulticast mode [ 499.054354][T31347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7142'. [ 499.088510][T31348] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 499.103533][T31348] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 499.115048][T31351] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7144'. [ 499.124680][T31348] gretap3: entered promiscuous mode [ 499.137218][T31348] gretap3: entered allmulticast mode [ 499.148573][T31347] validate_nla: 10 callbacks suppressed [ 499.148591][T31347] netlink: 'syz.1.7142': attribute type 3 has an invalid length. [ 499.163787][T31350] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7144'. [ 499.301801][T31365] netlink: 'syz.1.7147': attribute type 1 has an invalid length. [ 499.337288][T31368] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7148'. [ 499.378004][T31365] 8021q: adding VLAN 0 to HW filter on device bond3 [ 499.425272][T31365] bond3: entered promiscuous mode [ 499.446898][T31365] bond3: entered allmulticast mode [ 499.535250][T31380] syz.4.7151: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 499.580208][T31380] CPU: 1 UID: 0 PID: 31380 Comm: syz.4.7151 Not tainted syzkaller #0 PREEMPT(full) [ 499.580232][T31380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 499.580251][T31380] Call Trace: [ 499.580263][T31380] [ 499.580271][T31380] dump_stack_lvl+0xe8/0x150 [ 499.580296][T31380] warn_alloc+0x249/0x340 [ 499.580321][T31380] ? __pfx_stack_trace_save+0x10/0x10 [ 499.580345][T31380] ? __pfx_warn_alloc+0x10/0x10 [ 499.580371][T31380] ? __kasan_kmalloc+0x93/0xb0 [ 499.580390][T31380] ? __kmalloc_cache_noprof+0x318/0x660 [ 499.580409][T31380] ? xskq_create+0x56/0x170 [ 499.580428][T31380] ? xsk_init_queue+0x8a/0xe0 [ 499.580446][T31380] ? xsk_setsockopt+0x52a/0x960 [ 499.580463][T31380] ? do_sock_setsockopt+0x17c/0x1b0 [ 499.580486][T31380] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 499.580507][T31380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.580527][T31380] __vmalloc_node_range_noprof+0x12c/0x1730 [ 499.580562][T31380] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 499.580585][T31380] ? __kasan_kmalloc+0x93/0xb0 [ 499.580609][T31380] vmalloc_user_noprof+0xad/0xe0 [ 499.580630][T31380] ? xskq_create+0xbf/0x170 [ 499.580663][T31380] xskq_create+0xbf/0x170 [ 499.580685][T31380] xsk_init_queue+0x8a/0xe0 [ 499.580705][T31380] xsk_setsockopt+0x52a/0x960 [ 499.580725][T31380] ? __pfx_xsk_setsockopt+0x10/0x10 [ 499.580743][T31380] ? __pfx_aa_sk_perm+0x10/0x10 [ 499.580860][T31380] ? lock_release+0x4b/0x3c0 [ 499.580884][T31380] ? aa_sock_opt_perm+0xff/0x1a0 [ 499.580911][T31380] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 499.580933][T31380] ? __pfx_xsk_setsockopt+0x10/0x10 [ 499.580952][T31380] do_sock_setsockopt+0x17c/0x1b0 [ 499.580978][T31380] __x64_sys_setsockopt+0x13d/0x1b0 [ 499.581002][T31380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.581020][T31380] do_syscall_64+0x174/0x580 [ 499.581041][T31380] ? trace_irq_disable+0x3b/0x140 [ 499.581063][T31380] ? clear_bhb_loop+0x40/0x90 [ 499.581081][T31380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.581104][T31380] RIP: 0033:0x7f2cfad9ce59 [ 499.581120][T31380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.581135][T31380] RSP: 002b:00007f2cf8ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 499.581154][T31380] RAX: ffffffffffffffda RBX: 00007f2cfb015fa0 RCX: 00007f2cfad9ce59 [ 499.581166][T31380] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 499.581177][T31380] RBP: 00007f2cfae32e6f R08: 0000000000000004 R09: 0000000000000000 [ 499.581188][T31380] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.581200][T31380] R13: 00007f2cfb016038 R14: 00007f2cfb015fa0 R15: 00007ffea48b7f28 [ 499.581219][T31380] [ 499.581252][T31380] Mem-Info: [ 499.665228][T31376] netlink: 'syz.3.7150': attribute type 1 has an invalid length. [ 499.796909][T31380] active_anon:6767 inactive_anon:0 isolated_anon:0 [ 499.796909][T31380] active_file:2885 inactive_file:40117 isolated_file:0 [ 499.796909][T31380] unevictable:768 dirty:88 writeback:0 [ 499.796909][T31380] slab_reclaimable:14635 slab_unreclaimable:149001 [ 499.796909][T31380] mapped:29516 shmem:1296 pagetables:1606 [ 499.796909][T31380] sec_pagetables:0 bounce:0 [ 499.796909][T31380] kernel_misc_reclaimable:0 [ 499.796909][T31380] free:1253862 free_pcp:19505 free_cma:0 [ 500.001174][T31380] Node 0 active_anon:27040kB inactive_anon:0kB active_file:11540kB inactive_file:160260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101704kB dirty:380kB writeback:0kB shmem:3648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18852kB pagetables:5980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 500.058848][T31380] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16384kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 500.097324][T31380] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 500.129764][T31380] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 500.130642][T31403] xt_CT: You must specify a L4 protocol and not use inversions on it [ 500.135685][T31380] Node 0 DMA32 free:1133860kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27040kB inactive_anon:0kB active_file:11540kB inactive_file:160260kB unevictable:1536kB writepending:380kB zspages:0kB present:3129332kB managed:2552584kB mlocked:0kB bounce:0kB free_pcp:42784kB local_pcp:21316kB free_cma:0kB [ 500.180321][T31380] lowmem_reserve[]: 0 0 0 0 0 [ 500.201317][T31380] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 500.232007][T31380] lowmem_reserve[]: 0 0 0 0 0 [ 500.236777][T31380] Node 1 Normal free:3870532kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:36544kB local_pcp:28352kB free_cma:0kB [ 500.272323][T31380] lowmem_reserve[]: 0 0 0 0 0 [ 500.278042][T31380] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 500.294745][T31380] Node 0 DMA32: 9401*4kB (UM) 6762*8kB (UME) 3253*16kB (UM) 155*32kB (UM) 49*64kB (UM) 422*128kB (UM) 544*256kB (UME) 382*512kB (UME) 268*1024kB (UE) 156*2048kB (UM) 0*4096kB = 1134628kB [ 500.316864][T31380] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 500.329410][T31380] Node 1 Normal: 2*4kB (UM) 10*8kB (UM) 16*16kB (UM) 9*32kB (UM) 6*64kB (UM) 5*128kB (UM) 5*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 4*2048kB (U) 941*4096kB (UM) = 3870584kB [ 500.348180][T31380] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.358510][T31380] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 500.368927][T31380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.379507][T31380] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 500.389102][T31380] 44294 total pagecache pages [ 500.396287][T31398] netlink: 'syz.1.7156': attribute type 29 has an invalid length. [ 500.400996][T31380] 0 pages in swap cache [ 500.408967][T31380] Free swap = 124996kB [ 500.414779][T31403] netlink: 'syz.1.7156': attribute type 29 has an invalid length. [ 500.422725][T31380] Total swap = 124996kB [ 500.422741][T31380] 2097051 pages RAM [ 500.422749][T31380] 0 pages HighMem/MovableOnly [ 500.422756][T31380] 427124 pages reserved [ 500.422762][T31380] 0 pages cma reserved [ 500.494450][T31406] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 500.643421][T31417] syzkaller0: entered promiscuous mode [ 500.652088][T31417] syzkaller0: entered allmulticast mode [ 500.712544][T31421] ip6t_srh: unknown srh invflags 4000 [ 500.765225][T31426] syzkaller1: entered promiscuous mode [ 500.773229][T31426] syzkaller1: entered allmulticast mode [ 500.843781][T31435] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 501.327632][T31461] netlink: 'syz.4.7180': attribute type 1 has an invalid length. [ 501.461206][T31480] netlink: 'syz.1.7184': attribute type 2 has an invalid length. [ 501.560923][T31487] netlink: 'syz.0.7187': attribute type 13 has an invalid length. [ 501.565151][T31493] netlink: 'syz.1.7188': attribute type 21 has an invalid length. [ 501.573645][T31490] syzkaller0: entered promiscuous mode [ 501.587386][T31490] syzkaller0: entered allmulticast mode [ 501.693643][T31503] syzkaller0: entered promiscuous mode [ 501.700317][T31503] syzkaller0: entered allmulticast mode [ 501.714599][T31503] netlink: 'syz.1.7194': attribute type 5 has an invalid length. [ 501.808389][T31521] IPv6: NLM_F_CREATE should be specified when creating new route [ 501.887704][T31527] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 501.993984][T31532] netlink: Unknown conntrack attr (0) [ 502.306021][T31562] 8021q: adding VLAN 0 to HW filter on device bond5 [ 502.322817][T31562] gretap1: entered promiscuous mode [ 502.333990][T31562] bond5: (slave gretap1): making interface the new active one [ 502.343499][T31562] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 502.354369][T31567] team_slave_1: entered promiscuous mode [ 502.365803][T31567] team0: Port device team_slave_1 removed [ 502.420017][T31569] syzkaller0: entered promiscuous mode [ 502.425806][T31569] syzkaller0: entered allmulticast mode [ 502.600622][T31576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 502.752021][T31585] bond1: (slave veth3): Enslaving as an active interface with a down link [ 502.847978][T31576] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 502.911747][T31594] bond1: (slave veth5): Enslaving as an active interface with a down link [ 502.924411][T31577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.134302][T31628] __nla_validate_parse: 24 callbacks suppressed [ 503.134318][T31628] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7228'. [ 503.153465][T31628] 8021q: VLANs not supported on gre0 [ 503.265592][T31640] ip6t_srh: unknown srh invflags 4000 [ 503.440250][T31649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7233'. [ 503.555442][T31657] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7236'. [ 503.617139][T31667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7239'. [ 503.627385][T31667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7239'. [ 503.638449][T31667] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7239'. [ 503.649396][T31668] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7239'. [ 503.808675][T31678] tun0: tun_chr_ioctl cmd 1074025675 [ 503.824366][T31678] tun0: persist enabled [ 503.992577][T31690] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.008999][T31690] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 504.017387][T31710] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7249'. [ 504.054812][T31710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7249'. [ 504.085634][T31690] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.100987][T31716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7250'. [ 504.102044][T31705] IPVS: set_ctl: invalid protocol: 51 172.20.20.17:20000 [ 504.125967][T31705] IPVS: set_ctl: invalid protocol: 51 172.20.20.17:20000 [ 504.127506][T31690] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 504.135004][T31705] IPVS: set_ctl: invalid protocol: 51 172.20.20.17:20000 [ 504.163006][T31720] validate_nla: 5 callbacks suppressed [ 504.163023][T31720] netlink: 'syz.2.7251': attribute type 1 has an invalid length. [ 504.200208][T31716] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 504.295854][T31722] bond3: option all_slaves_active: invalid value (222) [ 504.317911][T31722] bond3 (unregistering): Released all slaves [ 504.405454][T31690] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.431069][T31690] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 504.486993][T31738] vlan0: entered promiscuous mode [ 504.498759][T31738] bridge0: entered promiscuous mode [ 504.538996][T31740] team0: entered promiscuous mode [ 504.548366][T31740] team0: entered allmulticast mode [ 504.557768][T31742] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 504.591082][T31690] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.601131][T31742] openvswitch: netlink: IP tunnel dst address not specified [ 504.612868][T31690] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 504.727046][ T14] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 504.740998][ T14] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 504.759948][ T14] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 504.778980][ T14] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 504.808189][T31756] netlink: 'syz.0.7259': attribute type 5 has an invalid length. [ 504.816194][ T14] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 504.816225][ T14] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 504.816256][ T14] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 504.816277][ T14] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 504.983783][T31774] netlink: 'syz.0.7266': attribute type 1 has an invalid length. [ 505.035739][T31774] 8021q: adding VLAN 0 to HW filter on device bond2 [ 505.089471][T31782] bond2: (slave geneve2): making interface the new active one [ 505.117917][T31782] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 505.140871][T31790] netlink: 'syz.3.7270': attribute type 1 has an invalid length. [ 505.150048][T31781] bond0: (slave gre0): refused to change device type [ 505.390483][T31797] gretap0: entered promiscuous mode [ 505.399484][T31797] vlan4: entered promiscuous mode [ 505.626201][T31821] netlink: 'syz.3.7276': attribute type 7 has an invalid length. [ 505.908614][T31837] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 505.935548][T31837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.031893][T31844] netlink: 'syz.3.7285': attribute type 13 has an invalid length. [ 506.071937][T31849] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 506.148201][T31853] openvswitch: netlink: IP tunnel dst address not specified [ 506.537532][T31886] veth1_to_team: entered promiscuous mode [ 506.576480][T31886] gretap0: entered promiscuous mode [ 506.613407][T31886] debugfs: 'hsr0' already exists in 'hsr' [ 506.631981][T31886] Cannot create hsr debugfs directory [ 506.644593][T31886] hsr0: entered promiscuous mode [ 506.673347][T31894] netlink: 'syz.3.7302': attribute type 1 has an invalid length. [ 506.681153][T31897] netlink: 'syz.4.7303': attribute type 1 has an invalid length. [ 506.723363][T31897] netlink: 'syz.4.7303': attribute type 1 has an invalid length. [ 506.725999][T31894] bond3: entered promiscuous mode [ 506.737343][T31894] 8021q: adding VLAN 0 to HW filter on device bond3 [ 506.760971][T31894] bond3: (slave bridge1): making interface the new active one [ 506.772269][T31894] bridge1: entered promiscuous mode [ 506.780436][T31894] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 506.847791][T31895] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 507.147030][T31935] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 507.425909][T31961] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 507.445920][T31963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.468139][T31961] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 507.552827][T31968] 0: reclassify loop, rule prio 0, protocol 700 [ 507.640813][T30109] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.670713][T30109] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.688275][T31977] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 507.723786][T31983] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 507.735860][T31983] bond3 (unregistering): Released all slaves [ 507.761914][T30109] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.781707][T30109] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.907384][T32002] netlink: 'syz.4.7326': attribute type 1 has an invalid length. [ 507.992470][T32002] bond7: entered promiscuous mode [ 507.997948][T32002] 8021q: adding VLAN 0 to HW filter on device bond7 [ 508.042458][T31989] 8021q: adding VLAN 0 to HW filter on device bond7 [ 508.050430][T31989] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 508.062396][T31989] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 508.084687][T31989] bond7: (slave ip6gre2): making interface the new active one [ 508.094143][T31989] ip6gre2: entered promiscuous mode [ 508.102517][T31989] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 508.166853][T32028] lo: entered promiscuous mode [ 508.180918][T32028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.198089][T32028] __nla_validate_parse: 30 callbacks suppressed [ 508.198102][T32028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7333'. [ 508.228143][T32031] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 511.821338][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 534.278645][T32064] syzkaller0: entered promiscuous mode [ 534.286449][T32064] syzkaller0: entered allmulticast mode [ 534.382994][T32076] syzkaller0: entered promiscuous mode [ 534.388598][T32076] syzkaller0: entered allmulticast mode [ 534.396916][T32076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7346'. [ 534.826536][T32127] ±ÿ: Caught tx_queue_len zero misconfig [ 535.033784][T32145] tipc: Enabled bearer , priority 0 [ 535.048820][T32145] syzkaller0: entered promiscuous mode [ 535.060308][T32145] syzkaller0: entered allmulticast mode [ 535.084882][T32145] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 535.106705][T32145] tipc: Resetting bearer [ 535.125104][T32144] tipc: Resetting bearer [ 535.137207][T32144] tipc: Disabling bearer [ 535.215337][T32156] validate_nla: 1 callbacks suppressed [ 535.215355][T32156] netlink: 'syz.4.7373': attribute type 7 has an invalid length. [ 535.230605][T32156] netlink: 'syz.4.7373': attribute type 5 has an invalid length. [ 535.238591][T32156] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7373'. [ 535.307850][T32164] tipc: Enabled bearer , priority 24 [ 535.359384][T32171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7379'. [ 535.405134][T32171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7379'. [ 535.435853][T32171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7379'. [ 535.528408][T32186] team0: Port device team_slave_0 removed [ 535.564998][T32186] team0: Port device team_slave_1 removed [ 535.588661][T32186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.607231][T32186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.617481][T32186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.653618][T32186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.673354][T32186] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 535.786099][T32209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7392'. [ 535.868038][T32217] netlink: 'syz.3.7395': attribute type 1 has an invalid length. [ 535.934612][T32221] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7396'. [ 535.944478][T32221] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7396'. [ 535.993486][T32235] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 536.063376][T32246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7403'. [ 536.093418][T32246] bond9: entered promiscuous mode [ 536.099039][T32246] 8021q: adding VLAN 0 to HW filter on device bond9 [ 536.123696][T32238] syzkaller0: entered promiscuous mode [ 536.129285][T32238] syzkaller0: entered allmulticast mode [ 536.142831][T32246] 8021q: adding VLAN 0 to HW filter on device bond9 [ 536.151068][T32246] bond9: (slave sit1): The slave device specified does not support setting the MAC address [ 536.162517][T32246] bond9: (slave sit1): Error -95 calling set_mac_address [ 536.180657][T32251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7403'. [ 536.301019][ T7870] tipc: Node number set to 119577335 [ 536.373287][T32260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.396668][T32260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.424011][T32260] bond0 (unregistering): (slave team0): Releasing backup interface [ 536.438698][T32260] bond0 (unregistering): Released all slaves [ 536.586209][T32274] dvmrp0: entered allmulticast mode [ 536.608741][T32283] xt_TPROXY: Can be used only with -p tcp or -p udp [ 536.645149][T32287] syzkaller1: entered promiscuous mode [ 536.677103][T32287] syzkaller1: entered allmulticast mode [ 536.716814][T32296] netlink: 'syz.2.7420': attribute type 2 has an invalid length. [ 536.881515][T32317] tipc: Enabling of bearer rejected, failed to enable media [ 536.898381][T32321] SET target dimension over the limit! [ 536.992498][T32328] syzkaller0: entered promiscuous mode [ 537.006462][T32328] syzkaller0: entered allmulticast mode [ 537.055736][T32331] netlink: set zone limit has 4 unknown bytes [ 537.073853][T32331] netlink: zone id is out of range [ 537.082779][T32328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.087306][T32331] netlink: zone id is out of range [ 537.110384][T32328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.132722][T32328] bond0 (unregistering): Released all slaves [ 537.328902][T32344] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 537.353615][T32344] hsr0: left promiscuous mode [ 537.462753][T30114] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.472344][T30114] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.482001][T30114] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.491603][T30114] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.501315][T30114] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.521205][T30114] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.544466][T30114] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.555524][T30114] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.653392][T32370] syzkaller0: entered promiscuous mode [ 537.668537][T32370] syzkaller0: entered allmulticast mode [ 537.955376][T32401] syzkaller0: entered promiscuous mode [ 537.968315][T32401] syzkaller0: entered allmulticast mode [ 538.165823][T32422] syzkaller0: entered promiscuous mode [ 538.179538][T32422] syzkaller0: entered allmulticast mode [ 538.246655][T32423] syzkaller0: entered promiscuous mode [ 538.260958][T32423] syzkaller0: entered allmulticast mode [ 538.281948][T32423] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 538.303753][T32423] netlink: 'syz.2.7457': attribute type 2 has an invalid length. [ 538.313929][T32423] netlink: 'syz.2.7457': attribute type 2 has an invalid length. [ 538.520843][T32454] syzkaller0: entered promiscuous mode [ 538.596585][T32469] tunl0: left promiscuous mode [ 538.622153][T32469] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 538.708724][T32487] netlink: 'syz.0.7475': attribute type 8 has an invalid length. [ 538.881422][T32506] sctp: [Deprecated]: syz.1.7480 (pid 32506) Use of struct sctp_assoc_value in delayed_ack socket option. [ 538.881422][T32506] Use struct sctp_sack_info instead [ 538.915335][T32501] IPVS: Unknown mcast interface: vcan0 [ 538.978543][T32508] syzkaller0: entered promiscuous mode [ 538.992345][T32508] syzkaller0: entered allmulticast mode [ 539.005017][T32513] netlink: 'syz.2.7483': attribute type 26 has an invalid length. [ 539.155774][T32526] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 539.212328][T32534] netlink: 'syz.0.7491': attribute type 1 has an invalid length. [ 539.306004][T32536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.370229][T32548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.386698][T32548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.403729][T32552] tun0: tun_chr_ioctl cmd 1074025675 [ 539.409095][T32552] tun0: persist disabled [ 539.544805][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.549873][T32558] __nla_validate_parse: 46 callbacks suppressed [ 539.549892][T32558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7500'. [ 539.552305][T32566] IPv6: NLM_F_CREATE should be set when creating new route [ 539.575162][T32566] IPv6: NLM_F_CREATE should be set when creating new route [ 539.584856][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.620507][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.659027][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.697791][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.713991][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.721930][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.730729][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.733248][T32586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7505'. [ 539.738531][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.756397][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.765771][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.773722][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.782841][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.790879][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.798663][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.807976][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.820116][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.828013][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.837169][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.845469][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.854030][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.862551][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.876294][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.884482][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.892997][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.901777][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.909763][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.917275][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.932277][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.942508][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.950800][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.958388][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.966483][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.974396][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.983374][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.990886][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.001218][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.008634][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.017042][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.025412][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.033418][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.042318][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.050665][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.058411][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.067161][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.075861][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.082920][T32604] Unsupported ieee802154 address type: 0 [ 540.083812][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.097407][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.105734][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.113587][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.121500][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.129043][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.137371][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.150372][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.157904][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.166389][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.174392][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.182579][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.190909][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.198367][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.206443][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.214262][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.222371][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.230287][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.237887][T32566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.283254][T32607] netlink: 'syz.1.7510': attribute type 1 has an invalid length. [ 540.333490][T32607] 8021q: adding VLAN 0 to HW filter on device bond6 [ 540.363590][T32612] netlink: 'syz.3.7512': attribute type 10 has an invalid length. [ 540.512733][T32631] netlink: 'syz.4.7518': attribute type 8 has an invalid length. [ 540.525235][T32631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7518'. [ 540.540361][T32631] veth1_to_team: entered promiscuous mode [ 540.548166][T32631] gretap0: entered promiscuous mode [ 540.555950][T32631] veth1_to_team: left promiscuous mode [ 540.570930][T32631] gretap0: left promiscuous mode [ 540.646822][T32641] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7522'. [ 540.683643][T32638] netlink: 'syz.1.7521': attribute type 21 has an invalid length. [ 540.685505][T32641] vlan5: entered allmulticast mode [ 540.697443][T32641] erspan0: entered allmulticast mode [ 540.720849][T32638] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7521'. [ 540.853371][T32664] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7529'. [ 540.975399][T32668] netlink: 'syz.3.7530': attribute type 11 has an invalid length. [ 540.994475][T32668] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7530'. [ 541.303595][T32712] IPv6: addrconf: prefix option has invalid lifetime [ 541.393530][T32724] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 541.397237][T32723] netlink: 216 bytes leftover after parsing attributes in process `syz.0.7543'. [ 541.431031][T32723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7543'. [ 541.443715][T32723] syzkaller0: entered promiscuous mode [ 541.457635][T32723] syzkaller0: entered allmulticast mode [ 541.547029][T32738] netlink: 'syz.4.7550': attribute type 10 has an invalid length. [ 541.613182][T32746] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7552'. [ 541.632338][T32751] netlink: 'syz.0.7553': attribute type 1 has an invalid length. [ 541.656271][T32751] 8021q: adding VLAN 0 to HW filter on device bond3 [ 541.686089][T32751] bond3: (slave veth7): Enslaving as an active interface with a down link [ 541.696854][T32754] tipc: Enabled bearer , priority 0 [ 541.711562][T32751] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 541.718633][T32751] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 541.770648][T32754] syzkaller0: entered promiscuous mode [ 541.776395][T32754] syzkaller0: entered allmulticast mode [ 541.783108][T32754] tipc: Resetting bearer [ 541.793457][T32756] syzkaller0: entered promiscuous mode [ 541.799367][T32756] syzkaller0: entered allmulticast mode [ 541.810648][T32754] netlink: 'syz.2.7554': attribute type 1 has an invalid length. [ 541.826061][T32753] tipc: Resetting bearer [ 541.874156][T32753] tipc: Disabling bearer [ 541.938011][T32763] syzkaller1: entered promiscuous mode [ 541.946312][T32763] syzkaller1: entered allmulticast mode [ 541.978506][T32767] macvlan0: entered promiscuous mode [ 542.135446][ T317] ip6tnl0: Caught tx_queue_len zero misconfig [ 542.218928][ T326] veth1_to_bond: entered allmulticast mode [ 542.255385][ T326] veth1_to_bond (unregistering): left allmulticast mode [ 542.478288][ T355] sctp: [Deprecated]: syz.0.7573 (pid 355) Use of int in max_burst socket option deprecated. [ 542.478288][ T355] Use struct sctp_assoc_value instead [ 542.729019][ T380] syzkaller0: entered promiscuous mode [ 542.735455][ T380] syzkaller0: entered allmulticast mode [ 542.856918][ T383] syz_tun: refused to change device tx_queue_len [ 542.866621][ T383] syz_tun: refused to change device tx_queue_len [ 542.896681][ T387] netlink: 'syz.0.7584': attribute type 1 has an invalid length. [ 542.924622][ T387] 8021q: adding VLAN 0 to HW filter on device bond5 [ 542.995256][ T392] netlink: 'syz.4.7586': attribute type 8 has an invalid length. [ 543.251939][ T422] netlink: 'syz.2.7598': attribute type 1 has an invalid length. [ 543.300872][ T422] 8021q: adding VLAN 0 to HW filter on device bond10 [ 543.545660][ T452] bond0: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 543.568855][ T452] bond0 (unregistering): Released all slaves [ 543.693126][ T470] team_slave_1: Caught tx_queue_len zero misconfig [ 543.756696][ T480] sctp: [Deprecated]: syz.2.7612 (pid 480) Use of int in maxseg socket option. [ 543.756696][ T480] Use struct sctp_assoc_value instead [ 543.826507][ T490] IPVS: length: 196 != 24 [ 544.164891][ T518] veth1_to_bond: entered allmulticast mode [ 544.194751][ T519] veth1_to_bond: entered promiscuous mode [ 544.241779][ T523] veth1_to_bond (unregistering): left allmulticast mode [ 544.255512][ T523] veth1_to_bond (unregistering): left promiscuous mode [ 544.347865][ T533] smc: removing net device team0 with user defined pnetid SYZ2 [ 544.390394][ T533] team0 (unregistering): Port device team_slave_0 removed [ 544.525608][ T554] IPv6: sit1: Disabled Multicast RS [ 544.675739][ T575] __nla_validate_parse: 25 callbacks suppressed [ 544.675757][ T575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7641'. [ 544.706205][ T577] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 544.877291][ T594] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7645'. [ 544.900873][T10662] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.913997][T10662] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 544.933153][T10662] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.945487][ T29] audit: type=1804 audit(1782337546.950:18): pid=596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7644" name="/newroot/227/cgroup.controllers" dev="tmpfs" ino=1171 res=1 errno=0 [ 544.984929][T10662] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 545.000133][ T29] audit: type=1800 audit(1782337546.950:19): pid=596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7644" name="cgroup.controllers" dev="tmpfs" ino=1171 res=0 errno=0 [ 545.052249][ T588] geneve3: entered promiscuous mode [ 545.072116][ T588] geneve3: entered allmulticast mode [ 545.136597][T10662] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.171026][T10662] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 545.201809][T10662] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 545.289702][ T605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.323745][T10662] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.347299][T10662] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 545.357542][T10662] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 545.367862][T10662] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 545.411122][T10662] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 545.536842][ T627] vlan3: entered allmulticast mode [ 545.592898][ T638] validate_nla: 6 callbacks suppressed [ 545.592916][ T638] netlink: 'syz.2.7655': attribute type 1 has an invalid length. [ 545.608351][ T633] tipc: Enabled bearer , priority 10 [ 545.629751][ T642] ±ÿ: entered allmulticast mode [ 545.637909][ T642] ±ÿ: left allmulticast mode [ 545.651719][ T643] Cannot find del_set index 4 as target [ 545.675337][ T642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7656'. [ 545.798767][ T656] geneve3: entered promiscuous mode [ 545.815550][T10663] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 52320 - 0 [ 545.820964][ T659] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7662'. [ 545.839505][T10663] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 52320 - 0 [ 545.883902][T10663] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 52320 - 0 [ 545.893373][ T667] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.7665'. [ 545.900941][ T664] xt_CT: No such helper "snmp_trap" [ 545.908393][T10663] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 52320 - 0 [ 545.971468][ T677] sctp: [Deprecated]: syz.0.7665 (pid 677) Use of struct sctp_assoc_value in delayed_ack socket option. [ 545.971468][ T677] Use struct sctp_sack_info instead [ 546.015881][ T686] sctp: [Deprecated]: syz.4.7668 (pid 686) Use of int in max_burst socket option. [ 546.015881][ T686] Use struct sctp_assoc_value instead [ 546.163603][ T699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7671'. [ 546.268425][ T710] bridge5: entered promiscuous mode [ 546.276756][ T710] bridge5: entered allmulticast mode [ 546.285743][ T710] team0: Port device bridge5 added [ 546.292308][ T710] bridge0: port 3(team0) entered blocking state [ 546.298881][ T710] bridge0: port 3(team0) entered disabled state [ 546.306469][ T710] team0: entered allmulticast mode [ 546.312399][ T710] team_slave_0: entered allmulticast mode [ 546.318150][ T710] team_slave_1: entered allmulticast mode [ 546.325547][ T710] team0: entered promiscuous mode [ 546.331479][ T710] team_slave_0: entered promiscuous mode [ 546.337261][ T710] team_slave_1: entered promiscuous mode [ 546.433889][ T725] netlink: 'syz.3.7678': attribute type 1 has an invalid length. [ 546.442833][ T725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7678'. [ 546.456194][ T725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7678'. [ 546.564446][ T734] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7680'. [ 546.900353][ T754] netlink: 'syz.0.7688': attribute type 2 has an invalid length. [ 546.911430][ T754] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.7688'. [ 546.918906][ T758] veth1_to_bond: entered allmulticast mode [ 546.940440][ T760] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 546.960201][ T758] veth1_to_bond (unregistering): left allmulticast mode [ 546.994927][ T758] bond0: (slave bond_slave_1): Releasing backup interface [ 547.293528][ T795] syzkaller0: entered promiscuous mode [ 547.305524][ T795] syzkaller0: entered allmulticast mode [ 547.543097][ T820] netlink: 'syz.0.7707': attribute type 11 has an invalid length. [ 547.570845][ T819] lo speed is unknown, defaulting to 1000 [ 547.598580][ T827] netlink: 'syz.3.7711': attribute type 49 has an invalid length. [ 547.746301][ T819] lo speed is unknown, defaulting to 1000 [ 547.781242][ T843] tap0: tun_chr_ioctl cmd 1074025672 [ 547.802147][ T843] tap0: ignored: set checksum disabled [ 548.076806][ T861] syz_tun: refused to change device tx_queue_len [ 548.439439][ T893] netlink: 'syz.1.7729': attribute type 10 has an invalid length. [ 548.657330][ T914] netlink: 'syz.3.7736': attribute type 8 has an invalid length. [ 548.744964][ T922] netlink: 'syz.3.7738': attribute type 1 has an invalid length. [ 548.788925][ T922] bond4: entered promiscuous mode [ 548.797567][ T922] 8021q: adding VLAN 0 to HW filter on device bond4 [ 548.817293][ T928] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 548.830557][ T928] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 548.841823][ T928] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 548.885538][ T922] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 548.898771][ T922] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 548.923423][ T940] nbd: illegal input index -1 [ 548.934570][ T940] nbd: illegal input index -1 [ 548.975749][ T940] nbd: illegal input index -1 [ 548.995258][ T940] nbd: illegal input index -1 [ 549.002263][ T940] nbd: illegal input index -1 [ 549.012389][ T940] nbd: illegal input index -1 [ 549.030488][ T940] nbd: illegal input index -1 [ 549.044647][ T940] nbd: illegal input index -1 [ 549.069898][ T940] nbd: illegal input index -1 [ 549.074787][ T928] nbd: must specify a device to reconfigure [ 549.094565][ T940] nbd: illegal input index -1 [ 549.125504][ T940] nbd: illegal input index -1 [ 549.146648][ T940] nbd: illegal input index -1 [ 549.158055][ T961] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 549.171003][ T940] nbd: illegal input index -1 [ 549.176963][ T940] nbd: illegal input index -1 [ 549.197264][ T940] nbd: illegal input index -1 [ 549.203172][ T940] nbd: illegal input index -1 [ 549.208094][ T940] nbd: illegal input index -1 [ 549.214231][ T940] nbd: illegal input index -1 [ 549.219116][ T940] nbd: illegal input index -1 [ 549.224650][ T940] nbd: illegal input index -1 [ 549.234769][ T940] nbd: illegal input index -1 [ 549.249933][ T940] nbd: illegal input index -1 [ 549.261679][ T940] nbd: illegal input index -1 [ 549.270971][ T940] nbd: illegal input index -1 [ 549.275909][ T940] nbd: illegal input index -1 [ 549.282978][ T940] nbd: illegal input index -1 [ 549.295059][ T940] nbd: illegal input index -1 [ 549.311533][ T940] nbd: illegal input index -1 [ 549.327965][ T940] nbd: illegal input index -1 [ 549.345609][ T940] nbd: illegal input index -1 [ 549.357248][ T940] nbd: illegal input index -1 [ 549.357257][ T978] netlink: 'syz.0.7746': attribute type 4 has an invalid length. [ 549.370465][ T940] nbd: illegal input index -1 [ 549.386069][ T940] nbd: illegal input index -1 [ 549.443940][ T983] netlink: 'syz.1.7749': attribute type 1 has an invalid length. [ 549.502138][ T984] netlink: 'syz.1.7749': attribute type 1 has an invalid length. [ 549.528069][ T983] bond7: entered promiscuous mode [ 549.534972][ T983] 8021q: adding VLAN 0 to HW filter on device bond7 [ 549.550452][ T998] bond7: (slave bridge3): making interface the new active one [ 549.558667][ T998] bridge3: entered promiscuous mode [ 549.566042][ T998] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 549.673789][ T1007] ip_vti0: left promiscuous mode [ 549.738580][ T1026] __nla_validate_parse: 23 callbacks suppressed [ 549.738601][ T1026] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7757'. [ 549.767271][ T1007] team_slave_1: left promiscuous mode [ 549.777371][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.811126][ T1007] tipc: Resetting bearer [ 549.830022][ T1007] macvlan0: left promiscuous mode [ 549.859907][ T1007] veth1_vlan: left allmulticast mode [ 549.865502][ T1007] macvtap1: left promiscuous mode [ 549.871463][ T1007] macvtap1: left allmulticast mode [ 549.878471][ T1007] veth5: left allmulticast mode [ 549.888909][ T1007] veth7: left promiscuous mode [ 549.894886][ T1007] veth7: left allmulticast mode [ 549.908619][ T1007] geneve3: left promiscuous mode [ 549.914903][ T1007] geneve4: left promiscuous mode [ 549.920592][ T1007] geneve4: left allmulticast mode [ 549.931860][ T1007] bond7: left promiscuous mode [ 549.936762][ T1007] ip6gre2: left promiscuous mode [ 549.951183][ T1018] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7758'. [ 549.971384][ T1031] lo: Caught tx_queue_len zero misconfig [ 549.978147][ T14] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.990042][ T14] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 549.998571][ T14] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 550.012310][ T14] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.022232][ T14] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 550.033672][ T14] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 550.043425][ T1035] syzkaller1: entered promiscuous mode [ 550.049087][ T1035] syzkaller1: entered allmulticast mode [ 550.068326][ T14] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.081562][ T14] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 550.097007][ T14] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 550.122351][ T1044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7763'. [ 550.160282][ T14] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.198381][ T14] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 550.208951][ T14] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 550.406820][ T1090] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7772'. [ 550.443007][ T1090] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.7772'. [ 550.471232][ T1090] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.7772'. [ 550.488843][ T1099] syzkaller0: entered promiscuous mode [ 550.491807][ T1090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7772'. [ 550.503315][ T1099] syzkaller0: entered allmulticast mode [ 550.515395][T30114] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.518304][ T1090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7772'. [ 550.533744][T30114] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.549948][ T1096] tipc: Enabling not permitted [ 550.560814][ T1096] tipc: Enabling of bearer rejected, failed to enable media [ 550.573529][T30114] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.573538][ T1090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7772'. [ 550.573567][T30114] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.643470][ T1108] netlink: zone id is out of range [ 550.655544][ T1108] netlink: zone id is out of range [ 550.676053][ T1108] netlink: zone id is out of range [ 550.681851][ T1108] netlink: zone id is out of range [ 550.687591][ T1108] netlink: zone id is out of range [ 550.694730][ T1108] netlink: zone id is out of range [ 550.706797][ T1108] netlink: zone id is out of range [ 550.715954][ T1108] netlink: zone id is out of range [ 550.728000][ T1114] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 550.818052][ T1112] 8021q: adding VLAN 0 to HW filter on device bond12 [ 550.845458][ T1112] bond0: (slave bond12): Enslaving as an active interface with a down link [ 550.888760][ T1130] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 551.151645][ T1167] validate_nla: 1 callbacks suppressed [ 551.151664][ T1167] netlink: 'syz.0.7791': attribute type 83 has an invalid length. [ 551.324628][ T1189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7795'. [ 551.458439][ T1207] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 551.686462][ T1245] netlink: 'syz.4.7809': attribute type 16 has an invalid length. [ 551.695629][ T1240] syzkaller0: entered promiscuous mode [ 551.704502][ T1245] netlink: 'syz.4.7809': attribute type 17 has an invalid length. [ 551.715315][ T1240] syzkaller0: entered allmulticast mode [ 551.822476][ T1245] bridge0: left promiscuous mode [ 551.838676][ T1245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.868257][ T1245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.882638][ T1245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 551.893288][ T1245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.930092][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.937260][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.975446][ T1254] Cannot find add_set index 65532 as target [ 552.294978][ T1298] tipc: Enabling of bearer rejected, already enabled [ 552.324671][ T1302] netlink: 'syz.0.7826': attribute type 15 has an invalid length. [ 552.477733][ T1319] net_ratelimit: 69 callbacks suppressed [ 552.477752][ T1319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.668758][ T1347] netlink: 'syz.4.7837': attribute type 1 has an invalid length. [ 552.736273][ T1347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.760498][ T1354] bond0: (slave geneve5): making interface the new active one [ 552.770086][ T1354] bond0: (slave geneve5): Enslaving as an active interface with an up link [ 552.814084][T10663] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.844698][T10663] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.876592][T10663] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.910834][T10663] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.938393][ T1372] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 553.074671][ T1389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.095037][ T1398] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_team, syncid = 2, id = 0 [ 553.196147][ T1401] bond13: Unable to set up delay as MII monitoring is disabled [ 553.205959][ T1401] bond13 (unregistering): Released all slaves [ 553.242383][ T1417] pimreg: entered allmulticast mode [ 553.304493][ T1423] ipt_REJECT: TCP_RESET invalid for non-tcp [ 553.383205][ T1434] x_tables: duplicate underflow at hook 1 [ 553.475042][ T1446] netlink: 'syz.4.7866': attribute type 9 has an invalid length. [ 553.496563][ T1446] netlink: 'syz.4.7866': attribute type 9 has an invalid length. [ 553.630430][ T1461] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 553.774756][ T1472] netlink: 'syz.2.7875': attribute type 1 has an invalid length. [ 553.802025][ T1472] 8021q: adding VLAN 0 to HW filter on device bond13 [ 553.827705][ T1472] bond13: (slave geneve4): making interface the new active one [ 553.841333][ T1472] bond13: (slave geneve4): Enslaving as an active interface with an up link [ 553.964881][ T1497] netlink: 'syz.3.7882': attribute type 1 has an invalid length. [ 554.020305][ T1497] 8021q: adding VLAN 0 to HW filter on device bond5 [ 554.048133][ T1501] bond5: (slave geneve3): making interface the new active one [ 554.062214][ T1501] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 554.073327][T30116] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 554.094138][T30116] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 554.110666][T30116] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 554.132982][T30116] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 554.165347][ T1508] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 554.755962][ T1579] netlink: 'syz.4.7901': attribute type 4 has an invalid length. [ 554.863725][ T1590] __nla_validate_parse: 20 callbacks suppressed [ 554.863746][ T1590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7906'. [ 554.892935][ T1590] 8021q: adding VLAN 0 to HW filter on device bond6 [ 554.940318][ T1595] veth1_to_bond: entered allmulticast mode [ 554.956674][ T1595] veth1_to_bond: entered promiscuous mode [ 554.964498][ T1595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7908'. [ 554.972704][ T1597] syzkaller0: entered promiscuous mode [ 554.978917][ T1597] syzkaller0: entered allmulticast mode [ 554.987385][ T1597] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 555.001535][ T1595] veth1_to_bond (unregistering): left allmulticast mode [ 555.008645][ T1595] veth1_to_bond (unregistering): left promiscuous mode [ 555.136735][ T1605] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.7912'. [ 577.500101][ T8796] unregister_netdevice: waiting for bond2 to become free. Usage count = 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)