last executing test programs: 2.651297727s ago: executing program 4 (id=6732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x1}, 0x10}, 0x94) socket$rds(0x15, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmsg$qrtr(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1, 0x0, 0x0, 0x1}, 0x38, 0x40) sendmmsg$alg(r3, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x40, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0x12a, 0xfffffffffffffffe}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000200000a0900010073797a3100000000be34000000030a010100000000000000000200000108000b400000000208000a40000000060900010073797a310000000004000c00140000001100010000000000000000000000000a"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x1}, 0x10}, 0x94) (async) socket$rds(0x15, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r2, 0x0, 0x0, 0x0) (async) recvmsg$qrtr(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1, 0x0, 0x0, 0x1}, 0x38, 0x40) (async) sendmmsg$alg(r3, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x40, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000045}, 0x40046) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0x12a, 0xfffffffffffffffe}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000200000a0900010073797a3100000000be34000000030a010100000000000000000200000108000b400000000208000a40000000060900010073797a310000000004000c00140000001100010000000000000000000000000a"], 0x7c}}, 0x0) (async) 2.326325375s ago: executing program 4 (id=6738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff0000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) setsockopt$sock_int(r3, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r3, 0x0) accept$inet6(r3, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@cgroup=r6, 0xffffffffffffffff, 0x14, 0x25}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000084850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(r7, &(0x7f0000000180)=[{&(0x7f00000003c0)=""/73, 0x49}], 0x1) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r9, &(0x7f00000006c0)=[{&(0x7f0000000000)="825a0d0b586f427640fadc5f5f44c8d6a4def07355aa3455c5e1c6e4627c6cc1c21865f234cda2f130e59664381e32fa5a9af282", 0x34}, {&(0x7f0000000040)}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000000080)="3baf77c866c256f4e857ffe35f9aeffbc668f085d0bda669ddbf4b9afe0fb1cf1ba1fedd21c14749bcc372b8a8b36d147797872c3af88db012cf64a280306ab36a79b5eda61dfa19ca9df2c6845af7a4e95179bc6516fd23ee82e1883bc9d0b1cf0bf83d7c334887dd604d375e84ccd0abd1a2ae757f2746fd434a2009b10aab7d7cbd068e72d1d719eda1f8914ad3915c5111684115e9d9cb42ef", 0x9b}, {&(0x7f0000000240)="56440e16274877e23b646a44b3a09534e82e2dc41ef7821ba154af888e9a7316f21e7479e02621aac3326dbd383b3b3530170dcf1a2058667adf08ee1133d71e56", 0x41}, {&(0x7f00000002c0)="729ac6f8c66c4ef31f81ace9963246bb9ad5675cc379063ffc2154c946fe4db665a82005f4d2df2705a3091cf24e890f2d3cd3fe7e182b9b9d6c49c37d3a08310eb294c321d6e35b3e9d", 0x4a}, {&(0x7f0000000440)="b71070ca3c1e0470f4c809bf7ba20d6112a109eafd27fe1eab7ad3330978ffddbf0f278f2deb2b6241f61db884157ba83908a58454f56626babc4785a84808f5a4a5a4db8f2df1a58d93286eadcf5b7b7d2cb922c0b4275d97d72229b161b6904532c6ac24ed1cda89513eb675bfabffdf0d91274ef7444fae68069212c4097e3c6d9f88f9d5aad2fb78f7726777a6d893d69ef499522866f368dc328044b668c39c", 0xa2}, {&(0x7f0000000500)="2cee3324089ea4ba419dcb173f8c3a9755ccbe05068ceb50eee83afa96255fab4810cf4d4f01aa1e7b90db5358d63ac366e973e4b3e1162058d4dc729ec2d8d15bc964256770c4866ad9c00087f3dc6a13f407978912099ae82e36930507eeee9b20a52d6557d527acbf470bf1100b1352a08110a6c94bf64e1650fd896fd9c73e961486881c84d7b7629b196f87eff5f0421f4a98f500181e04776ea2f92a54129bcf037a07e183b7f9d81146a481fc51743b615105e017603c70f214b3e55db841d870673bc5a9e2cb69fbbee7b35242e835a52744043bd0b650e831874d8c65f4683d304a8fcedc95bb4e4865dc052d", 0xf1}, {&(0x7f0000000600)="5bc62ed1ec44768365784d6a18796f6437b3fd3b314e62e63f59e26f64fec54d11aa963505142f286851f47cad3ea68a47f6ef4292452d4810bd6ed68e8374399202a23f5363bf081876cebcde073d236c427b89364bf250ec7ee9fa7c1efbd1e2a0ab00bc9bf0cecfa21335d18ed30f859b45e0b83f86ccdd77a1b4e6618cf42084d8811042f28ec78be5726f1519874fa2eba0c094149db4ef18facd3268f4ae8dbf8ef4aab125289cc3c3f36e5a4b", 0xb0}], 0x9) 1.976323841s ago: executing program 4 (id=6745): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x5, 0x4, "59f9afda"}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x3c, r3, 0x1, 0x70bd29, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a1}]}]}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fbdbdf250f00000008000300", @ANYRES32=r6, @ANYBLOB="08003900890200000008002b000200000008003c000300000005002a0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r5, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xaca0}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000004) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000001c0)={@val={0x0, 0x8100}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0xe000, 0x6, 0x2f, 0x0, @private=0xa010101, @empty}, {0xa001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$kcm(r0, &(0x7f00000009c0)={&(0x7f0000000380)=@llc={0x1a, 0x101, 0xff, 0x8, 0xd0, 0x5, @multicast}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000440)="c73f9e36961fc94c2742e631e4223279d0c17479fe9cdf915b13ba7a87f1742d32f400de74122705448a9ed5621e730e8f8216856159cdde0ae81747437a04a465f25278a239d7292d0125a5d4bad6b16aab1160f00b9609e0ec0615a9915bf694aa1eee6cc818cc1f2a1589ff0fc4a64efdba10b888d7bf6bddbec08c34d3a2ef12d7249783a80387e4c3b14f91de226ca404680a708d717412d441c936cbdb2a2de0486aaa0398c79a1abee40854972c9ee60df269f8797e41951d416cf60f0bfc5d5890d57f6b3376ed73f87c2ccc977007416f886c003bbe44226738488922", 0xe1}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="b0c8af24a90f05a878aa2ef363b562f1e5d2d8cd2657ef2a0e3f7aef56c162d1cff3975a57bf92a0578d2d00522bd3bebbc8b67b85b99690ddb080a43c539831fbe2ef0e1ed4e22c4a7c99fd53860252dbfade2e27e862ff5fe276acbb670b4b7f3f0d2b8765b7afa518c0619a051033e02abf0e6695f323767e505f66e94cd27e52277706852dee15d0b5d0e270b66163b69ab27c048233d85897ba57fd4d8b5da6e4d6f5e7c366fdc189830d30d2535a4d3fcd6a96560e73f57c7f442b621691bd27d5821f1c8bfcbefdafc85d9a0175042a41992dd0ee462265f9c2709789807c57d17b4aa2a93ce8c3c0698deeb876fde9f498dd2235dfedadd76f1a97ee5ded8dcd8e6f80bf27245e64c09748a8179d1a82e10f92b31a638fafab88da458370fd6c52b32d080bb2a28e39f14dae9fe925c18679b55f43aaee3384c62761496498e9d2e48d14fe6094ed6aa6d0dcaed83d62eb555a5b6f76f0ff0504fc54e53967ea7fd3227378b98860f0f5836b0e608ab0ca53bac6eb511bef9fdc58315ee9905215270c10c2bf667e97493e2e7eae5ae4329e9cf6835b7ffe91cd81030d634198f3ade20ff9011024e232e9080992aca55c787f3094eea6adfff99d71672ef4dda2284b6e5c350a0226642b687c373418cb1ecb827054a117c03412da30e5570ce54ed77c5e710a65a99ddd6e4a38732ad4038fa63f2b5ab1977a1a945b6b81a39b709093cd56a3f9a067256c09edff12870d0847663521bb237c45fb6060221e76e33db9aa07afdd6a86212329f15cd7b3e41a07164ea16f1cfccaa4a32f4fe891e5f1cafabd9d519db98a4ae348208111f88ba7c7a0bf15c566e881a55dfce772f1fed2059d6954b468f6e126be068d416ffd30b3f2a9df2153c7535ea6bbe26f5df3125418516d1a729a13fa1565160cabb8e9c04264a3d22f7b39116dbc78b815cbe7721d58d384941f5cfeeb91688056ac42f170adcb8ced7d694717bd330a14282548554f40b20f2c7d9b273c5a72964cc1ecad9570ec7236aabba3af3b9df90ce0522624848877967690ca97d3116881afd5f52c6162f7293a142e0f6912986a8d67c8af67e16ace74e29b38eb3af27e038849d6e724037db62a31c28231a498040663e5e918be7ebbff8aa1bb4c47d284dc0f01714d0110a1a080c3d821558e57f0da0f0afc0ab440a18c23e8c5b41bd0b7a8950d6c34a8e8377016aef191b8b3cb250580ac0e0fff1fbfdfdef605a51836954d15dc8fae7951242a59416f7809e25581e2d06e01663d8467425b24bc36bc424cd63442d3e47892fe38fa9ac0b6495530ce49a30b29124ed0a8ce12713a5d631d5ed780e8049565d5113ca2c925fb7ad09ec00f588bcad2c78787c5db14766344ef1d0a418b672c7951827ea60e81532b2cba2aa1b4581687e2da3aef903bd224b651097ba3d9d1628b80f4777ab0e5190e934cff32cdc1d36ce292c8ff7b0d75af617fdc35a2d678db148661db39934cfc4b506bf9ee5e498ea0fc260959a77ba51e2b98aea15697860a24c430f5e674ab0e2b705ada14ab98dcb1fcce824a8ba685169e10ac2230bf585647e8275ba1367491a1b2d536829ebbf9d91ee9ede128fdf20a6f6042de56c133be4f20e572b79bfeb2d76baefbdd3e5c778e5883c49dde9b12a4958c6cf9284defb6f45a94e98fbe8cb72c98140f3186418756096af6353124b1870e35429acce477d8c7b8d1c6cd610fc29cf317803ad37c18a459f1f18863b73285b536e47ad82f2dc8d15f61b81e3ba0cd4286fd3a676751e5f7fd5c3564b222158e40f7a52262ad94a5a84a7065798e6a3ae3e12d3669ea5db1a6fc11b547498af4de800ab71054cb4e28be8dfd775cdf31eb7260474d88ce04396e82fa279d9d99e788acdd792f7e2b031db5a22879392aa9ee8bd499262247d7a238668588e97dbd30473e639632b26d11538b81ace50e6ab2d659d032fe42c639f248cbe398b8b44354fedf82ced6f9e67bad09fa01fe2b9e94b89a5e2156c0b9ac9f52572e871c33ccb36769678ec1a893dbb330b97532ae431ea65e8a68001e37a6c327434705a0e9390dad5c8a17054431437067ed2b473fe51b0c25dc94607547b333edf53587f943b5d299872a5ff2eea03b99c8115ba0b19571799e05a1359c97ce9e063d20bef0b1bc82b340a0685f7700f2bd5d5268e07fc5cbf27d283375fadf647b7686ab5332e4bafc71b6559c7f1910117ba45b1e2e7498ba6c33001865a4d630b369196fc8a1b3fbbe640f37533d25807321783c184b53347d0c99587bf9dcc4ab9d6606847f4031db23a26a33465b565f50f946ba710ce114eced882e5724c122f013b293637ffa8e16a5ec372a2c2758b1695d5787fd74f5257e294e609288084f62c4ae80d3cd65eb29067a6603c763ce2f9a36b2f40e13d847a488d66179cd88f52c450100c1dd92bfea7cf9aae203ff7a0823fa8e8487090fb491864ebdaf5f068e05007edd7893134cb2612fcb3491fe889c39973766c57297832da893f05e4a57a6f005622ec42dedc930e2ad37c3624647bb2778e872c419e7853634572937e0b8467d9cb94a8a423897d27cfcb059286bd73dacedf9190dcf05cf47f6f67c8a4bf646f71c24513bb932e75d2eedd181c0ae98b157f4c8c25968cc65781943daeaadf0fc7fed7212e7e634c0a6d9d4d0f1e230e62decd8e9b3bd3a3ad66a070a9b85c034a0a1e965e50d880f338338603a6167b8691110cd8ad5c313af058ee28cd6b30192aac7a6a3888b3b769423fcead0c8aa709d52af8e64e4c0f7ab0c9331686562206663c8506de4cb2ba4e2c65f4444c6fbcfdb8acd15b15f2557fe598af1d1886b02b619af9384795b4317a0ed27573f96243266a4e1e94cfe004466f104c859dffaa126c83da3da41347cf1b631580680666bf0150d78e84e21fd70f4a3453e7e2da308894e73617c970f53ecde2312fd2e923e76258d0803f5f40ffa045e670cdfe8ba4968cde0a297a812fcc4954c9951c1e90a5739257dedde823e4261d951c0543fc24c2529b8e1f9c3a0b59f6e25b2626df14c62aa46512c06b4acdea29c82895803c4cfb6de3288357e33402c67a0ba4e0abc3e3b794df20002ee5c261c7948630baf5537352742a72ee00a300d2b0243a07f4c37d9dd9aa87b2a01a4ce120785f5eaba4411f0f1c7053d4a794e0def911f752e06bc3e567529de3ed3dca0bc12b4fa3c0a108fb556e08866c6adea2c057a411b8dc9be07c521c0f4bc2ac02aadcda7a84d1a2e9b7b19e612db31269e29fc29b671623761c2f3b6f235983f50e7e9bfef7be8c829206a8228cc478de1358fd80c22c1822614536bbb9ba5107b449fa5f0c199027e9149923bc42d7e776ce8f1fcbe3fedee4f020127c310c63e8a1aed0570e8e033263d65bb4a4b16d93bc5f8817d53f0c1b20a1e5259b9aff49b04c4c85f5ba07a97ddf158cc9bb590585dd30bc6ac5abdd42cc52b5c51b9dc7481f2196c294aceb3af9a9fb41be53ba2ccd714cd5179022d541edc891d803dea29d43ff310adad8c8bab102f91a6fcbb43302490ae18fb8c4dc571eb1b3873d59fa785628af49f91d69197a8e5ed6e46e7780eec0f9f72422c9389f8707591cf8d057d9221edbaf296ea6b655a7d6fb911b1689ff827c2cde47e48334194eeef97e0f5e11544fdc006387ded0473ca1dfc9b1f14d3e721b4113b0b93cffea791c913526765d923133cabaa52bfd8761f2589f2efc2de686f9511eb1bbfcea53fa98bcc3ef3bcdea5805a07a72a7cb6539792d55391e55028c982a43977ef1f6389385afd146243ad912d314f884bed6bc091cccc5550b0749c3c5964ac8470d9c12bb4ae5d556db999c111c4ae12a2e6cbba17975a08cd0cf61073f0746f25feeef200cdae4b3ca3e3f48d013b80ed2f368c7f86443db361386a4dadb21bff008013e602c3374e79c08df2d98bd6877d91dde3feaf7cf5a17f33b7b3222d5179f53db043135147a02236c3972373b8324fda3c576fbc96361d988e3978610265a4ccf57990eaefc80a2ef8974131260e64c5e7b11f6cb9279e450b598ec1867f1839a62fa3883d023c7802b87efb0421d3e4a11c266d9f45d43167d513ea8643c6ced60c1e5d598255a8ed1c415df8a26960fc2e76547ed25c738fa0e77a63a013860ebe1bba05bbaaf14fecc75925ae3b955b1b803a7697184dc8d75f03908d11b15266cfd3e1fa07d80186e323f058cabee9f39c4ca46fbbc085228bed9cbdd3d02bff778e2e0a72b25bbf074eabeaf76f6f54bd6ffe47c1354e46b1301bf1f4ffebda27bed491529036e96242735cd38cd9935d800c7a3fecea4392684a096fab4a0d497d30a43c1ee7d3985dd01d500a0b01bc167e9bbfffc0e117615ee2068fcd4d041c4921e12ec720e0741d4595c85da3918b763c8d7c1914cfb406c5b5ea2771a5befe90b836edf146fd076ef82625b5cf15ca6996c670732e0fcb92265076c209e05f352f4096c15282a498f42e6ece34e12b3d019edb2eb1304c8f825e4112737414840ad9609413b198603c329ae1a53d6e17f6b5851eea6eebeec18efdc0f4a34eb342c2a088afd622b61703a014443842760bf2f3c055886399e397fcdcaf7bf124c9c367af9e4141344fa924bce4c8b6f78d16ecd3af26b13423516d84b6011d8f74f385d6919f9cdc82c1cc402bd83371cdacf5e26dd31b3588873b37e8ca39a53c51b19855354e16c48643a415168927b5b00f5c42be5cbe0f51d7ba4cf9b962904c01fc620491946e8616128ab87d818c2fdb793bdf749e597bcb20dbe00537ca8056a5ea563298a399e8d6ee9a607dc370e90f1e9776fdaba96a390716b5eda05a5d94e6e7411b6d63a8e67fa0177ccdbe790e2355e74864eaa7feb823a9366cf9351c60d83eb1546a0f617f2d9bb3ca1632ef559a31b09ae2623e6ae240ab8ff96e031aef90bed262aa242d93e823e4aa98b373361ae984ed0fbf729eba981ff80f351d4d2accf9e0c673302e4d4d9759634f2a02e254bb5e684077ea8361e9dc02b32dd4d4edca7f6dedbf2d9835dd3dcae5d9212dad8dd5289b130cd23b49cf32d8065e2be6f3717ad7838d3af465c1733c85f2f222e6ef86bb334321fbd9106f16aaeea9532e7fa595294b407b97de92b32c7df686945a613dd15e4ad012c3193ebbaf3c482a320f29a0e75b4524b4c3e80e3560a244eda632541f3f9c9bab43826deeb5c707b7aa274f86b274ed603b75f544c948ab3bb0ad02c8c1f8aa94df5a82419b7d10c18e398a2f5f37b2860e04d1669df49b7cdcb5207dbe53e9b80779ec5d0829d7bf983253344cd671006c9d13e682b60f4925b4058dc918637a6cea3517ce0e18f2bc44a09ddbbb36fa27c1666adcad2a3bf239e745b35827f8ed7701c2631f87563f0e7de6027a166ffbed2218c2967bc83f62900ee0dbf87dc67abbfcd744b02ee96dd35683de2e3c8f876169f80f7df04e2a5375b103b7cd70127ec72742cc0bab6b83e93bae11c6e31e3c5c22cca59b035c9647dab56e1cb42352c9597948619a8c1605cf187c07a68711d7e4c4cf6669f8f4da8c9796d64d191e5d4b24298791bc48dd46f44cab088640caadc418df71f72109e843c0ee5c9d7a87d938cec14d3a65804a4e28850e1a3af7e0f4f9dce2691990672ab7082cf95b03ff408e8453ca5080fa82c4d3c82611625ab4d241f9a0490922ec30cf9452845401ef1ab72fa5541c0a97d7dc88903f1d5f32f9bff175674ad347b56c178899a51b3118", 0x1000}, {&(0x7f0000000540)="6782f97d6e59e742113273fd01ea94a9f1be919173857315dcb2d695f926ec6df67931c486903039b0d5e65c32c0ed5c0b8deea2d73d72add48c35f2ef43637f58a0c3495c1b1c9a15611be2a0344b2355074a258b147a11f21149ed4c1389c3892f7cb7f339018e458076e74e70fcae98", 0x71}, {&(0x7f0000000240)="e7afe0ace53dbdd8364a3ded852ecef2580913d30c107f3213", 0x19}, {&(0x7f00000005c0)="ff69d92005bbc1b374e91edc43be759b426184802153a2891b700d6e922fff1f99b0515c1142c3c9c9763f0a260806825174d58cde7af13a2ebba6432e35b6a7ea8f1c962e07553515c62a626b7d684827fc7d0f4d6c458a974e9cac2aca64326d1615b52cb6370bd2da9a70f487f97ca5c68186cec370e9ef369ab6aef4efbdee26d6e23576d3d49f195c4abd9a1ce8de3d940392e02286fb5f69e5df1fdbf1fbc092943ef27b66507ee4fe4eee048ef9e749259dfffed817b13a602de27d4bc50bf8ea", 0xc4}], 0x6, &(0x7f0000000780)=[{0x20, 0x10a, 0x3, "5781619486019c29b5"}, {0xd0, 0x0, 0x0, "b3bd8b1dc5271538ddd0041cc76e5676364216dd4c3ac984749162373186bfc91c919a33534c3dbf1ac6ae3b18ebe6e8dafe0f97b6c477471a0be21d17f39cd677f55275e955cf2dbc152469c8ce64b7c9d5a0ae3b0f719000fa5cde0c6b622b940f977ae0cfcabff1ff8530836841368e9600c28b4341dc758a52103f3efeaa09bf1171876b6e7804cab3b8643d3b3ad07103b2cf934cd6f1130c0cf0388ffabdccedee77283b01bf3f3de9a89ab5fd9ce537face2f8cb63b"}, {0xf0, 0x10f, 0x7, "fd4e839c0fc42f0d05576970c783bb84afb1ddbe40646cd8cd2fff91b587977d33e2529aca53e5cdbe8867442a8ca450d076828ecd8a34869be9f5e6089cde4fff4ba2eca2f96c93022e910665f264927179f7e80394e95df2bf9eacc8240bce4bcf3c7e2d04cd3126808ea2dc6431f3b616f48189e270cdf860a3ff60facd10588402d7000aa33b5ed50a2c9e65bc75c95c38c6cbdb55fe6582af7d4564af125e877159af7d85282bd0657575fea02017adf37e0d84f0695e51882403e902801e9ecf01b677b8ecd6906092a03425301fdf1a9b6d979e7a041476"}, {0x58, 0x103, 0x7f, "88e298cfb38134eb889331a55df1a8a9ce597fd6a20b33b1ac615c39adf5ff62626f10783118b0caf577aa794d0142324622ba831fa7d355961f1fa565b7bc09325954"}], 0x238}, 0x81) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x4044004) 1.845749846s ago: executing program 2 (id=6748): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) unshare(0x2a020480) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002180)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd29, 0x25dfdbfb, {0xa, 0x94, 0x14, 0xa5, 0xfe, 0x1, 0xfd, 0x5, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000000380)={&(0x7f0000000080)=@in6={0xa, 0x4e23, 0x7, @mcast1, 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7, 0x7}}], 0x18, 0x20000001}, 0x20008000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={0x0, 0xf1d}, &(0x7f00000003c0)=0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0x29) 1.84535594s ago: executing program 3 (id=6749): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'batadv_slave_0\x00', {0x4}, 0x2}) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) r1 = socket(0x2000000015, 0x80005, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b6574000008000240000000021400001100010000000000000000000b"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async, rerun: 64) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x847b023adc5ee2e2) (async) recvfrom$packet(r1, 0x0, 0x0, 0x40000022, 0x0, 0x0) (async) r3 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x4, 0x0, 0x1005, 0xfffffff8, 0x8fc4, 0x1, 0x20000, 0x6, 0x10f}}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x'], 0x50) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 32) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r5, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r5, &(0x7f0000000340)="07000000010000", 0x7) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) (async) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) 1.638901058s ago: executing program 4 (id=6751): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYRESHEX=r2, @ANYRES32=r2, @ANYRES64=r0, @ANYRESOCT=r0], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0xfc, 0xfff3, 0x0, 0x9, 0xff, 0x40, 0x3ff, 0x3ff, 0x0}, &(0x7f0000000340)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e24, 0x5, @remote, 0xeccf}}}, &(0x7f0000000440)=0x84) sendto$packet(r1, &(0x7f0000000100)="d0cb47526a1c311b3c06d46a90b91dd70862bf0800c7dcc66d9bfc658545efedce6c4ec8864196fd0377b2ec678202a7d76e7bec87b801ae5663", 0x3a, 0x20000004, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000280), 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000001c0)=""/84, &(0x7f0000000240)=0x54) 1.589740714s ago: executing program 3 (id=6752): epoll_create1(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x9}}, [@NFT_MSG_DELRULE={0x44, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x50, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xffffffffffffffc7, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r3 = socket$unix(0x1, 0x1, 0x0) close(r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket(0x1e, 0x4, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0xffffffff}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x3) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0xa7ba) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @loopback, 0x1}, 0x1c) listen(r9, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) 1.582675428s ago: executing program 2 (id=6753): socket(0x10, 0x1, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0xfc5f}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r5, 0x89f2, &(0x7f0000000000)) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 1.378592712s ago: executing program 2 (id=6756): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}}, 0x2400c800) (async) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000002c0)={0x10000018}) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) splice(r0, &(0x7f0000000040)=0x8001, r0, &(0x7f0000000080), 0xffffffffffffffff, 0xf) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x43, 0x1}, 0x3}}, 0x10) 1.209010901s ago: executing program 1 (id=6757): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc00c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b9af8ff00000000d6090000000000007baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000081c00004608f0ff76000000bf980000000000005e08000000000000856eaa0005000000b70700000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.118086323s ago: executing program 1 (id=6759): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) unshare(0x600) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)={@cgroup=r1, r1, 0x2f, 0x4, 0x4, @void, @value=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.033776114s ago: executing program 0 (id=6760): socket$netlink(0x10, 0x3, 0x0) 1.008155139s ago: executing program 0 (id=6761): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000011140100299d700000000000080001000000000008004b00130000a9"], 0x30}, 0x1, 0x0, 0x0, 0x2004c0d4}, 0x4044190) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb58d, 0x0, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x2004c080) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "2a695c3cf088060a", "986c77c98f0531a8cd1dfcfe6347d245", "ac57772e", "7442ed7024cd91f4"}, 0x28) 995.733338ms ago: executing program 2 (id=6762): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x800) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x14, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)}, 0xc}], 0x1, 0x10002, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r5, 0x103, 0x3, &(0x7f0000000140)=0x5, 0x4) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000240)="27050200340f3c000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc083", 0x4d}, {&(0x7f0000001400)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff88580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8cf811eee6448a7c2db438b06b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c618aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce25a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacafa4c8efafb73a2ab89bb58b0c20364a6ad9c7c3dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4d27b219628be8cdba7004d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c6a56b8b34b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac1f15471c5a2b8efe67bd4bea33c0ca36e2c4209026849de21c1da1057f353cc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca05e791c2b8c2b8988645afa2446d5218abce136c0dbbafb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb662cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18668130ab897dfc9adda67502444c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c126533f0630d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35ccb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac56aa862f738b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e621b29d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee460d8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d81b58ca7ddb0e688a15b39a00ef1aed5db337d1ab87e86f835663a4968c8bf5afd7cf80549a33b4025b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411325578d023d7619a89d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b4d2f5015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2ee08eaca8dd6f77c626691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc741e37a47c4996068f1d4b25f182b9d7bee4bec5cb070d3cea2f9762a41bb8d9ec5896ebcb2b17ca82f29bcce456412d8ed531afda50d259fcb7794216b6a9a873b6c3c4493c0c6d3e6a4f81f3b40dcc745a4e2383c678c472b1d5bf02002992bfe893a5bc96824039da1ee3cf8593e7d616d62f6e3c3e2c4e0cc58d5445998cf5b1c91c2468b2571b118709668efbbe72911f1bfa96b97c32f71cd7071f4c729e88631a89b53dd4bae6ef9c4ed082916e267479195599e9871b26b92c6885ded29f990070fddc4d8535088ddc70d6e83f797b6fa2260a92602eb90800000001cb7394f0c90fb5913b2f8d8d24c8f1056920e1facbe643dd49d8983b277da7282a986c28d5468aed9a4730579a20346d35f78b6bd2cacb4b9237fbfb0b7a2314105ff3b074a0e340b904e715e99c501e1435c15eaa262893c2883c90f26d2ff91792d46e4d867b62570e0c1e4739b8ac4fff8f778960de1ae40d4c85c51e1c47040bb2caeaf0c71dbb67c30715b8c14d6921831d7678522eeed29444df421ee206ca3be20d1b5fd2d2baf832f08efef590290eea77f8f3ed00b39841421b61f1c0d01def54bec0348be2216a8dad60838f3ad3595a744edeb6202dbcbd9c73a126a79cbefa43c7db0493103c2aa8fecb5cde1773ad0cdd03f5b0cfb0270642a96a9e14d116e9140501df48cdbf725611b398eb2b9e93f8da49e601099e0b2e880a955205000000dd74ae9d664a1f2e932493b61634ab53a1e2f3bf56add0a7f09c16853814b03a4212b9a0119420948da26bb171b288a66a2f0a4063754c2910512aa1cead69b94b498b5d4c44ce0a4aaa7855ee1a3b7ca738756a00a435062ccb86a40cc01f666d372f323e087ef5db2bc2d17ed1f72db14c52ca6723ce92ada6ff0c4f498d42d4218a9f799a216facb7377a1532e0755b894bfc0ee99a4072ac54ee5727846631574f348bf650e7d54b0ef3a1b5cc8233e660a2615bb7401f6c23e08ff0ddb488b9d504fc42508449b8fdd70afb387016e8c9206482c334f37d26fa3bdb6063f8147db9363e22c4b43b89ba0f68d06646fc1eb74fec0be4f59a17b274e0db67b2c0398250da219c9caf7e0f6cb1f828b6f89a67cacfd0fe0132bd94261410f8d8d7eb819bc783b8e66a1786285e1e429b71ccc22f7f4c216001375c7a816719e29abc98652b6752923132256cb5f0470223e2c685c9ebf635e316a12b35a429160d1c7688dbc3edcb1af64032177e41def01696e7100bbe10", 0xf36}], 0x2}, 0x9cdc2384056f0939) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000940)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r3, @ANYRES16=r4], 0x14}, 0x1, 0x0, 0x0, 0x400481d}, 0x400c000) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=@deltaction={0x268, 0x31, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x28c}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe03}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 865.255111ms ago: executing program 0 (id=6763): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8004) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0x11, 0x5392, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x81, 0x0, 0xc, 0x4b, 0x9}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d2828da0a9423debbb86f9dba4a2dba4dbe076c292c28"], 0xe0}], 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8004) (async) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0x11, 0x5392, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x81, 0x0, 0xc, 0x4b, 0x9}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d888f1d1c4e5ad85ce4966dbd0000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce2d712d2828da0a9423debbb86f9dba4a2dba4dbe076c292c28"], 0xe0}], 0x1, 0x0, 0x0, 0x80}, 0x0) (async) 864.837267ms ago: executing program 1 (id=6764): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x3, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendmsg$alg(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0, 0x42}, {&(0x7f00000003c0)="3ef20329721db69177a9b1c2dd08c122d5408d1580131b5e2ce5dd6b3098e6e19d", 0x21}], 0x2, 0x0, 0x0, 0x810}, 0x1) sendmsg$netlink(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x2000c011}, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xa, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x2000}]}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x2}]}]}, {0x0, [0x0, 0x61, 0x2e, 0x2e, 0x2e, 0x61, 0x5f, 0x61]}}, &(0x7f0000000000)=""/28, 0x56, 0x1c, 0x1}, 0x20) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r4, &(0x7f0000007cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="6989e7cdfd3e272285c31d8f0421f4817fcdf38f454110ca21ddd1f4767db6244675ad70be122cce1c3c4ba6362d7b717d6b85c6847aed8785035174d8ead29378db60a4c47905c4537bbf57ac3f21ab8ebe8fc7dc98c91afdccb065e04ebf96c3a1088c12e909fa8a3a4336e01a6101a13a11e5e1cd37e0f6f5fb58f43b8eca588ac9da1446a890aadc3111d8224df8fa5df82c4d85f7a82396e0c65a3d7528127b1b2bbd3a543a34cd317e8e793276acbf78ad7fb44cd426cc6e912ee13cb5d81fca40bf0f438c1bf13df561ec09f9430436360247b2979997d009000000000000005122d7c2", 0x35}, {&(0x7f0000000300)="a24166a197bf00626ff47c09876cd7298cb8950d6a98ad6b2db097c2a9c2e3b4bccd41a5a4a46af3156c4fb57011248ac6e2e7180963fb31b903ba0fbdf8580d73", 0x41}], 0x2}}], 0x30, 0x20004014) 848.367815ms ago: executing program 2 (id=6765): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000c40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000300)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x17}, @val={0x8}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x44) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xabbd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r2, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x64}}}}, [@crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x6}], @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88a2}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x15) sendto$packet(r0, &(0x7f0000000400)="05", 0x1, 0x200400d1, &(0x7f0000000200)={0x11, 0x8, r3, 0x1, 0x88, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 790.236116ms ago: executing program 1 (id=6766): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000003240001801400018008000100ac1e000108000200ac1414aa0c0002800500010000000000240002800c00028005000100000000221400018008000100ac1e01010800020000000000080007400000000018000e801400018008000100ac"], 0x7c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x8}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x880, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x730) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x50) 664.878935ms ago: executing program 0 (id=6767): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0xdb) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0xa, 0x3, 0x30, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, 0x700, 0x20, 0x7, 0x800}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x80, 0x7ff, 0x74, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x80, 0x7800, 0x5, 0x3}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x34, r1, 0x820, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2001}, 0x4) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000780)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c0000001c000380180003001400018005000200000000000800010001000000180001801400020076657468300000"], 0x48}}, 0x10) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x6e24, 0x5, @empty, 0x2}}, 0xb, 0x1000, 0x20003, 0x0, 0x8e, 0x1000, 0x4}, 0x9c) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_EXCHANGE_RANGE(r6, 0x40285881, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x763f, 0xffffffffffffff7f, 0x8, 0x5ca5b202017ed3fa}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x1000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r9) sendmsg$NFC_CMD_LLC_SDREQ(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a80)={0x14, r10, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24040000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r11}, 0x94) (async) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r14, r13, 0x25, 0x0, @val=@tcx}, 0x1c) 664.432599ms ago: executing program 3 (id=6768): r0 = socket(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0200000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160005000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0xe0ffffff) pipe(&(0x7f0000000000)) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000700)="af", 0x1}], 0x1}}], 0x1, 0x44008890) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x31, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async) sendmsg$inet6(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0xa, 0x4e23, 0xd7e5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000300)="892fc24a743ce72e9d08e5f2288afadafe1a964027a23fbf9a44ff55645ce44e1fcc37b4f184d9d0ff675d9e84c021e9a96acc7e40493e38fda5559c47a8bd7cbfaad1ba7d8e21fa0400d65b4465abbef51326ea92f264fe1dd0e0f479f0b34ae373b309ec17843f0aba235f23c0ce9436979d1f4abd9cf3a6", 0x79}, {&(0x7f0000000380)="bfff4055ace3208f9fa62ceecee3ed1f6c93c38001d546e9c911d47300240cef819eee0b7620336ed14813a63e83c6dd276ecacb054247faa428c88048b0d5f986e043021cf0d9050da781f9", 0x4c}], 0x2, &(0x7f0000000440)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) (async, rerun: 32) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) (async) sendmmsg$inet6(r7, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000921700f528c132478bdf34a00095000000000000001d39395eeb9c51877f939acbec2bc4608384c7d4733f517254ba4f3ad504ef6e4ed99b2581fb3e3a3507a52eac2c687f1979906cb76df18d614c4098d024d447eadfe88e6155620c3cafde090d5eb7bf73558143785d0e071935143af21a2bb639ac86ac865fed760592f808696ac1d853f9e3e274428bc5fba035ffffc29e00"/180], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 662.924204ms ago: executing program 2 (id=6769): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', @broadcast}) r2 = socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x1, 0x3, 0x2}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000380)}], 0x1}, 0x20008010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x10, 0x80002, 0x0) r8 = openat$cgroup_root(0xffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup(r8, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1e}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xfff3, 0x5}, {0x8, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xb6a}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800"/12, @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 637.497859ms ago: executing program 4 (id=6770): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0cac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x0, @loopback}}) 569.332632ms ago: executing program 1 (id=6771): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') mkdirat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x1ff) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="000a00001173425cf93549ae7df479460a5c000000060a01040000000000000000020000b21b0337802c000180090001006d657461000000801c00028008000340ebff000e08000140000000030800024000000002000900020073797a3200000000140003001100010000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x200, 0x7ffffffe, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbbb, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1}, 0x6e) (async) bind$llc(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r7, 0x8008f511, &(0x7f0000000100)) (async) r10 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r10, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00000f7f89e3ff296aa1f6475322f000200000004a2471083ec6991778581acb6c0101ff00", 0x48}], 0x1) 485.750402ms ago: executing program 3 (id=6772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) writev(r1, &(0x7f0000000e00)=[{&(0x7f0000000a40)="5e05", 0x2}], 0x1) (async) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x60000009}) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140c, 0x200, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000044}, 0x20054) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYRES16=r2, @ANYRES16=r1], 0x14}}, 0x24000800) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x4c}}, 0x4) (async) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 423.228018ms ago: executing program 0 (id=6773): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x112a000, 0x0, 0x4, 0x6}, 0xfffffffffffffdc0) 405.20943ms ago: executing program 4 (id=6774): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x1c}}, 0x880) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1709a70000000000000101000000080009003f00000014001f00000000000000000000000000000000011400200000000000000000000000ffff000000000500070000000000060002001100000008000a"], 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x40040) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x11, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x39, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000080) pselect6(0x40, &(0x7f0000000140)={0x1000, 0xd2, 0x0, 0xba, 0xfffffffffffffff9, 0x7}, &(0x7f0000000300)={0x7, 0xf, 0x1ff, 0x71a, 0x0, 0x7, 0x7, 0x8001}, &(0x7f0000000340)={0x0, 0xfffffffffffffff8, 0x1, 0xfffffffffffeffff, 0xfffffffffffffffe, 0x5, 0x8000, 0xa08}, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x4, 'syz1\x00', @bcast, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 165.202417ms ago: executing program 3 (id=6775): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x4000000) 162.736072ms ago: executing program 0 (id=6776): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020506f0722b679a29000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000959b81d4fface77b9125e448d06738e2fdfcdee00ebd051a380d15958af5e9cc73f8fed01a44102a00f6b379fca30b697da16ed97b357ab21925856256880550f9e42d4a64d896fca4c0bd9d184d31e6cd0cdbd8e0996764e25dbc796ffc29bb2a97"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x14, 0x0, 0x4a3, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x6d23, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r2}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r2}, 0x38) (async) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00'}) 153.382244ms ago: executing program 1 (id=6777): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x14, 0x37, 0x109, 0x870bd22, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 0s ago: executing program 3 (id=6778): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@gettaction={0x14, 0x32, 0x1}, 0x14}}, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000100)) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) (async) socketpair(0x29, 0x2, 0x9, &(0x7f0000000140)) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000040)=0x0) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r7, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r8, &(0x7f00000000c0)={0x27, r7, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) (async) close(r6) r9 = accept4(r4, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r9, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r10 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r10, 0x107, 0x11, 0x0, &(0x7f00000002c0)) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) kernel console output (not intermixed with test programs): V WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 780.056737][ C0] lec:lec_tx_timeout: lec0 [ 780.936704][T27484] lo speed is unknown, defaulting to 1000 [ 783.065385][T27484] wg1 speed is unknown, defaulting to 1000 [ 783.253865][T27504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5334'. [ 783.339615][T27504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5334'. [ 783.366840][T27504] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5334'. [ 783.695462][T27519] lo speed is unknown, defaulting to 1000 [ 783.773406][T27527] openvswitch: netlink: Missing key (keys=40, expected=80) [ 783.941516][T27537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5344'. [ 784.140486][T27541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5344'. [ 784.288936][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 784.344325][T27554] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5346'. [ 784.390413][T27519] wg1 speed is unknown, defaulting to 1000 [ 784.394030][T27554] : renamed from vlan0 [ 784.608344][T27562] lo speed is unknown, defaulting to 1000 [ 785.151190][T27562] wg1 speed is unknown, defaulting to 1000 [ 785.225785][T27571] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5352'. [ 785.295817][T27573] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5352'. [ 785.526171][T27580] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5354'. [ 785.548790][T27580] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5354'. [ 785.560656][T27580] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5354'. [ 785.693942][T27581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5354'. [ 785.871354][T27590] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5356'. [ 786.004753][T27594] bridge8: entered promiscuous mode [ 787.033718][T27625] macsec0: entered promiscuous mode [ 787.044128][T27625] macsec0: entered allmulticast mode [ 787.050999][T27625] veth1_macvtap: entered allmulticast mode [ 787.175804][T27636] sit0: entered allmulticast mode [ 787.193636][T27636] sit0: left allmulticast mode [ 787.571888][T27657] syzkaller1: entered promiscuous mode [ 787.596093][T27657] syzkaller1: entered allmulticast mode [ 787.874942][T27673] FAULT_INJECTION: forcing a failure. [ 787.874942][T27673] name failslab, interval 1, probability 0, space 0, times 0 [ 787.909089][T27673] CPU: 0 UID: 0 PID: 27673 Comm: syz.1.5375 Not tainted syzkaller #0 PREEMPT(full) [ 787.909130][T27673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 787.909143][T27673] Call Trace: [ 787.909152][T27673] [ 787.909160][T27673] dump_stack_lvl+0xe8/0x150 [ 787.909196][T27673] should_fail_ex+0x412/0x560 [ 787.909229][T27673] should_failslab+0xa8/0x100 [ 787.909257][T27673] __kmalloc_cache_noprof+0x88/0x660 [ 787.909280][T27673] ? __asan_memset+0x22/0x50 [ 787.909298][T27673] ? alloc_netdev_mqs+0xb97/0x11b0 [ 787.909321][T27673] ? __xdp_rxq_info_reg+0x171/0x280 [ 787.909421][T27673] alloc_netdev_mqs+0xb97/0x11b0 [ 787.909454][T27673] rtnl_create_link+0x31f/0xd70 [ 787.909484][T27673] rtnl_newlink_create+0x277/0xb70 [ 787.909520][T27673] ? __mutex_lock+0x5ac/0x1300 [ 787.909548][T27673] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 787.909582][T27673] ? __pfx___mutex_lock+0x10/0x10 [ 787.909616][T27673] ? ns_capable+0x89/0xe0 [ 787.909647][T27673] rtnl_newlink+0x1666/0x1be0 [ 787.909691][T27673] ? __pfx_rtnl_newlink+0x10/0x10 [ 787.909717][T27673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.909782][T27673] ? kasan_quarantine_put+0xbb/0x1f0 [ 787.909805][T27673] ? lockdep_hardirqs_on+0x7a/0x110 [ 787.909841][T27673] ? kmem_cache_free+0x187/0x630 [ 787.909864][T27673] ? nlmon_xmit+0xb0/0x100 [ 787.909910][T27673] ? __lock_acquire+0x6b5/0x2cf0 [ 787.909944][T27673] ? __local_bh_enable_ip+0xd0/0x130 [ 787.909972][T27673] ? lockdep_hardirqs_on+0x7a/0x110 [ 787.910007][T27673] ? __dev_queue_xmit+0x28d/0x38d0 [ 787.910027][T27673] ? __local_bh_enable_ip+0xd0/0x130 [ 787.910050][T27673] ? __dev_queue_xmit+0x28d/0x38d0 [ 787.910101][T27673] ? __pfx_rtnl_newlink+0x10/0x10 [ 787.910138][T27673] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 787.910168][T27673] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 787.910193][T27673] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 787.910217][T27673] ? ref_tracker_free+0x693/0x840 [ 787.910241][T27673] ? __copy_skb_header+0xa3/0x4a0 [ 787.910264][T27673] ? __pfx_ref_tracker_free+0x10/0x10 [ 787.910301][T27673] netlink_rcv_skb+0x232/0x4b0 [ 787.910332][T27673] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 787.910360][T27673] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 787.910401][T27673] ? netlink_deliver_tap+0x2e/0x1b0 [ 787.910438][T27673] netlink_unicast+0x80f/0x9b0 [ 787.910474][T27673] ? __pfx_netlink_unicast+0x10/0x10 [ 787.910502][T27673] ? netlink_sendmsg+0x650/0xb40 [ 787.910528][T27673] ? skb_put+0x11b/0x210 [ 787.910559][T27673] netlink_sendmsg+0x813/0xb40 [ 787.910598][T27673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 787.910629][T27673] ? aa_sock_msg_perm+0xf1/0x1b0 [ 787.910658][T27673] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 787.910686][T27673] ____sys_sendmsg+0x972/0x9f0 [ 787.910718][T27673] ? __pfx_____sys_sendmsg+0x10/0x10 [ 787.910747][T27673] ? import_iovec+0x73/0xa0 [ 787.910783][T27673] ___sys_sendmsg+0x2a5/0x360 [ 787.910812][T27673] ? __pfx____sys_sendmsg+0x10/0x10 [ 787.910880][T27673] ? __fget_files+0x2a/0x420 [ 787.910909][T27673] ? __fget_files+0x3a0/0x420 [ 787.910952][T27673] __x64_sys_sendmsg+0x1bd/0x2a0 [ 787.910977][T27673] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 787.911011][T27673] ? __pfx_ksys_write+0x10/0x10 [ 787.911049][T27673] do_syscall_64+0x14d/0xf80 [ 787.911069][T27673] ? trace_irq_disable+0x3b/0x150 [ 787.911097][T27673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.911118][T27673] ? clear_bhb_loop+0x40/0x90 [ 787.911155][T27673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.911177][T27673] RIP: 0033:0x7f1d40d9c799 [ 787.911198][T27673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.911216][T27673] RSP: 002b:00007f1d41bc3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.911240][T27673] RAX: ffffffffffffffda RBX: 00007f1d41015fa0 RCX: 00007f1d40d9c799 [ 787.911256][T27673] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 787.911270][T27673] RBP: 00007f1d41bc3090 R08: 0000000000000000 R09: 0000000000000000 [ 787.911283][T27673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 787.911296][T27673] R13: 00007f1d41016038 R14: 00007f1d41015fa0 R15: 00007ffed3faec68 [ 787.911333][T27673] [ 788.760896][T27685] netlink: 'syz.3.5380': attribute type 4 has an invalid length. [ 788.896688][T27685] netlink: 'syz.3.5380': attribute type 4 has an invalid length. [ 789.116696][T27708] __nla_validate_parse: 3 callbacks suppressed [ 789.116718][T27708] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5380'. [ 789.219484][T27700] veth1_macvtap: left allmulticast mode [ 789.324074][T27719] netlink: 'syz.2.5387': attribute type 1 has an invalid length. [ 789.343936][T27719] netlink: 'syz.2.5387': attribute type 1 has an invalid length. [ 789.621101][T27737] FAULT_INJECTION: forcing a failure. [ 789.621101][T27737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.638886][T27737] CPU: 1 UID: 0 PID: 27737 Comm: syz.3.5389 Not tainted syzkaller #0 PREEMPT(full) [ 789.638916][T27737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 789.638930][T27737] Call Trace: [ 789.638938][T27737] [ 789.638947][T27737] dump_stack_lvl+0xe8/0x150 [ 789.638982][T27737] should_fail_ex+0x412/0x560 [ 789.639013][T27737] _copy_to_user+0x31/0xb0 [ 789.639047][T27737] simple_read_from_buffer+0xe1/0x170 [ 789.639082][T27737] proc_fail_nth_read+0x1bb/0x230 [ 789.639116][T27737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.639148][T27737] ? rw_verify_area+0x2a6/0x4d0 [ 789.639171][T27737] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.639201][T27737] vfs_read+0x20c/0xa70 [ 789.639220][T27737] ? fdget_pos+0x246/0x320 [ 789.639255][T27737] ? __pfx___mutex_lock+0x10/0x10 [ 789.639278][T27737] ? __pfx_vfs_read+0x10/0x10 [ 789.639303][T27737] ? __fget_files+0x2a/0x420 [ 789.639336][T27737] ? __fget_files+0x3a0/0x420 [ 789.639364][T27737] ? __fget_files+0x2a/0x420 [ 789.639403][T27737] ksys_read+0x150/0x270 [ 789.639428][T27737] ? __pfx_ksys_read+0x10/0x10 [ 789.639464][T27737] do_syscall_64+0x14d/0xf80 [ 789.639483][T27737] ? trace_irq_disable+0x3b/0x150 [ 789.639512][T27737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.639532][T27737] ? clear_bhb_loop+0x40/0x90 [ 789.639559][T27737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.639581][T27737] RIP: 0033:0x7f594d75cfce [ 789.639601][T27737] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 789.639619][T27737] RSP: 002b:00007f594e5fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 789.639643][T27737] RAX: ffffffffffffffda RBX: 00007f594e5fd6c0 RCX: 00007f594d75cfce [ 789.639658][T27737] RDX: 000000000000000f RSI: 00007f594e5fd0a0 RDI: 0000000000000004 [ 789.639672][T27737] RBP: 00007f594e5fd090 R08: 0000000000000000 R09: 0000000000000000 [ 789.639693][T27737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 789.639706][T27737] R13: 00007f594da16038 R14: 00007f594da15fa0 R15: 00007ffdd5548a88 [ 789.639742][T27737] [ 790.048656][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 790.056727][ C0] lec:lec_tx_timeout: lec0 [ 790.062208][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 790.248963][T27754] netlink: 'syz.0.5392': attribute type 2 has an invalid length. [ 790.322165][T27761] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5395'. [ 790.458685][T27770] sctp: [Deprecated]: syz.1.5396 (pid 27770) Use of struct sctp_assoc_value in delayed_ack socket option. [ 790.458685][T27770] Use struct sctp_sack_info instead [ 790.692832][T27782] lo speed is unknown, defaulting to 1000 [ 790.720792][T27775] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5399'. [ 791.177734][T27804] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5405'. [ 791.322088][T27782] wg1 speed is unknown, defaulting to 1000 [ 791.943611][T27830] netlink: 'syz.3.5412': attribute type 10 has an invalid length. [ 792.017520][T27830] team0: Port device dummy0 added [ 792.238546][T27831] lo speed is unknown, defaulting to 1000 [ 792.511776][T27831] wg1 speed is unknown, defaulting to 1000 [ 792.813501][T27869] netlink: 'syz.2.5419': attribute type 142 has an invalid length. [ 793.222813][T27883] tipc: Enabled bearer , priority 0 [ 793.476515][T27883] tipc: Resetting bearer [ 793.684452][T27897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5424'. [ 793.741744][T27901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5422'. [ 793.778184][ T30] audit: type=1107 audit(1773124722.495:16): pid=27892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 793.994596][T27911] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5425'. [ 794.339095][T27913] syzkaller1: entered promiscuous mode [ 794.344646][T27913] syzkaller1: entered allmulticast mode [ 794.606994][T27933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5429'. [ 794.616801][T27933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5429'. [ 794.633218][T27933] netlink: 'syz.3.5429': attribute type 14 has an invalid length. [ 794.652456][T27933] netlink: 'syz.3.5429': attribute type 11 has an invalid length. [ 794.766437][T27937] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5430'. [ 794.874432][T27939] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5431'. [ 794.885241][T27939] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5431'. [ 794.900967][T27939] netlink: 19 bytes leftover after parsing attributes in process `syz.4.5431'. [ 794.958072][T27939] netlink: 19 bytes leftover after parsing attributes in process `syz.4.5431'. [ 795.088656][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 795.096850][ C0] lec:lec_tx_timeout: lec0 [ 795.230519][T27954] 8021q: VLANs not supported on gre0 [ 795.397093][T27964] bridge_slave_1: entered promiscuous mode [ 795.428174][T27964] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 796.035158][T28007] 8021q: VLANs not supported on caif0 [ 796.366929][T28013] pim6reg: entered allmulticast mode [ 796.422516][T28015] netlink: 'syz.3.5449': attribute type 4 has an invalid length. [ 796.449993][T28018] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5450'. [ 796.464407][T28018] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5450'. [ 796.477498][T28018] netlink: 'syz.4.5450': attribute type 5 has an invalid length. [ 796.499871][T28018] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5450'. [ 796.718400][T12102] lec:lec_start_xmit: lec0:No lecd attached [ 796.751378][T28034] SET target dimension over the limit! [ 797.583301][T28076] lo speed is unknown, defaulting to 1000 [ 797.633062][T28084] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 797.841387][T28109] batman_adv: batadv0: Adding interface: macsec1 [ 797.847801][T28109] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.891927][T28109] batman_adv: batadv0: Interface activated: macsec1 [ 798.355266][T28076] wg1 speed is unknown, defaulting to 1000 [ 798.518393][T28131] syzkaller0: entered promiscuous mode [ 798.534183][T28131] syzkaller0: entered allmulticast mode [ 798.970690][T28142] netlink: 'syz.3.5475': attribute type 1 has an invalid length. [ 799.666283][T28162] __nla_validate_parse: 4 callbacks suppressed [ 799.666312][T28162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5477'. [ 800.171329][T28078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 800.385082][T28169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5479'. [ 800.396488][T28169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5479'. [ 800.541875][T28175] lo speed is unknown, defaulting to 1000 [ 800.943595][T28204] syzkaller1: entered promiscuous mode [ 800.985411][T28204] syzkaller1: entered allmulticast mode [ 801.043249][T28205] lo speed is unknown, defaulting to 1000 [ 801.146253][T28213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5489'. [ 801.455420][T28175] wg1 speed is unknown, defaulting to 1000 [ 801.553575][T28229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5492'. [ 802.048712][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 802.056845][ C0] lec:lec_tx_timeout: lec0 [ 802.064188][T28244] syzkaller0: entered promiscuous mode [ 802.073001][T28244] syzkaller0: entered allmulticast mode [ 802.080469][T28241] tipc: Enabled bearer , priority 0 [ 802.086319][T28237] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 802.134567][T28237] tipc: Resetting bearer [ 802.156882][T28236] tipc: Resetting bearer [ 802.191097][T28236] tipc: Disabling bearer [ 802.273037][T28205] wg1 speed is unknown, defaulting to 1000 [ 802.638441][T28213] siw: device registration error -23 [ 802.814886][T28265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5494'. [ 803.300347][T28287] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5500'. [ 803.332859][T28286] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5500'. [ 803.479651][T28293] netlink: 'syz.3.5502': attribute type 83 has an invalid length. [ 804.104806][T28317] netlink: 'syz.0.5511': attribute type 2 has an invalid length. [ 804.138558][T28317] netlink: 'syz.0.5511': attribute type 1 has an invalid length. [ 804.146559][T28317] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5511'. [ 804.162145][T28319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5512'. [ 804.657873][T28351] netlink: 'syz.0.5523': attribute type 10 has an invalid length. [ 804.825509][T28357] 8021q: VLANs not supported on syzkaller1 [ 804.891930][T28362] __nla_validate_parse: 1 callbacks suppressed [ 804.891953][T28362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5526'. [ 805.109385][T28367] netlink: 'syz.2.5529': attribute type 2 has an invalid length. [ 805.138179][T28367] netlink: 'syz.2.5529': attribute type 2 has an invalid length. [ 805.301184][T10838] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 805.330088][T18978] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 805.588931][T10838] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 805.710011][T28401] lo speed is unknown, defaulting to 1000 [ 805.743911][T28403] Unknown options in mask 6 [ 805.976004][T28401] wg1 speed is unknown, defaulting to 1000 [ 806.369826][T18980] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 806.378013][T18980] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 806.439329][T10838] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 807.424432][T28435] syzkaller0: entered promiscuous mode [ 807.430031][T28435] syzkaller0: entered allmulticast mode [ 807.438292][T28435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5548'. [ 807.988519][T28367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 808.181242][T28448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5553'. [ 808.370823][T28457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5557'. [ 808.375692][T28455] vti0: entered promiscuous mode [ 808.385390][T28455] vti0: entered allmulticast mode [ 808.385652][T28458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5555'. [ 808.402130][T28458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5555'. [ 808.418229][T28459] IPv6: NLM_F_CREATE should be specified when creating new route [ 808.498446][T28464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5556'. [ 808.512761][T28465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5558'. [ 808.630402][T28473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5556'. [ 808.639801][T28473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5556'. [ 808.662928][T28464] 8021q: adding VLAN 0 to HW filter on device bond8 [ 808.677529][T28481] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 808.730021][T28465] caif0: Master is either lo or non-ether device [ 808.739147][T28487] netlink: 'syz.4.5556': attribute type 4 has an invalid length. [ 808.787039][T28473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.797581][T28473] bond8: (slave bond0): making interface the new active one [ 808.807164][T28473] bond8: (slave bond0): Enslaving as an active interface with an up link [ 808.862232][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 808.952419][T28471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 809.082122][T28487] .`: renamed from bond0 (while UP) [ 809.150526][T26856] wg1 speed is unknown, defaulting to 1000 [ 809.156414][T26856] syz0: Port: 1 Link DOWN [ 809.180322][T18978] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.190141][T18978] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.207398][T18978] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 809.230530][T18978] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.245992][T18978] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.269041][T18978] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 809.330117][T26856] wg1 speed is unknown, defaulting to 1000 [ 809.353916][T18978] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.377087][T18978] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.403790][T18978] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 809.420090][T28511] netlink: 'syz.4.5566': attribute type 9 has an invalid length. [ 809.433539][T18978] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.471014][T18978] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.494175][T18978] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 809.575438][T28498] lo speed is unknown, defaulting to 1000 [ 809.583846][T18973] bond8: (slave .`): link status definitely down, disabling slave [ 809.636529][T18973] bond8: now running without any active interface! [ 809.725071][T28531] batman_adv: batadv0: Adding interface: ipvlan2 [ 809.744514][T28531] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.780921][T28531] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 809.885410][T28539] netlink: 'syz.4.5573': attribute type 8 has an invalid length. [ 810.257137][T28545] __nla_validate_parse: 6 callbacks suppressed [ 810.257162][T28545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5576'. [ 810.504026][T28498] wg1 speed is unknown, defaulting to 1000 [ 810.667945][T28581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5583'. [ 810.690071][T28583] team0: Port device dummy0 removed [ 810.696446][T28583] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 810.769342][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 810.792655][T28592] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5586'. [ 810.829803][T28592] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5586'. [ 811.078429][T28606] batman_adv: batadv0: Interface deactivated: macsec1 [ 811.593965][T28632] lo speed is unknown, defaulting to 1000 [ 812.040814][T28659] pim6reg99999999: entered allmulticast mode [ 812.120201][T28632] wg1 speed is unknown, defaulting to 1000 [ 812.289497][T28665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5603'. [ 812.299183][T28663] netlink: 83 bytes leftover after parsing attributes in process `syz.1.5602'. [ 812.308353][T28665] openvswitch: netlink: Missing key (keys=40, expected=80) [ 812.456086][T28667] netlink: 'syz.1.5604': attribute type 1 has an invalid length. [ 812.564060][T28667] 8021q: adding VLAN 0 to HW filter on device bond6 [ 812.575260][T28675] tipc: Enabling of bearer rejected, already enabled [ 812.667719][T28677] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 812.746628][T28682] netlink: 'syz.1.5609': attribute type 11 has an invalid length. [ 813.087083][T28694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5613'. [ 813.119193][T28694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5613'. [ 813.235495][T28705] : option downdelay: invalid value (18446744073709547007) [ 813.243379][T28705] : option downdelay: allowed values 0 - 2147483647 [ 813.255833][T28709] netlink: 210960 bytes leftover after parsing attributes in process `syz.2.5614'. [ 813.260033][T28705]  (unregistering): Released all slaves [ 813.617031][T28721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5619'. [ 813.888467][T28740] xt_NFQUEUE: number of total queues is 0 [ 814.048639][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 814.056738][ C0] lec:lec_tx_timeout: lec0 [ 814.235105][T28754] lo speed is unknown, defaulting to 1000 [ 814.735068][T28786] geneve0: entered promiscuous mode [ 814.740761][T28786] geneve0: entered allmulticast mode [ 814.871742][T28754] wg1 speed is unknown, defaulting to 1000 [ 814.972153][T28798] batadv_slave_0: entered promiscuous mode [ 815.789138][T28797] batadv_slave_0: left promiscuous mode [ 815.832813][T28835] sctp: [Deprecated]: syz.0.5652 (pid 28835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 815.832813][T28835] Use struct sctp_sack_info instead [ 816.049286][T28841] __nla_validate_parse: 2 callbacks suppressed [ 816.049308][T28841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5654'. [ 816.078874][T28841] netlink: 'syz.2.5654': attribute type 26 has an invalid length. [ 817.392358][T28891] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 817.416820][T28891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 817.466077][T28891] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 817.482604][T28893] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 817.498983][T28893] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 817.897653][T28915] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5676'. [ 817.991299][T28920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5678'. [ 818.010235][T28920] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 818.153611][T28924] netlink: 'syz.2.5679': attribute type 7 has an invalid length. [ 818.356106][T28939] netlink: 'syz.3.5684': attribute type 9 has an invalid length. [ 818.375561][T28941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5685'. [ 818.389870][T28939] netlink: 'syz.3.5684': attribute type 11 has an invalid length. [ 818.418995][T28939] netlink: 'syz.3.5684': attribute type 12 has an invalid length. [ 818.426884][T28939] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.5684'. [ 818.499091][T28939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5684'. [ 818.558165][T28949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5686'. [ 818.561852][T28947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5687'. [ 818.583140][T28949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5686'. [ 818.624257][T28948] tipc: Resetting bearer [ 818.719910][T28955] xt_CT: You must specify a L4 protocol and not use inversions on it [ 818.739226][T18975] smc: removing ib device syz1 [ 818.767731][T28948] tipc: Disabling bearer [ 818.874170][T28959] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5687'. [ 820.007378][T28985] netlink: 'syz.1.5694': attribute type 29 has an invalid length. [ 821.148244][T29022] syzkaller0: entered promiscuous mode [ 821.167780][T29022] syzkaller0: entered allmulticast mode [ 821.473068][T29027] netlink: 'syz.1.5705': attribute type 21 has an invalid length. [ 821.507979][T29027] __nla_validate_parse: 1 callbacks suppressed [ 821.508002][T29027] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5705'. [ 822.495452][T29070] x_tables: duplicate underflow at hook 3 [ 822.534272][T29070] x_tables: duplicate underflow at hook 3 [ 822.729819][T29089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5718'. [ 822.833641][T29097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5718'. [ 822.875800][T29103] gretap3: entered promiscuous mode [ 823.176521][T29121] x_tables: duplicate underflow at hook 1 [ 823.710672][T29151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5733'. [ 823.816247][T29157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5734'. [ 823.825662][T29157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5734'. [ 823.834819][T29157] netlink: 'syz.4.5734': attribute type 14 has an invalid length. [ 823.842768][T29157] netlink: 'syz.4.5734': attribute type 11 has an invalid length. [ 824.527706][T29161] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5736'. [ 824.537978][T29161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5736'. [ 824.997443][T29164] netlink: 'syz.1.5737': attribute type 16 has an invalid length. [ 825.005580][T29164] netlink: 'syz.1.5737': attribute type 17 has an invalid length. [ 825.062104][T29164] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5737'. [ 825.108510][T29168] netlink: 'syz.1.5738': attribute type 7 has an invalid length. [ 825.122913][T29168] netlink: 'syz.1.5738': attribute type 7 has an invalid length. [ 825.122920][T18979] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.139524][T18979] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.147773][T18979] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.156784][T18979] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.197127][T29170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5739'. [ 825.759011][T29095] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 825.809148][T29182] netlink: 'syz.1.5743': attribute type 1 has an invalid length. [ 826.193103][T29206] lo speed is unknown, defaulting to 1000 [ 826.210817][T29206] wg1 speed is unknown, defaulting to 1000 [ 826.386973][T29215] bond0: (slave sit0): Error: Device type is different from other slaves [ 826.657278][T29224] __nla_validate_parse: 2 callbacks suppressed [ 826.657301][T29224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5756'. [ 826.742861][T29227] netlink: 21 bytes leftover after parsing attributes in process `syz.3.5757'. [ 826.743626][T29228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5758'. [ 826.764713][T29227] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5757'. [ 826.778496][T29228] n: the hash_elasticity option has been deprecated and is always 16 [ 826.787464][T29228] n: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 827.036302][T29244] netlink: 'syz.0.5762': attribute type 11 has an invalid length. [ 827.068399][T29244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5762'. [ 827.126219][T29247] netlink: 'syz.0.5762': attribute type 10 has an invalid length. [ 827.146770][T29250] netlink: 41 bytes leftover after parsing attributes in process `syz.2.5763'. [ 827.147661][T29244] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 827.156331][T29250] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5763'. [ 827.231724][T29250] netlink: 41 bytes leftover after parsing attributes in process `syz.2.5763'. [ 827.244443][T29247] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.255794][T29247] team0: entered promiscuous mode [ 827.266183][T29247] bond0: (slave team0): Enslaving as an active interface with a down link [ 827.268254][T29255] netlink: 'syz.1.5765': attribute type 4 has an invalid length. [ 827.322754][T29252] netlink: 'syz.1.5765': attribute type 4 has an invalid length. [ 827.365719][T29252] xt_TCPMSS: Only works on TCP SYN packets [ 827.425244][T29254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5764'. [ 827.462436][T29254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5764'. [ 827.602795][T29262] netlink: 'syz.1.5768': attribute type 1 has an invalid length. [ 827.924978][T29281] netlink: 'syz.3.5772': attribute type 1 has an invalid length. [ 828.300967][T29301] netlink: 'syz.4.5782': attribute type 10 has an invalid length. [ 828.327102][T29301] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 828.348490][T29305] tipc: Enabled bearer , priority 0 [ 828.375901][T29308] netlink: 'syz.1.5784': attribute type 1 has an invalid length. [ 828.391565][T29305] tipc: Disabling bearer [ 828.406936][T29310] --map-set only usable from mangle table [ 828.588411][T29322] netlink: 'syz.2.5787': attribute type 1 has an invalid length. [ 828.632999][T29322] bond4: entered promiscuous mode [ 828.640017][T29322] 8021q: adding VLAN 0 to HW filter on device bond4 [ 828.710496][T29322] bond4: (slave bridge10): making interface the new active one [ 828.718129][T29322] bridge10: entered promiscuous mode [ 828.727140][T29322] bond4: (slave bridge10): Enslaving as an active interface with an up link [ 829.355808][T29372] netlink: 'syz.1.5802': attribute type 1 has an invalid length. [ 829.492050][T29020] Bluetooth: hci1: command 0x0406 tx timeout [ 829.662490][T29391] tipc: Enabling of bearer rejected, already enabled [ 829.996997][T29411] ip6gre2: entered promiscuous mode [ 830.006191][T29411] ip6gre2: entered allmulticast mode [ 830.566702][T29439] lo speed is unknown, defaulting to 1000 [ 830.591780][T29439] wg1 speed is unknown, defaulting to 1000 [ 831.312626][T29482] xt_TCPMSS: Only works on TCP SYN packets [ 831.946874][T29518] __nla_validate_parse: 30 callbacks suppressed [ 831.946901][T29518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5841'. [ 831.976420][T29523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5842'. [ 832.030333][T29523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5842'. [ 832.169472][T29530] netlink: 41 bytes leftover after parsing attributes in process `syz.4.5844'. [ 832.199990][T29530] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5844'. [ 832.212718][T29530] netlink: 41 bytes leftover after parsing attributes in process `syz.4.5844'. [ 832.425231][T29542] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5846'. [ 832.716502][T29550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5848'. [ 832.729169][T29551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5848'. [ 833.159077][T29568] validate_nla: 7 callbacks suppressed [ 833.159102][T29568] netlink: 'syz.2.5853': attribute type 1 has an invalid length. [ 833.227268][T29581] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 833.245141][T29586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5856'. [ 833.276402][T29568] IPv6: Can't replace route, no match found [ 833.334025][T29568] IPv6: Can't replace route, no match found [ 833.623543][T29603] lo speed is unknown, defaulting to 1000 [ 833.640751][T29603] wg1 speed is unknown, defaulting to 1000 [ 833.769082][T29611] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 834.363585][T29642] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 834.374456][T29641] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 834.386959][T29643] netlink: 'syz.3.5874': attribute type 1 has an invalid length. [ 834.426982][T29643] 8021q: adding VLAN 0 to HW filter on device bond8 [ 834.910953][T29020] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 834.931168][T29020] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 834.941760][T29020] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 834.951704][T29020] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 834.959922][T29020] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 834.998992][T29652] lo speed is unknown, defaulting to 1000 [ 835.020111][T29652] wg1 speed is unknown, defaulting to 1000 [ 835.042282][T29658] lo speed is unknown, defaulting to 1000 [ 835.176423][T29665] netlink: 'syz.2.5880': attribute type 1 has an invalid length. [ 835.500340][T29658] wg1 speed is unknown, defaulting to 1000 [ 837.001950][T18973] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.017314][T29020] Bluetooth: hci4: command tx timeout [ 837.169511][T29717] __nla_validate_parse: 14 callbacks suppressed [ 837.169535][T29717] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5891'. [ 837.272120][T18973] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.319745][T29658] chnl_net:caif_netlink_parms(): no params data found [ 837.485801][T18973] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.628327][T18973] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.643910][T29742] syzkaller0: entered promiscuous mode [ 837.652270][T29742] syzkaller0: entered allmulticast mode [ 837.671411][T29752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5901'. [ 837.776795][T29756] netlink: 'syz.2.5902': attribute type 10 has an invalid length. [ 837.788935][T29756] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 837.801812][T29739] lo speed is unknown, defaulting to 1000 [ 837.827405][T29658] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.837497][T29658] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.845088][T29658] bridge_slave_0: entered allmulticast mode [ 837.853366][T29658] bridge_slave_0: entered promiscuous mode [ 837.862608][T29739] wg1 speed is unknown, defaulting to 1000 [ 837.887016][T29658] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.998801][T29658] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.006149][T29658] bridge_slave_1: entered allmulticast mode [ 838.014986][T29658] bridge_slave_1: entered promiscuous mode [ 838.072227][T29758] netlink: 'syz.1.5903': attribute type 13 has an invalid length. [ 838.082208][T29758] netlink: 'syz.1.5903': attribute type 12 has an invalid length. [ 838.226311][T29658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.304631][T29772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.341467][T29658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.390962][T18973] bridge_slave_1: left allmulticast mode [ 838.396865][T18973] bridge_slave_1: left promiscuous mode [ 838.405978][T18973] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.416616][T18973] bridge_slave_0: left allmulticast mode [ 838.422493][T18973] bridge_slave_0: left promiscuous mode [ 838.428320][T18973] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.446654][T18973] pimreg3: left allmulticast mode [ 838.926188][T18973] bond8 (unregistering): (slave .`): Releasing active interface [ 838.939497][T18973] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.950813][T18973] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.960906][T18973] .` (unregistering): Released all slaves [ 838.970970][T18973] bond1 (unregistering): Released all slaves [ 838.984949][T18973] bond2 (unregistering): Released all slaves [ 839.000217][T18973] bond3 (unregistering): Released all slaves [ 839.017479][T18973] bond4 (unregistering): Released all slaves [ 839.034606][T18973] bond5 (unregistering): Released all slaves [ 839.063658][T18973] bond6 (unregistering): Released all slaves [ 839.090579][T29020] Bluetooth: hci4: command tx timeout [ 839.091292][T18973] bond7 (unregistering): Released all slaves [ 839.123334][T18973] bond8 (unregistering): Released all slaves [ 839.136817][T18973] bond0 (unregistering): Released all slaves [ 839.236982][T29774] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.316302][T29658] team0: Port device team_slave_0 added [ 839.353609][T29658] team0: Port device team_slave_1 added [ 839.582326][T29778] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000 [ 839.591312][T18973] tipc: Left network mode [ 839.659897][T29774] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.726707][T29658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.759799][T29658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.790836][T29658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.803116][T29780] mac80211_hwsim hwsim50 wlan1: entered allmulticast mode [ 839.865382][T29780] bridge_slave_0: left allmulticast mode [ 839.872202][T29781] netlink: 'syz.2.5909': attribute type 10 has an invalid length. [ 839.881299][T29780] bridge_slave_0: left promiscuous mode [ 839.887032][T29780] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.927775][T29780] bridge_slave_1: left allmulticast mode [ 839.938722][T29780] bridge_slave_1: left promiscuous mode [ 839.944924][T29780] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.973675][T29780] .`: (slave bond_slave_0): Releasing backup interface [ 839.986932][T29780] .`: (slave bond_slave_1): Releasing backup interface [ 840.007725][T29780] team0: Port device C removed [ 840.021904][T29780] team0: Port device team_slave_1 removed [ 840.031956][T29780] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 840.053418][T29658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.062501][T29658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.089772][T29658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.103335][T29774] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.145691][T29781] mac80211_hwsim hwsim50 wlan1: left allmulticast mode [ 840.153409][T29781] .`: (slave wlan1): refused to change device type [ 840.280367][T29774] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.330882][T29796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5911'. [ 840.431825][T29658] hsr_slave_0: entered promiscuous mode [ 840.450157][T29658] hsr_slave_1: entered promiscuous mode [ 840.456752][T29658] debugfs: 'hsr0' already exists in 'hsr' [ 840.467163][T29658] Cannot create hsr debugfs directory [ 840.674414][T18978] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.801666][T29811] netdevsim netdevsim0: Direct firmware load for & failed with error -2 [ 840.811620][T29811] netdevsim netdevsim0: Falling back to sysfs fallback for: & [ 840.828200][T18978] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.890688][T18978] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 840.918977][T29813] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5914'. [ 840.997759][T18978] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 841.171610][T29020] Bluetooth: hci4: command tx timeout [ 841.556178][T29843] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5919'. [ 841.819224][T18973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.838038][T18973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.990494][T18973] pim6reg99999999 (unregistering): left allmulticast mode [ 842.133910][T29865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5925'. [ 842.293633][T18973] team0 (unregistering): Port device team_slave_1 removed [ 842.319307][T29870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5925'. [ 842.379716][T29871] netlink: 'syz.0.5925': attribute type 25 has an invalid length. [ 842.388229][T29871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5925'. [ 842.449602][T29863] pim6reg1: entered promiscuous mode [ 842.454990][T29863] pim6reg1: entered allmulticast mode [ 842.480564][T29871] netlink: 'syz.0.5925': attribute type 25 has an invalid length. [ 842.488967][T29871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5925'. [ 842.537750][T18980] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.547145][T18980] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.565798][T18980] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.577722][T18980] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.887961][T18973] IPVS: stop unused estimator thread 0... [ 843.165253][T29904] netlink: 'syz.0.5933': attribute type 12 has an invalid length. [ 843.248840][T29020] Bluetooth: hci4: command tx timeout [ 844.056661][T29824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 844.080661][T29658] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 844.136257][T29658] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 844.192575][T29658] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 844.325984][T29950] netlink: 'syz.0.5937': attribute type 13 has an invalid length. [ 844.343608][T29947] bond5: option resend_igmp: invalid value (2878) [ 844.350791][T29947] bond5: option resend_igmp: allowed values 0 - 255 [ 844.359344][T29947] bond5 (unregistering): Released all slaves [ 844.402761][T29658] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 844.414701][T29950] netlink: 'syz.0.5937': attribute type 13 has an invalid length. [ 844.682715][T29658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.706251][T29658] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.821509][T18975] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.828790][T18975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.881102][T18978] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.888335][T18978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.937516][T29983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5944'. [ 845.142717][T29983] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5944'. [ 845.289608][T29988] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5946'. [ 845.346850][T29988] syzkaller0: entered promiscuous mode [ 845.374615][T29988] syzkaller0: entered allmulticast mode [ 845.675096][T29658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.204476][T29658] veth0_vlan: entered promiscuous mode [ 846.224805][T30025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5956'. [ 846.236806][T29658] veth1_vlan: entered promiscuous mode [ 846.308160][T29658] veth0_macvtap: entered promiscuous mode [ 846.331988][T30034] netlink: zone id is out of range [ 846.344819][T30034] netlink: zone id is out of range [ 846.344892][T29658] veth1_macvtap: entered promiscuous mode [ 846.358162][T30034] netlink: zone id is out of range [ 846.380623][T30034] netlink: zone id is out of range [ 846.385826][T30034] netlink: zone id is out of range [ 846.400731][T30034] netlink: zone id is out of range [ 846.401472][T29658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 846.405891][T30034] netlink: zone id is out of range [ 846.405905][T30034] netlink: zone id is out of range [ 846.405915][T30034] netlink: zone id is out of range [ 846.405925][T30034] netlink: zone id is out of range [ 846.460793][T29658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 846.501342][T18978] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.511531][T18978] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.526189][T18978] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.536138][T18978] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.641772][T30046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5962'. [ 846.676247][T18978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.692297][T18978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.741590][T18978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.751082][T18978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.843613][T30053] netlink: 'syz.0.5965': attribute type 1 has an invalid length. [ 846.883100][T30053] 8021q: adding VLAN 0 to HW filter on device bond11 [ 846.905276][T30053] bond11: (slave geneve2): making interface the new active one [ 846.914617][T30053] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 846.927399][T18973] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.976459][T18973] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.023499][T18973] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.061761][T18973] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.201499][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 847.233257][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 847.252020][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 847.290928][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 847.299849][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 847.444528][T30071] lo speed is unknown, defaulting to 1000 [ 847.469591][T30071] wg1 speed is unknown, defaulting to 1000 [ 847.698535][T30090] lo speed is unknown, defaulting to 1000 [ 847.774374][T30102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5978'. [ 847.851925][T30103] bond0: Caught tx_queue_len zero misconfig [ 848.061158][T30090] wg1 speed is unknown, defaulting to 1000 [ 848.218042][T30119] lo speed is unknown, defaulting to 1000 [ 848.426107][T30111] lo speed is unknown, defaulting to 1000 [ 848.516921][T30119] wg1 speed is unknown, defaulting to 1000 [ 848.618316][T30071] chnl_net:caif_netlink_parms(): no params data found [ 848.781397][T30127] lo speed is unknown, defaulting to 1000 [ 848.903334][T30111] wg1 speed is unknown, defaulting to 1000 [ 848.904309][T30071] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.917350][T30071] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.925741][T30071] bridge_slave_0: entered allmulticast mode [ 848.935598][T30071] bridge_slave_0: entered promiscuous mode [ 848.963353][T30071] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.970992][T30071] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.978725][T30071] bridge_slave_1: entered allmulticast mode [ 848.997186][T30071] bridge_slave_1: entered promiscuous mode [ 849.137195][T30071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.158153][T30071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.204660][T30150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5989'. [ 849.217923][T30071] team0: Port device team_slave_0 added [ 849.227994][T30071] team0: Port device team_slave_1 added [ 849.300323][T30071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.307419][T30071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.334714][ T5832] Bluetooth: hci3: command tx timeout [ 849.343371][T30071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.357405][T30071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.364967][T30071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.391380][T30071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.402914][T30127] wg1 speed is unknown, defaulting to 1000 [ 849.706440][T30071] hsr_slave_0: entered promiscuous mode [ 849.723160][T30071] hsr_slave_1: entered promiscuous mode [ 849.743431][T30071] debugfs: 'hsr0' already exists in 'hsr' [ 849.749538][T30071] Cannot create hsr debugfs directory [ 850.176069][T30172] netlink: 'syz.0.5992': attribute type 10 has an invalid length. [ 850.247905][T30071] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 850.402700][T30071] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 850.596350][T30071] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 850.769258][T30178] lo speed is unknown, defaulting to 1000 [ 850.776717][T30071] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 850.814245][T30178] wg1 speed is unknown, defaulting to 1000 [ 851.072413][T30071] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 851.105260][T30071] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 851.114075][T30192] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5999'. [ 851.149568][T30071] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 851.186589][T30192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5999'. [ 851.195922][T30192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5999'. [ 851.206260][T30192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5999'. [ 851.215546][T30192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5999'. [ 851.292418][T30071] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 851.425175][ T5832] Bluetooth: hci3: command tx timeout [ 851.547289][T30071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.597492][T30071] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.614617][T18975] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.621918][T18975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.664543][T18978] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.671837][T18978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.841341][T30222] netlink: 'syz.2.6005': attribute type 1 has an invalid length. [ 852.127585][T30222] bond5: entered promiscuous mode [ 852.133281][T30222] 8021q: adding VLAN 0 to HW filter on device bond5 [ 852.169740][T30225] bond5: (slave bridge11): making interface the new active one [ 852.177453][T30225] bridge11: entered promiscuous mode [ 852.184840][T30225] bond5: (slave bridge11): Enslaving as an active interface with an up link [ 852.923372][T30071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.000469][T30071] veth0_vlan: entered promiscuous mode [ 853.017225][T30071] veth1_vlan: entered promiscuous mode [ 853.127864][T30071] veth0_macvtap: entered promiscuous mode [ 853.162280][T30071] veth1_macvtap: entered promiscuous mode [ 853.209691][T30071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.243061][T30071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.312178][T18975] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.340210][T30263] netlink: 'syz.4.6016': attribute type 21 has an invalid length. [ 853.348439][T30263] IPv6: NLM_F_CREATE should be specified when creating new route [ 853.348929][T18975] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.366193][T30263] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 853.373530][T30263] IPv6: NLM_F_CREATE should be set when creating new route [ 853.380866][T30263] IPv6: NLM_F_CREATE should be set when creating new route [ 853.388109][T30263] IPv6: NLM_F_CREATE should be set when creating new route [ 853.409458][T18975] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.421065][T18975] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.489474][ T5832] Bluetooth: hci3: command tx timeout [ 853.516396][T30266] netlink: 'syz.0.6014': attribute type 4 has an invalid length. [ 853.569112][T18989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.601435][T18989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.671757][T30271] tipc: Started in network mode [ 853.676702][T30271] tipc: Node identity da8cffc56c3d, cluster identity 4711 [ 853.688357][T30271] tipc: Enabled bearer , priority 0 [ 853.712790][T18973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.739331][T18973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.117280][T30269] tipc: Disabling bearer [ 854.292385][T30309] tipc: Enabled bearer , priority 0 [ 854.313847][T30309] syzkaller0: entered promiscuous mode [ 854.329866][T30309] syzkaller0: entered allmulticast mode [ 854.445723][T30318] tipc: Resetting bearer [ 854.774340][T30327] hsr0: entered promiscuous mode [ 854.965593][T30334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6027'. [ 855.093448][T30309] tipc: Resetting bearer [ 855.161387][T30309] tipc: Disabling bearer [ 855.472916][T30353] lo speed is unknown, defaulting to 1000 [ 855.507256][T30353] wg1 speed is unknown, defaulting to 1000 [ 855.569471][ T5832] Bluetooth: hci3: command tx timeout [ 855.645438][T30362] lo speed is unknown, defaulting to 1000 [ 855.737201][T30370] xt_CT: You must specify a L4 protocol and not use inversions on it [ 855.754098][T30372] netlink: 312 bytes leftover after parsing attributes in process `syz.3.6037'. [ 855.770549][T30370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6031'. [ 855.813997][T30362] wg1 speed is unknown, defaulting to 1000 [ 856.158339][T30390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6038'. [ 856.250035][T30390] ip6tnl3: entered allmulticast mode [ 856.341996][T30398] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20000 [ 856.607651][T30402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6044'. [ 856.634086][T30402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6044'. [ 856.731646][T30409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6045'. [ 857.001255][T30414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6047'. [ 857.039955][T30414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6047'. [ 857.062238][T30414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6047'. [ 857.408151][T30437] veth0: entered promiscuous mode [ 857.426343][T30434] veth0: left promiscuous mode [ 857.582073][T30441] netlink: 'syz.3.6059': attribute type 1 has an invalid length. [ 857.971854][T29020] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 857.992448][T29020] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 858.001390][T29020] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 858.022241][T29020] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 858.033813][T29020] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 858.096994][T30458] lo speed is unknown, defaulting to 1000 [ 858.105623][T30458] wg1 speed is unknown, defaulting to 1000 [ 858.225323][T30468] netlink: 'syz.4.6065': attribute type 142 has an invalid length. [ 858.339830][T30468] netlink: 'syz.4.6065': attribute type 142 has an invalid length. [ 858.503173][T30476] batadv_slave_1: Caught tx_queue_len zero misconfig [ 858.620902][T18970] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.651332][T18970] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.742020][T30490] netlink: 'syz.1.6073': attribute type 4 has an invalid length. [ 858.750991][T30490] netlink: 'syz.1.6073': attribute type 16 has an invalid length. [ 858.764855][T30490] netlink: 'syz.1.6073': attribute type 17 has an invalid length. [ 858.778035][T30482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 858.785345][T30482] IPv6: NLM_F_CREATE should be set when creating new route [ 858.792695][T30482] IPv6: NLM_F_CREATE should be set when creating new route [ 858.839488][T18970] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.851465][T18970] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.064066][T18970] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.103343][T18970] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.346993][T18970] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.362677][T18970] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.446475][T30517] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.515418][T30513] lo speed is unknown, defaulting to 1000 [ 859.542302][T30518] lo speed is unknown, defaulting to 1000 [ 859.548186][T30513] wg1 speed is unknown, defaulting to 1000 [ 859.870206][T30517] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.073556][T12102] lec:lec_start_xmit: lec0:No lecd attached [ 860.099153][T30517] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.128886][ T5832] Bluetooth: hci5: command tx timeout [ 860.184930][T30458] chnl_net:caif_netlink_parms(): no params data found [ 860.193385][T30547] net_ratelimit: 5 callbacks suppressed [ 860.193406][T30547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 860.271951][T30518] wg1 speed is unknown, defaulting to 1000 [ 860.300709][T30517] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.710096][T30458] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.717291][T30458] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.747397][T30458] bridge_slave_0: entered allmulticast mode [ 860.756606][T30458] bridge_slave_0: entered promiscuous mode [ 860.783097][T18973] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.827263][T18970] pimreg: left allmulticast mode [ 861.164956][T18970] bond11 (unregistering): (slave geneve2): Releasing active interface [ 861.244231][T18970] team0: Port device bridge1 removed [ 861.582364][T18970] bond0 (unregistering): left promiscuous mode [ 861.588990][T18970] mac80211_hwsim hwsim46 wlan1: left promiscuous mode [ 861.596043][T18970] bridge_slave_1: left promiscuous mode [ 861.602245][T18970] team0: left promiscuous mode [ 861.613213][T18970] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 861.624156][T18970] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 861.635259][T18970] bond0 (unregistering): (slave team0): Releasing backup interface [ 861.646488][T18970] bond0 (unregistering): Released all slaves [ 861.662103][T18970] bond1 (unregistering): Released all slaves [ 861.683527][T18970] bond2 (unregistering): Released all slaves [ 861.696683][T18970] bond3 (unregistering): Released all slaves [ 861.718709][T18970] bond4 (unregistering): Released all slaves [ 861.732135][T18970] bond5 (unregistering): Released all slaves [ 861.746045][T18970] bond6 (unregistering): Released all slaves [ 861.759573][T18970] bond7 (unregistering): Released all slaves [ 861.783881][T18970] bond8 (unregistering): (slave macvlan4): Releasing backup interface [ 861.793591][T18970] bond8 (unregistering): Released all slaves [ 861.806918][T18970] bond9 (unregistering): Released all slaves [ 861.820748][T18970] bond10 (unregistering): Released all slaves [ 861.834730][T18970] bond11 (unregistering): Released all slaves [ 861.913354][T30458] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.932024][T30458] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.958735][T30458] bridge_slave_1: entered allmulticast mode [ 861.983845][T30458] bridge_slave_1: entered promiscuous mode [ 862.152986][T30567] syzkaller0: entered promiscuous mode [ 862.158735][T30567] syzkaller0: entered allmulticast mode [ 862.208894][ T5832] Bluetooth: hci5: command tx timeout [ 863.929325][T18970] : left promiscuous mode [ 863.962848][T18980] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.042975][T30458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.051614][T30578] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 864.107417][T18970] tipc: Left network mode [ 864.117830][T30458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.197040][T18989] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.206867][T18989] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.265651][T30588] netlink: 'syz.4.6098': attribute type 1 has an invalid length. [ 864.282734][T30588] __nla_validate_parse: 5 callbacks suppressed [ 864.282756][T30588] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6098'. [ 864.288856][ T5832] Bluetooth: hci5: command tx timeout [ 864.290348][T30588] netlink: 'syz.4.6098': attribute type 1 has an invalid length. [ 864.316771][T30458] team0: Port device team_slave_0 added [ 864.324861][T30588] netlink: 'syz.4.6098': attribute type 8 has an invalid length. [ 864.332965][T30588] netlink: 606 bytes leftover after parsing attributes in process `syz.4.6098'. [ 864.341837][T30586] vlan0: entered promiscuous mode [ 864.373493][T30458] team0: Port device team_slave_1 added [ 864.432441][T30588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 864.672111][T30458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.698270][T30458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.745418][T30458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.855499][T30458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.878923][T30458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 864.950158][T30458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.088701][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 865.096809][ C0] lec:lec_tx_timeout: lec0 [ 865.362904][T30626] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 865.381051][T30458] hsr_slave_0: entered promiscuous mode [ 865.400204][T30458] hsr_slave_1: entered promiscuous mode [ 865.406790][T30458] debugfs: 'hsr0' already exists in 'hsr' [ 865.431526][T30458] Cannot create hsr debugfs directory [ 865.511283][T30631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6105'. [ 865.781919][T30642] : renamed from bond_slave_0 (while UP) [ 865.835469][T30646] netlink: 'syz.3.6109': attribute type 2 has an invalid length. [ 865.858829][T30646] netlink: 'syz.3.6109': attribute type 2 has an invalid length. [ 865.933302][T18980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.959393][T18980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.137351][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 866.374432][ T5832] Bluetooth: hci5: command tx timeout [ 866.380016][ T30] audit: type=1800 audit(1773124795.095:17): pid=30638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6106" name="memory.events" dev="tmpfs" ino=3060 res=0 errno=0 [ 866.484447][T30666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6114'. [ 866.493685][T18970] hsr_slave_0: left promiscuous mode [ 866.509611][T18970] hsr_slave_1: left promiscuous mode [ 866.542105][T18970] pim6reg (unregistering): left allmulticast mode [ 866.981077][T30686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6118'. [ 867.253149][T30686] 8021q: VLANs not supported on vxcan1 [ 867.580160][T30693] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 867.605315][T30694] wg1 speed is unknown, defaulting to 1000 [ 867.625487][T30703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6123'. [ 867.702475][T30703] nbd: must specify a device to reconfigure [ 868.252914][T18970] IPVS: stop unused estimator thread 0... [ 868.626570][T30734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6128'. [ 868.784428][T30458] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 868.820510][T30458] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 868.844324][T30741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6130'. [ 868.913762][T30458] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 868.965307][T30458] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 869.040170][T30741] team_slave_0: entered promiscuous mode [ 869.046302][T30741] team_slave_1: entered promiscuous mode [ 869.092925][T30741] macvlan2: entered allmulticast mode [ 869.098382][T30741] team0: entered allmulticast mode [ 869.134967][T30741] team_slave_0: entered allmulticast mode [ 869.175935][T30741] team_slave_1: entered allmulticast mode [ 869.209728][T30741] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 869.229553][T30741] team0: left allmulticast mode [ 869.234495][T30741] team_slave_0: left allmulticast mode [ 869.275367][T30741] team_slave_1: left allmulticast mode [ 869.298701][T30741] team_slave_0: left promiscuous mode [ 869.304158][T30741] team_slave_1: left promiscuous mode [ 869.588177][T30458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.662657][T30767] netlink: 'syz.3.6133': attribute type 3 has an invalid length. [ 869.673625][T30458] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.699595][T30767] netlink: 'syz.3.6133': attribute type 1 has an invalid length. [ 869.722975][T30767] netlink: 212 bytes leftover after parsing attributes in process `syz.3.6133'. [ 869.737508][T18978] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.744744][T18978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.769166][T30767] NCSI netlink: No device for ifindex 813332851 [ 869.802193][T18978] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.809476][T18978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.874116][T30773] gretap1: entered promiscuous mode [ 869.894690][T30773] batman_adv: batadv0: Adding interface: gretap1 [ 869.921118][T30773] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 869.954005][T30773] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 870.085382][T30763] wg1 speed is unknown, defaulting to 1000 [ 870.304272][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 870.672232][T30809] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6140'. [ 870.992392][T30458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.232557][T30458] veth0_vlan: entered promiscuous mode [ 871.362315][T30458] veth1_vlan: entered promiscuous mode [ 871.430975][T30836] wg1 speed is unknown, defaulting to 1000 [ 871.552512][T30837] syzkaller0: entered promiscuous mode [ 871.565422][T30837] syzkaller0: entered allmulticast mode [ 871.949104][T30851] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6149'. [ 873.938964][T30458] veth0_macvtap: entered promiscuous mode [ 873.954527][T30458] veth1_macvtap: entered promiscuous mode [ 874.093000][T30458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 874.139316][T30458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.153653][T18973] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.192424][T18973] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.260028][T18973] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.289727][T18973] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.499835][T30882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6154'. [ 874.517233][T18973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.549000][T18973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.649825][T18980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.657709][T18980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.838358][T30897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6057'. [ 874.991410][T30901] Cannot find add_set index 0 as target [ 875.102062][T30906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.164191][T30906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.175891][T30907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6160'. [ 875.238278][T29020] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 875.279980][T29020] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 875.344994][T29020] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 875.358420][T29020] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 875.378953][T29020] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 875.503522][T30908] wg1 speed is unknown, defaulting to 1000 [ 876.061601][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 876.069700][ C0] lec:lec_tx_timeout: lec0 [ 876.155184][T30924] @: option downdelay: invalid value (18446744073709547007) [ 876.178911][T30924] @: option downdelay: allowed values 0 - 2147483647 [ 876.250263][T30924] @ (unregistering): Released all slaves [ 876.657886][T30930] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 876.801003][T30939] netlink: 'syz.1.6167': attribute type 13 has an invalid length. [ 876.957556][T30942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6168'. [ 877.004871][T30942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6168'. [ 877.295198][T30952] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6172'. [ 877.423561][T30959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6173'. [ 877.492408][T30953] syzkaller0: entered promiscuous mode [ 877.505697][T30953] syzkaller0: entered allmulticast mode [ 877.565846][T30908] chnl_net:caif_netlink_parms(): no params data found [ 877.706510][T30973] netlink: 'syz.2.6178': attribute type 11 has an invalid length. [ 877.737310][T30973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6178'. [ 878.011397][T18989] dvmrp0: left allmulticast mode [ 878.255481][T18989] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 878.548339][T18989] bond2 (unregistering): (slave bridge2): Releasing active interface [ 878.903908][T18989] bond1 (unregistering): (slave veth5): Releasing active interface [ 878.912803][T18989] bond1 (unregistering): Released all slaves [ 878.926973][T18989] bond2 (unregistering): Released all slaves [ 878.942408][T18989] bond0 (unregistering): Released all slaves [ 878.962318][T18989] bond3 (unregistering): (slave bond4): Releasing backup interface [ 878.971436][T18989] bond3 (unregistering): Released all slaves [ 878.985824][T18989] bond4 (unregistering): Released all slaves [ 879.001928][T18989] bond5 (unregistering): Released all slaves [ 879.021464][T18989] bond6 (unregistering): Released all slaves [ 879.035358][T18989] bond7 (unregistering): Released all slaves [ 879.049304][T18989] bond8 (unregistering): Released all slaves [ 879.063249][T30973] bond0: left promiscuous mode [ 879.068143][T30973] bridge7: left promiscuous mode [ 879.221639][T18989] 9: left promiscuous mode [ 879.245279][T31009] netlink: 'syz.2.6182': attribute type 4 has an invalid length. [ 879.309589][T30908] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.316891][T30908] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.324491][T30908] bridge_slave_0: entered allmulticast mode [ 879.340402][T30908] bridge_slave_0: entered promiscuous mode [ 879.356373][T30908] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.365553][T30908] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.374098][T30908] bridge_slave_1: entered allmulticast mode [ 879.381713][T30908] bridge_slave_1: entered promiscuous mode [ 879.389404][T18989] tipc: Left network mode [ 879.451993][T30908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.466231][T18989] batman_adv: batadv0: Removing interface: macsec1 [ 879.499732][T30908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.563097][T31016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.584798][T30908] team0: Port device team_slave_0 added [ 879.593102][T30908] team0: Port device team_slave_1 added [ 879.654667][T30908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.671809][T30908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.703895][T30908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.725976][T30908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.746802][T30908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.777377][T30908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.944266][T31024] wg1 speed is unknown, defaulting to 1000 [ 879.976164][T30908] hsr_slave_0: entered promiscuous mode [ 879.985869][T30908] hsr_slave_1: entered promiscuous mode [ 879.995222][T30908] debugfs: 'hsr0' already exists in 'hsr' [ 880.001346][T30908] Cannot create hsr debugfs directory [ 880.059212][T18989] hsr_slave_0: left promiscuous mode [ 880.077556][T18989] batman_adv: batadv0: Removing interface: ipvlan2 [ 880.659137][T30967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 880.862015][T31027] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6187'. [ 881.040783][T31031] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6188'. [ 881.290314][T31048] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 881.377783][T10839] IPVS: starting estimator thread 0... [ 881.488892][T31053] IPVS: using max 29 ests per chain, 69600 per kthread [ 881.570813][T31055] tipc: Enabling of bearer rejected, failed to enable media [ 881.594409][T31065] netlink: 'syz.0.6195': attribute type 2 has an invalid length. [ 881.677261][T31064] bond1: option arp_all_targets: invalid value (129) [ 881.704422][T31064] bond1 (unregistering): Released all slaves [ 881.914179][T31065] hmac(sha224): entered promiscuous mode [ 882.030616][T31076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6196'. [ 882.069522][T31076] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6196'. [ 882.304343][T30908] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 882.365374][T30908] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 882.426423][T30908] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 882.506334][T30908] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 882.769336][T31116] 8021q: VLANs not supported on caif0 [ 882.964434][T31130] openvswitch: netlink: Flow actions attr not present in new flow. [ 882.979239][T31133] Bluetooth: MGMT ver 1.23 [ 883.014675][T31130] openvswitch: netlink: Flow actions attr not present in new flow. [ 883.219349][T30908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.250126][T30908] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.280254][T18973] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.287454][T18973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.334220][T18975] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.341452][T18975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.395105][T31147] netlink: 'syz.4.6213': attribute type 1 has an invalid length. [ 883.424644][T31147] netlink: 174 bytes leftover after parsing attributes in process `syz.4.6213'. [ 883.517830][T30908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 883.606297][T31154] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.637462][T31162] sctp: [Deprecated]: syz.0.6216 (pid 31162) Use of int in maxseg socket option. [ 883.637462][T31162] Use struct sctp_assoc_value instead [ 883.736307][T31161] gre0: entered promiscuous mode [ 883.745120][T31161] gre0: entered allmulticast mode [ 883.816938][T31172] vlan2: entered promiscuous mode [ 883.867543][T31177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6219'. [ 883.870430][T31172] geneve1: entered promiscuous mode [ 883.931163][T31172] vlan2: entered allmulticast mode [ 883.936348][T31172] geneve1: entered allmulticast mode [ 884.463352][T30908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.587821][T31210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6227'. [ 884.614183][T30908] veth0_vlan: entered promiscuous mode [ 884.683004][T30908] veth1_vlan: entered promiscuous mode [ 884.894036][T31224] netlink: 'syz.0.6230': attribute type 10 has an invalid length. [ 884.906286][T31225] netlink: 'syz.0.6230': attribute type 10 has an invalid length. [ 884.925837][T31225] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 885.034508][T30908] veth0_macvtap: entered promiscuous mode [ 885.062783][T30908] veth1_macvtap: entered promiscuous mode [ 885.147457][T30908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.196233][T30908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.243501][T18979] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.302835][T18979] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.322305][T18979] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.382356][T18979] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.934761][T31275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6241'. [ 885.962664][T31274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6241'. [ 886.176390][T31275] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 886.177700][T31274] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 886.300889][T31285] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 886.318905][T31285] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6242'. [ 886.632161][T18973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.667483][T18973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.810892][T18989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.820828][T31300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6245'. [ 886.825989][T18989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.915932][T31302] gretap0: entered promiscuous mode [ 886.942160][T31302] macsec1: entered promiscuous mode [ 886.980001][T31302] gretap0: left promiscuous mode [ 887.062309][T31306] netlink: zone id is out of range [ 887.067503][T31306] netlink: zone id is out of range [ 887.086958][T31306] netlink: zone id is out of range [ 887.093404][T31306] netlink: zone id is out of range [ 887.112248][T31306] netlink: zone id is out of range [ 887.129018][T31306] netlink: zone id is out of range [ 887.134233][T31306] netlink: zone id is out of range [ 887.151025][T31306] netlink: zone id is out of range [ 887.156284][T31306] netlink: zone id is out of range [ 887.180636][T31306] netlink: zone id is out of range [ 887.316512][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 887.332972][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 887.342382][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 887.351391][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 887.359879][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 887.705920][T31312] wg1 speed is unknown, defaulting to 1000 [ 887.922596][T31336] netlink: 'syz.4.6255': attribute type 1 has an invalid length. [ 887.955041][T31335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6257'. [ 887.968924][T31335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6257'. [ 887.982720][T31335] netlink: 'syz.1.6257': attribute type 4 has an invalid length. [ 888.000651][T31330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6255'. [ 888.041487][T31333] tipc: Started in network mode [ 888.046488][T31333] tipc: Node identity 5296fcd0d5db, cluster identity 4711 [ 888.066015][T31333] tipc: Enabled bearer , priority 0 [ 888.097649][T18980] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.211327][T31333] tipc: Resetting bearer [ 888.237815][T31333] netlink: 'syz.3.6258': attribute type 2 has an invalid length. [ 888.268719][T31333] netlink: 'syz.3.6258': attribute type 2 has an invalid length. [ 888.281454][T31333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6258'. [ 888.294296][T18980] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.341461][T31331] tipc: Resetting bearer [ 888.380480][T31331] tipc: Disabling bearer [ 888.406442][T18980] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.539938][T31353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6261'. [ 888.583001][T31350] bond2: option fail_over_mac: invalid value (127) [ 888.594533][T31350] bond2 (unregistering): Released all slaves [ 888.634235][T18980] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.276953][T31312] chnl_net:caif_netlink_parms(): no params data found [ 889.409483][T29020] Bluetooth: hci2: command tx timeout [ 889.782189][T31403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6275'. [ 890.315539][T18980] bond0 (unregistering): (slave bridge7): Releasing backup interface [ 890.463040][T18980] bond4 (unregistering): (slave bridge10): Releasing backup interface [ 890.471347][T18980] bridge10 (unregistering): left promiscuous mode [ 890.533572][T18980] bond5 (unregistering): (slave bridge11): Releasing backup interface [ 890.541937][T18980] bridge11 (unregistering): left promiscuous mode [ 890.595490][T18980] .` (unregistering): Released all slaves [ 890.605411][T18980] bond1 (unregistering): Released all slaves [ 890.619207][T18980] bond2 (unregistering): Released all slaves [ 890.633772][T18980] bond3 (unregistering): Released all slaves [ 890.648154][T18980] bond0 (unregistering): Released all slaves [ 890.672705][T18980] bond4 (unregistering): Released all slaves [ 890.686281][T18980] bond5 (unregistering): Released all slaves [ 890.725934][T31385] wg1 speed is unknown, defaulting to 1000 [ 890.732903][T31393] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 890.733861][T31391] netlink: 'syz.3.6272': attribute type 15 has an invalid length. [ 890.972811][T31422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6277'. [ 891.103212][T18980] !: left promiscuous mode [ 891.136914][T31312] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.152548][T31312] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.173306][T31312] bridge_slave_0: entered allmulticast mode [ 891.187781][T31312] bridge_slave_0: entered promiscuous mode [ 891.197362][T31312] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.205751][T31312] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.214830][T31312] bridge_slave_1: entered allmulticast mode [ 891.225515][T31312] bridge_slave_1: entered promiscuous mode [ 891.261679][T18980] tipc: Disabling bearer [ 891.269396][T18980] tipc: Left network mode [ 891.428262][T31312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.469144][T31312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.481159][T31435] bond0: (slave batadv_slave_0): Error: Device can not be enslaved while up [ 891.490173][T29020] Bluetooth: hci2: command tx timeout [ 891.852823][T31312] team0: Port device team_slave_0 added [ 891.877206][T31312] team0: Port device team_slave_1 added [ 891.946046][T31432] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 891.967198][T31432] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 891.996238][T31312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.011026][T31312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.047378][T31312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 892.094783][T31312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 892.110937][T31312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 892.148436][T31312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.170880][T31432] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 892.191399][T31432] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 892.193112][T31452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6284'. [ 892.229265][T31448] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 892.296558][T31432] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 892.329068][T31432] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 892.345582][T31453] wg1 speed is unknown, defaulting to 1000 [ 892.364695][T31312] hsr_slave_0: entered promiscuous mode [ 892.372377][T31312] hsr_slave_1: entered promiscuous mode [ 892.420336][T31457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6283'. [ 892.449196][T31457] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6283'. [ 892.473449][T31432] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 892.481671][T31432] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 892.815942][T31478] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6288'. [ 892.867039][T31432] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 892.876214][T31432] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 893.023610][T31486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6289'. [ 893.041226][T31487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6288'. [ 893.053372][T31486] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6289'. [ 893.291404][T31498] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6292'. [ 893.414757][T31498] vlan2: entered allmulticast mode [ 893.433977][T31503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6294'. [ 893.439067][T31498] gretap0: entered allmulticast mode [ 893.577745][T31508] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 893.641707][T31504] syzkaller1: entered promiscuous mode [ 893.653239][T31504] syzkaller1: entered allmulticast mode [ 894.008884][T31516] wg1 speed is unknown, defaulting to 1000 [ 894.396980][T31529] batadv0: entered promiscuous mode [ 894.404095][T31529] net_ratelimit: 390 callbacks suppressed [ 894.404109][T31529] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 894.644887][T31547] netlink: 'syz.0.6302': attribute type 10 has an invalid length. [ 894.703819][T31554] netlink: 'syz.0.6302': attribute type 10 has an invalid length. [ 894.724427][T31544] bond3: option broadcast_neighbor: invalid value (30) [ 894.734134][T31544] bond3 (unregistering): Released all slaves [ 894.796955][T31547] bond0: (slave dummy0): Releasing backup interface [ 894.815364][T31547] team0: Port device dummy0 added [ 894.870959][T31554] team0: Port device dummy0 removed [ 894.894871][T31554] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 894.946571][T31559] netlink: 'syz.3.6304': attribute type 1 has an invalid length. [ 894.955160][T31559] netlink: 'syz.3.6304': attribute type 2 has an invalid length. [ 894.963069][T31559] netlink: 'syz.3.6304': attribute type 1 has an invalid length. [ 895.055353][T31564] netlink: 'syz.3.6307': attribute type 4 has an invalid length. [ 895.072811][T31560] bridge_slave_1: left allmulticast mode [ 895.078511][T31560] bridge_slave_1: left promiscuous mode [ 895.094919][T31560] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.109483][T31560] bridge_slave_0: left allmulticast mode [ 895.116647][T31560] bridge_slave_0: left promiscuous mode [ 895.129002][T31560] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.384088][T31569] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 895.461012][T31567] wg1 speed is unknown, defaulting to 1000 [ 896.103091][T31312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 896.145692][T31312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 896.192046][T31312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 896.305729][T18980] veth1: left allmulticast mode [ 896.324488][T18980] veth1: left promiscuous mode [ 896.339234][T31589] __nla_validate_parse: 6 callbacks suppressed [ 896.339256][T31589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6311'. [ 896.342071][T18980] veth0_macvtap: left promiscuous mode [ 896.723257][T18980] team0 (unregistering): Port device veth1_macvtap removed [ 897.035645][T31312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 897.087578][T31606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6314'. [ 897.621990][T18980] IPVS: stop unused estimator thread 0... [ 897.626332][T31653] netlink: 'syz.4.6319': attribute type 2 has an invalid length. [ 897.638249][T31643] batadv_slave_1: entered promiscuous mode [ 897.669548][T31656] netlink: 'syz.4.6319': attribute type 2 has an invalid length. [ 897.695364][T31637] batadv_slave_1: left promiscuous mode [ 897.860518][T31312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.921357][T31312] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.962084][T18976] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.969337][T18976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.041936][T18980] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.049182][T18980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.167403][T31682] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6323'. [ 898.407165][T31674] xt_CT: No such helper "syz1" [ 898.426253][T31678] wg1 speed is unknown, defaulting to 1000 [ 898.675306][T31703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6329'. [ 898.726642][T31703] veth1_macvtap: left promiscuous mode [ 898.792732][T31695] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6328'. [ 899.065424][T31312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.118931][T31713] : renamed from veth0_to_bond (while UP) [ 899.179389][T31710] can: request_module (can-proto-0) failed. [ 899.249803][T31312] veth0_vlan: entered promiscuous mode [ 899.272873][T31312] veth1_vlan: entered promiscuous mode [ 899.308293][T31681] wg1 speed is unknown, defaulting to 1000 [ 899.407268][T31715] lo: Caught tx_queue_len zero misconfig [ 899.417113][T31715] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6331'. [ 899.481553][T31312] veth0_macvtap: entered promiscuous mode [ 899.509692][T31312] veth1_macvtap: entered promiscuous mode [ 899.684616][T31312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.743410][T31312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.775609][T18970] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.848687][T18970] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.881978][T31734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6334'. [ 899.943544][T18970] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.958775][T18970] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.139161][T31685] wg1 speed is unknown, defaulting to 1000 [ 900.256330][T10838] IPVS: starting estimator thread 0... [ 900.369981][T31747] IPVS: using max 33 ests per chain, 79200 per kthread [ 900.638813][T18970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.678726][T18970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.077306][ T5489] veth0_vlan: left promiscuous mode [ 901.135303][ T5489] veth0_vlan: entered promiscuous mode [ 901.396734][T18973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.411223][T18973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.702374][T31788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6249'. [ 902.352160][T31815] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6352'. [ 902.369658][T31809] sch_tbf: burst 2 is lower than device tunl0 mtu (1480) ! [ 902.802640][T31836] netlink: 'syz.1.6357': attribute type 9 has an invalid length. [ 902.982111][T31848] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6358'. [ 903.022046][T31845] bridge2: entered allmulticast mode [ 903.193163][T31857] netlink: 'syz.2.6361': attribute type 10 has an invalid length. [ 903.286859][T31857] syz_tun: entered promiscuous mode [ 903.301823][T31865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6364'. [ 903.330247][T31857] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 903.556078][T31878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6368'. [ 903.754721][T31883] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6368'. [ 903.837852][T31878] can: request_module (can-proto-4) failed. [ 903.948036][T31889] wg1 speed is unknown, defaulting to 1000 [ 904.015114][T31895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6373'. [ 904.040804][T31896] tipc: Started in network mode [ 904.045833][T31896] tipc: Node identity 56b666ed223, cluster identity 4711 [ 904.057367][T31896] tipc: Enabled bearer , priority 0 [ 904.079519][T31896] syzkaller0: entered promiscuous mode [ 904.085043][T31896] syzkaller0: entered allmulticast mode [ 904.169888][T31896] tipc: Resetting bearer [ 904.299607][T31890] tipc: Resetting bearer [ 904.324068][T31890] tipc: Disabling bearer [ 904.648443][T31917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6378'. [ 904.683692][T31917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6378'. [ 904.701648][T31918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6378'. [ 905.053047][T22275] IPVS: starting estimator thread 0... [ 905.128391][T31927] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.183383][T31929] IPVS: using max 31 ests per chain, 74400 per kthread [ 905.266385][T31924] syzkaller0: entered promiscuous mode [ 905.272141][T31924] syzkaller0: entered allmulticast mode [ 905.442459][T31927] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.749584][T31950] geneve2: entered promiscuous mode [ 907.856130][T31927] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.870454][T31965] netlink: 'syz.2.6391': attribute type 1 has an invalid length. [ 907.998493][T31972] xt_hashlimit: size too large, truncated to 1048576 [ 908.010772][T31973] xt_hashlimit: size too large, truncated to 1048576 [ 908.043211][T31927] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.109351][T31986] __nla_validate_parse: 4 callbacks suppressed [ 908.109373][T31986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6391'. [ 908.166788][T31965] macvtap0: entered promiscuous mode [ 908.216014][T31986] veth0_macvtap: left promiscuous mode [ 908.371628][T31986] macvtap0 (unregistering): left promiscuous mode [ 908.558784][T18989] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.601937][T18976] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.633683][T31995] bond0: (slave bond_slave_1): Releasing backup interface [ 908.665786][T32000] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6399'. [ 908.691568][T18976] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.732884][T18989] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.892806][T32014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6400'. [ 909.060506][T32023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6407'. [ 909.093791][T32024] wg1 speed is unknown, defaulting to 1000 [ 909.368885][T32037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6410'. [ 909.392858][T32035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6409'. [ 909.408857][T32035] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6409'. [ 909.417861][T32035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6409'. [ 909.431727][T32038] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6410'. [ 909.448650][T32035] netlink: 6016 bytes leftover after parsing attributes in process `syz.4.6409'. [ 909.771158][T32058] Bluetooth: MGMT ver 1.23 [ 910.090184][T32067] syzkaller0: entered promiscuous mode [ 910.116188][T32067] syzkaller0: entered allmulticast mode [ 910.757675][T32094] xt_hashlimit: size too large, truncated to 1048576 [ 912.697199][T32099] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.899359][T32099] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.024854][T32099] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.229958][T32099] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.311604][T32122] __nla_validate_parse: 4 callbacks suppressed [ 913.311626][T32122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6429'. [ 913.336036][T32122] batadv_slave_1: entered promiscuous mode [ 913.342619][T32122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6429'. [ 913.360700][T32126] pim6reg1: entered promiscuous mode [ 913.366332][T32126] pim6reg1: entered allmulticast mode [ 913.633408][T18976] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.694012][T18976] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.749759][T32134] netlink: 'syz.0.6433': attribute type 4 has an invalid length. [ 913.771763][T18976] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.786448][T32136] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6434'. [ 913.943596][T18976] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 913.989998][T32142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6436'. [ 914.002372][T32142] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6436'. [ 914.176063][T32149] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6438'. [ 914.224945][T32149] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6438'. [ 914.563491][T32162] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6441'. [ 914.589373][T32159] wg1 speed is unknown, defaulting to 1000 [ 914.622585][T32155] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6440'. [ 914.765802][T32170] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6445'. [ 915.932011][T32202] netlink: 'syz.0.6450': attribute type 2 has an invalid length. [ 916.777238][T32204] wg1 speed is unknown, defaulting to 1000 [ 917.353580][T32253] tipc: Invalid UDP bearer configuration [ 917.353644][T32253] tipc: Enabling of bearer rejected, failed to enable media [ 917.432555][T32259] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 917.439915][T32259] IPv6: NLM_F_CREATE should be set when creating new route [ 917.447232][T32259] IPv6: NLM_F_CREATE should be set when creating new route [ 917.454541][T32259] IPv6: NLM_F_CREATE should be set when creating new route [ 918.004832][T32265] netlink: 'syz.3.6463': attribute type 8 has an invalid length. [ 918.214223][T32273] ipip0: entered promiscuous mode [ 918.292271][T32273] ipip0: entered allmulticast mode [ 918.710629][T32296] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 786440, id = 0 [ 919.097020][T32312] netlink: 'syz.4.6474': attribute type 11 has an invalid length. [ 919.134490][T32312] __nla_validate_parse: 12 callbacks suppressed [ 919.134514][T32312] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.6474'. [ 919.541369][T32335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6482'. [ 919.557782][T32335] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6482'. [ 919.573187][T32337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6483'. [ 919.663040][T32343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6484'. [ 919.684426][T32343] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6484'. [ 919.696618][T32343] netlink: 51 bytes leftover after parsing attributes in process `syz.1.6484'. [ 919.706877][T32343] netlink: 'syz.1.6484': attribute type 4 has an invalid length. [ 919.999590][T32353] wg1 speed is unknown, defaulting to 1000 [ 920.245351][T32356] wg1 speed is unknown, defaulting to 1000 [ 920.656011][T32358] wg1 speed is unknown, defaulting to 1000 [ 920.705599][T32374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6492'. [ 920.755097][T32380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6495'. [ 920.787644][T32376] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6494'. [ 921.142910][T32397] pim6reg: entered allmulticast mode [ 921.179514][T32401] pim6reg: left allmulticast mode [ 921.428750][T32413] xt_TCPMSS: Only works on TCP SYN packets [ 921.939777][T32428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 921.967884][T32428] bond0 (unregistering): Released all slaves [ 922.535049][T18984] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.589465][T18984] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.611297][T18984] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.631452][T18984] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 923.215018][T12102] lec:lec_start_xmit: lec0:No lecd attached [ 923.416706][T32455] x_tables: duplicate underflow at hook 3 [ 923.623730][T32465] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.631675][T32465] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.794125][T32465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 923.812659][T32465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.035720][ T6581] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.054740][ T6581] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.085956][ T6581] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.120894][ T6581] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.184052][T32494] tipc: Enabled bearer , priority 0 [ 924.279883][T32494] syzkaller0: entered promiscuous mode [ 924.285813][T32494] syzkaller0: entered allmulticast mode [ 924.294219][T32494] tipc: Resetting bearer [ 924.300887][T32498] tipc: Started in network mode [ 924.307218][T32498] tipc: Node identity f23494eac9f3, cluster identity 4711 [ 924.317393][T32498] tipc: Enabled bearer , priority 0 [ 924.329248][T32506] syzkaller0: entered promiscuous mode [ 924.345916][T32506] syzkaller0: entered allmulticast mode [ 924.354778][T32493] tipc: Resetting bearer [ 924.462589][T32520] __nla_validate_parse: 14 callbacks suppressed [ 924.462611][T32520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6530'. [ 924.493912][T32520] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6530'. [ 924.675840][T32525] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.6531'. [ 926.388890][T32493] tipc: Disabling bearer [ 926.408993][T32506] tipc: Resetting bearer [ 926.415383][T32518] mac80211_hwsim hwsim81 syzkaller0: entered promiscuous mode [ 926.423141][T32518] mac80211_hwsim hwsim81 syzkaller0: entered allmulticast mode [ 926.452276][T32496] tipc: Resetting bearer [ 926.510250][T32496] tipc: Disabling bearer [ 926.533552][T10839] tipc: Node number set to 3065118661 [ 926.550286][T22275] tipc: Node number set to 1002935530 [ 926.592239][T32523] wg1 speed is unknown, defaulting to 1000 [ 926.688883][T32539] netlink: 'syz.3.6535': attribute type 4 has an invalid length. [ 926.739207][T32539] vlan2: entered allmulticast mode [ 926.760140][T32539] bridge0: entered allmulticast mode [ 926.776165][T32539] bridge0: port 3(vlan2) entered blocking state [ 926.799781][T32539] bridge0: port 3(vlan2) entered disabled state [ 926.945296][T32551] bond1: entered promiscuous mode [ 927.015134][T32528] wg1 speed is unknown, defaulting to 1000 [ 927.107357][T32566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6541'. [ 927.151097][T32566] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6541'. [ 927.984452][T32609] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 928.008015][T32609] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 928.179558][T32616] netlink: 'syz.4.6554': attribute type 12 has an invalid length. [ 928.187817][T32616] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6554'. [ 928.228611][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 928.236685][ C0] lec:lec_tx_timeout: lec0 [ 928.242837][T32620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6555'. [ 928.327531][T32620] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6555'. [ 928.494178][T32632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6559'. [ 928.633194][T32639] xt_policy: neither incoming nor outgoing policy selected [ 928.796095][T32647] netlink: 'syz.1.6563': attribute type 1 has an invalid length. [ 928.810380][T32647] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6563'. [ 929.223628][T32677] netlink: 'syz.2.6574': attribute type 11 has an invalid length. [ 929.389205][T32689] netlink: 'syz.4.6578': attribute type 9 has an invalid length. [ 929.564831][T32706] __nla_validate_parse: 9 callbacks suppressed [ 929.564853][T32706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6584'. [ 929.635821][T32706] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6584'. [ 929.838907][T32722] netlink: 'syz.2.6587': attribute type 1 has an invalid length. [ 930.083904][T32742] xt_hashlimit: size too large, truncated to 1048576 [ 930.210813][T32748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6593'. [ 930.257631][T32748] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6593'. [ 931.507590][ T311] netlink: 'syz.0.6604': attribute type 1 has an invalid length. [ 931.637443][ T311] bond1: entered promiscuous mode [ 931.642663][ T311] bond1: entered allmulticast mode [ 931.648232][ T311] 8021q: adding VLAN 0 to HW filter on device bond1 [ 931.727041][ T311] bridge1: entered promiscuous mode [ 931.752703][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 931.769117][T16096] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 931.789684][ T311] bridge1: entered allmulticast mode [ 931.797774][ T311] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 931.855412][ T317] bridge2: entered promiscuous mode [ 931.874397][ T317] bridge2: entered allmulticast mode [ 931.894288][ T317] bond1: (slave bridge2): Enslaving as a backup interface with a down link [ 931.920649][ T325] IPVS: Error connecting to the multicast addr [ 931.949733][ T6581] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 931.971881][ T325] hsr0: entered promiscuous mode [ 931.976897][ T325] hsr0: entered allmulticast mode [ 932.010420][ T325] hsr_slave_0: entered allmulticast mode [ 932.036578][ T325] hsr_slave_1: entered allmulticast mode [ 932.143020][ T331] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6609'. [ 932.163298][ T330] netlink: 80 bytes leftover after parsing attributes in process `syz.0.6609'. [ 932.169690][ T328] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6608'. [ 932.230163][ T335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6610'. [ 932.248997][ T332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 933.346507][ T362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6613'. [ 933.405436][ T362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6613'. [ 933.432948][ T367] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 933.511716][ T362] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 933.926920][ T382] netlink: 'syz.4.6622': attribute type 3 has an invalid length. [ 933.949190][ T382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 934.433165][ T409] netlink: 'syz.3.6631': attribute type 1 has an invalid length. [ 934.469558][T18965] bond0: (slave c5): interface is now down [ 934.487546][T18965] bond0: (slave bond_slave_1): interface is now down [ 934.727039][ T419] __nla_validate_parse: 8 callbacks suppressed [ 934.727061][ T419] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6634'. [ 934.765650][ T419] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6634'. [ 934.998292][ T435] ip6gretap0: entered promiscuous mode [ 935.004761][ T435] vlan3: entered promiscuous mode [ 935.049851][ T436] netlink: 'syz.0.6638': attribute type 1 has an invalid length. [ 935.069158][ T436] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6638'. [ 935.392226][ T461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6647'. [ 935.444205][ T467] syzkaller0: entered promiscuous mode [ 935.450216][ T467] syzkaller0: entered allmulticast mode [ 935.486390][ T467] tipc: Enabled bearer , priority 0 [ 935.503933][ T467] tunl0: Caught tx_queue_len zero misconfig [ 935.519883][ T467] sch_fq: defrate 4294967293 ignored. [ 935.534531][ T466] tipc: Resetting bearer [ 935.583885][ T466] tipc: Disabling bearer [ 935.599417][ T471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6650'. [ 936.077427][ T498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6658'. [ 936.291481][ T513] netlink: 'syz.1.6664': attribute type 27 has an invalid length. [ 936.357344][ T518] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 936.359082][ T515] nbd: socks must be embedded in a SOCK_ITEM attr [ 936.380161][ T515] block nbd2: shutting down sockets [ 936.507475][ T520] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 936.528299][T22275] IPVS: starting estimator thread 0... [ 936.718808][ T524] IPVS: using max 23 ests per chain, 55200 per kthread [ 937.065479][ T541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6670'. [ 937.088632][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 937.096735][ C0] lec:lec_tx_timeout: lec0 [ 937.132151][ T513] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.819183][ T513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.885575][ T513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.046649][ T513] hsr0: left promiscuous mode [ 938.060371][ T513] hsr0: left allmulticast mode [ 938.070730][ T513] hsr_slave_0: left allmulticast mode [ 938.077615][ T513] hsr_slave_1: left allmulticast mode [ 938.680004][ T523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.707956][ T523] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.733161][ T523] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 938.763421][T16096] bond0: (slave c5): link status definitely down, disabling slave [ 938.778984][T16096] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 938.795258][T16096] bond0: now running without any active interface! [ 938.804740][ T570] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6677'. [ 938.834865][ T537] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 938.876939][T18981] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.892079][T18981] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.919764][T18981] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.959905][T18981] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.116318][ T577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6679'. [ 939.172148][ T584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6682'. [ 939.276548][ T587] netlink: 'syz.0.6682': attribute type 1 has an invalid length. [ 939.350554][ T591] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 939.384929][ T592] netlink: 'syz.3.6685': attribute type 2 has an invalid length. [ 939.433854][ T592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 939.485810][ T592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.905116][ T613] Bluetooth: MGMT ver 1.23 [ 939.945636][ T616] __nla_validate_parse: 4 callbacks suppressed [ 939.945659][ T616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6691'. [ 940.119768][ T625] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6690'. [ 940.211440][ T631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6693'. [ 940.246481][ T631] netlink: 'syz.4.6693': attribute type 6 has an invalid length. [ 941.009632][ T651] netlink: 'syz.2.6703': attribute type 32 has an invalid length. [ 941.017528][ T651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6703'. [ 941.076819][ T651] bond2: option coupled_control: invalid value (12) [ 941.088429][ T651] bond2 (unregistering): Released all slaves [ 941.143724][ T659] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6705'. [ 941.365924][ T670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6708'. [ 941.583253][ T683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6711'. [ 941.608128][ T685] wg1 speed is unknown, defaulting to 1000 [ 941.615970][ T691] gre0: Caught tx_queue_len zero misconfig [ 941.919891][ T687] wg1 speed is unknown, defaulting to 1000 [ 942.025044][ T707] bond0: (slave syz_tun): Releasing backup interface [ 942.035505][ T707] bridge_slave_0: left allmulticast mode [ 942.047073][ T707] bridge_slave_0: left promiscuous mode [ 942.062972][ T707] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.104179][ T707] bridge_slave_1: left allmulticast mode [ 942.117907][ T707] bridge_slave_1: left promiscuous mode [ 942.125566][ T707] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.141472][ T710] xt_ecn: cannot match TCP bits for non-tcp packets [ 942.185230][ T707] bond0: (slave bond_slave_0): Releasing backup interface [ 942.212068][ T707] bond0: (slave bond_slave_1): Releasing backup interface [ 942.235827][ T707] team0: Port device team_slave_0 removed [ 942.255285][ T707] team0: Port device team_slave_1 removed [ 942.266128][ T707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.280843][ T707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.292782][ T716] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6718'. [ 942.303434][ T707] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 942.394655][ T708] team0: Mode changed to "loadbalance" [ 942.424591][ T711] netlink: 'syz.2.6718': attribute type 29 has an invalid length. [ 942.425117][ T723] netlink: 'syz.4.6723': attribute type 1 has an invalid length. [ 942.450709][ T712] netlink: 'syz.2.6718': attribute type 29 has an invalid length. [ 942.857958][ T741] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6727'. [ 942.999044][ T741] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6727'. [ 943.700167][ T777] sock: sock_set_timeout: `syz.4.6738' (pid 777) tries to set negative timeout [ 943.703586][ T770] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 943.723374][ T770] bond2 (unregistering): Released all slaves [ 943.809290][ T777] macvlan2: entered allmulticast mode [ 944.013953][ T800] tipc: Enabling of bearer rejected, failed to enable media [ 944.380029][ T819] nbd2: detected capacity change from 0 to 127 [ 944.393974][ T823] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 944.471493][ T823] team0: Mode changed to "broadcast" [ 944.713993][T29020] block nbd2: Receive control failed (result -104) [ 944.809298][ T845] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 944.985375][ T853] __nla_validate_parse: 40 callbacks suppressed [ 944.985399][ T853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6761'. [ 945.075046][ T858] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.6763'. [ 945.240090][ T868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6766'. [ 945.446921][ T882] veth0_to_team: entered promiscuous mode [ 945.458742][ T882] veth0_to_team: entered allmulticast mode [ 945.844764][ T889] Set syz1 is full, maxelem 6117 reached [ 945.881637][ T912] netlink: 'syz.1.6777': attribute type 1 has an invalid length. [ 945.957669][ T901] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6774'. [ 945.963610][ T912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6777'. [ 946.008813][ T903] wg1 speed is unknown, defaulting to 1000 [ 946.023979][ T901] [ 946.026363][ T901] ====================================================== [ 946.033399][ T901] WARNING: possible circular locking dependency detected [ 946.040445][ T901] syzkaller #0 Not tainted [ 946.044887][ T901] ------------------------------------------------------ [ 946.051924][ T901] syz.4.6774/901 is trying to acquire lock: [ 946.057837][ T901] ffffffff8fd43a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 946.067335][ T901] [ 946.067335][ T901] but task is already holding lock: [ 946.074726][ T901] ffff888056e6cd70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 946.084186][ T901] [ 946.084186][ T901] which lock already depends on the new lock. [ 946.084186][ T901] [ 946.094619][ T901] [ 946.094619][ T901] the existing dependency chain (in reverse order) is: [ 946.103660][ T901] [ 946.103660][ T901] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 946.111687][ T901] _raw_spin_lock_bh+0x36/0x50 [ 946.117052][ T901] nr_rt_device_down+0x153/0x860 [ 946.122561][ T901] nr_device_event+0x137/0x150 [ 946.127874][ T901] notifier_call_chain+0x1be/0x400 [ 946.133557][ T901] netif_close_many+0x2ae/0x420 [ 946.139008][ T901] netif_close+0x160/0x220 [ 946.143950][ T901] dev_close+0x10a/0x220 [ 946.148753][ T901] bpq_device_event+0x377/0x6a0 [ 946.154187][ T901] notifier_call_chain+0x1be/0x400 [ 946.159825][ T901] netif_close_many+0x2ae/0x420 [ 946.165210][ T901] netif_close+0x160/0x220 [ 946.170154][ T901] dev_close+0x10a/0x220 [ 946.175100][ T901] bond_setup_by_slave+0x5f/0x3d0 [ 946.180702][ T901] bond_enslave+0x847/0x3c10 [ 946.185813][ T901] bond_do_ioctl+0x6ec/0x8d0 [ 946.191028][ T901] dev_ifsioc+0x961/0x1280 [ 946.195992][ T901] dev_ioctl+0x7b4/0x1150 [ 946.200848][ T901] sock_do_ioctl+0x23e/0x320 [ 946.205970][ T901] sock_ioctl+0x5c6/0x7f0 [ 946.210820][ T901] __se_sys_ioctl+0xfc/0x170 [ 946.215965][ T901] do_syscall_64+0x14d/0xf80 [ 946.221082][ T901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.227519][ T901] [ 946.227519][ T901] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 946.235523][ T901] _raw_spin_lock_bh+0x36/0x50 [ 946.240817][ T901] nr_rt_device_down+0xbe/0x860 [ 946.246193][ T901] nr_device_event+0x137/0x150 [ 946.251481][ T901] notifier_call_chain+0x1be/0x400 [ 946.257122][ T901] netif_close_many+0x2ae/0x420 [ 946.262587][ T901] netif_close+0x160/0x220 [ 946.267531][ T901] dev_close+0x10a/0x220 [ 946.272314][ T901] bpq_device_event+0x377/0x6a0 [ 946.277724][ T901] notifier_call_chain+0x1be/0x400 [ 946.283375][ T901] netif_close_many+0x2ae/0x420 [ 946.288770][ T901] netif_close+0x160/0x220 [ 946.293713][ T901] dev_close+0x10a/0x220 [ 946.298485][ T901] bond_setup_by_slave+0x5f/0x3d0 [ 946.304032][ T901] bond_enslave+0x847/0x3c10 [ 946.309144][ T901] bond_do_ioctl+0x6ec/0x8d0 [ 946.314259][ T901] dev_ifsioc+0x961/0x1280 [ 946.319200][ T901] dev_ioctl+0x7b4/0x1150 [ 946.324058][ T901] sock_do_ioctl+0x23e/0x320 [ 946.329176][ T901] sock_ioctl+0x5c6/0x7f0 [ 946.334029][ T901] __se_sys_ioctl+0xfc/0x170 [ 946.339148][ T901] do_syscall_64+0x14d/0xf80 [ 946.344280][ T901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.350782][ T901] [ 946.350782][ T901] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 946.358779][ T901] __lock_acquire+0x15a5/0x2cf0 [ 946.364176][ T901] lock_acquire+0xf0/0x2e0 [ 946.369128][ T901] _raw_spin_lock_bh+0x36/0x50 [ 946.374427][ T901] nr_remove_neigh+0x25/0xe0 [ 946.379539][ T901] nr_add_node+0x1e41/0x2630 [ 946.384693][ T901] nr_rt_ioctl+0xe59/0xf90 [ 946.389724][ T901] sock_do_ioctl+0x101/0x320 [ 946.394841][ T901] sock_ioctl+0x5c6/0x7f0 [ 946.399691][ T901] __se_sys_ioctl+0xfc/0x170 [ 946.404813][ T901] do_syscall_64+0x14d/0xf80 [ 946.409923][ T901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.416422][ T901] [ 946.416422][ T901] other info that might help us debug this: [ 946.416422][ T901] [ 946.426651][ T901] Chain exists of: [ 946.426651][ T901] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 946.426651][ T901] [ 946.440476][ T901] Possible unsafe locking scenario: [ 946.440476][ T901] [ 946.447920][ T901] CPU0 CPU1 [ 946.453280][ T901] ---- ---- [ 946.458653][ T901] lock(&nr_node->node_lock); [ 946.463421][ T901] lock(nr_node_list_lock); [ 946.470623][ T901] lock(&nr_node->node_lock); [ 946.477910][ T901] lock(nr_neigh_list_lock); [ 946.482597][ T901] [ 946.482597][ T901] *** DEADLOCK *** [ 946.482597][ T901] [ 946.490739][ T901] 1 lock held by syz.4.6774/901: [ 946.495671][ T901] #0: ffff888056e6cd70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 946.505520][ T901] [ 946.505520][ T901] stack backtrace: [ 946.511410][ T901] CPU: 1 UID: 0 PID: 901 Comm: syz.4.6774 Not tainted syzkaller #0 PREEMPT(full) [ 946.511431][ T901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 946.511442][ T901] Call Trace: [ 946.511450][ T901] [ 946.511458][ T901] dump_stack_lvl+0xe8/0x150 [ 946.511500][ T901] print_circular_bug+0x2e1/0x300 [ 946.511528][ T901] check_noncircular+0x12e/0x150 [ 946.511554][ T901] __lock_acquire+0x15a5/0x2cf0 [ 946.511590][ T901] ? __lock_acquire+0x6b5/0x2cf0 [ 946.511611][ T901] lock_acquire+0xf0/0x2e0 [ 946.511631][ T901] ? nr_remove_neigh+0x25/0xe0 [ 946.511648][ T901] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 946.511665][ T901] ? nr_remove_neigh+0x25/0xe0 [ 946.511679][ T901] _raw_spin_lock_bh+0x36/0x50 [ 946.511702][ T901] ? nr_remove_neigh+0x25/0xe0 [ 946.511716][ T901] nr_remove_neigh+0x25/0xe0 [ 946.511732][ T901] nr_add_node+0x1e41/0x2630 [ 946.511759][ T901] ? dev_get_by_name+0x21/0x200 [ 946.511777][ T901] ? dev_get_by_name+0x21/0x200 [ 946.511793][ T901] ? nr_call_to_digi+0x136/0x1b0 [ 946.511818][ T901] nr_rt_ioctl+0xe59/0xf90 [ 946.511845][ T901] ? kasan_quarantine_put+0xbb/0x1f0 [ 946.511875][ T901] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 946.511908][ T901] ? apparmor_capable+0x126/0x170 [ 946.512003][ T901] ? capable+0x88/0xe0 [ 946.512037][ T901] ? nr_ioctl+0x1b1/0x3b0 [ 946.512058][ T901] sock_do_ioctl+0x101/0x320 [ 946.512080][ T901] ? __pfx_sock_do_ioctl+0x10/0x10 [ 946.512097][ T901] ? do_futex+0x395/0x420 [ 946.512144][ T901] sock_ioctl+0x5c6/0x7f0 [ 946.512162][ T901] ? __pfx_sock_ioctl+0x10/0x10 [ 946.512188][ T901] ? __fget_files+0x2a/0x420 [ 946.512215][ T901] ? __fget_files+0x3a0/0x420 [ 946.512238][ T901] ? __fget_files+0x2a/0x420 [ 946.512262][ T901] ? bpf_lsm_file_ioctl+0x9/0x20 [ 946.512292][ T901] ? __pfx_sock_ioctl+0x10/0x10 [ 946.512310][ T901] __se_sys_ioctl+0xfc/0x170 [ 946.512330][ T901] do_syscall_64+0x14d/0xf80 [ 946.512345][ T901] ? trace_irq_disable+0x3b/0x150 [ 946.512377][ T901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.512394][ T901] ? clear_bhb_loop+0x40/0x90 [ 946.512412][ T901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.512429][ T901] RIP: 0033:0x7fd493d9c799 [ 946.512445][ T901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.512460][ T901] RSP: 002b:00007fd494c93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 946.512478][ T901] RAX: ffffffffffffffda RBX: 00007fd494015fa0 RCX: 00007fd493d9c799 [ 946.512492][ T901] RDX: 0000200000000000 RSI: 000000000000890b RDI: 000000000000000b [ 946.512503][ T901] RBP: 00007fd493e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 946.512514][ T901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.512524][ T901] R13: 00007fd494016038 R14: 00007fd494015fa0 R15: 00007ffd51f9fea8 [ 946.512543][ T901] [ 946.847612][ T912] 8021q: adding VLAN 0 to HW filter on device bond1