last executing test programs: 2.584415725s ago: executing program 3 (id=2034): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f00000010c0)) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4001}}}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0xb2, "1a4c257d68d781a55c237d9c497f50dd1d9c91360a81fe32afd21f35ea78ea082aed1ac2d80cb732320725496c881e23f3449e47a1ced2695bb22ba176686eba9bedbf8e191ab35bb79c117b5ac3588a95b5bcc0832afbc121a6631b5b5f261afbce67908f816497bed0a4815d1ccb4d792ea1a516a0cc25a4cae123a88cf5c2dd9719e4144c42fe9424f5aa1d97be4b25504c85dcf0c94250c6cc671271ddc571d96b1eae8e90834e3bb78c341dfa410633"}, &(0x7f0000000080)=0xba) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x7ff, 0x8}, &(0x7f0000000140)=0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="020e0000100000000000000000000000030005000000000002000000ac1e000100000000000000000300060000000000020000000000000000000000000000000800120026"], 0x80}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002b0007010000f4ffffffffff02"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="611076000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="0000000018db90c886728303f945e22be80e71063f68b4bcbdc2cab754722e6612f38b8defbfc76d97310c5526533d5601cdfe938891575db4d3b6f4e243331f83e9b3805a2c71780e5ac4797d460a", @ANYRES16=r6, @ANYBLOB="01002cbd7000fedbdf251700000008000300", @ANYRES32=r8, @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f00000010c0)) (async) socket(0x1e, 0x1, 0x0) (async) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4001}}}, 0x10) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)={0x0, 0xb2, "1a4c257d68d781a55c237d9c497f50dd1d9c91360a81fe32afd21f35ea78ea082aed1ac2d80cb732320725496c881e23f3449e47a1ced2695bb22ba176686eba9bedbf8e191ab35bb79c117b5ac3588a95b5bcc0832afbc121a6631b5b5f261afbce67908f816497bed0a4815d1ccb4d792ea1a516a0cc25a4cae123a88cf5c2dd9719e4144c42fe9424f5aa1d97be4b25504c85dcf0c94250c6cc671271ddc571d96b1eae8e90834e3bb78c341dfa410633"}, &(0x7f0000000080)=0xba) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x7ff, 0x8}, &(0x7f0000000140)=0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="020e0000100000000000000000000000030005000000000002000000ac1e000100000000000000000300060000000000020000000000000000000000000000000800120026"], 0x80}}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002b0007010000f4ffffffffff02"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="611076000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="0000000018db90c886728303f945e22be80e71063f68b4bcbdc2cab754722e6612f38b8defbfc76d97310c5526533d5601cdfe938891575db4d3b6f4e243331f83e9b3805a2c71780e5ac4797d460a", @ANYRES16=r6, @ANYBLOB="01002cbd7000fedbdf251700000008000300", @ANYRES32=r8, @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) (async) 2.554799926s ago: executing program 4 (id=2035): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0300002000"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', r4, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0xb}}}, 0x24}}, 0x800) 2.536099822s ago: executing program 0 (id=2036): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000040)={0x57}) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) close(r3) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) shutdown(r1, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)) (async) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000040)={0x57}) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) close(r3) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001080)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) 2.380553188s ago: executing program 3 (id=2037): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000001140)=0x4) (async) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r4, 0x431, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x43}}}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSMAXCID(r8, 0x40047451, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0xffffffffffffff3d, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r9, 0x58, &(0x7f0000000300)}, 0x10) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r9, &(0x7f0000000300), 0x0}, 0x20) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 1.91460258s ago: executing program 2 (id=2040): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffe, 0x0}}], 0x58}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf25030000000c0006000200000000000000080001"], 0xc0}}, 0xc0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000100)={0x4c, 0x12, 0x1, 0x70bd2b, 0x25dfdbfb, {0x15, 0x2, 0x7, 0xe, {0x4e20, 0x4e22, [0x6, 0x8, 0x2a44, 0x3], [0x2, 0x8, 0x4, 0x3], 0x0, [0x1000, 0x6]}, 0xeea0, 0x1183}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 1.832388071s ago: executing program 4 (id=2041): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x0, 0x10) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x9) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001500000000000000000000000800120002000200000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000ac14140000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000010006"], 0xa8}}, 0x0) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x80805, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r9}, 0x4) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x0, 0x20, 0x0, &(0x7f0000000300)="b34715ecd04552d39a7f9b6f7becb2e23616a62fdf01abf310605b1c09812b2b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000dcf4bb7000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r4], 0x7c}, 0x1, 0x0, 0x0, 0x40094}, 0x0) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='neigh_create\x00', r12}, 0x18) socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.779802784s ago: executing program 2 (id=2042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000), 0x10) listen(r1, 0x3) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000900)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000580)={0x2e8, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1e7, 0x3a}}}}, [@NL80211_ATTR_IE={0x1ef, 0x2a, [@ht={0x2d, 0x1a, {0xc, 0x3, 0x5, 0x0, {0x5, 0x8, 0x0, 0x8, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x2, 0x7f}}, @gcr_ga={0xbd, 0x6, @device_b}, @fast_bss_trans={0x37, 0x77, {0x7, 0x1, "22d67f08812b261f5489bd8871a24eb3", "dff8bde1d605b9bb86590b46db79b2e5ad00ae033810ae21f758bc2edc8ee498", "a8d288ae172a0b73e44fc743d4834299496d230df2b4576e525ab8178d38553b", [{0x4, 0x23, "2560744fe3ab296116d1e63714fdd0c3461b38705c8a58098a4e27159db416b95a175f"}]}}, @mic={0x8c, 0x10, {0xc46, "ceea01abef57", @short="9ccfb9d91f88b25c"}}, @channel_switch={0x25, 0x3, {0x0, 0xa5, 0x40}}, @peer_mgmt={0x75, 0x6, {0x0, 0x8, @val=0x9, @void, @void}}, @perr={0x84, 0x127, {0x7, 0x11, [{{0x0, 0x1}, @device_a, 0x3, @value=@broadcast, 0x32}, {{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0x40}, {{0x0, 0x1}, @broadcast, 0xa, @value=@broadcast, 0x3}, {{0x0, 0x1}, @device_b, 0x8, @value=@device_b}, {{}, @device_a, 0x1, @void, 0x28}, {{0x0, 0x1}, @broadcast, 0xd, @value, 0x35}, {{0x0, 0x1}, @broadcast, 0x2, @value, 0x3e}, {{0x0, 0x1}, @broadcast, 0x69c, @value, 0x24}, {{}, @broadcast, 0x77, @void, 0x8}, {{0x0, 0x1}, @device_a, 0x652658bf, @value=@broadcast, 0x2d}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x5}, {{}, @broadcast, 0x867, @void, 0x30}, {{}, @device_b, 0x1, @void, 0x3d}, {{0x0, 0x1}, @device_b, 0x7ff, @value, 0x15}, {{}, @device_a, 0xaa, @void, 0x15}, {{0x0, 0x1}, @broadcast, 0x8, @value, 0x9}, {{0x0, 0x1}, @broadcast, 0xd, @value, 0x1a}]}}, @dsss={0x3, 0x1, 0xb}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @NL80211_ATTR_IE={0x53, 0x2a, [@peer_mgmt={0x75, 0x6, {0x0, 0x0, @void, @val=0x16, @void}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xe, 0x3, @device_b, 0x5, @value, 0x0, 0xf, @broadcast}}, @peer_mgmt={0x75, 0x16, {0x1, 0x8, @void, @val=0x15, @val="fce8326f9e986cbe5e3ef87f408f2210"}}, @cf={0x4, 0x6, {0xb, 0x3, 0x1ff, 0x4000}}]}, @NL80211_ATTR_IE={0x53, 0x2a, [@mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x2}, 0x9, 0x40, @device_a, 0x5f, 0x2e, 0x6}}, @cf={0x4, 0x6, {0x6a, 0x3f, 0x7, 0x6}}, @gcr_ga={0xbd, 0x6, @broadcast}, @challenge={0x10, 0x1, 0x9a}, @mic={0x8c, 0x18, {0x78, "f77740d7acdf", @long="d7a4384f9a2e045639f82e10deb4bb61"}}, @dsss={0x3, 0x1, 0x38}]}, @NL80211_ATTR_IE={0x2f, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x9}}, @mesh_chsw={0x76, 0x6, {0x8, 0x8, 0x13, 0xb}}, @measure_req={0x26, 0x12, {0x2, 0x4, 0xfc, "3de32624caed78d1ee986548827ff5"}}, @erp={0x2a, 0x1}, @challenge={0x10, 0x1, 0xc3}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x40010}, 0x4040010) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000200", @ANYRES32=0xee00, @ANYBLOB="08000f"], 0x2c}, 0x1, 0x0, 0x0, 0x448c4}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r6, 0x13, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="87f1ee1930b7"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r11}) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r13}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8}}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r6, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfaa}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11bced7cf15528ff}, 0x4001) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x1b4, r2, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x3d}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_batadv\x00'}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4709bcfa986b9220e0eab763383fc9adbf92b8ca4953c97f"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f57df327c67756b0251da819eb0de5e7fbcff0ac9d07b4f0"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fe733de71d794d8e033f7f2759849833df36ae33afd64126"}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0ac85a49f3b409cf82f18947494ee433280aebbb418cdfb8"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4cdef0371d705bbbaa57937e2f6f22355e16b4ec5a42b561"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x44050}, 0x20040040) r15 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001a000100000000000000000080"], 0x1c}}, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 1.688504701s ago: executing program 0 (id=2044): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000300)="00fda518984624ffb2c59f00d925", 0x0, 0x70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.664180383s ago: executing program 3 (id=2045): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x10, 0x22, 0x1}, 0x10}], 0x1}, 0x80) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r4 = accept4$unix(r2, 0x0, 0x0, 0x800) recvfrom$unix(r4, &(0x7f0000000140)=""/248, 0xf8, 0x120, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffffc, @link_local}}]}]}, @IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x58}}, 0x24000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='tlb_flush\x00', r0, 0x0, 0x9}, 0x18) 1.468707298s ago: executing program 0 (id=2046): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = accept$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r5) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe6}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x5c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r9) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r10, 0x120, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x3d}}]}, 0x28}}, 0x44) r11 = socket(0x2, 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x84, &(0x7f0000000140)={r12, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c000000100001000000e5854c937cd44320c0acc30000000000000700000a14000000140a000000000000000000000500000730000000080a01010000000000000000050000070900010073797a3100000000040004800900020073797a31000000001400000011000100003eafb09e19ece55f361268cb32537dcb6fe13331f8fc8a1cf8711e9eefaee2f537b21d25254f3c6417a2"], 0x6c}, 0x1, 0x0, 0x0, 0x20044000}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtfilter={0x784, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0x0, 0x1}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x754, 0x2, [@TCA_CGROUP_EMATCHES={0x80, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x70, 0x2, 0x0, 0x0, {{0x7, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x13, 0x5, "dd610db0a6c389f0880b143c7143a6"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe5}}]}, @TCA_CGROUP_POLICE={0x44c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x4, 0x1414, 0x5, 0x5, {0xc, 0x1, 0x4, 0x8, 0x7, 0x60496058}, {0xc, 0x0, 0xb, 0x0, 0x8, 0x401}, 0x5, 0x401, 0xeb4}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3, 0x6, 0x9224, 0xb, 0x3, 0x7fff, 0x4, 0x4, 0x200, 0xc1, 0xe, 0xffff01c3, 0x800, 0x3, 0x10, 0xe, 0x60, 0x8001, 0x3ff, 0x6, 0x95, 0x3, 0x1000, 0x101, 0xd2b, 0x6, 0x2, 0x2, 0x200, 0x3, 0x401, 0x8, 0x8, 0xb, 0x1000, 0x8, 0x3ff, 0x0, 0xc, 0x7, 0x9, 0x8, 0x0, 0x6, 0x4, 0x3, 0x6, 0x360, 0x9, 0x2, 0x761, 0x0, 0x1, 0x1ff, 0x6, 0x0, 0x5, 0x7fff, 0x6, 0x2, 0x54, 0x80000001, 0xd4c621c0, 0x10, 0x1, 0xa396, 0x1ff, 0x268, 0xe, 0x6, 0x8, 0x200, 0x80, 0xffffffff, 0x1, 0x42, 0x4, 0x100, 0x4, 0x4, 0x866, 0x0, 0x1, 0x9, 0x8, 0x3ff, 0x3, 0x6, 0x5, 0x3cb, 0x7ff, 0x8, 0x7fff, 0x6, 0x8, 0x9, 0x5, 0x6, 0xaf5, 0x3, 0x6, 0x400, 0x3, 0x3, 0x9, 0x8, 0x4f99, 0x5, 0x6, 0x0, 0x9fc, 0x5, 0x1000, 0x59c61cb5, 0x4000, 0x1ff, 0x4, 0x3, 0x6cc3, 0x8000, 0x80000000, 0x8, 0x4, 0x40, 0x0, 0xf69, 0x8, 0x101, 0x3ff, 0x1, 0x9, 0x1, 0x324c, 0x1, 0x9, 0x246, 0x8, 0x7, 0x4, 0xffff, 0x100, 0x5, 0x7fffffff, 0x1, 0xb19, 0x9, 0x80000000, 0xf8, 0xfffffa34, 0x7, 0x800, 0x468, 0x6000, 0x5, 0x2, 0x9, 0x1f, 0x2, 0x2, 0x1, 0xb7, 0x4, 0x1, 0x9, 0x9, 0x0, 0x8, 0x0, 0x88eb, 0x5, 0x5, 0x2ef3, 0x9, 0x5, 0xffffffdb, 0x7, 0x1, 0xb666, 0x81, 0x9, 0xffff, 0x6, 0x0, 0x3, 0x3, 0xe, 0x7, 0xffff550e, 0x6, 0x75, 0xfffffff9, 0x81, 0xffffc2a3, 0x6, 0xffffffff, 0xbb6, 0x0, 0x1, 0x7ff, 0x5, 0x9, 0xbd3, 0xffff, 0x3, 0xb24, 0x5, 0x1, 0x10000, 0xf, 0x2, 0xfffffd68, 0x101, 0x8, 0x4, 0x5f, 0x6, 0x3, 0x179600, 0x9, 0xfffffffd, 0x6, 0xfff, 0x0, 0xfffffffb, 0x200, 0xf71f, 0x1, 0x1, 0x6, 0xb1e1, 0xd, 0x1, 0x4, 0x1, 0x8, 0x7, 0xffffff1f, 0x0, 0x0, 0x9, 0x8000, 0x5, 0x6, 0x3, 0x4, 0x800, 0xc1, 0x53c825c2, 0x0, 0x71c, 0x2, 0x3ff, 0x91aa, 0x0, 0x3]}]}, @TCA_CGROUP_EMATCHES={0x284, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_META={0x30, 0x1, 0x0, 0x0, {{0x4, 0x4, 0xfffe}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_VAR="20d49a93ccc7d6556410", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9, 0x3, 0x81}, {0xeac, 0xc779, 0x3, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2000, 0x7, 0x4}, {{0x1, 0x1, 0x1, 0x1}, {0x1, 0x1}}}}, @TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x7f}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xae, 0x2}, {0x2, 0x9, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0xa, 0x2}, {0x1, 0x52, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8786, 0xc, 0x1}, {0x5, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x5}, {0x0, 0xfc, 0x1}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}]}}]}, @TCA_EMATCH_TREE_LIST={0x134, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x904a, 0x7, 0x8001}, {{0x1, 0x1}, {0x2, 0x1, 0x1}}}}, @TCF_EM_META={0x4c, 0x1, 0x0, 0x0, {{0x400, 0x4, 0xdd}, [@TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="59590b44fce67a"]}, @TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="1c976aaf299087bd1248", @TCF_META_TYPE_VAR="af98d4c53b9a"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x3, 0x2}, {0x3a, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x5, 0x2}, {0x6, 0x3, 0x1}}}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x7}, {0x8, 0xd4c, 0xa, 0x71d3ebc6}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7, 0x7, 0x9}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_META={0xa0, 0x1, 0x0, 0x0, {{0xa0, 0x4, 0x8000}, [@TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="cf31c2b609814622da"]}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="4bc282e4965f"]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_VAR="936123b962508441", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="4ffd9f4cd557", @TCF_META_TYPE_VAR="3c0d4ed277d2409be1"]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR='\'ch', @TCF_META_TYPE_VAR="2a3cde79edb8056c5e3a", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="511f4234", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="b5672099"]}, @TCA_EM_META_RVALUE={0x2c, 0x3, [@TCF_META_TYPE_VAR="94c28b", @TCF_META_TYPE_VAR="81d4069a", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="725b9f8c5de6e7", @TCF_META_TYPE_VAR="ebb5f43c9d5c81b65c", @TCF_META_TYPE_VAR="4bc370c236"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x8c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x101, 0x2, 0x9}, {0x9f17, 0x7, 0x2, "35e7d56a5607ea"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0x5}, {0x4, 0x4, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xd01e, 0x8, 0x8}, {0x4, 0x4, 0x7}}}, @TCF_EM_META={0x50, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x7ff}, [@TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="6e2ccd4f", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="76b0c366d653"]}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="6181f3fbdd9df0f81b", @TCF_META_TYPE_INT]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8f7}}]}]}}]}, 0x784}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 1.356468961s ago: executing program 1 (id=2047): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x4, 0xd1, 0xb}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x40c, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x60}}}}, [@NL80211_ATTR_IE={0x11d, 0x2a, [@random_vendor={0xdd, 0x92, "bc5b31ad8e745febebd29f10984a711f9ccd28b69406df4d1ffe370899343f28e37cf1d1032109102d36c06b8d5bce54fd43b2e152968ac9b1e2e139163aa802d5317ded2cccd0ddf7f6d3a9601cecba75642bd44e40eefeb33aab31376a9a06cbf05dbb5b1d4a37f0b81f43e0c34f5288079841f68c5682dc78f0c1c423888540006aeab7c00b695b256f03ba8da583db39"}, @chsw_timing={0x68, 0x4, {0x3, 0x8}}, @rann={0x7e, 0x15, {{0x0, 0x44}, 0x0, 0x5, @broadcast, 0x3, 0x3, 0x7}}, @ssid={0x0, 0x15, @random="511ae32adeb18b315afe075ab543c2b62d50a691e2"}, @mesh_id={0x72, 0x6}, @dsss={0x3, 0x1, 0x8}, @preq={0x82, 0x41, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x7b, 0xf8, 0xff, @device_a, 0x631d07c0, @value, 0x9, 0x6, 0x3, [{{0x0, 0x0, 0x1}, @broadcast, 0xffffffa0}, {{0x0, 0x0, 0x1}, @device_a, 0x6}, {{}, @device_a, 0x2}]}}, @dsss={0x3, 0x1, 0xb1}]}, @NL80211_ATTR_IE={0x174, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x8}}, @supported_rates={0x1, 0x4, [{0x9, 0x1}, {0x47, 0x1}, {0x4, 0x1}, {0x36, 0x1}]}, @ht={0x2d, 0x1a, {0x80, 0x3, 0x3, 0x0, {0x101, 0x1b8c, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x0, 0xa}}, @tim={0x5, 0x12, {0x1, 0xcb, 0x6, "1ae886faabf9873b54e4934e826a9f"}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}, @supported_rates={0x1, 0x7, [{0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x48, 0x1}, {0xb, 0x1}]}, @random_vendor={0xdd, 0xd8, "83741000ba21de6d60657adf3ccd93a4dd20030b8fab857d49dfcdc99857d848763833ce9cfc37db6a0342395f01ad3a64956fd280c0b496453964bf6d9acf2194675a2930f89c9de1adfa1493ccf85dfc8553f1fb647154e8c5c48e3feb81cc462b2d6973a8ee9d7acfeb3a6f5ad86825e66dd293311dc71cec6263cc8dda312077c94f1aeb8c9300fd12bdb5e7ad0d83d634c3bb91715ef3c91cdca746341a8645c73786dd538642ae9ad6113997f0c1b7d87b37bce4b9d582cc7dfdd9aa4ac2fbcc3fccaf62e849e9e6a527fc879a7a601a0fbbe8ffb4"}, @preq={0x82, 0x41, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x61, 0xe, 0x5d6, @device_a, 0x10, @value=@broadcast, 0x6, 0xffff0001, 0x3, [{{0x1}, @device_a, 0x4}, {{0x0, 0x0, 0x1}, @device_a, 0x2}, {{}, @broadcast, 0x5}]}}]}, @NL80211_ATTR_IE={0x144, 0x2a, [@cf={0x4, 0x6, {0x2, 0x5, 0x9, 0x72d9}}, @measure_req={0x26, 0xd5, {0xd, 0x3, 0xff, "56f6eef605253ecac1135b7e7fd9432c8255f10dbb241068a0769204f75559efa2a8d70aea3b8c8846751b57dddd9859a9734a57ad9d40089c73bbcb54de9393002268ca7deea1e50d65db18a6a9c19139f4fc116a7d60782f5f9a753792e9a27f6226ec78978a650a3af80f28c720409d52ff23b5ff9fffbd822eb8daa6e5c4a017d381e3e847dbb73e8f916a15f2b3e768170f1d410a460ae35a7fb7e2d6fd2d6d68d470ab649ba83743bde14550a3dc3079240c99f9ddea3c1855670ff87f56254480ed315572ce33f42a09afa0e3a623"}}, @supported_rates={0x1, 0x5, [{0x18, 0x1}, {0x16, 0x1}, {0x9}, {0x6c}, {0x48, 0x1}]}, @ht={0x2d, 0x1a, {0x2, 0x3, 0x5, 0x0, {0x1000, 0x8, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x6a4, 0x6}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @link_id={0x65, 0x12, {@random="efbaec75a948"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xe, 0x5, @device_b, 0x2ce44c18, @value=@device_b, 0x0, 0x6, @broadcast, 0x3}}]}, @NL80211_ATTR_IE={0x11, 0x2a, [@mesh_chsw={0x76, 0x6, {0x82, 0xe, 0x39, 0x7}}, @channel_switch={0x25, 0x3, {0x1, 0xa, 0x9}}]}]}, 0x40c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r4 = accept4(r0, &(0x7f0000000600)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r4) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r5, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "bfd491b2e4"}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040800}, 0xc815) 1.253505618s ago: executing program 4 (id=2048): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfffffffd, 0x5, 0x4}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r3 = socket(0x2c, 0x80000, 0x3) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x42, &(0x7f0000000940)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x69}, @timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x0]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 1.144925619s ago: executing program 1 (id=2049): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x27, 0x3, 0x3) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) (async) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000400)={r3}, 0x42) (async) r6 = socket(0x10, 0x3, 0xffffffff) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e00010a030000000000009b2d"], 0x28}}, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1e2febc4, 0x0, 0x8}, 0x10, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff44, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[], 0x3c}, 0x1, 0xff7f, 0x0, 0x400c804}, 0x4003) 916.488947ms ago: executing program 3 (id=2050): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket(0x2b, 0x1, 0x0) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fcdbdf250c000000200001801400020076657468315f746f5f687372000000000800030003000000"], 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000020000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0c000000ac00000000000000224192b018493e5bba0400000000000000000081000000000000"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240), 0xc30, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x34, r6, 0x431, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c080}, 0x41) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x2}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r8, &(0x7f0000000940)="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", &(0x7f0000000140)=""/8}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000002000000014001a80100005800c000180"], 0x34}}, 0x0) 914.768383ms ago: executing program 1 (id=2051): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4048045) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r4, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0xbde2bf020394933, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x40040) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x9}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xd}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xe}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x24004010) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) ioctl$sock_ax25_SIOCDELRT(r6, 0x890c, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x8, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @bcast]}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x98, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:sshd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:setrans_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r1, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xf9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004811}, 0x8010) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x84, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVICE={0x44, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0x10705}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004}, 0x5) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000ac0)={&(0x7f0000000940), 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa0, r9, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ed}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x8}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c000) bind$l2tp(r6, &(0x7f0000000b00)={0x2, 0x0, @loopback, 0x4}, 0x10) sendmsg$NFC_CMD_LLC_SDREQ(r4, &(0x7f0000001440)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001400)={&(0x7f0000000b80)={0x868, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_SDP={0x1b4, 0x13, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [{0x6, 0x1, '.,'}, {0x8, 0x1, 'nfc\x00'}, {0x4}, {0xe, 0x1, '##&#\']^^{\x00'}, {0x4}, {0xa, 0x1, 'wpan1\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0x4}, {0x5, 0x1, '\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0x25, 0x1, 'system_u:object_r:sshd_exec_t:s0\x00'}, {0x5, 0x1, '\x00'}, {0x9, 0x1, 'IPVS\x00'}]}, {0x2c, 0x0, 0x0, 0x1, [{0xc, 0x1, '[{,].)+('}, {0x6, 0x1, '-['}, {0x9, 0x1, 'IPVS\x00'}, {0x8, 0x1, 'nfc\x00'}]}, {0x78, 0x0, 0x0, 0x1, [{0x9, 0x1, '@}!*,'}, {0x4}, {0x5, 0x1, '['}, {0x9, 0x1, '$))]+'}, {0x25, 0x1, 'system_u:object_r:sshd_exec_t:s0\x00'}, {0xd, 0x1, 'nl802154\x00'}, {0x5, 0x1, 'Y'}, {0xa, 0x1, 'wpan4\x00'}, {0x4}]}, {0x4}, {0x38, 0x0, 0x0, 0x1, [{0x5, 0x1, '{'}, {0x9, 0x1, 'IPVS\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0xa, 0x1, 'wpan4\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x5, 0x1, '&'}]}, {0x3c, 0x0, 0x0, 0x1, [{0x9, 0x1, '^-([]'}, {0x4}, {0x4}, {0x5, 0x1, '\x00'}, {0xa, 0x1, 'wpan4\x00'}, {0xd, 0x1, 'nl802154\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x88, 0x13, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [{0x11, 0x1, '802.15.4 MAC\x00'}, {0x8, 0x1, 'nfc\x00'}, {0x5, 0x1, '\x00'}]}, {0x5c, 0x0, 0x0, 0x1, [{0x9, 0x1, '.[!#-'}, {0xa, 0x1, 'wpan4\x00'}, {0x4}, {0x5, 0x1, '-'}, {0xa, 0x1, 'wpan4\x00'}, {0x9, 0x1, 'IPVS\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x7, 0x1, '\xe7^)'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_LLC_SDP={0x78, 0x13, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan4\x00'}, {0x9, 0x1, 'IPVS\x00'}, {0x25, 0x1, 'system_u:object_r:sshd_exec_t:s0\x00'}, {0x25, 0x1, 'system_u:object_r:sshd_exec_t:s0\x00'}, {0x8, 0x1, '\\%@('}]}]}, @NFC_ATTR_LLC_SDP={0x1c8, 0x13, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [{0xd, 0x1, 'nl802154\x00'}, {0x2b, 0x1, 'system_u:object_r:setrans_var_run_t:s0\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x6, 0x1, ']['}]}, {0x6c, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, 'wpan1\x00'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x6, 0x1, ')^'}, {0xd, 0x1, 'nl802154\x00'}, {0x4}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x9, 0x1, ':@]\'/'}, {0x8, 0x1, 'nfc\x00'}]}, {0x30, 0x0, 0x0, 0x1, [{0x5, 0x1, '\x00'}, {0xa, 0x1, '#(&{\xf9\''}, {0xa, 0x1, 'wpan1\x00'}, {0x9, 0x1, ':/&-$'}]}, {0x60, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, 'wpan4\x00'}, {0xd, 0x1, '--\xc3](&!$\\'}, {0x25, 0x1, 'system_u:object_r:sshd_exec_t:s0\x00'}, {0x4}, {0x6, 0x1, '@('}, {0x5, 0x1, '@'}]}, {0x7c, 0x0, 0x0, 0x1, [{0x9, 0x1, 'IPVS\x00'}, {0x25, 0x1, 'system_u:object_r:sshd_exec_t:s0\x00'}, {0x2b, 0x1, 'system_u:object_r:setrans_var_run_t:s0\x00'}, {0x9, 0x1, '&/&(\r'}, {0x4}, {0x6, 0x1, '@\\'}]}]}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_LLC_SDP={0x1e0, 0x13, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [{0xa, 0x1, '{]\'-,{'}, {0x5, 0x1, '\x00'}, {0x2b, 0x1, 'system_u:object_r:setrans_var_run_t:s0\x00'}, {0x7, 0x1, '{{)'}, {0x8, 0x1, '{)#,'}, {0x9, 0x1, 'IPVS\x00'}, {0x8, 0x1, '{)]\\'}, {0x9, 0x1, 'IPVS\x00'}]}, {0x6c, 0x0, 0x0, 0x1, [{0x7, 0x1, ')/!'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x2b, 0x1, 'system_u:object_r:setrans_var_run_t:s0\x00'}, {0x6, 0x1, '\\:'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x4}]}, {0x18, 0x0, 0x0, 0x1, [{0x6, 0x1, '-^'}, {0x9, 0x1, 'IPVS\x00'}]}, {0x48, 0x0, 0x0, 0x1, [{0x4}, {0x7, 0x1, '^}{'}, {0x25, 0x1, 'system_u:object_r:sshd_exec_t:s0\x00'}, {0xd, 0x1, 'nl802154\x00'}]}, {0xc, 0x0, 0x0, 0x1, [{0x8, 0x1, 'nfc\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0x8, 0x1, 'nfc\x00'}, {0x9, 0x1, 'R)-}!'}, {0x25, 0x1, 'system_u:object_r:sshd_exec_t:s0\x00'}]}, {0x10, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan1\x00'}]}, {0x40, 0x0, 0x0, 0x1, [{0x5, 0x1, ','}, {0x5, 0x1, '&'}, {0x2b, 0x1, 'system_u:object_r:setrans_var_run_t:s0\x00'}]}]}, @NFC_ATTR_LLC_SDP={0x1e8, 0x13, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan4\x00'}, {0x25, 0x1, 'system_u:object_r:sshd_exec_t:s0\x00'}, {0x7, 0x1, '&-#'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0xa, 0x1, 'wpan1\x00'}, {0x6, 0x1, '*)'}]}, {0xc4, 0x0, 0x0, 0x1, [{0x9, 0x1, 'IPVS\x00'}, {0x2b, 0x1, 'system_u:object_r:setrans_var_run_t:s0\x00'}, {0xd, 0x1, 'nl802154\x00'}, {0x9, 0x1, ':$(}^'}, {0x11, 0x1, '802.15.4 MAC\x00'}, {0x9, 0x1, ']#:(\x02'}, {0xa, 0x1, 'wpan4\x00'}, {0x25, 0x1, 'system_u:object_r:sshd_exec_t:s0\x00'}, {0x5, 0x1, '&'}, {0xd, 0x1, 'nl802154\x00'}]}, {0x60, 0x0, 0x0, 0x1, [{0xa, 0x1, 'wpan4\x00'}, {0x5, 0x1, '\x00'}, {0x5, 0x1, '\xa0'}, {0x9, 0x1, '+:\xd5.,'}, {0x6, 0x1, '}$'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, ']]!)'}, {0x5, 0x1, '\x00'}, {0x8, 0x1, 'nfc\x00'}, {0xa, 0x1, 'wpan1\x00'}]}, {0x3c, 0x0, 0x0, 0x1, [{0xa, 0x1, ',}^\',['}, {0xd, 0x1, 'nl802154\x00'}, {0x9, 0x1, 'IPVS\x00'}, {0x6, 0x1, '!-'}, {0x8, 0x1, '%\x1e$\x99'}]}, {0x1c, 0x0, 0x0, 0x1, [{0xc, 0x1, '{@:%&\\\'@'}, {0xa, 0x1, 'wpan1\x00'}]}]}]}, 0x868}, 0x1, 0x0, 0x0, 0x4008000}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x52, &(0x7f0000001480)=0x4, 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r10, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x24, r7, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20000040) recvmmsg$unix(r6, &(0x7f0000001740)=[{{&(0x7f0000001600), 0x6e, &(0x7f0000001680), 0x0, &(0x7f00000016c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x1, 0x40000000, &(0x7f0000001780)={0x0, 0x3938700}) sendto$l2tp(r6, &(0x7f00000017c0)="fecd67c962babbce87678b6d48d086572b5e682f9736695ecb303f0b55ed1d405e1fff0f4343f2af11793335f59071d0ca6a0505176935d71e70273769024acc887c6e03f04844c11b4b772b40f7f522f588cdd69691821b079e216d88c36f5cf82dffbf9f02734a302b71d7d563d287d1deafe930a223c1c57b4274681f4dddd226ec609238c8927188cf7c5a06b571c8bd62ca83262e43f2ae1487b87557ef1626290d14cd3fe65327a18eb4e4096e210c974dd5459706e111335f0edbf8e0f216ee164ddacf3b85f6e039e285d7407f4d4706077e3c4e9c331025417a83ed22d2dfc00c1b7303f47fcd718ad54f25ca123f65dc83", 0xf6, 0x20004410, &(0x7f00000018c0)={0x2, 0x0, @broadcast, 0x4}, 0x10) sendmsg$inet(r13, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001900)="6148d1fac52d3e5abfe66df390cf6ffefb869e878e82384a45718db50269213c4556ae43304a36b653db486706ced27e96047dfc5c715b4c2e40a5d83f43ad8a69975ef4f2d96d4e1cb8242b08d6388997f21b50e5de653c6b6d3e54ed9cbc668bb07c402a8d170c232fcddf31c49a6ce76186b738a1ec5c9985964d8512ab46ced312f04072d97fe14da16abfce858d3306e8a657975d49efbd3dedc7aa1a41890a9ad0bb97c24144c71e899fc605ca09de47312db9433319567c6af6f32044993f7f3eb4a8d032009f3a20c10b9a3bb66e232c8d7ef581b950709528861290be2fda9aed7e13d3d50b42", 0xeb}, {&(0x7f0000001a00)="a700746a91ce7f309f5110fa9fb6cbb4cb313bab2bf1c9ea60c4a305d8380884e3889a3080600255c59a1c1d43023712a16ffa50f7dc903453d739598483b3d0d0eb9fff117dca97d5a4ff2362a09364360216cc6edbc78cb167a11c5ee5365e42bdcdac", 0x64}, {&(0x7f0000001a80)="6b0da243ac", 0x5}, {&(0x7f0000001ac0)="73db3da10127f36e55069ca66eb70bdd6a0bc056d4f43d5c7605424c1a25efd5ba92710278e4a1bed7c259e45cf5f245b3116ae5d0465d216be3b055441f283b9d7e6fbdd629a96cd3dad1b20e0a1abfed977ad3c2d22c4144663f9b4a7c90515c29d04d300d8b24dccecbeb8fad6c801c1d2e58677f6692db4a5ee6e4a9a942cea2e810fc06290e9fb1558f944850883e7429dd98ff1620e45f4db55be2829a06acad07f3a7df6ab240c5928b7d8cd99d948c3e561e2ee648b7d24f7855fd021bc348641e30361f8730ea676edbd5ce402ea12e2e9a04676d72781c7a022568869b564b2071dacc5dc18acfb7e6dc9a203b71b909", 0xf5}], 0x4, &(0x7f0000001c00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x84, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x86, 0x12, "c43f88b675a6a04b0e3323ba74fea651"}, @timestamp={0x44, 0x24, 0xc8, 0x0, 0x4, [0x1, 0x101, 0x100, 0x7, 0x4, 0xffffff7f, 0x9, 0x4]}, @ssrr={0x89, 0x7, 0x8f, [@local]}, @noop, @timestamp={0x44, 0x20, 0x53, 0x0, 0xb, [0x4, 0x6, 0x4, 0x2, 0x5, 0x10, 0xffff8001]}, @rr={0x7, 0xb, 0x2d, [@loopback, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x39f8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x118}, 0x4000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001e40)={r13, 0x58, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r12, &(0x7f0000002040)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0x98, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000005}, 0x10) 893.330942ms ago: executing program 2 (id=2052): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001500), &(0x7f0000001540)=0x4) sendmmsg$inet(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000040)="a7a0eb311b084209ac24ebae79cf4542ac90befa850a3698bc024ff0dae3722d0fb6614e0945cf2b1d746e956769d7869dec3962aa4f49a94cf748d18d6b94dc1a1c4b", 0x43}, {&(0x7f00000000c0)="a220b91b00a00d7dbbc6a67480fc9ee2b7e87d9259a66ef34ed3e78b9f2c687ed0dd27d5f5d517db5abf06359ac632202b423f74943d7460b9d79ac6e809e13fb3bd6a71b0054064fd", 0x49}, {&(0x7f0000000140)="7d0a1ea3e6b6f07478793552449366f240e617d71124f5750c35945333bf9d098f0d4cb8844078b297d85f70181362c0b0d27eb69fea4979b84dd0e5cded60cb669c9a38d9f9254225808cb9beff4577e0085723d0e12facfb82a8b508dd7bfc45e579390453dbe79d0154eab5f57228bd145d90a6fc8a675e6da273fbd718fbafc57eb1ac2514031cd8fe04e94295776b00f9c24dc676f6c88a5038879b4b6957b86faa05a17d9a6e15b4aec9a5b1b81e3bdc66dc1caa6ab579d5f2f5f21fe50bacb061908fd1b712b74620bba4bd6b42db4470ddb3ddaa79b3f825b0d1", 0xde}, {&(0x7f0000000240)="1497d699a47690ee0a3455eacbb707ac35988f69025d519140e044d550d408e36e3ab528", 0x24}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="bf6889f0b64c8fe0959eb5bfb228929dafbe9a5c561351477fdd3b31474c903cdd25f4b732385ed43e1000ec1f32e6bf3ddaa72a0c77d1a142dccfa2aa2face9da84fa02a4e5a7d38a032e95f12c06583228d200772cf42fac6727da16f3c64608e374273a92bbb3f5c008c55c9baab549b4bd55bd21ca2f2f64f8676b7735b203b860d264f95487d32ea6111b2e7e2b9462ecb6a1ba9476c780a1d6941576e241af6aeb4ac10510ea3d2ad45008c2c23aa11bb3ee66398add50f8011a0ad521ff3811d7711a0327ea07d9", 0xcb}, {&(0x7f0000001380)="3bf214953ee96abac1d6382f351d6306bb59c424f257df4c7c728bd67bf0c1309a1179cc46226670b3f52a4adc16b74b3543d85d5d6aba61f6b0d583a2f323981c0b894b6fb834f0fdac9c76e8795e39b18388351abde4bbac5b64b2c4007a0704985a746958f70350758ad50bea497cd76e72444bbe1704249d7f5686eff1b324a856d47d974807249c02beac83fdb57e9ff565b587325de21e5f5408c8beea6e3c8f83feeacd6e4cc1729221871ca19e81459d7bfc4102cb28be458a6837a4626d3f951c153b74b206b9a3c6016a588a7bc57e48dfe502cff41e49d4139940693727c3b6941298f62ed7493559a99f6344c287fa8bebd7a608", 0xfa}], 0x7, &(0x7f0000001640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5d}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@noop, @noop, @ssrr={0x89, 0xb, 0x39, [@loopback, @broadcast]}, @timestamp_prespec={0x44, 0x1c, 0x4d, 0x3, 0x6, [{@multicast1, 0x1}, {@multicast1, 0xd}, {@remote, 0x10000}]}, @timestamp={0x44, 0x14, 0xec, 0x0, 0x1, [0xfffffff7, 0x2, 0x7f, 0x7]}, @cipso={0x86, 0x18, 0x0, [{0x6, 0x12, "737e41ba0261dc5bedc7877313a40e04"}]}, @ra={0x94, 0x4}, @end]}}}], 0x88}}], 0x2, 0x0) 823.283441ms ago: executing program 4 (id=2053): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="30000000718a25a7b5752ea6b203318bc407cba1b4ddfeca0000000000000007000000", @ANYRES32=r2, @ANYRESDEC=r1], 0x30}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000480)={'bond_slave_1\x00', 0x8001}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) read(r0, &(0x7f0000000840)=""/4096, 0x1000) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x20, r6, 0x809, 0x70bd29, 0x3, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4004004) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x234, r6, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x15c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}]}}, {{0x8, 0x1, r2}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0x10}, 0x4004) 660.351579ms ago: executing program 2 (id=2054): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="050000004000"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000009c40)={0x0, 0x0, &(0x7f0000007100)={&(0x7f0000000440)=ANY=[@ANYBLOB="05000000030000000000366b000000004ddcdb0fe30449dfae344f018fbd0b3a269f3413afdfd06eee563b55ef3da24652455c0407615c96d955938feaefd0c77992dfacaf4e7099939eeb4de67bca6fa9578444402727102cbe35a13333d9e27262e2a4c35fffcbfc362c296b2e23c783794532d0c9244a05f5796b98e3bd5e2a60e32e8be7aef189e37b6d002aece2a4c99f67f8ff24130811ca547551bd64b9fef1", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000003a956e2d04008000"], 0x48}}, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000580)={'pimreg\x00', 0x200}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff5c6f00007dd9050000000c000000000000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=0x10) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000380)={{0x62, @multicast2, 0x4e20, 0x1, 'lc\x00', 0x20, 0x0, 0x40}, {@local, 0x4e21, 0x10000, 0x8001, 0x4, 0xb0f}}, 0x44) close(r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x0, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r7, 0x101, 0x9, &(0x7f0000000040)=0xe53, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000006c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xba}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r11 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x19b, @private0={0xfc, 0x0, '\x00', 0x1}, 0x441, 0x2}, 0x20) close(r10) r12 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'netdevsim0\x00'}) 585.12525ms ago: executing program 0 (id=2055): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xff06, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000027f3d351b3b4f8fc64510503006800010025bd7000feffffff0a000000000000000c0008800500080000000200", @ANYRES32=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) (async) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x2, r4, 0x1, 0xd}, 0x14) 532.650441ms ago: executing program 3 (id=2056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a4000000060a090400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 384.780935ms ago: executing program 4 (id=2057): r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80800) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={@rand_addr=0x64010100, 0x1, 0x0, 0x40, 0x0, [{@broadcast}, {@empty}, {@local}, {@initdev}]}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x34}}, 0x0) 383.306249ms ago: executing program 1 (id=2058): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x58, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @remote, [@srh={0x6c, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}]}}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x6, 0x7, 0x9, "5d6b6080d44a"}}) 380.97958ms ago: executing program 0 (id=2059): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa006a359d77d8259bea4020644086dd60cb653e00283afffe86000000000000fdceea9d00000000fe8000000000000000000000000000aa890090780000000020a2ff00000000000000000000000000fc0100"/106], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) r4 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="e9000014000175d600050001000000040001"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xf4, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf88}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xc7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000081}, 0x20040001) 264.285299ms ago: executing program 2 (id=2060): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "0300", "c0b6c5b29c38d41ac2fc7ddf972d00", "c1799d70", "bb0001000100"}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) (async) listen(r4, 0x8) socket$netlink(0x10, 0x3, 0x4) (async) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x3) shutdown(r3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind$netrom(r2, &(0x7f0000000240)={{0x3, @null, 0x6}, [@bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 247.610164ms ago: executing program 3 (id=2061): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00'], 0x58}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 180.601218ms ago: executing program 1 (id=2062): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r3, @ANYBLOB="049c01000750050008001300", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r4) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x5, 0x5}, 0x14) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2713, &(0x7f00000002c0)=""/102399, &(0x7f0000000280)=0x18fff) 141.503047ms ago: executing program 0 (id=2063): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x88, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xb) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000080)=@netrom={'nr', 0x0}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5d}}}}, [""]}, 0x20}}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000240)=@ethtool_rxnfc={0x30, 0x9, 0x1, {0x10, @usr_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x978, 0x1, 0x1, 0x40}, {0x0, @remote, 0x0, 0x5, [0xfffffffc, 0x2]}, @ether_spec={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, 0x28ce}, {0x0, @local, 0x7, 0x8000, [0x80000000, 0x4]}, 0x8001, 0x1c}, 0x1, [0x401]}}) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000340)=0x3365609f, &(0x7f0000000380)=0x4) r5 = epoll_create1(0x0) readv(r5, &(0x7f00000027c0)=[{&(0x7f00000003c0)=""/65, 0x41}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/61, 0x3d}, {&(0x7f0000001480)=""/168, 0xa8}, {&(0x7f0000001540)=""/38, 0x26}, {&(0x7f0000001580)=""/170, 0xaa}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/229, 0xe5}, {&(0x7f0000002740)=""/31, 0x1f}, {&(0x7f0000002780)=""/29, 0x1d}], 0xa) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000002880), r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002940)={{r5, 0xffffffffffffffff}, &(0x7f00000028c0), &(0x7f0000002900)}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002b40)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002c00)=@bloom_filter={0x1e, 0xff, 0x7, 0x8d, 0xa211, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0xe}, 0x50) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002cc0)=@generic={&(0x7f0000002c80)='./file0\x00', 0x0, 0x10}, 0x18) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002d40)=@generic={&(0x7f0000002d00)='./file0\x00'}, 0x18) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002dc0)=@o_path={&(0x7f0000002d80)='./file0\x00', 0x0, 0x8, r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002ec0)={0x6, 0x1e, &(0x7f0000002980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0xe30b}, {}, {}, [@exit, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002a80)='GPL\x00', 0xfff, 0x2c, &(0x7f0000002ac0)=""/44, 0x41100, 0xc3, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002b80)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000002bc0)={0x0, 0xf, 0x2, 0xe}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000002e00)=[0x1, r9, r2, 0x1, 0xffffffffffffffff, r10, r11, r12], &(0x7f0000002e40)=[{0x0, 0x3, 0xd}, {0x3, 0x1, 0xf, 0x9}, {0x4, 0x5, 0x1, 0xa}, {0x2, 0x3, 0x3}, {0x2, 0x5, 0xb, 0x4}, {0x4, 0x4, 0x10}, {0x1, 0x2, 0xf}, {0x4, 0x4, 0x3, 0x3}], 0x10, 0x400}, 0x94) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000002f80), 0x8000, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8924, &(0x7f0000002fc0)={'pimreg1\x00', @broadcast}) r14 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000003000)='cpu.pressure\x00', 0x2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r14, 0xc058671e, &(0x7f0000003380)={{'\x00', 0x3}, {0xd814}, 0x100, 0x0, 0x0, &(0x7f0000003040)='./file0\x00', &(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)="eae34d3e00fdd781f5ac03f0ec54d0e49d91fc73c173895e1d95d226c52a1a9913392c12f227c74f8e014b2323c93a1d4b3bd987df879139a589a677d8", 0x3d, 0x0, &(0x7f0000003100)={0x2, 0x17d, {0x0, 0xc, 0xff, "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", 0x71, "2f83a3cbd52a015243fd0616677c18890e96351c33f561b8dcb27de781157b429863a7127c4185f20afede72f9da332c4f150bad0779c9bf177ab5ec493539ec6598c1b2ced22496c71604ab90caaddd2ac06fc0f411e910bdc04a22bca3a95a4217b8b8f8cbce16886f481e4d2c319684"}, 0xbe, "042567cc7c790a6fa69dccc2b7f0c38bf2f8f557f12a488b27dca72ad36d878a180102d44f28a67a20bcbac23ff543ee36aad7da92a8eb22c12a4aea0ac195dd91224c509b8547cd122ca5d9b5307df0036dd7e8cbd1d268caf04b25f70e17ccf998bec61f01e572ffd29d0f498f297e905e226e28c023ebec623264b3925971b8eda8aabbb87a45e6ee11eeefaf05143cb28ea53be1df879346bd0dc4117a5d4a67e04b12efb8e8ea63a67c15618f8be12024e2b588c14f0ee3f5d7eecb"}, 0x247}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000003480)={'ipvlan0\x00', &(0x7f0000003400)=@ethtool_eeprom={0x43, 0x6, 0x7b9, 0x46, "ab8f4d7adde3639079f029695fc536ad909cad29ee5ae6339fedbd5a461da757bef6c6e07a8698f862d2a663e229b69dae9e3c3384c793caade0e80d546a4ce0c909e7ea7767"}}) r15 = socket(0x2fe866277564a532, 0x5, 0x48f) getsockopt$bt_l2cap_L2CAP_CONNINFO(r15, 0x6, 0x2, &(0x7f00000034c0), &(0x7f0000003500)=0x6) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000037c0)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003780)={&(0x7f0000003580)={0x1c4, r4, 0x204, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0x93, 0x5b, "b6099f52acc1ee918ee83a6557a1a347d19679d482935e4f7b71caf3dce149b2d4c16280fe2e7bb379837de5fedc009e4ebf424444216a14755998ee8c5491455f7c1a87865e8592bb97656c4f2b11707062753750656cc25e2d49c8f5a5537360cc25b1e7b210e9a27f5cc619f220cdfcccb71278aabf233c7176901fec9508324a0cd987cf995921788ad7096d3c"}, @NL80211_ATTR_FRAME_MATCH={0x102, 0x5b, "a5d21e17263d6425fd5b4fa86c9d4c53dd163837764fd135bff26580369e15d062118bb738448e88490c3ed45da729f7c31ef6835d5e90ed4d4c48491254791a8d9aea956c70d0dd9c566f87da73867ef35154e2d599225d4c74745306298edd8e20ad1c586bfbbc956db4cad29405dcf29002a5af438a41fc42182dc6532e7c2b514cb4fd10fa89428d057935490b2ef44c4cf7252d826d21c837c3c2b11186126b2d421fbf5fc48570475c5c8354bfa26cd1f4c06c88a7743ef5ebdc927b17123fa5b79d4cee2d9f3af4654751402ed1a2516666dd566c08bcf27f2e261a508bbf09143f1255fbdfe4e59e118e35b1b7f51769e800c40afdcff999ac3a"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) 117.281714ms ago: executing program 2 (id=2064): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000080000007f00000000000000", @ANYRES32, @ANYBLOB="000000bf7af6033f5415c5060000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r7], 0x30}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000200012800e000100697036677265746170"], 0x40}}, 0x0) sendto$inet(r6, &(0x7f00000000c0)="d2664e3de44e5781659d1c2224a19de44fba87cf2fcf751c9b218685", 0xffffffffffffffe7, 0x2c000891, 0x0, 0x0) shutdown(r6, 0x1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008001) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000000300000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b000100627269646765676d63b7710000100002800c0021007d000000000000006af71c7a19ea31f5cc181319ac1ed0f3f4fe34a7450766a34b91000000007c898eefed5f50e572912595ff2a2c21068222208b5be610f5161a2ec33e6cf6d590dcf25c0c77c5edc90a4069f5f6c900cac49c8e012027d07d2da13e8145333865dd1f71a821a257302af8e4daa2791dc1f4bbf09f132182fad337e1044653a1993268eafcd59963bd3d47c801187bd6c34c40"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000400005800000000fdffff6ce5437d000500000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000024980000e00900001800000008000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f0000000200)=""/236, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) 403.891µs ago: executing program 1 (id=2065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@getchain={0x4c, 0x66, 0x10, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0x5, 0xe}, {0xd, 0x1}}, [{0x8, 0xb, 0x40}, {0x8, 0xb, 0xfffffffb}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x3}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0904000000000000000002000000540004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d6574610000000014000280080002400000000808000140f6ffff0f0900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000"], 0xc8}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x11fc, 0x2c, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1}, {0x1}, {0xe, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_basic={{0xa}, {0x11bc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0xb}}, @TCA_BASIC_EMATCHES={0x1198, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfffe, 0x1, 0x7}, {0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0x10}, {{0x1fff4f56, 0x1, 0x1, 0x1}, {0x1ffffff8, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x10b8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x98, 0x2, 0x0, 0x0, {{0xf, 0x0, 0x8}, "5bbd5834b7787de7665cb72a42f357c3445b0c3b7e21445ed16f3e1527b8d02f4c5c262acbd9560e19c5b2cfeb1cf699f0131755d2940a4e31d98580e459ee06a156276015aae4563c7a53978bc53bccb6d68777ad7386111045dd7baca76074c4823a4e400d96acd53e56708e82fd2761ef831e94a93dcb2d1209be58a39eca8a8c08b03929e268cd137bfa"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0x7}, {0xffffffffffffffff, 0x4}}}, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x8, 0x0, 0x6}, "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"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8e2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb92e}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x78}}, @TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x5}, {0x0, 0x9, 0xff, 0x5, 0x4, 0x1, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x3}, {0x7c, 0xabb2, 0xa, 0x6, 0x9, 0x2, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xf9f3}, {0x18000000, 0x88, 0x200, 0x11e000}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x3}, {{0x0, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x400, 0x1, 0x400}, {0x9, 0xa02, 0x5, 0x5, 0x5, 0x2}}}]}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x66}}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x11fc}, 0x1, 0x0, 0x0, 0x83}, 0x24040084) 0s ago: executing program 4 (id=2066): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d80)={@ifindex, 0xffffffffffffffff, 0x36, 0x100c}, 0x20) (async) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): _0 [ 91.007243][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.034032][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.121026][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.128032][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.155039][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.192470][ T5869] hsr_slave_0: entered promiscuous mode [ 91.198852][ T5869] hsr_slave_1: entered promiscuous mode [ 91.205353][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 91.211123][ T5869] Cannot create hsr debugfs directory [ 91.308956][ T5870] hsr_slave_0: entered promiscuous mode [ 91.316584][ T5870] hsr_slave_1: entered promiscuous mode [ 91.323112][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 91.328876][ T5870] Cannot create hsr debugfs directory [ 91.393101][ T5871] hsr_slave_0: entered promiscuous mode [ 91.399737][ T5871] hsr_slave_1: entered promiscuous mode [ 91.405955][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 91.411795][ T5871] Cannot create hsr debugfs directory [ 91.904985][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.920620][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.951505][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.975832][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.026576][ T5868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.039009][ T5868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.054201][ T5868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.085233][ T5868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.145174][ T43] cfg80211: failed to load regulatory.db [ 92.185612][ T5869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.198595][ T5869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.219592][ T5882] Bluetooth: hci1: command tx timeout [ 92.220597][ T5872] Bluetooth: hci0: command tx timeout [ 92.239066][ T5869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.249237][ T5869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.299597][ T5882] Bluetooth: hci3: command tx timeout [ 92.300748][ T5872] Bluetooth: hci2: command tx timeout [ 92.310468][ T5882] Bluetooth: hci4: command tx timeout [ 92.354805][ T5870] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.372734][ T5870] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.386578][ T5870] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.434930][ T5870] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.528557][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.585680][ T5871] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.598015][ T5871] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.611480][ T5871] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.623724][ T5871] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.655171][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.742013][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.749294][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.763420][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.816073][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.828769][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.835984][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.876358][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.895897][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.903085][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.938772][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.945978][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.016635][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.049123][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.103780][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.111114][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.134804][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.203203][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.210461][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.225610][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.232894][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.264927][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.317694][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.324936][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.398367][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.463141][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.470391][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.518674][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.525943][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.554576][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.931613][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.138350][ T5868] veth0_vlan: entered promiscuous mode [ 94.192107][ T5868] veth1_vlan: entered promiscuous mode [ 94.302677][ T5872] Bluetooth: hci0: command tx timeout [ 94.308236][ T5872] Bluetooth: hci1: command tx timeout [ 94.367887][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.382809][ T5872] Bluetooth: hci2: command tx timeout [ 94.382993][ T5882] Bluetooth: hci4: command tx timeout [ 94.388258][ T5872] Bluetooth: hci3: command tx timeout [ 94.408853][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.421547][ T5868] veth0_macvtap: entered promiscuous mode [ 94.467638][ T5868] veth1_macvtap: entered promiscuous mode [ 94.544426][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.555911][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.571723][ T5863] veth0_vlan: entered promiscuous mode [ 94.603517][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.636751][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.648024][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.662438][ T5869] veth0_vlan: entered promiscuous mode [ 94.672353][ T5863] veth1_vlan: entered promiscuous mode [ 94.684311][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.693647][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.771690][ T5869] veth1_vlan: entered promiscuous mode [ 94.793166][ T5870] veth0_vlan: entered promiscuous mode [ 94.839119][ T5871] veth0_vlan: entered promiscuous mode [ 94.867285][ T5870] veth1_vlan: entered promiscuous mode [ 94.906034][ T5871] veth1_vlan: entered promiscuous mode [ 94.918431][ T5863] veth0_macvtap: entered promiscuous mode [ 94.922913][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.938902][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.997900][ T5863] veth1_macvtap: entered promiscuous mode [ 95.004021][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.020609][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.028396][ T5869] veth0_macvtap: entered promiscuous mode [ 95.052406][ T5869] veth1_macvtap: entered promiscuous mode [ 95.086481][ T5870] veth0_macvtap: entered promiscuous mode [ 95.118172][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.138007][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.171494][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.195770][ T5870] veth1_macvtap: entered promiscuous mode [ 95.207613][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.267673][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.317924][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.327678][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.347892][ T5871] veth0_macvtap: entered promiscuous mode [ 95.366801][ T5871] veth1_macvtap: entered promiscuous mode [ 95.386274][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.417905][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.436077][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.447735][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.486377][ T5988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6'. [ 95.506643][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.527314][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.542861][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.556450][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.610285][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.662089][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.684502][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.704310][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.741202][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.750686][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.788453][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 95.820814][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.831743][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.845168][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.854800][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.867205][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.880568][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.023715][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.056779][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.099150][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.132900][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.279113][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.301421][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.380200][ T5878] Bluetooth: hci1: command tx timeout [ 96.385835][ T5872] Bluetooth: hci0: command tx timeout [ 96.429293][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.432537][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.450363][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.461434][ T5872] Bluetooth: hci3: command tx timeout [ 96.466896][ T5872] Bluetooth: hci4: command tx timeout [ 96.472406][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.480555][ T5878] Bluetooth: hci2: command tx timeout [ 96.518470][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.537438][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.650638][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.658525][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.821141][ T6010] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 97.064776][ T6017] tipc: Started in network mode [ 97.082746][ T6017] tipc: Node identity b267ac653014, cluster identity 4711 [ 97.107947][ T6017] tipc: Enabled bearer , priority 0 [ 97.125727][ T6023] syzkaller0: entered promiscuous mode [ 97.132622][ T6023] syzkaller0: entered allmulticast mode [ 97.155267][ T6025] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.178755][ T6017] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 97.310170][ T6017] tipc: Resetting bearer [ 97.416418][ T6036] netlink: 104 bytes leftover after parsing attributes in process `syz.2.14'. [ 97.467074][ T6032] tipc: Resetting bearer [ 97.537333][ T6032] tipc: Disabling bearer [ 97.634521][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'. [ 97.640652][ T6013] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 97.872015][ T6049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21'. [ 97.886181][ T6055] netlink: 'syz.0.23': attribute type 1 has an invalid length. [ 97.894412][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 97.918134][ T6053] dummy0: entered promiscuous mode [ 97.956311][ T6053] batadv_slave_1: entered promiscuous mode [ 98.154423][ T6067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25'. [ 99.376349][ T6126] netlink: 'syz.0.37': attribute type 39 has an invalid length. [ 99.631848][ T6140] netlink: 60 bytes leftover after parsing attributes in process `syz.1.43'. [ 99.679349][ T6146] netlink: 60 bytes leftover after parsing attributes in process `syz.1.43'. [ 99.718606][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 100.277932][ T6162] syz.1.50 uses obsolete (PF_INET,SOCK_PACKET) [ 100.294319][ T6162] syzkaller1: entered promiscuous mode [ 100.330907][ T6162] syzkaller1: entered allmulticast mode [ 100.705979][ T6197] Zero length message leads to an empty skb [ 101.055457][ T6205] __nla_validate_parse: 1 callbacks suppressed [ 101.055478][ T6205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.59'. [ 101.239293][ T6217] netlink: 128 bytes leftover after parsing attributes in process `syz.2.63'. [ 101.284568][ T6218] delete_channel: no stack [ 101.296970][ T6217] netlink: 348 bytes leftover after parsing attributes in process `syz.2.63'. [ 101.326143][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'. [ 101.592423][ T6233] netlink: 24 bytes leftover after parsing attributes in process `syz.4.67'. [ 101.633865][ T6232] netlink: 'syz.4.67': attribute type 6 has an invalid length. [ 101.815659][ T6243] sctp: [Deprecated]: syz.3.70 (pid 6243) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.815659][ T6243] Use struct sctp_sack_info instead [ 101.874905][ T6246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.72'. [ 101.978713][ T6213] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 102.279201][ T6258] netlink: 191164 bytes leftover after parsing attributes in process `syz.1.75'. [ 102.407877][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 102.450161][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 102.487014][ T6269] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.79'. [ 102.535212][ T6272] netlink: 'syz.1.80': attribute type 10 has an invalid length. [ 102.657474][ T6276] netlink: 'syz.4.82': attribute type 1 has an invalid length. [ 102.879880][ T6284] netlink: 'syz.0.83': attribute type 1 has an invalid length. [ 102.887490][ T6284] netlink: 'syz.0.83': attribute type 2 has an invalid length. [ 102.942732][ T6290] netlink: 'syz.0.83': attribute type 1 has an invalid length. [ 102.952678][ T6290] netlink: 'syz.0.83': attribute type 2 has an invalid length. [ 103.125089][ T6297] netlink: 'syz.1.87': attribute type 11 has an invalid length. [ 103.173730][ T6297] netlink: 'syz.1.87': attribute type 11 has an invalid length. [ 103.410864][ T6317] netlink: 'syz.1.87': attribute type 1 has an invalid length. [ 103.442552][ T6297] netlink: 'syz.1.87': attribute type 33 has an invalid length. [ 103.911205][ T6334] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.046005][ T6321] warning: `syz.3.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.231710][ T6351] netlink: 'syz.1.101': attribute type 1 has an invalid length. [ 105.971158][ T6386] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 106.353918][ T6399] __nla_validate_parse: 9 callbacks suppressed [ 106.353941][ T6399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.118'. [ 106.906649][ T6422] syzkaller1: entered promiscuous mode [ 106.921684][ T6422] syzkaller1: entered allmulticast mode [ 106.996655][ T6425] team0: Device vti0 is of different type [ 107.017434][ T6432] trusted_key: syz.3.124 sent an empty control message without MSG_MORE. [ 107.478887][ T6447] Bluetooth: MGMT ver 1.23 [ 107.747244][ T6455] netlink: 'syz.0.130': attribute type 1 has an invalid length. [ 107.897255][ T6455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.942450][ T6459] bond1: (slave gretap1): making interface the new active one [ 107.952729][ T6459] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 108.009139][ T6462] macvtap1: entered promiscuous mode [ 108.031472][ T6462] vlan0: entered promiscuous mode [ 108.054845][ T6462] team0: Device macvtap1 failed to register rx_handler [ 108.074167][ T6462] vlan0: left promiscuous mode [ 108.158129][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 108.180983][ T6478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 108.538956][ T6471] syzkaller0: entered promiscuous mode [ 108.561054][ T6471] syzkaller0: entered allmulticast mode [ 108.717244][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 108.763863][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 108.807899][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.137'. [ 110.311148][ T6504] netlink: 'syz.0.140': attribute type 3 has an invalid length. [ 110.652149][ T6535] netlink: 'syz.0.144': attribute type 13 has an invalid length. [ 110.761321][ T6535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.786629][ T6532] tipc: Started in network mode [ 110.816151][ T6532] tipc: Node identity a217361ddb17, cluster identity 4711 [ 110.843514][ T6532] tipc: Enabled bearer , priority 0 [ 110.868329][ T6536] syzkaller0: entered promiscuous mode [ 110.878430][ T6536] syzkaller0: entered allmulticast mode [ 110.987333][ T6525] tipc: Resetting bearer [ 111.035997][ T6523] tipc: Resetting bearer [ 111.112754][ T6523] tipc: Disabling bearer [ 111.978361][ T6576] netlink: 32 bytes leftover after parsing attributes in process `syz.1.153'. [ 112.046024][ T6573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.152'. [ 112.644482][ T6583] tipc: Started in network mode [ 112.650002][ T6583] tipc: Node identity 5ab920dfc423, cluster identity 4711 [ 112.668414][ T6583] tipc: Enabled bearer , priority 0 [ 112.713770][ T6590] syzkaller0: entered promiscuous mode [ 112.731728][ T6590] syzkaller0: entered allmulticast mode [ 112.781986][ T6583] tipc: Resetting bearer [ 112.812871][ T6600] tipc: Enabled bearer , priority 0 [ 112.845133][ T6601] syzkaller0: entered promiscuous mode [ 112.860834][ T6601] syzkaller0: entered allmulticast mode [ 112.957044][ T6598] tipc: Resetting bearer [ 113.003600][ T6598] tipc: Disabling bearer [ 113.058143][ T6582] tipc: Resetting bearer [ 113.143116][ T6582] tipc: Disabling bearer [ 113.352825][ T6621] netlink: 3 bytes leftover after parsing attributes in process `syz.2.166'. [ 113.396367][ T6621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.761761][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 114.030822][ T6650] netlink: 'syz.4.175': attribute type 1 has an invalid length. [ 114.052172][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 114.319012][ T6660] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 114.469932][ T6672] netlink: 'syz.1.183': attribute type 1 has an invalid length. [ 114.477640][ T6672] netlink: 140 bytes leftover after parsing attributes in process `syz.1.183'. [ 114.537065][ T6672] netlink: 'syz.1.183': attribute type 1 has an invalid length. [ 114.984674][ T6694] syzkaller0: entered promiscuous mode [ 115.008811][ T6694] syzkaller0: entered allmulticast mode [ 115.379121][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 115.386152][ T6705] netlink: 40 bytes leftover after parsing attributes in process `syz.1.193'. [ 115.388108][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 115.621355][ T6719] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 115.670810][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.679667][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.041213][ T6740] netlink: 56 bytes leftover after parsing attributes in process `syz.1.206'. [ 116.238617][ T6746] tipc: Started in network mode [ 116.251694][ T6746] tipc: Node identity 56d5f604b816, cluster identity 4711 [ 116.259334][ T6746] tipc: Enabled bearer , priority 0 [ 116.307527][ T6746] syzkaller0: entered promiscuous mode [ 116.337239][ T6746] syzkaller0: entered allmulticast mode [ 116.932307][ T6746] tipc: Resetting bearer [ 117.121880][ T6746] tipc: Disabling bearer [ 117.122075][ T6760] __nla_validate_parse: 3 callbacks suppressed [ 117.122089][ T6760] netlink: 44 bytes leftover after parsing attributes in process `syz.1.212'. [ 117.408214][ T6773] netlink: 40 bytes leftover after parsing attributes in process `syz.4.216'. [ 117.461794][ T6775] netlink: 'syz.4.216': attribute type 1 has an invalid length. [ 117.543923][ T6775] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 117.592346][ T6784] netlink: 'syz.0.218': attribute type 1 has an invalid length. [ 117.772241][ T6791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.220'. [ 117.783944][ T6792] netlink: 'syz.2.219': attribute type 1 has an invalid length. [ 117.805895][ T6792] netlink: 212 bytes leftover after parsing attributes in process `syz.2.219'. [ 117.820759][ T6792] netlink: 'syz.2.219': attribute type 1 has an invalid length. [ 117.930688][ T6796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.221'. [ 118.329191][ T6814] nft_compat: unsupported protocol 5 [ 118.388091][ T6814] netlink: 596 bytes leftover after parsing attributes in process `syz.3.225'. [ 118.436196][ T6814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.225'. [ 118.516243][ T6821] bridge0: port 3(syz_tun) entered blocking state [ 118.566233][ T6821] bridge0: port 3(syz_tun) entered disabled state [ 118.607228][ T6823] netlink: 'syz.1.228': attribute type 10 has an invalid length. [ 118.638510][ T6821] syz_tun: entered allmulticast mode [ 118.667263][ T6829] netlink: 'syz.1.228': attribute type 21 has an invalid length. [ 118.697866][ T6821] syz_tun: entered promiscuous mode [ 118.745544][ T6821] bridge0: port 3(syz_tun) entered blocking state [ 118.752476][ T6821] bridge0: port 3(syz_tun) entered forwarding state [ 118.828594][ T6825] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.227'. [ 118.932810][ T6823] bridge0: port 3(syz_tun) entered disabled state [ 118.939736][ T6823] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.947884][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.017103][ T6823] bridge0: port 3(syz_tun) entered blocking state [ 119.024422][ T6823] bridge0: port 3(syz_tun) entered forwarding state [ 119.031633][ T6823] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.038852][ T6823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.046450][ T6823] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.053710][ T6823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.102276][ T6839] netlink: 'syz.3.232': attribute type 1 has an invalid length. [ 119.270931][ T6823] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 119.337926][ T6852] netlink: 104 bytes leftover after parsing attributes in process `syz.2.234'. [ 119.363237][ T6829] netlink: 'syz.1.228': attribute type 6 has an invalid length. [ 119.399278][ T6829] netlink: 132 bytes leftover after parsing attributes in process `syz.1.228'. [ 119.419021][ T6840] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 119.420496][ T6839] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 120.129700][ T6880] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 120.368846][ T6880] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.608479][ T6899] syzkaller1: entered promiscuous mode [ 120.617200][ T6899] syzkaller1: entered allmulticast mode [ 120.838929][ T6913] netlink: 'syz.4.248': attribute type 1 has an invalid length. [ 120.897039][ T6918] dvmrp0: entered allmulticast mode [ 121.326749][ T6928] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.334118][ T6928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.341996][ T6928] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.349193][ T6928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.487001][ T6928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.646826][ T5956] IPVS: starting estimator thread 0... [ 121.759582][ T6952] IPVS: using max 24 ests per chain, 57600 per kthread [ 122.422186][ T6990] __nla_validate_parse: 4 callbacks suppressed [ 122.422209][ T6990] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.267'. [ 122.482931][ T6990] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 122.504944][ T6990] openvswitch: netlink: Message has 6332 unknown bytes. [ 122.634665][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 123.047090][ T7016] netlink: 36 bytes leftover after parsing attributes in process `syz.3.274'. [ 124.065622][ T7065] netlink: 96 bytes leftover after parsing attributes in process `syz.2.281'. [ 124.159656][ T7071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.282'. [ 124.246676][ T7065] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.483352][ T7065] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.637931][ T7065] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.826788][ T7065] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.182371][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.251566][ T7106] delete_channel: no stack [ 125.290831][ T1169] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.192809][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.214901][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.238313][ T7140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.300'. [ 126.447306][ T7150] netlink: 108 bytes leftover after parsing attributes in process `syz.2.303'. [ 126.600958][ T7149] syzkaller0: entered promiscuous mode [ 126.606492][ T7149] syzkaller0: entered allmulticast mode [ 126.860123][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 126.923657][ T7173] validate_nla: 5 callbacks suppressed [ 126.923676][ T7173] netlink: 'syz.4.307': attribute type 11 has an invalid length. [ 127.444770][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'. [ 127.453974][ T7194] vlan1: entered allmulticast mode [ 127.459133][ T7194] veth0_vlan: entered allmulticast mode [ 127.624085][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'. [ 127.637892][ T1169] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.693203][ T1169] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.759553][ T1169] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.822324][ T1155] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.846071][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.317'. [ 128.412510][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.324'. [ 128.423578][ T7234] netlink: 'syz.1.323': attribute type 2 has an invalid length. [ 128.442289][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.324'. [ 128.452911][ T7234] netlink: 244 bytes leftover after parsing attributes in process `syz.1.323'. [ 128.480068][ T7233] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 128.520254][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 128.570130][ T7237] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 128.598073][ T7237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.668223][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'. [ 128.708888][ T7242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'. [ 128.845132][ T7250] netlink: 'syz.4.329': attribute type 10 has an invalid length. [ 128.966906][ T7250] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 129.359315][ T7275] netlink: 'syz.2.335': attribute type 1 has an invalid length. [ 129.394816][ T7275] netlink: 'syz.2.335': attribute type 10 has an invalid length. [ 129.407243][ T7275] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.419838][ T7275] bridge_slave_1: left allmulticast mode [ 129.425534][ T7275] bridge_slave_1: left promiscuous mode [ 129.482758][ T7275] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.546627][ T7275] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 129.591722][ T7283] netlink: 'syz.0.337': attribute type 11 has an invalid length. [ 129.772094][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'. [ 129.998831][ T7292] macvtap1: entered promiscuous mode [ 130.041811][ T7292] vlan0: entered promiscuous mode [ 130.062027][ T7292] team0: Device macvtap1 failed to register rx_handler [ 130.083541][ T7292] vlan0: left promiscuous mode [ 130.158969][ T7296] macvtap1: entered promiscuous mode [ 130.165775][ T7296] vlan0: entered promiscuous mode [ 130.175299][ T7296] team0: Device macvtap1 failed to register rx_handler [ 130.184670][ T7296] vlan0: left promiscuous mode [ 130.294867][ T7305] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20001 [ 130.685779][ T7320] bond0: entered promiscuous mode [ 130.714436][ T7320] bond_slave_0: entered promiscuous mode [ 130.724920][ T7320] bond_slave_1: entered promiscuous mode [ 130.738040][ T7320] bond0: left promiscuous mode [ 130.753067][ T7320] bond_slave_0: left promiscuous mode [ 130.758900][ T7320] bond_slave_1: left promiscuous mode [ 131.308879][ T7349] Unsupported xt match [ 131.308902][ T7349] unable to load match [ 133.113140][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.122237][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.402006][ T7411] __nla_validate_parse: 11 callbacks suppressed [ 190.402027][ T7411] netlink: 268 bytes leftover after parsing attributes in process `syz.2.367'. [ 190.894899][ T7442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.376'. [ 190.932536][ T7442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.376'. [ 191.217288][ T7459] netlink: 32 bytes leftover after parsing attributes in process `syz.1.383'. [ 191.943158][ T7489] openvswitch: netlink: Unknown key attributes 2 [ 192.135311][ T7494] blkio.reset_stats is deprecated [ 192.926672][ T7510] netlink: 168 bytes leftover after parsing attributes in process `syz.3.394'. [ 193.119718][ T7499] tipc: Enabled bearer , priority 0 [ 193.141313][ T7500] syzkaller0: entered promiscuous mode [ 193.153121][ T7500] syzkaller0: entered allmulticast mode [ 193.190289][ T7505] tipc: Resetting bearer [ 193.418776][ T7505] tipc: Resetting bearer [ 193.453892][ T7505] tipc: Disabling bearer [ 193.940153][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 193.983574][ T7545] netlink: 244 bytes leftover after parsing attributes in process `syz.4.405'. [ 194.244460][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 194.331439][ T7557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.550107][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.560555][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.842931][ T7580] netlink: 'syz.1.416': attribute type 1 has an invalid length. [ 195.031155][ T7584] 8021q: VLANs not supported on ip6tnl0 [ 196.254226][ T7647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.465543][ T7656] Driver unsupported XDP return value 0 on prog (id 71) dev N/A, expect packet loss! [ 196.481295][ T7660] netlink: 'syz.0.431': attribute type 14 has an invalid length. [ 196.489214][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 196.530141][ T7660] netlink: 'syz.0.431': attribute type 14 has an invalid length. [ 196.571824][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 196.622508][ T7665] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.433'. [ 197.042536][ T7679] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 197.315443][ T7697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.445'. [ 197.336955][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 197.389609][ T7697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.445'. [ 197.725104][ T7713] netlink: 64 bytes leftover after parsing attributes in process `syz.3.450'. [ 197.733644][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 197.839247][ T7716] team_slave_0: entered promiscuous mode [ 197.845174][ T7716] team_slave_1: entered promiscuous mode [ 198.076402][ T7737] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 198.094518][ T7738] netlink: 'syz.2.457': attribute type 39 has an invalid length. [ 198.122227][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 198.328100][ T7761] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.350879][ T7761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.462'. [ 198.548061][ T7766] ipvlan2: entered allmulticast mode [ 198.612247][ T7766] ip6gretap0: entered allmulticast mode [ 198.653064][ T7770] gtp0: entered promiscuous mode [ 198.669454][ T7770] gtp0: entered allmulticast mode [ 198.707619][ T7766] nbd: device at index 2 is going down [ 199.058105][ T7451] udevd[7451]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 199.327256][ T7766] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 199.578121][ T7819] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 199.744896][ T7825] netlink: 'syz.4.479': attribute type 1 has an invalid length. [ 199.752837][ T7825] netlink: 'syz.4.479': attribute type 3 has an invalid length. [ 199.773234][ T7822] netlink: 'syz.1.478': attribute type 1 has an invalid length. [ 199.878790][ T7822] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.146101][ T7829] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.164106][ T7829] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 200.184957][ T7846] netlink: 'syz.3.483': attribute type 2 has an invalid length. [ 200.206454][ T7829] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 200.208211][ T7846] nbd: must specify at least one socket [ 200.271125][ T7822] veth3: entered promiscuous mode [ 200.284527][ T7822] bond2: (slave veth3): Enslaving as an active interface with a down link [ 200.362123][ T7838] gretap1: entered allmulticast mode [ 200.384787][ T7838] bond2: (slave gretap1): making interface the new active one [ 200.403144][ T7838] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 201.195757][ T7880] unknown channel width for channel at 909000KHz? [ 201.481519][ T7888] bridge_slave_0: left allmulticast mode [ 201.487237][ T7888] bridge_slave_0: left promiscuous mode [ 201.491452][ T7895] netlink: 'syz.0.493': attribute type 1 has an invalid length. [ 201.504719][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.533132][ T7888] bridge_slave_1: left allmulticast mode [ 201.541806][ T7888] bridge_slave_1: left promiscuous mode [ 201.555201][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.617007][ T7888] bond0: (slave bond_slave_0): Releasing backup interface [ 201.741929][ T7888] bond0: (slave bond_slave_1): Releasing backup interface [ 201.824929][ T7888] team0: Port device team_slave_0 removed [ 201.924012][ T7888] team0: Port device team_slave_1 removed [ 201.936762][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.946047][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.958536][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.967221][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.009172][ T7888] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 202.380819][ T7931] __nla_validate_parse: 4 callbacks suppressed [ 202.380839][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 202.649202][ T7945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.510'. [ 203.176544][ T7978] netlink: 'syz.0.515': attribute type 10 has an invalid length. [ 203.245501][ T7978] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.561816][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 203.563185][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.596299][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 203.634069][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.791002][ T7998] hsr_slave_0 (unregistering): left promiscuous mode [ 203.812923][ T7996] vlan2: entered allmulticast mode [ 203.818257][ T7996] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 203.878430][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.887633][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.162475][ T8023] bond0: entered allmulticast mode [ 204.723917][ T8041] syz_tun: left allmulticast mode [ 204.748703][ T8041] syz_tun: left promiscuous mode [ 204.761304][ T8041] bridge0: port 3(syz_tun) entered disabled state [ 204.890702][ T8041] bond0: (slave bridge0): Releasing backup interface [ 204.929224][ T8041] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.936987][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.983417][ T8041] bridge_slave_0: left allmulticast mode [ 205.020026][ T8041] bridge_slave_0: left promiscuous mode [ 205.036371][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.094989][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'. [ 205.133968][ T8041] bridge_slave_1: left allmulticast mode [ 205.144752][ T8058] netlink: 2 bytes leftover after parsing attributes in process `syz.0.539'. [ 205.161211][ T8041] bridge_slave_1: left promiscuous mode [ 205.177217][ T8041] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.246739][ T8041] bond0: (slave bond_slave_0): Releasing backup interface [ 205.287911][ T8041] bond0: (slave bond_slave_1): Releasing backup interface [ 205.337789][ T8041] team0: Port device team_slave_0 removed [ 205.381912][ T8041] team0: Port device team_slave_1 removed [ 205.398719][ T8041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.415015][ T8041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.428611][ T8041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.438938][ T8041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.477186][ T8041] bond2: (slave veth3): Releasing active interface [ 205.484415][ T8041] gretap1: entered promiscuous mode [ 205.521227][ T8041] bond2: (slave gretap1): Releasing active interface [ 205.548557][ T8041] gretap1: left promiscuous mode [ 205.677273][ T8079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.543'. [ 205.929106][ T8088] netlink: 20 bytes leftover after parsing attributes in process `syz.3.547'. [ 205.976487][ T8095] netlink: 44 bytes leftover after parsing attributes in process `syz.4.545'. [ 206.307384][ T8105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.552'. [ 206.611209][ T8115] nbd: illegal input index -8454144 [ 206.632813][ T30] audit: type=1107 audit(1757331830.670:2): pid=8111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='&xG~0SB0O$YkY' [ 207.367574][ T8146] dvmrp0: entered allmulticast mode [ 207.877071][ T8163] netlink: 'syz.4.570': attribute type 10 has an invalid length. [ 207.916899][ T8163] bridge0: port 3(team0) entered blocking state [ 207.934696][ T8163] bridge0: port 3(team0) entered disabled state [ 207.953536][ T8163] team0: entered allmulticast mode [ 207.969927][ T8164] netlink: 'syz.1.569': attribute type 1 has an invalid length. [ 207.994889][ T8163] team_slave_0: entered allmulticast mode [ 208.021612][ T8163] team_slave_1: entered allmulticast mode [ 208.042822][ T8163] team0: entered promiscuous mode [ 208.063634][ T8163] team_slave_0: entered promiscuous mode [ 208.070862][ T8163] team_slave_1: entered promiscuous mode [ 208.146916][ T8173] pim6reg: entered allmulticast mode [ 208.839083][ T8206] __nla_validate_parse: 5 callbacks suppressed [ 208.839102][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 209.718380][ T8240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.586'. [ 209.753435][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.586'. [ 209.979201][ T8252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.594'. [ 210.159998][ T8213] ip6gre1: entered allmulticast mode [ 211.162786][ T8288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.269738][ T8292] netlink: 80 bytes leftover after parsing attributes in process `syz.2.607'. [ 211.408719][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 211.492811][ T8304] tipc: Enabled bearer , priority 0 [ 211.522824][ T8307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.610'. [ 211.575278][ T8303] syzkaller0: entered promiscuous mode [ 211.596027][ T8303] syzkaller0: entered allmulticast mode [ 211.743053][ T8304] tipc: Resetting bearer [ 211.794808][ T8320] netlink: 32 bytes leftover after parsing attributes in process `syz.1.614'. [ 211.857866][ T8304] tipc: Disabling bearer [ 211.918927][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 211.986268][ T5884] Bluetooth: hci4: command 0x0406 tx timeout [ 211.992393][ T5881] Bluetooth: hci3: command 0x0405 tx timeout [ 211.992411][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 211.992466][ T5880] Bluetooth: hci2: command 0x0406 tx timeout [ 212.149255][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 212.741316][ T8371] delete_channel: no stack [ 212.765832][ T8367] tipc: Enabled bearer , priority 0 [ 212.779400][ T8367] syzkaller0: entered promiscuous mode [ 212.799980][ T8367] syzkaller0: entered allmulticast mode [ 212.816677][ T8367] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 212.874170][ T8367] tipc: Resetting bearer [ 212.915110][ T8366] tipc: Resetting bearer [ 213.014435][ T8382] netlink: 'syz.0.632': attribute type 21 has an invalid length. [ 213.061815][ T8366] tipc: Disabling bearer [ 213.108895][ T8387] netlink: 'syz.0.632': attribute type 12 has an invalid length. [ 213.312813][ T8395] IPVS: set_ctl: invalid protocol: 0 172.20.20.29:20001 [ 213.810788][ T8421] netlink: 'syz.3.642': attribute type 16 has an invalid length. [ 213.818583][ T8421] netlink: 'syz.3.642': attribute type 17 has an invalid length. [ 213.846888][ T8416] tipc: Enabled bearer , priority 0 [ 213.973970][ T8421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.020446][ T8416] syzkaller0: entered promiscuous mode [ 214.026105][ T8416] syzkaller0: entered allmulticast mode [ 214.034277][ T8421] netlink: 'syz.3.642': attribute type 16 has an invalid length. [ 214.072306][ T8416] tipc: Resetting bearer [ 214.109900][ T8421] netlink: 'syz.3.642': attribute type 17 has an invalid length. [ 214.111351][ T8416] __nla_validate_parse: 6 callbacks suppressed [ 214.111367][ T8416] netlink: 72 bytes leftover after parsing attributes in process `syz.0.641'. [ 214.165508][ T8421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.191116][ T8421] netlink: 'syz.3.642': attribute type 16 has an invalid length. [ 214.213376][ T8414] tipc: Resetting bearer [ 214.224333][ T8421] netlink: 'syz.3.642': attribute type 17 has an invalid length. [ 214.252504][ T8433] netlink: 'syz.2.646': attribute type 1 has an invalid length. [ 214.253128][ T8414] tipc: Disabling bearer [ 214.283700][ T8421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.303375][ T8421] netlink: 'syz.3.642': attribute type 16 has an invalid length. [ 214.397151][ T8421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.457701][ T8421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.512766][ T8438] tipc: Enabling of bearer rejected, media not registered [ 214.513943][ T8436] netlink: 64 bytes leftover after parsing attributes in process `syz.0.647'. [ 214.578542][ T8443] netlink: 128 bytes leftover after parsing attributes in process `syz.4.649'. [ 214.601415][ T8421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.607659][ T8443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.649'. [ 214.822813][ T8454] team0: Device gtp0 is up. Set it down before adding it as a team port [ 214.960873][ T8455] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 215.063352][ T8451] bond2 (unregistering): Released all slaves [ 215.178253][ T8472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.235633][ T8463] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 215.270701][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.657'. [ 215.646492][ T8488] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.665523][ T8488] bond0: (slave team0): Enslaving as an active interface with an up link [ 215.690747][ T8490] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 215.699951][ T8491] netlink: 48 bytes leftover after parsing attributes in process `syz.4.663'. [ 215.813117][ T8496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.494295][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.670'. [ 217.143496][ T8549] tipc: Failed to remove unknown binding: 66,1,1/0:815258528/815258530 [ 217.185858][ T8549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.681'. [ 217.589517][ T5882] Bluetooth: hci3: command 0x0405 tx timeout [ 218.022565][ T8585] validate_nla: 8 callbacks suppressed [ 218.022584][ T8585] netlink: 'syz.1.693': attribute type 1 has an invalid length. [ 218.084740][ T8586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.692'. [ 218.383773][ T8591] wg2: entered promiscuous mode [ 218.388710][ T8591] wg2: entered allmulticast mode [ 218.445144][ T8595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.777879][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 218.876869][ T8622] sctp: [Deprecated]: syz.3.702 (pid 8622) Use of int in maxseg socket option. [ 218.876869][ T8622] Use struct sctp_assoc_value instead [ 219.434676][ T8646] netlink: 'syz.1.713': attribute type 10 has an invalid length. [ 219.447451][ T8646] netlink: 40 bytes leftover after parsing attributes in process `syz.1.713'. [ 219.500242][ T8646] team0: Port device geneve0 added [ 219.684506][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 219.822679][ T8667] netlink: 'syz.3.720': attribute type 3 has an invalid length. [ 219.866184][ T8667] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.720'. [ 220.479052][ T8700] sch_fq: defrate 0 ignored. [ 220.721789][ T8709] netlink: 116 bytes leftover after parsing attributes in process `syz.2.732'. [ 221.137676][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 221.339167][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 221.479529][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.747'. [ 221.513800][ T8755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.749'. [ 221.548883][ T8751] netlink: 88 bytes leftover after parsing attributes in process `syz.4.747'. [ 221.568833][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.749'. [ 221.835072][ T8771] net veth1_virt_wifi .: renamed from virt_wifi0 [ 222.406892][ T8803] netlink: 'syz.3.762': attribute type 11 has an invalid length. [ 222.755384][ T8816] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 222.877271][ T8822] geneve2: entered promiscuous mode [ 222.930779][ T8822] geneve2: entered allmulticast mode [ 222.938764][ T1169] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 222.972028][ T1169] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 223.010996][ T1169] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 223.059002][ T1169] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 223.115549][ T8830] tipc: Enabled bearer , priority 0 [ 223.130344][ T8836] netlink: 'syz.1.772': attribute type 4 has an invalid length. [ 223.167794][ T8837] netlink: 'syz.1.772': attribute type 4 has an invalid length. [ 223.262896][ T8830] tipc: Disabling bearer [ 223.549859][ T8844] syzkaller0: entered promiscuous mode [ 223.555564][ T8844] syzkaller0: entered allmulticast mode [ 223.895711][ T8860] tipc: New replicast peer: 255.255.255.255 [ 223.915928][ T8860] tipc: Enabled bearer , priority 10 [ 224.436933][ T8883] pim6reg527: entered allmulticast mode [ 224.501343][ T8886] macvlan0: entered promiscuous mode [ 224.529483][ T8886] macvlan0: entered allmulticast mode [ 224.582469][ T8889] bridge: RTM_NEWNEIGH with invalid ether address [ 224.633075][ T8888] bridge: RTM_NEWNEIGH with invalid ether address [ 224.680214][ T8891] bond0: (slave syz_tun): Releasing backup interface [ 224.698370][ T8891] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 224.784122][ T8889] tc_dump_action: action bad kind [ 224.920460][ T5956] tipc: Node number set to 2188618853 [ 226.619562][ T5882] Bluetooth: hci3: command 0x0405 tx timeout [ 255.984776][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.991752][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 279.967413][ T8954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.087524][ T8955] __nla_validate_parse: 9 callbacks suppressed [ 280.087537][ T8955] netlink: 5 bytes leftover after parsing attributes in process `syz.0.790'. [ 280.175161][ T8955] 0{X: renamed from gretap0 (while UP) [ 280.211054][ T8955] 0{X: entered allmulticast mode [ 280.223132][ T8955] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 280.394125][ T8985] IPVS: set_ctl: invalid protocol: 29 172.30.0.5:20001 [ 280.474071][ T8990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.801'. [ 280.535117][ T8991] netlink: 'syz.3.801': attribute type 6 has an invalid length. [ 280.567499][ T8991] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.801'. [ 280.898720][ T9010] macsec0: entered promiscuous mode [ 280.956372][ T9010] macsec0: entered allmulticast mode [ 280.967528][ T9010] veth1_macvtap: entered allmulticast mode [ 281.046833][ T9005] netlink: 28 bytes leftover after parsing attributes in process `syz.2.804'. [ 281.211894][ T9027] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 281.236337][ T9032] netlink: 'syz.0.810': attribute type 1 has an invalid length. [ 281.260918][ T9032] netlink: 232 bytes leftover after parsing attributes in process `syz.0.810'. [ 281.305346][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 281.328453][ T9027] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 281.343856][ T9027] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 281.369257][ T9027] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 281.413796][ T9027] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 281.446247][ T9040] openvswitch: netlink: Key type 16144 is out of range max 32 [ 281.455469][ T9027] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 281.484411][ T9027] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 281.525548][ T9027] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 281.586751][ T9027] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 281.687045][ T9027] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 281.748457][ T9027] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 281.801795][ T9053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.815'. [ 281.814408][ T9027] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 281.844062][ T9058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.815'. [ 281.859794][ T9027] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 281.881981][ T9027] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 281.904417][ T9027] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 281.925103][ T9054] openvswitch: netlink: Message has -1 unknown bytes. [ 281.936641][ T9027] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 282.233935][ T9070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.820'. [ 282.298952][ T9080] netlink: 44 bytes leftover after parsing attributes in process `syz.3.820'. [ 282.891383][ T9103] netlink: 'syz.3.830': attribute type 75 has an invalid length. [ 283.128171][ T9116] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20004 [ 283.440018][ T9124] dvmrp0: left allmulticast mode [ 283.469868][ T9137] netlink: 'syz.0.840': attribute type 3 has an invalid length. [ 283.605355][ T9135] netlink: 'syz.3.839': attribute type 23 has an invalid length. [ 283.738277][ T9138] netlink: 'syz.0.840': attribute type 11 has an invalid length. [ 283.777099][ T9137] netlink: 'syz.0.840': attribute type 11 has an invalid length. [ 283.813730][ T9147] tipc: Started in network mode [ 283.818748][ T9147] tipc: Node identity 26f01540f49, cluster identity 4711 [ 283.827342][ T9147] tipc: Enabled bearer , priority 0 [ 283.838889][ T9147] syzkaller0: entered promiscuous mode [ 283.847938][ T9147] syzkaller0: entered allmulticast mode [ 283.988993][ T9153] netlink: 'syz.0.844': attribute type 1 has an invalid length. [ 284.037611][ T9152] tipc: Resetting bearer [ 284.115515][ T9156] bond4 (unregistering): Released all slaves [ 284.188085][ T9164] tipc: New replicast peer: 0.0.0.0 [ 284.194132][ T9164] tipc: Enabled bearer , priority 10 [ 284.221934][ T9165] gtp0: entered promiscuous mode [ 284.230312][ T9165] gtp0: entered allmulticast mode [ 284.245551][ T9170] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 284.335439][ T9173] netlink: 'syz.3.850': attribute type 6 has an invalid length. [ 284.618843][ T9146] tipc: Resetting bearer [ 284.698389][ T9146] tipc: Disabling bearer [ 284.882472][ T9199] wlan1 speed is unknown, defaulting to 1000 [ 284.897669][ T9199] wlan1 speed is unknown, defaulting to 1000 [ 284.932117][ T9199] wlan1 speed is unknown, defaulting to 1000 [ 285.142019][ T9202] tipc: Enabling of bearer rejected, failed to enable media [ 285.315285][ T5956] tipc: Node number set to 2660901087 [ 285.384586][ T9214] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.401713][ T9214] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.594500][ T9214] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.628506][ T9214] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.806162][ T9214] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.833531][ T9199] infiniband syz0: set active [ 285.835314][ T9214] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.867744][ T9199] infiniband syz0: added wlan1 [ 285.895059][ T9239] netlink: 'syz.1.868': attribute type 1 has an invalid length. [ 285.907055][ T9237] tipc: Enabled bearer , priority 0 [ 285.923352][ T9233] tipc: Resetting bearer [ 285.934886][ T10] wlan1 speed is unknown, defaulting to 1000 [ 285.949741][ T9199] syz0: rxe_create_cq: returned err = -12 [ 285.967282][ T9199] infiniband syz0: Couldn't create ib_mad CQ [ 285.975634][ T9231] tipc: Disabling bearer [ 285.975783][ T9199] infiniband syz0: Couldn't open port 1 [ 286.059176][ T9199] RDS/IB: syz0: added [ 286.100292][ T9199] smc: adding ib device syz0 with port count 1 [ 286.108085][ T9199] smc: ib device syz0 port 1 has pnetid [ 286.199592][ T9214] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.216741][ T9214] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.240942][ T10] wlan1 speed is unknown, defaulting to 1000 [ 286.243420][ T9249] __nla_validate_parse: 13 callbacks suppressed [ 286.243438][ T9249] netlink: 228 bytes leftover after parsing attributes in process `syz.4.872'. [ 286.248247][ T9247] veth1_to_bond: entered allmulticast mode [ 286.269968][ T9199] wlan1 speed is unknown, defaulting to 1000 [ 286.278321][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.870'. [ 286.312507][ T9251] IPVS: length: 4096 != 24 [ 286.333255][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.870'. [ 286.439104][ T9246] bond0: (slave bond_slave_1): Releasing backup interface [ 286.485963][ T9246] veth1_to_bond (unregistering): left allmulticast mode [ 286.603392][ T7041] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.637452][ T7041] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.722803][ T7041] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.738474][ T7041] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.869721][ T7041] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.897083][ T7041] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.921715][ T7041] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.947945][ T7041] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.988998][ T9199] wlan1 speed is unknown, defaulting to 1000 [ 287.510781][ T9286] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.883'. [ 287.541686][ T9292] netlink: 'syz.4.886': attribute type 19 has an invalid length. [ 287.914373][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.888'. [ 288.428044][ T9311] xfrm1: entered allmulticast mode [ 288.544007][ T9199] wlan1 speed is unknown, defaulting to 1000 [ 289.228746][ T9334] netlink: 788 bytes leftover after parsing attributes in process `syz.3.896'. [ 289.305258][ T9199] wlan1 speed is unknown, defaulting to 1000 [ 289.371330][ T9336] netlink: 256 bytes leftover after parsing attributes in process `syz.0.898'. [ 289.459867][ T9337] netlink: 'syz.0.898': attribute type 10 has an invalid length. [ 289.574554][ T9337] team0: Port device dummy0 added [ 290.078472][ T9199] wlan1 speed is unknown, defaulting to 1000 [ 290.198711][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.905'. [ 290.233008][ T9361] netlink: 'syz.4.903': attribute type 10 has an invalid length. [ 290.368966][ T9361] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.384046][ T9362] bond1: option mode: unable to set because the bond device is up [ 290.445800][ T9374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.907'. [ 290.654892][ T9381] netlink: 52 bytes leftover after parsing attributes in process `syz.1.909'. [ 291.366175][ T9409] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 291.385724][ T122] IPVS: starting estimator thread 0... [ 291.489978][ T9416] IPVS: using max 27 ests per chain, 64800 per kthread [ 292.103960][ T9429] syzkaller0: entered promiscuous mode [ 292.120223][ T9429] syzkaller0: entered allmulticast mode [ 293.883911][ T9451] __nla_validate_parse: 2 callbacks suppressed [ 293.883933][ T9451] netlink: 32 bytes leftover after parsing attributes in process `syz.0.927'. [ 294.147519][ T9467] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 294.217396][ T9470] dvmrp0: entered allmulticast mode [ 294.795203][ T9501] netlink: 40 bytes leftover after parsing attributes in process `syz.1.940'. [ 294.847932][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.940'. [ 294.883940][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'. [ 294.902579][ T9509] team0: Device vti0 is of different type [ 295.077794][ T9518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 295.099867][ T9516] tipc: Enabled bearer , priority 0 [ 295.136394][ T9520] netlink: 'syz.4.946': attribute type 8 has an invalid length. [ 295.410214][ T9516] veth1_to_batadv: entered allmulticast mode [ 295.460834][ T9541] tipc: Resetting bearer [ 295.495513][ T9515] tipc: Disabling bearer [ 295.587623][ T9549] netlink: 'syz.0.952': attribute type 1 has an invalid length. [ 295.635594][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 295.691985][ T9557] netlink: 'syz.2.954': attribute type 64 has an invalid length. [ 295.702612][ T9557] netlink: 5 bytes leftover after parsing attributes in process `syz.2.954'. [ 295.716496][ T9549] netlink: 'syz.0.952': attribute type 2 has an invalid length. [ 295.732195][ T9549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.952'. [ 295.834633][ T9554] 8021q: adding VLAN 0 to HW filter on device bond6 [ 295.844742][ T9554] bond5: (slave bond6): making interface the new active one [ 295.856680][ T9554] bond5: (slave bond6): Enslaving as an active interface with an up link [ 295.928768][ T9549] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 295.981271][ T9549] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 296.033045][ T9573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.958'. [ 296.060088][ T9562] syzkaller1: entered promiscuous mode [ 296.066110][ T9562] syzkaller1: entered allmulticast mode [ 296.231379][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.960'. [ 296.269802][ T9579] netlink: 'syz.0.960': attribute type 6 has an invalid length. [ 296.595035][ T9578] wlan1 speed is unknown, defaulting to 1000 [ 297.406292][ T9623] ipvlan3: entered promiscuous mode [ 297.501548][ T5872] Bluetooth: hci3: command 0x0405 tx timeout [ 298.376239][ T9670] vxcan1: tx address claim with dest, not broadcast [ 298.712531][ T9680] netlink: 'syz.2.991': attribute type 1 has an invalid length. [ 298.923124][ T9680] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 299.036652][ T9694] netlink: 'syz.0.993': attribute type 1 has an invalid length. [ 299.065383][ T9691] delete_channel: no stack [ 299.160477][ T9696] tipc: Enabling of bearer rejected, failed to enable media [ 299.183254][ T9694] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 299.241826][ T9701] __nla_validate_parse: 11 callbacks suppressed [ 299.241845][ T9701] netlink: 156 bytes leftover after parsing attributes in process `syz.3.995'. [ 299.280101][ T9706] netlink: 36 bytes leftover after parsing attributes in process `syz.3.995'. [ 299.322067][ T9702] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 299.352190][ T9702] team0: Port device batadv1 added [ 300.123061][ T9746] bond0: option ad_select: unable to set because the bond device is up [ 300.165969][ T9747] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1009'. [ 300.491352][ T9760] netlink: 404 bytes leftover after parsing attributes in process `syz.3.1012'. [ 300.562720][ T9760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1012'. [ 300.623903][ T9760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1012'. [ 300.687534][ T9760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1012'. [ 300.913775][ T9772] wlan1 speed is unknown, defaulting to 1000 [ 301.040215][ T9785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1022'. [ 301.564731][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1029'. [ 301.782574][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1030'. [ 302.049745][ T9822] openvswitch: netlink: IP tunnel dst address not specified [ 302.943925][ T9863] lo: entered allmulticast mode [ 303.230062][ T9874] ieee802154 phy0 wpan0: encryption failed: -22 [ 303.730225][ T9888] geneve3: entered promiscuous mode [ 303.735511][ T9888] geneve3: entered allmulticast mode [ 303.785085][ T1148] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 303.804694][ T1148] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 303.867923][ T1148] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 303.936106][ T1148] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 304.109754][ T9898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.741266][ T9930] netlink: 'syz.2.1060': attribute type 1 has an invalid length. [ 304.765671][ T9930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.788635][ T9932] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 305.224734][ T9955] tipc: Enabled bearer , priority 0 [ 305.277954][ T9956] __nla_validate_parse: 3 callbacks suppressed [ 305.277976][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1065'. [ 305.317024][ T9956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1065'. [ 305.344628][ T9954] tipc: Disabling bearer [ 305.576379][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'. [ 305.615083][ T9974] netlink: 'syz.0.1073': attribute type 11 has an invalid length. [ 305.625563][ T9974] netlink: 'syz.0.1073': attribute type 11 has an invalid length. [ 305.656774][ T9974] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1073'. [ 305.943038][ T9985] netlink: 'syz.3.1077': attribute type 12 has an invalid length. [ 305.986909][ T9985] netlink: 'syz.3.1077': attribute type 1 has an invalid length. [ 306.015843][ T9985] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1077'. [ 306.030115][ T9985] veth0_to_bridge: entered promiscuous mode [ 306.041635][ T9985] veth0_to_bridge: left promiscuous mode [ 306.256256][ T9964] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 306.878906][T10020] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1087'. [ 306.916190][T10025] netlink: 'syz.3.1090': attribute type 1 has an invalid length. [ 306.950016][T10025] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1090'. [ 307.192731][T10037] team0: Cannot enslave team device to itself [ 307.482773][T10048] syz.0.1094 uses old SIOCAX25GETINFO [ 307.506732][T10051] syzkaller0: entered promiscuous mode [ 307.533076][T10048] netlink: 'syz.0.1094': attribute type 5 has an invalid length. [ 307.541461][T10051] syzkaller0: entered allmulticast mode [ 307.572138][T10050] tipc: Enabled bearer , priority 0 [ 307.685957][T10047] tipc: Resetting bearer [ 307.824691][T10047] tipc: Disabling bearer [ 307.936754][T10067] tipc: Enabled bearer , priority 0 [ 307.971281][T10067] syzkaller0: entered promiscuous mode [ 307.990400][T10067] syzkaller0: entered allmulticast mode [ 308.053032][T10081] tipc: Enabling of bearer rejected, failed to enable media [ 308.079144][T10082] netlink: 'syz.2.1104': attribute type 10 has an invalid length. [ 308.182692][T10082] team0: Device veth1_macvtap failed to register rx_handler [ 308.298387][T10066] tipc: Resetting bearer [ 308.393620][T10066] tipc: Disabling bearer [ 308.755650][T10115] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1114'. [ 308.791499][T10113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1113'. [ 308.863862][T10113] delete_channel: no stack [ 308.980565][T10119] netlink: 'syz.2.1111': attribute type 54 has an invalid length. [ 309.031600][T10110] bridge_slave_1: entered promiscuous mode [ 309.037491][T10110] bridge_slave_1: entered allmulticast mode [ 309.113708][T10129] raw_sendmsg: syz.0.1117 forgot to set AF_INET. Fix it! [ 309.145697][T10130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1116'. [ 309.196107][T10130] vlan2: entered promiscuous mode [ 309.236433][T10130] gretap0: entered promiscuous mode [ 309.567187][T10149] openvswitch: netlink: Unknown nsh attribute 0 [ 309.641148][T10149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.807199][T10156] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 309.814099][T10156] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 310.288747][T10183] __nla_validate_parse: 3 callbacks suppressed [ 310.288768][T10183] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1127'. [ 311.420926][T10221] netlink: 'syz.3.1138': attribute type 1 has an invalid length. [ 311.717720][T10226] bond3: (slave bridge3): making interface the new active one [ 311.727661][T10226] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 311.756044][T10225] ip6gre2: entered allmulticast mode [ 311.941306][T10240] netlink: 'syz.1.1143': attribute type 83 has an invalid length. [ 311.975629][T10242] netlink: 'syz.3.1142': attribute type 83 has an invalid length. [ 312.272272][T10255] netlink: 'syz.1.1147': attribute type 11 has an invalid length. [ 312.281023][T10255] netlink: 'syz.1.1147': attribute type 11 has an invalid length. [ 312.301411][T10255] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1147'. [ 312.530450][T10269] netlink: 'syz.0.1152': attribute type 1 has an invalid length. [ 312.548477][T10269] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1152'. [ 312.674341][T10272] tipc: Enabled bearer , priority 0 [ 312.688584][T10272] syzkaller0: entered promiscuous mode [ 312.704170][T10272] syzkaller0: entered allmulticast mode [ 312.745129][T10272] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 312.812669][T10272] tipc: Resetting bearer [ 313.143525][T10271] tipc: Resetting bearer [ 313.245851][T10271] tipc: Disabling bearer [ 313.271456][T10284] dvmrp0: left allmulticast mode [ 313.918445][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1163'. [ 313.930291][T10311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1163'. [ 313.970311][T10319] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1165'. [ 314.016554][T10319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1165'. [ 314.034767][T10318] delete_channel: no stack [ 314.218095][T10321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1167'. [ 314.226872][T10327] netlink: 'syz.0.1169': attribute type 3 has an invalid length. [ 314.254476][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1167'. [ 314.458870][T10332] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.509530][T10332] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 314.666430][T10332] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.709507][T10332] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 315.003918][T10332] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.049456][T10332] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 315.172558][T10332] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.204374][T10332] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 315.254252][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1179'. [ 315.508728][T10359] syz.4.1180 (10359) used greatest stack depth: 17864 bytes left [ 315.571315][ T7745] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 315.590222][T10368] netlink: 'syz.0.1182': attribute type 4 has an invalid length. [ 315.606032][ T7745] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 315.644015][T10369] netlink: 'syz.0.1182': attribute type 4 has an invalid length. [ 315.754951][ T7745] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 315.788496][ T7745] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 315.883775][ T1155] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 315.915696][ T1155] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 315.948426][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1186'. [ 316.055836][ T7041] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 316.104506][ T7041] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 316.210266][T10395] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 316.394971][T10406] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1193'. [ 316.534927][T10415] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1194'. [ 316.546055][T10406] netlink: 'syz.3.1193': attribute type 23 has an invalid length. [ 316.987459][T10440] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1202'. [ 317.032283][T10440] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1202'. [ 317.121282][T10440] netlink: 'syz.4.1202': attribute type 1 has an invalid length. [ 317.424648][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.507619][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1207'. [ 317.551021][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1209'. [ 317.628594][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'. [ 317.661999][T10463] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 317.676738][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1211'. [ 317.687383][T10468] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1210'. [ 318.410885][T10509] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 318.597615][T10516] sctp: [Deprecated]: syz.2.1224 (pid 10516) Use of int in maxseg socket option. [ 318.597615][T10516] Use struct sctp_assoc_value instead [ 318.795605][T10522] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 319.302122][T10502] infiniband syz!: set down [ 319.306694][T10502] infiniband syz!: added team_slave_0 [ 319.359956][T10502] syz!: rxe_create_cq: returned err = -12 [ 319.365800][T10502] infiniband syz!: Couldn't create ib_mad CQ [ 319.420564][T10502] infiniband syz!: Couldn't open port 1 [ 319.445924][T10557] netlink: 'syz.2.1233': attribute type 6 has an invalid length. [ 319.642318][T10502] RDS/IB: syz!: added [ 319.657662][T10502] smc: adding ib device syz! with port count 1 [ 319.693219][T10502] smc: ib device syz! port 1 has pnetid [ 319.796862][T10570] pim6reg: entered allmulticast mode [ 320.360042][T10598] netlink: 'syz.0.1241': attribute type 23 has an invalid length. [ 320.749858][T10612] openvswitch: netlink: Missing valid actions attribute. [ 320.756989][T10612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.958080][T10617] tc_dump_action: action bad kind [ 320.997844][T10620] __nla_validate_parse: 3 callbacks suppressed [ 320.997866][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1252'. [ 321.361199][T10636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1256'. [ 321.613779][T10642] netlink: 'syz.0.1259': attribute type 29 has an invalid length. [ 321.635109][T10642] netlink: 'syz.0.1259': attribute type 29 has an invalid length. [ 321.700813][T10644] dvmrp1: entered allmulticast mode [ 322.124728][T10666] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1265'. [ 322.170744][T10666] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 322.199440][T10666] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 322.648689][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1269'. [ 322.908743][T10680] hsr_slave_1 (unregistering): left promiscuous mode [ 323.157441][T10698] netlink: 'syz.3.1274': attribute type 2 has an invalid length. [ 323.558351][T10713] 8021q: adding VLAN 0 to HW filter on device bond4 [ 324.408341][T10711] siw: device registration error -23 [ 324.729994][T10756] IPVS: length: 31 != 24 [ 324.748877][T10754] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1288'. [ 324.758855][T10759] vxcan1: tx drop: invalid da for name 0x0000000000001000 [ 324.794206][T10759] vxcan1: entered allmulticast mode [ 324.831002][T10761] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 325.121378][T10773] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1294'. [ 325.154534][T10773] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1294'. [ 325.961861][T10801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1302'. [ 325.976787][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1301'. [ 325.986083][T10802] openvswitch: netlink: Flow key attr not present in new flow. [ 326.071318][T10801] tipc: Enabling of bearer rejected, failed to enable media [ 326.454757][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 326.496568][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 326.513980][T10821] netlink: 'syz.3.1306': attribute type 11 has an invalid length. [ 326.620171][ T5872] Bluetooth: hci3: command 0x0405 tx timeout [ 326.876090][T10840] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1315'. [ 327.344294][T10860] netlink: 'syz.2.1323': attribute type 2 has an invalid length. [ 327.364625][T10862] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1323'. [ 327.372473][T10865] veth1_to_bond: entered allmulticast mode [ 327.511497][T10861] veth1_to_bond: left allmulticast mode [ 327.581724][T10875] netlink: 'syz.1.1327': attribute type 1 has an invalid length. [ 327.778181][T10880] vlan1: entered allmulticast mode [ 327.868958][T10887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1331'. [ 328.090498][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1331'. [ 328.259671][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1334'. [ 328.285529][T10900] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 328.306378][T10900] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 328.614544][T10911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1339'. [ 328.706591][ T5872] Bluetooth: hci3: command 0x0405 tx timeout [ 328.819139][T10931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1345'. [ 328.885861][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1343'. [ 329.354021][T10959] netlink: 'syz.0.1348': attribute type 1 has an invalid length. [ 329.372268][T10960] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 329.631221][T10959] bond8: entered promiscuous mode [ 329.636876][T10959] 8021q: adding VLAN 0 to HW filter on device bond8 [ 329.740694][T10963] 8021q: adding VLAN 0 to HW filter on device bond9 [ 329.754903][T10963] bond8: (slave bond9): making interface the new active one [ 329.772373][T10963] bond9: entered promiscuous mode [ 329.782036][T10963] bond8: (slave bond9): Enslaving as an active interface with an up link [ 329.851171][T10977] tipc: Enabled bearer , priority 0 [ 329.873307][T10977] sit0: entered promiscuous mode [ 329.878310][T10977] sit0: entered allmulticast mode [ 329.904555][T10980] tipc: Enabling of bearer rejected, failed to enable media [ 329.928791][T10981] tipc: Enabling of bearer rejected, failed to enable media [ 329.996824][T10973] tipc: Disabling bearer [ 330.560861][T11017] nbd: must specify at least one socket [ 330.774999][T11025] netlink: 'syz.1.1367': attribute type 1 has an invalid length. [ 330.986292][T11030] IPv6: sit1: Disabled Multicast RS [ 331.048298][T11030] sit1: entered allmulticast mode [ 331.477848][T11058] netlink: 'syz.0.1374': attribute type 21 has an invalid length. [ 331.542703][T11058] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 331.632323][T11062] __nla_validate_parse: 7 callbacks suppressed [ 331.632344][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1379'. [ 332.184657][T11091] vxcan1: tx address claim with different name [ 332.191984][T11091] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 332.284055][T11096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1392'. [ 332.302124][T11097] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1391'. [ 332.486350][T11111] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1396'. [ 332.607510][T11117] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1397'. [ 332.727012][T11126] netlink: 'syz.0.1397': attribute type 4 has an invalid length. [ 332.744442][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1400'. [ 332.756906][T11123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1400'. [ 332.760752][T11128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1399'. [ 332.771285][T11129] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1401'. [ 332.801806][T11117] netlink: 'syz.0.1397': attribute type 4 has an invalid length. [ 332.967054][T11133] TCP: TCP_TX_DELAY enabled [ 333.048768][T11139] netlink: 'syz.4.1402': attribute type 11 has an invalid length. [ 333.052632][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1404'. [ 333.078833][T11139] netlink: 'syz.4.1402': attribute type 11 has an invalid length. [ 333.744715][T11151] pim6reg1: entered promiscuous mode [ 333.753311][T11151] pim6reg1: entered allmulticast mode [ 333.824605][T11164] netlink: 'syz.3.1411': attribute type 1 has an invalid length. [ 335.037049][T11209] netlink: 'syz.3.1422': attribute type 12 has an invalid length. [ 335.416349][T11219] openvswitch: netlink: Actions may not be safe on all matching packets [ 335.706063][ T7757] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x81 [ 336.009351][T11227] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.240046][T11258] xt_l2tp: missing protocol rule (udp|l2tpip) [ 337.179237][T11298] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.216695][T11298] team_slave_0: left promiscuous mode [ 337.233062][T11298] team_slave_1: left promiscuous mode [ 337.534893][T11334] netlink: 'syz.1.1441': attribute type 1 has an invalid length. [ 337.763740][T11298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.842970][T11298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.051900][T11354] __nla_validate_parse: 15 callbacks suppressed [ 338.051921][T11354] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1445'. [ 338.762200][T11318] !: renamed from bond_slave_0 [ 338.788466][T11353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1444'. [ 338.848651][ T7749] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 338.895025][ T7749] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 338.942958][ T7749] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 338.956102][T11383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1450'. [ 338.979359][ T7749] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 338.998711][T11383] netlink: 'syz.2.1450': attribute type 13 has an invalid length. [ 339.013116][ T5956] wlan1 speed is unknown, defaulting to 1000 [ 339.039388][ T5956] syz2: Port: 1 Link DOWN [ 339.071773][ T6098] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 339.106874][ T6098] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 339.141724][ T6098] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 339.180487][ T6098] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 339.228610][ T5956] wlan1 speed is unknown, defaulting to 1000 [ 339.228659][T11383] macvtap0: entered allmulticast mode [ 339.271245][T11383] macvtap0: refused to change device tx_queue_len [ 339.538135][T11407] wlan1 speed is unknown, defaulting to 1000 [ 339.574222][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'. [ 339.579116][T11407] wlan1 speed is unknown, defaulting to 1000 [ 339.634604][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'. [ 339.643463][T11407] wlan1 speed is unknown, defaulting to 1000 [ 339.722728][T11412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'. [ 339.803572][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'. [ 340.080274][T11407] infiniband syz0: set active [ 340.085135][T11407] infiniband syz0: added wlan1 [ 340.097779][ T5956] wlan1 speed is unknown, defaulting to 1000 [ 340.163602][T11407] RDS/IB: syz0: added [ 340.167789][T11407] smc: adding ib device syz0 with port count 1 [ 340.177291][T11407] smc: ib device syz0 port 1 has pnetid [ 340.233638][ T5956] wlan1 speed is unknown, defaulting to 1000 [ 340.281383][T11407] wlan1 speed is unknown, defaulting to 1000 [ 340.396806][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1462'. [ 340.588724][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1466'. [ 340.641595][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1466'. [ 341.280833][T11480] netlink: 'syz.1.1473': attribute type 11 has an invalid length. [ 341.455823][T11407] wlan1 speed is unknown, defaulting to 1000 [ 342.518415][T11407] wlan1 speed is unknown, defaulting to 1000 [ 342.973031][T11553] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 343.044004][T11553] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 343.077374][T11553] gretap1: entered promiscuous mode [ 343.096372][T11560] __nla_validate_parse: 4 callbacks suppressed [ 343.096391][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1495'. [ 343.103077][T11553] gretap1: entered allmulticast mode [ 343.391806][T11577] netlink: 152064 bytes leftover after parsing attributes in process `syz.0.1498'. [ 343.393459][T11407] wlan1 speed is unknown, defaulting to 1000 [ 343.435176][T11577] netlink: zone id is out of range [ 343.465101][T11577] netlink: zone id is out of range [ 343.499581][T11577] netlink: zone id is out of range [ 343.525760][T11577] netlink: zone id is out of range [ 343.555981][T11577] netlink: zone id is out of range [ 343.595856][T11577] netlink: zone id is out of range [ 343.617728][T11577] netlink: zone id is out of range [ 343.631235][T11577] netlink: zone id is out of range [ 343.646814][T11577] netlink: zone id is out of range [ 343.687351][T11577] netlink: zone id is out of range [ 343.953091][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1502'. [ 344.206669][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1506'. [ 344.219771][ T5872] Bluetooth: hci3: command 0x0405 tx timeout [ 344.224473][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1506'. [ 344.245189][T11600] netlink: 'syz.3.1506': attribute type 3 has an invalid length. [ 344.272162][T11600] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1506'. [ 344.286123][T11602] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1505'. [ 344.319168][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1506'. [ 344.417719][T11407] wlan1 speed is unknown, defaulting to 1000 [ 344.628256][T11612] tipc: Enabling of bearer rejected, media not registered [ 345.008559][T11631] netlink: 'syz.0.1516': attribute type 1 has an invalid length. [ 345.096573][T11631] 8021q: adding VLAN 0 to HW filter on device bond10 [ 345.189123][T11637] syzkaller1: entered promiscuous mode [ 345.220701][T11637] syzkaller1: entered allmulticast mode [ 345.283262][T11637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1517'. [ 345.327094][T11649] xfrm1: entered allmulticast mode [ 345.395123][T11637] IPVS: length: 8 != 1152 [ 345.529926][T11661] netlink: 'syz.4.1523': attribute type 10 has an invalid length. [ 345.645846][T11661] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.659179][T11661] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.666697][T11661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.689798][T11661] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 345.712669][T11668] netlink: 'syz.2.1524': attribute type 1 has an invalid length. [ 345.730474][T11670] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 345.738928][T11668] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1524'. [ 346.250293][T11699] netlink: 'syz.4.1533': attribute type 21 has an invalid length. [ 346.271690][T11698] netlink: 'syz.2.1535': attribute type 1 has an invalid length. [ 346.464775][T11709] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20000 [ 346.481402][T11713] netlink: 'syz.4.1538': attribute type 1 has an invalid length. [ 346.514016][T11709] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20001 [ 346.576188][T11717] netlink: 'syz.1.1536': attribute type 17 has an invalid length. [ 346.682673][T11713] 8021q: adding VLAN 0 to HW filter on device bond3 [ 346.697094][T11715] vlan3: entered promiscuous mode [ 346.702840][T11715] bond3: entered promiscuous mode [ 346.708074][T11715] vlan3: entered allmulticast mode [ 346.713378][T11715] bond3: entered allmulticast mode [ 347.266882][T11752] IPVS: length: 69 != 24 [ 347.283765][T11752] sctp: [Deprecated]: syz.0.1547 (pid 11752) Use of int in maxseg socket option. [ 347.283765][T11752] Use struct sctp_assoc_value instead [ 347.842068][T11777] IPVS: set_ctl: invalid protocol: 20 224.0.0.1:20000 [ 347.849519][T11776] IPVS: set_ctl: invalid protocol: 20 224.0.0.1:20000 [ 348.253617][T11795] tipc: Enabled bearer , priority 0 [ 348.263847][T11795] syzkaller0: entered promiscuous mode [ 348.269853][T11795] syzkaller0: entered allmulticast mode [ 348.283414][T11795] tipc: Resetting bearer [ 348.293981][T11796] __nla_validate_parse: 7 callbacks suppressed [ 348.294001][T11796] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1559'. [ 348.318096][T11796] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1559'. [ 348.430164][T11794] tipc: Resetting bearer [ 348.533218][T11794] tipc: Disabling bearer [ 348.611863][T11802] netlink: 'syz.3.1562': attribute type 1 has an invalid length. [ 348.700494][T11812] netlink: 'syz.4.1565': attribute type 17 has an invalid length. [ 348.709040][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1565'. [ 348.718317][T11812] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1565'. [ 348.904348][T11808] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 349.297217][T11829] net_ratelimit: 218 callbacks suppressed [ 349.297239][T11829] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 349.373426][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1569'. [ 349.418232][T11813] veth7: entered promiscuous mode [ 349.450702][T11813] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 349.551764][T11842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1572'. [ 349.584580][T11842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1572'. [ 349.623644][T11842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1572'. [ 349.685479][T11849] : entered promiscuous mode [ 349.821108][T11852] tipc: Enabled bearer , priority 0 [ 349.836507][T11861] netlink: 'syz.0.1577': attribute type 6 has an invalid length. [ 349.878077][T11861] netlink: 'syz.0.1577': attribute type 6 has an invalid length. [ 349.880812][T11852] syzkaller0: entered promiscuous mode [ 349.944858][T11852] syzkaller0: entered allmulticast mode [ 350.004858][T11864] veth7: entered promiscuous mode [ 350.035511][T11864] veth7: entered allmulticast mode [ 350.095989][T11872] tipc: Resetting bearer [ 350.176650][T11872] tipc: Disabling bearer [ 350.375882][T11884] netlink: 'syz.3.1584': attribute type 11 has an invalid length. [ 350.388395][T11884] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1584'. [ 350.416101][T11890] netlink: 'syz.2.1587': attribute type 1 has an invalid length. [ 350.544290][T11890] veth5: entered promiscuous mode [ 350.604540][T11893] gretap1: entered allmulticast mode [ 350.986610][T11911] netlink: 'syz.3.1593': attribute type 2 has an invalid length. [ 351.129519][T11915] netlink: 'syz.4.1594': attribute type 21 has an invalid length. [ 351.137403][T11915] netlink: 'syz.4.1594': attribute type 22 has an invalid length. [ 351.203763][T11915] netlink: 'syz.4.1594': attribute type 23 has an invalid length. [ 351.217630][T11920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1596'. [ 351.240200][T11915] netlink: 'syz.4.1594': attribute type 25 has an invalid length. [ 351.266867][T11920] openvswitch: netlink: IP tunnel dst address not specified [ 351.642694][T11946] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 351.785538][T11946] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 351.801444][T11946] gretap0: entered promiscuous mode [ 351.831311][T11946] gretap0: entered allmulticast mode [ 352.235088][T11962] bridge_slave_1 (unregistering): left allmulticast mode [ 352.260187][T11962] bridge_slave_1 (unregistering): left promiscuous mode [ 352.286564][T11962] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.654826][T11977] tipc: Enabling of bearer rejected, failed to enable media [ 352.728839][T11977] netlink: 'syz.1.1605': attribute type 1 has an invalid length. [ 352.987239][T11994] netlink: 'syz.1.1611': attribute type 1 has an invalid length. [ 353.048159][T11998] openvswitch: netlink: Actions may not be safe on all matching packets [ 353.351552][T12011] __nla_validate_parse: 5 callbacks suppressed [ 353.351572][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1616'. [ 353.389809][T12011] bond0: entered promiscuous mode [ 353.401011][T12011] bond_slave_0: entered promiscuous mode [ 353.411811][T12011] bond_slave_1: entered promiscuous mode [ 353.732418][T12016] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 353.991564][T12034] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1623'. [ 354.914892][T12062] netlink: 'syz.1.1631': attribute type 1 has an invalid length. [ 354.976512][T12062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.181449][T12071] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.188687][T12071] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 355.204302][T12071] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 355.350982][T12091] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1637'. [ 355.365667][T12062] veth7: entered promiscuous mode [ 355.382657][T12062] bond3: (slave veth7): Enslaving as an active interface with a down link [ 355.397151][T12087] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1636'. [ 355.406017][T12074] vlan3: entered allmulticast mode [ 355.411530][T12074] bond3: entered allmulticast mode [ 355.925902][T12111] wlan1 speed is unknown, defaulting to 1000 [ 355.980172][T12113] netlink: 'syz.1.1642': attribute type 1 has an invalid length. [ 356.019151][T12113] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1642'. [ 356.031067][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1645'. [ 356.040580][T12118] netlink: 'syz.2.1645': attribute type 5 has an invalid length. [ 356.220189][T12119] nbd: couldn't find a device at index 2 [ 356.245433][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'. [ 356.403166][T12130] veth0_to_bond: entered allmulticast mode [ 356.534942][ T9087] udevd[9087]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 356.955380][T12152] veth9: entered promiscuous mode [ 356.960699][T12152] veth9: entered allmulticast mode [ 357.021768][T12158] netlink: 924 bytes leftover after parsing attributes in process `syz.0.1656'. [ 357.418764][T12171] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 357.428718][T12171] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 357.535482][T12174] veth0: entered promiscuous mode [ 357.571330][T12174] veth0: left promiscuous mode [ 357.675797][T12111] wlan1 speed is unknown, defaulting to 1000 [ 357.764755][T12182] tipc: Enabled bearer , priority 0 [ 357.792542][T12181] netlink: 'syz.2.1665': attribute type 2 has an invalid length. [ 357.809852][T12182] syzkaller0: entered promiscuous mode [ 357.827416][T12182] syzkaller0: entered allmulticast mode [ 357.889810][T12182] tipc: Resetting bearer [ 357.910601][T12192] netlink: 'syz.2.1668': attribute type 1 has an invalid length. [ 358.044631][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1669'. [ 358.064059][T12198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1669'. [ 358.256180][T12192] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 358.261747][T12180] tipc: Resetting bearer [ 358.305356][T12180] tipc: Disabling bearer [ 358.467333][T12205] netlink: 'syz.3.1671': attribute type 1 has an invalid length. [ 358.483196][T12205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1671'. [ 358.537081][T12211] netlink: 'syz.2.1670': attribute type 4 has an invalid length. [ 358.583829][T12206] netlink: 'syz.2.1670': attribute type 4 has an invalid length. [ 358.786672][T12217] netlink: 'syz.1.1674': attribute type 1 has an invalid length. [ 359.412704][T12234] smc: net device bond0 applied user defined pnetid SYZ2 [ 360.311194][T12264] netlink: 'syz.1.1687': attribute type 1 has an invalid length. [ 360.556406][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1690'. [ 360.590579][T12273] syzkaller1: entered promiscuous mode [ 360.596204][T12273] syzkaller1: entered allmulticast mode [ 360.610330][T12276] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1690'. [ 360.728585][T12282] pim6reg1: entered promiscuous mode [ 360.748889][T12282] pim6reg1: entered allmulticast mode [ 360.784886][T12285] syzkaller1: entered promiscuous mode [ 360.808256][T12285] syzkaller1: entered allmulticast mode [ 360.851095][T12279] dvmrp0: entered allmulticast mode [ 360.952729][T12291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1695'. [ 361.215766][T12296] wlan1 speed is unknown, defaulting to 1000 [ 361.275741][T12299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1698'. [ 361.300642][T12302] veth0: entered promiscuous mode [ 361.318261][T12302] veth0: left promiscuous mode [ 361.337553][T12302] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1699'. [ 361.564534][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1700'. [ 361.594404][T12313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1702'. [ 361.893171][T12313] macvtap1: entered promiscuous mode [ 361.898895][T12313] vlan0: entered promiscuous mode [ 361.904914][T12313] macvtap1: entered allmulticast mode [ 361.911241][T12313] vlan0: entered allmulticast mode [ 361.917107][T12313] veth0_vlan: entered allmulticast mode [ 361.927191][T12318] tipc: Enabled bearer , priority 0 [ 361.945776][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1705'. [ 361.983613][T12321] syzkaller0: entered promiscuous mode [ 361.989147][T12321] syzkaller0: entered allmulticast mode [ 362.021891][T12320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.176280][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1707'. [ 362.226853][T12315] unknown channel width for channel at 909000KHz? [ 362.236470][T12315] unknown channel width for channel at 909000KHz? [ 362.296913][T12315] unknown channel width for channel at 909000KHz? [ 362.517588][T12314] tipc: Resetting bearer [ 362.577888][T12314] tipc: Disabling bearer [ 362.621791][T12348] netlink: 'syz.1.1711': attribute type 10 has an invalid length. [ 362.659754][T12347] veth0_to_batadv: entered promiscuous mode [ 362.750094][T12348] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 362.971877][T12296] wlan1 speed is unknown, defaulting to 1000 [ 363.286779][T12362] netlink: 'syz.4.1717': attribute type 2 has an invalid length. [ 363.315682][T12362] netlink: 'syz.4.1717': attribute type 1 has an invalid length. [ 363.464311][T12373] bridge_slave_0: left allmulticast mode [ 363.476765][T12373] bridge_slave_0: left promiscuous mode [ 363.484140][T12373] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.608295][T12380] __nla_validate_parse: 8 callbacks suppressed [ 363.608316][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 363.871046][T12387] smc: removing ib device syz! [ 363.935620][T12393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1724'. [ 364.643629][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1728'. [ 364.701866][T12407] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 364.702063][T12411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1730'. [ 365.110055][T12422] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1733'. [ 365.921382][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1740'. [ 366.404425][T12462] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1744'. [ 366.553936][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1745'. [ 366.810473][T12473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1747'. [ 367.315777][T12494] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1751'. [ 367.419528][ T5872] Bluetooth: hci3: command 0x0405 tx timeout [ 368.095950][T12518] netlink: 'syz.3.1759': attribute type 1 has an invalid length. [ 368.133537][T12518] netlink: 'syz.3.1759': attribute type 2 has an invalid length. [ 368.184473][T12518] lo: entered promiscuous mode [ 368.205847][T12518] netlink: 'syz.3.1759': attribute type 2 has an invalid length. [ 368.214922][T12518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.270236][T12528] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 369.239189][T12559] __nla_validate_parse: 4 callbacks suppressed [ 369.239221][T12559] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1770'. [ 369.818189][T12590] syzkaller0: entered promiscuous mode [ 369.866858][T12590] syzkaller0: entered allmulticast mode [ 370.776669][T12637] tipc: Enabling of bearer rejected, failed to enable media [ 370.794477][T12637] netlink: 'syz.4.1793': attribute type 10 has an invalid length. [ 370.804351][T12637] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1793'. [ 370.862974][T12637] geneve0: entered promiscuous mode [ 370.882867][T12637] geneve0: entered allmulticast mode [ 370.894082][T12637] team0: Port device geneve0 added [ 371.247773][T12660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.283549][T12660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.341270][T12665] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1803'. [ 371.423458][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1803'. [ 371.544263][T12670] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1805'. [ 371.645113][T12676] openvswitch: netlink: Message has 12 unknown bytes. [ 371.657783][T12672] veth1_macvtap: left promiscuous mode [ 371.957657][T12689] netlink: 'syz.4.1810': attribute type 9 has an invalid length. [ 371.986726][T12690] netlink: 'syz.1.1809': attribute type 1 has an invalid length. [ 371.995231][T12690] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1809'. [ 372.033629][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1810'. [ 372.183105][T12692] sctp: [Deprecated]: syz.0.1811 (pid 12692) Use of int in max_burst socket option deprecated. [ 372.183105][T12692] Use struct sctp_assoc_value instead [ 372.227837][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'. [ 372.258571][T12692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1811'. [ 372.309695][T12692] netlink: 'syz.0.1811': attribute type 7 has an invalid length. [ 372.572433][T12719] xt_limit: Overflow, try lower: 271964/0 [ 372.708945][T12724] openvswitch: netlink: Actions may not be safe on all matching packets [ 372.780062][T12731] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 372.900204][T12735] netlink: 'syz.2.1827': attribute type 6 has an invalid length. [ 372.921291][T12737] sctp: [Deprecated]: syz.3.1826 (pid 12737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.921291][T12737] Use struct sctp_sack_info instead [ 373.075292][T12744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1829'. [ 373.354348][T12767] netlink: 'syz.4.1834': attribute type 1 has an invalid length. [ 373.434934][T12720] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 373.498146][T12769] 8021q: adding VLAN 0 to HW filter on device bond2 [ 373.512570][T12777] Bluetooth: MGMT ver 1.23 [ 373.517775][T12771] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 373.904374][ T7753] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 374.015602][T12802] netlink: 'syz.2.1842': attribute type 1 has an invalid length. [ 374.071725][T12802] 8021q: adding VLAN 0 to HW filter on device bond3 [ 374.240500][T12809] netlink: 'syz.2.1843': attribute type 2 has an invalid length. [ 374.554046][T12817] __nla_validate_parse: 3 callbacks suppressed [ 374.554069][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1845'. [ 374.621633][T12817] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1845'. [ 374.637758][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1847'. [ 374.654198][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1847'. [ 374.773967][T12827] x_tables: ip6_tables: NETMAP target: only valid in nat table, not syz1 [ 374.863322][T12829] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1851'. [ 374.885676][T12833] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1853'. [ 374.890895][T12829] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1851'. [ 374.906235][T12833] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1853'. [ 374.918488][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1851'. [ 375.110592][T12843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.154441][T12843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1855'. [ 375.422880][T12859] netlink: 'syz.4.1860': attribute type 10 has an invalid length. [ 375.795446][T12869] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 375.862887][T12872] netlink: 'syz.3.1864': attribute type 33 has an invalid length. [ 376.366153][T12892] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 377.170446][T12925] netlink: 'syz.0.1879': attribute type 21 has an invalid length. [ 378.899168][T12945] infiniband syz!: set down [ 378.924059][T12945] infiniband syz!: added team_slave_0 [ 378.941685][T12945] syz!: rxe_create_cq: returned err = -12 [ 378.957769][T12945] infiniband syz!: Couldn't create ib_mad CQ [ 378.980704][T12945] infiniband syz!: Couldn't open port 1 [ 379.104000][T12945] RDS/IB: syz!: added [ 379.118342][T12945] smc: adding ib device syz! with port count 1 [ 379.126954][T13003] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 379.134933][T12945] smc: ib device syz! port 1 has pnetid [ 380.740616][T13064] __nla_validate_parse: 2 callbacks suppressed [ 380.740636][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1909'. [ 380.844344][T13066] bridge0: entered promiscuous mode [ 380.866488][T13066] macvtap2: entered allmulticast mode [ 380.883693][T13066] bridge0: entered allmulticast mode [ 380.903925][T13066] bridge0: left allmulticast mode [ 380.909057][T13066] bridge0: left promiscuous mode [ 380.956797][T13072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.248165][T13081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1914'. [ 381.303784][T13079] netlink: 'syz.2.1913': attribute type 1 has an invalid length. [ 381.365082][T13079] bond4: entered promiscuous mode [ 381.370723][T13079] 8021q: adding VLAN 0 to HW filter on device bond4 [ 381.405106][T13089] IPVS: set_ctl: invalid protocol: 108 100.1.1.2:20004 [ 381.485254][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1916'. [ 381.735275][T13099] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1920'. [ 381.745283][T13099] tipc: Enabling of bearer rejected, failed to enable media [ 382.036637][T13112] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1922'. [ 382.145658][T13114] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1922'. [ 382.516926][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1925'. [ 382.734251][T13112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1922'. [ 383.036130][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1928'. [ 383.057373][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1929'. [ 383.887366][T13174] netlink: 'syz.3.1935': attribute type 1 has an invalid length. [ 383.936237][T13173] netlink: 'syz.1.1939': attribute type 1 has an invalid length. [ 384.078970][T13174] 8021q: adding VLAN 0 to HW filter on device bond6 [ 384.160077][T13187] veth0_to_bond: left allmulticast mode [ 384.225335][T13187] bond6: (slave veth0_to_bond): making interface the new active one [ 384.247380][T13187] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 384.282456][T13174] dvmrp0: left allmulticast mode [ 384.549034][T13208] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 384.742386][T13209] syzkaller0: entered promiscuous mode [ 384.748319][T13209] syzkaller0: entered allmulticast mode [ 384.756800][T13213] tipc: Enabled bearer , priority 0 [ 384.794376][T13209] tipc: Resetting bearer [ 384.822319][T13206] tipc: Resetting bearer [ 385.809782][T11314] tipc: Node number set to 3529512256 [ 386.797293][T13206] tipc: Disabling bearer [ 386.880425][T13246] tipc: Enabling of bearer rejected, failed to enable media [ 386.942680][T13250] bond0: (slave team0): Releasing backup interface [ 386.998609][T13250] bridge_slave_0: left allmulticast mode [ 387.004561][T13250] bridge_slave_0: left promiscuous mode [ 387.012671][T13250] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.023204][T13250] bridge_slave_1: left allmulticast mode [ 387.029021][T13250] bridge_slave_1: left promiscuous mode [ 387.035964][T13250] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.055214][T13250] bond6: (slave veth0_to_bond): Releasing active interface [ 387.066218][T13250] bond0: (slave bond_slave_0): Releasing backup interface [ 387.082778][T13250] team0: Port device team_slave_0 removed [ 387.098782][T13250] team0: Port device team_slave_1 removed [ 387.105567][T13250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.114181][T13250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.123774][T13250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.132044][T13250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.163790][T13250] team0: Port device batadv1 removed [ 387.174568][T13250] bond3: (slave bridge3): Releasing active interface [ 387.192601][T13250] bond5: (slave ip6gretap1): Releasing backup interface [ 387.200941][T13250] bond5: (slave ip6gretap1): the permanent HWaddr of slave - 1e:3b:1f:4f:23:dd - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 387.246274][T13250] bond5: (slave veth7): Releasing backup interface [ 387.565605][T13263] tipc: Enabled bearer , priority 0 [ 387.575406][T13258] tipc: Resetting bearer [ 387.582371][T13265] syzkaller0: entered promiscuous mode [ 387.587901][T13265] syzkaller0: entered allmulticast mode [ 387.613079][T13257] tipc: Resetting bearer [ 387.661247][T13257] tipc: Disabling bearer [ 387.718835][T13284] __nla_validate_parse: 4 callbacks suppressed [ 387.718857][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1965'. [ 387.743481][T13286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1966'. [ 388.043056][T13301] syzkaller0: entered promiscuous mode [ 388.048595][T13301] syzkaller0: entered allmulticast mode [ 388.065078][T13298] tipc: Enabled bearer , priority 0 [ 388.078145][T13298] tipc: Enabling of bearer rejected, already enabled [ 388.090355][T13298] tipc: Enabling of bearer rejected, already enabled [ 388.103719][T13296] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 388.105312][T13298] tipc: Enabling of bearer rejected, already enabled [ 388.133519][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1969'. [ 388.165884][T13298] tipc: Enabling of bearer rejected, already enabled [ 388.203375][T13296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1969'. [ 388.358798][T13298] tipc: Resetting bearer [ 388.481276][T13298] tipc: Disabling bearer [ 388.505576][T13328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1977'. [ 388.528824][T13325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.571690][T13324] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 388.620287][T13328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1977'. [ 388.655841][T13332] netlink: 'syz.4.1978': attribute type 15 has an invalid length. [ 388.679357][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'. [ 388.832501][ T7749] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 388.833417][T13342] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 388.858938][T13343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1982'. [ 388.874709][ T7749] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 388.882842][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1981'. [ 388.896808][ T7749] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 388.928293][T13342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1981'. [ 388.937997][ T7749] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 389.247884][T13359] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 390.043638][T13387] smc: net device bond0 applied user defined pnetid SYZ2 [ 390.587233][T13387] smc: removing net device bond0 with user defined pnetid SYZ2 [ 390.598683][T13387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.608711][T13387] bond_slave_0: left promiscuous mode [ 390.636313][T13387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.646317][T13387] bond_slave_1: left promiscuous mode [ 390.654532][T13387] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 390.668528][T13387] bond0 (unregistering): Released all slaves [ 390.705631][T13413] netlink: 'syz.3.2000': attribute type 12 has an invalid length. [ 390.801061][T13411] bond0: option mode: unable to set because the bond device is up [ 390.886764][T13427] netlink: 'syz.4.2003': attribute type 2 has an invalid length. [ 391.224579][T13444] netlink: 'syz.2.2008': attribute type 1 has an invalid length. [ 391.313128][T13445] tipc: New replicast peer: 255.255.255.255 [ 391.331899][T13445] tipc: Enabled bearer , priority 10 [ 391.361144][T13453] netlink: 'syz.4.2009': attribute type 1 has an invalid length. [ 391.377143][T13453] netlink: 'syz.4.2009': attribute type 1 has an invalid length. [ 391.386335][T13453] netlink: 'syz.4.2009': attribute type 2 has an invalid length. [ 391.394595][T13448] netlink: 'syz.1.2010': attribute type 1 has an invalid length. [ 391.439110][T13448] netlink: 'syz.1.2010': attribute type 7 has an invalid length. [ 391.875834][T13478] ip6gre3: entered allmulticast mode [ 392.089043][T13490] syz_tun: entered allmulticast mode [ 392.205875][T13492] bond2: (slave veth0_to_bond): Releasing backup interface [ 392.239097][T13492] team0: Port device team_slave_0 removed [ 392.251738][T13492] team0: Port device team_slave_1 removed [ 392.378281][T13506] netlink: 'syz.3.2025': attribute type 1 has an invalid length. [ 393.164919][T13543] __nla_validate_parse: 15 callbacks suppressed [ 393.164941][T13543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2036'. [ 393.225874][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2035'. [ 393.251057][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'. [ 393.275021][T13553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'. [ 393.402311][T13549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.515773][T13549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.516372][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2039'. [ 393.533567][T13556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2039'. [ 393.543190][T13549] batadv_slave_1 (unregistering): left promiscuous mode [ 393.634760][T13556] erspan0: entered promiscuous mode [ 393.677019][T13556] erspan0: left promiscuous mode [ 393.706790][T13558] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2040'. [ 393.718578][T13558] nbd: couldn't find a device at index 0 [ 393.888600][ T5956] IPVS: starting estimator thread 0... [ 393.992630][T13572] IPVS: using max 24 ests per chain, 57600 per kthread [ 394.022162][T13569] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 394.400581][T13589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2046'. [ 394.511002][T13592] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2048'. [ 394.637902][T13589] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2046'. [ 394.759754][T13601] validate_nla: 1 callbacks suppressed [ 394.759774][T13601] netlink: 'syz.3.2050': attribute type 10 has an invalid length. [ 394.806295][T13601] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.850532][T13601] bond0: (slave team0): Enslaving as an active interface with an up link [ 395.020322][T13614] tipc: Enabling of bearer rejected, failed to enable media [ 395.580590][T13644] ================================================================== [ 395.588724][T13644] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 395.596748][T13644] Read of size 1 at addr ffff8880697ecbb0 by task syz.2.2064/13644 [ 395.604668][T13644] [ 395.607027][T13644] CPU: 0 UID: 0 PID: 13644 Comm: syz.2.2064 Not tainted syzkaller #0 PREEMPT(full) [ 395.607054][T13644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.607066][T13644] Call Trace: [ 395.607074][T13644] [ 395.607083][T13644] dump_stack_lvl+0x189/0x250 [ 395.607109][T13644] ? __kasan_check_byte+0x12/0x40 [ 395.607138][T13644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.607159][T13644] ? lock_release+0x4b/0x3e0 [ 395.607188][T13644] ? __virt_addr_valid+0x4a5/0x5c0 [ 395.607213][T13644] print_report+0xca/0x240 [ 395.607231][T13644] ? xfrm_state_find+0x2cf2/0x5400 [ 395.607248][T13644] kasan_report+0x118/0x150 [ 395.607274][T13644] ? xfrm_state_find+0x2cf2/0x5400 [ 395.607297][T13644] xfrm_state_find+0x2cf2/0x5400 [ 395.607315][T13644] ? check_noncircular+0xe0/0x160 [ 395.607337][T13644] ? validate_chain+0x897/0x2140 [ 395.607361][T13644] ? xfrm_state_find+0x1da/0x5400 [ 395.607383][T13644] ? __pfx_xfrm_state_find+0x10/0x10 [ 395.607408][T13644] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 395.607442][T13644] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 395.607466][T13644] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 395.607492][T13644] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 395.607517][T13644] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 395.607555][T13644] ? xfrm_expand_policies+0x41f/0x6a0 [ 395.607579][T13644] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 395.607604][T13644] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 395.607627][T13644] ? __lock_acquire+0xab9/0xd20 [ 395.607655][T13644] xfrm_lookup_route+0x3c/0x1c0 [ 395.607677][T13644] __ip4_datagram_connect+0x9a5/0x1270 [ 395.607709][T13644] udp_connect+0x33/0x1f0 [ 395.607728][T13644] __sys_connect+0x316/0x440 [ 395.607746][T13644] ? __pfx___sys_connect+0x10/0x10 [ 395.607769][T13644] ? rcu_is_watching+0x15/0xb0 [ 395.607793][T13644] __x64_sys_connect+0x7a/0x90 [ 395.607809][T13644] do_syscall_64+0xfa/0x3b0 [ 395.607827][T13644] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.607852][T13644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.607871][T13644] ? clear_bhb_loop+0x60/0xb0 [ 395.607890][T13644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.607906][T13644] RIP: 0033:0x7f32b658ebe9 [ 395.607924][T13644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.607939][T13644] RSP: 002b:00007f32b47f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 395.607974][T13644] RAX: ffffffffffffffda RBX: 00007f32b67c5fa0 RCX: 00007f32b658ebe9 [ 395.607988][T13644] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000006 [ 395.608000][T13644] RBP: 00007f32b6611e19 R08: 0000000000000000 R09: 0000000000000000 [ 395.608012][T13644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.608023][T13644] R13: 00007f32b67c6038 R14: 00007f32b67c5fa0 R15: 00007ffd3802ac48 [ 395.608046][T13644] [ 395.608053][T13644] [ 395.892313][T13644] Allocated by task 9005: [ 395.896642][T13644] kasan_save_track+0x3e/0x80 [ 395.901583][T13644] __kasan_slab_alloc+0x6c/0x80 [ 395.906455][T13644] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 395.911945][T13644] xfrm_state_alloc+0x24/0x2f0 [ 395.916713][T13644] __find_acq_core+0x8a7/0x1c00 [ 395.921563][T13644] xfrm_find_acq+0x78/0xa0 [ 395.925984][T13644] xfrm_alloc_userspi+0x6b3/0xc90 [ 395.931014][T13644] xfrm_user_rcv_msg+0x7a0/0xab0 [ 395.935959][T13644] netlink_rcv_skb+0x205/0x470 [ 395.940824][T13644] xfrm_netlink_rcv+0x79/0x90 [ 395.945511][T13644] netlink_unicast+0x82c/0x9e0 [ 395.950288][T13644] netlink_sendmsg+0x805/0xb30 [ 395.955069][T13644] __sock_sendmsg+0x21c/0x270 [ 395.959940][T13644] ____sys_sendmsg+0x505/0x830 [ 395.964717][T13644] ___sys_sendmsg+0x21f/0x2a0 [ 395.969394][T13644] __x64_sys_sendmsg+0x19b/0x260 [ 395.974333][T13644] do_syscall_64+0xfa/0x3b0 [ 395.978837][T13644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.984822][T13644] [ 395.987146][T13644] Freed by task 122: [ 395.991030][T13644] kasan_save_track+0x3e/0x80 [ 395.995709][T13644] kasan_save_free_info+0x46/0x50 [ 396.000727][T13644] __kasan_slab_free+0x5b/0x80 [ 396.005493][T13644] kmem_cache_free+0x18f/0x400 [ 396.010270][T13644] xfrm_state_gc_task+0x52d/0x6b0 [ 396.015306][T13644] process_scheduled_works+0xae1/0x17b0 [ 396.020959][T13644] worker_thread+0x8a0/0xda0 [ 396.025544][T13644] kthread+0x70e/0x8a0 [ 396.029613][T13644] ret_from_fork+0x3fc/0x770 [ 396.034208][T13644] ret_from_fork_asm+0x1a/0x30 [ 396.038994][T13644] [ 396.041318][T13644] The buggy address belongs to the object at ffff8880697ec880 [ 396.041318][T13644] which belongs to the cache xfrm_state of size 928 [ 396.055282][T13644] The buggy address is located 816 bytes inside of [ 396.055282][T13644] freed 928-byte region [ffff8880697ec880, ffff8880697ecc20) [ 396.069180][T13644] [ 396.071510][T13644] The buggy address belongs to the physical page: [ 396.077917][T13644] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880697ec440 pfn:0x697ec [ 396.087980][T13644] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 396.096476][T13644] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 396.104020][T13644] page_type: f5(slab) [ 396.108000][T13644] raw: 00fff00000000040 ffff88801b70e280 dead000000000122 0000000000000000 [ 396.116580][T13644] raw: ffff8880697ec440 00000000800f0009 00000000f5000000 0000000000000000 [ 396.125160][T13644] head: 00fff00000000040 ffff88801b70e280 dead000000000122 0000000000000000 [ 396.133826][T13644] head: ffff8880697ec440 00000000800f0009 00000000f5000000 0000000000000000 [ 396.142496][T13644] head: 00fff00000000002 ffffea0001a5fb01 00000000ffffffff 00000000ffffffff [ 396.151178][T13644] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 396.159848][T13644] page dumped because: kasan: bad access detected [ 396.166256][T13644] page_owner tracks the page as allocated [ 396.171974][T13644] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6009, tgid 6008 (syz.2.10), ts 96607624913, free_ts 96554913846 [ 396.190900][T13644] post_alloc_hook+0x240/0x2a0 [ 396.195696][T13644] get_page_from_freelist+0x21e4/0x22c0 [ 396.201237][T13644] __alloc_frozen_pages_noprof+0x181/0x370 [ 396.207041][T13644] alloc_pages_mpol+0x232/0x4a0 [ 396.211902][T13644] allocate_slab+0x8a/0x370 [ 396.216414][T13644] ___slab_alloc+0xbeb/0x1420 [ 396.221124][T13644] kmem_cache_alloc_noprof+0x283/0x3c0 [ 396.226610][T13644] xfrm_state_alloc+0x24/0x2f0 [ 396.231370][T13644] xfrm_add_sa+0x17d1/0x4070 [ 396.235966][T13644] xfrm_user_rcv_msg+0x7a0/0xab0 [ 396.240906][T13644] netlink_rcv_skb+0x205/0x470 [ 396.245674][T13644] xfrm_netlink_rcv+0x79/0x90 [ 396.250350][T13644] netlink_unicast+0x82c/0x9e0 [ 396.255128][T13644] netlink_sendmsg+0x805/0xb30 [ 396.259889][T13644] __sock_sendmsg+0x21c/0x270 [ 396.264568][T13644] ____sys_sendmsg+0x505/0x830 [ 396.269327][T13644] page last free pid 5863 tgid 5863 stack trace: [ 396.275648][T13644] __free_frozen_pages+0xbc4/0xd30 [ 396.280777][T13644] __put_partials+0x156/0x1a0 [ 396.285475][T13644] put_cpu_partial+0x17c/0x250 [ 396.290260][T13644] __slab_free+0x2d5/0x3c0 [ 396.294691][T13644] qlist_free_all+0x97/0x140 [ 396.299298][T13644] kasan_quarantine_reduce+0x148/0x160 [ 396.304780][T13644] __kasan_slab_alloc+0x22/0x80 [ 396.309639][T13644] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 396.315105][T13644] getname_flags+0xb8/0x540 [ 396.319623][T13644] do_sys_openat2+0xbc/0x1c0 [ 396.324240][T13644] __x64_sys_openat+0x138/0x170 [ 396.329105][T13644] do_syscall_64+0xfa/0x3b0 [ 396.333624][T13644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.339518][T13644] [ 396.341847][T13644] Memory state around the buggy address: [ 396.347475][T13644] ffff8880697eca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 396.355620][T13644] ffff8880697ecb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 396.363764][T13644] >ffff8880697ecb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 396.371819][T13644] ^ [ 396.377459][T13644] ffff8880697ecc00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 396.385513][T13644] ffff8880697ecc80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 396.393570][T13644] ================================================================== [ 396.432794][T13644] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 396.440049][T13644] CPU: 1 UID: 0 PID: 13644 Comm: syz.2.2064 Not tainted syzkaller #0 PREEMPT(full) [ 396.449517][T13644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 396.459578][T13644] Call Trace: [ 396.462869][T13644] [ 396.465802][T13644] dump_stack_lvl+0x99/0x250 [ 396.470436][T13644] ? __asan_memcpy+0x40/0x70 [ 396.475066][T13644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.480293][T13644] ? __pfx__printk+0x10/0x10 [ 396.484912][T13644] vpanic+0x281/0x750 [ 396.488904][T13644] ? preempt_schedule+0xae/0xc0 [ 396.493768][T13644] ? __pfx_vpanic+0x10/0x10 [ 396.498286][T13644] ? preempt_schedule_common+0x83/0xd0 [ 396.503754][T13644] ? preempt_schedule+0xae/0xc0 [ 396.508612][T13644] ? __pfx_preempt_schedule+0x10/0x10 [ 396.513993][T13644] panic+0xb9/0xc0 [ 396.517820][T13644] ? __pfx_panic+0x10/0x10 [ 396.522243][T13644] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 396.528145][T13644] ? xfrm_state_find+0x2cf2/0x5400 [ 396.533273][T13644] check_panic_on_warn+0x89/0xb0 [ 396.538249][T13644] ? xfrm_state_find+0x2cf2/0x5400 [ 396.543384][T13644] end_report+0x78/0x160 [ 396.547650][T13644] kasan_report+0x129/0x150 [ 396.552167][T13644] ? xfrm_state_find+0x2cf2/0x5400 [ 396.557316][T13644] xfrm_state_find+0x2cf2/0x5400 [ 396.562252][T13644] ? check_noncircular+0xe0/0x160 [ 396.567282][T13644] ? validate_chain+0x897/0x2140 [ 396.572224][T13644] ? xfrm_state_find+0x1da/0x5400 [ 396.577253][T13644] ? __pfx_xfrm_state_find+0x10/0x10 [ 396.582547][T13644] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 396.588718][T13644] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 396.594624][T13644] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 396.601222][T13644] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 396.607134][T13644] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 396.613137][T13644] ? xfrm_expand_policies+0x41f/0x6a0 [ 396.618520][T13644] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 396.623901][T13644] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 396.629710][T13644] ? __lock_acquire+0xab9/0xd20 [ 396.634570][T13644] xfrm_lookup_route+0x3c/0x1c0 [ 396.639423][T13644] __ip4_datagram_connect+0x9a5/0x1270 [ 396.644905][T13644] udp_connect+0x33/0x1f0 [ 396.649324][T13644] __sys_connect+0x316/0x440 [ 396.653917][T13644] ? __pfx___sys_connect+0x10/0x10 [ 396.659031][T13644] ? rcu_is_watching+0x15/0xb0 [ 396.663795][T13644] __x64_sys_connect+0x7a/0x90 [ 396.668561][T13644] do_syscall_64+0xfa/0x3b0 [ 396.673066][T13644] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.678274][T13644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.684351][T13644] ? clear_bhb_loop+0x60/0xb0 [ 396.689031][T13644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.694928][T13644] RIP: 0033:0x7f32b658ebe9 [ 396.699357][T13644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.718979][T13644] RSP: 002b:00007f32b47f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 396.727400][T13644] RAX: ffffffffffffffda RBX: 00007f32b67c5fa0 RCX: 00007f32b658ebe9 [ 396.735381][T13644] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000006 [ 396.743373][T13644] RBP: 00007f32b6611e19 R08: 0000000000000000 R09: 0000000000000000 [ 396.751435][T13644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.759412][T13644] R13: 00007f32b67c6038 R14: 00007f32b67c5fa0 R15: 00007ffd3802ac48 [ 396.767409][T13644] [ 396.770578][T13644] Kernel Offset: disabled [ 396.774912][T13644] Rebooting in 86400 seconds..