last executing test programs: 8.666085793s ago: executing program 4 (id=2951): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@setlink={0x3c, 0x13, 0x1, 0x70bd2d, 0x25dfdbf7, {0x0, 0x0, 0x0, r2, 0x0, 0x28090}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x3000c850}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x37, &(0x7f00000002c0)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7fa727", 0x1, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, @local, {[], '3'}}}}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000004010500ac1414bb000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000ff00000000000000000001000000fc020000000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb00000000000000000000000000000000010300000000000000000000000000002001000000000000000000000000000100000000ff00000002bbae00fe8800000000000000000000000000010000000004"], 0x1bc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000000)={@empty, r5}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000010000300"/20, @ANYRES32=r5, @ANYBLOB="000000000000000014001a800800028004"], 0x34}, 0x1, 0x2}, 0x0) 8.507392984s ago: executing program 4 (id=2953): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x0, 0x2, [@TCA_FLOW_EMATCHES={0x40, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_HDR={0x0, 0x1, {0x12}}]}]}}]}, 0x74}}, 0x20040054) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r6], 0x24}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000d9f71232010000e10db4150000000000000c00c9cca307808ec9a00202000000090002007300000011000300686173683a69702c706f72740000000005000500020000000500040000000000"], 0x58}}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) 7.957352136s ago: executing program 4 (id=2961): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x4f) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 7.702392241s ago: executing program 4 (id=2965): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000340)=@short={0xb, @remote, @null, 0x1, @netrom}, &(0x7f0000000380)=0x1c, 0x80000) getpeername(r2, &(0x7f0000000640)=@caif=@util, &(0x7f00000003c0)=0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x31, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) shutdown(r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0660000004000100080000010800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x38}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x160, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfc}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffbe440a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x58}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x851}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9da}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000}, 0x90) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xec, 0x10, 0x200, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x9, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x33}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc, 0xfffffffc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x7ffffffd, {0x9}, [{0x4}]}, 0x18}}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}], 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 6.661184105s ago: executing program 4 (id=2983): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="ff256585e07627af8151c2fdca055209", 0x10) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="ff256585e07627af8151c2fdca055209", 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000000400003b00000008000300", @ANYRES32=r3, @ANYBLOB="36003300d0"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) r4 = socket(0x11, 0x800000002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r4, 0x8b2c, &(0x7f0000000080)="3c474007a755e3a5c2226585c19cbf255e949499836e31e986821ac8fca88691bf595ea981802aec4e3e3ac544bb719b19be419a84012f1ffad4062587fdbb11b47716452027e9e8b71e8d60c1a23551d92abe546040a2cac83381cbb34353b9f0befcd8") (async) ioctl(r4, 0x8b2c, &(0x7f0000000080)="3c474007a755e3a5c2226585c19cbf255e949499836e31e986821ac8fca88691bf595ea981802aec4e3e3ac544bb719b19be419a84012f1ffad4062587fdbb11b47716452027e9e8b71e8d60c1a23551d92abe546040a2cac83381cbb34353b9f0befcd8") 6.116516297s ago: executing program 4 (id=2990): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x20, 0x7, 0x3, 0x101, {{0x49, 0x4, 0x1, 0x8, 0x124, 0x67, 0x0, 0x43, 0x4, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0x8d, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010101, 0x53bfa28c}, {@local, 0xff}]}, @ssrr={0x89, 0x23, 0xb3, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, @local, @local, @dev={0xac, 0x14, 0x14, 0x15}, @broadcast, @remote]}, @timestamp_prespec={0x44, 0x4c, 0x62, 0x3, 0x4, [{@local, 0x5}, {@private=0xa010100, 0x1}, {@broadcast, 0x7}, {@broadcast, 0x80}, {@private=0xa010102}, {@empty, 0x5d}, {@local, 0x3}, {@rand_addr=0x64010100, 0x8}, {@multicast2, 0x101}]}, @noop, @timestamp_addr={0x44, 0xc, 0x31, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x17}, 0x101}]}, @cipso={0x86, 0x18, 0x3, [{0x2, 0x5, "df4b49"}, {0x5, 0xd, "e8631cd046a467e61d1526"}]}, @generic={0x82, 0x8, "4d0166b5b4b2"}, @rr={0x7, 0x13, 0xdd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @multicast2]}, @rr={0x7, 0xf, 0xcb, [@remote, @private=0xa010100, @private=0xa010100]}, @timestamp_prespec={0x44, 0x34, 0xc5, 0x3, 0x2, [{@broadcast}, {@empty, 0x8f}, {@remote, 0x7}, {@remote, 0x80}, {@empty}, {@multicast1, 0x40}]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@loopback, @initdev, 0x0}, &(0x7f0000000100)=0xc) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "27bfcffca79a789ceab1c8b50785aeb1"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc020000000000000000000000000000000200000000000004010001010031"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@RTM_DELMDB={0x98, 0x55, 0x411, 0x70bd2d, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x1, 0x3, 0x1, {@in6_addr=@mcast2, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x2, 0x1, {@ip4=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x4, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x3, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x44}}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000001}, 0x81) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000001800)=0xffff, 0x4) readv(r6, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) syz_emit_ethernet(0x96, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a8000081"], 0x0) connect$pppoe(r5, &(0x7f0000000140)={0x18, 0x0, {0x20, @random="a380e37b9489", 'vcan0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x0, @empty, 'batadv_slave_1\x00'}}, 0x1e) 2.997320201s ago: executing program 3 (id=3000): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xb4, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x9}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x35}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40040}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) 2.811964562s ago: executing program 3 (id=3004): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x2c, &(0x7f00000006c0)=""/4096, &(0x7f0000000100)=0x1000) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {}, {0xffff}, {0xfff1, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101}, 0x14}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000940), r6) socket$inet6_sctp(0xa, 0x801, 0x84) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x5, 0x300, 0x200}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) close(0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r11, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 2.127961127s ago: executing program 2 (id=3008): r0 = socket$pppoe(0x18, 0x1, 0x0) sendfile(r0, r0, &(0x7f00000004c0)=0x1, 0x100) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10014) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, 0xffffffffffffffff}, 0xfffffffffffffd56) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000600)={{r0}, "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"}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08002dbd7000fcdbdf250500009aaabf01585d81429918263a", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000100", @ANYRES32=r6, @ANYBLOB="08000400000000000800040001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x410}, 0x20000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfe17, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0xffffffffffffffff, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000001600)=0xca, 0x4) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0xf503, 0x0) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r12, 0x89e8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r8, 0x58, &(0x7f0000000180)}, 0x10) 2.09329448s ago: executing program 3 (id=3010): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r0, 0x1, 0x4b, 0x0, &(0x7f0000000240)) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000300)=0xffffff6c, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r3, 0x801, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}]}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x1c}}, 0x0) 2.08347601s ago: executing program 2 (id=3011): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0xffffffffffffffd9, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="c8ef2cce1817d2f5cc407797397f1bbf35521d1f507805d15765ec0434"}, {&(0x7f0000000780)="119926c53a285c89010debc215b43708f22535569c7a5b64b088db2ce24b5bc22ff8dd0763740ac374311509301d47ce3ae8ca8288678f6e5d2c09cb5ce617199f9a1d16265bbc5dfa188c7f877fbe3dcab010816bf8b0a9a3a5d70f855b52e63561507d3e1fa85df5e9173a94ce9fe1e26b3ac349bba153193f598b8cd5fa46dfac642dcdd2b7ba9dd461fb3557b7d42d1fbf0b5983cd20a3d55cce8c8860b635de1ba33a7bc6d77e3ab7f01b3f1b"}, {&(0x7f0000000880)="bb07e40767d972bea22597a1d3487e7fb31fa44e8ff4c9f075b2009b5a950f0c757861570fbd1f4af0c5bfccad5245f645e3cf4b40200ffe7b1e3a643c2d89cd74541f3fd1efed0bdbf597d74ef57f290ce4319c8b570b4930bfd352f393848cad9e53004b75472e423da98912faedbce2f3099a18b34c881fd78892b877c737b755dc6e8ccfab697e6a3ced4b21388bdcf84702150ad82e7435835bca95964b47bc384713cd607d1a35dbc8398ebcb64a0da2d6c6bb326006805471cc6139009659846297fb37bbc41d1d3963b5f235bef283adf02f6d755ec471189606c5500f75b47d47198761c04f49dbc3a7"}], 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"]}}], 0x4000015, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x1, @loopback}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000b80)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000000005889aa10300000000007b8af8ff00000000bfa200008900000007020000f8ffffffb703000008000000b704000000000000850000000100000095b70ed65f5627d7f8e2174ffaae04f4f9d8692d99b17528552675f3380e7ac74e96fdc2fe587f3986e63580264df3b41fbb85de26b3c86aabc68aff32c44495a8e5bd761f1614db3d700b94722291d2394edb48260f3e9e5164ec18988f384d2caa803bdccafda4dfb5a18406fc7fca9068dc5a6382300018431d88e9bafc0dbee897e61681a1b187ff64e5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000100}, 0xc, &(0x7f0000000480)={&(0x7f00000012c0)=@delchain={0xca4, 0x65, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0xf}, {0x4, 0x10}, {0xd, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xfd, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_fw={{0x7}, {0xc60, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_FW_CLASSID={0x8, 0x1, {0xfffb, 0x7}}, @TCA_FW_POLICE={0xc24, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x101, 0x95247ae, 0x401, 0xcd4, 0x1, 0xfffffffd, 0xfca, 0x3, 0x9, 0x7, 0x2, 0x8000000, 0x0, 0x3, 0x80000001, 0x200, 0xc6db, 0xffffffff, 0x2, 0x6, 0x28, 0xffffffff, 0x5, 0x1, 0x3, 0x80000000, 0x5, 0x10001, 0xffff, 0x81, 0x5, 0x7fffffff, 0x1, 0x8, 0x1, 0x2, 0x3ff, 0x6, 0x30f, 0xb, 0xfffd, 0x2, 0xffff8001, 0x3, 0x1, 0x80, 0x1b4, 0xaf3, 0x2, 0x3, 0x26d, 0x7, 0x80000000, 0x7, 0x5, 0x9, 0x9, 0x7fffffff, 0x10000, 0x8, 0x1, 0x8, 0x2, 0x8000, 0x5, 0x7, 0x7ff, 0x4, 0xeb09, 0xfffffffe, 0x1a55, 0xe51a, 0x7, 0x40, 0x1, 0xab9c, 0x0, 0x8, 0x3, 0x8, 0x4, 0x8, 0x0, 0x1, 0x6, 0x886, 0x6, 0x1, 0x2, 0x1, 0x9, 0x4000, 0x4, 0x8, 0x7fff, 0x3, 0x2, 0xfffeffff, 0x0, 0x1, 0x9, 0x10, 0x5, 0x8e, 0x4, 0x4, 0xd58, 0x4, 0x7fff, 0x5, 0x0, 0xb, 0x3, 0x1, 0x6, 0x1000, 0xfff, 0x7, 0x7fffffff, 0x4, 0x4, 0x3, 0x2, 0x3, 0x7, 0x101, 0x5af2, 0x1000, 0x5, 0xd, 0x0, 0x9, 0xfffffffa, 0x8, 0x7, 0x83, 0x6bd0, 0x5, 0x76608417, 0xfff, 0xffffff83, 0x4, 0x0, 0x7, 0xac, 0x8001, 0x6, 0x3, 0x5, 0x6, 0x25, 0x6, 0xd, 0xe8, 0x0, 0x3, 0x5, 0x7, 0xf, 0x0, 0xfff, 0x1000, 0xc, 0x6, 0x1f, 0x2, 0x2, 0x1, 0x1, 0xe, 0x6, 0x6, 0x8001, 0x9, 0x7fffffff, 0x8, 0x6, 0xf, 0x2, 0x1, 0xf34, 0xffffffff, 0xfffffffd, 0x6, 0x4, 0x7, 0x7, 0xfffff437, 0x0, 0x0, 0x2, 0x43e, 0x9, 0x400, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x6b5a6337, 0xa, 0x6, 0x10, 0x101, 0x7, 0x14ba2e73, 0xb, 0x0, 0x4, 0x6, 0x401, 0x0, 0x0, 0x7fff, 0x7, 0x4c, 0x2, 0x0, 0xcb, 0xea5, 0x80000000, 0x4, 0x10, 0x100, 0x1, 0x1, 0x3, 0x3, 0xaa, 0x8, 0x4, 0xffffffff, 0x1, 0x1, 0x9, 0x3, 0x8, 0x5, 0x2, 0x8, 0xf590, 0x7, 0x8, 0x2, 0x7, 0xfffffffa, 0x5, 0x5, 0x0, 0x8, 0x332, 0x64, 0x6, 0x7, 0x4e, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x200, 0x7, 0x0, 0x9e, 0x0, 0x1, 0x0, 0xac, 0x6, 0x1, 0x80000000, 0x3ff, 0x8, 0x1, 0x8, 0x7, 0x6, 0xffffff2d, 0xb, 0x4, 0x9, 0x7, 0x0, 0x6, 0x8, 0x4, 0x1, 0xd, 0xc, 0x8, 0x3, 0x5, 0x4, 0x7, 0x8, 0x7ff, 0x6, 0x3, 0xff, 0x200, 0x2000400, 0x7f, 0x6, 0x3, 0x6, 0x2, 0x100, 0x4, 0x5, 0x7, 0x200, 0x4b, 0x7, 0x2, 0xffffffd4, 0xdb, 0x20000000, 0x7ead, 0xfff, 0xfffffffe, 0x1, 0x3, 0x40, 0x81, 0x10000, 0x9, 0x4, 0xfffffffe, 0x8, 0x3334b8cc, 0x9, 0xc, 0xfffffff9, 0x7fffffff, 0x1ff, 0x0, 0x60f6, 0x1, 0x55, 0x0, 0x4, 0x0, 0xd9e, 0x1, 0x32, 0x0, 0x10001, 0x81, 0x3, 0x95, 0x4, 0x400, 0x853f, 0x2, 0xfff, 0xfffffffe, 0x2, 0x8, 0xb2d, 0x6, 0x5, 0x2, 0x266, 0x1, 0x0, 0x9, 0x3, 0x80, 0x1dc196c8, 0xd53, 0x9, 0x5, 0xdb93, 0x8e24, 0x8, 0xffff7fff, 0x0, 0x1000, 0x3ff, 0x9, 0x800, 0x9, 0x8848, 0x2, 0x8, 0x3, 0x10, 0x1, 0x5, 0x0, 0x7f, 0x101, 0x10001, 0x2, 0x4, 0x9, 0x0, 0x5, 0xffff, 0x80, 0x5, 0x1e, 0xcb05, 0x8, 0x4, 0x401, 0x0, 0xfffffffd, 0x6, 0x3ff, 0xfffffffe, 0xfffffff7, 0x1, 0x7, 0xc, 0x7, 0xf0, 0xb92, 0x0, 0xe, 0x4, 0x5, 0x6, 0x7fff, 0x4, 0x0, 0x9, 0x6, 0x1, 0xffff8001, 0x131, 0x5, 0xb607, 0x80000001, 0x80000001, 0x100, 0x10001, 0x4, 0x3, 0x7fff, 0x8654, 0x1, 0x401, 0x3, 0x3, 0x20f, 0x23, 0x0, 0x27270000, 0x2, 0x3, 0x7fffffff, 0x401, 0x9640, 0x6, 0x7ff, 0x31, 0x80000000, 0x3, 0x81, 0x7fff0, 0x6, 0x2, 0x4, 0x2e44, 0x0, 0x8, 0x8, 0x7, 0x9, 0x78, 0xc, 0x0, 0x80000000, 0x91, 0xfffff001, 0x9, 0xb, 0x10, 0x5, 0x1e5e, 0x9, 0x5, 0x4, 0x6, 0x0, 0x9, 0x100, 0x1, 0x21c000, 0x8, 0x9, 0x8, 0x3, 0x9949, 0x4, 0x401, 0x718, 0x2, 0x80, 0x9, 0x8bbd, 0x7, 0x4, 0x3, 0x7, 0xe21, 0x8, 0x0, 0x9, 0x0, 0x4, 0x9, 0x0, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3fe9, 0x7cece0a4, 0xe2b3, 0x7f, 0x0, 0xa, 0x6, 0x10, 0xa11, 0x2, 0xfffffff4, 0x1, 0x4, 0x9, 0x5, 0xffff, 0xf5, 0xffffffad, 0x7, 0x0, 0x1, 0x101, 0xf, 0xfffff800, 0xc5, 0x0, 0xa5, 0x4, 0x3, 0x8, 0x1, 0x10, 0xfffffff7, 0x1000009, 0x0, 0x3, 0xffffffff, 0x10001, 0x8, 0x9, 0x7, 0x5, 0x2, 0xef75, 0x7fff, 0xd999, 0x6, 0x800, 0xf, 0x7, 0x2246, 0xa5d, 0x4, 0x9, 0xf, 0x7, 0x2, 0x2, 0xcd, 0x3, 0x4, 0x87a380a, 0x2, 0x9, 0xfff, 0x7fffffff, 0x80000000, 0x5, 0x2, 0x1ff, 0x4a72, 0x80000000, 0x5, 0x800, 0x1e6f, 0x81, 0xfffffffe, 0x0, 0x8, 0x3, 0x8, 0x2, 0x1b2, 0x4, 0x100, 0x6, 0x9, 0x10, 0x7ff, 0xb9b, 0x7, 0xc945d5ce, 0x1, 0x3, 0xfffffffe, 0x9, 0xe6f2, 0x13, 0x7a2b, 0x7, 0xa34, 0x6, 0x6, 0x1, 0x7, 0x9, 0x8, 0x4, 0x2, 0x6, 0x73, 0x6, 0x4, 0x7f, 0x7, 0x5, 0x5, 0xfffffffe, 0x8, 0x3, 0x357, 0xffff, 0x5, 0x10000, 0x8, 0x3, 0x6, 0x9, 0x6ee9, 0x0, 0xffff, 0x0, 0xff, 0x7fffffff, 0x2316, 0x517cc0ab, 0x2, 0x0, 0x4, 0x80, 0xb, 0x4, 0x4, 0x10, 0x9, 0x40, 0x3, 0xd, 0x5, 0x9, 0x10000, 0x4, 0x26, 0x2, 0x3, 0x4, 0x7, 0x4, 0x9, 0x8, 0x0, 0x7fff, 0xfffffffc, 0x6, 0x100, 0x4, 0x706, 0x80000001, 0x0, 0x81, 0x3, 0x1, 0xffffffff, 0x2, 0x74, 0xc, 0xc, 0x5918, 0x800, 0x800, 0x800, 0x8, 0x8001, 0x5, 0xf, 0x7fffffff, 0x85c99734, 0x8, 0x1ff, 0xa19a, 0x8, 0x5, 0x1, 0x69ce, 0x28ef, 0x70, 0x0, 0x3, 0x3, 0xf38, 0x1b8, 0x80, 0xad, 0x1000002, 0xffffffff, 0x9, 0x9, 0x0, 0x400, 0xbfe1, 0xf9, 0x10, 0xffff, 0x6, 0x8, 0x4, 0x101, 0xcc, 0xfffffff0, 0x8, 0x1, 0x3, 0xfffffffe, 0xfee1, 0x100, 0xa, 0x92, 0x0, 0xffff, 0x1, 0x3, 0xfffffffb, 0x6, 0x1, 0x7, 0xff, 0x0, 0x0, 0x4, 0x3, 0x6, 0xc, 0x3, 0x2bc690bc, 0x8, 0xfffffffc, 0x9, 0x9, 0xffffffff, 0x7, 0x1, 0x3, 0xce95, 0xda, 0x9, 0xfffffe00]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xffff}}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff1}}, @TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xfff6}}, @TCA_FW_CLASSID={0x8, 0x1, {0xa, 0xfff3}}, @TCA_FW_MASK={0x8, 0x5, 0xc7}]}}]}, 0xca4}, 0x1, 0x0, 0x0, 0x40}, 0x8008091) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) socket$inet6(0xa, 0x6, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'vlan0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 1.986179085s ago: executing program 0 (id=3012): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', 0x0}) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa08001900ffffffff14001b00fe"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.847282453s ago: executing program 3 (id=3013): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x8612, '\x00', 0x0, 0x0}, 0x50) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008b0"], 0x178}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001180)=@generic={&(0x7f0000001140)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0xa, 0x6, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x24}, [@exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000b40)='syzkaller\x00', 0x52, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000bc0)={0x0, 0xd, 0x83, 0x4f}, 0x10, 0x0, r5, 0x1, 0x0, &(0x7f00000011c0)=[{0x1, 0x4, 0x2, 0xb}]}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="a26a9124", @ANYRES16=r7, @ANYBLOB="010026bd7000fedbdf254c0000000f00a9007365636f6e646e616d650000"], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r8, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000d00)=[{{&(0x7f0000000d40)={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000740)="b068a63726ba0bd7803aabf0e8ff341a2b7bcfc49243a6f73e5521cda28ac80db3970a1b76d04f58cb0f8cabeb9d63d7de5a142f1207f4dfe5567fd0a7b8cf4466c32d6973d8bddc7a89d664a04c5e9ae0b05ae7d9aed7c9cacd16e9d4905f6b6a8bbc3096b3d5e8bde124f743ffbd023ca424ca830c7d303aa134f13c0e7436a58920972099b03350c7644128ac6bc6324d677ee6adf2dc0582a617bbbb97c5952b4f433820b512a740db09a2746184b8f2333ba0dbc0e5c6ea1313ebfe1c992bbbee58b59263f79a5c915a61d1c022523f", 0xd2}, {&(0x7f00000009c0)="8746715090b52ebb41ca9d479a6f358f33b3dfcf6bee510ebcdf07fe23d5659a4ff365019cb8735acc746c4c073ca55378cbae0ba6b83413020730866c5b0b58ccb7bf268a37149e37a930c234a93c160705dbd3a1f2d6dfae39eee2c17b8d3f40999f2f6859a8c749d86807650e8e6b36b0aff238983fd3c71a2b56c5a90065b83233a77e809784a801c5bf9ab6e2f1f8c7cad112e1cb9b2edee31eee982301154467dab4bf054bbb8e732e9752ded7e12688194470fd212097c656e604da3a5374c120c53f051dd6d034eae8e80ebc998d9037e3b5c79e78c66fca5caa2f7c6a1755c0ab92c5674e8f0097c74f06", 0xef}, {&(0x7f0000000d80)="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", 0x210}, {&(0x7f0000000c00)="907d6f4461e3b3954b583e13972fd94e99ca94fdfdd0bb708fb26d526e6996b9c32d418f5f482597ef0520f3e08455633c927a280a0ef4516e10766760aaa2ae926dce43c764e6cbc10bde981518b5f065fd8a834f77b3f72fef4af62adf527c71b0e544d0c2bc9362575e4ecd8958fee330fa868d41e25152d437e5a2d5c52550cca5bc91d21364e6becac110cb07447797257bf9cb77aeb446e260ea3e208f4c23950974bcc23a17", 0xa9}], 0x4, &(0x7f0000000fc0)=ANY=[@ANYBLOB="fc000000000c5fd84912e7d0403214d3a11f1af3de5d51733c8246f9c09047f549b1a80f9903f8541cb002e5d83033bf03a5c660b440791802029b158619e6fb1d1da20727c64e519402d7e1f8f7e07e903b9b1049e6604267147f108790a115a85d8fecd08938db7a6b68b07644fc5195badf442e23a7acbd330d73f8ed7c30865300cfe92bb29ff22a55f649f12c02a6be188d052540594e4bb633b3adb6788da3aaf4c3975cd435fd56acc45af2e83b6fbb82b5f436b377200a4650a81f0cbadc1510ca348cd9340d3dc2a0634e"], 0x18}}], 0x1, 0x10) getsockopt$bt_hci(r8, 0x84, 0x15, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$devlink(&(0x7f0000001ec0), 0xffffffffffffffff) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="1600000000001b00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r12, 0x80489439, &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r11}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c00000000000024001280090001007866726d000000001400028008000100030000000800020001000000140003007866726d30"], 0x58}}, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) 1.464109174s ago: executing program 0 (id=3016): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4f, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x0) (async) writev(r0, &(0x7f00000000c0), 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r4, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x5efe) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0xc4, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x9a, 0x6, "420a30e6166e2adf0cab7460410eef8cdb73cc2f2efc8b5ccd947bb2460e741fbd6f3afbb9483803de019eacbdb0e149cb245bcb612ffe8986fe89440a8b5264c0030984aa3a12e36dd4bf3d5e0ced0c89e8cde331f7d3006ec430d5b05028062f30ad13520d889c24dc5eed44027d97a880d0d6b68a91d58073bd38efc9557e50add12376dd592cac933b8eab8c7622ed664345bd40"}]}, @NFT_MSG_NEWOBJ={0xc0, 0x12, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0xac, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_IP6={0xa8, 0x3, 0x0, 0x1, [@NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NFTA_TUNNEL_KEY_IP6_SRC={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x11}}, @NFTA_TUNNEL_KEY_IP6_SRC={0x14, 0x1, @mcast2}, @NFTA_TUNNEL_KEY_IP6_FLOWLABEL={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY_IP6_SRC={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @private0}, @NFTA_TUNNEL_KEY_IP6_FLOWLABEL={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @empty}, @NFTA_TUNNEL_KEY_IP6_FLOWLABEL={0x8, 0x3, 0x1, 0x0, 0x120}, @NFTA_TUNNEL_KEY_IP6_SRC={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}}], {0x14}}, 0x1ac}, 0x1, 0x0, 0x0, 0x5851}, 0x48000) write(r1, &(0x7f0000000000)="14000000140005b7ffccca38b9000000060860eb", 0x14) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000b80000000000000000000a2c000000060a0904000000000000000002000004090001000073797a320000000038000000080a05000000000000000000020000040c00034000000000010900020073747a32000000000900010073797a3000000000140000001100010000000000000000000a00000a"], 0x8c}}, 0x10) (async) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r6) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r10}, 0x10) (async) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x1f0, r8, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa7e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7fff, @private0}}}}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_SOCK={0x94, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbbd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5a53ffee}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6bf4}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "6a1f73f37d35187d85bf5899e2f094812421327e149464"}}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4}, 0x800c4) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 1.245669711s ago: executing program 1 (id=3017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc601000000010000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000008}, 0x8840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010a35bd7000fbdbdf254400000008000300", @ANYRES32=r7, @ANYBLOB="08000c006400000034002380060007"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x220440d0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r5, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x6f0}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x777}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x42004008}, 0xc, &(0x7f0000000380)={&(0x7f0000000700)={0xa8, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x8c, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6b56}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x68a}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x938}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc69}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd52}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0xffffffffffffff59, 0x7, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004000}, 0x48095) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r10 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r10, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000600)={{{@in=@loopback, @in6=@private2, 0x4e20, 0x0, 0x4e22, 0x3, 0xa, 0x40, 0xa0, 0xc3, 0x0, r11}, {0x4, 0x5, 0x1a, 0x0, 0xb, 0x4, 0xfffffffffffffff8, 0x401}, {0x4, 0x8000000000000000, 0x1, 0x5}, 0x9, 0x0, 0x0, 0x1, 0x2, 0x2}, {{@in6=@private0, 0x4d4, 0x2b}, 0xa, @in6=@mcast1, 0x3505, 0x4c1b1e48b21d3db3, 0x2, 0x0, 0x400, 0x17072d33, 0x9e0}}, 0xe8) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x6, 0x2, [{}, {0x0, 0x5}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x801) socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)={0x4c, r12, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@void, @val={0xc, 0x99, {0x2, 0x5d}}}}, [@beacon, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SSID={0x24, 0x34, @random="8b43fbbd18ea0e55e6d06422bcd59c93e43b21684b5bbf80b8cb5c00b2cc9244"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r13, 0x29, 0xcf, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r13, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.228169999s ago: executing program 0 (id=3018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r1 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@newtclass={0x40, 0x28, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xa}, {0xfff2, 0x6}}, [@tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0xd6, 0x7}}, @TCA_RATE={0x6, 0x5, {0x88, 0x9}}]}, 0x40}}, 0x4000004) (async) close(r0) 1.212085437s ago: executing program 2 (id=3019): socket$inet6_sctp(0xa, 0x801, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000240)="4cf7", 0xfffffffffffffecd}], 0x1}}], 0x1, 0x4000001) socket(0x3, 0x1, 0x10) (async) r1 = socket(0x3, 0x1, 0x10) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x2000b}, 0x1c) shutdown(r0, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_tunnel_key={0x54, 0x1, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xe, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x40000) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000180)=""/256, 0x100}], 0x2}, 0x60}], 0x1, 0x10042, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x1, @remote, 0x4}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x35, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$sock_int(r8, 0x1, 0x35, &(0x7f00000000c0)=0x1, 0x4) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01000000e9ffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x4044025}, 0x4024800) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000200)={0x7, 0x18, [0x100000001, 0x8, 0x8000, 0x5], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}) socket$inet_udp(0x2, 0x2, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 995.649486ms ago: executing program 1 (id=3020): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000400000000000000000000000000000000000000000ff010004006537642afebca4e25fa1afe1f2e52e3d766d535a700a1d3bd311fe37d6fb07fef924764f8c711dd0370e0518f511fff402e0ccbe7ba5e697060b93f2b31f3c964992aceed0c22b871a13b72a9c76766f4b99737966fc30092d7aa71bc604329ce38075eb61104672"], 0x50) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000010a3c000000060400000000000000008c17d2e163241852242b2a18f502000000100004800c000180080001006f7366000900010073797a30000000000900020073797a320000000008000000110001"], 0x64}}, 0x0) 882.13847ms ago: executing program 2 (id=3021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140f6ffff0f0900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000"], 0xc8}}, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) ioctl$sock_netdev_private(r1, 0x89ff, &(0x7f0000000040)="bbaa38f503075783d99887f18789ef69d59080e78dd6f3c7afec4622e2b2ca0f") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x8, 0xfc, 0x0, 0x1, [@nested={0x4, 0x8}]}, @typed={0x8, 0xa6, 0x0, 0x0, @u32=0x7}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) getpeername$tipc(r1, &(0x7f00000001c0)=@name, &(0x7f0000000240)=0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r5, 0x118, 0x3, 0x0, &(0x7f00000003c0)) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040027bd7000fedbdf2501000000000000ff0b410000000c001473797a3100e0ff00"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) 847.526485ms ago: executing program 3 (id=3022): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x7c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa4}, 0x1, 0x0, 0x0, 0x400c881}, 0x81) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0102000000000000000002000000090002000000000008000440000005000900010073797a300000000008bd39fa2df51ac5d70003400000000a14000000110001000000000000000000"], 0x64}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f00000001c0)=0x8, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r10, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000000100000000000000c955ac84508be3a5fb76ac9fb4665c11a4bb926cbe0fc67334e32a8b30de7bfff9466437307ccc", @ANYRES16=r10, @ANYBLOB="20002bbd7000fbdbdf256c0000000800270000000000050019010d0000000800a100030000000800a100030000000800a000ff000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a010300000000000000000200000008000340000000000900010073797a300000000002140000001100010000000000000000000000000ae50ea49aaa79"], 0x5c}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) 821.82759ms ago: executing program 1 (id=3023): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3800000012140100000000000000000008004f0000000000080001000000000008004b00130080000800150000000000080003"], 0x38}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)=ANY=[], 0x12f4}}, 0x0) read$alg(r2, &(0x7f0000000a00)=""/4091, 0xffb) r3 = accept4$alg(r2, 0x0, 0x0, 0x80000) sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="feaeaf83e146bb75b522a982797701616f418592533d8f0a2e74dd59f26d11f4085741236317b22b8f7e253133e4bec7517c9c7db0e8bb95a27aaed20b19799fdeb6967a54b330c4106f54e45fb06fdffbb3296f89959efb4a88d8533261f207e8fa1a2de7525d0d", 0x68}, {&(0x7f0000000080)="4fcd3336e7723b157ba62aef96b518ac04e67b078c", 0x15}, {&(0x7f00000000c0)="5621f5a17a54e859cedadbe8b6ed6818ef7f73d0749bb2f324b41932e2dcc13527af7fa12d", 0x25}, {&(0x7f0000000100)="478eb5bded2984036e25add8a736ed5eea929fe7d4981034097fdc85526d408016e392c2f5505fd037c81dd34c9b3646a0a2345ea5", 0x35}], 0x4, &(0x7f0000000180)=[@iv={0x80, 0x117, 0x2, 0x6a, "a66a24b8386f9432d0311cdc839750d03756357d0b51bd5e593bd79f1e07e16876355e351d2e0b83a5e1655cb19235f2106fe2863688b2b1680e3e896563259907fdc85c568d4d3091499f6589f78c5cba9b4c1329c792a69709381cfad80b5d2ea44a72da1993ef700d"}, @op={0x18}, @iv={0xd8, 0x117, 0x2, 0xc3, "9b02334800ce4042b5fb156feaef89bfd4fbe8f145eb1a28ae7e1d7608cee61aa344bfd80097b9c51975459fd813712e50bd4689cad5a8213c010011d8c8773f8a2d066de70965269889bd5de5ce160ef1b6cff71a3236c20ad0640a4eff64ed57cb949e0d850e2a941842b1ffb0355252b57854960e1731c2118e6502f22996979d2b905b9ee7d48a116bdec8185deec6aa9f143e771a4627d8e63a583cba5c22a5263a86aadc670783b7bed4aae2ea4ffdb0338f513258f663edf2b53c91107ea163"}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x188, 0x802}, 0x4000004) read$alg(r2, &(0x7f00000004c0)=""/40, 0x28) 666.004772ms ago: executing program 0 (id=3024): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002840)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x48}}, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r4, 0x2}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r5, 0x2, {0x0, 0xf0, 0x3}}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x1e, &(0x7f0000000440)={0xfffffffa, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) sendmsg$inet_sctp(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="f67c48eb0d342e6d52154912f43f039e86316b711771a679febc851ceebb0564ee0c4c3394ccd7fd2418f08e4d7e025f94da440967ecabf30ec51b10ae5e59579350028a2fb11c7dc4bf1f8da9bb305af1a3ade963e339c2b644dd3c23d9ec0d4d3790d46807a8f0c4f82bfd3aaa33ce8b5040b6d6282172c3970a969b1d9d435e5bd83e701913ee1db5c2e11db6bccefd1b1ca333a101ac63a5c5b778be641fa276aa3eaf853c9324ab21", 0xab}, {&(0x7f0000000140)="c4f35b8b91bd9571c3dc8cd947b34936d036b401a317aa61b8194608d886330656cb6d1b97ed87ed32e50fd31156d5cf906936f33c2e4e03c5c581d9c43a4918c479e6f55364f63cad7c6ffdeda51c83a02eadf11f5213780a363a0d3442b182bf277f8ce09cacf37ebd7d7b70f8e7a3e5b7995e270a9921af790d4b20d01a626795829108da13ff00750c3055dc0ec990895d6bc26bc561dc809c3f8b3b64ed0792238d6310c4c98b82be6ab39db8b1f84b0625fa34637e4d9ace3be78af6aed8c0e6086ce36026f1495d8503363209c411370e57cde4e74a30b57373", 0xdd}, {&(0x7f0000000680)="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", 0xe79}], 0x3, 0x0, 0x0, 0x20000040}, 0x800) 641.791825ms ago: executing program 1 (id=3025): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x2e]}}, 0x0, 0x1c}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYRES8, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYRESDEC=r4, @ANYRES32=r5, @ANYBLOB="1c005ec455fe05004d0000000800060002000000080007003703000024005e80080005000f000000080002000400000008000500170000000800020075080000"], 0x5c}, 0x1, 0x0, 0x0, 0xc081}, 0x20040054) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r2, @ANYRES32=r0], 0x1d8}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448ca, 0x0) 599.976949ms ago: executing program 2 (id=3026): socket$kcm(0xa, 0x922000000003, 0x11) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000008c0)={'vxcan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c810000faac9ffe91eeab618b39d51e874af960bb228eaea71eae90795daf8fcb7a7a4d25a92061870a3018550b3094d5b5360c08818cc9edfb1a2536c506a1f6dd9eaf16f97e11883e31abdd88350d5d387edb13454824384739c0bf7f943893cdc1e882ffe559589d9e6d7d1de1afbb00bc0a114c28cc2b535f468895814026818d1869e120d3d1d63557f19475e160b601489535ee98a2ab9f4427589b7cb3e5b6f4392201c8e4b99fa02c73acdf4d6358928f0d5be5d92977f567308fa8", @ANYRES16=r2, @ANYBLOB="e7b527bd7000fedbdf250c00000008000500f2ffffff"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="000228bd7000fcdbdf250c0000001c0001800600010000000000060001000000060002002f0000002c0003801400f92eb1290bcad84b3000000000000000000014000600fc010000000000000000000000000000300003800500085776d44900040030bd14000600ff010000000000000000000000000006000700"/132], 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 501.963275ms ago: executing program 3 (id=3027): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'veth0\x00', &(0x7f0000000440)=@ethtool_eeprom={0x48, 0x6bf, 0x8}}) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) (async) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000140)="4fa1f49ff8a930286f7a2043220c00340905aa398464cf67c5e786558ea0a2ec2ac69b5e4bd9e78ccf0abcb03a1b826ebbf50f6ebce9e8f8bfe63e5354bff39a239e1f67ad8f0b", 0x47) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) (async) write$tun(r1, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async) ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) pwritev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)="0d98", 0x2}], 0x1, 0xa, 0x10) read(r3, 0x0, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}]}]}], {0x14}}, 0x98}}, 0x4) 488.449613ms ago: executing program 1 (id=3028): mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) listen(r5, 0x6) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600156f"], 0x18}}, 0x8080) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000040)={"99548a2063b2c2c0ab173aa85c358019", 0x0, 0x0, {}, {0x4, 0x8}, 0xfffffffffffffff8, [0xf5, 0x0, 0x1e, 0x9, 0x9, 0x2, 0xd, 0x574, 0x8, 0xa8, 0x6, 0xffffffffffffffff, 0xe, 0x8, 0x0, 0x46]}) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000001340)={{r6}, r7, 0x10, @unused=[0xfc0, 0x8001, 0x1, 0x7ff], @subvolid=0xffffffffffffffff}) 144.720151ms ago: executing program 2 (id=3029): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x134, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x4, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x100, 0x2, [@TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_BPF_ACT={0xec, 0x1, [@m_bpf={0xe8, 0x7, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7, 0x1, 0x6}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x2, 0x8, 0x50, 0xff}, {0x400, 0xa, 0x9}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}]}, {0x79, 0x6, "f3ef5037a6528e33d770d04ac21b212ade2038dcc7272de194ce01dc3a7d2d828f018c45a15167f02711ac66b0a2d10700000000000000e81a6f5c8318a249a88d8b7a626d4541a9311eb98e9a813da52a585e4ad6b2162804dc337b0f9488bc066e55b0e385dbd85d3737291f868b9ce6c2b32845"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x22bf533d53fd5981}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1d8}]}, 0x134}, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 74.24838ms ago: executing program 0 (id=3030): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @private=0xa010101}, {0x2, 0x0, @dev}, 0x107}) 14.907688ms ago: executing program 1 (id=3031): r0 = socket(0x11, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0xfffffffffffffffd) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xb5}}, 0x80000) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000040)=0x9) 0s ago: executing program 0 (id=3032): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x5460, 0x96b5376b91506d81) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @null, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000004c0)={"abccb5935ff420fc5192a701f607c5db", 0x0, 0x0, {0x3, 0x3}, {0x2, 0x1}, 0xc, [0x1, 0xfffffffffffffff7, 0x206f, 0x5, 0x5000000, 0x7, 0x6, 0x2, 0x4, 0x8, 0x6, 0x0, 0x1, 0x40, 0x7, 0x401]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f00000005c0)={{r1}, r5, 0x12, @inherit={0x70, &(0x7f0000000100)={0x1, 0x5, 0x9, 0x27b98aad, {0x9, 0x0, 0x1, 0x6}, [0x3, 0x1, 0xbc2, 0x29a, 0x9]}}, @name="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"}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="940000000201010800000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0xd4) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_mreqn(r6, 0x0, 0x23, 0x0, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c20044a271e06971d128ede5bf3b4e6f0000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e000000200010001000000e00000000096e36443202a63da8bab0a2a970bbdcd6db04952c3a7eba98ee832bf30d5ae59be859d0e7027afd6c02e71c8f127c2ae28761831f0b7b3d670ddbbcbcb0f5c3f680afe2a4bbc95dc1a8ee4578d1bc3100526f448a0159191469523c4cd0675ad24226675f8d5b96bcbb51af19e980339599d0b19ff6583850274231840ecc7ed949f2cf5"], 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) kernel console output (not intermixed with test programs): 94': attribute type 1 has an invalid length. [ 202.174033][ T8823] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 202.223936][ T8827] gretap1: entered promiscuous mode [ 202.241753][ T8827] bond1: (slave gretap1): making interface the new active one [ 202.251129][ T8827] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 202.263738][ T8841] netlink: 'syz.0.798': attribute type 11 has an invalid length. [ 202.282500][ T8831] macvlan2: entered promiscuous mode [ 202.294016][ T8831] macvlan2: entered allmulticast mode [ 202.305348][ T8831] bond1: entered promiscuous mode [ 202.315247][ T8831] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 202.335265][ T8831] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 202.357379][ T8831] bond1: left promiscuous mode [ 202.379580][ T8825] netlink: 'syz.1.795': attribute type 1 has an invalid length. [ 202.588399][ T8852] netlink: 'syz.1.803': attribute type 1 has an invalid length. [ 202.744351][ T8862] __nla_validate_parse: 8 callbacks suppressed [ 202.744371][ T8862] netlink: 40 bytes leftover after parsing attributes in process `syz.4.804'. [ 202.821740][ T8862] netlink: 40 bytes leftover after parsing attributes in process `syz.4.804'. [ 203.112124][ T8883] geneve2: entered promiscuous mode [ 203.118200][ T8883] geneve2: entered allmulticast mode [ 203.377271][ T8889] openvswitch: netlink: IPv6 tunnel dst address is zero [ 203.454849][ T8889] netlink: 'syz.2.811': attribute type 83 has an invalid length. [ 203.473013][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'. [ 203.863392][ T79] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 203.884036][ T8916] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 203.915995][ T8907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.040157][ T8923] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 204.047822][ T8905] syz.4.817 (8905) used greatest stack depth: 17864 bytes left [ 204.136863][ T8923] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 204.202458][ T8928] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 204.240460][ T8928] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 204.275159][ T8928] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 204.335098][ T8941] netlink: 48 bytes leftover after parsing attributes in process `syz.2.825'. [ 204.381257][ T8937] netlink: 16 bytes leftover after parsing attributes in process `syz.0.824'. [ 204.559411][ T8950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.594549][ T8950] batadv_slave_0: entered promiscuous mode [ 204.715401][ T8955] lo speed is unknown, defaulting to 1000 [ 204.791627][ T8955] hsr0 speed is unknown, defaulting to 1000 [ 204.854284][ T8964] netlink: 36 bytes leftover after parsing attributes in process `syz.2.833'. [ 205.197393][ T8974] netlink: 'syz.0.837': attribute type 11 has an invalid length. [ 205.205187][ T8974] netlink: 224 bytes leftover after parsing attributes in process `syz.0.837'. [ 205.304777][ T8984] netlink: 76 bytes leftover after parsing attributes in process `syz.2.838'. [ 205.429097][ T8982] netlink: 96 bytes leftover after parsing attributes in process `syz.0.841'. [ 205.617467][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.845'. [ 206.111668][ T9021] vlan0: entered allmulticast mode [ 206.136853][ T9021] veth0_to_bond: entered allmulticast mode [ 206.215798][ T9027] lo speed is unknown, defaulting to 1000 [ 206.293489][ T9027] hsr0 speed is unknown, defaulting to 1000 [ 206.501149][ T9046] dummy0: entered promiscuous mode [ 206.524347][ T9046] batadv_slave_1: entered promiscuous mode [ 207.460116][ T9087] openvswitch: netlink: Message has 4 unknown bytes. [ 207.739847][ T9105] validate_nla: 3 callbacks suppressed [ 207.739868][ T9105] netlink: 'syz.2.876': attribute type 2 has an invalid length. [ 208.138296][ T9116] tipc: Started in network mode [ 208.153574][ T9116] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 208.176435][ T9116] tipc: Enabled bearer , priority 0 [ 208.191530][ T9121] netlink: 'syz.1.883': attribute type 1 has an invalid length. [ 208.214472][ T9121] netlink: 'syz.1.883': attribute type 4 has an invalid length. [ 208.226572][ T9121] __nla_validate_parse: 13 callbacks suppressed [ 208.226594][ T9121] netlink: 192 bytes leftover after parsing attributes in process `syz.1.883'. [ 208.321457][ T9134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.886'. [ 208.433731][ T9143] netlink: 'syz.0.886': attribute type 10 has an invalid length. [ 208.894257][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'. [ 208.923989][ T9164] netlink: 'syz.3.897': attribute type 1 has an invalid length. [ 208.932858][ T9164] netlink: 244 bytes leftover after parsing attributes in process `syz.3.897'. [ 208.943625][ T9161] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 208.973871][ T9163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.894'. [ 209.018353][ T9161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.018431][ T9163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.894'. [ 209.170944][ T9175] netlink: 44 bytes leftover after parsing attributes in process `syz.3.898'. [ 209.300038][ T5923] tipc: Node number set to 11578026 [ 209.389603][ T9187] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 209.535570][ T9192] netlink: 'syz.1.904': attribute type 1 has an invalid length. [ 209.584919][ T9192] netlink: 'syz.1.904': attribute type 4 has an invalid length. [ 209.614626][ T9192] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.904'. [ 210.149553][ T9224] openvswitch: netlink: Flow key attr not present in new flow. [ 210.738967][ T9249] netlink: 128 bytes leftover after parsing attributes in process `syz.4.920'. [ 210.775444][ T9246] netlink: 104 bytes leftover after parsing attributes in process `syz.0.919'. [ 210.907696][ T9253] netlink: 'syz.2.922': attribute type 49 has an invalid length. [ 211.198258][ T9268] team0: vlans aren't supported yet for dev_uc|mc_add() [ 211.711096][ T9290] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 211.928486][ T9213] Bluetooth: hci0: command 0x0406 tx timeout [ 211.935526][ T9213] Bluetooth: hci1: command 0x0406 tx timeout [ 211.942439][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.949256][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 212.167701][ T9306] macvlan3: entered allmulticast mode [ 212.218448][ T9307] macvlan4: entered allmulticast mode [ 212.258788][ T9284] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 212.286274][ T9284] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 212.408014][ T9316] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 212.592370][ T9324] syzkaller0: create flow: hash 3971320334 index 1 [ 212.868424][ T9317] syzkaller0: delete flow: hash 3971320334 index 1 [ 214.489417][ T9355] __nla_validate_parse: 9 callbacks suppressed [ 214.489438][ T9355] netlink: 11 bytes leftover after parsing attributes in process `syz.1.953'. [ 214.559828][ T9359] netlink: 'syz.0.955': attribute type 12 has an invalid length. [ 214.614601][ T9359] netlink: 'syz.0.955': attribute type 29 has an invalid length. [ 214.646745][ T9359] netlink: 148 bytes leftover after parsing attributes in process `syz.0.955'. [ 214.678844][ T9359] netlink: 59 bytes leftover after parsing attributes in process `syz.0.955'. [ 214.693064][ T9371] netlink: 'syz.1.959': attribute type 2 has an invalid length. [ 214.715376][ T9366] bond0: entered promiscuous mode [ 214.730416][ T9366] bond_slave_0: entered promiscuous mode [ 214.749523][ T9366] bond_slave_1: entered promiscuous mode [ 214.795917][ T9374] netlink: 'syz.3.960': attribute type 1 has an invalid length. [ 214.853425][ T9378] openvswitch: netlink: Actions may not be safe on all matching packets [ 214.854504][ T9374] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 215.133440][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 215.177798][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 215.203949][ T9396] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.968'. [ 215.300393][ T9399] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 215.758460][ T9421] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 216.128703][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.983'. [ 216.184727][ T9447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.983'. [ 216.220276][ T9447] openvswitch: netlink: Flow key attr not present in new flow. [ 216.398775][ T9458] tipc: Enabled bearer , priority 0 [ 216.437488][ T9458] syzkaller0: entered promiscuous mode [ 216.478936][ T9458] syzkaller0: entered allmulticast mode [ 216.594511][ T9464] tipc: Resetting bearer [ 216.625721][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.987'. [ 216.645143][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.987'. [ 216.838899][ T9456] tipc: Resetting bearer [ 216.875899][ T9456] tipc: Disabling bearer [ 217.274499][ T9491] : left allmulticast mode [ 217.285575][ T9491] : left promiscuous mode [ 217.316660][ T9491] bridge0: port 1() entered disabled state [ 217.352202][ T9491] bridge_slave_1: left allmulticast mode [ 217.358363][ T9491] bridge_slave_1: left promiscuous mode [ 217.364578][ T9491] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.380926][ T9491] bond0: (slave bond_slave_0): Releasing backup interface [ 217.394810][ T9491] bond0: (slave bond_slave_1): Releasing backup interface [ 217.444704][ T9491] team0: Port device team_slave_0 removed [ 217.526774][ T9491] team0: Port device team_slave_1 removed [ 217.542646][ T9491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.567541][ T9491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.592031][ T9491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.617123][ T9491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.650284][ T9491] bond2: (slave bond3): Releasing backup interface [ 217.657147][ T9505] netlink: 'syz.0.1000': attribute type 1 has an invalid length. [ 217.657171][ T9505] netlink: 'syz.0.1000': attribute type 11 has an invalid length. [ 217.682592][ T9491] bond3: left promiscuous mode [ 217.688332][ T9491] bond3: left allmulticast mode [ 217.859121][ T9509] lo speed is unknown, defaulting to 1000 [ 218.117495][ T9524] netlink: 'syz.3.1004': attribute type 1 has an invalid length. [ 219.219054][ T9562] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.232124][ T9564] netlink: 'syz.1.1017': attribute type 1 has an invalid length. [ 219.280766][ T9562] dummy0: entered promiscuous mode [ 219.289464][ T9562] batadv_slave_1: entered promiscuous mode [ 219.298296][ T9562] debugfs: 'hsr1' already exists in 'hsr' [ 219.305578][ T9562] Cannot create hsr debugfs directory [ 219.634369][ T9587] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 219.653692][ T9590] __nla_validate_parse: 10 callbacks suppressed [ 219.653710][ T9590] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1023'. [ 219.915791][ T9587] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.975730][ T9596] bond4: (slave wlan0): Enslaving as an active interface with a down link [ 220.024991][ T9604] vlan3: entered allmulticast mode [ 220.031117][ T9604] veth1: entered allmulticast mode [ 220.048292][ T9604] veth1: entered promiscuous mode [ 220.064933][ T9604] veth1: left promiscuous mode [ 220.115248][ T9604] bond4: (slave vlan3): making interface the new active one [ 220.157297][ T9604] bond4: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 220.203860][ T9604] veth1: entered promiscuous mode [ 220.231752][ T9604] vlan3: entered promiscuous mode [ 220.251396][ T9604] bond4: (slave vlan3): Enslaving as an active interface with an up link [ 220.483243][ T9619] tipc: Enabled bearer , priority 0 [ 220.671204][ T9646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1037'. [ 220.880927][ T9658] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1039'. [ 220.922558][ T9656] syzkaller0: entered promiscuous mode [ 220.947184][ T9656] syzkaller0: entered allmulticast mode [ 221.017653][ T9656] tipc: Enabled bearer , priority 0 [ 221.055217][ T9656] tipc: Resetting bearer [ 221.112230][ T9652] tipc: Resetting bearer [ 221.151661][ T9652] tipc: Disabling bearer [ 221.491228][ T9680] sctp: [Deprecated]: syz.4.1046 (pid 9680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.491228][ T9680] Use struct sctp_sack_info instead [ 221.598394][ T5957] tipc: Node number set to 2507939462 [ 221.731251][ T9692] netlink: 'syz.2.1050': attribute type 3 has an invalid length. [ 221.780409][ T9696] netlink: 'syz.2.1050': attribute type 3 has an invalid length. [ 221.914283][ T9701] netlink: 4872 bytes leftover after parsing attributes in process `syz.0.1052'. [ 221.978100][ T9705] veth0: entered promiscuous mode [ 222.015903][ T9708] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 222.022749][ T9708] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 222.033903][ T9704] veth0: left promiscuous mode [ 222.062506][ T9708] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 222.069080][ T9708] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 222.171473][ T9708] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 222.178198][ T9708] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 222.201663][ T9708] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 222.208191][ T9708] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 222.220222][ T9708] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 222.227696][ T9708] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 222.345549][ T9722] netlink: 'syz.4.1059': attribute type 11 has an invalid length. [ 222.429967][ T9725] netlink: 'syz.1.1060': attribute type 1 has an invalid length. [ 222.482529][ T9723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1058'. [ 222.708167][ T9740] netlink: 18 bytes leftover after parsing attributes in process `syz.1.1063'. [ 222.740275][ T1156] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc8 [ 222.777328][ T9740] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.1063'. [ 222.925466][ T9743] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 222.947691][ T9743] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 223.360830][ T9767] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1071'. [ 223.713075][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'. [ 224.105779][ T5867] block nbd0: Receive control failed (result -32) [ 224.359299][ T9808] netlink: 'syz.2.1084': attribute type 6 has an invalid length. [ 224.582042][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 224.770376][ T9837] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1093'. [ 224.878437][ T9844] netlink: 'syz.1.1096': attribute type 30 has an invalid length. [ 224.915673][ T9844] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 224.950396][ T9844] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 225.044893][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1099'. [ 225.232238][ T9857] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.654043][ T9884] netlink: 'syz.1.1107': attribute type 4 has an invalid length. [ 225.714666][ T9884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1107'. [ 225.889676][ T9893] !€ÿ: renamed from bond_slave_0 (while UP) [ 226.075771][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1111'. [ 226.189747][ T9906] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1112'. [ 226.192701][ T9908] tipc: Enabled bearer , priority 0 [ 226.218295][ T9908] syzkaller0: entered promiscuous mode [ 226.247326][ T9908] syzkaller0: entered allmulticast mode [ 226.275389][ T9906] vlan1: entered allmulticast mode [ 226.291474][ T9906] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 226.310537][ T9919] syz.2.1116 uses old SIOCAX25GETINFO [ 226.344835][ T9908] tipc: Resetting bearer [ 226.365142][ T9905] tipc: Resetting bearer [ 226.393135][ T9905] tipc: Disabling bearer [ 226.615281][ T9934] dvmrp0: entered allmulticast mode [ 226.819041][ T9944] syzkaller1: entered promiscuous mode [ 226.832652][ T9944] syzkaller1: entered allmulticast mode [ 227.703057][ T9977] lo speed is unknown, defaulting to 1000 [ 227.734693][ T9977] hsr0 speed is unknown, defaulting to 1000 [ 227.772538][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1135'. [ 227.931461][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'. [ 227.964717][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1137'. [ 227.974664][ T9988] netlink: 'syz.2.1137': attribute type 21 has an invalid length. [ 227.983005][ T9988] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1137'. [ 228.193104][ T9997] syzkaller1: entered promiscuous mode [ 228.229000][ T9997] syzkaller1: entered allmulticast mode [ 228.318836][T10000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1140'. [ 228.637489][T10028] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.649381][T10027] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 228.663261][T10027] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 228.709874][T10027] netlink: 'syz.2.1146': attribute type 10 has an invalid length. [ 228.742211][T10027] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 228.749840][T10027] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 228.765877][T10027] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 228.780877][T10027] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 228.798583][T10032] dummy0: left allmulticast mode [ 228.804117][T10032] bridge0: port 3(dummy0) entered disabled state [ 228.842278][T10032] bridge_slave_0: left allmulticast mode [ 228.849510][T10032] bridge_slave_0: left promiscuous mode [ 228.855456][T10032] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.868263][T10032] bridge_slave_1: left allmulticast mode [ 228.874050][T10032] bridge_slave_1: left promiscuous mode [ 228.881875][T10032] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.893874][T10032] bond0: (slave 1!€ÿ): Releasing backup interface [ 228.903787][T10032] !€ÿ: left promiscuous mode [ 228.920822][T10032] bond0: (slave bond_slave_1): Releasing backup interface [ 228.948578][T10032] bond_slave_1: left promiscuous mode [ 228.964829][T10032] team0: Port device team_slave_0 removed [ 228.979589][T10032] team0: Port device team_slave_1 removed [ 228.998968][T10032] bond0: (slave wlan1): Releasing backup interface [ 229.012179][T10032] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 229.372831][T10050] pim6reg1: entered promiscuous mode [ 229.389671][T10050] pim6reg1: entered allmulticast mode [ 229.542269][T10058] netlink: 'syz.3.1156': attribute type 1 has an invalid length. [ 229.761682][T10064] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 229.979641][T10089] __nla_validate_parse: 5 callbacks suppressed [ 229.979662][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1164'. [ 230.322269][T10094] can: request_module (can-proto-4) failed. [ 230.330100][ C0] net_ratelimit: 1994 callbacks suppressed [ 230.330122][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.548815][T10110] syzkaller1: entered promiscuous mode [ 230.590322][T10110] syzkaller1: entered allmulticast mode [ 230.772922][T10122] netlink: 'syz.4.1173': attribute type 1 has an invalid length. [ 231.200775][T10142] syz.3.1180 (10142) used obsolete PPPIOCDETACH ioctl [ 231.520653][ T79] vlan3: left promiscuous mode [ 231.577187][T10163] veth0_macvtap: left promiscuous mode [ 231.788387][T10173] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1188'. [ 231.854617][T10175] netlink: 'syz.3.1189': attribute type 21 has an invalid length. [ 231.866864][T10173] syz.2.1188: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 231.882770][T10175] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1189'. [ 231.891917][T10173] CPU: 0 UID: 0 PID: 10173 Comm: syz.2.1188 Not tainted syzkaller #0 PREEMPT(full) [ 231.891947][T10173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.891967][T10173] Call Trace: [ 231.891976][T10173] [ 231.891985][T10173] dump_stack_lvl+0x189/0x250 [ 231.892019][T10173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.892049][T10173] ? __pfx__printk+0x10/0x10 [ 231.892079][T10173] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 231.892104][T10173] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 231.892131][T10173] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 231.892159][T10173] warn_alloc+0x214/0x310 [ 231.892192][T10173] ? stack_depot_save_flags+0x40/0x860 [ 231.892224][T10173] ? __pfx_warn_alloc+0x10/0x10 [ 231.892256][T10173] ? kasan_save_track+0x4f/0x80 [ 231.892282][T10173] ? xskq_create+0x56/0x170 [ 231.892310][T10173] ? xsk_init_queue+0xb0/0x110 [ 231.892335][T10173] ? xsk_setsockopt+0x4dc/0x8d0 [ 231.892363][T10173] ? do_sock_setsockopt+0x17c/0x1b0 [ 231.892386][T10173] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 231.892409][T10173] ? do_syscall_64+0xfa/0x3b0 [ 231.892438][T10173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.892474][T10173] __vmalloc_node_range_noprof+0x125/0x12f0 [ 231.892550][T10173] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 231.892594][T10173] ? __kasan_kmalloc+0x93/0xb0 [ 231.892631][T10173] vmalloc_user_noprof+0xad/0xf0 [ 231.892664][T10173] ? xskq_create+0xbf/0x170 [ 231.892699][T10173] xskq_create+0xbf/0x170 [ 231.892736][T10173] xsk_init_queue+0xb0/0x110 [ 231.892773][T10173] xsk_setsockopt+0x4dc/0x8d0 [ 231.892808][T10173] ? __pfx_xsk_setsockopt+0x10/0x10 [ 231.892849][T10173] ? __pfx_aa_sk_perm+0x10/0x10 [ 231.892891][T10173] ? aa_sock_opt_perm+0xff/0x1b0 [ 231.892919][T10173] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 231.892945][T10173] ? __pfx_xsk_setsockopt+0x10/0x10 [ 231.892977][T10173] do_sock_setsockopt+0x17c/0x1b0 [ 231.893010][T10173] __x64_sys_setsockopt+0x13f/0x1b0 [ 231.893041][T10173] do_syscall_64+0xfa/0x3b0 [ 231.893062][T10173] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.893095][T10173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.893119][T10173] ? clear_bhb_loop+0x60/0xb0 [ 231.893147][T10173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.893169][T10173] RIP: 0033:0x7f788b78ebe9 [ 231.893200][T10173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.893220][T10173] RSP: 002b:00007f788c5f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 231.893244][T10173] RAX: ffffffffffffffda RBX: 00007f788b9c5fa0 RCX: 00007f788b78ebe9 [ 231.893262][T10173] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 231.893277][T10173] RBP: 00007f788b811e19 R08: 0000000000000004 R09: 0000000000000000 [ 231.893290][T10173] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.893305][T10173] R13: 00007f788b9c6038 R14: 00007f788b9c5fa0 R15: 00007ffd20b5c408 [ 231.893344][T10173] [ 231.893483][T10173] Mem-Info: [ 231.978490][T10175] netlink: 'syz.3.1189': attribute type 27 has an invalid length. [ 231.984603][T10173] active_anon:7429 inactive_anon:0 isolated_anon:0 [ 231.984603][T10173] active_file:2565 inactive_file:39888 isolated_file:0 [ 231.984603][T10173] unevictable:768 dirty:55 writeback:0 [ 231.984603][T10173] slab_reclaimable:11193 slab_unreclaimable:100077 [ 231.984603][T10173] mapped:29096 shmem:1359 pagetables:1478 [ 231.984603][T10173] sec_pagetables:0 bounce:0 [ 231.984603][T10173] kernel_misc_reclaimable:0 [ 231.984603][T10173] free:1323205 free_pcp:12485 free_cma:0 [ 232.070733][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1190'. [ 232.133658][T10173] Node 0 active_anon:29716kB inactive_anon:0kB active_file:10260kB inactive_file:159364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120440kB dirty:220kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12604kB pagetables:5644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 232.195102][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1190'. [ 232.262735][T10173] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 232.349265][T10173] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 232.381987][T10173] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 232.387993][T10173] Node 0 DMA32 free:1384852kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29944kB inactive_anon:0kB active_file:10260kB inactive_file:157796kB unevictable:1536kB writepending:248kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:32260kB local_pcp:15400kB free_cma:0kB [ 232.512833][T10173] lowmem_reserve[]: 0 0 1 1 1 [ 232.529889][T10173] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 232.601141][T10173] lowmem_reserve[]: 0 0 0 0 0 [ 232.639348][T10173] Node 1 Normal free:3892548kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18272kB local_pcp:9376kB free_cma:0kB [ 232.695615][T10173] lowmem_reserve[]: 0 0 0 0 0 [ 232.718646][T10173] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 232.732819][T10173] Node 0 DMA32: 16*4kB (UME) 504*8kB (UM) 511*16kB (UME) 712*32kB (UM) 299*64kB (UM) 386*128kB (UME) 317*256kB (UME) 256*512kB (UME) 190*1024kB (UE) 9*2048kB (UME) 209*4096kB (M) = 1384880kB [ 232.735866][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 232.822125][T10173] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 232.897033][T10173] Node 1 Normal: 187*4kB (UME) 37*8kB (UME) 43*16kB (UME) 124*32kB (UME) 32*64kB (UME) 6*128kB (UME) 2*256kB (M) 3*512kB (ME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (UM) = 3892548kB [ 232.991104][T10204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.042982][T10173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.078887][T10173] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 233.084451][T10213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1199'. [ 233.116289][T10173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.135058][T10213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1199'. [ 233.148440][T10173] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 233.197962][T10173] 43810 total pagecache pages [ 233.202740][T10173] 0 pages in swap cache [ 233.228031][T10173] Free swap = 124996kB [ 233.232256][T10173] Total swap = 124996kB [ 233.248882][T10218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1201'. [ 233.259081][T10173] 2097051 pages RAM [ 233.262934][T10173] 0 pages HighMem/MovableOnly [ 233.271182][T10218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1201'. [ 233.292220][T10173] 425667 pages reserved [ 233.303096][T10219] tipc: Enabled bearer , priority 0 [ 233.310526][T10173] 0 pages cma reserved [ 233.350004][T10224] tipc: Enabling of bearer rejected, already enabled [ 233.891867][T10256] syzkaller1: entered promiscuous mode [ 233.899437][T10256] syzkaller1: entered allmulticast mode [ 235.089802][T10296] __nla_validate_parse: 7 callbacks suppressed [ 235.089825][T10296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1227'. [ 235.363386][T10312] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1230'. [ 235.400842][T10312] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1230'. [ 235.425709][T10317] lo speed is unknown, defaulting to 1000 [ 235.775895][T10328] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1236'. [ 235.797600][T10329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1235'. [ 235.850243][T10329] team0: Mode changed to "loadbalance" [ 236.128402][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 236.138154][T10343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1241'. [ 236.162733][T10343] netlink: 'syz.1.1241': attribute type 62 has an invalid length. [ 236.662291][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1247'. [ 236.881730][T10376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.887957][T10383] netlink: 'syz.0.1251': attribute type 10 has an invalid length. [ 236.924599][T10379] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1251'. [ 236.943664][T10379] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1251'. [ 237.013569][T10382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.051351][T10383] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.066802][T10383] bridge_slave_1: left allmulticast mode [ 237.072519][T10383] bridge_slave_1: left promiscuous mode [ 237.090818][T10383] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.108117][T10383] bridge_slave_1: entered allmulticast mode [ 237.118042][T10383] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 237.255865][T10393] netlink: 'syz.1.1254': attribute type 18 has an invalid length. [ 237.312489][T10401] netlink: 'syz.0.1257': attribute type 1 has an invalid length. [ 237.457634][T10406] netlink: 'syz.4.1258': attribute type 21 has an invalid length. [ 237.551109][T10416] team0: Device vti1 is up. Set it down before adding it as a team port [ 237.672572][T10428] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 238.402059][T10467] syzkaller0: entered promiscuous mode [ 238.409535][T10467] syzkaller0: entered allmulticast mode [ 238.429547][T10469] openvswitch: netlink: Key type 1808 is out of range max 32 [ 238.509576][T10473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.899106][T10491] netlink: 'syz.4.1283': attribute type 1 has an invalid length. [ 239.118029][T10496] block nbd1: server does not support multiple connections per device. [ 239.155708][T10496] block nbd1: shutting down sockets [ 239.172885][T10508] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 239.982580][T10549] netlink: 'syz.2.1300': attribute type 2 has an invalid length. [ 239.994400][T10549] netlink: 'syz.2.1300': attribute type 2 has an invalid length. [ 240.105374][T10553] __nla_validate_parse: 10 callbacks suppressed [ 240.105396][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1301'. [ 240.162867][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1301'. [ 240.180919][T10557] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 240.700603][T10576] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.747949][T10576] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.955301][T10576] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.002942][T10576] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.069214][T10583] lo speed is unknown, defaulting to 1000 [ 241.069334][T10600] tipc: Enabling of bearer rejected, failed to enable media [ 241.101282][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1317'. [ 241.118752][T10583] hsr0 speed is unknown, defaulting to 1000 [ 241.158774][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1317'. [ 241.170770][T10576] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.189289][T10576] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.288886][T10613] netlink: 'syz.4.1318': attribute type 11 has an invalid length. [ 241.297620][T10613] netlink: 'syz.4.1318': attribute type 11 has an invalid length. [ 241.307239][T10613] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1318'. [ 241.352554][T10576] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.363815][T10576] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.377513][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1318'. [ 241.818327][T10623] can: request_module (can-proto-4) failed. [ 241.883512][T10632] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 241.909555][T10635] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 242.001450][ T1144] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.034367][ T1144] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.082899][ T1144] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.091981][ T1144] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.118486][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.131152][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.181380][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.197928][T10641] netlink: 'syz.4.1327': attribute type 10 has an invalid length. [ 242.217160][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.250098][T10645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1327'. [ 242.284230][T10641] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 242.311472][T10641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.532553][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1332'. [ 242.548725][T10657] netlink: 'syz.3.1332': attribute type 3 has an invalid length. [ 243.599276][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1342'. [ 243.605887][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1344'. [ 243.699571][T10711] delete_channel: no stack [ 244.004384][T10729] batadv_slave_1: Device is already in use. [ 244.777894][T10775] netlink: 'syz.1.1364': attribute type 1 has an invalid length. [ 245.268492][T10789] __nla_validate_parse: 9 callbacks suppressed [ 245.268514][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1367'. [ 245.423146][T10798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1368'. [ 245.489464][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'. [ 245.880069][T10823] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1376'. [ 246.024162][T10828] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 246.525213][T10853] netlink: 'syz.2.1385': attribute type 5 has an invalid length. [ 246.577033][T10853] netlink: 'syz.2.1385': attribute type 5 has an invalid length. [ 246.598039][T10857] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1386'. [ 246.629393][T10857] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 246.669626][T10857] openvswitch: netlink: Message has 6332 unknown bytes. [ 246.844854][T10870] openvswitch: netlink: Missing valid actions attribute. [ 246.853179][T10870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.011285][T10878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1393'. [ 247.325173][T10886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1397'. [ 247.357114][T10886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1397'. [ 247.512789][T10898] netlink: 'syz.4.1400': attribute type 1 has an invalid length. [ 247.536580][T10898] netlink: 784 bytes leftover after parsing attributes in process `syz.4.1400'. [ 247.547846][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1400'. [ 248.220263][T10934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.267571][T10931] lo speed is unknown, defaulting to 1000 [ 248.275172][T10931] hsr0 speed is unknown, defaulting to 1000 [ 248.393102][T10926] A link change request failed with some changes committed already. Interface gretap1 may have been left with an inconsistent configuration, please check. [ 248.486948][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 249.459844][T11011] netem: incorrect ge model size [ 249.466733][T11011] netem: change failed [ 249.491074][T11011] syz_tun: left allmulticast mode [ 249.500985][T11011] syz_tun: left promiscuous mode [ 249.508442][T11011] bridge0: port 3(syz_tun) entered disabled state [ 249.523802][T11011] bridge_slave_0: left allmulticast mode [ 249.532024][T11011] bridge_slave_0: left promiscuous mode [ 249.538539][T11011] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.551190][T11011] bond0: (slave bridge_slave_1): Releasing backup interface [ 249.561333][T11011] bridge_slave_1: left allmulticast mode [ 249.570814][T11011] bond0: (slave bond_slave_0): Releasing backup interface [ 249.579662][T11011] bond_slave_0: left allmulticast mode [ 249.589602][T11011] bond0: (slave bond_slave_1): Releasing backup interface [ 249.602655][T11011] bond_slave_1: left allmulticast mode [ 249.615497][T11011] team0: Port device team_slave_0 removed [ 249.628102][T11011] team0: Port device team_slave_1 removed [ 249.721596][T11013] tipc: Resetting bearer [ 249.822388][T11013] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 249.918170][ T1156] tipc: Resetting bearer [ 249.971128][T11025] (unnamed net_device) (uninitialized): (slave ip6tnl0): Device is not bonding slave [ 250.026161][T11025] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6tnl0) [ 250.175341][T11028] netlink: 'syz.3.1434': attribute type 11 has an invalid length. [ 250.389049][T11032] netlink: 'syz.3.1434': attribute type 1 has an invalid length. [ 250.411023][T11032] __nla_validate_parse: 14 callbacks suppressed [ 250.411043][T11032] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1434'. [ 250.428854][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'. [ 250.627138][T11054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1440'. [ 251.419688][T11093] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1450'. [ 251.680534][T11106] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 251.722331][T11106] netlink: 'syz.0.1454': attribute type 9 has an invalid length. [ 251.751730][T11106] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.1454'. [ 252.250710][T11135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1460'. [ 252.260698][T11135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1460'. [ 253.439779][T11242] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1473'. [ 253.481276][T11242] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1473'. [ 253.510136][T11248] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1476'. [ 253.808321][T11253] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 254.091592][ T1156] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 254.590664][T11291] netlink: 'syz.4.1488': attribute type 29 has an invalid length. [ 254.610467][T11303] tipc: Enabling of bearer rejected, media not registered [ 254.633218][T11291] netlink: 'syz.4.1488': attribute type 29 has an invalid length. [ 254.662600][T11308] netlink: 'syz.1.1492': attribute type 4 has an invalid length. [ 254.990767][T11325] netlink: 'syz.0.1496': attribute type 10 has an invalid length. [ 255.026277][T11328] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 255.047516][T11325] bridge0: entered allmulticast mode [ 255.373474][T11346] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 255.495069][T11354] netlink: 'syz.4.1505': attribute type 11 has an invalid length. [ 255.533161][T11354] netlink: 'syz.4.1505': attribute type 11 has an invalid length. [ 255.562664][T11354] __nla_validate_parse: 9 callbacks suppressed [ 255.562685][T11354] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1505'. [ 255.604172][T11361] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 255.618686][T11363] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 256.015602][T11378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1512'. [ 256.631124][T11413] IPVS: set_ctl: invalid protocol: 51 172.20.20.64:20002 [ 256.651826][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1523'. [ 256.692885][T11410] lo speed is unknown, defaulting to 1000 [ 256.703447][T11410] hsr0 speed is unknown, defaulting to 1000 [ 256.896827][ T1779] IPVS: starting estimator thread 0... [ 257.015157][T11431] IPVS: using max 25 ests per chain, 60000 per kthread [ 257.132736][T11441] netlink: 808 bytes leftover after parsing attributes in process `syz.1.1529'. [ 257.201496][T11439] netlink: 'syz.3.1528': attribute type 33 has an invalid length. [ 257.385189][T11442] veth11: entered promiscuous mode [ 257.453847][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1534'. [ 257.615237][T11463] netlink: 'syz.1.1537': attribute type 1 has an invalid length. [ 257.712294][T11463] bond4: entered promiscuous mode [ 257.719240][T11463] 8021q: adding VLAN 0 to HW filter on device bond4 [ 257.853985][T11466] 8021q: adding VLAN 0 to HW filter on device bond4 [ 257.863496][T11466] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 257.876004][T11466] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 257.900324][T11466] bond4: (slave wireguard0): making interface the new active one [ 257.916215][T11466] wireguard0: entered promiscuous mode [ 257.934064][T11466] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 257.942530][T11480] netlink: 'syz.0.1539': attribute type 11 has an invalid length. [ 258.005979][T11482] rdma_op ffff8880311a11f0 conn xmit_rdma 0000000000000000 [ 258.074831][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1541'. [ 258.086848][T11478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1539'. [ 258.719493][T11516] tipc: Enabled bearer , priority 0 [ 258.826813][T11516] syzkaller0: entered promiscuous mode [ 258.855886][T11516] syzkaller0: entered allmulticast mode [ 258.891897][T11516] tipc: Resetting bearer [ 259.030079][T11514] tipc: Resetting bearer [ 259.611994][T11565] netlink: 'syz.4.1557': attribute type 1 has an invalid length. [ 259.747012][ T1779] tipc: Node number set to 916196323 [ 260.065150][T11585] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1559'. [ 260.200922][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1559'. [ 261.059579][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.222591][T11514] tipc: Disabling bearer [ 261.237712][T11545] IPv6: sit1: Disabled Multicast RS [ 261.243922][T11545] sit1: entered allmulticast mode [ 261.307035][T11573] veth3: entered promiscuous mode [ 261.318881][T11574] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 261.449197][T11574] bond5: entered promiscuous mode [ 261.475170][T11574] bond5: entered allmulticast mode [ 261.500779][T11574] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.537837][T11579] tipc: Enabled bearer , priority 0 [ 261.545136][T11581] syzkaller0: entered promiscuous mode [ 261.551550][T11581] syzkaller0: entered allmulticast mode [ 261.562696][T11593] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1560'. [ 261.593132][T11572] tipc: Resetting bearer [ 261.683836][T11605] netlink: 'syz.0.1563': attribute type 21 has an invalid length. [ 261.707717][T11572] tipc: Disabling bearer [ 261.735760][T11608] tap0: tun_chr_ioctl cmd 1074025678 [ 261.741695][T11608] tap0: group set to 0 [ 261.746194][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1563'. [ 261.817188][T11614] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1566'. [ 261.921440][T11616] netlink: 'syz.3.1567': attribute type 10 has an invalid length. [ 262.110093][T11635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1568'. [ 262.262164][T11640] netlink: 'syz.3.1572': attribute type 1 has an invalid length. [ 262.955412][T11649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.451009][T11676] geneve1: entered allmulticast mode [ 263.621288][T11692] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1581'. [ 264.221467][T11718] lo speed is unknown, defaulting to 1000 [ 264.243374][T11718] hsr0 speed is unknown, defaulting to 1000 [ 264.438866][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1594'. [ 264.485561][T11728] pim6reg1: entered promiscuous mode [ 264.491185][T11728] pim6reg1: entered allmulticast mode [ 264.883841][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1597'. [ 265.014774][T11750] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 265.593947][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1609'. [ 265.650585][T11784] netlink: 'syz.1.1609': attribute type 3 has an invalid length. [ 265.857934][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1613'. [ 265.993749][T11797] can: request_module (can-proto-4) failed. [ 266.822824][T11844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1628'. [ 267.079623][T11844] veth0: entered promiscuous mode [ 267.095607][T11843] veth0: left promiscuous mode [ 267.278762][T11868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.461544][T11884] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 267.495426][T11886] netlink: 'syz.1.1638': attribute type 9 has an invalid length. [ 267.504783][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 267.525048][T11886] netlink: 'syz.1.1638': attribute type 9 has an invalid length. [ 267.527881][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.533157][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1638'. [ 267.595316][T11227] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.621821][T11227] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.692790][T11227] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.693308][T11883] netlink: 'syz.2.1637': attribute type 21 has an invalid length. [ 267.716680][T11883] IPv6: NLM_F_CREATE should be specified when creating new route [ 267.729465][T11902] netlink: 'syz.3.1641': attribute type 1 has an invalid length. [ 267.735311][T11883] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 267.744792][T11883] IPv6: NLM_F_CREATE should be set when creating new route [ 267.752298][T11883] IPv6: NLM_F_CREATE should be set when creating new route [ 267.759666][T11883] IPv6: NLM_F_CREATE should be set when creating new route [ 267.767090][T11902] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1641'. [ 267.771963][T11892] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1637'. [ 268.145430][T11926] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 268.252593][T11933] pim6reg527: entered allmulticast mode [ 268.396747][T11936] syzkaller1: entered promiscuous mode [ 268.407147][T11936] syzkaller1: entered allmulticast mode [ 268.545412][T11943] netlink: 'syz.0.1654': attribute type 83 has an invalid length. [ 268.559066][T11943] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1654'. [ 268.669105][T11958] veth0: entered promiscuous mode [ 268.684969][T11957] veth0: left promiscuous mode [ 268.694380][T11960] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1659'. [ 268.738596][T11962] netlink: 'syz.4.1660': attribute type 58 has an invalid length. [ 268.751788][T11962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1660'. [ 268.978067][T11973] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 269.022973][T11981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1667'. [ 269.124191][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1668'. [ 269.165229][T11987] netlink: 'syz.1.1670': attribute type 1 has an invalid length. [ 269.400714][T12003] sch_tbf: burst 0 is lower than device lo mtu (65499) ! [ 269.525167][T12011] syzkaller0: entered promiscuous mode [ 269.531652][T12011] syzkaller0: entered allmulticast mode [ 270.332470][T12026] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 270.535528][T12044] netlink: 'syz.2.1686': attribute type 3 has an invalid length. [ 270.560045][T12044] netlink: 'syz.2.1686': attribute type 3 has an invalid length. [ 270.987971][T12075] nbd: must specify an index to disconnect [ 271.008701][T12068] nbd: must specify an index to disconnect [ 271.029953][T12071] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 271.047459][ T5867] Bluetooth: hci3: command 0x0406 tx timeout [ 271.099598][T12071] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.412152][T12097] validate_nla: 43 callbacks suppressed [ 271.412173][T12097] netlink: 'syz.2.1702': attribute type 2 has an invalid length. [ 271.491818][T12100] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 271.502859][T12101] netlink: 'syz.0.1701': attribute type 1 has an invalid length. [ 271.511373][T12100] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 273.067025][T12162] __nla_validate_parse: 11 callbacks suppressed [ 273.067045][T12162] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1725'. [ 273.088349][T12163] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1724'. [ 273.111121][T12162] netlink: 'syz.0.1725': attribute type 1 has an invalid length. [ 273.136733][T12163] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1724'. [ 273.384902][T12171] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1728'. [ 273.612815][T12193] bridge0: port 1(batadv2) entered blocking state [ 273.624935][T12193] bridge0: port 1(batadv2) entered disabled state [ 273.643973][T12193] batadv2: entered allmulticast mode [ 273.658264][T12193] batadv2: entered promiscuous mode [ 274.073720][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1742'. [ 274.118613][ T12] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 274.120319][T12219] batadv2: left allmulticast mode [ 274.128217][ T12] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 274.153491][T12222] netlink: 'syz.3.1743': attribute type 4 has an invalid length. [ 274.172522][T12222] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1743'. [ 274.182703][T12219] batadv2: left promiscuous mode [ 274.192364][T12219] bridge0: port 1(batadv2) entered disabled state [ 274.419402][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1745'. [ 274.450481][T12234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.494718][T12236] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 274.525048][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1745'. [ 274.543336][T12237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.607293][T12244] syz_tun: entered allmulticast mode [ 274.659780][T12243] syz_tun: left allmulticast mode [ 274.671829][T12247] netlink: 'syz.2.1751': attribute type 28 has an invalid length. [ 274.697369][T12247] netlink: 'syz.2.1751': attribute type 3 has an invalid length. [ 274.719011][T12247] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1751'. [ 274.840808][T12261] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1752'. [ 274.869723][T12264] tipc: Enabling of bearer rejected, already enabled [ 274.884212][T12263] netlink: 'syz.2.1754': attribute type 29 has an invalid length. [ 274.899460][T12263] netlink: 'syz.2.1754': attribute type 1 has an invalid length. [ 274.977767][T12263] bond4: (slave gretap1): making interface the new active one [ 274.987502][T12263] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 275.032935][T12280] netlink: 'syz.0.1757': attribute type 11 has an invalid length. [ 275.057284][T12280] netlink: 'syz.0.1757': attribute type 11 has an invalid length. [ 275.652221][T12305] tipc: Enabling of bearer rejected, already enabled [ 276.452505][T12351] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 276.658230][T12361] delete_channel: no stack [ 276.885349][T12372] tipc: Failed to remove unknown binding: 66,1,1/0:3382753512/3382753514 [ 276.960461][T12367] tc_dump_action: action bad kind [ 277.264289][T12386] ipvlan0: entered promiscuous mode [ 278.043167][T12439] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 278.063022][T12428] "syz.4.1796" (12428) uses obsolete ecb(arc4) skcipher [ 278.121279][T12440] netlink: 'syz.2.1798': attribute type 7 has an invalid length. [ 278.131139][T12440] __nla_validate_parse: 43 callbacks suppressed [ 278.131159][T12440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1798'. [ 278.190798][T12450] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1798'. [ 278.218391][T12450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1798'. [ 278.430927][T12460] netlink: 'syz.4.1803': attribute type 1 has an invalid length. [ 278.573415][T12468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1806'. [ 278.615348][T12460] bond3: entered promiscuous mode [ 278.622118][T12460] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.674135][T12475] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 278.767952][T12462] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.798997][T12480] Bluetooth: MGMT ver 1.23 [ 278.803602][T12462] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 278.815885][T12462] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 278.831819][T12462] bond3: (slave wireguard0): making interface the new active one [ 278.842360][T12462] wireguard0: entered promiscuous mode [ 278.850336][T12462] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 278.920171][T12482] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1808'. [ 278.987865][T12482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1808'. [ 279.259632][T12501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1813'. [ 279.288344][T12495] lo speed is unknown, defaulting to 1000 [ 279.297637][T12501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1813'. [ 279.327064][T12495] hsr0 speed is unknown, defaulting to 1000 [ 279.719757][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1809'. [ 279.813043][T12514] tipc: Enabled bearer , priority 0 [ 279.831038][T12514] syzkaller0: entered promiscuous mode [ 279.840941][T12514] syzkaller0: entered allmulticast mode [ 279.881382][T12513] tipc: Resetting bearer [ 279.979519][T12513] tipc: Disabling bearer [ 280.146704][T12533] lo: entered promiscuous mode [ 280.181668][T12533] tunl0: entered promiscuous mode [ 280.211297][T12533] gre0: entered promiscuous mode [ 280.278437][T12533] gretap0: entered promiscuous mode [ 280.284553][T12541] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1822'. [ 280.366157][T12533] erspan0: entered promiscuous mode [ 280.372529][T12533] ip_vti0: entered promiscuous mode [ 280.397610][ T56] lo speed is unknown, defaulting to 1000 [ 280.403874][ T5923] lo speed is unknown, defaulting to 1000 [ 280.420015][ T5923] syz2: Port: 1 Link DOWN [ 280.717712][T12558] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 280.743559][T12561] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 281.120335][T12589] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 281.177915][T12594] ªªªªªª: renamed from vlan0 (while UP) [ 281.219989][T12599] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 283.164552][T12663] __nla_validate_parse: 7 callbacks suppressed [ 283.164574][T12663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1862'. [ 283.317249][T12660] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 283.441604][T12673] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1866'. [ 283.472293][T12664] gretap1: entered promiscuous mode [ 283.508320][T12673] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1866'. [ 283.660116][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1868'. [ 283.672704][T12681] bond6: entered promiscuous mode [ 283.694921][T12685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1868'. [ 283.980978][T12712] veth0: entered promiscuous mode [ 284.018731][T12712] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1875'. [ 284.925941][T12708] veth0: left promiscuous mode [ 284.935813][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1880'. [ 284.994583][T12729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1880'. [ 285.117450][T12740] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1883'. [ 285.311408][T12750] netlink: 'syz.2.1886': attribute type 58 has an invalid length. [ 285.325933][T12750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1886'. [ 285.432706][T12760] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 285.475907][T12760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.538356][T12760] netlink: 'syz.4.1888': attribute type 1 has an invalid length. [ 285.769576][T12770] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 286.080632][T12780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.792492][T12877] tipc: Enabling of bearer rejected, failed to enable media [ 287.834633][T12881] netlink: 'syz.1.1919': attribute type 10 has an invalid length. [ 288.221081][T12889] syzkaller0: entered promiscuous mode [ 288.230220][T12889] syzkaller0: entered allmulticast mode [ 288.660627][T12924] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 288.681937][T12931] netlink: 'syz.0.1931': attribute type 12 has an invalid length. [ 290.014596][T12912] bond5: entered promiscuous mode [ 290.020099][T12912] bond5: entered allmulticast mode [ 290.025602][T12912] 8021q: adding VLAN 0 to HW filter on device bond5 [ 290.040615][T12932] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 290.060934][T12932] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 290.084991][T12932] gretap2: entered promiscuous mode [ 290.117054][T12932] gretap2: entered allmulticast mode [ 290.178451][T12935] __nla_validate_parse: 10 callbacks suppressed [ 290.178474][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1932'. [ 290.218931][T12937] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1935'. [ 290.228734][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1932'. [ 290.248698][T12940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1932'. [ 290.516998][T12954] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1939'. [ 290.554699][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1939'. [ 290.700540][T12960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1941'. [ 290.736114][T12960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1941'. [ 292.173978][T13021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1954'. [ 292.620412][T13033] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1956'. [ 293.199601][T13043] lo: entered allmulticast mode [ 293.235391][T13043] lo: left allmulticast mode [ 293.545910][T13057] netlink: 'syz.0.1963': attribute type 4 has an invalid length. [ 294.859248][T13102] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 295.103771][T13110] netlink: 'syz.0.1979': attribute type 1 has an invalid length. [ 295.154505][T13110] netlink: 'syz.0.1979': attribute type 11 has an invalid length. [ 295.464403][T13124] __nla_validate_parse: 2 callbacks suppressed [ 295.464424][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1982'. [ 295.503722][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1982'. [ 295.560850][T13124] netlink: 'syz.2.1982': attribute type 4 has an invalid length. [ 296.364951][T13150] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.475905][T13158] netlink: 'syz.0.1991': attribute type 1 has an invalid length. [ 296.677636][T13167] openvswitch: netlink: IP tunnel TTL not specified. [ 296.724267][T13158] 8021q: adding VLAN 0 to HW filter on device bond7 [ 297.820696][T13206] netlink: 'syz.0.2003': attribute type 23 has an invalid length. [ 297.951141][T13206] netlink: 'syz.0.2003': attribute type 4 has an invalid length. [ 297.971744][T13206] netlink: 'syz.0.2003': attribute type 23 has an invalid length. [ 298.501072][T13232] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 298.516468][T13233] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 298.990726][T13253] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2015'. [ 298.997557][T13249] delete_channel: no stack [ 299.056604][T13253] openvswitch: netlink: Missing key (keys=40, expected=80) [ 322.490596][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 348.827852][T13282] netlink: 'syz.3.2022': attribute type 6 has an invalid length. [ 348.929039][T13287] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2024'. [ 348.934701][T13289] wg2: entered promiscuous mode [ 348.961472][T13289] wg2: entered allmulticast mode [ 349.059567][T13297] netlink: 'syz.4.2027': attribute type 1 has an invalid length. [ 349.160537][T13305] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2030'. [ 349.272060][T13309] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 349.299158][T13309] bond6: (slave vxcan5): Error -95 calling set_mac_address [ 349.404514][T13323] macvlan3: entered promiscuous mode [ 349.410219][T13323] macvlan3: entered allmulticast mode [ 349.434736][T13323] bond6: entered promiscuous mode [ 349.471323][T13323] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 349.494731][T13323] bond6: left promiscuous mode [ 349.523803][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 349.641936][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'. [ 350.280023][T13373] bond0: entered promiscuous mode [ 350.285138][T13373] bond_slave_0: entered promiscuous mode [ 350.450587][T13373] bond_slave_1: entered promiscuous mode [ 350.466927][T13373] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 350.523420][T13373] batadv0: entered promiscuous mode [ 350.541491][T13373] hsr2: entered allmulticast mode [ 350.567050][T13373] bond0: entered allmulticast mode [ 350.572235][T13373] bond_slave_0: entered allmulticast mode [ 350.593093][T13373] bond_slave_1: entered allmulticast mode [ 350.606496][T13373] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 350.613799][T13373] batadv0: entered allmulticast mode [ 350.621465][T13373] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 350.632861][T13373] bond0: left promiscuous mode [ 350.639442][T13373] bond_slave_0: left promiscuous mode [ 350.645101][T13373] bond_slave_1: left promiscuous mode [ 350.657036][T13373] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 350.669760][T13373] batadv0: left promiscuous mode [ 350.961652][T13405] netlink: 'syz.1.2057': attribute type 12 has an invalid length. [ 350.982213][T13405] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2057'. [ 351.349361][T13430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2065'. [ 351.417251][T13435] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2067'. [ 351.430328][T13435] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2067'. [ 351.694885][T13453] syzkaller1: entered promiscuous mode [ 351.731078][T13457] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2071'. [ 351.749112][T13453] syzkaller1: entered allmulticast mode [ 351.795659][T13461] netlink: 'syz.2.2074': attribute type 4 has an invalid length. [ 352.124193][T13467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 352.218589][T13469] tipc: Enabled bearer , priority 0 [ 352.247146][T13469] syzkaller0: entered promiscuous mode [ 352.252687][T13469] syzkaller0: entered allmulticast mode [ 352.274503][T13469] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 352.364661][T13470] tipc: Resetting bearer [ 352.447641][T13469] macvtap1: entered promiscuous mode [ 352.465080][T13469] vlan0: entered promiscuous mode [ 352.492726][T13469] team0: Device macvtap1 failed to register rx_handler [ 352.520918][T13469] vlan0: left promiscuous mode [ 352.585454][T13470] macvtap1: entered promiscuous mode [ 352.591345][T13470] vlan0: entered promiscuous mode [ 352.600113][T13470] team0: Device macvtap1 failed to register rx_handler [ 352.608671][T13470] vlan0: left promiscuous mode [ 352.702619][T13468] tipc: Resetting bearer [ 352.724857][T13468] tipc: Disabling bearer [ 353.215544][T13517] bond7: entered allmulticast mode [ 353.227428][T13517] 8021q: adding VLAN 0 to HW filter on device bond7 [ 353.234916][T13517] bridge0: port 1(bond7) entered blocking state [ 353.242130][T13517] bridge0: port 1(bond7) entered disabled state [ 353.253097][T13517] bond7: entered promiscuous mode [ 353.583822][T13541] macvlan0: entered promiscuous mode [ 353.624420][T13541] macvlan0: entered allmulticast mode [ 353.642334][T13543] openvswitch: netlink: Unknown nsh attribute 0 [ 353.660031][T13543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.690402][T13548] netlink: 'syz.0.2104': attribute type 10 has an invalid length. [ 353.707168][T13547] netlink: 'syz.2.2102': attribute type 39 has an invalid length. [ 353.727525][T13549] netlink: 'syz.0.2104': attribute type 10 has an invalid length. [ 353.784087][T13549] team0: Device dummy0 failed to register rx_handler [ 353.882099][T13548] team0: Device dummy0 failed to register rx_handler [ 353.952804][T13556] netlink: 'syz.1.2107': attribute type 29 has an invalid length. [ 354.000809][T13556] netlink: 'syz.1.2107': attribute type 29 has an invalid length. [ 354.699920][T13599] netlink: 'syz.3.2117': attribute type 6 has an invalid length. [ 354.839774][T13613] dvmrp1: entered allmulticast mode [ 354.998799][T13619] netlink: 'syz.0.2124': attribute type 39 has an invalid length. [ 355.114002][T13626] __nla_validate_parse: 73 callbacks suppressed [ 355.114024][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2126'. [ 355.149647][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2128'. [ 355.212766][T13634] netlink: 'syz.3.2129': attribute type 1 has an invalid length. [ 355.412712][T13635] 8021q: adding VLAN 0 to HW filter on device bond8 [ 355.435224][T13635] bond7: (slave bond8): making interface the new active one [ 355.458814][T13635] bond7: (slave bond8): Enslaving as an active interface with an up link [ 355.469390][T13648] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 355.575891][T13653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2136'. [ 355.802797][T13663] tipc: Enabled bearer , priority 0 [ 355.827802][T13663] syzkaller0: entered promiscuous mode [ 355.852451][T13663] syzkaller0: entered allmulticast mode [ 355.961645][T13673] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2140'. [ 355.985922][T13677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.026879][T13662] tipc: Resetting bearer [ 356.063231][T13662] tipc: Disabling bearer [ 356.341325][T13684] syzkaller0: entered promiscuous mode [ 356.375742][T13684] syzkaller0: entered allmulticast mode [ 356.479748][T13700] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2151'. [ 357.184780][T13733] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2161'. [ 357.218175][T13735] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2161'. [ 357.314503][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2163'. [ 359.139485][T13759] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 359.299967][T13771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2171'. [ 359.369446][T13774] netlink: 'syz.0.2174': attribute type 10 has an invalid length. [ 359.418615][T13774] team0: Device dummy0 failed to register rx_handler [ 359.475767][T13771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2171'. [ 359.544570][T13779] netlink: 'syz.0.2174': attribute type 39 has an invalid length. [ 360.158334][T13811] netlink: 'syz.1.2185': attribute type 21 has an invalid length. [ 360.166340][T13811] netlink: 'syz.1.2185': attribute type 22 has an invalid length. [ 360.174182][T13811] netlink: 'syz.1.2185': attribute type 23 has an invalid length. [ 360.196152][T13811] netlink: 'syz.1.2185': attribute type 25 has an invalid length. [ 360.237757][T13811] __nla_validate_parse: 2 callbacks suppressed [ 360.237777][T13811] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2185'. [ 360.483523][T13815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2187'. [ 360.595463][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2187'. [ 360.735385][T13827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2190'. [ 360.787095][T13830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2189'. [ 361.049484][T13839] pimreg: left allmulticast mode [ 361.115875][T13839] dvmrp1: left allmulticast mode [ 361.205748][T13849] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2194'. [ 361.310870][T13848] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2194'. [ 361.330813][T13848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.367443][T13843] tipc: Enabled bearer , priority 0 [ 361.415288][T13843] syzkaller0: entered promiscuous mode [ 361.440646][T13843] syzkaller0: entered allmulticast mode [ 361.535075][T13843] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 361.647397][T13854] tipc: Resetting bearer [ 361.690712][T13842] tipc: Resetting bearer [ 361.755591][T13842] tipc: Disabling bearer [ 361.789081][T13883] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2199'. [ 362.121121][T13902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2203'. [ 362.130355][T13900] syzkaller1: entered promiscuous mode [ 362.130383][T13900] syzkaller1: entered allmulticast mode [ 362.502987][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2204'. [ 362.560070][T13905] geneve3: entered promiscuous mode [ 362.565381][T13905] geneve3: entered allmulticast mode [ 362.584924][T13923] netlink: 'syz.3.2209': attribute type 10 has an invalid length. [ 362.597854][T13919] netlink: 'syz.0.2210': attribute type 33 has an invalid length. [ 362.636366][T13919] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 362.882382][T13935] gre3: entered promiscuous mode [ 362.927108][T13935] gre3: entered allmulticast mode [ 363.457499][T13969] bridge0: port 3(vlan2) entered blocking state [ 363.476324][T13969] bridge0: port 3(vlan2) entered disabled state [ 363.503127][T13969] vlan2: entered allmulticast mode [ 363.537046][T13969] bridge0: entered allmulticast mode [ 363.569701][T13969] vlan2: left allmulticast mode [ 363.632043][T13969] bridge0: left allmulticast mode [ 363.718599][T13986] netlink: 'syz.4.2225': attribute type 3 has an invalid length. [ 363.727442][T13992] netlink: 'syz.0.2226': attribute type 1 has an invalid length. [ 364.504575][T14040] validate_nla: 1 callbacks suppressed [ 364.504598][T14040] netlink: 'syz.0.2240': attribute type 1 has an invalid length. [ 364.671401][T14033] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 364.743995][T14047] geneve2: entered promiscuous mode [ 364.862834][T14045] lo speed is unknown, defaulting to 1000 [ 364.884588][T14045] hsr0 speed is unknown, defaulting to 1000 [ 365.041826][T14057] lo speed is unknown, defaulting to 1000 [ 365.141254][T14061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.325324][T14070] __nla_validate_parse: 14 callbacks suppressed [ 365.325345][T14070] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.2245'. [ 365.333304][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2244'. [ 365.351089][T14070] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2245'. [ 365.367331][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2244'. [ 365.400913][T14070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2245'. [ 366.203117][T14106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2255'. [ 366.238184][T14110] netlink: 'syz.2.2258': attribute type 4 has an invalid length. [ 366.284616][T14110] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2258'. [ 366.392102][T14123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2261'. [ 366.564864][T14130] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 366.827146][T14150] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2268'. [ 366.901410][T14158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2269'. [ 367.682778][T14198] netlink: 'syz.4.2278': attribute type 24 has an invalid length. [ 368.403913][T14232] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 368.620639][T14246] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 369.109445][T14273] veth0: renamed from veth1_vlan [ 369.480087][T14300] veth1_to_hsr: entered allmulticast mode [ 369.830521][T14317] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 370.041227][T14329] netlink: 'syz.1.2313': attribute type 4 has an invalid length. [ 370.223151][T14323] can: request_module (can-proto-0) failed. [ 370.363580][T14350] __nla_validate_parse: 6 callbacks suppressed [ 370.363649][T14350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2319'. [ 370.416948][T14353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2319'. [ 370.647765][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 370.703480][T14368] netlink: zone id is out of range [ 370.810735][T14378] netlink: 'syz.1.2324': attribute type 4 has an invalid length. [ 370.823183][T14377] netlink: 'syz.1.2324': attribute type 4 has an invalid length. [ 370.934690][ T5529] veth0: left promiscuous mode [ 371.165458][T14391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.187972][T14382] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2325'. [ 371.197957][T14382] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2325'. [ 371.214101][T14395] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2329'. [ 371.229783][T14387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.236636][T14382] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2325'. [ 371.303008][T14382] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2325'. [ 371.361766][T14400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2330'. [ 371.385624][T14400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2330'. [ 371.799730][T14415] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2335'. [ 372.433153][T14446] netlink: 'syz.1.2340': attribute type 17 has an invalid length. [ 372.583988][T14454] netlink: 'syz.2.2343': attribute type 1 has an invalid length. [ 372.622667][T14454] netlink: 'syz.2.2343': attribute type 2 has an invalid length. [ 373.177492][T14488] veth0_vlan: entered allmulticast mode [ 373.621818][T14510] gre2: entered promiscuous mode [ 373.631511][T14510] gre2: entered allmulticast mode [ 374.005809][T14532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.013160][T14532] IPv6: NLM_F_CREATE should be set when creating new route [ 374.020499][T14532] IPv6: NLM_F_CREATE should be set when creating new route [ 374.027800][T14532] IPv6: NLM_F_CREATE should be set when creating new route [ 374.537548][T14517] tipc: Resetting bearer [ 375.380425][T14517] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 375.405402][T14517] bond5: left promiscuous mode [ 375.427892][T14517] bond6: left promiscuous mode [ 375.440638][T14517] gretap2: left promiscuous mode [ 375.569874][T14578] __nla_validate_parse: 7 callbacks suppressed [ 375.569894][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2373'. [ 375.581488][T14553] macvlan5: entered allmulticast mode [ 375.617747][T14553] bond0: (slave macvlan5): Opening slave failed [ 375.652609][ T1156] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.663688][ T1156] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.677960][ T1156] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.690453][ T1156] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.707307][ T1156] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.762854][ T1156] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.782191][ T1156] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.816362][ T1156] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.833727][T14587] bridge0: entered allmulticast mode [ 375.875619][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2375'. [ 375.897282][T14587] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.914685][T14587] bridge_slave_0: left allmulticast mode [ 375.923391][T14587] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.004791][T14587] bridge0 (unregistering): left allmulticast mode [ 376.068683][T14599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2380'. [ 376.087490][T14599] netlink: 'syz.4.2380': attribute type 11 has an invalid length. [ 376.185007][T14599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2380'. [ 376.194963][T14599] netlink: 'syz.4.2380': attribute type 11 has an invalid length. [ 376.237959][T14607] dvmrp0: entered allmulticast mode [ 376.254019][T14611] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2383'. [ 376.310416][T14612] netlink: 'syz.1.2383': attribute type 1 has an invalid length. [ 376.322999][T14615] netlink: 'syz.4.2384': attribute type 3 has an invalid length. [ 376.390692][T14615] netlink: 'syz.4.2384': attribute type 4 has an invalid length. [ 376.472734][T14612] can: request_module (can-proto-0) failed. [ 376.753843][T14635] netlink: 'syz.3.2392': attribute type 21 has an invalid length. [ 376.777194][T14635] IPv6: NLM_F_CREATE should be specified when creating new route [ 376.815289][T14641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2395'. [ 376.875797][T14643] vlan2: entered allmulticast mode [ 376.882849][T14643] hsr0: entered allmulticast mode [ 376.888723][T14643] hsr_slave_0: entered allmulticast mode [ 376.895345][T14643] hsr_slave_1: entered allmulticast mode [ 376.926935][T14645] netlink: 'syz.4.2396': attribute type 32 has an invalid length. [ 376.959699][T14646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2394'. [ 376.980310][T14645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2396'. [ 376.995214][T14652] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2395'. [ 377.006547][T14645] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 377.234199][T14658] tipc: Enabled bearer , priority 0 [ 377.353285][T14644] tipc: Disabling bearer [ 377.424505][T14670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2402'. [ 378.104528][T14703] vxcan1: tx address claim with dlc 0 [ 378.196714][T14706] vxcan1: tx address claim with different name [ 378.288381][T14711] netlink: 'syz.1.2412': attribute type 21 has an invalid length. [ 378.293261][T14713] veth1_to_bond: entered allmulticast mode [ 378.379386][T14713] veth1_to_bond (unregistering): left allmulticast mode [ 378.696997][T14729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.821048][T14731] lo speed is unknown, defaulting to 1000 [ 379.009557][T14730] lo speed is unknown, defaulting to 1000 [ 379.616441][T14731] hsr0 speed is unknown, defaulting to 1000 [ 379.652907][T14730] hsr0 speed is unknown, defaulting to 1000 [ 380.302847][T14790] macvtap1: entered promiscuous mode [ 380.336710][T14790] vlan0: entered promiscuous mode [ 380.348119][T14790] macvtap1: entered allmulticast mode [ 380.363875][T14790] vlan0: entered allmulticast mode [ 380.373504][T14790] veth0_vlan: entered allmulticast mode [ 380.908398][T14829] __nla_validate_parse: 8 callbacks suppressed [ 380.908423][T14829] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2445'. [ 382.207681][T14879] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2456'. [ 382.583476][T14907] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2462'. [ 382.664871][T14914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.677453][T14907] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 382.977020][T14940] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2469'. [ 383.026741][T14940] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2469'. [ 383.076873][T14940] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.2469'. [ 383.117910][T14942] IPVS: set_ctl: invalid protocol: 0 172.20.20.14:20000 [ 383.258240][T14954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2473'. [ 383.309574][T14954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2473'. [ 383.335158][T14954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2473'. [ 383.396144][T14954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2473'. [ 383.470471][T14966] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 383.490549][T14966] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 383.616540][T14980] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 383.935076][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.429381][T15020] netlink: 'syz.0.2487': attribute type 1 has an invalid length. [ 384.488837][T15020] 8021q: adding VLAN 0 to HW filter on device bond8 [ 384.503726][T15023] bond8: (slave wlan0): Enslaving as an active interface with a down link [ 384.631750][T15020] vlan6: entered allmulticast mode [ 384.641244][T15020] veth1: entered allmulticast mode [ 384.651790][T15030] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20000 [ 385.721431][T15074] Bluetooth: MGMT ver 1.23 [ 385.889977][T15079] netlink: 'syz.0.2503': attribute type 1 has an invalid length. [ 385.918367][T15079] netlink: 'syz.0.2503': attribute type 1 has an invalid length. [ 385.957435][T15079] netlink: 'syz.0.2503': attribute type 2 has an invalid length. [ 385.965233][T15079] __nla_validate_parse: 6 callbacks suppressed [ 385.965255][T15079] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2503'. [ 386.218626][T11199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.249448][T15103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2508'. [ 386.268069][T11199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.298727][ T12] bond8: (slave wlan0): failed to get link speed/duplex [ 386.382854][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 386.444168][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 386.454945][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 386.462629][T15103] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 386.481087][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 386.482211][T15111] netlink: 'syz.1.2510': attribute type 4 has an invalid length. [ 386.525917][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 386.528747][ T12] bond8: (slave wlan0): failed to get link speed/duplex [ 386.586438][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 386.627161][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 386.671130][T15127] delete_channel: no stack [ 386.673117][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 386.718075][T11199] bond8: (slave wlan0): failed to get link speed/duplex [ 386.747554][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 386.756457][T15134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2515'. [ 386.805436][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 386.841408][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 386.858228][T11227] bond8: (slave wlan0): failed to get link speed/duplex [ 386.901666][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 386.928312][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 386.967063][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 387.006992][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 387.020619][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 387.051394][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 387.060459][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 387.070406][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 387.080331][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 387.096972][T11199] bond8: (slave wlan0): failed to get link speed/duplex [ 387.104460][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 387.116514][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 387.134911][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 387.155206][T15108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 387.204181][T15143] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.226466][T11199] bond8: (slave wlan0): failed to get link speed/duplex [ 387.425861][T15165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2517'. [ 387.470763][T15165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2517'. [ 387.481957][T15166] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2521'. [ 387.882667][T15164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2521'. [ 387.917821][ T37] bond8: (slave wlan0): failed to get link speed/duplex [ 388.058359][T11236] bond8: (slave wlan0): failed to get link speed/duplex [ 388.190608][T11236] bond8: (slave wlan0): failed to get link speed/duplex [ 388.227920][T15181] lo speed is unknown, defaulting to 1000 [ 388.235464][T15181] hsr0 speed is unknown, defaulting to 1000 [ 388.366201][T15193] netlink: 'syz.2.2527': attribute type 11 has an invalid length. [ 388.568518][T15200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2531'. [ 388.933477][T15216] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2535'. [ 389.120980][T15217] bridge0: entered promiscuous mode [ 389.126991][T15217] bridge0: entered allmulticast mode [ 389.261857][T15224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2537'. [ 389.645368][T15244] netlink: 'syz.2.2545': attribute type 5 has an invalid length. [ 390.313816][T15279] xt_l2tp: missing protocol rule (udp|l2tpip) [ 390.421458][T15283] bond4: (slave gretap1): Releasing active interface [ 390.813969][T15307] netlink: 'syz.4.2559': attribute type 3 has an invalid length. [ 391.072960][T15323] __nla_validate_parse: 12 callbacks suppressed [ 391.072983][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2563'. [ 391.198677][T15327] sctp: [Deprecated]: syz.4.2564 (pid 15327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.198677][T15327] Use struct sctp_sack_info instead [ 391.312055][T15332] tipc: New replicast peer: 255.255.255.255 [ 391.319310][T15332] tipc: Enabled bearer , priority 10 [ 391.356753][ T37] net_ratelimit: 23 callbacks suppressed [ 391.356777][ T37] bond8: (slave wlan0): failed to get link speed/duplex [ 391.517297][T11227] bond8: (slave wlan0): failed to get link speed/duplex [ 391.540568][T15349] netlink: 'syz.4.2569': attribute type 10 has an invalid length. [ 391.556946][T15349] veth0_vlan: entered allmulticast mode [ 391.577848][T15349] veth0_vlan: left promiscuous mode [ 391.584342][T15349] veth0_vlan: entered promiscuous mode [ 391.615638][T15349] team0: Device veth0_vlan failed to register rx_handler [ 391.716227][ T1156] bond8: (slave wlan0): failed to get link speed/duplex [ 391.805081][T15360] sctp: [Deprecated]: syz.0.2574 (pid 15360) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.805081][T15360] Use struct sctp_sack_info instead [ 391.847242][ T1156] bond8: (slave wlan0): failed to get link speed/duplex [ 391.997067][ T12] bond8: (slave wlan0): failed to get link speed/duplex [ 392.025296][T15374] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2575'. [ 392.130865][ T1156] bond8: (slave wlan0): failed to get link speed/duplex [ 392.216869][T15381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2579'. [ 392.235899][T15381] nbd: nbd0 already in use [ 392.266150][ T1156] bond8: (slave wlan0): failed to get link speed/duplex [ 392.364746][T15390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2583'. [ 392.516750][T11227] bond8: (slave wlan0): failed to get link speed/duplex [ 392.656517][T11227] bond8: (slave wlan0): failed to get link speed/duplex [ 392.772887][T15412] wg1: entered promiscuous mode [ 392.828829][T15412] wg1: entered allmulticast mode [ 392.857361][T11199] bond8: (slave wlan0): failed to get link speed/duplex [ 392.913513][T15418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2588'. [ 393.118810][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2592'. [ 393.332046][T15445] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2598'. [ 393.342259][T15446] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2598'. [ 393.360062][T15446] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2598'. [ 393.391581][T15445] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2598'. [ 394.381262][T15501] lo speed is unknown, defaulting to 1000 [ 394.422009][T15501] hsr0 speed is unknown, defaulting to 1000 [ 396.123375][T15592] __nla_validate_parse: 13 callbacks suppressed [ 396.123400][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2643'. [ 396.376641][ T37] net_ratelimit: 27 callbacks suppressed [ 396.376664][ T37] bond8: (slave wlan0): failed to get link speed/duplex [ 396.418192][T15601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2647'. [ 396.516180][ T37] bond8: (slave wlan0): failed to get link speed/duplex [ 396.578622][T15609] netlink: 'syz.3.2650': attribute type 21 has an invalid length. [ 396.615411][T15609] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2650'. [ 396.641185][T11216] bond8: (slave wlan0): failed to get link speed/duplex [ 396.786483][ T79] bond8: (slave wlan0): failed to get link speed/duplex [ 396.891583][T15624] netlink: 'syz.1.2654': attribute type 1 has an invalid length. [ 396.903097][ T79] bond8: (slave wlan0): failed to get link speed/duplex [ 396.947806][T15624] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2654'. [ 396.980209][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2654'. [ 397.057334][T11227] bond8: (slave wlan0): failed to get link speed/duplex [ 397.090499][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2654'. [ 397.100282][T15639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2654'. [ 397.168584][ T1156] bond8: (slave wlan0): failed to get link speed/duplex [ 397.256678][T15642] netlink: 'syz.3.2658': attribute type 11 has an invalid length. [ 397.318813][T11216] bond8: (slave wlan0): failed to get link speed/duplex [ 397.461398][ T37] bond8: (slave wlan0): failed to get link speed/duplex [ 397.627570][ T12] bond8: (slave wlan0): failed to get link speed/duplex [ 397.795300][T15665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2667'. [ 397.858832][T15666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2668'. [ 397.885602][T15668] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2669'. [ 399.243738][T15728] sock: sock_timestamping_bind_phc: sock not bind to device [ 400.413818][T15786] netlink: 'syz.2.2702': attribute type 29 has an invalid length. [ 400.455821][T15786] netlink: 'syz.2.2702': attribute type 29 has an invalid length. [ 400.881779][T15819] tipc: Enabling of bearer rejected, already enabled [ 401.172462][T15835] tipc: Enabling of bearer rejected, already enabled [ 401.338687][T15841] __nla_validate_parse: 10 callbacks suppressed [ 401.338709][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2724'. [ 401.350830][T15846] netlink: 'syz.2.2723': attribute type 1 has an invalid length. [ 401.410865][T15846] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2723'. [ 401.429461][T11216] net_ratelimit: 32 callbacks suppressed [ 401.429482][T11216] bond8: (slave wlan0): failed to get link speed/duplex [ 401.480667][T15846] netlink: 'syz.2.2723': attribute type 1 has an invalid length. [ 401.577145][T11227] bond8: (slave wlan0): failed to get link speed/duplex [ 401.688683][ T1156] bond8: (slave wlan0): failed to get link speed/duplex [ 401.764066][T15862] sctp: [Deprecated]: syz.4.2727 (pid 15862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.764066][T15862] Use struct sctp_sack_info instead [ 401.837517][T11227] bond8: (slave wlan0): failed to get link speed/duplex [ 401.965483][T15867] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2731'. [ 401.975523][T11227] bond8: (slave wlan0): failed to get link speed/duplex [ 402.013614][T15869] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2732'. [ 402.107117][ T1156] bond8: (slave wlan0): failed to get link speed/duplex [ 402.209711][T15876] !€ÿ: renamed from bond_slave_0 [ 402.276170][ T12] bond8: (slave wlan0): failed to get link speed/duplex [ 402.400294][T15886] netlink: 'syz.2.2738': attribute type 6 has an invalid length. [ 402.457533][T11199] bond8: (slave wlan0): failed to get link speed/duplex [ 402.627506][ T1156] bond8: (slave wlan0): failed to get link speed/duplex [ 402.655679][T15898] delete_channel: no stack [ 402.729811][T15902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2741'. [ 402.758440][T11199] bond8: (slave wlan0): failed to get link speed/duplex [ 403.232532][T15922] IPv6: sit1: Disabled Multicast RS [ 403.259151][T15922] sit1: entered allmulticast mode [ 403.422426][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 403.831210][T15948] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2757'. [ 403.877089][T15948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2757'. [ 403.907360][T15948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2757'. [ 403.920972][T15950] tipc: Enabled bearer , priority 0 [ 403.928733][T15950] syzkaller0: entered promiscuous mode [ 403.934381][T15950] syzkaller0: entered allmulticast mode [ 404.020898][T15950] tipc: Resetting bearer [ 404.075821][T15949] tipc: Resetting bearer [ 404.119493][T15949] tipc: Disabling bearer [ 404.507435][T15976] lo: entered promiscuous mode [ 404.533279][T15976] netlink: 'syz.2.2765': attribute type 2 has an invalid length. [ 404.851206][T15988] C: renamed from lo [ 405.219865][T16005] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 405.492788][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 405.503548][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 405.513182][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 405.522304][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 405.530565][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 405.880516][T16015] lo speed is unknown, defaulting to 1000 [ 405.922219][T16015] hsr0 speed is unknown, defaulting to 1000 [ 406.075647][T16029] lo speed is unknown, defaulting to 1000 [ 406.134416][T16029] hsr0 speed is unknown, defaulting to 1000 [ 406.294939][T16039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2782'. [ 406.382970][T16053] netlink: 'syz.2.2785': attribute type 4 has an invalid length. [ 406.850804][ T37] net_ratelimit: 21 callbacks suppressed [ 406.850826][ T37] bond8: (slave wlan0): failed to get link speed/duplex [ 406.915437][T16061] syzkaller1: entered promiscuous mode [ 406.937318][T16079] netlink: 'syz.4.2789': attribute type 1 has an invalid length. [ 406.938859][T16061] syzkaller1: entered allmulticast mode [ 407.043255][T16079] 8021q: adding VLAN 0 to HW filter on device bond9 [ 407.063568][T16015] chnl_net:caif_netlink_parms(): no params data found [ 407.078671][T16080] bond9: (slave wlan0): Opening slave failed [ 407.133793][T16083] erspan0: entered allmulticast mode [ 407.424375][ T1156] bond8: (slave wlan0): failed to get link speed/duplex [ 407.425745][T16106] netlink: 'syz.4.2796': attribute type 1 has an invalid length. [ 407.442130][T16105] netlink: 'syz.4.2796': attribute type 1 has an invalid length. [ 407.449859][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2794'. [ 407.455227][T16105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.484952][T16106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.504871][T16094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2794'. [ 407.606601][ T5871] Bluetooth: hci0: command tx timeout [ 407.770064][T16015] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.803195][T16015] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.816632][T16120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2797'. [ 407.822110][T16015] bridge_slave_0: entered allmulticast mode [ 407.835545][T16015] bridge_slave_0: entered promiscuous mode [ 407.853546][T16015] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.862386][T16015] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.871683][T16015] bridge_slave_1: entered allmulticast mode [ 407.880703][T16015] bridge_slave_1: entered promiscuous mode [ 407.908537][ T36] bond8: (slave wlan0): failed to get link speed/duplex [ 408.062778][T16015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.086764][T16130] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2799'. [ 408.129756][T16015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.463266][T16015] team0: Port device team_slave_0 added [ 408.535690][T16015] team0: Port device team_slave_1 added [ 408.720280][T16162] tipc: Enabling of bearer rejected, media not registered [ 408.921605][T16015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.944434][T16015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.999474][T16177] netlink: 'syz.1.2810': attribute type 1 has an invalid length. [ 409.014774][T16177] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2810'. [ 409.045607][T16015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.053029][T16182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2808'. [ 409.066557][T16015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.083906][T16015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.127560][T16015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.250996][T16190] netlink: 'syz.1.2813': attribute type 1 has an invalid length. [ 409.352630][T16190] bond5 (unregistering): Released all slaves [ 409.390125][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2816'. [ 409.408779][T16015] hsr_slave_0: entered promiscuous mode [ 409.419475][T16015] hsr_slave_1: entered promiscuous mode [ 409.427359][T16015] debugfs: 'hsr0' already exists in 'hsr' [ 409.433317][T16015] Cannot create hsr debugfs directory [ 409.442973][T16200] netlink: 'syz.3.2816': attribute type 3 has an invalid length. [ 409.455409][T11205] bond8: (slave wlan0): failed to get link speed/duplex [ 409.498788][T16198] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 409.511164][T16198] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 409.520842][T16198] gretap1: entered promiscuous mode [ 409.536409][T16198] gretap1: entered allmulticast mode [ 409.607336][T16208] netlink: 'syz.4.2817': attribute type 21 has an invalid length. [ 409.691574][ T5871] Bluetooth: hci0: command tx timeout [ 409.729897][T16208] netlink: 'syz.4.2817': attribute type 6 has an invalid length. [ 409.739216][T16208] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2817'. [ 409.850761][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2821'. [ 409.895939][T16211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2821'. [ 409.945331][T16223] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 410.008054][T16214] openvswitch: netlink: Flow actions attr not present in new flow. [ 410.250790][T11222] bond8: (slave wlan0): failed to get link speed/duplex [ 410.416528][T11169] bond8: (slave wlan0): failed to get link speed/duplex [ 410.570229][T11230] bond8: (slave wlan0): failed to get link speed/duplex [ 410.860329][T16015] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 410.885650][T16015] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 410.918724][T16015] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 410.951719][T16015] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 411.329855][T16015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.403186][T16015] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.428277][T11222] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.435563][T11222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.493646][T11169] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.500947][T11169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.766410][ T5871] Bluetooth: hci0: command tx timeout [ 411.896313][ T36] net_ratelimit: 8 callbacks suppressed [ 411.896338][ T36] bond8: (slave wlan0): failed to get link speed/duplex [ 412.056156][T11222] bond8: (slave wlan0): failed to get link speed/duplex [ 412.166678][ T36] bond8: (slave wlan0): failed to get link speed/duplex [ 412.326569][T11213] bond8: (slave wlan0): failed to get link speed/duplex [ 412.354711][T16015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.514351][T11213] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 412.524220][T11213] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 412.533167][T11213] bond8: (slave wlan0): failed to get link speed/duplex [ 412.540708][ T5947] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 412.586202][T16345] __nla_validate_parse: 6 callbacks suppressed [ 412.586224][T16345] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2857'. [ 412.668051][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 412.737897][T16354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2858'. [ 412.777997][ T36] bond8: (slave wlan0): failed to get link speed/duplex [ 412.785598][T16015] veth0_vlan: entered promiscuous mode [ 412.813723][T16015] veth1_vlan: entered promiscuous mode [ 412.888873][T11230] bond8: (slave wlan0): failed to get link speed/duplex [ 412.910570][T16363] netlink: 'syz.4.2860': attribute type 11 has an invalid length. [ 413.218229][T16375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2863'. [ 413.258767][T16377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2864'. [ 413.485777][T16384] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 413.849823][ T5871] Bluetooth: hci0: command tx timeout [ 414.495116][T16377] vlan2: entered allmulticast mode [ 414.503420][T16399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2866'. [ 414.513988][T16399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2866'. [ 414.524026][T16399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2866'. [ 414.536097][T16377] hsr0: entered allmulticast mode [ 414.541600][T16377] hsr_slave_0: entered allmulticast mode [ 414.577054][T16377] hsr_slave_1: entered allmulticast mode [ 414.587604][T11230] bond8: (slave wlan0): failed to get link speed/duplex [ 414.613493][T16405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2865'. [ 414.634296][T11205] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.676996][T11218] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.691567][T16015] veth0_macvtap: entered promiscuous mode [ 414.828507][T16412] openvswitch: netlink: Message has 4 unknown bytes. [ 414.835287][T16412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.987265][T16015] veth1_macvtap: entered promiscuous mode [ 415.003704][T11218] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.027521][T11218] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.046935][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2871'. [ 415.057742][T16415] netlink: 'syz.2.2868': attribute type 11 has an invalid length. [ 415.062385][T16420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2871'. [ 415.065596][T16415] netlink: 'syz.2.2868': attribute type 11 has an invalid length. [ 415.121109][T16015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.144120][ T5876] IPVS: starting estimator thread 0... [ 415.219168][T16015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.249974][T16425] IPVS: using max 26 ests per chain, 62400 per kthread [ 415.306772][T16405] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.327177][T11218] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.345547][T16429] netlink: 'syz.4.2875': attribute type 13 has an invalid length. [ 415.367561][T11218] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.404997][T16429] macvtap0: entered allmulticast mode [ 415.423331][T16429] macvtap0: refused to change device tx_queue_len [ 415.454439][T11218] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.484673][T11218] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.863562][T11230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.887264][T11230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.053022][T11230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.103576][T11230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.173447][T16471] netlink: 'syz.3.2882': attribute type 11 has an invalid length. [ 416.296685][T16476] dvmrp1: left allmulticast mode [ 416.491738][T16479] syzkaller0: entered allmulticast mode [ 416.886436][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 416.997069][T11169] net_ratelimit: 11 callbacks suppressed [ 416.997095][T11169] bond8: (slave wlan0): failed to get link speed/duplex [ 417.116841][T11169] bond8: (slave wlan0): failed to get link speed/duplex [ 417.321860][T16504] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.395931][T11169] bond8: (slave wlan0): failed to get link speed/duplex [ 417.551059][T16504] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.820039][T16545] netlink: 'syz.1.2897': attribute type 9 has an invalid length. [ 417.852259][T16504] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.875024][T16551] __nla_validate_parse: 7 callbacks suppressed [ 417.875044][T16551] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2899'. [ 417.895520][T16552] netlink: 'syz.1.2897': attribute type 9 has an invalid length. [ 417.935508][T11186] bond8: (slave wlan0): failed to get link speed/duplex [ 418.141556][T16504] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.227022][ T36] bond8: (slave wlan0): failed to get link speed/duplex [ 418.362688][T11218] bond8: (slave wlan0): failed to get link speed/duplex [ 418.454264][T11186] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.525596][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.553946][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.607125][T16580] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2906'. [ 418.615610][T11218] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.627929][ T36] bond8: (slave wlan0): failed to get link speed/duplex [ 418.746923][T11218] bond8: (slave wlan0): failed to get link speed/duplex [ 418.768854][T16585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2908'. [ 418.813734][T16587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2909'. [ 418.831087][T16585] bond0: entered promiscuous mode [ 418.843218][T16585] bond_slave_0: entered promiscuous mode [ 418.849439][T16585] bond_slave_1: entered promiscuous mode [ 418.863866][T16585] bond0: left promiscuous mode [ 418.868913][T16585] bond_slave_0: left promiscuous mode [ 418.880830][T16585] bond_slave_1: left promiscuous mode [ 418.914409][T16590] vlan0: entered promiscuous mode [ 418.924567][T16590] bridge0: entered promiscuous mode [ 418.943891][T16596] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 418.955888][T16587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2909'. [ 418.965773][T11205] bond8: (slave wlan0): failed to get link speed/duplex [ 419.061479][T16599] netlink: 'syz.1.2913': attribute type 1 has an invalid length. [ 419.150675][T16599] 8021q: adding VLAN 0 to HW filter on device bond5 [ 419.181164][T16605] gretap3: entered promiscuous mode [ 419.231847][T16605] bond5: (slave gretap3): making interface the new active one [ 419.254063][T16605] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 419.308753][T16609] gtp0: entered promiscuous mode [ 419.318505][T16609] gtp0: entered allmulticast mode [ 419.384734][T16618] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 419.444710][T16620] netlink: 'syz.2.2920': attribute type 21 has an invalid length. [ 419.457632][T16620] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2920'. [ 419.494095][T16620] netlink: 'syz.2.2920': attribute type 4 has an invalid length. [ 419.534334][T16620] netlink: 'syz.2.2920': attribute type 5 has an invalid length. [ 419.570091][T16620] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2920'. [ 419.925053][T16643] netlink: 'syz.2.2926': attribute type 1 has an invalid length. [ 419.957499][T16648] syzkaller0: entered promiscuous mode [ 419.963159][T16643] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2926'. [ 419.976314][T16648] syzkaller0: entered allmulticast mode [ 420.008697][T16646] tipc: Started in network mode [ 420.049313][T16646] tipc: Node identity 32f8aa6507e6, cluster identity 4711 [ 420.082404][T16646] tipc: Enabled bearer , priority 0 [ 420.263917][T16646] tipc: Resetting bearer [ 420.321578][T16646] tipc: Disabling bearer [ 420.398171][T16670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2935'. [ 420.588520][T16684] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2938'. [ 421.055911][ T30] audit: type=1107 audit(1757397470.874:4): pid=16699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='º¶ßŠ›È+v!' [ 421.476593][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032032800: rx timeout, send abort [ 421.978100][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880584be800: rx timeout, send abort [ 421.987343][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032032800: abort rx timeout. Force session deactivation [ 422.099017][T11205] net_ratelimit: 22 callbacks suppressed [ 422.099041][T11205] bond8: (slave wlan0): failed to get link speed/duplex [ 422.256892][T11205] bond8: (slave wlan0): failed to get link speed/duplex [ 422.284185][T16764] netlink: 'syz.3.2964': attribute type 1 has an invalid length. [ 422.292551][T16756] syzkaller1: entered promiscuous mode [ 422.298890][T16756] syzkaller1: entered allmulticast mode [ 422.493353][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880584be800: abort rx timeout. Force session deactivation [ 422.527085][T11222] bond8: (slave wlan0): failed to get link speed/duplex [ 422.567222][T16777] tipc: Enabled bearer , priority 10 [ 422.656244][T11222] bond8: (slave wlan0): failed to get link speed/duplex [ 422.679178][T16786] netlink: 'syz.0.2968': attribute type 16 has an invalid length. [ 422.759165][T16790] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 422.818526][T11222] bond8: (slave wlan0): failed to get link speed/duplex [ 422.927638][T11218] bond8: (slave wlan0): failed to get link speed/duplex [ 422.967780][T16804] __nla_validate_parse: 4 callbacks suppressed [ 422.967803][T16804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2974'. [ 422.986923][T16804] chnl_net:caif_netlink_parms(): no params data found [ 423.024720][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2974'. [ 423.057525][T16807] chnl_net:caif_netlink_parms(): no params data found [ 423.081896][T16812] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2977'. [ 423.116956][T11218] bond8: (slave wlan0): failed to get link speed/duplex [ 423.236978][T11205] bond8: (slave wlan0): failed to get link speed/duplex [ 423.281198][T16820] tipc: Enabled bearer , priority 0 [ 423.298736][T16818] tipc: Enabling of bearer rejected, already enabled [ 423.316239][T16820] syzkaller0: entered promiscuous mode [ 423.322129][T16820] syzkaller0: entered allmulticast mode [ 423.358915][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 423.404056][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2981'. [ 423.446092][T16818] macvlan0: left promiscuous mode [ 423.447108][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2983'. [ 423.451188][T16818] macvlan0: left allmulticast mode [ 423.451453][T16818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2981'. [ 423.560336][T16825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2981'. [ 423.593148][T16835] bond_slave_0: Device is already in use. [ 423.659511][T11218] bond8: (slave wlan0): failed to get link speed/duplex [ 423.712435][T16825] tipc: Resetting bearer [ 423.813145][T16825] tipc: Disabling bearer [ 423.876835][T11222] bond8: (slave wlan0): failed to get link speed/duplex [ 423.887770][T16847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2987'. [ 423.977928][T16855] syzkaller0: create flow: hash 3971320334 index 1 [ 424.020965][T11218] syzkaller0: tun_net_xmit 76 [ 424.026587][T11218] syzkaller0: tun_net_xmit 48 [ 424.031900][T16858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2991'. [ 424.046332][ T5940] syzkaller0: tun_net_xmit 76 [ 424.186540][ T5940] syzkaller0: tun_net_xmit 76 [ 424.227308][ T5940] syzkaller0: tun_net_xmit 76 [ 424.533541][T16850] syzkaller0: delete flow: hash 3971320334 index 1 [ 424.633175][T16872] netlink: 'syz.1.2994': attribute type 1 has an invalid length. [ 425.540402][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 425.565223][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 425.578006][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 425.601858][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 425.628184][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 425.640056][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 426.908153][T16872] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 427.095262][T16892] lo speed is unknown, defaulting to 1000 [ 427.127666][T11169] net_ratelimit: 2 callbacks suppressed [ 427.127689][T11169] bond8: (slave wlan0): failed to get link speed/duplex [ 427.199464][T16892] hsr0 speed is unknown, defaulting to 1000 [ 427.457135][T11222] bond8: (slave wlan0): failed to get link speed/duplex [ 427.500747][T16916] tipc: Enabled bearer , priority 0 [ 427.553508][T16916] syzkaller0: entered promiscuous mode [ 427.567244][T16916] syzkaller0: entered allmulticast mode [ 427.686711][ T5867] Bluetooth: hci3: command tx timeout [ 427.801373][T16925] tipc: Resetting bearer [ 428.101114][T16915] tipc: Resetting bearer [ 428.122724][T16915] tipc: Disabling bearer [ 428.161821][T16955] netlink: 'syz.0.3012': attribute type 27 has an invalid length. [ 428.195786][T16955] __nla_validate_parse: 8 callbacks suppressed [ 428.195807][T16955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3012'. [ 428.394521][T16956] netlink: 'syz.2.3011': attribute type 3 has an invalid length. [ 428.435030][T16956] netlink: 'syz.2.3011': attribute type 3 has an invalid length. [ 428.475800][T16892] chnl_net:caif_netlink_parms(): no params data found [ 428.644097][T16976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3016'. [ 428.676597][T11186] bond8: (slave wlan0): failed to get link speed/duplex [ 428.813381][T16986] netlink: 191164 bytes leftover after parsing attributes in process `syz.1.3017'. [ 428.893018][T16986] netlink: 'syz.1.3017': attribute type 7 has an invalid length. [ 428.904807][T16986] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3017'. [ 428.919959][T16892] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.928736][T16892] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.937401][T16892] bridge_slave_0: entered allmulticast mode [ 428.945514][T16892] bridge_slave_0: entered promiscuous mode [ 428.960040][T11205] bond8: (slave wlan0): failed to get link speed/duplex [ 428.983083][T16994] openvswitch: netlink: IP tunnel TTL not specified. [ 428.997723][T16892] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.015182][T16892] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.036975][T16892] bridge_slave_1: entered allmulticast mode [ 429.045105][T16892] bridge_slave_1: entered promiscuous mode [ 429.284639][T16892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.315131][T17002] tipc: Enabling of bearer rejected, failed to enable media [ 429.337243][T11169] bond8: (slave wlan0): failed to get link speed/duplex [ 429.381089][T16892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.679235][T17032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3028'. [ 429.766327][ T5867] Bluetooth: hci3: command tx timeout [ 429.866296][T16892] team0: Port device team_slave_0 added [ 429.904813][T17024] syzkaller1: entered promiscuous mode [ 429.917404][T17024] syzkaller1: entered allmulticast mode [ 429.940765][T16892] team0: Port device team_slave_1 added [ 429.979154][T11205] bond8: (slave wlan0): failed to get link speed/duplex [ 430.075240][T16892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.097895][T16892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.105885][T17048] netlink: 'syz.1.3031': attribute type 10 has an invalid length. [ 430.177444][T16892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.221230][T17052] [ 430.223620][T17052] ====================================================== [ 430.230757][T17052] WARNING: possible circular locking dependency detected [ 430.237817][T17052] syzkaller #0 Not tainted [ 430.242263][T17052] ------------------------------------------------------ [ 430.249309][T17052] syz.0.3032/17052 is trying to acquire lock: [ 430.255405][T17052] ffffffff8f68e918 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 430.264824][T17052] [ 430.264824][T17052] but task is already holding lock: [ 430.272219][T17052] ffff888060312870 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 430.281760][T17052] [ 430.281760][T17052] which lock already depends on the new lock. [ 430.281760][T17052] [ 430.292262][T17052] [ 430.292262][T17052] the existing dependency chain (in reverse order) is: [ 430.301295][T17052] [ 430.301295][T17052] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 430.309309][T17052] lock_acquire+0x120/0x360 [ 430.314356][T17052] _raw_spin_lock_bh+0x36/0x50 [ 430.319665][T17052] nr_rt_device_down+0x12a/0x720 [ 430.325185][T17052] nr_device_event+0x137/0x150 [ 430.330484][T17052] notifier_call_chain+0x1b3/0x3e0 [ 430.336137][T17052] __dev_notify_flags+0x18d/0x2e0 [ 430.341700][T17052] netif_change_flags+0xe8/0x1a0 [ 430.347191][T17052] dev_change_flags+0x130/0x260 [ 430.352573][T17052] dev_ioctl+0x7b4/0x1150 [ 430.357440][T17052] sock_do_ioctl+0x22c/0x300 [ 430.362563][T17052] sock_ioctl+0x576/0x790 [ 430.367425][T17052] __se_sys_ioctl+0xfc/0x170 [ 430.372551][T17052] do_syscall_64+0xfa/0x3b0 [ 430.377642][T17052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.384067][T17052] [ 430.384067][T17052] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 430.391910][T17052] lock_acquire+0x120/0x360 [ 430.396970][T17052] _raw_spin_lock_bh+0x36/0x50 [ 430.402283][T17052] nr_rt_device_down+0xa9/0x720 [ 430.407686][T17052] nr_device_event+0x137/0x150 [ 430.412990][T17052] notifier_call_chain+0x1b3/0x3e0 [ 430.419077][T17052] __dev_notify_flags+0x18d/0x2e0 [ 430.424642][T17052] netif_change_flags+0xe8/0x1a0 [ 430.430109][T17052] dev_change_flags+0x130/0x260 [ 430.435484][T17052] dev_ioctl+0x7b4/0x1150 [ 430.440371][T17052] sock_do_ioctl+0x22c/0x300 [ 430.445495][T17052] sock_ioctl+0x576/0x790 [ 430.450359][T17052] __se_sys_ioctl+0xfc/0x170 [ 430.455480][T17052] do_syscall_64+0xfa/0x3b0 [ 430.460507][T17052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.466929][T17052] [ 430.466929][T17052] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 430.474850][T17052] validate_chain+0xb9b/0x2140 [ 430.480155][T17052] __lock_acquire+0xab9/0xd20 [ 430.485375][T17052] lock_acquire+0x120/0x360 [ 430.490423][T17052] _raw_spin_lock_bh+0x36/0x50 [ 430.495729][T17052] nr_remove_neigh+0x25/0xe0 [ 430.500853][T17052] nr_add_node+0x1d9f/0x2570 [ 430.505988][T17052] nr_rt_ioctl+0xc12/0xd50 [ 430.510954][T17052] sock_do_ioctl+0xd9/0x300 [ 430.516017][T17052] sock_ioctl+0x576/0x790 [ 430.520894][T17052] __se_sys_ioctl+0xfc/0x170 [ 430.526061][T17052] do_syscall_64+0xfa/0x3b0 [ 430.531099][T17052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.537616][T17052] [ 430.537616][T17052] other info that might help us debug this: [ 430.537616][T17052] [ 430.547851][T17052] Chain exists of: [ 430.547851][T17052] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 430.547851][T17052] [ 430.561869][T17052] Possible unsafe locking scenario: [ 430.561869][T17052] [ 430.569332][T17052] CPU0 CPU1 [ 430.574715][T17052] ---- ---- [ 430.580087][T17052] lock(&nr_node->node_lock); [ 430.584951][T17052] lock(nr_node_list_lock); [ 430.592074][T17052] lock(&nr_node->node_lock); [ 430.599374][T17052] lock(nr_neigh_list_lock); [ 430.604067][T17052] [ 430.604067][T17052] *** DEADLOCK *** [ 430.604067][T17052] [ 430.612215][T17052] 1 lock held by syz.0.3032/17052: [ 430.617858][T17052] #0: ffff888060312870 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 430.627648][T17052] [ 430.627648][T17052] stack backtrace: [ 430.633571][T17052] CPU: 0 UID: 0 PID: 17052 Comm: syz.0.3032 Not tainted syzkaller #0 PREEMPT(full) [ 430.633593][T17052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.633612][T17052] Call Trace: [ 430.633621][T17052] [ 430.633631][T17052] dump_stack_lvl+0x189/0x250 [ 430.633658][T17052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.633679][T17052] ? __pfx__printk+0x10/0x10 [ 430.633701][T17052] ? stack_trace_save+0x9c/0xe0 [ 430.633727][T17052] print_circular_bug+0x2ee/0x310 [ 430.633748][T17052] check_noncircular+0x134/0x160 [ 430.633769][T17052] validate_chain+0xb9b/0x2140 [ 430.633785][T17052] ? do_syscall_64+0xfa/0x3b0 [ 430.633811][T17052] __lock_acquire+0xab9/0xd20 [ 430.633838][T17052] ? nr_remove_neigh+0x25/0xe0 [ 430.633860][T17052] lock_acquire+0x120/0x360 [ 430.633883][T17052] ? nr_remove_neigh+0x25/0xe0 [ 430.633908][T17052] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 430.633928][T17052] ? nr_remove_neigh+0x25/0xe0 [ 430.633951][T17052] _raw_spin_lock_bh+0x36/0x50 [ 430.633973][T17052] ? nr_remove_neigh+0x25/0xe0 [ 430.633995][T17052] nr_remove_neigh+0x25/0xe0 [ 430.634018][T17052] nr_add_node+0x1d9f/0x2570 [ 430.634042][T17052] ? dev_get_by_name+0x21/0x200 [ 430.634062][T17052] ? dev_get_by_name+0x21/0x200 [ 430.634081][T17052] ? dev_get_by_name+0x21/0x200 [ 430.634099][T17052] ? nr_call_to_digi+0x136/0x1b0 [ 430.634121][T17052] nr_rt_ioctl+0xc12/0xd50 [ 430.634146][T17052] ? kasan_quarantine_put+0xdd/0x220 [ 430.634166][T17052] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 430.634192][T17052] ? apparmor_capable+0x137/0x1b0 [ 430.634217][T17052] ? capable+0x89/0xe0 [ 430.634233][T17052] ? nr_ioctl+0x1b1/0x3b0 [ 430.634252][T17052] sock_do_ioctl+0xd9/0x300 [ 430.634275][T17052] ? __pfx_sock_do_ioctl+0x10/0x10 [ 430.634295][T17052] ? __lock_acquire+0xab9/0xd20 [ 430.634326][T17052] sock_ioctl+0x576/0x790 [ 430.634347][T17052] ? __pfx_sock_ioctl+0x10/0x10 [ 430.634367][T17052] ? __fget_files+0x2a/0x420 [ 430.634381][T17052] ? __fget_files+0x3a0/0x420 [ 430.634393][T17052] ? __fget_files+0x2a/0x420 [ 430.634408][T17052] ? bpf_lsm_file_ioctl+0x9/0x20 [ 430.634428][T17052] ? __pfx_sock_ioctl+0x10/0x10 [ 430.634448][T17052] __se_sys_ioctl+0xfc/0x170 [ 430.634469][T17052] do_syscall_64+0xfa/0x3b0 [ 430.634484][T17052] ? lockdep_hardirqs_on+0x9c/0x150 [ 430.634507][T17052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.634523][T17052] ? clear_bhb_loop+0x60/0xb0 [ 430.634541][T17052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.634563][T17052] RIP: 0033:0x7f8cb8d8ebe9 [ 430.634585][T17052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.634601][T17052] RSP: 002b:00007f8cb6fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.634619][T17052] RAX: ffffffffffffffda RBX: 00007f8cb8fc6090 RCX: 00007f8cb8d8ebe9 [ 430.634632][T17052] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 430.634643][T17052] RBP: 00007f8cb8e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 430.634654][T17052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.634664][T17052] R13: 00007f8cb8fc6128 R14: 00007f8cb8fc6090 R15: 00007ffef9671e28 [ 430.634685][T17052] [ 430.971989][T16892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.979828][T16892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.005793][T16892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.047059][T11186] bond8: (slave wlan0): failed to get link speed/duplex [ 431.085050][T16892] hsr_slave_0: entered promiscuous mode [ 431.091802][T16892] hsr_slave_1: entered promiscuous mode [ 431.098299][T16892] debugfs: 'hsr0' already exists in 'hsr' [ 431.104183][T16892] Cannot create hsr debugfs directory [ 431.199733][T16892] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.218675][T11186] bond8: (slave wlan0): failed to get link speed/duplex [ 431.278817][T16892] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.327212][T11218] bond8: (slave wlan0): failed to get link speed/duplex [ 431.344496][T16892] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.408262][T16892] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.477494][T16892] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 431.487783][T16892] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 431.500951][T16892] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 431.512010][T16892] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 431.571577][T16892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.590473][T16892] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.602439][T11230] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.609595][T11230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.623929][T11169] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.631111][T11169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.782098][T16892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.846722][ T5867] Bluetooth: hci3: command tx timeout [ 431.953120][T16892] veth0_vlan: entered promiscuous mode [ 431.965298][T16892] veth1_vlan: entered promiscuous mode [ 431.990386][T16892] veth0_macvtap: entered promiscuous mode [ 431.999710][T16892] veth1_macvtap: entered promiscuous mode [ 432.015862][T16892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.029665][T16892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.040908][T11218] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.050565][T11218] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.063889][T11169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.077290][T11169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.103630][T16892] ieee80211 phy30: Selected rate control algorithm 'minstrel_ht' [ 432.130470][T11186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.132343][T16892] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' [ 432.150239][T11186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.171654][T11169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.180203][T11169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.187023][T11218] net_ratelimit: 4 callbacks suppressed [ 432.187050][T11218] bond8: (slave wlan0): failed to get link speed/duplex [ 432.307419][T11222] bond8: (slave wlan0): failed to get link speed/duplex [ 432.416519][T11218] bond8: (slave wlan0): failed to get link speed/duplex [ 432.526765][T11186] bond8: (slave wlan0): failed to get link speed/duplex [ 432.636629][T11186] bond8: (slave wlan0): failed to get link speed/duplex [ 432.746573][T11186] bond8: (slave wlan0): failed to get link speed/duplex [ 432.856720][T11186] bond8: (slave wlan0): failed to get link speed/duplex [ 432.986494][T11222] bond8: (slave wlan0): failed to get link speed/duplex [ 433.096168][T11222] bond8: (slave wlan0): failed to get link speed/duplex [ 433.236955][T11230] bond8: (slave wlan0): failed to get link speed/duplex [ 433.926473][ T5867] Bluetooth: hci3: command tx timeout [ 437.266606][T11205] net_ratelimit: 35 callbacks suppressed [ 437.266630][T11205] bond8: (slave wlan0): failed to get link speed/duplex [ 437.386482][T11205] bond8: (slave wlan0): failed to get link speed/duplex [ 437.496905][T11205] bond8: (slave wlan0): failed to get link speed/duplex [ 437.617071][T11169] bond8: (slave wlan0): failed to get link speed/duplex [ 437.726542][T11169] bond8: (slave wlan0): failed to get link speed/duplex [ 437.836607][T11186] bond8: (slave wlan0): failed to get link speed/duplex [ 437.946831][T11169] bond8: (slave wlan0): failed to get link speed/duplex [ 438.066832][T11186] bond8: (slave wlan0): failed to get link speed/duplex [ 438.176668][T11205] bond8: (slave wlan0): failed to get link speed/duplex [ 438.286714][T11169] bond8: (slave wlan0): failed to get link speed/duplex