last executing test programs: 4.541311313s ago: executing program 2 (id=4400): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa800135c9734f8f36d524bc987f6bac30f41007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffff07000000ff", 0x58}], 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000100000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbf07000000000000070000000800ffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000046000000760000006d00ffff00000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept(r0, 0x0, 0x0) 4.345551548s ago: executing program 2 (id=4402): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket(0x2d, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2d, 0x4e24, @rand_addr=0x64010100}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) socket(0x2d, 0x2, 0x0) (async) bind$inet(r1, &(0x7f0000000080)={0x2d, 0x4e24, @rand_addr=0x64010100}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) (async) 4.100836543s ago: executing program 2 (id=4407): unshare(0x20000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000380)="4000000000220006908a00000400", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="5f96565e14027386aa93a303c44b5b3b", 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x20008004) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000700)={0x0, 0x9, 0x5, 0x5, 0x40, 0x1ff, 0x2, 0x5, {0x0, @in6={{0xa, 0x4e24, 0x1000, @remote, 0x2}}, 0xb03, 0x8, 0x3, 0x800, 0x1c0}}, &(0x7f00000007c0)=0xb0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000b80)={0x0, 0x7326d153}, &(0x7f0000000bc0)=0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 'veth0_to_team\x00'}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)="07a98e7122d406d5e6bd6df0a2bc6d19e4f843d29131e8feef57a27fcaa5f17c0cc074bbf277c4eac1e763485b534c48d9b0065517df479f9df505cf068fa485e5d8d4ba0274dea41f03a9614ddc95e23b5c3b0055c078ba9e140a8012189ec993bcad8cf1b478545d1442a84517320a3d623e1a3ea390ea89559e6a4f5a96583e574c7aa9b3300375ecc92dbb839a4e61914d3be9034d1abc0e83f1be42c0a98946509b1ad9701eb29f44da021986d35894aee71b7677fe91ecd966805323eef420187b7566d9ffe2200f53be3198", 0xcf}, {&(0x7f00000003c0)="9bc66357888b2515dedf8abbcbb4021db1025e6f66a24645fd7630d8ee920a4049e4d1f77ddf5665a0628530ec55252e3d34449b5409cfeb6279506158030374a008d230ceb403ea2e432d520d8dcdabe2ecc4f00c4cceccbd0cc2ceff881aac2e71ccce5aea4986a063191800ad1497e5836d414be778730a48039667aad9976b537e5fff751fa291a2c5bb0dfa467819c1161a18b954578d869b210a96f7faa9d651b3c13c2a8ac25d08140dfe285c80f1be68bcb933f2287f2ee1cf54c951b3f51169fa73583be80820dae966ee6f393e31af8717", 0xd6}, {&(0x7f0000000100)="f9544729aa", 0x5}], 0x3, &(0x7f00000004c0)=[@txtime={{0x18, 0x1, 0x3d, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x60}, 0x24000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000002020101000000000000000002000000240002800c000280040001ff00000000140001800800010000000000080002"], 0x38}}, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304f9fffffffe0adf2500007400", @ANYRES32=r4, @ANYRESDEC=r3, @ANYRES32=r3, @ANYRES16=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 3.985553866s ago: executing program 4 (id=4410): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x0, 0x0, 0x10, 0x8, 0x22, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) shutdown(r0, 0x1) 3.760875327s ago: executing program 4 (id=4412): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18, 0x40045}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/38, 0x26}], 0x1}, 0x3ff}], 0x1, 0x40002020, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0xac}, {0x6}]}, 0x10) 3.56461979s ago: executing program 2 (id=4415): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) getpeername$llc(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, 0x0, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) close(r7) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300)={0x0, 0xbb8}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000380)={r8, @in6={{0xa, 0x4e20, 0x1, @loopback, 0x5}}}, &(0x7f00000004c0)=0x84) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r9, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r11}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x80111500, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r12, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r13, 0x402, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x1, 0x5a}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4049000}, 0x42000) socket$inet6(0xa, 0x1, 0x0) socketpair(0x27, 0x2, 0xb36, &(0x7f0000000500)) 3.560822134s ago: executing program 4 (id=4416): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0xff7f, 0x5}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={r1, 0x32}, &(0x7f0000000400)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280480, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba724a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e993ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d74df524b760ab92efcce7dd1574052c73596f860221156437f4d6b76ecc4b35bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5ca93125e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d309d8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a650be5114c31582d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc882d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd61dfb3de7f503d58ac8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da9399507126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0d74d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc4511183096eff3188a288c408b10285e7ec75f826e9b08a82cde1f4470545eebc71440623752e87ecc689b7fec2f667e22705b4660b2ef936cce446244bb48f8c7d062ea4a955facf6c2957cfb3c3ee9229efab5b72a5c5266eb493c7c3b08a91971692d9673cb9df620a8240d4f94b9fafd8e2bf0f9cedd1e08f4f10fd8f25f3169ed878624adccb5572cb918e0e3ba7e4ac0967aa65241903509778e63bebf00107524f858d7d48ef9e2c112c75d732344dc0a9bc506172d5a45e3bcb203862307c24c20fe1ffe6b5a43dbc1b20156161b5f59ab9955f2a6fbc64f547a671ded4896d8c4bac78f23e15c8e6cb72599d27607e5a1ad434cdee73d026e5dd14d9824202052181dda714fff7dc43444bc948541f641ac8215a5dae7fa8a50897b916a856aedcdf16be8736b33823ab7b2f1c77554bf2c36e412fcdc2c7c2bf0499ed5dfe84db2d7d3bb802f47dd2ebb7945e09f542d464dfbd2c70a90ab36ebd331a6549fa16f2e83a06c512c83eec56b5b94040d31da56e021a48c8651ebf3e1f8931a6d18150f1d76d07e7d8ecacbed15e9c2a50e610f1d0b523083b182cde6cf655ddd45409400c23fb89eba0db0ab4eee055a60a6ac7fea75703e8e4d737bfabae0fc3c1406b6b454ba694673a69b1782eb0052c2a4e251c8f96c7bcab1845dc347ded7fb207fd19f2bea2e496d63613af735b8e8376658ce4b43a09b53846f0a0218661d917e39bcd79063128f4c5c570b6214db8ed5e1255d48725ad8dc0d3c5aafafb47095dc1f3572650e4b3d0540cec5340638d325897dc3ecc721634875abc32f6ea1c28bf579013269343786a7e8389df8bf34fee174310f070f0abfb9b5e035aa32be5721b5c8475faba7cce82fc9af55e73d8398a45dd151b0a1490700c02135e81d4153c992e171cec6720269625daec40c909f2bb92f9dae7e7caf86be26f080daeb973bd5912562e4211ef924f284dd583537e15b342ef7a7c3cf4c976742c086915d8d92be7e9f9464fb12fa3908c957ae1b2e4443be891828c9cf41036fcd4d871080e4d035c6dcab88a13704f0538c48d7b24f35282adaa33f588ecd4ce7eb861023e10c5adfd80df856524d14c6485198bb7045921f8ca677a7e50123d8ad717d259f31e4f4808f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000200)=r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000180)) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="080008000084040008"], 0x53) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 3.102004553s ago: executing program 4 (id=4423): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18631128000000000095000000000000000000000000000000000000000000004875e3acd72e5baa76a47a1e5d16a819499dd3993de37e1ea80cac6d96eefb2a13ec8745a4c4c86c8e1faa"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x0, 0x41040}, [@IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x28}, 0x1, 0x6000000, 0x0, 0x40010}, 0x20000040) 2.51989028s ago: executing program 2 (id=4428): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x138, 0x39, 0x504, 0x70bd2c, 0x25dfdbfb, {0x1d}, [@generic="428b70400b46b01077822303f64b722648cfbe22bb2799709c8c94cf3390a22b54c18187c204aae8dd401876d6a40e400d53e3de2e2382c9bfa4f53db0d5175d560fab343e14118ed2ec7e6b83266505a55fd995f55f9f8bb9e0e2bc1bb316657e492f5fd7eeeec8af85dd731a118fe68f645636b809259ec4f8eced938549050d9cf3ad2cf37aca149c33f256e7f89140344748ff60d244e34384b5c30826b8bb827516b41ddc39ca30363fa7699aed6bd0c00d727e130ac8cceb103248296f2bdd6b327355829d4ae3caf11eb20aa87c1cadd52fba204b3110e1b191", @nested={0x41, 0x4f, 0x0, 0x1, [@nested={0x4, 0xd0}, @nested={0x4, 0x92}, @generic="8259c32c0c9f1ed4a9c5a9bdd12fb735948286007692916229067383227ea18b6b5e1bbcc8d2ed7b43cb56e7b65aec127de407233e"]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4}, 0x8011) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x20, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x48}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002ab909000000000000000000080001000100000008000500020000000a0004007770616e330000000c0017000201aa49"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 2.478753101s ago: executing program 1 (id=4429): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000200)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x1, 0x4e21, 0x9, 0xa, 0xa0, 0x0, 0xd6, 0x0, r1}, {0x4, 0x5, 0x696, 0xfffffffffffffffe, 0x911c, 0x7, 0x6, 0x250f2b02}, {0xfffffffffffffffa, 0xfffffffffffffffa, 0x5, 0x5}, 0x3e, 0x0, 0x0, 0x1, 0x2, 0xf07afb547c53e817}, {{@in=@broadcast, 0x4d6, 0x32}, 0xa, @in=@multicast2, 0x0, 0x1, 0x1, 0x9, 0x6, 0xbe9}}, 0xe8) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@default, @null, 0x5, [@default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRESOCT=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0000000067042398d2208994ed5b01000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x18) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000600)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x8f09, 0x2, 0x10, 0x0, 0xfffffffffffffffa}, {0x6, 0xed, 0x80000001, 0x2, 0x4, 0x81}], ['\x00', '\x00', '\x00', '\x00']}) 2.311399589s ago: executing program 2 (id=4430): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x4010, r5}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0xd8, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x27, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x4, [@const={0xe, 0x0, 0x0, 0xa, 0x3}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0x10, 0xf}, {0xa, 0x100}, {0xd, 0x3}, {0x4, 0xa8}, {0xd, 0x6}, {0x4, 0xfa}]}, @enum64={0xb, 0x4, 0x0, 0x13, 0x0, 0x0, [{0x7, 0x0, 0x91ae}, {0x3, 0x0, 0xe}, {0xf, 0x3, 0x1}, {0x1, 0x7ff, 0x10000}]}]}, {0x0, [0x2e, 0x71]}}, &(0x7f0000000940)=""/150, 0xa0, 0x96, 0x0, 0xa}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x2, 0x0, r6, 0x3, '\x00', r7, r8, 0x3, 0x3, 0x3}, 0x50) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r11, 0x2, 0x70bd28, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x12, 0x7fff, @udp='udp:syz1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000000e0000000000001010003f0b00307e00"], &(0x7f0000000140)=""/43, 0x28, 0x2b, 0x0, 0x4, 0x10000, @value=r9}, 0x28) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) unshare(0x12000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x109, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x0) r13 = socket(0x8, 0x3, 0x0) connect$rxrpc(r13, 0x0, 0x0) 2.309987445s ago: executing program 1 (id=4431): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$sock(r0, &(0x7f0000000380)={&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}, 0x40) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x207ffc, 0x96, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x2a, &(0x7f0000001700)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @random="c79094b15e35", @local}}}}, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7) sendmmsg$inet(r1, &(0x7f0000001c40)=[{{&(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, 0x0}}], 0x1, 0x4000800) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x55, 0x0}, 0x1}], 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x24000000) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, 0x0, &(0x7f0000000080)) r6 = socket$rxrpc(0x21, 0x2, 0x2) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001940)={'batadv0\x00', 0x0}) sendmmsg$inet(r6, &(0x7f0000002e80)=[{{&(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="809e77ba3c198a827267a96a5a81237f9ba7a683cf6cb6686466a99aaf2dad03bc3e7a31e771f674fb50e36678240edfba297609", 0x34}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f0000000180)="a8", 0x1}, {&(0x7f00000012c0)="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", 0xff}], 0x4, &(0x7f00000013c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010101, @broadcast}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x86, [@local, @broadcast]}, @timestamp_prespec={0x44, 0x34, 0xf4, 0x3, 0x9, [{@private=0xa010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x5}, {@loopback, 0x8}, {@private=0xa010100}, {@empty, 0x1}, {@empty, 0x40}]}, @ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0xd8}}, {{&(0x7f0000000240)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f00000018c0)=[{&(0x7f00000014c0)="107d9a7ed8d6779d7f4e28d4d0df5f86067a1f812eaad1f46ea27b69a03175f1beb7d53fa54aa741d8889d2e", 0x2c}, {&(0x7f0000001500)="7fc87a87473a5dce473886666caa636966bf737fc37a8e70946504a2396d9098831d405fc23947633e76b62445801653e402513164271f2f7612b302aa6c8477cca71ed7429cfb132bde13824524c5e8613b02f45f230e981da6ea1c9c26ca5bda86b3ec3555ce35da244ed6e67244523405a8967e4f35af65da1bd178188d62f4e3fccbb007383cd1", 0x89}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f00000015c0)="dd506716531f079aa990ef18e05cc287409320b0b40ee92b57843f26b628cc6af4decffe8b73eb7642bd3defe482eea32a38f4b5e3ab18dae72bbd14e7ed43bbc3bea4533e78c786e1080d4ce84e45d67290f4e886b294e9e9167f0a4fe2885c446094e0ba989b0a43fe995719be3526103dda01180204d2e9da9e81eac4bec3ebac77c5952ab635282ca0089b3bc1dde569e35ee0bf86ac97479efbed6b8f7bba59c10a7dee1cf28e61da4cc8d9c66aaf050d67e741f06baafad1c08634ef319f5fca3d8bbd7071b83dbe65907a7d157b6258394c", 0xd5}, {&(0x7f00000016c0)="65b64292b6c15ea63b767119890b1350aeed43f7e151172981ac2e4b326aab93a8a35222b4a85cdeb83023eefd027cdf3a66b69217d52d4f696376190d977f203eced9bff735aabdb6711f0b5279cd880241d28896bd4861f6e98b3fda584a52b33df1a707e064a3b7ad1fb209c4bf74de83823cf7dc1ff30d6ae5ebb0424075674bca4268e96c3287d45a28fe07e6605e47524c8770d95c13b0b1dad5", 0x9d}, {&(0x7f0000001780)="f0ef4ffca2752119caa29dd730f61ec8c7a2b1027b57ec774cf6948af7d7362b8467f2dcdff3cf1dbceb5f9a9659903e59ab7d1885c2576ad78d13fc890b02425fc4df167eca006e7556efe7507b24610b5749aa9e5c9ba3cf8de780e2ef35f5ec51c338670b935ba8", 0x69}, {&(0x7f0000001800)="88a0ef92e7297d0b06fc27111c51bcd5e021658086a65e177d30ccae0ad23876c26c78623b50ab4e01f70e7a76de0011c94cac04396a2ab8d3d58ee968b42039a32e2ee00406ac1dfef5061c28db34c215ea465ff85e62d1a6245c38b9705a8b86b4bb130091b57b045592e2df478873fc7d375474332e394d76b2fc437481390bb7dce9065664ab9e2b71acc5a7850e37e8333de59d6d097454dbce3be2ae3d4dc12e91262ddf33", 0xa8}], 0x7, &(0x7f0000001980)=ANY=[@ANYBLOB="1400000000000000000000000100000001000000000000001400000000000000000000000200000003000000000000001c000000000000000000000008000000", @ANYRES32=r8, @ANYBLOB="ac14feaa0a010100000000001c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="e000000164010102000000001c000000000000000000000008000000", @ANYRES32=r8, @ANYBLOB="640101010000000000000000700000000000000000000000070000008604581d443c5373ffffffff00000009ac14143a00007fffe0000001000000000a010100000000077f00000100004a96ac14143800007fffe000000200000008891fcd64010100ac1414afe000000100000000e00000017f000001ac1414bb00f80000000000000000000000070000008917530a01010064010100ac1e0101e0000001ac1414aa442479100000000000000007fffff12a00000005fffffff80000000700000002b50000048313f9ac1414bbe0000001ac141433ac1e0101009404000089038e830f4a7f000001ac1414aaac1e0101000000"], 0x178}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001b00)="c03b975505f54a772883a0d18b6db758dc6c5d41bc52606cb9340206dc68c706", 0x20}, {&(0x7f0000001b40)="e663388b2638c69e9266d66211ee09598db42f1d85d8fd89e07eba7d9b6b0aee99ec4560aa6e46b57aae944ee4ae50f3a74161870a5c1e", 0x37}, {&(0x7f0000002f40)="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", 0x135}, {&(0x7f0000002d80)="b00ed615abcdf68d5328bd341afa3031379789997a6fd6f9887ea2ed39690b4092bba157ae9b896392d78ef2cbfd71a71866637ae9358b245359d086eaf2b9c8fda885b027cf049e2264c2ceb93fb288333409c5b20d8a167c126ee050e26c017b034a7a262b411c073a761156de62144c4b8e0cced60cf64c66259897c02246586d7e2c3a7a440f4fe3bf6797f71110e0e3966b69e5e2fa86c39565225e536f116c71ffb6c5a779b995f56a3665a032b608fa321850733e00f0941f5aa7c31c9cdc1420e90b602bf43a89ee78e24120880b638709b115f9f01025970670904d9076cb92f9e5da7f59f548242f84b0d0", 0xf0}], 0x4, &(0x7f0000002c80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11}}], 0x60}}], 0x3, 0x4040080) 2.048666997s ago: executing program 4 (id=4433): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000680), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e00010000d2c1138d6f949a1b0c"], 0x24}}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x80) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000200)=0x7b8d, 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) r5 = socket(0x28, 0x1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) syz_emit_ethernet(0x16, &(0x7f0000000340)={@broadcast, @remote, @val, {@generic={0x88fb}}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) 1.92714624s ago: executing program 4 (id=4435): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10) sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="f49940a0dd5070520780452a611331e3467a27f36de7be1fc9439bc4502d702b086241ae1c66fd4a501d2e3cabda8621c20008818057093d594cbb83c1679ebecebc3860d329c362278162f7610277273ced14ba567413b0d842968056df18f6c688f19540e9f58f1bc50d329c0e05b196c085239955dae2933ae829961e2f37badcac7f21278348c87d5f4f528f15efb4229231ae0e3704cf15c359295b8311d51b5ba5fcdc5bdbb8c384c470ced6e17450099841f3a7a87472349ea392e329219b6650d46e5dd30888e31c", 0xcc}, {&(0x7f0000000000)="4aae862578361350635a99b612e9db0ef9328efb3463f866ed78fa1023d8d874b8cc1fafb2ab2f585f29145e4d2710c71cf7", 0x32}, {&(0x7f00000000c0)}, {&(0x7f0000000280)="a6212e32815714aab161e1615d66f9a5d260c3a8f03a40d2eb131b58cdb51085867566278991ec9f3d9e3df042576d9e6d8fb76c4892d201da32fe761bb95d9fa80efa00df4392e7f52151492fcc1f85a37e0d05791c91da98047af78299d62e1099eadc8ac090c547e24dd599826b9d5f70aa4135da0fe4cf3ef382c4259f98c1928cd745aa18da301fc455019d8d3c5e780de2aa5f736b55b3806ea353c972abf1b38153c794b29153c6a2f35e3e4a3fcb76edcb28bbafeea70cca34257e1d42196a65d18c753348c05590475ff3b80869b8fbaa6e6392d904b4a7bcc645ec55b94226", 0xe4}, {&(0x7f0000000840)="55cf9ad35dcef2af330d84df13cf414d6353fa44e630c71100d52f10208efcfb5d4d1dce032f529f998997c2a3c303446e675cca4d70c62a64eff37a1c1b59e1aac46fb1b7e4540e39fe695da11fb93b2fd0247255218d1e311753eea990fb83bb376f861cc8ae8aebf709759ec89c02bd1e946c2a4a77e816b61d1bac81890bade6c4ac255b1d13c0fd75871bfdb24d3855de21199f76c34a1a4fa6282fa49308847f35d4417b0100483256043a2d5a3131f7e721675ac4a2b1d242bd2f6b97982306217529c3e88cde9a57822c1e9814", 0xd1}, {&(0x7f00000007c0)="8b2c6e68e8e0bd34725c7f68a1d445004d263bf8db66b9c70f80c2cce2ab05d9b2e37b3249e1f4a917fc8b32cf1ec701b339fc156caa748577b012f4bfb91bbd75347c66b3049e940f2318c25b5fdc8e62f127803d728c24c438678c4d7421122c6e656958f5f75334ae2db731bccd", 0x6f}, {&(0x7f0000000480)="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", 0xfc}, {&(0x7f0000000580)="f92376efde6a5d7bbd401a576f5b0b9a65545f9ded45a5e8e878bf123b63a546622e60bbd7ebeb0d2d542b943ef8fa3687f149b0046e71e55321d5876f9f223a4ad49b45761336ca11f568f8286cc6eeddde4e7ab33e0f470f8399befdab3930f1550222c1f33d54473e", 0x6a}, {&(0x7f0000000600)="ccb17a6e733fac40b48f687367c2a5da06c86a3a381f3eaa3a6fecd063e3ee4285f18de9d69789eea173917fb33d7ec1858780ca0ed94dec5b0d23c97f82e3ff057f6f1d3cf595ce25a141c2fe68f074f03773e38ca23b9ef803795f508af3aa76b1f0383a40b9796620ffba37d06b0d163b00ed697e5ab88f28f10197f32bff4b3c9d9afd6b31088e982a46f81c01b30e0ee42cb83388ded8e2d08f80555364123a20e62c6c57e388825a07f00f381f700e44977ac00a1273bd55fbdc38792ef8d8d9c3c8e2645a6cfa0f26f0b08a70cd5aec5e072fbb3d2832aa4ce06f49a982cc90a0b42d903dca47e4f7", 0xec}], 0x9}, 0x4008840) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.898685092s ago: executing program 0 (id=4436): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r5, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000050}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) 1.728050542s ago: executing program 0 (id=4438): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c0008000000000000000000080001000000000044000780080001"], 0x90}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x10000}]}}]}, 0x3c}}, 0x0) 1.42855303s ago: executing program 3 (id=4440): syz_emit_ethernet(0x76, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x40, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x2b, 0x0, @mcast1, @dev, [@dstopts={0x2f, 0x0, '\x00', [@padn, @padn={0x1, 0x2, [0x0, 0x0]}]}]}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000ffff1700c4000000000028009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) syz_emit_ethernet(0x76, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x40, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x2b, 0x0, @mcast1, @dev, [@dstopts={0x2f, 0x0, '\x00', [@padn, @padn={0x1, 0x2, [0x0, 0x0]}]}]}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000ffff1700c4000000000028009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) (async) 1.339549791s ago: executing program 0 (id=4441): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x8000000005, 0x5, 0x1, 0x2, 0xc, 0xa, 0x0, 0x1000000000007}, 0x0, 0x0, 0x0, 0x0) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000d80)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)="ebcf5f7c1907ea0243905665639732466dcee20414b1d9ff432263435f44f75388cdd88a80090aca13e076db68845ed1da0b618b9939c74a5176ee5374dc5685459d0771e76ba26f48aa5553ec88a52f59f827e4dd736568e29512a9b6e0b4cb5af55b8982044b8017efaf5acadfcd37ae2f7e8753fcb49d69e75b4f3a7281efa48198fd7e05bf0492f916c8d3af5c92f48aef80ea2038bb3c03ecd1b176d15930ef06efaef2efb01eabf384de236a2e2fd842872bcff37154e326a466f88ffce52635f7a556f6a06318f7b52062823c7c85007ed62d88fe464f356ded6f51ccb75fc7e6d064886eefe1a359027a2a380ecfa278757b", 0xf6}, {&(0x7f0000000a80)="9758a15b43c8b4ca905ef92503d09c9924f75653a5effc4808cf32ee38a862f2d8e9f9ed8e353f024c05468b44cd926f8e6257a8668a9dc70700000000000000f7affbe27c6a4e280449792618d2b02246bd98e2702e747722e41e22df27cbe09a8144fe3e84986afd56e476dde06849afd2dac9bf65f937cb08f7da872a0dae5b6aacdfbf1b99039384ed8489d619fe53fb0ddc8046", 0x3e}, {&(0x7f0000000540)="bd145350f73f21310cb42cbcff4f3dd81f7f6ea6b5aa73331ccd95d12b912ffecb250ac60d4963fb6869bd73de9c06f9151596a4f28fff5dfe73e17fc75233ee691799dba2e97592ebd92573b21b01f8641f6640a14e1fc2a8d9a9f2c1f4a5390335e19e5651496a10c47728a1eea9105811b8b91b0b861568be6b4b5bc4a743e802601b54e8cb579fa49f3e32c7e906df144cd319dd49c963fa58a2e7a26bdc39cab985cc82be9c07e050b142f35bacadcd38cdd20560ffb2f69f22d80463fc26897fc36bcabd75e0e86f947ede99827e", 0xd1}, {&(0x7f0000000ec0)="8790072e3517bc70a89d1295a711e46f6a055791826b08500226dc8b28f63e7dbfe125496d44ce6b6b75eefcef22529f6decbddbb9fcfd4619e208d95cd4e45eeb15e7aea0", 0x45}, {&(0x7f0000000280)="eb9383ff304ca9ffd37bc6b227ee3e76f2a05f037c49afd91693728f228b6e5d408fd0c94a6ed124b79c491c7859f6e9e9e2882ad6", 0xffffffffffffff98}, {&(0x7f0000000640)="d11c47cee0f3026000ba509d4d64beac7965536e5373db1df8d46560b04b905d6463eee45988cd27fb81a26337a8559b06578ca56bba6f99d0d6e10bc448ed4fa644be33985d2afb221f79861e2cf23ae66553ee3b6387459accee4bfcf8d6a7a7a6fdd650928c352915b227f6613ad27aaf97b0999fe943a35e91eeb8e64e15c8b481a81a0e5ee7d5", 0x89}, {&(0x7f0000000700)="22709a647150ed66a55f3537a0e054903b4e36c4787a72e99c848c1104a784d502a4b2b8b1f51fb2cb10125e4ebcd9b26653bc226327ecdfea73e5830494e3b400648a63d63ad6dabda9c480fd", 0x4d}], 0x7, &(0x7f0000000f40)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x24, "bbc562f3ae0d804d5325264377e3a5fbb7f967f4a1bc14c4fcec9aec25f2060471edd571"}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0xe0, 0x117, 0x2, 0xc5, "d0043301a11e9643fd15dbf445e44402c4847de533e062452a45ee7d50e738e6f121697751a475c487ff1a74f3bbe604eefca1775cd027455d9b954c07ea2c3e6e5a6e9617248090d2edee1e3e2c48db0fa59024c9e6f339239288e9dc536a522d0d18c76553cfedd412a92ba72d5340b1a0e223d4d657a1175d3a4d6e05ab79b5251baec140dddbf8b38c54c926028a3652b497e163565e11284cf34e8b70a5ddf4f1401a836ed379fcef3bbdc0b7ed24592340db291374849409682b8000000000000000"}, @assoc={0x18, 0x117, 0x4, 0xa3}], 0x160, 0x408c0}, {0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000800)="2f5464ad53ed1f735bc605c3a3da5c2230ea428232c605ca09640dea5285d3ddfa2885912bf032f68277228d622f13ef1f96168af7e90c20aa87f2a2006ca13c10adfe992dd554ec430f3f8394aed6cc73ff1371b40b52ab91de0e3cdeca72557b05d6655d75c7f4efbaca4de1a933b7efe8de7e9325779e1f02297b8b07a86953baf4cab8c6", 0x86}, {&(0x7f0000000380)="4112bc0c", 0x4}, {&(0x7f00000008c0)="356246b32c9891ed", 0x8}, {&(0x7f0000000900)="4d782f02b37878128069444fe8dd36d92f55b43da222510fcfa1af6525b4e7a6135da2edeb98e218be4d6ed051892cc185604d755faddeaf407975cb2395e369fc59b891a8fcbaa8ef68a5b5a5ccbd550f4b16e4565900acecb558b91e789e2d1772", 0x62}, {&(0x7f0000000980)="a01de342078d72b29f58dedf66c5a8d18f08b03991b2d9355b09679f0608e2c55f65d5d50531f65173093889b104acc11b701b26f02f6c7ca55b8eb5fff1529f5d7dd6a65bc0337af1cf3f8eeb1ce4fa33f996e12158ab514ecde15bca638ec9cfd4ffcdc15258b76a3e5874904d1de63099fdaacabd2613854d1e2e3bc502bb8516e45f21f65c20f3bb088007317363d8ec8acbabc48b984653e8577b3f35e1333084662cb2b6bee09c8ac7a0666b663abd13df6eb44147be85dd7f2c2c04d02f587a2482c8a5c660866155ab0d3c8cd5dc85764f3c27b6a09ef47607086784bd95b4", 0xe3}, {&(0x7f0000000a80)}, {&(0x7f0000001140)="fa54b9eac05df1dd335b8944f8e003dc9036cf8235b369e36a0554718b5a5ed1304f233725150ef6fe6c9f1bb9f4c66fc1bb05cb46af1bb6120c451c45b33ec0bee0a176e0c58b89e0637533188f31cd7483a89f9bad2a02ffd571b9311ce2b3e46a4211bda373927d32c4abd8880cd0d338be1cdaa3144f97a6eacf41cb0718539084362685beb412563194c71c621b7829aaf9632a170fb62a289afcb4a88aa7da815e4eb521529ca1db482d1607a7e55d09eda96e8311d786b8a00098b000d6e6990962a12c7a710113eaa794531b03334faa0988bdbb256963fcd632e965099c086b0d3a4be67e375bb6f6500c3f0df37f35c68dae2955d0fc04f20a5b2f31610364ea45c49a30b24a7759d52f7533443898a7428c4f01f1264f337fc6e95d633c27ed333114c84b4cec9748a81631cd2384a8b52701ca572dd171dfaa9a82a5b3346a45f83ea54328712ea0d431a82cb9c810e6d78929f6", 0xbd}, {&(0x7f0000000b80)="86d67d06510ca9e047a239727f5e489deed8689113bbe66b1123705436a9300189d2be295fe4f3b90dd60e49f967c5c98a02ed5d54768f46caa73e3d9f962cf8b35b00138c119de60448e040bfb4f9e02048cde9ec74d669f0b4c5ce93e0be3ab5bf8c83bfd8d5baf23aa703d7b10f457744acc52410aef10ebdba0eeb0b7df230471b5341a55dfa655386bbe86848222abb3a590889c14632cfcb1be8be5bee2284cfbe83f2072b", 0xa8}], 0x8, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000001701000004000000000001000000000018000000000000001701000003000000000000000000000018000000000000001701000004000000e50f00000000000018000000000000001701000003000000010000000000000048000000000000001701000002000000320000001dffd1379da97727117ff2978c18ebe42489e75b638a18906b5301dbaea52446872adc1b5707795903185dd973b1ee129f290000ec8068"], 0xa8, 0x4040800}], 0x2, 0x5) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='\v\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=0x0, @ANYBLOB="14002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4008000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000000101020000000000000000030000071c000ea00c000280050001003a0000000c0002800500010001000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8004) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70b02000008000000b703000000000000850000008d0000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r5) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0xe0, r6, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0xc4, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x41, 0x0, &(0x7f0000000080)) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="e03f0300eb03"], 0x33fe0}}, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 1.337267624s ago: executing program 1 (id=4442): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="df4800000000000000000c0000001400038010001bd8b7eb789dcbc5a9613a5603800c00018008000100030000000c00018008000100", @ANYRES32=r1, @ANYBLOB], 0x34}}, 0x0) 1.251959544s ago: executing program 3 (id=4443): r0 = socket$rxrpc(0x21, 0x2, 0x8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x1e, 0x1, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, 0xffffffffffffffff, &(0x7f0000000580)=0x4e) (async) r3 = socket$rds(0x15, 0x5, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x134, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x48, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0x8, 0x0, 0x1, [@generic="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"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x134}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000340)={{0x2, 0x7}, 0x42}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="0000eb810000000000ffffffffff000000000000", @ANYRES32=r5], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r6, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r7, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000980)='%pB \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r8, &(0x7f0000000340), 0x0}, 0x20) (async) r9 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x1c) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="8605000000000000071000000003027f080009000000001500000c0107c910e6087dccc783137ebde9957ebec1fc3d000000000000000000"], 0x38) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r10, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) recvfrom$rxrpc(r0, &(0x7f0000000140)=""/226, 0xe2, 0x40000001, &(0x7f0000000240)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4c15, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, 0x24) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) read$alg(r12, &(0x7f0000000040)=""/136, 0x88) 1.110210818s ago: executing program 1 (id=4444): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getaddr={0x14, 0x16, 0x100, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.105701919s ago: executing program 3 (id=4445): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xa, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040005) 848.672902ms ago: executing program 1 (id=4446): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000070400000000000200000000005f610002b8eaae95afb88c3417dd99e4ea10f0ccf8a6ae03ac665c710c1bc0471bfdb23b110e51553c928fae9e169d0193731a23b2061fef62857a8a4cfa8bad2d8d6df4b989c085a5b7572c995d43852f96da"], &(0x7f0000000300), 0x28, 0x0, 0x1, 0xfffffffc}, 0x28) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="90202dbd7000fb64b4d90d4127845ca33e4ffbdbdf252200000008003f000800000008000c010800000069ea266dbde8547e8fd8977d8b4c27d67c8bfa6fdf179d4ed2ebcb7eb6324714b37f92e20fb91bfd09665f3e37ac718e98c47deb5e46933c74f4fea7f582d62a3bd6f0bd056bc12e0f58b677559762e462098764cb930e22d333265b39c55cb471c83114de0fa4b0660be5699d312454ba4c26f58a2ebc92e4fed0b095045c972b47bc2777c1fd1732b42536061ec4034a8551cdad88686125df20293c4ec351c5b1125b23406b6b000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2b60b72eafc1548dacf2bee2e6156f"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x119, 0x487, &(0x7f0000000500), &(0x7f0000000480)=0xfffffffffffffd69) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r7) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000001c0)={0x0, 0x1, &(0x7f00000000c0)={&(0x7f0000000800)={0x68, r8, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x78, 0x4) r10 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r10, &(0x7f0000000200)="08ca06d3538d0c7202aaa875e2b087abefd2494bc3dcf730ef3d79d5848b28cfc1831e7ff57d59f124c3488c93d04d265d9cba7727f45fb30910af6dcb2490bf98eb65b37725a13299ee70ceb4edd68eb09cc063d6e6a8647e702094e954d80346265a5ffe973b10242fd93e1fd891c073f3d2430efd3445437b7e27c2b34093cc5a7e1b4e14854dc8c5fa0224bc2f889e929c7a160ce84c907a9d37", 0x9c, 0x20000084, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) 798.836974ms ago: executing program 3 (id=4447): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000200000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="04009100080026006c09000008000c0064000000"], 0x30}, 0x1, 0x0, 0x0, 0x20004090}, 0x24040010) 750.66675ms ago: executing program 0 (id=4448): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a000000000000000000000008001e80"], 0x2c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x40084) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r7 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r7, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x0, 0xffff}}) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x0, 0xffff}}) r8 = socket$kcm(0x2b, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000140)={r8, 0x0, 0xfffffffffffffff7, 0x8}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000140)={r8, 0x0, 0xfffffffffffffff7, 0x8}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x198, r10, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x24000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x18a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x769}]}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x222}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x8005}, 0x4000) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) (async) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0x44, r11, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) (async) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0x44, r11, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000740)={0x1c, 0x5, 0x5c, 0x18, 0xf2, 0x9, 0x7, 0x4, 0x1, 0x9, 0xff, 0x8, 0x3, 0x8}, 0xe) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x572e5699ceece915}, 0x890) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x572e5699ceece915}, 0x890) 344.765027ms ago: executing program 3 (id=4449): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640006000000003552bde5c064c6", 0x15}, {&(0x7f0000000600)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x3}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 341.643794ms ago: executing program 0 (id=4450): socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a971f12e3a0000000000000001000000024000007f0000010204"], 0x110) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) 129.203466ms ago: executing program 3 (id=4451): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bb3c2dbd7000fbdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="00002377617bc8145a800800"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r5, 0x604ab000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000400)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5090001}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="000226bd7000fcdbdf252800000019002a00bd0608021100000076060108330002002503002c0000000006003600b608000006003600ff7f00007a002a0084480004000802110000000000000039004008021100000004000000080211000000280040080211000001570000000802110000013a0040ffffffffffff0e000000ffffffffffff32002d1a001001ff01000000000000090002000b0000000004010100000506020200710700ff00ff010c213e010000000a00340001010101010100000a000600ffffffffffff0000"], 0xd4}, 0x1, 0x0, 0x0, 0xc048801}, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="1c005a8018000180140003000600bebe"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000002c00128008000100687372002000028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) 98.522794ms ago: executing program 0 (id=4452): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="580000001400add527323b472545b45602117f9affff81000000ff0000f03ac71002000000fffffffffeffffffffe7ee000000000000000002000000000000000000006587f7000000000000000000000000008000000000", 0x58}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000500)={0x0, 0x2, 0x2, [0x5, 0xff]}, 0xc) 0s ago: executing program 1 (id=4453): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x9c}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x29, 0x6, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000400)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtaction={0xd8, 0x30, 0x200, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_skbedit={0xc0, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xf}}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xb, 0x1}}]}, {0x7a, 0x6, "8b6c1e68bf055e7c58a15e390afd6a400924c8b350f391494a5bc1ee897a24ed4d21cb43a884dbe4f06bd3a80c386d88cc0b4747c2c67b956204bf398a1a10e296d0e97c687bf46045b240dfcdeac7b3b6cba2a78b0f9bef05e5be0d02000000c25dce4cf4091905ec48478f4ccf9f124c327b414d1b"}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7800, 0x8000, 0x800, 0x80000000, {{0x23, 0x4, 0x3, 0x1, 0x8c, 0x67, 0x0, 0xd8, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x39}, {[@ssrr={0x89, 0x17, 0x5f, [@private=0xa010102, @local, @private=0xa010102, @loopback, @remote]}, @ssrr={0x89, 0xb, 0xd3, [@dev={0xac, 0x14, 0x14, 0x20}, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x31, 0x1, 0x2, [{@loopback, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x80000000}, {@private=0xa010101, 0x7}, {@private=0xa010102, 0xffffeb62}, {@rand_addr=0x64010101, 0xfffffff7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xab, 0x0, 0xa, [0x59, 0x3, 0x9]}, @ssrr={0x89, 0x7, 0xa8, [@rand_addr=0x64010101]}, @rr={0x7, 0x7, 0x52, [@multicast1]}]}}}}}) setsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x26}, r6}, 0x14) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000300)=ANY=[], 0xfce) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) kernel console output (not intermixed with test programs): state [ 436.457449][T15848] vxcan1 speed is unknown, defaulting to 1000 [ 436.584802][T11133] IPVS: starting estimator thread 0... [ 436.687023][T15862] IPVS: using max 26 ests per chain, 62400 per kthread [ 437.241839][T15848] chnl_net:caif_netlink_parms(): no params data found [ 437.382681][T15848] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.391975][T15848] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.400359][T15848] bridge_slave_0: entered allmulticast mode [ 437.408982][T15848] bridge_slave_0: entered promiscuous mode [ 437.417557][T15848] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.424818][T15848] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.434757][T15848] bridge_slave_1: entered allmulticast mode [ 437.442783][T15848] bridge_slave_1: entered promiscuous mode [ 437.483089][T15848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.497028][T15848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.537031][T15848] team0: Port device team_slave_0 added [ 437.545285][T15848] team0: Port device team_slave_1 added [ 437.581779][T15848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.589580][T15848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.616968][T15848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.631474][T15848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.638611][T15848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.664965][T15848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.722088][T15848] hsr_slave_0: entered promiscuous mode [ 437.729694][T15848] hsr_slave_1: entered promiscuous mode [ 437.736123][T15848] debugfs: 'hsr0' already exists in 'hsr' [ 437.741892][T15848] Cannot create hsr debugfs directory [ 438.177129][T15848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 438.190052][T15848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 438.200460][T15848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 438.211857][T15848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 438.298520][ T5879] Bluetooth: hci4: command tx timeout [ 438.302510][T15848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.333065][T15848] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.348484][T12013] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.355640][T12013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.371381][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.378678][ T753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.601074][T15848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.654773][T15848] veth0_vlan: entered promiscuous mode [ 438.668262][T15848] veth1_vlan: entered promiscuous mode [ 438.710139][T15848] veth0_macvtap: entered promiscuous mode [ 438.722404][T15848] veth1_macvtap: entered promiscuous mode [ 438.745059][T15848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.762162][T15848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.783661][T12039] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.793233][T12039] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.807658][T12039] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.816851][T12039] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.892519][T12013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.905524][T12013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.934306][ T753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.942820][ T753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.376584][ T5879] Bluetooth: hci4: command tx timeout [ 442.456622][ T5879] Bluetooth: hci4: command tx timeout [ 444.536449][ T5879] Bluetooth: hci4: command tx timeout [ 458.603923][T15909] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2811'. [ 458.625123][T15907] syzkaller1: entered promiscuous mode [ 458.631505][T15907] syzkaller1: entered allmulticast mode [ 458.665269][T15912] netlink: 'syz.4.2812': attribute type 1 has an invalid length. [ 458.677552][T15907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2810'. [ 458.692180][T15914] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2809'. [ 458.718503][T15912] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2812'. [ 458.722096][T15914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.771439][T15912] netlink: 'syz.4.2812': attribute type 2 has an invalid length. [ 458.779779][T15912] netlink: 'syz.4.2812': attribute type 1 has an invalid length. [ 458.841910][T15915] veth0: renamed from ipvlan1 [ 459.043169][T15931] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2816'. [ 459.124254][T15939] geneve2: entered promiscuous mode [ 459.146852][T15942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2818'. [ 459.689919][T15973] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 459.897906][T15982] veth0_macvtap: entered promiscuous mode [ 459.904343][T15982] macvtap1: entered allmulticast mode [ 459.915346][T15982] veth0_macvtap: entered allmulticast mode [ 460.260543][T16010] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 460.408001][T16015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2835'. [ 460.626923][T16022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2840'. [ 460.661842][T16021] netlink: 'syz.1.2839': attribute type 1 has an invalid length. [ 460.704023][T16023] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2840'. [ 460.727161][T16027] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2839'. [ 461.090250][T16033] syzkaller0: entered promiscuous mode [ 461.111238][T16033] syzkaller0: entered allmulticast mode [ 461.148969][T16033] tipc: Enabled bearer , priority 0 [ 461.175246][T16035] netlink: 'syz.1.2842': attribute type 1 has an invalid length. [ 461.206699][T16034] tipc: Enabling of bearer rejected, already enabled [ 461.236567][T16033] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 461.249624][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 461.260729][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 461.271014][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 461.280028][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 461.290851][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 461.358045][T16034] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 461.497149][T16037] tipc: Resetting bearer [ 461.499425][ T5879] Bluetooth: hci4: command tx timeout [ 461.627524][T16037] tipc: Disabling bearer [ 461.808400][T16051] bridge1: entered promiscuous mode [ 461.813683][T16051] bridge1: entered allmulticast mode [ 461.934920][T16040] vxcan1 speed is unknown, defaulting to 1000 [ 462.008325][T16064] 8021q: VLANs not supported on ip_vti0 [ 462.210655][T16086] netlink: 'syz.2.2856': attribute type 11 has an invalid length. [ 462.540885][T16103] netlink: 'syz.2.2862': attribute type 1 has an invalid length. [ 462.560744][T16103] netlink: 'syz.2.2862': attribute type 1 has an invalid length. [ 463.026692][T16130] bridge6: entered allmulticast mode [ 463.067525][T16129] bridge6: left allmulticast mode [ 463.122441][T16133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.211123][T16133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.336521][ T5879] Bluetooth: hci5: command tx timeout [ 463.397280][T16143] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.405100][T16143] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.733938][T16143] tipc: Resetting bearer [ 463.817963][T16151] 8021q: VLANs not supported on lo [ 463.838303][T16162] __nla_validate_parse: 14 callbacks suppressed [ 463.838328][T16162] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2875'. [ 463.883180][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 463.893775][ T10] syz2: Port: 1 Link DOWN [ 463.893892][T16164] veth1_macvtap: entered promiscuous mode [ 463.921343][T16164] veth1_macvtap: left promiscuous mode [ 463.973768][ T1147] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 463.993855][ T1147] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.003652][T16040] chnl_net:caif_netlink_parms(): no params data found [ 464.020040][ T1214] vxcan1 speed is unknown, defaulting to 1000 [ 464.147267][ T1147] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 464.165096][ T1147] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.245200][ T1147] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 464.274527][ T1147] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.291483][ T1147] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 464.311394][ T1147] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.405471][T16189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2884'. [ 464.428313][T16189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2884'. [ 464.498128][T16189] gretap0: entered promiscuous mode [ 464.505029][T16189] batadv_slave_0: entered promiscuous mode [ 464.662854][T16040] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.683330][T16040] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.694412][T16040] bridge_slave_0: entered allmulticast mode [ 464.709288][T16040] bridge_slave_0: entered promiscuous mode [ 464.736293][T16040] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.744415][T16040] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.772248][T16040] bridge_slave_1: entered allmulticast mode [ 464.784183][T16040] bridge_slave_1: entered promiscuous mode [ 464.898072][T16040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.948299][T16040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.047555][T16216] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 465.104421][T16040] team0: Port device team_slave_0 added [ 465.124697][T16216] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2893'. [ 465.134992][T16040] team0: Port device team_slave_1 added [ 465.303778][T16230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.341181][T16040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.356177][T16040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.391000][T16040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.418424][ T5879] Bluetooth: hci5: command tx timeout [ 465.448619][T16040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.466227][T16040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.531748][T16040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.569792][T16236] tipc: New replicast peer: 255.255.255.255 [ 465.579365][T16224] vxcan1 speed is unknown, defaulting to 1000 [ 465.657762][T16236] tipc: Enabled bearer , priority 10 [ 465.795771][T16247] netlink: ct family unspecified [ 465.821643][T16247] openvswitch: netlink: Actions may not be safe on all matching packets [ 465.836308][T16236] nbd6: detected capacity change from 0 to 63 [ 466.120529][ T5879] block nbd6: Receive control failed (result -32) [ 466.199320][T16040] hsr_slave_0: entered promiscuous mode [ 466.221811][T16040] hsr_slave_1: entered promiscuous mode [ 466.245069][T16040] debugfs: 'hsr0' already exists in 'hsr' [ 466.269840][T16040] Cannot create hsr debugfs directory [ 466.776894][ T10] tipc: Node number set to 2675309664 [ 467.204298][T16296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2913'. [ 467.226995][T16295] netlink: 'syz.1.2914': attribute type 1 has an invalid length. [ 467.496358][ T5879] Bluetooth: hci5: command tx timeout [ 467.569093][T16302] netlink: 'syz.4.2916': attribute type 11 has an invalid length. [ 467.581491][T16302] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2916'. [ 467.760497][T16309] netlink: 'syz.3.2915': attribute type 2 has an invalid length. [ 467.823415][T13435] IPVS: ip_vs_send_async error -101 [ 467.857453][T16312] netlink: 'syz.4.2918': attribute type 3 has an invalid length. [ 467.880397][T16312] netlink: 'syz.4.2918': attribute type 3 has an invalid length. [ 467.890945][T16312] netlink: 'syz.4.2918': attribute type 3 has an invalid length. [ 467.903474][T16312] netlink: 'syz.4.2918': attribute type 3 has an invalid length. [ 467.927361][T16312] netlink: 'syz.4.2918': attribute type 3 has an invalid length. [ 467.944518][T16312] netlink: 'syz.4.2918': attribute type 3 has an invalid length. [ 467.970675][T16312] netlink: 'syz.4.2918': attribute type 3 has an invalid length. [ 467.997195][T16318] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2918'. [ 468.016344][T16312] netlink: 'syz.4.2918': attribute type 3 has an invalid length. [ 468.211026][T16321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 468.240082][T16324] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 468.250676][T16324] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 468.263346][T16040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 468.274031][T16324] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 468.295201][T16040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 468.324138][T16040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 468.328532][T16332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2922'. [ 468.354096][T16040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 468.493156][T16349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2926'. [ 468.527352][T16337] tipc: Enabling of bearer rejected, failed to enable media [ 468.628499][T12032] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 468.645256][T12032] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 468.668073][T12021] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 468.683045][T12021] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 468.697052][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2928'. [ 468.711420][ T983] IPVS: starting estimator thread 0... [ 468.760925][T16040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.806884][T16359] IPVS: using max 25 ests per chain, 60000 per kthread [ 468.807173][T16040] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.834629][T12021] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.841922][T12021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.875038][T16074] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.882417][T16074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.081368][T16364] __nla_validate_parse: 1 callbacks suppressed [ 469.081390][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2930'. [ 469.415250][T16040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.555430][T16040] veth0_vlan: entered promiscuous mode [ 469.576699][ T5879] Bluetooth: hci5: command tx timeout [ 469.599195][T16040] veth1_vlan: entered promiscuous mode [ 469.698185][T16040] veth0_macvtap: entered promiscuous mode [ 469.705031][T16396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2939'. [ 469.723447][T16040] veth1_macvtap: entered promiscuous mode [ 469.839474][T16040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.881976][T16040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.932370][T12032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.965182][T12032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.998289][T12032] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.053202][T12032] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.066791][T16417] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2944'. [ 470.270248][T16074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.295174][T16074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.403135][T12019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.434589][T12019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.522045][T16432] siw: device registration error -23 [ 470.752699][T16438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2837'. [ 471.361639][T16471] netlink: zone id is out of range [ 471.824311][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 471.984138][T16501] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2964'. [ 472.111186][T16494] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2960'. [ 472.124473][T16494] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2960'. [ 472.169237][T16494] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 472.194186][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2965'. [ 472.480631][T16527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2971'. [ 472.492468][T16527] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 472.510350][T16527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.527264][T16521] vxcan1 speed is unknown, defaulting to 1000 [ 472.650068][T16530] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2970'. [ 472.732234][T16530] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.741252][T16530] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.376009][T16560] validate_nla: 36 callbacks suppressed [ 473.376033][T16560] netlink: 'syz.2.2982': attribute type 1 has an invalid length. [ 473.386660][T16558] netlink: 'syz.3.2979': attribute type 10 has an invalid length. [ 473.705765][T16558] team0: Port device geneve0 added [ 473.733043][T16568] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 473.810783][T16566] gretap2: entered promiscuous mode [ 473.823984][T16566] bond11: (slave gretap2): making interface the new active one [ 473.834000][T16566] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 474.362167][T16613] __nla_validate_parse: 6 callbacks suppressed [ 474.362202][T16613] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2993'. [ 474.449513][T16618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.469030][T16618] batadv_slave_0: entered promiscuous mode [ 474.511573][T16618] netlink: 'syz.0.2997': attribute type 10 has an invalid length. [ 474.525197][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2997'. [ 474.535363][T16623] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2999'. [ 474.741950][T16638] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 474.794693][T16642] tipc: Enabled bearer , priority 0 [ 474.811536][T16642] syzkaller0: entered promiscuous mode [ 474.823644][T16642] syzkaller0: entered allmulticast mode [ 474.864461][T16642] tipc: Resetting bearer [ 474.882219][T16644] vxcan1 speed is unknown, defaulting to 1000 [ 474.910654][T16641] tipc: Resetting bearer [ 474.983286][T16641] tipc: Disabling bearer [ 475.017411][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 475.242315][T16665] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 475.597994][T16690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3019'. [ 475.931927][T16711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3024'. [ 476.356665][T16723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3027'. [ 476.450452][T16726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3028'. [ 476.553374][T16729] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3028'. [ 476.603490][T16737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3032'. [ 476.934059][T16749] syzkaller0: entered promiscuous mode [ 476.941268][T16749] syzkaller0: entered allmulticast mode [ 477.404924][T16763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3040'. [ 478.963990][T16764] bridge7: port 1(veth9) entered blocking state [ 478.992102][T16764] bridge7: port 1(veth9) entered disabled state [ 479.004980][T16764] veth9: entered allmulticast mode [ 479.012981][T16764] veth9: entered promiscuous mode [ 479.032200][T16765] vlan3: entered allmulticast mode [ 479.043645][T16765] veth0_to_bond: entered allmulticast mode [ 479.052802][T16765] bridge7: port 2(vlan3) entered blocking state [ 479.060513][T16765] bridge7: port 2(vlan3) entered disabled state [ 479.069850][T16765] vlan3: entered promiscuous mode [ 479.074936][T16765] veth0_to_bond: entered promiscuous mode [ 479.095022][T16781] team0: Device vti1 is of different type [ 479.697886][T16790] team0 (unregistering): Port device team_slave_0 removed [ 479.730435][T16790] team0 (unregistering): Port device team_slave_1 removed [ 479.819360][ T5879] Bluetooth: hci5: command 0x0405 tx timeout [ 480.050407][T16815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3053'. [ 480.189971][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 480.205022][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 480.240181][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 480.254974][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 480.273287][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 480.283934][T16817] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 480.292783][T16817] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 480.302802][T16817] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 480.331128][T16817] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 480.349462][T16817] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 480.357278][T16817] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 480.364010][T16817] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 480.371701][T16817] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 480.384091][T16817] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 480.391994][T16817] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 480.398938][T16817] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 480.581591][T16818] vxcan1 speed is unknown, defaulting to 1000 [ 480.704119][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3058'. [ 480.937082][T16853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3063'. [ 480.993427][T16855] team0: Port device dummy0 removed [ 481.020587][T16855] bridge_slave_0: left allmulticast mode [ 481.052190][T16855] bridge_slave_0: left promiscuous mode [ 481.076367][T16855] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.105176][T16855] bridge_slave_1: left allmulticast mode [ 481.126813][T16855] bridge_slave_1: left promiscuous mode [ 481.133448][T16855] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.177123][T16855] team0: Port device C removed [ 481.177791][T16864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'. [ 481.218459][T16864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'. [ 481.219004][T16855] team0: Port device team_slave_1 removed [ 481.248434][T16855] bond4: (slave gretap1): Releasing active interface [ 481.266594][T16855] batadv1: left allmulticast mode [ 481.271897][T16855] batadv1: left promiscuous mode [ 481.287229][T16855] bridge0: port 3(batadv1) entered disabled state [ 481.305294][T16856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3062'. [ 481.330687][T16856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3062'. [ 481.358959][T16873] netlink: 'syz.2.3067': attribute type 1 has an invalid length. [ 481.371287][T16866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3067'. [ 481.376947][T16873] netlink: 15970 bytes leftover after parsing attributes in process `syz.2.3067'. [ 481.483809][T16876] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3070'. [ 481.938946][T16871] vxcan1 speed is unknown, defaulting to 1000 [ 482.013806][T16887] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 482.024294][T16887] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 482.264094][T16818] chnl_net:caif_netlink_parms(): no params data found [ 482.377551][ T5879] Bluetooth: hci0: command tx timeout [ 482.714328][T16818] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.746098][T16818] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.753468][T16818] bridge_slave_0: entered allmulticast mode [ 482.770434][T16818] bridge_slave_0: entered promiscuous mode [ 482.804465][T16818] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.812383][T16913] netlink: 'syz.1.3080': attribute type 13 has an invalid length. [ 482.815966][T16818] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.837973][T16818] bridge_slave_1: entered allmulticast mode [ 482.856415][T16818] bridge_slave_1: entered promiscuous mode [ 482.982891][T16913] erspan0: left promiscuous mode [ 483.094812][T16913] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.149585][T16913] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 483.311881][T16818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.342436][T16818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.540389][T16818] team0: Port device team_slave_0 added [ 483.550826][T16818] team0: Port device team_slave_1 added [ 483.894697][T16818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.920262][T16818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.958449][T16818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.982742][T16942] netlink: 'syz.3.3089': attribute type 1 has an invalid length. [ 484.037812][T16818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.044984][T16818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.077715][T16818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.212037][T16955] netlink: 'syz.1.3091': attribute type 21 has an invalid length. [ 484.224272][T16955] netlink: 'syz.1.3091': attribute type 22 has an invalid length. [ 484.236013][T16952] batadv_slave_1: entered allmulticast mode [ 484.246068][T16955] netlink: 'syz.1.3091': attribute type 23 has an invalid length. [ 484.253335][T16818] hsr_slave_0: entered promiscuous mode [ 484.262160][T16955] netlink: 'syz.1.3091': attribute type 25 has an invalid length. [ 484.262386][T16818] hsr_slave_1: entered promiscuous mode [ 484.278804][T16818] debugfs: 'hsr0' already exists in 'hsr' [ 484.284736][T16818] Cannot create hsr debugfs directory [ 484.319710][T16952] dvmrp8: entered allmulticast mode [ 484.457918][ T5879] Bluetooth: hci0: command tx timeout [ 484.649353][T16951] batadv_slave_1: left allmulticast mode [ 484.786588][T16818] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 484.808637][T16818] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 484.837865][T16978] netlink: 'syz.3.3098': attribute type 1 has an invalid length. [ 484.870436][T16982] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 484.951788][T16818] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 485.020082][T16818] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 485.108352][T17002] __nla_validate_parse: 7 callbacks suppressed [ 485.108375][T17002] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.3101'. [ 485.151070][T16818] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 485.163759][T16818] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 485.288380][T17009] sctp: [Deprecated]: syz.3.3106 (pid 17009) Use of int in max_burst socket option. [ 485.288380][T17009] Use struct sctp_assoc_value instead [ 485.320233][T16818] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 485.341649][T16818] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 485.502010][T17020] netlink: 'syz.1.3110': attribute type 1 has an invalid length. [ 485.756387][T16818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 485.865589][T16818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 485.930594][T16818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 485.988816][T16818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 486.108636][T17049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.175583][T16818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.245375][T16818] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.273982][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.281286][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.306782][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.314059][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.537941][ T5879] Bluetooth: hci0: command tx timeout [ 486.833848][T17064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3121'. [ 486.850481][T17064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3121'. [ 486.917385][T16818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.090888][T17075] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3123'. [ 487.904720][T16818] veth0_vlan: entered promiscuous mode [ 487.962949][T16818] veth1_vlan: entered promiscuous mode [ 488.089474][T16818] veth0_macvtap: entered promiscuous mode [ 488.150404][T17129] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3137'. [ 488.167280][T16818] veth1_macvtap: entered promiscuous mode [ 488.180090][T17129] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3137'. [ 488.234874][T16818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.341509][T16818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.406806][T12021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.450264][T12021] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.465476][T17138] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3139'. [ 488.489134][T12021] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.532493][T17142] macvtap1: entered allmulticast mode [ 488.541200][T17142] vlan0: entered allmulticast mode [ 488.548197][T17142] veth0_vlan: entered allmulticast mode [ 488.555458][T17142] team0: Device macvtap1 failed to register rx_handler [ 488.567517][T17142] vlan0: left allmulticast mode [ 488.572439][T17142] veth0_vlan: left allmulticast mode [ 488.623284][ T5879] Bluetooth: hci0: command tx timeout [ 488.672225][T12021] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.911528][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'. [ 489.223456][T17172] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 489.313297][T12029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.363885][T12029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.388980][T17204] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3153'. [ 489.433241][T12038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.449217][T12038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.548955][T17207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3154'. [ 490.550591][T17243] __nla_validate_parse: 2 callbacks suppressed [ 490.550613][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3165'. [ 490.581549][T17245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3166'. [ 490.920584][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 490.932275][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 490.941787][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 490.952145][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 490.963111][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 491.145440][T17262] vxcan1 speed is unknown, defaulting to 1000 [ 491.167075][T17272] netlink: 'syz.1.3172': attribute type 10 has an invalid length. [ 491.269786][T17274] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3173'. [ 491.296082][T17274] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3173'. [ 491.305101][T17274] netlink: 'syz.3.3173': attribute type 5 has an invalid length. [ 491.351466][T17274] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3173'. [ 491.459306][T17278] team0: Device gtp0 is up. Set it down before adding it as a team port [ 491.565540][T17282] tipc: Enabling of bearer rejected, failed to enable media [ 491.595399][T17284] netlink: 'syz.3.3176': attribute type 24 has an invalid length. [ 492.124695][T17311] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3181'. [ 492.125598][T17301] vxcan1 speed is unknown, defaulting to 1000 [ 492.569118][T17323] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 492.647624][T17262] chnl_net:caif_netlink_parms(): no params data found [ 492.898817][T17331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3190'. [ 492.928561][T17336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.984288][T17331] chnl_net:caif_netlink_parms(): no params data found [ 493.018747][ T5879] Bluetooth: hci1: command tx timeout [ 493.389217][T17353] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3194'. [ 493.399864][T17262] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.426259][T17262] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.446343][T17262] bridge_slave_0: entered allmulticast mode [ 493.454376][T17262] bridge_slave_0: entered promiscuous mode [ 493.517717][T17262] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.551720][T17262] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.565371][T17262] bridge_slave_1: entered allmulticast mode [ 493.601992][T17262] bridge_slave_1: entered promiscuous mode [ 493.612476][T17365] netlink: 'syz.0.3198': attribute type 83 has an invalid length. [ 493.841959][T17380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3197'. [ 493.964309][T17262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.001380][T17262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.285602][T17262] team0: Port device team_slave_0 added [ 494.371979][T17262] team0: Port device team_slave_1 added [ 494.520604][T17262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.544327][T17262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.608901][T17405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3206'. [ 494.669245][T17262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.691179][T17410] nbd: couldn't find device at index 0 [ 494.732578][T17262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.767888][T17262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.843779][T17262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.090188][T17423] netlink: 'syz.4.3212': attribute type 5 has an invalid length. [ 495.106340][ T5879] Bluetooth: hci1: command tx timeout [ 495.174913][T17262] hsr_slave_0: entered promiscuous mode [ 495.205600][T17262] hsr_slave_1: entered promiscuous mode [ 495.231837][T17262] debugfs: 'hsr0' already exists in 'hsr' [ 495.249360][T17262] Cannot create hsr debugfs directory [ 495.485742][T17262] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.505285][T17262] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.542670][T17443] netlink: 'syz.4.3216': attribute type 11 has an invalid length. [ 495.593406][T17262] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.619353][T17262] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.734439][T17262] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.757080][T17262] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.877951][T17262] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.911390][T17262] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.911811][T17456] netlink: 'syz.4.3221': attribute type 1 has an invalid length. [ 496.001408][T17452] vxcan1 speed is unknown, defaulting to 1000 [ 496.153214][T17461] netlink: 'syz.4.3222': attribute type 1 has an invalid length. [ 496.544583][T17262] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 496.574985][T17464] __nla_validate_parse: 2 callbacks suppressed [ 496.575006][T17464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3223'. [ 496.618668][T17262] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 496.732138][T17262] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 496.845536][T17262] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 496.904550][T17485] netlink: 340 bytes leftover after parsing attributes in process `syz.4.3229'. [ 497.177232][ T51] Bluetooth: hci1: command tx timeout [ 497.224298][T17262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.390497][T17262] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.514991][T12019] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.522227][T12019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.620281][T17522] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 497.632354][T12032] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.639571][T12032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.667405][T17522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3239'. [ 497.704279][T17524] tipc: Enabling of bearer rejected, failed to enable media [ 497.872264][T17531] xt_l2tp: missing protocol rule (udp|l2tpip) [ 498.134790][T17535] syzkaller0: entered promiscuous mode [ 498.148268][T17535] syzkaller0: entered allmulticast mode [ 498.490148][T17549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3247'. [ 498.663680][T17557] bridge0: port 3(batadv1) entered blocking state [ 498.688716][T17557] bridge0: port 3(batadv1) entered disabled state [ 498.699122][T17557] batadv1: entered allmulticast mode [ 498.709246][T17557] batadv1: entered promiscuous mode [ 498.774062][T17262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.848084][T17564] netlink: 'syz.4.3250': attribute type 16 has an invalid length. [ 498.862245][T17563] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.878238][T17564] netlink: 'syz.4.3250': attribute type 17 has an invalid length. [ 498.885331][T17563] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.027198][T17573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3253'. [ 499.114367][T17574] netlink: 'syz.0.3254': attribute type 4 has an invalid length. [ 499.136777][T12029] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 499.147082][T12029] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 499.165116][T17577] netlink: 'syz.0.3254': attribute type 4 has an invalid length. [ 499.257154][ T51] Bluetooth: hci1: command 0x0419 tx timeout [ 499.268840][T17583] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.3253'. [ 499.296826][T17583] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 499.332388][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3257'. [ 499.336300][T17585] netlink: 'syz.4.3256': attribute type 1 has an invalid length. [ 499.358948][T17585] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3256'. [ 499.382574][T17587] batadv1: left allmulticast mode [ 499.389327][T17587] batadv1: left promiscuous mode [ 499.404426][T17587] bridge0: port 3(batadv1) entered disabled state [ 499.419255][T17587] bridge_slave_1: left allmulticast mode [ 499.427363][T17587] bridge_slave_1: left promiscuous mode [ 499.434463][T17587] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.447758][T17587] bridge_slave_0: left allmulticast mode [ 499.453783][T17587] bridge_slave_0: left promiscuous mode [ 499.464524][T17587] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.544270][T17585] IPv6: sit1: Disabled Multicast RS [ 499.553406][T17585] sit1: entered allmulticast mode [ 499.688985][T17262] veth0_vlan: entered promiscuous mode [ 499.729355][T17262] veth1_vlan: entered promiscuous mode [ 499.774725][T17595] netlink: 'syz.3.3260': attribute type 21 has an invalid length. [ 499.844018][T17262] veth0_macvtap: entered promiscuous mode [ 499.892274][T17262] veth1_macvtap: entered promiscuous mode [ 499.937585][T17602] netlink: 'syz.0.3262': attribute type 1 has an invalid length. [ 500.050300][T17602] 8021q: adding VLAN 0 to HW filter on device bond2 [ 500.203501][T17604] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 500.228734][T17262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.307051][T17601] vlan2: entered allmulticast mode [ 500.312345][T17601] veth1: entered allmulticast mode [ 500.344026][T17601] veth1: entered promiscuous mode [ 500.361536][T17601] veth1: left promiscuous mode [ 500.374276][T17601] bond2: (slave vlan2): making interface the new active one [ 500.401931][T17601] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 500.432358][T17601] veth1: entered promiscuous mode [ 500.443044][T17601] vlan2: entered promiscuous mode [ 500.459321][T17601] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 500.545184][T17622] tls_set_device_offload_rx: netdev not found [ 500.563156][T17262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.649984][T17619] gretap1: entered promiscuous mode [ 500.662638][T17622] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3267'. [ 500.702069][T17621] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 500.721716][T17627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3268'. [ 500.806508][T12038] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.841554][T12038] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.862377][T12038] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.898250][T12038] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.068509][T12038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.092217][T12038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.339524][ T51] Bluetooth: hci1: command 0x0419 tx timeout [ 501.469815][T17644] team0 (unregistering): Port device team_slave_0 removed [ 501.484031][T17644] team0 (unregistering): Port device team_slave_1 removed [ 501.606488][T16074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.625656][T16074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.842493][T17680] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3285'. [ 502.036971][T17690] netlink: 'syz.0.3286': attribute type 10 has an invalid length. [ 502.076462][T17690] openvswitch: netlink: Flow actions attr not present in new flow. [ 502.194010][T17697] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 502.240394][T17697] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 502.571167][T17678] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3158'. [ 502.661697][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 502.672862][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 502.683360][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 502.713926][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 502.738082][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 502.896633][T17705] vxcan1 speed is unknown, defaulting to 1000 [ 503.093394][T17722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3296'. [ 503.130374][T17722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3296'. [ 503.416799][ T5879] Bluetooth: hci1: command 0x0419 tx timeout [ 503.613598][T17734] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 503.680858][T17745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3300'. [ 503.789248][T17755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3300'. [ 504.038911][T17760] netlink: 'syz.0.3302': attribute type 7 has an invalid length. [ 504.366146][T17705] chnl_net:caif_netlink_parms(): no params data found [ 504.393183][T17779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3307'. [ 504.542696][T17777] openvswitch: netlink: Actions may not be safe on all matching packets [ 504.761177][T17797] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3312'. [ 504.777116][ T5879] Bluetooth: hci2: command tx timeout [ 504.823019][T17705] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.842227][T17705] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.859214][T17705] bridge_slave_0: entered allmulticast mode [ 504.886481][T17705] bridge_slave_0: entered promiscuous mode [ 504.917792][T17705] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.924994][T17705] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.954566][T17803] netlink: 'syz.0.3313': attribute type 1 has an invalid length. [ 504.975235][T17705] bridge_slave_1: entered allmulticast mode [ 504.986757][T17705] bridge_slave_1: entered promiscuous mode [ 505.131881][T17705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.171670][T17705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.182910][T17810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3314'. [ 505.273486][T17818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.321326][T17824] tipc: Started in network mode [ 505.326909][T17824] tipc: Node identity 9e4e4e9db213, cluster identity 4711 [ 505.334289][T17824] tipc: Enabled bearer , priority 0 [ 505.460296][T17824] tipc: Disabling bearer [ 505.477728][T17829] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3319'. [ 505.491031][T17705] team0: Port device team_slave_0 added [ 505.539661][T17705] team0: Port device team_slave_1 added [ 505.685302][T17705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.695344][T17843] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 505.714183][T17705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.751812][T17705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.771189][ T983] IPVS: starting estimator thread 0... [ 505.782423][T17838] netlink: 'syz.4.3321': attribute type 29 has an invalid length. [ 505.815310][T17843] : renamed from veth0_vlan (while UP) [ 505.838174][T17705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.862913][T17705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.891896][T17846] IPVS: using max 26 ests per chain, 62400 per kthread [ 505.919246][T17705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.174858][T17705] hsr_slave_0: entered promiscuous mode [ 506.192771][T17705] hsr_slave_1: entered promiscuous mode [ 506.202913][T17705] debugfs: 'hsr0' already exists in 'hsr' [ 506.209464][T17705] Cannot create hsr debugfs directory [ 506.495311][T17882] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 506.514464][T17882] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 506.590016][T17885] pim6reg1: entered promiscuous mode [ 506.595412][T17885] pim6reg1: entered allmulticast mode [ 506.779828][T17705] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 506.836945][T17897] pim6reg: entered allmulticast mode [ 506.857048][ T5879] Bluetooth: hci2: command tx timeout [ 506.922990][T17705] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 506.959226][T17904] __nla_validate_parse: 1 callbacks suppressed [ 506.959247][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3337'. [ 507.037769][T17705] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 507.059253][T17907] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3338'. [ 507.078263][T17907] gretap0: entered promiscuous mode [ 507.094605][T17906] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3338'. [ 507.111572][T17906] 0ªî{X¹¦: renamed from gretap0 [ 507.130449][T17906] 0ªî{X¹¦: left promiscuous mode [ 507.136429][T17906] 0ªî{X¹¦: entered allmulticast mode [ 507.158113][T17906] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 507.216458][T17705] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 507.239435][T17911] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3340'. [ 507.252772][T17911] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3340'. [ 507.453918][T17914] netlink: 'syz.3.3342': attribute type 29 has an invalid length. [ 507.478298][T17918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3341'. [ 507.491762][T17920] netlink: 'syz.3.3342': attribute type 29 has an invalid length. [ 507.520989][T17914] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3342'. [ 507.667937][T17927] netlink: 'syz.4.3344': attribute type 21 has an invalid length. [ 507.702414][T17928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3344'. [ 507.721678][T17928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3344'. [ 507.745086][T17927] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3344'. [ 507.788299][T17705] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 507.818473][T17705] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 507.932449][T17705] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 507.973384][T17705] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 508.080947][T17939] nbd: illegal input index -8454144 [ 508.091794][T17945] syzkaller1: entered promiscuous mode [ 508.104653][T17945] syzkaller1: entered allmulticast mode [ 508.128192][T17951] gtp0: entered promiscuous mode [ 508.138335][T17951] gtp0: entered allmulticast mode [ 508.496780][T17965] netlink: 'syz.3.3357': attribute type 1 has an invalid length. [ 508.675470][T17976] bond1: (slave gretap0): making interface the new active one [ 508.690535][T17976] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 508.850117][T17990] netlink: 'syz.3.3364': attribute type 11 has an invalid length. [ 508.946926][ T5879] Bluetooth: hci2: command tx timeout [ 509.064177][T17982] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 509.178609][T17705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.255664][T17705] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.291204][T12029] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.298490][T12029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.380961][T12029] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.388351][T12029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.431816][T18014] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.605059][T17705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 509.951938][T18037] tipc: Started in network mode [ 509.968515][T18037] tipc: Node identity 66e8ba2829fe, cluster identity 4711 [ 509.990222][T18037] tipc: Enabled bearer , priority 0 [ 510.012876][T18037] syzkaller0: entered promiscuous mode [ 510.019239][T18037] syzkaller0: entered allmulticast mode [ 510.171110][T18050] tipc: Resetting bearer [ 510.237347][T18036] tipc: Resetting bearer [ 510.382716][T18036] tipc: Disabling bearer [ 510.554735][T18064] geneve2: entered promiscuous mode [ 510.561606][T18064] geneve2: entered allmulticast mode [ 510.604035][T17705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.752434][T17705] veth0_vlan: entered promiscuous mode [ 510.780592][T18069] : entered promiscuous mode [ 510.818888][T17705] veth1_vlan: entered promiscuous mode [ 510.875696][T18072] sctp: [Deprecated]: syz.0.3384 (pid 18072) Use of int in maxseg socket option. [ 510.875696][T18072] Use struct sctp_assoc_value instead [ 510.981070][T17705] veth0_macvtap: entered promiscuous mode [ 511.016206][ T5879] Bluetooth: hci2: command tx timeout [ 511.023352][T17705] veth1_macvtap: entered promiscuous mode [ 511.068490][T17705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.105564][T17705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.182401][T12016] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.215031][T12016] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.338539][T12016] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.355736][T18089] veth0: entered promiscuous mode [ 511.371868][T12016] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.531890][T18089] veth0: left promiscuous mode [ 511.633912][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.663042][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.701562][T12016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.727329][T12016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.801580][ T77] vlan2: left promiscuous mode [ 511.887432][T18112] netlink: 'syz.2.3395': attribute type 12 has an invalid length. [ 511.982613][ T1147] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.003018][ T1147] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.408512][ T1147] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.468056][ T1147] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.794063][T18139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.805869][T18140] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 515.172846][T12021] ` (unregistering): Released all slaves [ 515.302010][T12021] bond1 (unregistering): Released all slaves [ 515.440460][T12021] bond2 (unregistering): Released all slaves [ 515.571992][T12021] bond3 (unregistering): Released all slaves [ 515.702570][T12021] bond4 (unregistering): Released all slaves [ 515.854263][T12021] bond0 (unregistering): Released all slaves [ 515.994370][T12021] bond5 (unregistering): (slave veth13): Releasing active interface [ 516.005407][T12021] bond5 (unregistering): Released all slaves [ 516.196651][T18165] __nla_validate_parse: 9 callbacks suppressed [ 516.196674][T18165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3403'. [ 516.238907][T12021] : left promiscuous mode [ 516.406375][T18172] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3406'. [ 516.439151][T18172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3406'. [ 516.493895][T12021] tipc: Left network mode [ 516.541033][T18180] IPVS: set_ctl: invalid protocol: 92 172.20.20.59:20000 [ 516.635247][T18184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3410'. [ 516.735099][T18194] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 3, id = 0 [ 516.747220][T18190] netlink: 'syz.0.3413': attribute type 5 has an invalid length. [ 516.897205][T12021] batman_adv: batadv0: Removing interface: wlan1 [ 516.915013][T18199] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 516.963905][T18202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.992513][T18202] netlink: 4080 bytes leftover after parsing attributes in process `syz.1.3415'. [ 517.307989][T18217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.318368][T18220] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 518.148616][T12021] hsr_slave_0: left promiscuous mode [ 518.235913][T12021] hsr_slave_1: left promiscuous mode [ 518.806943][T18276] netlink: 23 bytes leftover after parsing attributes in process `syz.3.3434'. [ 519.668833][T18258] netlink: 'syz.4.3431': attribute type 4 has an invalid length. [ 519.709762][T18277] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3434'. [ 520.053683][T18292] vxcan1 speed is unknown, defaulting to 1000 [ 520.410911][T18308] netlink: 'syz.1.3443': attribute type 10 has an invalid length. [ 520.443337][T18305] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 520.601935][T18308] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 520.651115][T18309] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 520.657608][T18316] netlink: 'syz.3.3445': attribute type 4 has an invalid length. [ 520.818974][T18316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3445'. [ 520.839480][T18316] netlink: 'syz.3.3445': attribute type 4 has an invalid length. [ 520.866704][T18324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3447'. [ 521.074280][T12021] IPVS: stop unused estimator thread 0... [ 521.357232][T18334] netlink: 'syz.0.3450': attribute type 6 has an invalid length. [ 521.437831][T18341] tipc: Started in network mode [ 521.442778][T18341] tipc: Node identity 0e3f142bbf29, cluster identity 4711 [ 521.485208][T18341] tipc: Enabled bearer , priority 0 [ 521.526674][T18296] netlink: 'syz.2.3439': attribute type 13 has an invalid length. [ 521.561896][T18296] netlink: 'syz.2.3439': attribute type 17 has an invalid length. [ 521.571790][T18341] tipc: Disabling bearer [ 521.601954][T18350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3454'. [ 521.957496][T18296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 521.999651][T18359] tipc: Enabled bearer , priority 0 [ 522.037713][T18359] tipc: Disabling bearer [ 522.368905][T18384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3461'. [ 522.642335][T18381] veth1_to_bond: entered allmulticast mode [ 522.751635][T18397] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.3464'. [ 522.791366][T18384] bond0: (slave bond_slave_1): Releasing backup interface [ 522.865372][T18404] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3465'. [ 522.900849][T18384] veth1_to_bond (unregistering): left allmulticast mode [ 523.259733][T18411] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 523.582187][T18427] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3472'. [ 523.630925][T18427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3472'. [ 523.828269][T18432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3474'. [ 523.849589][T18435] netlink: 'syz.3.3475': attribute type 4 has an invalid length. [ 524.328458][T18456] netlink: 'syz.4.3479': attribute type 10 has an invalid length. [ 524.449292][T18466] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 524.452471][T18456] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 524.870621][T18488] netlink: 'syz.3.3486': attribute type 11 has an invalid length. [ 524.910338][T18488] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3486'. [ 525.077885][T18494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3489'. [ 525.140760][T18496] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3491'. [ 525.985064][T18536] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 526.270375][T18555] openvswitch: netlink: Actions may not be safe on all matching packets [ 526.403569][T18536] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.514875][T18536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.692230][T12039] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.711101][T12039] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.739952][T12039] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.749773][T12039] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.384750][T18586] __nla_validate_parse: 2 callbacks suppressed [ 527.384771][T18586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3516'. [ 527.407651][T18588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3517'. [ 527.421191][T18586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3516'. [ 527.460716][T18588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3517'. [ 527.481019][T18591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3519'. [ 527.492428][T18588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3517'. [ 527.521368][T18588] gretap0: entered promiscuous mode [ 527.547644][T18588] batadv_slave_1: entered promiscuous mode [ 527.554613][T18588] debugfs: 'hsr1' already exists in 'hsr' [ 527.581352][T18588] Cannot create hsr debugfs directory [ 527.694024][T18601] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3522'. [ 527.977853][T18614] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3528'. [ 528.102937][T18621] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 528.154022][T18630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3529'. [ 528.208985][T18628] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3533'. [ 528.404337][T18628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.445097][T18628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.494275][T18628] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 528.532188][T18628] bond0 (unregistering): Released all slaves [ 528.631952][T18649] tipc: Enabled bearer , priority 0 [ 528.682532][T18641] tipc: Resetting bearer [ 528.836294][T18655] syzkaller0: entered promiscuous mode [ 528.846673][T18655] syzkaller0: entered allmulticast mode [ 528.861311][T18640] tipc: Resetting bearer [ 528.924308][T18640] tipc: Disabling bearer [ 528.976827][T18644] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 528.988908][T18665] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 528.999978][T18665] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 529.028556][T18672] tipc: Enabled bearer , priority 0 [ 529.050790][T18674] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:0 [ 529.514568][T18697] veth0_to_bridge: entered promiscuous mode [ 529.546941][T18697] veth0_to_bridge: left promiscuous mode [ 530.149852][ T1214] tipc: Node number set to 744312477 [ 530.347306][T18737] block nbd7: server does not support multiple connections per device. [ 530.361694][T18737] block nbd7: shutting down sockets [ 530.508821][T18752] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 530.564775][T18751] tipc: Started in network mode [ 530.579918][T18751] tipc: Node identity f6358c7b604a, cluster identity 4711 [ 530.600580][T18751] tipc: Enabled bearer , priority 0 [ 530.659925][T18760] syzkaller0: entered promiscuous mode [ 530.676258][T18760] syzkaller0: entered allmulticast mode [ 530.807687][T18750] tipc: Resetting bearer [ 530.934721][T18750] tipc: Disabling bearer [ 531.108319][T18775] netlink: 'syz.4.3578': attribute type 1 has an invalid length. [ 531.163517][T18775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.193508][T18775] bond0: (slave gretap1): making interface the new active one [ 531.208547][T18775] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 531.899119][T18818] tipc: Enabled bearer , priority 12 [ 531.942198][T18818] netlink: 'syz.3.3592': attribute type 1 has an invalid length. [ 531.963477][T18818] netlink: 'syz.3.3592': attribute type 2 has an invalid length. [ 531.987784][T18818] netlink: 'syz.3.3592': attribute type 1 has an invalid length. [ 532.004633][T18818] netlink: 'syz.3.3592': attribute type 2 has an invalid length. [ 532.043268][T18818] netlink: 'syz.3.3592': attribute type 1 has an invalid length. [ 532.080621][T18820] netlink: 'syz.3.3592': attribute type 1 has an invalid length. [ 532.165715][T18832] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 532.459229][T18846] netlink: 'syz.1.3599': attribute type 3 has an invalid length. [ 532.469198][T18846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.542446][T18851] __nla_validate_parse: 19 callbacks suppressed [ 532.542469][T18851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3600'. [ 532.608187][T18851] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3600'. [ 532.626392][T18851] NCSI netlink: No device for ifindex 0 [ 532.960473][T18866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3604'. [ 532.979421][T18869] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3606'. [ 533.016679][T11139] tipc: Node number set to 1326889512 [ 533.063008][T18869] 0ªî{X¹¦: entered promiscuous mode [ 533.083108][T18876] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3606'. [ 533.104490][T18869] 0ªî{X¹¦: left allmulticast mode [ 533.274471][T18889] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20000 [ 533.422876][T18876] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 533.434045][T18876] 1ªî{X¹¦: left promiscuous mode [ 533.439560][T18876] 1ªî{X¹¦: entered allmulticast mode [ 533.449238][T18876] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 534.014894][T18930] tipc: Enabling of bearer rejected, already enabled [ 534.053223][T18930] tipc: Resetting bearer [ 534.092379][T18932] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20001 [ 534.156663][T18940] netlink: 'syz.3.3626': attribute type 4 has an invalid length. [ 534.196588][T18945] netlink: 'syz.3.3626': attribute type 4 has an invalid length. [ 534.519650][T18959] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.3629'. [ 534.568627][T18959] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.3629'. [ 534.600940][T18966] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3633'. [ 534.618857][T18967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3630'. [ 535.083620][T18984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3638'. [ 535.462731][T19009] syzkaller1: entered promiscuous mode [ 535.468528][T19009] syzkaller1: entered allmulticast mode [ 535.488008][T19006] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 535.518511][T19006] 0ªî{X¹¦: entered allmulticast mode [ 535.524609][T19006] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 536.025036][T19021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.052363][T19021] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.078915][T19021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 536.592402][T19035] netlink: 'syz.3.3652': attribute type 11 has an invalid length. [ 537.063263][T19049] validate_nla: 3 callbacks suppressed [ 537.063284][T19049] netlink: 'syz.1.3657': attribute type 30 has an invalid length. [ 537.099483][T19049] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 537.147018][T19049] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 537.159430][T19058] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 537.178899][T19059] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 537.197464][T19058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.216544][T19059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.311973][T19058] macvtap1: entered allmulticast mode [ 537.358916][T19058] vlan0: entered allmulticast mode [ 537.423922][T19058] veth0_vlan: entered allmulticast mode [ 537.452063][T19058] team0: Device macvtap1 failed to register rx_handler [ 537.531371][T19058] vlan0: left allmulticast mode [ 537.537261][T19058] veth0_vlan: left allmulticast mode [ 537.912542][T19091] __nla_validate_parse: 9 callbacks suppressed [ 537.912564][T19091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3667'. [ 538.004583][T19097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3667'. [ 538.070137][T19099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3670'. [ 538.094369][T19099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3670'. [ 538.239261][T19105] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3671'. [ 538.732551][T19117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3675'. [ 538.747472][T19117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3675'. [ 538.920249][T19124] netlink: 'syz.2.3679': attribute type 1 has an invalid length. [ 538.985128][T19131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 538.991791][T19135] tipc: Enabling of bearer rejected, already enabled [ 538.992453][T19131] IPv6: NLM_F_CREATE should be set when creating new route [ 539.195703][T19142] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3684'. [ 539.400421][T19155] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 539.479809][T19159] netlink: 'syz.1.3689': attribute type 4 has an invalid length. [ 539.507244][T19150] vxcan1 speed is unknown, defaulting to 1000 [ 539.717949][T19146] pim6reg: entered allmulticast mode [ 539.861967][T19175] netlink: 'syz.2.3692': attribute type 3 has an invalid length. [ 539.886828][T19175] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3692'. [ 540.265533][T19184] netlink: 'syz.2.3696': attribute type 3 has an invalid length. [ 540.324486][T19184] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3696'. [ 540.670034][T19201] netlink: 'syz.4.3702': attribute type 1 has an invalid length. [ 540.681684][T19201] netlink: 'syz.4.3702': attribute type 1 has an invalid length. [ 541.359854][T19227] C: renamed from lo (while UP) [ 541.575481][T19231] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.750756][T19239] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 542.076838][T19256] Dead loop on virtual device ip6_vti0, fix it urgently! [ 542.729133][T19284] syzkaller0: entered promiscuous mode [ 542.742867][T19284] syzkaller0: entered allmulticast mode [ 543.032623][T19303] __nla_validate_parse: 8 callbacks suppressed [ 543.032647][T19303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3733'. [ 543.288974][T19320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.472656][T19326] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3739'. [ 543.524486][T19328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3740'. [ 544.129561][T19352] Bluetooth: MGMT ver 1.23 [ 544.576653][T19368] netlink: 'syz.2.3753': attribute type 4 has an invalid length. [ 544.627847][T19373] netlink: 'syz.2.3753': attribute type 4 has an invalid length. [ 544.659062][T19370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3754'. [ 544.739269][T19381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3757'. [ 544.871038][T19384] netlink: 'syz.0.3758': attribute type 9 has an invalid length. [ 544.895479][T19384] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.3758'. [ 545.007097][T19392] ip6gre1: entered allmulticast mode [ 545.251114][T19402] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3766'. [ 545.289651][T19402] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3766'. [ 545.789947][T19432] netlink: 'syz.3.3777': attribute type 1 has an invalid length. [ 545.839929][T19432] 8021q: adding VLAN 0 to HW filter on device bond2 [ 545.935580][T19432] veth3: entered promiscuous mode [ 545.946678][T19432] bond2: (slave veth3): Enslaving as an active interface with a down link [ 545.988887][T19440] gretap2: entered allmulticast mode [ 546.201909][T19448] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3781'. [ 546.524083][T19460] syzkaller0: entered promiscuous mode [ 546.543864][T19460] syzkaller0: entered allmulticast mode [ 546.585318][T19461] tipc: Enabled bearer , priority 0 [ 546.801714][T19461] tipc: Resetting bearer [ 546.864822][T19486] netlink: 'syz.4.3787': attribute type 1 has an invalid length. [ 546.923639][T19461] tipc: Disabling bearer [ 547.185181][T19486] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.274347][T19497] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 547.281727][T19497] IPv6: NLM_F_CREATE should be set when creating new route [ 547.381376][T19486] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.499163][T19515] netlink: 'syz.2.3794': attribute type 1 has an invalid length. [ 547.502293][T19516] : renamed from hsr0 (while UP) [ 547.596312][T19486] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.772840][T19486] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.927904][T12019] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.949923][T19528] netlink: 'syz.2.3797': attribute type 4 has an invalid length. [ 548.013500][T12028] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.067806][T12028] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.120436][T12019] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.739055][T19578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3808'. [ 548.804782][T19580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3810'. [ 548.894290][T19580] 8021q: adding VLAN 0 to HW filter on device bond3 [ 548.904823][T19585] netlink: 'syz.4.3811': attribute type 62 has an invalid length. [ 548.967600][T19588] tipc: Enabled bearer , priority 0 [ 549.017228][T19588] syzkaller0: entered promiscuous mode [ 549.028386][T19596] sctp: [Deprecated]: syz.2.3814 (pid 19596) Use of int in max_burst socket option deprecated. [ 549.028386][T19596] Use struct sctp_assoc_value instead [ 549.046573][T19588] syzkaller0: entered allmulticast mode [ 549.080943][T19588] tipc: Resetting bearer [ 549.097501][T19586] tipc: Resetting bearer [ 549.148361][T19586] tipc: Disabling bearer [ 549.232136][T19605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3819'. [ 549.287181][T19608] tipc: Enabling of bearer rejected, already enabled [ 549.472488][T19618] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 549.517887][T19622] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3825'. [ 549.558637][T19622] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3825'. [ 549.609880][T19622] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3825'. [ 549.705324][T19631] bridge0: port 1(syz_tun) entered blocking state [ 549.723188][T19631] bridge0: port 1(syz_tun) entered disabled state [ 549.744865][T19631] syz_tun: entered allmulticast mode [ 549.828380][T19631] syz_tun: entered promiscuous mode [ 550.001578][T19651] netlink: 'syz.3.3834': attribute type 11 has an invalid length. [ 550.036806][T19651] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3834'. [ 550.084488][T19651] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3834'. [ 550.106219][T19657] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3835'. [ 550.115284][T19657] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3835'. [ 550.185975][T19657] netlink: 'syz.0.3835': attribute type 5 has an invalid length. [ 550.834613][T19674] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 550.925395][T19674] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 550.937321][T19674] gretap2: entered promiscuous mode [ 550.942855][T19674] gretap2: entered allmulticast mode [ 551.535014][T19713] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 551.761199][T19707] netlink: 'syz.2.3853': attribute type 16 has an invalid length. [ 551.806081][T19707] netlink: 'syz.2.3853': attribute type 17 has an invalid length. [ 551.955177][T19731] dvmrp0: entered allmulticast mode [ 551.996609][T19731] dvmrp0: left allmulticast mode [ 552.121505][T19736] wg1: entered promiscuous mode [ 552.127270][T19736] wg1: entered allmulticast mode [ 552.476678][T19742] bond0: (slave syz_tun): Releasing backup interface [ 552.585522][T19761] netlink: 'syz.0.3869': attribute type 1 has an invalid length. [ 552.894370][T19771] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 553.221398][T19796] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 553.280628][T19796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 553.288008][T19796] IPv6: NLM_F_CREATE should be set when creating new route [ 553.295824][T19796] IPv6: NLM_F_CREATE should be set when creating new route [ 553.303092][T19796] IPv6: NLM_F_CREATE should be set when creating new route [ 553.312052][T19799] Dead loop on virtual device ip6_vti0, fix it urgently! [ 553.342863][T19803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 553.457218][T19806] syzkaller1: entered promiscuous mode [ 553.462783][T19806] syzkaller1: entered allmulticast mode [ 554.140366][T19831] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.174573][T19839] __nla_validate_parse: 15 callbacks suppressed [ 554.174600][T19839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3890'. [ 554.190204][T19831] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.201007][T19840] netlink: 'syz.0.3889': attribute type 1 has an invalid length. [ 554.201036][T19840] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3889'. [ 554.306744][T19840] netdevsim netdevsim0: Direct firmware load for /.€ failed with error -2 [ 554.317366][T19840] netdevsim netdevsim0: Falling back to sysfs fallback for: /.€ [ 554.359297][T19839] bridge0: entered promiscuous mode [ 554.375437][T19839] macsec1: entered promiscuous mode [ 554.396898][T19839] macsec1: entered allmulticast mode [ 554.402562][T19839] bridge0: entered allmulticast mode [ 554.472490][T19831] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.484844][T19860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.500286][T19831] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.523523][T19858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.533614][T19858] batadv_slave_0: entered promiscuous mode [ 554.600634][T19831] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.625051][T19831] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.722492][T19831] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.734620][T19831] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.779076][T19868] netlink: 'syz.4.3896': attribute type 29 has an invalid length. [ 554.789368][T19868] netlink: 'syz.4.3896': attribute type 29 has an invalid length. [ 554.800686][T19868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.817032][T19868] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3896'. [ 554.827511][T19868] unsupported nla_type 58 [ 554.944910][T12036] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.955330][T12036] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.974273][T12036] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.982769][T12036] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.061479][T12032] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.092571][T12032] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.161187][T12019] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.176686][T12019] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.356755][T19887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3901'. [ 555.391813][T19880] netlink: 'syz.0.3899': attribute type 16 has an invalid length. [ 555.419771][T19880] netlink: 'syz.0.3899': attribute type 17 has an invalid length. [ 555.459586][T19880] eql: remember to turn off Van-Jacobson compression on your slave devices [ 555.501724][T19880] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 555.596486][T19885] vlan3: entered allmulticast mode [ 555.607532][T19885] hsr0: entered allmulticast mode [ 555.612654][T19885] hsr_slave_0: entered allmulticast mode [ 555.628071][T19885] hsr_slave_1: entered allmulticast mode [ 555.691517][T19906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3906'. [ 555.945140][T19919] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3912'. [ 556.143717][T19924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3912'. [ 556.822736][T19959] netlink: 'syz.2.3922': attribute type 1 has an invalid length. [ 556.833480][T19957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3920'. [ 556.881501][T19959] 8021q: adding VLAN 0 to HW filter on device bond2 [ 557.020881][T19966] tipc: Can't bind to reserved service type 2 [ 557.060603][T19963] bond2: (slave veth5): Enslaving as an active interface with a down link [ 557.144731][T19959] bond2: (slave veth0_to_bond): making interface the new active one [ 557.168412][T19959] veth0_to_bond: entered promiscuous mode [ 557.174925][T19959] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 557.189227][T19980] netlink: 'syz.4.3925': attribute type 1 has an invalid length. [ 557.205502][T19975] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 557.282856][T19978] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3924'. [ 557.309389][T19967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3920'. [ 557.383344][T19980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 557.729294][T20004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.164534][T20026] netlink: 'syz.1.3935': attribute type 10 has an invalid length. [ 558.238330][T20026] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 559.175572][T20079] netlink: 'syz.1.3952': attribute type 10 has an invalid length. [ 559.195386][T20079] __nla_validate_parse: 4 callbacks suppressed [ 559.195406][T20079] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3952'. [ 559.220324][T20077] team1: entered promiscuous mode [ 559.225434][T20077] team1: entered allmulticast mode [ 559.272017][T20071] vxcan1 speed is unknown, defaulting to 1000 [ 559.342693][T20079] team0: Port device geneve0 added [ 559.567680][T20094] tc_dump_action: action bad kind [ 560.212535][T20110] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 560.228671][T20110] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 560.549301][T20133] sctp: [Deprecated]: syz.4.3966 (pid 20133) Use of int in maxseg socket option. [ 560.549301][T20133] Use struct sctp_assoc_value instead [ 560.877358][T20149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3974'. [ 560.887100][T20149] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3974'. [ 560.935241][T20141] vxcan1 speed is unknown, defaulting to 1000 [ 561.020951][T20154] tipc: Enabled bearer , priority 0 [ 561.067649][T20154] syzkaller0: entered promiscuous mode [ 561.073192][T20154] syzkaller0: entered allmulticast mode [ 561.134383][T20159] netlink: ct family unspecified [ 561.154307][T20159] openvswitch: netlink: Actions may not be safe on all matching packets [ 561.178982][T20157] syzkaller1: entered promiscuous mode [ 561.194780][T20157] syzkaller1: entered allmulticast mode [ 561.221850][T20165] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3977'. [ 561.278171][T20154] tipc: Resetting bearer [ 561.402311][T20154] tipc: Disabling bearer [ 561.585259][T20175] IPv6: sit1: Disabled Multicast RS [ 561.603367][T20175] sit1: entered allmulticast mode [ 561.659974][T20180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3983'. [ 561.676407][T20181] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 561.761288][T20148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3971'. [ 561.843399][T20186] netlink: 'syz.3.3984': attribute type 33 has an invalid length. [ 561.851680][T20186] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3984'. [ 562.064748][T20176] netlink: 'syz.1.3981': attribute type 1 has an invalid length. [ 562.543529][T20209] IPVS: length: 216 != 24 [ 562.932576][T20232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3999'. [ 563.043885][T20235] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 563.352905][T20238] tipc: Disabling bearer [ 563.371479][T20240] tipc: Started in network mode [ 563.377517][T20240] tipc: Node identity ac14140f, cluster identity 4711 [ 563.384671][T20240] tipc: New replicast peer: 255.255.255.255 [ 563.392141][T20240] tipc: Enabled bearer , priority 10 [ 563.941965][T20267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4013'. [ 563.966941][T20267] bridge_slave_1: left allmulticast mode [ 563.985175][T20267] bridge_slave_1: left promiscuous mode [ 564.000619][T20267] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.045488][T20267] bridge_slave_0: left allmulticast mode [ 564.051652][T20267] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.308649][T20280] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 564.312131][T20283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.354436][T20284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.386162][ T5969] tipc: Node number set to 2886997007 [ 564.573703][T20298] netlink: 'syz.3.4021': attribute type 4 has an invalid length. [ 564.628084][T20298] netlink: 'syz.3.4021': attribute type 4 has an invalid length. [ 564.677521][T20305] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4024'. [ 564.705084][T20298] netlink: zone id is out of range [ 564.709436][T20305] xt_socket: unknown flags 0xd0 [ 564.730177][T20298] netlink: zone id is out of range [ 564.735695][T20298] netlink: zone id is out of range [ 564.754666][T20298] netlink: zone id is out of range [ 564.776251][T20298] netlink: zone id is out of range [ 564.794370][T20298] netlink: zone id is out of range [ 564.822961][T20315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4028'. [ 564.863617][T20315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4028'. [ 565.035486][T20327] netlink: 'syz.3.4032': attribute type 11 has an invalid length. [ 565.045545][T20327] netlink: 'syz.3.4032': attribute type 11 has an invalid length. [ 565.053616][T20327] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4032'. [ 565.275679][T20335] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 565.276567][T20329] netlink: 'syz.3.4032': attribute type 11 has an invalid length. [ 565.301359][T20329] netlink: 'syz.3.4032': attribute type 11 has an invalid length. [ 565.310222][T20329] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4032'. [ 565.383765][T20340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4034'. [ 565.556671][T20351] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4037'. [ 565.577591][T20351] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4037'. [ 565.588038][T20351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4037'. [ 565.668835][T20361] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4039'. [ 565.775105][T20354] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 566.603759][T20399] veth0: entered promiscuous mode [ 566.620438][T20400] netlink: 'syz.0.4049': attribute type 3 has an invalid length. [ 566.790083][T20391] veth0: left promiscuous mode [ 566.838858][T20411] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 566.887611][T20411] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 566.946766][T20415] netlink: 'syz.0.4053': attribute type 12 has an invalid length. [ 566.999901][T20415] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 567.043799][T20408] vxcan1 speed is unknown, defaulting to 1000 [ 567.085673][T20421] Can't find ip_set type hash:net, [ 567.575055][T20444] syz_tun: left allmulticast mode [ 567.582246][T20444] syz_tun: left promiscuous mode [ 567.621046][T20444] bridge0: port 1(syz_tun) entered disabled state [ 567.763163][T20444] bond0: (slave bond_slave_0): Releasing backup interface [ 567.884553][T20444] bond0: (slave bond_slave_1): Releasing backup interface [ 567.931178][T20444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.947726][T20444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.955509][T20444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.981282][T20444] bond2: (slave wlan0): Releasing active interface [ 567.988941][T20444] bond2: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 568.022344][T20444] vlan2: entered promiscuous mode [ 568.023543][T20462] netlink: 'syz.3.4066': attribute type 1 has an invalid length. [ 568.048697][T20444] bond2: (slave vlan2): Releasing active interface [ 568.056980][T20444] vlan2: left promiscuous mode [ 568.064391][T20444] veth1: left promiscuous mode [ 568.101821][T20451] vlan2: entered promiscuous mode [ 568.112169][T20451] erspan0: entered promiscuous mode [ 568.310068][T20467] netlink: 'syz.0.4068': attribute type 21 has an invalid length. [ 568.345343][T12036] veth0_to_bond: left promiscuous mode [ 568.816163][T20493] net_ratelimit: 17 callbacks suppressed [ 568.816187][T20493] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 569.173179][T20509] bridge0: failed insert local address into bridge forwarding table [ 569.708066][T20531] wg1: entered promiscuous mode [ 569.713101][T20531] wg1: entered allmulticast mode [ 569.767468][T20531] tipc: Enabled bearer , priority 0 [ 569.782661][T20531] syzkaller0: entered promiscuous mode [ 569.800754][T20531] syzkaller0: entered allmulticast mode [ 569.845372][T20531] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 569.938326][T20541] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 569.950878][T20544] __nla_validate_parse: 11 callbacks suppressed [ 569.950899][T20544] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4090'. [ 569.999094][T20546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.179662][T20555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4090'. [ 570.418857][T20545] tipc: Resetting bearer [ 570.506495][T20530] tipc: Resetting bearer [ 570.607106][T20530] tipc: Disabling bearer [ 570.762585][T20585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4094'. [ 570.773758][T20585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.793049][T20585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.793085][T20583] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4097'. [ 570.880382][T20585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.915077][T20585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.933167][T20583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4097'. [ 571.626876][T20622] netlink: 'syz.3.4107': attribute type 9 has an invalid length. [ 572.037273][T20640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4113'. [ 572.061418][T20640] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4113'. [ 572.136554][T20644] tipc: Enabled bearer , priority 0 [ 572.176362][T20645] netlink: 496 bytes leftover after parsing attributes in process `syz.0.4114'. [ 572.243619][T20644] syzkaller0: entered promiscuous mode [ 572.249801][T20644] syzkaller0: entered allmulticast mode [ 572.257752][T20651] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4116'. [ 572.360311][T20648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4117'. [ 572.384946][T20644] tipc: Resetting bearer [ 572.805330][T20643] tipc: Resetting bearer [ 573.227134][ T5927] tipc: Node number set to 2971014187 [ 575.659520][T20643] tipc: Disabling bearer [ 575.938676][T20700] netlink: 'syz.1.4128': attribute type 33 has an invalid length. [ 576.201585][T20716] __nla_validate_parse: 1 callbacks suppressed [ 576.201607][T20716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4134'. [ 576.285134][T20720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4134'. [ 576.641720][T20736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4140'. [ 576.760235][T20747] netlink: 'syz.3.4142': attribute type 1 has an invalid length. [ 576.797194][T20747] netlink: 'syz.3.4142': attribute type 3 has an invalid length. [ 576.831378][T20747] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4142'. [ 576.872466][T20750] syzkaller0: refused to change device tx_queue_len [ 576.901299][T20747] NCSI netlink: No device for ifindex 813332851 [ 577.246261][T20769] netlink: 'syz.1.4145': attribute type 1 has an invalid length. [ 577.357123][T20769] 8021q: adding VLAN 0 to HW filter on device bond3 [ 577.397846][T20777] bridge_slave_0: left allmulticast mode [ 577.403756][T20777] bridge_slave_0: left promiscuous mode [ 577.413243][T20777] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.454584][T20777] bridge_slave_1: left allmulticast mode [ 577.469480][T20777] bridge_slave_1: left promiscuous mode [ 577.475523][T20777] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.493573][T20777] bond0: (slave bond_slave_0): Releasing backup interface [ 577.504973][T20777] bond0: (slave bond_slave_1): Releasing backup interface [ 577.520719][T20777] team0: Port device team_slave_0 removed [ 577.535019][T20777] team0: Port device team_slave_1 removed [ 577.542218][T20777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.553478][T20777] team0: Port device geneve0 removed [ 577.561741][T20777] bond1: (slave gretap0): Releasing active interface [ 577.571876][T20777] bond2: (slave veth3): Releasing active interface [ 577.632680][T20776] bond3: (slave gretap0): making interface the new active one [ 577.661992][T20795] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4151'. [ 577.675122][T20776] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 577.896689][T20800] netlink: 'syz.1.4152': attribute type 1 has an invalid length. [ 578.039245][T20789] bond2: entered allmulticast mode [ 578.063172][T20789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 578.134948][T20789] bridge0: port 3(bond2) entered blocking state [ 578.173314][T20789] bridge0: port 3(bond2) entered disabled state [ 578.191928][T20789] bond2: entered promiscuous mode [ 578.208377][T20789] bridge0: port 3(bond2) entered blocking state [ 578.214864][T20789] bridge0: port 3(bond2) entered forwarding state [ 578.225351][T20796] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 578.271392][T20804] bond4: (slave bridge1): making interface the new active one [ 578.280664][T20804] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 578.319779][T12032] bridge0: port 3(bond2) entered disabled state [ 578.377174][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 578.558218][T20820] tipc: Enabled bearer , priority 0 [ 578.573921][T20820] syzkaller0: entered promiscuous mode [ 578.588701][T20820] syzkaller0: entered allmulticast mode [ 578.691725][T20820] tipc: Resetting bearer [ 578.793720][T20819] tipc: Resetting bearer [ 578.834888][T20819] tipc: Disabling bearer [ 579.040287][T20844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.112993][T20848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4165'. [ 579.203262][T20842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4164'. [ 579.316794][T20851] netlink: 'syz.0.4166': attribute type 21 has an invalid length. [ 579.349119][T20851] netlink: 'syz.0.4166': attribute type 22 has an invalid length. [ 579.411227][T20851] netlink: 'syz.0.4166': attribute type 23 has an invalid length. [ 579.450937][T20851] netlink: 'syz.0.4166': attribute type 25 has an invalid length. [ 579.493857][T20851] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4166'. [ 579.744760][T20871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4172'. [ 579.784238][T20854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4167'. [ 580.020788][T20871] hsr_slave_1 (unregistering): left promiscuous mode [ 580.109149][T20882] pim6reg1: entered promiscuous mode [ 580.125440][T20882] pim6reg1: entered allmulticast mode [ 580.249792][T20898] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 580.401488][T20896] bridge2: port 1(veth5) entered blocking state [ 580.421984][T20896] bridge2: port 1(veth5) entered disabled state [ 580.436180][T20896] veth5: entered allmulticast mode [ 580.454214][T20896] veth5: entered promiscuous mode [ 580.489825][T20893] vlan0: entered allmulticast mode [ 580.500478][T20893] veth0_to_bond: entered allmulticast mode [ 580.512442][T20893] bridge2: port 2(vlan0) entered blocking state [ 580.520772][T20893] bridge2: port 2(vlan0) entered disabled state [ 580.528839][T20899] netlink: 'syz.4.4175': attribute type 16 has an invalid length. [ 580.539986][T20893] vlan0: entered promiscuous mode [ 580.545390][T20893] veth0_to_bond: entered promiscuous mode [ 580.553855][T20889] syzkaller1: entered promiscuous mode [ 580.560473][T20889] syzkaller1: entered allmulticast mode [ 580.630203][T20899] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.637504][T20899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.652404][T20899] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.659701][T20899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.722384][T20899] geneve2: left promiscuous mode [ 580.731965][T20899] geneve2: left allmulticast mode [ 580.750184][T20899] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 580.760807][T20899] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 581.004360][T20918] tipc: Enabled bearer , priority 0 [ 581.015258][T20918] syzkaller0: entered promiscuous mode [ 581.045229][T20918] syzkaller0: entered allmulticast mode [ 581.140338][T20925] validate_nla: 4 callbacks suppressed [ 581.140363][T20925] netlink: 'syz.0.4186': attribute type 6 has an invalid length. [ 581.175693][T20925] gretap0: entered promiscuous mode [ 581.198096][T20918] tipc: Resetting bearer [ 581.239761][T20917] tipc: Resetting bearer [ 581.247775][T20930] __nla_validate_parse: 5 callbacks suppressed [ 581.247795][T20930] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4186'. [ 581.322048][T20917] tipc: Disabling bearer [ 581.373216][T20930] 0ªî{X¹¦: renamed from gretap0 [ 581.392492][T20930] 0ªî{X¹¦: left promiscuous mode [ 581.423492][T20930] 0ªî{X¹¦: entered allmulticast mode [ 581.450535][T20930] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 581.830134][T20955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4193'. [ 581.978710][T20960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4196'. [ 582.146065][T20970] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4201'. [ 582.464966][T20979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4204'. [ 582.488666][T20980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4204'. [ 582.865986][T20989] netlink: 'syz.0.4207': attribute type 19 has an invalid length. [ 583.966777][T20993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4208'. [ 583.988517][T20993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4208'. [ 584.040056][T20993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4208'. [ 584.086640][T20993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4208'. [ 584.182276][T21004] sctp: [Deprecated]: syz.3.4211 (pid 21004) Use of struct sctp_assoc_value in delayed_ack socket option. [ 584.182276][T21004] Use struct sctp_sack_info instead [ 584.236274][T21005] sctp: [Deprecated]: syz.3.4211 (pid 21005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 584.236274][T21005] Use struct sctp_sack_info instead [ 584.282374][T21012] erspan0: entered allmulticast mode [ 585.203818][T21059] geneve2: entered promiscuous mode [ 585.283194][T21059] geneve2: entered allmulticast mode [ 585.342238][T12036] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 585.363000][T12036] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 585.406657][T12036] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 585.700694][T21060] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.896620][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 586.089113][T21103] batadv2: entered allmulticast mode [ 586.168275][T12039] bond0: (slave wlan1): link status definitely down, disabling slave [ 586.217873][T21105] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 586.338853][T21117] erspan0: entered allmulticast mode [ 586.624943][T21132] __nla_validate_parse: 2 callbacks suppressed [ 586.624966][T21132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'. [ 586.663415][T21132] bridge_slave_1: left allmulticast mode [ 586.680945][T21132] bridge_slave_1: left promiscuous mode [ 586.695667][T21132] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.749760][T21132] bridge_slave_0: left allmulticast mode [ 586.755559][T21132] bridge_slave_0: left promiscuous mode [ 586.762492][T21132] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.812471][T21132] bridge0 (unregistering): left allmulticast mode [ 586.917967][T21141] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4247'. [ 587.120584][T21147] IPv6: Can't replace route, no match found [ 587.384149][T21060] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.404333][T21060] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 587.504318][T21160] netlink: 'syz.2.4254': attribute type 15 has an invalid length. [ 587.550450][T21060] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.566824][T21060] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 587.613442][T21160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4254'. [ 587.653918][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 587.660466][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 587.667132][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 587.673601][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 587.680208][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 587.686707][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 587.693283][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 587.699780][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 587.707782][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 587.715642][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 587.723645][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 587.731539][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 587.739527][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 587.747414][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 587.755404][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 587.763294][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 587.771278][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 587.779164][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 587.787172][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 587.795033][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 587.803046][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 587.810942][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 587.818938][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 587.826808][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 587.834763][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 587.842658][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 587.850655][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 587.858541][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 587.866541][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 587.874394][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 587.882405][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 587.890299][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 587.898283][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 587.906250][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 587.914247][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 587.922145][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 587.930141][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 587.938032][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 587.946015][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 587.953885][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 587.961965][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 587.969859][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 587.977862][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 587.985769][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 587.993819][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.001724][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.009737][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.017639][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.025599][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.033570][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.041549][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.049461][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.057448][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.065303][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.073304][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.081198][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.089308][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.097630][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.105600][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.113490][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.121856][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.129748][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.137943][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.145828][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.153799][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.162064][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.170209][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.178094][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.186076][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.193927][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.201911][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.209798][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.217766][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.225643][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.233639][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.241527][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.249505][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.257382][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.265337][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.273229][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.281231][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.289129][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.299201][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.307096][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.315061][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.322969][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.330946][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 588.338846][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 588.561963][T21060] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.603716][T21060] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 589.354215][T12036] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 589.377863][T12036] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 589.397264][T12036] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 589.416906][T12036] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 589.455261][T21060] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 589.470636][T21060] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 589.540892][T21060] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 589.551713][T21060] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 589.632054][T21235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4269'. [ 589.684897][T21237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4270'. [ 589.695083][T21238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4270'. [ 590.361385][T21249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4275'. [ 590.377513][T21251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4272'. [ 590.478339][T21249] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 590.688301][T21263] netlink: 'syz.4.4277': attribute type 2 has an invalid length. [ 590.874795][T21272] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 590.902569][T21272] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 590.988909][T21274] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4283'. [ 591.275276][T21299] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4289'. [ 591.463288][T21304] nbd: couldn't find device at index 2 [ 591.636730][T21311] ip6gre3: entered allmulticast mode [ 592.597811][T21347] netlink: 'syz.4.4303': attribute type 7 has an invalid length. [ 592.605501][T21348] __nla_validate_parse: 1 callbacks suppressed [ 592.605524][T21348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4301'. [ 592.605680][T21347] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4303'. [ 592.647206][T21348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4301'. [ 593.312772][T21392] nbd: must specify a size in bytes for the device [ 593.359086][T21382] syzkaller1: entered promiscuous mode [ 593.364863][T21382] syzkaller1: entered allmulticast mode [ 593.542875][T21399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4319'. [ 593.948289][T21421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4326'. [ 594.221287][T21437] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4330'. [ 594.677801][T21459] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4337'. [ 594.927015][T21477] C: entered promiscuous mode [ 594.931991][T21477] netlink: 'syz.2.4343': attribute type 2 has an invalid length. [ 594.940899][T21477] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 595.004860][T21480] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4342'. [ 595.208305][T21492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4347'. [ 595.213452][T21496] netlink: 'syz.1.4345': attribute type 1 has an invalid length. [ 595.227005][T21492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4347'. [ 595.257721][T21488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 595.297943][T21491] tipc: Enabling of bearer rejected, failed to enable media [ 595.396699][ T10] IPVS: starting estimator thread 0... [ 595.507141][T21503] IPVS: using max 26 ests per chain, 62400 per kthread [ 596.250493][T21548] netlink: 'syz.3.4364': attribute type 32 has an invalid length. [ 596.281095][T21548] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 596.800198][T21570] IPv6: sit1: Disabled Multicast RS [ 596.827488][T21570] sit1: entered allmulticast mode [ 597.730253][T21619] netlink: 'syz.0.4382': attribute type 2 has an invalid length. [ 597.739038][T21619] __nla_validate_parse: 16 callbacks suppressed [ 597.739060][T21619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4382'. [ 597.800030][T21611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4382'. [ 597.811975][T21629] tipc: Enabling of bearer rejected, failed to enable media [ 597.969370][T21627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4388'. [ 597.973874][T21639] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.4391'. [ 598.154220][T21643] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.4392'. [ 598.161236][T21647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4395'. [ 601.257313][ T5879] Bluetooth: hci5: command 0x0405 tx timeout [ 601.269190][T21699] geneve2: entered promiscuous mode [ 601.273199][T21700] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4405'. [ 601.298717][T21699] geneve2: entered allmulticast mode [ 601.343505][T12016] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 601.373646][T12016] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 601.402101][T12016] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 601.413145][T21699] netlink: 'syz.1.4406': attribute type 9 has an invalid length. [ 601.440941][T21708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4409'. [ 601.461587][T12016] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 601.481710][T21714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4407'. [ 601.562682][T21717] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4407'. [ 601.873757][T21729] syzkaller1: entered promiscuous mode [ 601.906415][T21729] syzkaller1: entered allmulticast mode [ 602.305574][T21754] openvswitch: netlink: Message has 5 unknown bytes. [ 602.899338][T21775] __nla_validate_parse: 3 callbacks suppressed [ 602.899363][T21775] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4428'. [ 603.314975][T21781] tipc: Enabling of bearer rejected, failed to enable media [ 603.350683][T21784] vxcan1 speed is unknown, defaulting to 1000 [ 603.745377][T21804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4438'. [ 603.914834][T21804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4438'. [ 604.333387][T21798] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 604.354422][T21798] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 604.371615][T21831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4445'. [ 604.407086][T21831] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4445'. [ 604.445601][T21798] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 604.484865][T21798] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 604.992193][T21798] tipc: Resetting bearer [ 605.034537][T21855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4449'. [ 605.054255][T21855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4449'. [ 605.077074][T21798] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 605.083134][T21798] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 605.321515][T21862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4451'. [ 605.427924][T21798] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 605.433904][T21798] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 605.450206][T21866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4451'. [ 605.566903][T17765] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 605.578942][T17765] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 605.587458][T17765] CPU: 0 UID: 0 PID: 17765 Comm: kbnepd  Not tainted syzkaller #0 PREEMPT(full) [ 605.596705][T17765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.606797][T17765] RIP: 0010:klist_del+0x49/0x110 [ 605.611789][T17765] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 09 b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b 09 b3 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74 [ 605.631431][T17765] RSP: 0000:ffffc9000b017768 EFLAGS: 00010202 [ 605.637543][T17765] RAX: 000000000000000b RBX: ffff88805e14f860 RCX: ffff88807d9b0000 [ 605.645551][T17765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 605.653642][T17765] RBP: ffffc9000b017890 R08: ffff8880613a4e13 R09: 1ffff1100c2749c2 [ 605.661647][T17765] R10: dffffc0000000000 R11: ffffed100c2749c3 R12: dffffc0000000000 [ 605.669651][T17765] R13: 1ffff1100bc29f0c R14: 0000000000000000 R15: ffff88807ed38750 [ 605.677656][T17765] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 605.686704][T17765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 605.693321][T17765] CR2: 000000110c35e066 CR3: 000000005905c000 CR4: 00000000003526f0 [ 605.701326][T17765] Call Trace: [ 605.704636][T17765] [ 605.707594][T17765] device_del+0x280/0x8e0 [ 605.711957][T17765] ? _raw_spin_unlock_irq+0x2e/0x50 [ 605.717193][T17765] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 605.723403][T17765] ? __pfx_device_del+0x10/0x10 [ 605.728293][T17765] ? netdev_unregister_kobject+0x344/0x450 [ 605.734142][T17765] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 605.740690][T17765] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 605.747515][T17765] ? rtnl_net_dev_lock+0x257/0x2f0 [ 605.752692][T17765] unregister_netdevice_queue+0x33c/0x380 [ 605.758630][T17765] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 605.764921][T17765] ? rtnl_net_dev_lock+0x36/0x2f0 [ 605.769965][T17765] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 605.775126][T17765] unregister_netdev+0x1f/0x60 [ 605.779911][T17765] bnep_session+0x294d/0x2b40 [ 605.784600][T17765] ? rcu_is_watching+0x15/0xb0 [ 605.789415][T17765] ? trace_sched_exit_tp+0x36/0x110 [ 605.794647][T17765] ? __lock_acquire+0xab9/0xd20 [ 605.799531][T17765] ? __pfx_bnep_session+0x10/0x10 [ 605.804630][T17765] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 605.810556][T17765] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 605.816904][T17765] ? __pfx_woken_wake_function+0x10/0x10 [ 605.822553][T17765] ? __kthread_parkme+0x7b/0x200 [ 605.827678][T17765] ? __kthread_parkme+0x1a1/0x200 [ 605.832724][T17765] kthread+0x70e/0x8a0 [ 605.836825][T17765] ? __pfx_bnep_session+0x10/0x10 [ 605.841866][T17765] ? __pfx_kthread+0x10/0x10 [ 605.846478][T17765] ? _raw_spin_unlock_irq+0x23/0x50 [ 605.851694][T17765] ? lockdep_hardirqs_on+0x9c/0x150 [ 605.857001][T17765] ? __pfx_kthread+0x10/0x10 [ 605.861692][T17765] ret_from_fork+0x3fc/0x770 [ 605.866311][T17765] ? __pfx_ret_from_fork+0x10/0x10 [ 605.871435][T17765] ? __switch_to_asm+0x39/0x70 [ 605.876215][T17765] ? __switch_to_asm+0x33/0x70 [ 605.880992][T17765] ? __pfx_kthread+0x10/0x10 [ 605.885594][T17765] ret_from_fork_asm+0x1a/0x30 [ 605.890397][T17765] [ 605.893437][T17765] Modules linked in: [ 605.900552][T17765] ---[ end trace 0000000000000000 ]--- [ 605.912126][T17765] RIP: 0010:klist_del+0x49/0x110 [ 605.917830][T17765] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 09 b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b 09 b3 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74 [ 605.939373][T17765] RSP: 0000:ffffc9000b017768 EFLAGS: 00010202 [ 605.945584][T17765] RAX: 000000000000000b RBX: ffff88805e14f860 RCX: ffff88807d9b0000 [ 605.956558][T17765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 605.964583][T17765] RBP: ffffc9000b017890 R08: ffff8880613a4e13 R09: 1ffff1100c2749c2 [ 605.973996][T17765] R10: dffffc0000000000 R11: ffffed100c2749c3 R12: dffffc0000000000 [ 605.982864][T17765] R13: 1ffff1100bc29f0c R14: 0000000000000000 R15: ffff88807ed38750 [ 605.991114][T17765] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 606.001111][T17765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 606.007892][T17765] CR2: 0000558e863aaf40 CR3: 0000000034da8000 CR4: 00000000003526f0 [ 606.016651][T17765] Kernel panic - not syncing: Fatal exception [ 606.023051][T17765] Kernel Offset: disabled [ 606.027385][T17765] Rebooting in 86400 seconds..