last executing test programs: 3.00255816s ago: executing program 4 (id=1708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) socket(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000840)={0x24e, 0x8, 0x1, 0x5, 0x1, 0x4, 0xc, 0x7, r3}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0xac}}, 0x0) 2.807848399s ago: executing program 4 (id=1710): r0 = socket$inet(0x2, 0x6, 0x5) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0xd6, "a9f57e63abf25fb5a6a47607a25c2c7cec3548f108aa156c13b2aa2e1b6800fbeea415243ef4e76cf03bc5270d415e49aec8ceaae20da86fa4339faca88bcf12347e8f4e62df31f1c5d4018855b1c3fea8b4767e9f95334d122bd9a6c932460c4abc5983568973b967adf7b22da7970cab9e6475d2cc420855aef3aa25a2d1c40b1452f40c76cc3fc81cafc526df00df878848698d25ec94869f1c702098407ba20d26362ce1b7273e0728d0d9be7b561545b4bcef62ab525762b9204f71fbf713e3f76beedb0a38d39f9a4b3c04df393d3b38ad6bdf"}, &(0x7f0000000000)=0xfa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x80844) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x0, 0x2000000, 0x100000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) 2.444114777s ago: executing program 4 (id=1713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b, 0x2b, "4372070000000000476fb2940acfbe4c3f9725f0f2bf568d62c050880594c23d36147b586c9a7affa71b5e"}}) (async) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x110, r5, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x4}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "38e9750c2f3857b31f56414df95391f550c86e606a2056d6"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "391e7a9ee249d1d443dd37ad330d80e27f364627e148a6ff"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x110}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) (async) preadv(r4, 0x0, 0x0, 0x4a71, 0x5) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002640)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0xfff1, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xf}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) unshare(0x400) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x1, 0x4, 0x1, 0x0, r11}, 0x50) (async) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x24, r12, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4015}, 0x40000c0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYBLOB="0ac16dd4d79f120442c70665072964024c73743e6dda2fd362529aa0b00dda580713481f7599b782fca147dfbc7a02fad403a2b0edf38ed5506c53549e499e249d87eb9fcfea6f6c286792e9d1f0a9c23028c72c96ce51cfc73e78f2a1a6d041697ed69578759b7fa5ad872dc0139486ac4c19525125cacbbbea5a93c0ed52c06f22106f794bfdc1b4787fe48c03eae3273e710f588e56ca490f9b642163f09fd727744ed47c"], 0x34}, 0x1, 0xfdff, 0x0, 0x50}, 0x84) 2.08526455s ago: executing program 4 (id=1717): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001811ff00000000000000000000000000000000ff0200000000000000000000000000014f194e2000189078040000000b0000000000010000000000"], 0x52) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xc30}, 0x0) 1.963440938s ago: executing program 3 (id=1720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r2, 0x607d8000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x2, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xd}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) unshare(0x28000600) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0xf, 0x0, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) (async) r9 = accept4(r7, 0x0, 0x0, 0x80000) r10 = accept4(r9, 0x0, 0x0, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r6) getsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f0000000380)={@broadcast, @empty, 0x0}, &(0x7f0000000400)=0xc) sendmsg$ETHTOOL_MSG_FEATURES_GET(r9, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0xe8, r11, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) (async, rerun: 64) sendmmsg$inet6(r10, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000093, 0x8000) (async, rerun: 64) sendmsg$can_bcm(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x2, 0x0, 0x0, 0x20040800}, 0x0) (async, rerun: 32) r13 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r13, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r14}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.783148988s ago: executing program 2 (id=1721): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0e0011"], 0x0, 0x2b, 0x0, 0x9}, 0x28) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) (async) r2 = accept4(r1, &(0x7f0000000000)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x80000) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) shutdown(r1, 0x0) 1.7819344s ago: executing program 0 (id=1722): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000400)=@ethtool_rxnfc={0xc56bafa64e11711a, 0x1, 0xe, {0x2, @sctp_ip6_spec={@loopback, @mcast1, 0x4e20, 0x4e23, 0x4}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, 0x1, 0x8b6, [0x5, 0xb3300]}, @udp_ip4_spec={@remote, @rand_addr=0x64010100, 0x4e24, 0x4e23, 0x9}, {0x0, @empty, 0xf005, 0x0, [0x7, 0x9]}, 0x10, 0x2}, 0x1, [0x3]}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="44005e800800020000000001040001"], 0x60}}, 0x800) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) sendmsg$tipc(r7, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000000), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) connect$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x20, r10, 0x1, 0x80, 0x25dfdbfe, {0xf, 0x0, 0x2d}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2805}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4080) shutdown(0xffffffffffffffff, 0x0) 1.747927212s ago: executing program 3 (id=1723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000340)={0x1c8, r1, 0x1, 0x0, 0x3, {}, [@WGDEVICE_A_PEERS={0x198, 0x8, 0x0, 0x1, [{0x194, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @remote, 0xffffffff}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7fffffff, @mcast2, 0x6}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9faf2ee4335474715eed877468706bf1a251ffd35e46131bebdca98324e7e86d"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8001, @empty, 0x91b9}}, @WGPEER_A_ALLOWEDIPS={0x90, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x1c8}}, 0x20008040) 1.694816341s ago: executing program 4 (id=1724): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017000000080002000500000008000300070000000000000003000000080004000a000000080001006574680014000280080003007032ffff0800010002000000080001007564700014000280080001001500000008000200ffffffff0c0003800800020008eeffff5b0007800c0004000000000000000000080001000000ffff0c00030006000000000000000c0004"], 0x160}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r2, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10) 1.620301667s ago: executing program 2 (id=1726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) (async, rerun: 32) socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x1, 0x7, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x196}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x101}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7533a47a}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x757}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x24048050}, 0x804d) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) 1.573579966s ago: executing program 3 (id=1727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x101}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x42}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000"], 0xbc}}, 0x0) (async) r5 = socket(0x10, 0x80003, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) (async) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) recvmsg$unix(r5, 0x0, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'sit0\x00'}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r7 = socket(0x10, 0x803, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x0, 0x10000, 0x6, 0xd9b, 0x5}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r10}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r0, 0xffffffffffffffff, 0xfd91fc133e1b2663, 0x2024}, 0x20) (async) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newtfilter={0x124, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0xf4, 0x2, [@TCA_FLOW_EMATCHES={0xf0, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xc4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8, 0x8, 0x6}, {0x1, 0x2, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3}, {{0x3}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_META={0x9c, 0x1, 0x0, 0x0, {{0x80}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x6, 0x2, [@TCF_META_TYPE_VAR="df3b"]}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_VAR="a66be3dc3ad090f1d7", @TCF_META_TYPE_VAR="b886c8", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="1fdb", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xa24e, 0x9}, {0x3, 0x1}}}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="61b71eba2f593e33"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x401, 0x2, 0x1}, {0x5, 0x28}}}, @TCA_EM_META_RVALUE={0x20, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR='@6)', @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8000, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="0cfe", @TCF_META_TYPE_VAR="4fba03", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="e5427a325dcc9bb5"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x200}, "d8"}}]}]}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r12, &(0x7f00000000c0), 0x9) (async) sendfile(r12, r11, 0x0, 0x10000) (async) write$cgroup_type(r12, &(0x7f0000000180), 0x9) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050050"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c0001800602"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.570681736s ago: executing program 0 (id=1728): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x80}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x38}}, 0x20040004) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000200)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004040}, 0x20008045) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x160, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x291495fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c1b3f99}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1038906}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb0, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x277dc497}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7420e6e0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73d2f919}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50e29361}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46fbb5f7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3be228ad}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b646ffd}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2124e9dd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}]}]}]}, 0x160}}, 0x20008010) (async) r5 = accept4$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @private}, &(0x7f0000000500)=0x10, 0x80000) setsockopt$inet_int(r5, 0x0, 0x9, &(0x7f0000000540)=0x8001, 0x4) (async, rerun: 64) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000580)={0x7, 0x3e, 0x1, 0x4, 0x7, 0xa, 0x80, 0xf, 0x9c, 0xe9, 0x0, 0x5, 0xe8, 0x8e}, 0xe) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x148, r0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}], @NL80211_ATTR_IE={0x12a, 0x2a, [@tim={0x5, 0xf8, {0x4, 0x5b, 0xaf, "735eefa2db923a597c5610ccc31357ecb909d2fece0759a62f34e0929ceb7692db2feaa3af86da27d2f98492501271f338089498fb7fb20072e1087efee7f5b5762a92a3392540156e99bebb89fd14db5e1bcc78fb47a46e4255a02e6794e4e128f7956f44abdbab95f6baa25f5556c6d303a30c0627ab87f5ca6ff2adf34416807b562ff9ea6f8d863caab02bd2bf0636b5c6c6dd1b9a55709b268bf2441900866384c906b15c91eb8918cfe091bb77ed7a083ef3d48064f743ff69a93693fb3a87d8133eb8018b6d13ec9bfd17436d5dc688b7b0612e420691e265a3b84267395461ef6d2a5ce92dc45c82cf708e7489fb4ee99b"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @erp={0x2a, 0x1, {0x1}}, @prep={0x83, 0x1f, {{}, 0x4, 0x0, @broadcast, 0x7ff, @void, 0x9, 0x8001, @device_a, 0x2}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x4004) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000800)={0x8001}, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'vlan0\x00'}) (async, rerun: 32) r7 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r7, 0x1, 0x1c, &(0x7f0000000880)=""/4096, &(0x7f0000001880)=0x1000) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001900)={'hsr0\x00', &(0x7f00000018c0)=@ethtool_rxfh={0x47, 0x2, 0x6, 0x56, 0x6, "36123b", 0x10001, [0x3, 0x94db, 0x6, 0x5, 0xb, 0x8, 0x9, 0x1ff]}}) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001980), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x34, r8, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x80000000}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x100}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001a80)={'wlan1\x00'}) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000001ac0)) (async) pipe(&(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000001b40), &(0x7f0000001b80)=0xc) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r9, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x44008800}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x28, r0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x11}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x841) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x1c, r0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r11}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) (async) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000001e40)) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x28, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000005}, 0xc000) 1.410978673s ago: executing program 3 (id=1729): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x2f16, 0x4) (async, rerun: 32) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) (rerun: 32) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) (async) r1 = socket$inet(0x2, 0xa, 0x7) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) 1.408296341s ago: executing program 2 (id=1730): r0 = socket(0x10, 0x80003, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x1) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000002c0)=0x6, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002140)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x2, 0xb, 0x9}, {0x5, 0x1, 0x1000, 0x9, 0x0, 0xc}, 0x3, 0x4, 0xe6d}}, @TCA_TBF_RATE64={0xc, 0x4, 0x5b0d649c4533b841}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) 1.33312409s ago: executing program 0 (id=1731): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x3a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="742f311a", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000a00)="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", 0x158}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="05df87755953", 0x6}, {&(0x7f0000000500)="632c4ad77c4c7a1f872d643ea1f7ab9889c23ffe71b43c8c902714548823c2c04db9c607e9155a0855a204ab394c9863aa7ed6c172e89e29eeae71cfec79345d744bc672e21e77c9461f42f3", 0x4c}, {&(0x7f0000000d00)="9b8fcf31b9c2496651b2081f4dc6f3b9b9ca00ad421d57579462d1353c7e4d3ff6bda4a52fe1dd0e641411992dc125e83c376dd876da42d769aa773ffbd30ae0f61d42d6884d950d354e8ea1a44d3c377ab295768d467a8447e18ebc12bb5484f633750a7611ac46ced0de41df68ebda5535f1341f0f717be9329c9189373dc4008f69dfb4b5b43d7e623b31c6e6839ec393aa2dfc4493d483d73f3fddcb05c3c7357afd168ce7886f037ea7261ac935aba425840a7bff3e1568bb31139a5e3260020dd8362399816607ea105e5376064d987df2e10240050b8a9ef8e4d084e2954d02f35259346143c2", 0xea}], 0x3, &(0x7f00000005c0)}}, {{&(0x7f00000006c0)={0x2, 0x5, @broadcast}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000e00)="174dbbc4cb440e66b35d7806d5d0fd6202b490652f26aaf1216beeb537d5665c2268fea65d415252fa850f143fa5ccef495735ec2d6f9769a5869a149ab97877cef8e410fce906f7c4a609c5186492f03ab3ab56cffa8ef4d2337f4a7029c1adc31517557fae5abed00ebc2a3e3bcef4b82e05aec92550fc8ed146da40335055f1312d3954880c9f0c6974282b64764729ccbd5402e751511ea4902d77d8349b1952281a536805e27bb31df49587d23ab5ee13a84238f8a138931badf4cb17c6ff8107159e605e4daba2e3c99764b2db85dc8fe6fbc658f882ad56605508177f3141af4cc6b01fe20c5a7e", 0xeb}, {&(0x7f0000000700)="75fa54", 0x3}, {&(0x7f0000000f00)="dccba3d357820841deb7a91d662fc5addabec7d63648c75e172ca244e88e045c1f7965611b2fd952040760c9b1c789556ff82c609dd6ff540b9338ea20919fc69ec1f8f233b76f120e8c4b47b21f0b2738d73f5c5d000b2b7fed46aa04b5a3d0f771e9261d70f8f4c26ff029a40ff04c98786260277f8ed6bf5d43d87b68ea922ba984966c16a5796cf829d9b9aa1c6e3f655a946f4e689ee393d67b768c03bf3483f7baa3afac58d6e5df78a886de84c6281aa1d9bda705795b3190062dbe3bd3afd32c65107004d747774be50638870a1848d16132497a023048ed983d24", 0xdf}, {&(0x7f0000001000)="9f285c6be7891ac4ba5aecbe8d8d727fc4e347dd771bfdd867ca16fb5cc4079164f9ce7aab941259170f588736b3ecb502c76dd9e80f2cee15fd936c7d5d2bcc9fca173c5452fc101072c8ca24525e13ccbf967d739bb4bdbdd13c144fe521af81bc8716778d71b11ef64f9c402191f5cc00dbed68c27e8afbcf74d6378af09e594c972cf022793bb211ee131b562e7077bff71ad2faa952d51f504e0012b7862d9a368edbb03ebd03a01acdbbe5183bbec43c3805efd1a2e556495014c2f4d979f44de8c53797c8a3d2657c83c7663d49101e35a0e60b813c", 0xd9}, {&(0x7f0000000740)="7bb1b846728bcb9b6b6a1a90b1b13f60ec8f4a8fd9126834052932dcf541703603c75951f28804b2883bab306a9c76a5dc315c6c01ca8c", 0x37}, {0x0}, {&(0x7f0000000bc0)="331cddd7782485f980a0b5608326015a4851286f470762f792859fe7903303b45ef1b928000f96372ec917da2e8bf70b3921c2a600b47322c7aefda4dd640a84815cf65c3f9f7ebd52b36e9f91e7ab73cc007b1cec35c924", 0x58}, {&(0x7f0000001100)="abe0be638413291aa79a0a5a712bc75d682c1a29f21738ce2545280ead72225bb5aeec8da4422cb4e562d76d516cce82abe029796410b45327a479382b89f73651c24320c2d5d44ca586f96281f2ec9fb6f9e9f158b0864b51ea0af1a48ca7fa71e76080d933888fd9c429dbffa218d8209cf183e3b1029f37f3a31653329ee8e6e3cac6af3526c497bb003fc9fa7c452e217fde20feeda3994d38fd4781f9a8f703fb03b467d2effc36fd6bf35b368f263bcd7d97b0dee9828bcce9b188175f8e4865c445cd4e9c526911626c2194c0db589c36bfc5208ca06fe1e8c35497626cf7bf72da264f731109dfe46dca9e76ec5e6eaede68eaf2", 0xf8}], 0x8}}, {{&(0x7f00000016c0)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002800)}}], 0x5, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000840)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x58, &(0x7f0000000980)}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113b00000000009710000002000000bf000000000000ff0f0000000000000095000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 1.324693362s ago: executing program 2 (id=1732): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x90) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x1d}}], 0x1, 0x12141, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000008e8239b29fcfb8ae39e0cfb9b4f2cc908f1518a027cf7eda1214331c35292a81adb18c55d393e7f6c12928b8c0f6fcec25c697b27c3682c92448f326979cc10a0000000000000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500010100000c00070000000000000000000800090000000000070006006468000028fd080000000000"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640035ac"], 0x64}, 0x1, 0x0, 0x0, 0x40804}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000580)="629377324c4e889db3651c28e0367542086307f733249e58959b4db73ebc66686c306f683416c9df783600bd9b75d0de20d84916ae1d50585acf1762b1c3f77e36f096d919d102328881a827a0afd0ffe7167de9f8beb2e26cf5d8d7d0799c2e3a9e8993d082352f1277343c426e53c4aa95dd0b13272947830e441a6c01010b52242ab3fb4b63b67a71f8abcedaa8a0653af109ad669eb49c7cb38cb809be6bbb0fe1148a5b3b330b92161821c495e85943c7aa8da24cb23fbb1bf4d4d24aa889576ca1561bac1081e6a8394d0e5994e6caebb5900933983d2afc42ed0974a4584a7dd99a0049770486c19a50c0ef98", 0x0}, 0x8b) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6, 0x2, 0x20, 0x11c2}]}, 0x10) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = accept$inet6(r7, 0x0, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r8, 0x6, 0x22, &(0x7f0000000100), 0x5a) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r6, @ANYBLOB="0a00180003030303030300000e005a80080005"], 0x4c}}, 0x4040810) 1.24303824s ago: executing program 3 (id=1733): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x11, &(0x7f0000000240)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x0, 0x2, 0x1, 0x8, 0x0, 0xfffffffffffffff8, 0x1}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYRES16=r5, @ANYRESOCT=r5, @ANYRES32=r1, @ANYRES64=0x0, @ANYRES8, @ANYRES64=r0], 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x60) 1.239338683s ago: executing program 1 (id=1734): r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) unshare(0x20000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) 1.156451149s ago: executing program 1 (id=1735): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r0, 0x9) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="920a", 0x2}], 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800090001000000800000009282d408e866027e2560a7a2af77844b1ecabf", @ANYRESHEX=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRESOCT], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001a00010000000000feffffff8100800010"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001a00010029bd70000000000002202005000300030000000008000300", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x22000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f00000004c0)=""/4093, 0x0, 0x1}, 0x94) 1.149910468s ago: executing program 2 (id=1736): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000000127bd700000ea800000009800", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100697036746e6c0000180002801400030020010000000000000000000000000001"], 0x48}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000f279d24bb24a73ce3946db9346c8d35dea92604d243f5fbde7807cce79a93edd519fb7e5f57b03b6aa3a8d7a7a8623aa3c4518e1aa722bf2b7b7af55d9930ee238f2805336dd4b5735530229653ff6aff83bde1f97855e18134687703c595d0d52d0d9129d071cd5a6eb70be4812c4e62fa8a72fb1a319b62ac004085c71583957a64662196ed63a998866ebe70e13135eb4efbbac", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x4c095) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)=0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r15], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000005c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000040)={r9, 0xf}, 0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000180)=r9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r17 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) setsockopt$IP_VS_SO_SET_ADD(r17, 0x0, 0x482, &(0x7f0000000080)={0x6c, @private=0xa010102, 0x4e24, 0x3, 'rr\x00', 0x0, 0x8, 0x59}, 0x2c) 1.02680002s ago: executing program 3 (id=1737): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) r6 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = epoll_create1(0x0) epoll_wait(r7, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0xffffffffffffff21, 0x0, 0x0, &(0x7f00000005c0)=""/108, 0x6c}, 0x7fff}], 0x3fffffffffffcbe, 0xfffe, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x100) openat$tun(0xffffffffffffff9c, &(0x7f0000007a00), 0x82000, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x40030000000000}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc}}]}, 0x3c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000500000000000000010000040000000001000000000000000000000000fab09112262d4ed42f76f14c8d500145397fe9cbd53782a591c49c6e36b351d598de99432d2971e052929763"], 0x0, 0x35}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4050) 1.003367382s ago: executing program 1 (id=1738): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000040)={'vlan1\x00'}) r1 = socket$inet(0x2, 0x3, 0x2) (async, rerun: 32) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) (rerun: 32) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff5b, &(0x7f0000000180)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f90224fc6028000e000a73e300053582c137153e370248018000f01700d1bd", 0x33fe0}, {&(0x7f00000000c0)="e65966d9188ad11c012b2b38e5b00bc32907f017da962d06fe5aedef2e9220d4f9cdc48bfa555f3a02197a06246ef88735d933ca7aa32166c0f169455365b3d0e25e2384ec85eb0dc60de5f5eafcbbb7163bd36ea1cb3d8f30b0bae3ae2c434a991afb2369e33b33f11c393b88b2296923b775053bd19596e8cc6953d7984f021ac62f3315c748e2070c322aa5f7bb6f23b79d5dcf67d6d944a57f1c098fd31ced16dbee99df3587371789ac2701ee296eb48c047980d330dd39b74b"}], 0x1}, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080000}, 0x4004844) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000005340), r3) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000053c0)={'wpan0\x00', 0x0}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x34c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async, rerun: 64) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000005480)={0x0, 0x0, &(0x7f0000005440)={&(0x7f0000005400)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4004) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="791048000000000079004f000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @local, {[@ra={0x94, 0x4}, @cipso={0x86, 0x27, 0x0, [{0x0, 0x12, "621ef79eb4b9b800000000000045b5b1"}, {0x5, 0xf, "749018c9a54b61394327f11535"}]}]}}}}}}}, 0x0) (rerun: 64) 912.71485ms ago: executing program 1 (id=1739): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) r3 = accept4$llc(r2, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000002c0)=0x10, 0x80800) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x28011, r3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0xfffffffb, '\x00', r1, r2, 0x2, 0x5, 0x4}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 726.962694ms ago: executing program 4 (id=1740): getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000000c0)={'bridge_slave_1\x00'}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/145, 0x91}, {&(0x7f00000001c0)=""/107, 0x6b}, {&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000300)=""/90, 0x5a}], 0x4) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f00000003c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000400)=0x2c) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$isdn_base(0x22, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000500)={r2, r3, 0x1, 0x81, &(0x7f0000000440)="d0807c19fb793a10ba35f0bdb08375955c959a5cf5a87206c381f54971250a261737f9fdbe73b6b1d839bf5d2d437e44e6ec9ced4658028e1e9d489ec31a3a9f41ffbe3f95a8a90762e8c3c10656916490fe61c807575b3eb6444709218dd21037826baa9015a7205253c000d9268cc84bbe462c2cecd0cfa97c1c7f223544ce19", 0x2, 0x9, 0x7, 0x8, 0xffff, 0x2, 0xfe2b, 'syz0\x00'}) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f00000005c0)=@name, &(0x7f0000000600)=0x10, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000640), &(0x7f0000000680)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x901300}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4c05) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r7, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x14) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000940), r5) sendmsg$NLBL_CALIPSO_C_LIST(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r8, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r6) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ac0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000b00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x7c, r9, 0x22, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0xffffffb0}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r12, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r13, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40880) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r12) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xf4, r14, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xdb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x34}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62}]}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @private1, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 722.844377ms ago: executing program 1 (id=1741): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000004180)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f00000015c0)=""/251, 0x2}) socket(0x2, 0x5, 0x0) unshare(0x8000400) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) recvmmsg(r3, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, &(0x7f00000036c0)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@bridge_dellink={0x3c, 0x11, 0x400, 0x70bd2a, 0xfffffffe, {0x7, 0x0, 0x0, r7, 0x3000}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8, 0x21a, 0x0, 0x0, 0x16}]}}, @AF_MPLS={0x4}, @AF_MPLS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x3, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffff80000001}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004811}, 0x44800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) bind$netlink(r10, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000180)={0x14, r9, 0x100, 0x70bd29, 0x259fdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x404c8c4) 363.462496ms ago: executing program 0 (id=1742): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, 0xfffffffffffffffc) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x7f, 0x4) (async) syz_emit_ethernet(0x4e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00183afffe8000000000000000000000000000bbff020000000000000000feff010000000000000000000000000100"/78], 0x0) socket$pptp(0x18, 0x1, 0x2) 151.085542ms ago: executing program 1 (id=1743): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x5, 0x2, 0x4}, @jmp={0x5, 0x0, 0x7, 0xa, 0x5, 0xfffffffffffffff8, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r1}, 0x94) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x6a, 0x5, 0x0, &(0x7f0000000040)) r3 = socket$inet(0x2, 0x2, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80000) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) close(r8) r9 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000140)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0) write$ppp(r8, &(0x7f0000000440)="5265cac466f26496e8ec1716b268dabefd3cfe4e2c31cf4163886959104434dc8fe2b55d10aed23e5cbaeaff3c2bd82e798bf1f6797657c94033cbdf2171f15429c88d45ec0f7254fb396c4b704f3be5ce3628ca35adc0632fa75baaec3aa06937d4494765452cd31962689fe8ebee6f1f871e715bc8dba0ec559724dd2e4466c4b57d47c0aa2006c90ce4ce50e20d9ba90f46167ea9f7ab1747a2ad1bf9b8187ca4efb2df4b8d50e8565adf5ed87ce9fad40c09fb13122be1196cba65f856", 0xbf) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r13, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r14, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r12, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)='\b\x00', 0x2}, {&(0x7f00000000c0)="96bc8a376f245d", 0x7}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x4000010) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02001971947cdf324e61ed4a329bf9eb85c44b8cd1c39386e665737647e6a2103a3f4c4beed0ed2369adf69d136dc1d5bc90a459a0ad4c64bdb8e9ade6927f58828ccf369b13aed32d0a63fd0658a894f4c3edd319e9da09204008e0c142a1b12696e7d892ed294ec48647cc8be0cc7845c29b8918b7818e2cdbc239d57c1522be7f7294ff777f13a682ceacc95216a46f1ad3f8e1e9b9f0282433f05fc022fb8d6981398d9dc6673b64ca08a03dbff65e03f01ac1a9b7143adbb35973d0b4d8c8d17eb28d16426e749b70e4a1d48bd6c4749819eeb241cbc887f5562876c10f24bce4219e37d69d049807b293fe07868ebec91ea25e094e", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="000000000500"/28], 0x50) 150.167027ms ago: executing program 2 (id=1744): r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000040000000000000000000000850000004100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000180000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(r4, 0x0, r1, &(0x7f00000002c0)=0xe8f2, 0x8001, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000700)='vegas\x00', 0x6) socket(0x25, 0x1, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000002108000003000000040004001c000180180010"], 0x34}}, 0x84) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000280)="e6cb52f62e79a6185dd87ae1d48354e21677b22be6e8da7c3600f26bf9e537b2e092b9dd03a201500ad4c6ab74fc4ee6f4423c0b1b", 0x35}, {&(0x7f0000000300)="7c749dbe974212dc7e17ef643c3ed7cad54b84717a82b895eaec6c8dee22f721c2801c4fe9795d87da620aa4b6403fea", 0x30}, {&(0x7f00000007c0)="fff88b4088f9524497442fad17eeb95d4b8a4540a6e3c7e966e65541281dc88896df414345a32506b1afa91e13562c1d24a3a39f4dd5903d8193cc49b81e1c9e9908b26363b306fe2a6126d97914dec6a6919bf1b2bd4183e48409e82209dc37daa15314aba1adbc32d6e7c9cf5296f422f331a75ac78b6e394352f31504dc527d92cc05ba05552d453c2379865308fa0b1742c57a7df0735b6f3b0734862d11c1811054fe6ae83ab2597f709ae2aaf66dab02cca32b728ccf3d85b62e414c0383fbdf9f67aa88d97db4ff5d41ee8842d68b62f63c6dda2f989495674ea777424004cc17261d2811c9b4944a7fa8f4db720a0c7f34fe1fb777d669ceb3134f8ede142f6c6ade01b5d2d3d65984f295f3338c1da5d8ca5a65f92a72ca7ffe9a8bc90b88d48ac0a6748fa850f9509643f0c13bc7ab05417f", 0xffffff13}], 0x3}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="bab7055697746a599282474f57217bbb6001c9b8d3f3d61f31c302", 0x1b}, {&(0x7f0000000a80)="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", 0x866}, {&(0x7f00000000c0)="754f037e617e996c6f3e81cd1ccc04f17c682bee61349ad9cf1e98693398159137c306ad5d95bcbce84eee1f0c0ab347f4dd727df6841ecf91cfe3cd94886f2acae617149bedc511d18219651c128fae6285735d7487aa8ac6be3d773a82ab3f9a57f17efd727687afb5fc0711738090c0724c7d71d22285bfae89548b1f03a0020cbddbb6bc340bde7cae845d149a3885b12a4fffcc4e037500075a4250bc3b8f313795d97928e18bb31ad871e6704a12a4092df47faa6060ffa70c7352c4eb4ca8ffead7335865050430995bf27fd073cf850df3b0b7aabba9e3e388e7dff69ed499e4a2bb675a28143b"}], 0x2}}], 0x2, 0x40488d5) write$cgroup_type(r2, &(0x7f00000006c0), 0x9) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7c86361b5c80001000000000004aa00bffe976c0001"], 0x0) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8011) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="09000000040000000f0000001fbf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000a0085ca15add1536c33e00ebfa1fed2ffdaa66f86ff68"], 0x50) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @remote}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010102}}) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0xf5eb, 0x4) accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000100)={0x18, 0x0, {0x3, @random="c0c13c2baeb6", 'wg1\x00'}}, 0x1e) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="eb6dc7857cebf4e169a0b531b4fa7cfa2391a12cc907804014010617e3352ccb72e9f0ffa3fad92d42ad1c62ea0e52bbaca8d3410bbf5ff919d3b90e93f2c9f3760df670", @ANYRES32=r10, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e3ff02000000000085000000cc00000085000000000000000500feff0000000095"], &(0x7f00000003c0)='GPL\x00', 0x5}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) 149.333469ms ago: executing program 0 (id=1745): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x6}]}}}]}, 0x3c}}, 0x20000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0x80, 0x901, 0x40000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0xa}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000040)="93c8c045d64c4a020603a2ef06e8aa2443d325c804f6a1ba73ff1156d9bc98d3211ca282afa7d5a26a85a1bc9235dd6d30ff39f4b7c4dcec4d21d496f7e02e996b633881dd9aba", &(0x7f00000000c0)=""/10, &(0x7f0000000100)='k2', &(0x7f0000000140)="4d0b4cdcb09439b9988b1299441878a33606773a482e2673fd4cd0ed5df3e10e29c9bc5b140b4af4f33da3c3d5b2b483496def69986e17efc757e6efaa22096ebc4069314e475464fd147cfd8850b15ca5749bcf31d9dbb113789cbe19d36435a810f0bd68490ef795ea6d1076e8050f0b815fa1314bcee13419430b1c95f25c8bade3f072d8090a2cb3fc6f60c51c40b6ce76a18c9bea9dd5748747684fe46797da2202baf134f4274dc9ea518250fc19ffe8c5cd969ca426b0e1f9634d65cdefbb70ddf846ab7633386c05e025fc0b7845919502f0dd19c272a3460b54fb59f8d1521df12073499ea5b24507ffa23e5a529f", 0x6, r1}, 0x38) 0s ago: executing program 0 (id=1746): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x490b94c52537db4e}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="a2563443db90"}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) close(r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x48000) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, r6, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000810) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r13, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008841}, 0x40000) (async, rerun: 32) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r2, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'veth1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4810) (async, rerun: 32) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r6, 0x214, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004840}, 0x4000014) (async) r15 = accept4(r3, &(0x7f0000000b00)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000b80)=0x80, 0x80000) sendmsg$NFT_MSG_GETCHAIN(r15, &(0x7f0000000c80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, 0x4, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000810) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000d00)=0x0) r17 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8, 0x1c, r16}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r17}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x4051) (async) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r18, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x4c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004800}, 0x4c801) kernel console output (not intermixed with test programs): omiscuous mode [ 96.097742][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.113530][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.135658][ T5846] veth1_vlan: entered promiscuous mode [ 96.148777][ T5852] veth0_vlan: entered promiscuous mode [ 96.178426][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.209498][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.226012][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.234562][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.259319][ T32] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.285642][ T5852] veth1_vlan: entered promiscuous mode [ 96.305019][ T32] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.338949][ T5845] veth0_vlan: entered promiscuous mode [ 96.350421][ T32] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.361690][ T32] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.380932][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.429718][ T5846] veth0_macvtap: entered promiscuous mode [ 96.463638][ T5845] veth1_vlan: entered promiscuous mode [ 96.502807][ T5846] veth1_macvtap: entered promiscuous mode [ 96.527883][ T5969] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.537422][ T5969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.550026][ T5969] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.561828][ T5969] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.602119][ T5852] veth0_macvtap: entered promiscuous mode [ 96.617382][ T5845] veth0_macvtap: entered promiscuous mode [ 96.647771][ T5852] veth1_macvtap: entered promiscuous mode [ 96.678074][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.718471][ T5845] veth1_macvtap: entered promiscuous mode [ 96.752405][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.772591][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.799629][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.860612][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.898306][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.913633][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.946663][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.971102][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.980653][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.995583][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.008930][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.030246][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.042893][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.113299][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.126015][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.167629][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.185536][ T5978] tipc: Started in network mode [ 97.190617][ T5978] tipc: Node identity 2ac731790a1, cluster identity 4711 [ 97.207344][ T5978] tipc: Enabled bearer , priority 0 [ 97.243151][ T5979] syzkaller0: entered promiscuous mode [ 97.255514][ T5979] syzkaller0: entered allmulticast mode [ 97.279966][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.300201][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.344525][ T5979] tipc: Resetting bearer [ 97.359091][ T5977] tipc: Resetting bearer [ 97.368913][ T10] cfg80211: failed to load regulatory.db [ 97.383350][ T5977] tipc: Disabling bearer [ 97.398292][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.429064][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.442859][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.525489][ T5855] Bluetooth: hci0: command tx timeout [ 97.531274][ T5854] Bluetooth: hci2: command tx timeout [ 97.531293][ T5859] Bluetooth: hci1: command tx timeout [ 97.601973][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.610509][ T5859] Bluetooth: hci3: command tx timeout [ 97.610559][ T5859] Bluetooth: hci4: command tx timeout [ 97.668559][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.689168][ T5992] warning: `syz.1.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.766231][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.798364][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.894294][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.908309][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.995892][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.029265][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.081680][ T6000] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 98.132561][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.149711][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.171687][ T6000] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET) [ 98.242471][ T6003] syzkaller0: entered promiscuous mode [ 98.251222][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.274864][ T6003] syzkaller0: entered allmulticast mode [ 98.283841][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.525753][ T6011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 98.547247][ T6011] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 98.782538][ T6020] Zero length message leads to an empty skb [ 98.786541][ T6019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 98.843340][ T6019] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 98.860527][ T6020] Bluetooth: MGMT ver 1.23 [ 98.919462][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17'. [ 98.971240][ T6028] netlink: 'syz.0.1': attribute type 13 has an invalid length. [ 98.986250][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.013902][ T6028] netlink: 'syz.0.1': attribute type 17 has an invalid length. [ 99.072855][ T6030] IPv6: Can't replace route, no match found [ 99.177022][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.414557][ T6040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.626939][ T6048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.708154][ T6028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.821721][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 99.868919][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 99.932744][ T6054] ip6tnl1: entered promiscuous mode [ 99.940643][ T6054] ip6tnl1: entered allmulticast mode [ 100.196736][ T6062] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.208379][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'. [ 100.221818][ T6060] veth1_to_bond: entered allmulticast mode [ 100.502292][ T6059] veth1_to_bond: left allmulticast mode [ 101.438077][ T6098] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 101.463389][ T6098] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.472714][ T6098] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.634030][ T6103] __nla_validate_parse: 1 callbacks suppressed [ 101.634048][ T6103] netlink: 40 bytes leftover after parsing attributes in process `syz.3.31'. [ 101.714856][ T6103] netlink: 40 bytes leftover after parsing attributes in process `syz.3.31'. [ 101.755845][ T6103] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 101.794835][ T6104] netlink: 40 bytes leftover after parsing attributes in process `syz.3.31'. [ 101.824761][ T6104] netlink: 40 bytes leftover after parsing attributes in process `syz.3.31'. [ 101.840770][ T6104] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 101.939528][ T6111] netlink: 'syz.2.33': attribute type 3 has an invalid length. [ 101.969448][ T6111] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 102.009724][ T6111] netlink: 220 bytes leftover after parsing attributes in process `syz.2.33'. [ 102.267505][ T6124] netlink: 'syz.4.34': attribute type 1 has an invalid length. [ 102.330558][ T6124] netlink: 'syz.4.34': attribute type 10 has an invalid length. [ 102.346769][ T6124] netlink: 236 bytes leftover after parsing attributes in process `syz.4.34'. [ 102.392058][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 102.429121][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.437501][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.455623][ T6134] netlink: 168 bytes leftover after parsing attributes in process `syz.0.37'. [ 102.496859][ T6129] tipc: Started in network mode [ 102.519616][ T6129] tipc: Node identity 225b94fb9721, cluster identity 4711 [ 102.602016][ T6129] tipc: Enabled bearer , priority 0 [ 102.677881][ T6121] syzkaller0: entered promiscuous mode [ 102.711156][ T6121] syzkaller0: entered allmulticast mode [ 102.917673][ T6146] bridge_slave_0: left allmulticast mode [ 102.930507][ T6146] bridge_slave_0: left promiscuous mode [ 102.968167][ T6146] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.022461][ T6146] bridge_slave_1: left allmulticast mode [ 103.051052][ T6146] bridge_slave_1: left promiscuous mode [ 103.069564][ T6149] netlink: 'syz.2.41': attribute type 1 has an invalid length. [ 103.089367][ T6146] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.148367][ T6146] bond0: (slave bond_slave_0): Releasing backup interface [ 103.210008][ T6146] bond0: (slave bond_slave_1): Releasing backup interface [ 103.235007][ T6146] team0: Port device team_slave_0 removed [ 103.255649][ T6146] team0: Port device team_slave_1 removed [ 103.263183][ T6146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.274229][ T6146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.305953][ T6146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.313528][ T6146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.392280][ T6114] tipc: Resetting bearer [ 103.424026][ T6114] tipc: Disabling bearer [ 103.474262][ T6148] team0: Mode changed to "loadbalance" [ 103.555481][ T6152] netlink: 'syz.3.42': attribute type 10 has an invalid length. [ 103.658203][ T6152] veth0_vlan: left promiscuous mode [ 103.670824][ T6152] veth0_vlan: entered promiscuous mode [ 103.692137][ T6152] team0: Device veth0_vlan failed to register rx_handler [ 103.821410][ T6160] netlink: 'syz.4.45': attribute type 13 has an invalid length. [ 103.831180][ T6162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.43'. [ 103.850896][ T6160] netlink: 'syz.4.45': attribute type 17 has an invalid length. [ 104.056942][ T6160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.087118][ T6152] syz.3.42 (6152) used greatest stack depth: 19832 bytes left [ 104.151263][ T6169] can: request_module (can-proto-0) failed. [ 104.645086][ T5859] Bluetooth: hci4: command 0x0405 tx timeout [ 105.042292][ T6203] tipc: Started in network mode [ 105.083570][ T6203] tipc: Node identity 3adbdd08742c, cluster identity 4711 [ 105.120588][ T6203] tipc: Enabled bearer , priority 0 [ 105.191828][ T6202] syzkaller0: entered promiscuous mode [ 105.388457][ T6202] syzkaller0: entered allmulticast mode [ 105.531191][ T6202] tipc: Resetting bearer [ 105.616963][ T6202] tipc: Disabling bearer [ 105.815351][ T6213] netlink: 76 bytes leftover after parsing attributes in process `syz.2.59'. [ 106.274870][ T6225] sctp: [Deprecated]: syz.4.62 (pid 6225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.274870][ T6225] Use struct sctp_sack_info instead [ 106.327208][ T6232] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.378020][ T6234] TCP: TCP_TX_DELAY enabled [ 106.666911][ T6239] __nla_validate_parse: 3 callbacks suppressed [ 106.666933][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.66'. [ 106.785624][ T6239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.66'. [ 106.840418][ T6239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.66'. [ 107.418031][ T5219] udevd[5219]: worker [5898] terminated by signal 33 (Unknown signal 33) [ 107.456168][ T5219] udevd[5219]: worker [5898] failed while handling '/devices/virtual/block/loop4' [ 107.922519][ T6274] netlink: 'syz.0.73': attribute type 1 has an invalid length. [ 108.417280][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.76'. [ 109.939110][ T6292] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 110.089851][ T6299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.80'. [ 110.172408][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 110.226234][ T6302] bridge_slave_1: left allmulticast mode [ 110.234529][ T6302] bridge_slave_1: left promiscuous mode [ 110.288748][ T6308] sctp: [Deprecated]: syz.2.84 (pid 6308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 110.288748][ T6308] Use struct sctp_sack_info instead [ 110.294376][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.459496][ T6302] bridge_slave_0: left allmulticast mode [ 110.474215][ T6302] bridge_slave_0: left promiscuous mode [ 110.487669][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.819095][ T6340] netlink: 48 bytes leftover after parsing attributes in process `syz.0.92'. [ 110.836654][ T6341] netlink: 100 bytes leftover after parsing attributes in process `syz.1.90'. [ 110.886409][ T6341] openvswitch: netlink: Flow key attr not present in new flow. [ 110.956932][ T6345] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 110.971970][ T6345] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 111.510423][ T6361] netlink: 32 bytes leftover after parsing attributes in process `syz.1.98'. [ 111.549265][ T6361] netlink: 204 bytes leftover after parsing attributes in process `syz.1.98'. [ 111.635367][ T6368] 8021q: VLANs not supported on ip6gre0 [ 111.645872][ T6366] 8021q: VLANs not supported on ip6gre0 [ 111.708407][ T6370] __nla_validate_parse: 3 callbacks suppressed [ 111.708428][ T6370] netlink: 192 bytes leftover after parsing attributes in process `syz.2.101'. [ 112.109380][ T6383] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 112.258831][ T6387] trusted_key: syz.1.105 sent an empty control message without MSG_MORE. [ 112.480661][ T6398] netlink: 44 bytes leftover after parsing attributes in process `syz.1.109'. [ 112.554322][ T6404] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 112.671032][ T6411] netlink: 27 bytes leftover after parsing attributes in process `syz.2.112'. [ 112.679316][ T6409] netlink: 40 bytes leftover after parsing attributes in process `syz.0.114'. [ 112.681619][ T6413] netlink: 27 bytes leftover after parsing attributes in process `syz.2.112'. [ 112.717048][ T6417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.115'. [ 112.729526][ T6410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.113'. [ 112.731556][ T6417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.115'. [ 112.742643][ T6410] bond0: invalid ARP target 0.0.0.0 specified for addition [ 112.776088][ T6410] bond0: option arp_ip_target: invalid value (0) [ 112.789250][ T6419] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.115'. [ 112.867326][ T6422] netlink: 48 bytes leftover after parsing attributes in process `syz.2.117'. [ 113.231191][ T6432] bond1: entered promiscuous mode [ 113.392330][ T6442] vxcan1: entered allmulticast mode [ 113.401171][ T6442] vxcan1: left allmulticast mode [ 113.569135][ T6442] raw_sendmsg: syz.3.121 forgot to set AF_INET. Fix it! [ 113.792289][ T6458] netlink: 'syz.1.127': attribute type 4 has an invalid length. [ 114.005914][ T5859] Bluetooth: hci4: command 0x0405 tx timeout [ 114.014815][ T6458] block nbd0: server does not support multiple connections per device. [ 114.037002][ T6458] block nbd0: shutting down sockets [ 114.119200][ T6477] xfrm1: entered allmulticast mode [ 114.340708][ T6485] netlink: 'syz.3.135': attribute type 1 has an invalid length. [ 115.412880][ T6528] netlink: 'syz.2.144': attribute type 51 has an invalid length. [ 115.437735][ T6528] batadv_slave_0: entered promiscuous mode [ 115.620649][ T6530] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 115.652767][ T6530] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 115.682433][ T6535] netlink: 'syz.4.148': attribute type 4 has an invalid length. [ 115.785079][ T6535] netlink: 'syz.4.148': attribute type 4 has an invalid length. [ 115.891968][ T6548] netlink: 'syz.2.150': attribute type 7 has an invalid length. [ 116.493011][ T6575] netlink: 'syz.1.159': attribute type 1 has an invalid length. [ 116.622700][ T6584] netlink: 'syz.2.162': attribute type 11 has an invalid length. [ 116.649850][ T6591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.699862][ T6591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.716805][ T6587] __nla_validate_parse: 11 callbacks suppressed [ 116.716826][ T6587] netlink: 16 bytes leftover after parsing attributes in process `syz.4.161'. [ 116.735583][ T6587] openvswitch: netlink: Flow actions attr not present in new flow. [ 116.750117][ T6596] IPv6: Can't replace route, no match found [ 116.801803][ T6582] netlink: 'syz.2.162': attribute type 11 has an invalid length. [ 116.929546][ T6599] netlink: 24 bytes leftover after parsing attributes in process `syz.4.166'. [ 117.087643][ T6604] netlink: 'syz.4.170': attribute type 16 has an invalid length. [ 117.107073][ T6609] tc_dump_action: action bad kind [ 117.113621][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 117.164184][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167'. [ 117.307441][ T6601] vlan2: entered promiscuous mode [ 117.312749][ T6601] team0: entered promiscuous mode [ 117.404147][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 117.423914][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.173'. [ 117.455690][ T6623] netlink: 'syz.4.174': attribute type 13 has an invalid length. [ 117.473814][ T6619] netlink: 'syz.1.173': attribute type 18 has an invalid length. [ 117.761524][ T6625] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 117.799036][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 117.830075][ T6637] netlink: 72 bytes leftover after parsing attributes in process `syz.1.179'. [ 117.878289][ T6639] netlink: 788 bytes leftover after parsing attributes in process `syz.2.180'. [ 117.894901][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 117.992438][ T6635] team_slave_0: entered promiscuous mode [ 117.998881][ T6635] team_slave_1: entered promiscuous mode [ 118.019232][ T6635] macvtap1: entered promiscuous mode [ 118.026136][ T6635] team0: entered promiscuous mode [ 118.032379][ T6635] macvtap1: entered allmulticast mode [ 118.040058][ T6635] team0: entered allmulticast mode [ 118.046598][ T6635] team_slave_0: entered allmulticast mode [ 118.054419][ T6635] team_slave_1: entered allmulticast mode [ 118.062238][ T6635] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 118.092408][ T6641] macvtap1: left promiscuous mode [ 118.102198][ T6641] team0: left promiscuous mode [ 118.107954][ T6641] macvtap1: left allmulticast mode [ 118.113415][ T6641] team0: left allmulticast mode [ 118.119644][ T6641] team_slave_0: left allmulticast mode [ 118.125903][ T6641] team_slave_1: left allmulticast mode [ 118.866081][ T6667] validate_nla: 3 callbacks suppressed [ 118.866102][ T6667] netlink: 'syz.1.188': attribute type 4 has an invalid length. [ 118.936519][ T6687] syzkaller1: entered promiscuous mode [ 118.952934][ T6687] syzkaller1: entered allmulticast mode [ 118.994278][ T6687] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 119.329207][ T6704] wireguard0: entered promiscuous mode [ 119.337085][ T6704] wireguard0: entered allmulticast mode [ 119.644699][ T6715] netlink: 'syz.1.204': attribute type 15 has an invalid length. [ 119.876489][ T6720] netlink: 'syz.2.206': attribute type 9 has an invalid length. [ 120.381638][ T6747] netlink: 'syz.2.215': attribute type 10 has an invalid length. [ 120.550919][ T6747] veth0_vlan: entered allmulticast mode [ 120.567445][ T6747] bridge0: port 1(veth0_vlan) entered blocking state [ 120.585208][ T6747] bridge0: port 1(veth0_vlan) entered disabled state [ 120.610176][ T6747] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 120.832265][ T6767] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.009162][ T6775] sctp: [Deprecated]: syz.3.224 (pid 6775) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.009162][ T6775] Use struct sctp_sack_info instead [ 121.065111][ T6781] sit0: entered promiscuous mode [ 121.097238][ T6781] netlink: 'syz.2.226': attribute type 1 has an invalid length. [ 121.129472][ T6781] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 121.630783][ T6809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.828731][ T6816] __nla_validate_parse: 21 callbacks suppressed [ 121.828754][ T6816] netlink: 32 bytes leftover after parsing attributes in process `syz.4.238'. [ 121.955974][ T6823] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.239'. [ 122.252281][ T6843] netlink: 44 bytes leftover after parsing attributes in process `syz.3.242'. [ 122.273084][ T6843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.549906][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'. [ 122.778356][ T6868] netlink: 256 bytes leftover after parsing attributes in process `syz.4.249'. [ 122.796838][ T6868] netlink: 72 bytes leftover after parsing attributes in process `syz.4.249'. [ 122.896167][ T6875] Bluetooth: MGMT ver 1.23 [ 122.925625][ T6875] Bluetooth: MGMT ver 1.23 [ 123.195502][ T6883] netlink: 248 bytes leftover after parsing attributes in process `syz.4.255'. [ 123.348641][ T6883] netlink: 76 bytes leftover after parsing attributes in process `syz.4.255'. [ 123.942175][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 123.964260][ T6905] macsec1: entered promiscuous mode [ 123.971309][ T6905] macsec1: entered allmulticast mode [ 124.013814][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.265'. [ 124.252361][ T6925] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 124.286825][ T6926] tipc: Enabled bearer , priority 0 [ 124.306030][ T6916] syzkaller0: entered promiscuous mode [ 124.326936][ T6916] syzkaller0: entered allmulticast mode [ 124.368891][ T6912] lo speed is unknown, defaulting to 1000 [ 124.405580][ T6930] IPv6: Can't replace route, no match found [ 124.442227][ T6916] dvmrp0: entered allmulticast mode [ 124.487446][ T6920] sit0: left promiscuous mode [ 124.653029][ T6920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 124.731499][ T6912] lo speed is unknown, defaulting to 1000 [ 124.750399][ T6916] tipc: Resetting bearer [ 124.807803][ T6912] lo speed is unknown, defaulting to 1000 [ 124.912349][ T6920] syz.2.267 (6920) used greatest stack depth: 19648 bytes left [ 124.964778][ T5855] Bluetooth: hci2: command 0x0401 tx timeout [ 124.978637][ T5859] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 125.202732][ T6915] tipc: Resetting bearer [ 125.240839][ T6915] tipc: Disabling bearer [ 125.465767][ T5911] lo speed is unknown, defaulting to 1000 [ 125.475652][ T6912] infiniband syz0: set active [ 125.488676][ T6912] infiniband syz0: added lo [ 125.510039][ T6912] syz0: rxe_create_cq: returned err = -12 [ 125.534835][ T6912] infiniband syz0: Couldn't create ib_mad CQ [ 125.558605][ T6912] infiniband syz0: Couldn't open port 1 [ 125.676524][ T6912] RDS/IB: syz0: added [ 125.682620][ T6912] smc: adding ib device syz0 with port count 1 [ 125.710305][ T6912] smc: ib device syz0 port 1 has pnetid [ 125.720354][ T5913] lo speed is unknown, defaulting to 1000 [ 125.737053][ T6912] lo speed is unknown, defaulting to 1000 [ 126.427409][ T6986] bridge2: entered promiscuous mode [ 126.433861][ T6986] bridge2: entered allmulticast mode [ 126.434863][ T6990] nbd: must specify at least one socket [ 126.448050][ T6986] team0: Port device bridge2 added [ 126.464831][ T6912] lo speed is unknown, defaulting to 1000 [ 126.841593][ T6996] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.968079][ T7006] netlink: 'syz.4.292': attribute type 3 has an invalid length. [ 127.050423][ T6912] lo speed is unknown, defaulting to 1000 [ 127.113808][ T7010] netlink: 'syz.4.293': attribute type 7 has an invalid length. [ 127.123586][ T7010] __nla_validate_parse: 9 callbacks suppressed [ 127.123607][ T7010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.293'. [ 127.461327][ T6912] lo speed is unknown, defaulting to 1000 [ 127.687908][ T6912] lo speed is unknown, defaulting to 1000 [ 127.861228][ T6912] lo speed is unknown, defaulting to 1000 [ 128.197769][ T6996] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.320642][ T6996] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.495991][ T6996] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.610579][ T6985] infiniband syz1: set active [ 128.630363][ T6985] infiniband syz1: added macvlan1 [ 128.645867][ T6985] syz1: rxe_create_cq: returned err = -12 [ 128.660693][ T6985] infiniband syz1: Couldn't create ib_mad CQ [ 128.687897][ T6985] infiniband syz1: Couldn't open port 1 [ 128.830512][ T60] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.838313][ T6985] RDS/IB: syz1: added [ 128.852546][ T6985] smc: adding ib device syz1 with port count 1 [ 128.862844][ T6985] smc: ib device syz1 port 1 has pnetid [ 128.877357][ T60] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.976209][ T7039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.302'. [ 128.988314][ T3537] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.007618][ T3537] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.257372][ T7044] netlink: 'syz.3.303': attribute type 2 has an invalid length. [ 129.286909][ T7044] netlink: 'syz.3.303': attribute type 27 has an invalid length. [ 129.313783][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 129.591538][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 129.619391][ T7055] netlink: 'syz.4.307': attribute type 9 has an invalid length. [ 129.643887][ T7055] netlink: 224 bytes leftover after parsing attributes in process `syz.4.307'. [ 129.661187][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'. [ 129.852202][ T7052] lo speed is unknown, defaulting to 1000 [ 130.250251][ T7065] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 130.471241][ T7073] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 130.480387][ T7073] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 130.687485][ T7083] nbd: must specify at least one socket [ 130.740784][ T7083] nbd: must specify at least one socket [ 130.893096][ T7093] netlink: 'syz.2.315': attribute type 9 has an invalid length. [ 130.940392][ T7093] netlink: 'syz.2.315': attribute type 6 has an invalid length. [ 130.969161][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'. [ 131.477692][ T7113] IPVS: set_ctl: invalid protocol: 60 172.20.20.41:20001 [ 131.980975][ T7137] netlink: 11 bytes leftover after parsing attributes in process `syz.3.323'. [ 132.094111][ T7140] sctp: [Deprecated]: syz.2.325 (pid 7140) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.094111][ T7140] Use struct sctp_sack_info instead [ 132.838426][ T7155] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 132.870074][ T7170] gretap0: entered promiscuous mode [ 133.097589][ T7176] netlink: 1140 bytes leftover after parsing attributes in process `syz.2.333'. [ 133.111952][ T7176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.333'. [ 133.121019][ T7176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.333'. [ 133.456484][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.336'. [ 133.779502][ T7194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.337'. [ 134.142463][ T7200] netlink: 168 bytes leftover after parsing attributes in process `syz.1.339'. [ 134.645840][ T7223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.342'. [ 134.718601][ T7225] tipc: Started in network mode [ 134.733996][ T7225] tipc: Node identity 4a0e83eb5832, cluster identity 4711 [ 134.752134][ T7225] tipc: Enabled bearer , priority 0 [ 134.762580][ T7225] syzkaller0: entered promiscuous mode [ 134.768707][ T7225] syzkaller0: entered allmulticast mode [ 134.789103][ T7225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.343'. [ 134.857518][ T7225] tipc: Resetting bearer [ 134.892624][ T7224] tipc: Resetting bearer [ 134.926181][ T7224] tipc: Disabling bearer [ 135.800934][ T7247] lo speed is unknown, defaulting to 1000 [ 136.694924][ T7267] netlink: 36 bytes leftover after parsing attributes in process `syz.2.355'. [ 137.398320][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 138.153604][ T7303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.364'. [ 138.163582][ T7301] wireguard0: entered promiscuous mode [ 138.177264][ T7303] netlink: 20 bytes leftover after parsing attributes in process `syz.2.364'. [ 138.187735][ T7301] wireguard0: entered allmulticast mode [ 138.329979][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.343762][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.447543][ T7308] lo speed is unknown, defaulting to 1000 [ 139.213219][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.369'. [ 139.255913][ T7327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.370'. [ 139.419428][ T7335] vxlan0: entered promiscuous mode [ 139.434477][ T7335] team0: Port device vxlan0 added [ 139.469397][ T2967] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.491796][ T2967] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.539964][ T2967] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.568328][ T2967] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.829754][ T7360] tipc: Enabled bearer , priority 0 [ 139.879417][ T30] audit: type=1800 audit(1753903077.208:2): pid=7364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.380" name="blkio.bfq.time_recursive" dev="tmpfs" ino=438 res=0 errno=0 [ 139.900635][ T7362] netlink: 'syz.4.382': attribute type 9 has an invalid length. [ 139.950586][ T7362] netlink: 'syz.4.382': attribute type 6 has an invalid length. [ 139.970930][ T7360] syzkaller0: entered promiscuous mode [ 139.980691][ T7370] netlink: 'syz.2.380': attribute type 1 has an invalid length. [ 139.980795][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 139.989472][ T7360] syzkaller0: entered allmulticast mode [ 140.008820][ T7370] netlink: 600 bytes leftover after parsing attributes in process `syz.2.380'. [ 140.085981][ T7360] tipc: Resetting bearer [ 140.132856][ T7359] tipc: Resetting bearer [ 140.142171][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'. [ 140.184571][ T7359] tipc: Disabling bearer [ 140.449911][ T7376] netlink: 'syz.3.385': attribute type 1 has an invalid length. [ 140.510683][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 140.755881][ T7385] lo speed is unknown, defaulting to 1000 [ 140.810034][ T7400] netlink: 248 bytes leftover after parsing attributes in process `syz.3.390'. [ 140.833923][ T7400] netlink: 48 bytes leftover after parsing attributes in process `syz.3.390'. [ 140.868294][ T7401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.875891][ T7401] IPv6: NLM_F_CREATE should be set when creating new route [ 140.883334][ T7401] IPv6: NLM_F_CREATE should be set when creating new route [ 140.890846][ T7401] IPv6: NLM_F_CREATE should be set when creating new route [ 140.968271][ T7400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.350268][ T7406] ip6tnl1: left promiscuous mode [ 141.374655][ T7406] ip6tnl1: left allmulticast mode [ 141.592788][ T1314] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.625245][ T1314] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.661483][ T1154] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 141.704377][ T5935] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 141.712601][ T1154] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 141.781114][ T1314] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.812349][ T1314] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.916336][ T7426] tipc: Invalid UDP bearer configuration [ 141.916402][ T7426] tipc: Enabling of bearer rejected, failed to enable media [ 142.105547][ T5860] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 142.167421][ T5860] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 142.673146][ T7444] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 142.675780][ T7443] IPVS: stopping backup sync thread 7444 ... [ 142.707166][ T7400] rdma_rxe: rxe_newlink: failed to add lo [ 143.389634][ T7467] __nla_validate_parse: 1 callbacks suppressed [ 143.389656][ T7467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.411'. [ 143.578948][ T7480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.416'. [ 143.617418][ T7480] bridge_slave_0: left allmulticast mode [ 143.624659][ T7480] bridge_slave_0: left promiscuous mode [ 143.630594][ T7480] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.667212][ T7480] bridge_slave_1: left allmulticast mode [ 143.673130][ T7480] bridge_slave_1: left promiscuous mode [ 143.727693][ T7480] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.780742][ T7480] bond0: (slave bond_slave_0): Releasing backup interface [ 143.827515][ T7480] bond0: (slave bond_slave_1): Releasing backup interface [ 143.849028][ T7480] team0: Port device team_slave_0 removed [ 143.880461][ T7480] team0: Port device team_slave_1 removed [ 143.887614][ T7480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.897975][ T7480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.909490][ T7480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.920698][ T7480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.959862][ T7480] team0: Port device bridge2 removed [ 143.968508][ T7482] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 144.001181][ T7488] team0: Mode changed to "broadcast" [ 144.101573][ T7498] netlink: 'syz.1.419': attribute type 4 has an invalid length. [ 144.121860][ T7498] netlink: 116 bytes leftover after parsing attributes in process `syz.1.419'. [ 144.541859][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 144.712116][ T7534] can: request_module (can-proto-0) failed. [ 144.738954][ T5855] Bluetooth: hci4: link tx timeout [ 144.744727][ T5855] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 144.758650][ T5855] Bluetooth: hci4: link tx timeout [ 144.764174][ T5855] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.987750][ T7540] netlink: 'syz.1.427': attribute type 15 has an invalid length. [ 145.014246][ T7540] netlink: 666 bytes leftover after parsing attributes in process `syz.1.427'. [ 145.044127][ T7549] netlink: 2 bytes leftover after parsing attributes in process `syz.4.430'. [ 145.089302][ T7549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.498473][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.436'. [ 145.524104][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 145.533500][ T7567] af_packet: tpacket_rcv: packet too big, clamped from 65336 to 3944. macoff=96 [ 145.575293][ T7570] macsec1: entered promiscuous mode [ 145.580747][ T7570] bond0: entered promiscuous mode [ 145.625231][ T7570] macsec1: entered allmulticast mode [ 145.631246][ T7570] bond0: entered allmulticast mode [ 145.644029][ T7570] bond0: left allmulticast mode [ 145.649223][ T7570] bond0: left promiscuous mode [ 145.702171][ T7563] lo speed is unknown, defaulting to 1000 [ 145.806943][ T7576] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.858779][ T7576] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.081724][ T7576] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.123068][ T7576] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.257683][ T7576] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.304612][ T7576] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.462634][ T7576] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.503443][ T7576] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.586040][ T7590] lo speed is unknown, defaulting to 1000 [ 146.697835][ T2967] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.720979][ T2967] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.753372][ T2967] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.769363][ T2967] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.804442][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 146.845248][ T3537] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.873860][ T3537] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.946315][ T3537] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.963827][ T3537] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.489093][ T7612] netlink: 24 bytes leftover after parsing attributes in process `syz.4.447'. [ 148.884952][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 149.784623][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 150.019085][ T7648] netlink: 76 bytes leftover after parsing attributes in process `syz.1.456'. [ 150.028295][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.456'. [ 150.048523][ T7648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.456'. [ 150.744400][ T7664] netlink: 'syz.4.460': attribute type 11 has an invalid length. [ 151.312495][ T7701] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 151.630668][ T7708] block nbd0: server does not support multiple connections per device. [ 151.689998][ T7708] block nbd0: shutting down sockets [ 151.724638][ T7709] netlink: 28 bytes leftover after parsing attributes in process `syz.3.471'. [ 151.776574][ T7711] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.830860][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 152.345608][ T7727] erspan0: entered promiscuous mode [ 152.671518][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 152.842019][ T7751] netlink: 'syz.0.482': attribute type 3 has an invalid length. [ 152.883734][ T7751] netlink: 'syz.0.482': attribute type 1 has an invalid length. [ 153.043950][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 153.062672][ T7759] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20004 [ 153.113414][ T7760] netlink: 'syz.3.484': attribute type 10 has an invalid length. [ 153.241724][ T7758] bridge_slave_0: left allmulticast mode [ 153.249988][ T7758] bridge_slave_0: left promiscuous mode [ 153.284645][ T7758] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.316502][ T7758] bridge_slave_1: left allmulticast mode [ 153.322434][ T7758] bridge_slave_1: left promiscuous mode [ 153.328672][ T7758] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.343409][ T7758] bond0: (slave bond_slave_0): Releasing backup interface [ 153.357130][ T7758] bond0: (slave bond_slave_1): Releasing backup interface [ 153.376160][ T7758] team0: Port device team_slave_0 removed [ 153.389586][ T7758] team0: Port device team_slave_1 removed [ 153.396235][ T7761] nbd0: detected capacity change from 0 to 127 [ 153.416425][ T7758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.425927][ T7758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.486669][ T5935] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 153.496906][ T5859] block nbd0: Receive control failed (result -32) [ 153.542198][ T7760] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 154.055016][ T7762] syz.3.484 (7762) used greatest stack depth: 16056 bytes left [ 154.151115][ T7774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.243974][ T5935] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 154.342309][ T7789] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.490'. [ 154.629965][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 154.726585][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.491'. [ 154.893010][ T7853] syz_tun: entered allmulticast mode [ 154.931221][ T7852] syz_tun: left allmulticast mode [ 155.239358][ T7867] lo speed is unknown, defaulting to 1000 [ 155.364370][ T7879] tipc: Enabled bearer , priority 0 [ 155.698866][ T7878] tipc: Disabling bearer [ 155.953054][ T7898] tipc: Enabled bearer , priority 0 [ 155.989162][ T7898] syzkaller0: entered promiscuous mode [ 156.015769][ T7898] syzkaller0: entered allmulticast mode [ 156.058050][ T7898] tipc: Resetting bearer [ 156.399865][ T7909] netlink: 'syz.3.510': attribute type 29 has an invalid length. [ 156.419560][ T7911] netlink: 596 bytes leftover after parsing attributes in process `syz.3.510'. [ 156.437462][ T7910] netlink: 'syz.3.510': attribute type 29 has an invalid length. [ 156.496342][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 156.513880][ T7915] netlink: 44 bytes leftover after parsing attributes in process `syz.4.511'. [ 156.769773][ T7923] vlan2: entered promiscuous mode [ 156.794420][ T7923] vlan2: entered allmulticast mode [ 156.818148][ T7923] hsr_slave_1: entered allmulticast mode [ 157.029593][ T7932] netlink: 'syz.1.516': attribute type 2 has an invalid length. [ 157.053985][ T5935] tipc: Node number set to 3044709627 [ 158.168116][ T7966] netlink: 52 bytes leftover after parsing attributes in process `syz.0.525'. [ 158.437455][ T7978] IPVS: Error connecting to the multicast addr [ 158.689918][ T7985] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 158.710436][ T7985] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 159.362496][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.541'. [ 159.475753][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 159.780625][ T8044] lo speed is unknown, defaulting to 1000 [ 159.857106][ T8050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'. [ 160.088835][ T8056] netlink: 36 bytes leftover after parsing attributes in process `syz.0.550'. [ 160.790916][ T8080] lo speed is unknown, defaulting to 1000 [ 161.133933][ T5911] IPVS: starting estimator thread 0... [ 161.242509][ T8099] netlink: 'syz.4.561': attribute type 1 has an invalid length. [ 161.254024][ T8096] IPVS: using max 24 ests per chain, 57600 per kthread [ 161.370091][ T8099] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.424974][ T8101] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.433424][ T8101] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 161.447756][ T8101] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 161.529477][ T8099] gretap1: entered promiscuous mode [ 161.564575][ T8099] bond2: (slave gretap1): making interface the new active one [ 161.579057][ T8099] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 161.619754][ T8102] macvlan35: entered promiscuous mode [ 161.626277][ T8102] macvlan35: entered allmulticast mode [ 161.633302][ T8102] bond2: entered promiscuous mode [ 161.641309][ T8102] 8021q: adding VLAN 0 to HW filter on device macvlan35 [ 161.657675][ T8102] bond2: (slave macvlan35): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 161.672432][ T8102] bond2: left promiscuous mode [ 161.840964][ T8110] netlink: 'syz.3.565': attribute type 5 has an invalid length. [ 161.891704][ T8113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.566'. [ 162.739323][ T8139] netlink: 36 bytes leftover after parsing attributes in process `syz.4.572'. [ 163.102457][ T8147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.132292][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 163.150115][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 163.348433][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 163.357551][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.575'. [ 163.823191][ T8157] netlink: 'syz.3.577': attribute type 2 has an invalid length. [ 163.863152][ T8161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.579'. [ 163.949804][ T8170] bridge_slave_1: default FDB implementation only supports local addresses [ 164.109604][ T8182] netlink: 'syz.0.583': attribute type 1 has an invalid length. [ 164.146937][ T8182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.154752][ T8185] bond0: (slave rose0): Error: Device can not be enslaved while up [ 164.163462][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.582'. [ 164.439850][ T8199] lo speed is unknown, defaulting to 1000 [ 165.325582][ T8228] netlink: 'syz.4.592': attribute type 1 has an invalid length. [ 165.334506][ T8229] netlink: 'syz.4.592': attribute type 1 has an invalid length. [ 165.381136][ T8231] netlink: 'syz.2.593': attribute type 1 has an invalid length. [ 165.414305][ T8231] netlink: 'syz.2.593': attribute type 2 has an invalid length. [ 165.449339][ T8240] netlink: 'syz.2.593': attribute type 1 has an invalid length. [ 165.487816][ T8240] netlink: 'syz.2.593': attribute type 2 has an invalid length. [ 165.515654][ T8240] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 165.625073][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'. [ 165.676840][ T8249] netlink: 144 bytes leftover after parsing attributes in process `syz.2.595'. [ 166.123954][ T8260] €Â: renamed from veth1_macvtap (while UP) [ 166.169066][ T8260] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 166.255479][ T8262] smc: removing ib device syz1 [ 167.025283][ T8272] sctp: [Deprecated]: syz.4.601 (pid 8272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.025283][ T8272] Use struct sctp_sack_info instead [ 167.764175][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 168.014590][ T8309] __nla_validate_parse: 2 callbacks suppressed [ 168.014611][ T8309] netlink: 56 bytes leftover after parsing attributes in process `syz.4.604'. [ 168.396842][ T8321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.608'. [ 169.200169][ T8338] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 169.513282][ T8345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.614'. [ 169.522854][ T8345] netlink: 64 bytes leftover after parsing attributes in process `syz.4.614'. [ 169.539006][ T8345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.614'. [ 169.601797][ T8345] bridge_slave_0: left allmulticast mode [ 169.628099][ T8345] bridge_slave_0: left promiscuous mode [ 169.636536][ T8345] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.659771][ T8350] netlink: 72 bytes leftover after parsing attributes in process `syz.1.617'. [ 169.691871][ T8345] bridge_slave_1: left allmulticast mode [ 169.745039][ T8345] bridge_slave_1: left promiscuous mode [ 169.778854][ T8345] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.840772][ T8345] bond0: (slave bond_slave_0): Releasing backup interface [ 169.881751][ T8345] bond0: (slave bond_slave_1): Releasing backup interface [ 169.917262][ T8345] team0: Port device team_slave_0 removed [ 169.928943][ T8345] team0: Port device team_slave_1 removed [ 169.936775][ T8345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.945032][ T8345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.970894][ T8345] bond2: (slave gretap1): Releasing active interface [ 170.011478][ T8344] pim6reg: entered allmulticast mode [ 170.021467][ T8352] pim6reg: left allmulticast mode [ 170.270748][ T8359] lo speed is unknown, defaulting to 1000 [ 170.929758][ T8397] netlink: 92 bytes leftover after parsing attributes in process `syz.1.627'. [ 171.830747][ T8412] batadv_slave_0: left promiscuous mode [ 171.871830][ T8423] netlink: 112 bytes leftover after parsing attributes in process `syz.0.634'. [ 171.892331][ T8412] veth0_vlan: left allmulticast mode [ 171.984730][ T8412] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 172.007565][ T5860] lo speed is unknown, defaulting to 1000 [ 172.007603][ T8418] lo speed is unknown, defaulting to 1000 [ 172.014002][ T5860] syz0: Port: 1 Link DOWN [ 172.030361][ T5935] lo speed is unknown, defaulting to 1000 [ 172.061640][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.634'. [ 172.077205][ T8422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.117918][ T7825] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.129243][ T7825] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.142170][ T8418] lo speed is unknown, defaulting to 1000 [ 172.181286][ T7825] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.197231][ T7825] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.221220][ T8418] lo speed is unknown, defaulting to 1000 [ 172.278510][ T8418] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 172.332373][ T8418] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 172.370190][ T8418] lo speed is unknown, defaulting to 1000 [ 172.406103][ T8418] lo speed is unknown, defaulting to 1000 [ 172.416006][ T8418] lo speed is unknown, defaulting to 1000 [ 172.425733][ T8418] lo speed is unknown, defaulting to 1000 [ 172.445688][ T8418] lo speed is unknown, defaulting to 1000 [ 172.457455][ T5911] IPVS: starting estimator thread 0... [ 172.557801][ T8444] IPVS: using max 27 ests per chain, 64800 per kthread [ 172.583540][ T8452] netlink: 144 bytes leftover after parsing attributes in process `syz.4.641'. [ 172.667298][ T8450] IPVS: Scheduler module ip_vs_sip not found [ 173.128136][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 173.174533][ T8488] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 173.349009][ T8502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.656'. [ 173.387922][ T5935] lo speed is unknown, defaulting to 1000 [ 173.388569][ T8502] netlink: 5 bytes leftover after parsing attributes in process `syz.3.656'. [ 173.441480][ T8508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.656'. [ 173.494219][ T8496] lo speed is unknown, defaulting to 1000 [ 173.623607][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 173.651894][ T8515] netlink: 176956 bytes leftover after parsing attributes in process `syz.1.657'. [ 173.802710][ T8496] lo speed is unknown, defaulting to 1000 [ 173.848592][ T8517] tipc: Started in network mode [ 173.855130][ T8517] tipc: Node identity , cluster identity 4711 [ 173.861603][ T8517] tipc: Failed to obtain node identity [ 173.868030][ T8517] tipc: Enabling of bearer rejected, failed to enable media [ 173.926356][ T8517] syzkaller0: entered promiscuous mode [ 173.932653][ T8517] syzkaller0: entered allmulticast mode [ 174.357944][ T8536] netlink: zone id is out of range [ 174.366172][ T8536] netlink: zone id is out of range [ 174.389697][ T8536] netlink: zone id is out of range [ 174.416261][ T8536] netlink: zone id is out of range [ 174.421982][ T8536] netlink: zone id is out of range [ 174.428307][ T8536] netlink: zone id is out of range [ 174.436191][ T8536] netlink: zone id is out of range [ 174.441805][ T8536] netlink: zone id is out of range [ 174.450166][ T8536] netlink: zone id is out of range [ 174.530229][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.665'. [ 176.140376][ T8546] vlan3: entered allmulticast mode [ 176.167522][ T8546] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 176.336013][ T8554] can: request_module (can-proto-3) failed. [ 176.507514][ T8555] lo speed is unknown, defaulting to 1000 [ 176.807213][ T8572] netlink: 104 bytes leftover after parsing attributes in process `syz.4.673'. [ 176.973115][ T8572] dvmrp0: entered allmulticast mode [ 177.009313][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.675'. [ 177.096784][ T8583] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.522653][ T8598] syzkaller0: entered promiscuous mode [ 177.538929][ T8598] syzkaller0: entered allmulticast mode [ 177.598762][ T8555] lo speed is unknown, defaulting to 1000 [ 178.046993][ T8616] net_ratelimit: 7 callbacks suppressed [ 178.047012][ T8616] openvswitch: netlink: Message has 8 unknown bytes. [ 178.061810][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 178.119691][ T8616] gretap1: entered promiscuous mode [ 178.287375][ T8620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.532620][ T8631] lo speed is unknown, defaulting to 1000 [ 179.098165][ T8668] validate_nla: 4 callbacks suppressed [ 179.098187][ T8668] netlink: 'syz.2.696': attribute type 4 has an invalid length. [ 179.175913][ T8669] netlink: 'syz.2.696': attribute type 4 has an invalid length. [ 179.186138][ T8673] netlink: 'syz.2.696': attribute type 4 has an invalid length. [ 179.266448][ T5926] lo speed is unknown, defaulting to 1000 [ 179.276984][ T8681] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 179.372540][ T5926] lo speed is unknown, defaulting to 1000 [ 179.380653][ T8631] lo speed is unknown, defaulting to 1000 [ 179.387568][ T5911] lo speed is unknown, defaulting to 1000 [ 179.440510][ T8686] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 179.491215][ T8690] netlink: 'syz.2.701': attribute type 4 has an invalid length. [ 179.616450][ T8699] netlink: 'syz.2.704': attribute type 1 has an invalid length. [ 179.761038][ T8704] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 179.788389][ T8708] __nla_validate_parse: 1 callbacks suppressed [ 179.788409][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.706'. [ 179.836367][ T8710] siw: device registration error -23 [ 179.861445][ T7825] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 179.862787][ T8699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.006937][ T7821] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 180.013909][ T8704] veth3: entered promiscuous mode [ 180.030592][ T8713] netlink: 24 bytes leftover after parsing attributes in process `syz.4.707'. [ 180.032375][ T8704] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 180.058721][ T8699] bond1: (slave ip6gretap1): Removing an active aggregator [ 180.070647][ T8699] bond1: (slave ip6gretap1): Releasing backup interface [ 180.079401][ T8699] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 5a:d3:a9:bc:43:1c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 180.106572][ T8699] bond1: (slave veth3): Releasing backup interface [ 180.242522][ T8717] netlink: 'syz.3.708': attribute type 3 has an invalid length. [ 180.275262][ T8717] netlink: 'syz.3.708': attribute type 3 has an invalid length. [ 180.462561][ T8729] nftables ruleset with unbound chain [ 180.504276][ T8730] netlink: 'syz.3.713': attribute type 1 has an invalid length. [ 180.599327][ T8740] netlink: 68 bytes leftover after parsing attributes in process `syz.4.715'. [ 180.635780][ T8740] netlink: 'syz.4.715': attribute type 1 has an invalid length. [ 180.686693][ T8738] bond1: (slave geneve3): making interface the new active one [ 180.709781][ T8738] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 180.758654][ T8730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.713'. [ 180.770075][ T8740] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.784720][ T7796] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.827693][ T8746] bond4: (slave gretap2): making interface the new active one [ 180.837128][ T8746] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 180.849791][ T8730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.885248][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'. [ 180.912889][ T8742] lo speed is unknown, defaulting to 1000 [ 180.925710][ T7796] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.992108][ T7837] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 181.024332][ T7837] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 181.085590][ T8765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.722'. [ 181.095078][ T8766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.722'. [ 181.161117][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.721'. [ 181.179053][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.721'. [ 181.191728][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.721'. [ 181.555643][ T8742] lo speed is unknown, defaulting to 1000 [ 181.564613][ T8743] lo speed is unknown, defaulting to 1000 [ 182.112399][ T8808] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 182.335142][ T8743] lo speed is unknown, defaulting to 1000 [ 182.691158][ T8831] netlink: 'syz.4.740': attribute type 10 has an invalid length. [ 182.743442][ T8831] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.752878][ T8831] bond0: (slave team0): Enslaving as an active interface with an up link [ 182.776164][ T8830] delete_channel: no stack [ 183.125572][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 183.231211][ T8849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.385265][ T5935] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 184.407835][ T8890] macvtap2: entered promiscuous mode [ 184.413381][ T8890] team0: entered promiscuous mode [ 184.448399][ T8890] macvtap2: entered allmulticast mode [ 184.521615][ T8890] team0: entered allmulticast mode [ 184.543873][ T8890] team_slave_0: entered allmulticast mode [ 184.584388][ T8890] team_slave_1: entered allmulticast mode [ 184.599301][ T8890] vxlan0: entered allmulticast mode [ 184.607867][ T8890] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 184.626184][ T5935] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 184.801632][ T8901] syzkaller0: entered allmulticast mode [ 185.137174][ T8891] syzkaller0: left allmulticast mode [ 185.175124][ T8924] __nla_validate_parse: 65 callbacks suppressed [ 185.175146][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 185.219284][ T8923] bridge1: entered allmulticast mode [ 185.359798][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.768'. [ 185.403079][ T8933] netlink: 40 bytes leftover after parsing attributes in process `syz.4.768'. [ 185.713474][ T8952] netlink: 'syz.2.775': attribute type 1 has an invalid length. [ 185.784106][ T8945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.771'. [ 185.823405][ T8956] bond3: (slave gretap1): making interface the new active one [ 185.833072][ T8956] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 185.846359][ T8952] netlink: 'syz.2.775': attribute type 1 has an invalid length. [ 186.106276][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.780'. [ 186.305327][ T8977] bond0: (slave rose0): Error: Device can not be enslaved while up [ 186.338564][ T8981] netlink: 'syz.0.782': attribute type 12 has an invalid length. [ 186.381749][ T8981] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.782'. [ 186.437601][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.785'. [ 186.439868][ T8988] openvswitch: netlink: IP tunnel TTL not specified. [ 186.487610][ T8989] netlink: 'syz.3.785': attribute type 1 has an invalid length. [ 186.496671][ T8989] netlink: 232 bytes leftover after parsing attributes in process `syz.3.785'. [ 186.536803][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.785'. [ 186.588122][ T8989] macvtap0: refused to change device tx_queue_len [ 186.602296][ T8989] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 186.628446][ T8989] unsupported nla_type 52263 [ 186.895098][ T9006] netlink: 28 bytes leftover after parsing attributes in process `syz.0.788'. [ 187.051386][ T9018] tipc: Enabling of bearer rejected, already enabled [ 187.393001][ T9028] netlink: 'syz.1.797': attribute type 32 has an invalid length. [ 187.513174][ T9036] netlink: 'syz.1.800': attribute type 2 has an invalid length. [ 187.537349][ T9032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.546566][ T9032] batadv_slave_0: entered promiscuous mode [ 187.805507][ T9042] netlink: 'syz.1.801': attribute type 13 has an invalid length. [ 187.824860][ T9042] netlink: 'syz.1.801': attribute type 17 has an invalid length. [ 188.026409][ T9055] sctp: [Deprecated]: syz.3.806 (pid 9055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.026409][ T9055] Use struct sctp_sack_info instead [ 188.079215][ T9042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.176843][ T9043] lo speed is unknown, defaulting to 1000 [ 188.317735][ T9071] ip6tnl2: entered promiscuous mode [ 188.337846][ T9071] ip6tnl2: entered allmulticast mode [ 188.487596][ T9076] netlink: 'syz.2.812': attribute type 1 has an invalid length. [ 188.576096][ T9076] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.616870][ T9080] bond4: (slave bridge3): making interface the new active one [ 188.630642][ T9080] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 188.650373][ T9076] gretap2: entered promiscuous mode [ 188.659839][ T9076] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 188.670154][ T9043] lo speed is unknown, defaulting to 1000 [ 188.711537][ T9076] macvlan2: entered promiscuous mode [ 188.721096][ T9076] macvlan2: entered allmulticast mode [ 188.732180][ T9076] bond4: entered promiscuous mode [ 188.740717][ T9076] bridge3: entered promiscuous mode [ 188.749291][ T9076] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 188.761051][ T9076] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 188.782560][ T9076] bond4: left promiscuous mode [ 188.788197][ T9076] bridge3: left promiscuous mode [ 188.940283][ T9091] netlink: 'syz.3.816': attribute type 13 has an invalid length. [ 189.295719][ T5911] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 189.366694][ T9091] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 189.803026][ T7796] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 189.838267][ T7796] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 189.984622][ T9127] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 190.164020][ T5926] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 190.311251][ T9136] lo speed is unknown, defaulting to 1000 [ 190.324948][ T5935] IPVS: starting estimator thread 0... [ 190.423780][ T9142] IPVS: using max 24 ests per chain, 57600 per kthread [ 190.643972][ T5911] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 190.776070][ T9157] validate_nla: 5 callbacks suppressed [ 190.776103][ T9157] netlink: 'syz.0.833': attribute type 2 has an invalid length. [ 191.330427][ T9136] lo speed is unknown, defaulting to 1000 [ 191.449019][ T9191] __nla_validate_parse: 9 callbacks suppressed [ 191.449039][ T9191] netlink: 36 bytes leftover after parsing attributes in process `syz.4.841'. [ 191.754993][ T9204] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.843'. [ 191.770340][ T9198] lo speed is unknown, defaulting to 1000 [ 191.775834][ T9205] netlink: 'syz.3.845': attribute type 1 has an invalid length. [ 191.807274][ T9205] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 191.820095][ T9204] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 191.954240][ T9204] openvswitch: netlink: Message has 1 unknown bytes. [ 191.973177][ T9209] netlink: 'syz.3.846': attribute type 1 has an invalid length. [ 192.005809][ T9209] netlink: 224 bytes leftover after parsing attributes in process `syz.3.846'. [ 192.413467][ T9198] lo speed is unknown, defaulting to 1000 [ 192.723495][ T9228] netlink: 'syz.1.850': attribute type 1 has an invalid length. [ 192.782064][ T9230] netlink: 'syz.1.850': attribute type 3 has an invalid length. [ 192.912160][ T9228] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.027122][ T9238] tipc: Enabling of bearer rejected, already enabled [ 193.228638][ T9248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'. [ 193.560742][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.858'. [ 193.843861][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 193.911394][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'. [ 193.921622][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'. [ 194.023500][ T9279] netlink: 96 bytes leftover after parsing attributes in process `syz.0.864'. [ 194.412951][ T9303] !: renamed from dummy0 (while UP) [ 194.582724][ T9314] syzkaller1: entered promiscuous mode [ 194.612419][ T9314] syzkaller1: entered allmulticast mode [ 194.688999][ T9313] lo speed is unknown, defaulting to 1000 [ 194.803846][ T5859] Bluetooth: hci4: command 0x0405 tx timeout [ 195.174544][ T9334] netlink: 36 bytes leftover after parsing attributes in process `syz.4.875'. [ 195.369984][ T9338] syzkaller0: entered promiscuous mode [ 195.398928][ T9338] syzkaller0: entered allmulticast mode [ 196.195875][ T9313] lo speed is unknown, defaulting to 1000 [ 196.424842][ T9372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.882'. [ 196.533124][ T9381] netlink: 44 bytes leftover after parsing attributes in process `syz.3.884'. [ 196.758480][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.886'. [ 196.772334][ T9388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 196.838422][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 196.992884][ T9408] netlink: 32 bytes leftover after parsing attributes in process `syz.2.889'. [ 197.011247][ T9408] netlink: 32 bytes leftover after parsing attributes in process `syz.2.889'. [ 197.101657][ T9412] netlink: 'syz.3.887': attribute type 178 has an invalid length. [ 197.222036][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 197.987782][ T9445] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 198.420176][ T9468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.906'. [ 198.453418][ T9463] netlink: 40 bytes leftover after parsing attributes in process `syz.4.904'. [ 198.579741][ T9469] wireguard0: entered promiscuous mode [ 198.591188][ T9469] wireguard0: entered allmulticast mode [ 198.642486][ T9476] gretap0: entered promiscuous mode [ 198.659771][ T9476] vlan4: entered promiscuous mode [ 198.794906][ T9480] netlink: 248 bytes leftover after parsing attributes in process `syz.0.908'. [ 199.679885][ T9513] 8021q: VLANs not supported on ip6tnl0 [ 199.779852][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.787090][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.937772][ T9521] lo speed is unknown, defaulting to 1000 [ 199.960544][ T9525] gretap0: entered promiscuous mode [ 199.974069][ T9525] vlan0: entered promiscuous mode [ 200.170328][ T9526] vlan0: entered promiscuous mode [ 201.560877][ T9536] __nla_validate_parse: 41 callbacks suppressed [ 201.560901][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 201.603575][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 201.627469][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 201.661064][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 201.683798][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 201.692680][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 201.708450][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 201.726201][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 201.755585][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 201.774466][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 201.791444][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 201.925379][ T9536] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 202.028156][ T9536] xfrm1: left allmulticast mode [ 202.064934][ T9536] tipc: Resetting bearer [ 202.071575][ T9536] syzkaller0: left promiscuous mode [ 202.084829][ T9536] syzkaller0: left allmulticast mode [ 202.110933][ T9536] vlan2: left promiscuous mode [ 202.118372][ T9536] vlan2: left allmulticast mode [ 202.123471][ T9536] hsr_slave_1: left allmulticast mode [ 202.132071][ T9536] gretap1: left promiscuous mode [ 202.253233][ T5911] lo speed is unknown, defaulting to 1000 [ 202.259788][ T5911] syz1: Port: 1 Link DOWN [ 202.265161][ T9543] tipc: Invalid UDP bearer configuration [ 202.265217][ T9543] tipc: Enabling of bearer rejected, failed to enable media [ 202.301973][ T9521] lo speed is unknown, defaulting to 1000 [ 202.341866][ T7825] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.382173][ T7825] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.480694][ T7825] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.520510][ T7825] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.768709][ T9582] syzkaller0: entered promiscuous mode [ 202.775329][ T9582] syzkaller0: entered allmulticast mode [ 203.139141][ T9595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.741945][ T9616] tipc: Started in network mode [ 203.753258][ T9616] tipc: Node identity 3aaa8630a351, cluster identity 4711 [ 203.769914][ T9616] tipc: Enabled bearer , priority 0 [ 203.795903][ T9622] syzkaller0: entered promiscuous mode [ 203.814934][ T9622] syzkaller0: entered allmulticast mode [ 203.924088][ T9616] tipc: Resetting bearer [ 203.969763][ T9614] tipc: Resetting bearer [ 204.063361][ T9614] tipc: Disabling bearer [ 204.152012][ T9650] ÿ: renamed from bond_slave_0 [ 204.748582][ T9673] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 204.896440][ T9674] lo speed is unknown, defaulting to 1000 [ 205.247487][ T9687] syzkaller1: entered promiscuous mode [ 205.260550][ T9687] syzkaller1: entered allmulticast mode [ 206.144889][ T9674] lo speed is unknown, defaulting to 1000 [ 207.468580][ T9757] lo speed is unknown, defaulting to 1000 [ 207.591360][ T9764] __nla_validate_parse: 95 callbacks suppressed [ 207.591388][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.986'. [ 207.642147][ T9764] tipc: Enabling of bearer rejected, failed to enable media [ 207.728248][ T9766] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 207.735624][ T9766] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 207.840033][ T9769] hsr_slave_0: left promiscuous mode [ 207.867950][ T9769] hsr_slave_1: left promiscuous mode [ 208.140010][ T9757] lo speed is unknown, defaulting to 1000 [ 208.627459][ T9786] netlink: 'syz.3.991': attribute type 23 has an invalid length. [ 208.652492][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.992'. [ 208.822637][ T9785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.992'. [ 209.279513][ T9816] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1000'. [ 209.335854][ T9816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1000'. [ 209.379109][ T9816] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1000'. [ 209.395320][ T9816] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1000'. [ 209.483377][ T9823] netlink: 'syz.4.1001': attribute type 12 has an invalid length. [ 209.499272][ T9823] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1001'. [ 209.573506][ T9830] netlink: 'syz.1.1003': attribute type 1 has an invalid length. [ 209.600482][ T9830] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 209.635269][ T9837] netlink: 'syz.3.1005': attribute type 1 has an invalid length. [ 209.856050][ T9848] netlink: 'syz.3.1005': attribute type 2 has an invalid length. [ 209.888429][ T9848] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1005'. [ 209.899029][ T9837] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 209.926632][ T9837] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 210.015322][ T9864] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1008'. [ 210.110718][ T9867] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 210.247473][ T9876] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 210.318227][ T9880] lo speed is unknown, defaulting to 1000 [ 210.323311][ T9881] tipc: Enabled bearer , priority 0 [ 210.346520][ T9881] syzkaller0: entered promiscuous mode [ 210.362518][ T9881] syzkaller0: entered allmulticast mode [ 210.434696][ T9881] tipc: Resetting bearer [ 210.753481][ T9905] bond0: (slave team0): Releasing backup interface [ 210.790771][ T9905] bond4: (slave gretap2): Releasing active interface [ 210.822472][ T9905] netlink: 'syz.4.1019': attribute type 10 has an invalid length. [ 210.957473][ T9912] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 211.117912][ T9880] lo speed is unknown, defaulting to 1000 [ 211.166620][ T9897] lo speed is unknown, defaulting to 1000 [ 211.174991][ T9897] lo speed is unknown, defaulting to 1000 [ 211.181822][ T9897] lo speed is unknown, defaulting to 1000 [ 211.236442][ T9897] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 211.291929][ T9897] lo speed is unknown, defaulting to 1000 [ 211.312771][ T9897] lo speed is unknown, defaulting to 1000 [ 211.331980][ T9897] lo speed is unknown, defaulting to 1000 [ 211.359313][ T9897] lo speed is unknown, defaulting to 1000 [ 211.369008][ T9897] lo speed is unknown, defaulting to 1000 [ 211.420580][ T9897] lo speed is unknown, defaulting to 1000 [ 211.433826][ T980] tipc: Node number set to 550973817 [ 211.885257][ T9938] lo speed is unknown, defaulting to 1000 [ 211.940835][ T9949] netlink: 'syz.1.1035': attribute type 10 has an invalid length. [ 211.954755][ T9949] batadv0: entered promiscuous mode [ 211.960295][ T9949] batadv0: entered allmulticast mode [ 211.973170][ T9949] bridge0: port 1(batadv0) entered blocking state [ 211.982786][ T9949] bridge0: port 1(batadv0) entered disabled state [ 212.025885][ T9949] bridge0: port 1(batadv0) entered blocking state [ 212.032956][ T9949] bridge0: port 1(batadv0) entered forwarding state [ 212.085099][ T5169] Bluetooth: hci1: command 0x0406 tx timeout [ 212.092801][ T5169] Bluetooth: hci3: command 0x0406 tx timeout [ 212.099258][ T5169] Bluetooth: hci2: command 0x0401 tx timeout [ 212.353129][ T9938] lo speed is unknown, defaulting to 1000 [ 212.365447][ T7837] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 212.365648][ T9938] lo speed is unknown, defaulting to 1000 [ 212.375783][ T7837] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 212.460191][ T9962] lo speed is unknown, defaulting to 1000 [ 212.888855][ T9962] lo speed is unknown, defaulting to 1000 [ 212.917272][ T9962] lo speed is unknown, defaulting to 1000 [ 213.093429][ T9984] syz.3.1043 uses old SIOCAX25GETINFO [ 213.179960][ T9986] __nla_validate_parse: 9 callbacks suppressed [ 213.179983][ T9986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1046'. [ 213.290685][ T9996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1047'. [ 213.502940][T10000] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1049'. [ 213.917871][T10017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1051'. [ 214.041326][T10022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1051'. [ 214.482451][T10038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1058'. [ 214.505696][T10046] netlink: 'syz.3.1060': attribute type 39 has an invalid length. [ 214.718835][T10046] veth0_macvtap: left promiscuous mode [ 215.496863][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1066'. [ 215.773517][T10092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1071'. [ 215.802870][T10090] netlink: 'syz.2.1070': attribute type 15 has an invalid length. [ 215.825208][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'. [ 215.895011][T10095] netlink: 'syz.2.1070': attribute type 1 has an invalid length. [ 215.910616][T10095] netlink: 'syz.2.1070': attribute type 2 has an invalid length. [ 216.154864][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1075'. [ 216.246497][T10112] netlink: 'syz.3.1079': attribute type 3 has an invalid length. [ 216.260598][T10112] netlink: 'syz.3.1079': attribute type 3 has an invalid length. [ 216.320218][T10118] netlink: 'syz.0.1077': attribute type 10 has an invalid length. [ 216.405393][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 216.541704][T10118] !: entered promiscuous mode [ 216.566855][T10118] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 217.084664][T10157] netlink: 'syz.4.1088': attribute type 178 has an invalid length. [ 217.109805][T10162] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 217.145154][T10157] tipc: Enabling of bearer rejected, failed to enable media [ 217.337628][T10171] netlink: 'syz.4.1093': attribute type 10 has an invalid length. [ 218.029431][ T980] IPVS: starting estimator thread 0... [ 218.080166][T10212] lo speed is unknown, defaulting to 1000 [ 218.209170][T10211] IPVS: Scheduler module ip_vs_sip not found [ 218.216701][T10217] IPVS: using max 23 ests per chain, 55200 per kthread [ 218.357309][T10222] __nla_validate_parse: 3 callbacks suppressed [ 218.357329][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1104'. [ 218.895755][T10255] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 218.899498][T10252] IPVS: stopping backup sync thread 10255 ... [ 218.991227][T10252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1112'. [ 219.017085][T10252] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1112'. [ 219.033475][T10261] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1111'. [ 219.043896][T10261] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1111'. [ 219.061825][T10261] dvmrp0: left allmulticast mode [ 219.169282][T10212] lo speed is unknown, defaulting to 1000 [ 219.180759][T10266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1114'. [ 219.217178][T10212] lo speed is unknown, defaulting to 1000 [ 219.249882][T10267] rdma_rxe: rxe_newlink: failed to add lo [ 219.302116][T10269] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 219.316636][T10271] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 219.416012][T10269] netlink: 'syz.2.1115': attribute type 2 has an invalid length. [ 219.475602][T10261] erspan0: left promiscuous mode [ 219.518048][T10279] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1115'. [ 219.671663][T10261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.718940][T10261] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.728277][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 219.889226][T10261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.947450][ T9551] lo speed is unknown, defaulting to 1000 [ 219.954681][ T9551] syz1: Port: 1 Link ACTIVE [ 219.962526][T10252] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1112'. [ 220.256247][T10293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.540666][T10315] netlink: 'syz.3.1124': attribute type 30 has an invalid length. [ 220.970556][T10320] lo speed is unknown, defaulting to 1000 [ 221.491387][T10320] lo speed is unknown, defaulting to 1000 [ 221.491462][T10328] lo speed is unknown, defaulting to 1000 [ 221.510350][T10320] lo speed is unknown, defaulting to 1000 [ 221.540284][T10349] IPVS: stopping backup sync thread 10350 ... [ 221.547349][T10350] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 221.593049][T10349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1130'. [ 221.970269][T10328] lo speed is unknown, defaulting to 1000 [ 221.979652][T10328] lo speed is unknown, defaulting to 1000 [ 222.429522][T10366] bridge_slave_0: entered promiscuous mode [ 222.689992][T10379] sctp: [Deprecated]: syz.3.1136 (pid 10379) Use of int in max_burst socket option. [ 222.689992][T10379] Use struct sctp_assoc_value instead [ 223.071226][T10393] netlink: 'syz.0.1141': attribute type 6 has an invalid length. [ 223.098646][T10393] syzkaller0: entered promiscuous mode [ 223.113832][T10393] syzkaller0: entered allmulticast mode [ 223.141092][T10395] dvmrp0: left allmulticast mode [ 223.432296][T10410] tipc: Cannot configure node identity twice [ 223.470377][T10410] __nla_validate_parse: 4 callbacks suppressed [ 223.470397][T10410] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1147'. [ 223.546664][T10413] sctp: [Deprecated]: syz.0.1148 (pid 10413) Use of int in maxseg socket option. [ 223.546664][T10413] Use struct sctp_assoc_value instead [ 223.598515][T10413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1148'. [ 223.626530][T10413] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1148'. [ 223.649108][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 223.680320][T10418] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1150'. [ 223.697488][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1150'. [ 223.705270][T10419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1151'. [ 223.715767][T10419] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1151'. [ 223.741874][T10418] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1150'. [ 223.837848][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1154'. [ 223.883421][T10430] netlink: 'syz.1.1156': attribute type 29 has an invalid length. [ 223.946026][T10435] netlink: 'syz.1.1156': attribute type 29 has an invalid length. [ 224.089491][T10434] tipc: New replicast peer: 255.255.255.255 [ 224.165733][T10434] tipc: Enabled bearer , priority 10 [ 224.254428][T10429] lo speed is unknown, defaulting to 1000 [ 225.164629][ T5950] tipc: Node number set to 1324866824 [ 225.366570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.540358][T10429] lo speed is unknown, defaulting to 1000 [ 226.608438][T10429] lo speed is unknown, defaulting to 1000 [ 226.786787][T10436] tc_dump_action: action bad kind [ 227.635725][T10467] vlan0: entered promiscuous mode [ 227.655192][T10467] bond0: entered promiscuous mode [ 227.663947][T10467] vlan0: entered allmulticast mode [ 227.692254][T10467] bond0: entered allmulticast mode [ 227.889854][T10479] tipc: Enabling of bearer rejected, already enabled [ 228.817292][T10515] pim6reg: entered allmulticast mode [ 229.040364][T10517] lo speed is unknown, defaulting to 1000 [ 229.364824][T10517] lo speed is unknown, defaulting to 1000 [ 229.373085][T10517] lo speed is unknown, defaulting to 1000 [ 229.598942][T10538] syz_tun: entered allmulticast mode [ 229.611250][T10540] __nla_validate_parse: 7 callbacks suppressed [ 229.611271][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 229.835337][T10552] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1186'. [ 229.853573][T10538] dvmrp8: entered allmulticast mode [ 229.859904][T10550] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1186'. [ 229.929109][T10547] dvmrp1: entered allmulticast mode [ 230.024930][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1186'. [ 230.043038][T10550] pim6reg: entered allmulticast mode [ 230.164620][T10564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1188'. [ 230.320713][T10571] netlink: 'syz.3.1187': attribute type 15 has an invalid length. [ 230.340070][T10571] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1187'. [ 230.383512][T10567] wireguard0: entered promiscuous mode [ 230.424667][T10567] wireguard0: entered allmulticast mode [ 230.558444][T10533] syz_tun: left allmulticast mode [ 230.570415][T10533] dvmrp1: left allmulticast mode [ 230.723318][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 230.752051][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 230.771894][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 231.018008][T10580] veth5: entered promiscuous mode [ 231.126345][T10576] lo speed is unknown, defaulting to 1000 [ 231.260734][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1194'. [ 231.371553][T10593] tipc: Enabled bearer , priority 0 [ 231.386395][T10594] syzkaller0: MTU too low for tipc bearer [ 231.392659][T10594] tipc: Disabling bearer [ 231.430392][T10598] netlink: 'syz.2.1196': attribute type 1 has an invalid length. [ 231.443408][T10598] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 231.587193][T10603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.593006][T10601] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 231.662202][T10605] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 231.662227][T10601] bond0: (slave wlan1): Releasing backup interface [ 231.685450][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.709267][T10601] bond1: (slave geneve3): Releasing active interface [ 231.744521][ T9551] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 231.752080][T10609] netlink: 'syz.3.1198': attribute type 10 has an invalid length. [ 231.795631][T10601] bond4: (slave bridge3): Releasing backup interface [ 231.836106][T10576] lo speed is unknown, defaulting to 1000 [ 231.844317][T10576] lo speed is unknown, defaulting to 1000 [ 231.921916][T10609] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 231.931492][T10609] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 231.942319][T10609] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 231.956356][T10609] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 231.965800][ T7817] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 232.003346][ T7817] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 232.024583][ T7817] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 232.033411][ T7817] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 232.463498][ T5950] IPVS: starting estimator thread 0... [ 232.478641][ T7796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.488893][ T7796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.555180][T10623] tipc: Enabled bearer , priority 0 [ 232.565502][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.584537][T10631] IPVS: using max 28 ests per chain, 67200 per kthread [ 232.593538][T10623] syzkaller0: entered promiscuous mode [ 232.624549][T10623] syzkaller0: entered allmulticast mode [ 232.644874][ T9551] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 232.710929][T10623] tipc: Resetting bearer [ 232.747326][T10640] lo speed is unknown, defaulting to 1000 [ 232.766370][T10622] tipc: Resetting bearer [ 232.800683][T10622] tipc: Disabling bearer [ 234.100634][T10681] sctp: [Deprecated]: syz.4.1215 (pid 10681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.100634][T10681] Use struct sctp_sack_info instead [ 234.190994][T10652] lo speed is unknown, defaulting to 1000 [ 234.208973][T10640] lo speed is unknown, defaulting to 1000 [ 234.251180][T10640] lo speed is unknown, defaulting to 1000 [ 234.518177][T10700] netlink: 'syz.1.1218': attribute type 303 has an invalid length. [ 234.627826][T10698] __nla_validate_parse: 1 callbacks suppressed [ 234.627848][T10698] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1219'. [ 234.752856][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 234.888363][T10701] lo speed is unknown, defaulting to 1000 [ 234.999957][T10710] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 235.150106][T10652] lo speed is unknown, defaulting to 1000 [ 235.157995][T10652] lo speed is unknown, defaulting to 1000 [ 235.166550][T10701] lo speed is unknown, defaulting to 1000 [ 235.298962][T10701] lo speed is unknown, defaulting to 1000 [ 236.012145][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1226'. [ 236.218424][T10730] team0: entered promiscuous mode [ 236.317652][T10737] netlink: 'syz.4.1229': attribute type 1 has an invalid length. [ 236.334402][T10737] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1229'. [ 236.356403][T10729] team0: left promiscuous mode [ 236.576513][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1231'. [ 236.762241][T10752] lo speed is unknown, defaulting to 1000 [ 237.283034][T10764] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.335122][T10781] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1236'. [ 237.575372][T10764] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.631961][T10784] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 237.640837][T10784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1240'. [ 237.679332][T10784] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 237.701401][T10784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1240'. [ 237.713335][T10784] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 237.726132][T10784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1240'. [ 237.737247][T10784] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 237.745866][T10784] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1240'. [ 237.756009][T10784] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 237.766584][T10784] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 237.776337][T10784] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 237.786428][T10784] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 237.796325][T10784] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 237.889566][T10764] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.910451][T10752] lo speed is unknown, defaulting to 1000 [ 237.956578][T10792] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0 [ 237.998013][T10752] lo speed is unknown, defaulting to 1000 [ 238.058761][T10764] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.311863][T10807] batadv0: entered promiscuous mode [ 238.344394][T10807] batadv0: entered allmulticast mode [ 238.352628][T10807] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 238.572832][ T7821] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.651262][ T7808] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.825019][ T7822] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.950068][ T7821] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.192537][T10847] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 239.200833][T10847] team0: Device ipvlan0 is already an upper device of the team interface [ 239.296212][T10848] lo speed is unknown, defaulting to 1000 [ 239.606594][T10848] lo speed is unknown, defaulting to 1000 [ 239.614595][T10848] lo speed is unknown, defaulting to 1000 [ 239.936175][T10873] tipc: Enabled bearer , priority 0 [ 239.997526][T10873] syzkaller0: entered promiscuous mode [ 240.003065][T10873] syzkaller0: entered allmulticast mode [ 240.261455][T10878] tipc: Resetting bearer [ 240.366176][T10872] tipc: Resetting bearer [ 240.457083][T10872] tipc: Disabling bearer [ 240.527909][T10903] syz_tun: entered promiscuous mode [ 240.569085][T10903] batadv_slave_0: entered promiscuous mode [ 240.577860][T10903] hsr1: entered allmulticast mode [ 240.583040][T10903] syz_tun: entered allmulticast mode [ 240.641807][T10903] batadv_slave_0: entered allmulticast mode [ 241.111333][T10934] __nla_validate_parse: 125 callbacks suppressed [ 241.111358][T10934] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1282'. [ 241.589090][T10961] validate_nla: 121 callbacks suppressed [ 241.589113][T10961] netlink: 'syz.2.1290': attribute type 21 has an invalid length. [ 241.604349][T10961] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1290'. [ 241.647114][T10961] netlink: 'syz.2.1290': attribute type 4 has an invalid length. [ 241.670775][T10961] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1290'. [ 241.736110][T10969] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4. [ 241.828453][T10980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1292'. [ 242.162055][T10988] netlink: 'syz.0.1298': attribute type 2 has an invalid length. [ 242.190942][T10988] netlink: 'syz.0.1298': attribute type 2 has an invalid length. [ 242.219715][T10988] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1298'. [ 242.264828][T10990] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1299'. [ 242.304391][T10990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1299'. [ 243.929129][T11052] lo speed is unknown, defaulting to 1000 [ 244.267980][T11061] bond0: (slave bond_slave_0): Releasing backup interface [ 244.346026][T11061] bond0: (slave bond_slave_1): Releasing backup interface [ 244.387151][T11061] team_slave_0: left allmulticast mode [ 244.415104][T11061] team_slave_0: left promiscuous mode [ 244.441874][T11061] team0: Port device team_slave_0 removed [ 244.456786][T11061] team_slave_1: left allmulticast mode [ 244.478124][T11061] team_slave_1: left promiscuous mode [ 244.510843][T11061] team0: Port device team_slave_1 removed [ 244.531132][T11061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.553192][T11061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.563855][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 244.581194][T11061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.619778][T11061] vxlan0: left allmulticast mode [ 244.640945][T11061] vxlan0: left promiscuous mode [ 244.678544][T11061] team0: Port device vxlan0 removed [ 244.727334][ T7808] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.741160][T11068] netlink: 'syz.2.1320': attribute type 1 has an invalid length. [ 244.751504][T11052] lo speed is unknown, defaulting to 1000 [ 244.761591][T11068] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1320'. [ 244.766505][T11052] lo speed is unknown, defaulting to 1000 [ 244.771272][ T7808] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.791204][ T7808] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.868643][ T7808] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.940731][T11073] tipc: Enabled bearer , priority 0 [ 245.009338][T11086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1324'. [ 245.014708][T11073] syzkaller0: entered promiscuous mode [ 245.039165][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1324'. [ 245.047355][T11073] syzkaller0: entered allmulticast mode [ 245.079168][T11073] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 245.217798][T11073] tipc: Resetting bearer [ 245.232712][T11091] syzkaller0: left promiscuous mode [ 245.238414][T11091] syzkaller0: left allmulticast mode [ 245.247407][T11091] tipc: Enabling of bearer rejected, already enabled [ 245.443416][T11072] tipc: Resetting bearer [ 245.509836][T11072] tipc: Disabling bearer [ 245.783109][T11111] netlink: 'syz.0.1333': attribute type 1 has an invalid length. [ 245.898809][T11111] 8021q: adding VLAN 0 to HW filter on device bond3 [ 245.958963][T11116] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 246.003858][ T7808] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 246.133172][T11122] bond3: (slave ip6gretap1): Removing an active aggregator [ 246.143100][T11122] bond3: (slave ip6gretap1): Releasing backup interface [ 246.521684][T11143] __nla_validate_parse: 3 callbacks suppressed [ 246.521707][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'. [ 246.547380][T11140] netlink: 'syz.1.1341': attribute type 13 has an invalid length. [ 246.555987][T11140] netlink: 'syz.1.1341': attribute type 17 has an invalid length. [ 246.557864][T11143] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1343'. [ 246.595230][T11143] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1343'. [ 246.614824][T11143] netlink: 'syz.2.1343': attribute type 1 has an invalid length. [ 246.622843][T11140] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.891600][T11158] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34) [ 246.940161][T11161] tipc: Enabled bearer , priority 0 [ 246.947920][T11161] syzkaller0: entered promiscuous mode [ 246.953452][T11161] syzkaller0: entered allmulticast mode [ 246.994946][T11161] tipc: Resetting bearer [ 247.088585][T11161] tipc: Resetting bearer [ 247.166352][T11161] tipc: Disabling bearer [ 247.228064][T11176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1352'. [ 247.627979][T11200] sock: sock_timestamping_bind_phc: sock not bind to device [ 247.792875][T11206] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.1359'. [ 247.816434][T11205] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.1359'. [ 247.995645][T11223] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 248.182358][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1365'. [ 248.287033][T11233] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1366'. [ 248.316490][T11233] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1366'. [ 248.415892][T11233] siw: device registration error -23 [ 248.467652][T11246] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1372'. [ 248.612859][T11250] ip6gre1: entered promiscuous mode [ 248.889235][T11271] IPVS: length: 209 != 24 [ 248.955876][T11275] syz_tun: entered allmulticast mode [ 248.987973][T11277] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 249.638089][T11265] syz_tun: left allmulticast mode [ 249.779571][T11319] netlink: 'syz.0.1390': attribute type 4 has an invalid length. [ 249.953524][T11324] bridge3: entered promiscuous mode [ 249.960386][T11324] bridge3: entered allmulticast mode [ 249.979226][T11324] team0: Port device bridge3 added [ 249.999054][T11325] netlink: 'syz.3.1393': attribute type 29 has an invalid length. [ 250.040192][T11328] netlink: 'syz.2.1395': attribute type 1 has an invalid length. [ 250.182830][T11332] netlink: 'syz.4.1397': attribute type 7 has an invalid length. [ 250.198397][T11332] netlink: 'syz.4.1397': attribute type 8 has an invalid length. [ 250.236593][T11330] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 250.781414][T11365] macvtap0: entered allmulticast mode [ 250.801760][T11365] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 251.483264][T11401] lo speed is unknown, defaulting to 1000 [ 251.577990][T11409] pim6reg1: entered promiscuous mode [ 251.598698][T11409] pim6reg1: entered allmulticast mode [ 251.805494][T11411] __nla_validate_parse: 4 callbacks suppressed [ 251.805518][T11411] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1416'. [ 251.921686][T11424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1419'. [ 252.001484][T11425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.103497][T11409] 8021q: adding VLAN 0 to HW filter on device bond6 [ 252.112128][T11409] bond6: entered promiscuous mode [ 252.118929][T11409] team0: Port device bond6 added [ 252.139042][T11401] lo speed is unknown, defaulting to 1000 [ 252.184985][T11401] lo speed is unknown, defaulting to 1000 [ 252.864606][T11443] block nbd1: server does not support multiple connections per device. [ 252.937449][T11443] block nbd1: shutting down sockets [ 253.049608][T11462] bond0: (slave rose0): Error: Device can not be enslaved while up [ 253.368630][T11478] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1431'. [ 253.457923][T11484] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1431'. [ 253.515557][T11484] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1431'. [ 253.537822][T11484] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1431'. [ 254.285297][T11518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1440'. [ 254.297588][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 254.311674][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1442'. [ 254.323188][T11523] netlink: 'syz.0.1442': attribute type 12 has an invalid length. [ 254.340026][T11523] netlink: 'syz.0.1442': attribute type 14 has an invalid length. [ 254.350922][T11518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1440'. [ 254.702963][T11548] lo speed is unknown, defaulting to 1000 [ 255.162365][T11561] wireguard0: entered promiscuous mode [ 255.170427][T11561] wireguard0: entered allmulticast mode [ 255.255663][T11548] lo speed is unknown, defaulting to 1000 [ 255.257857][T11565] tipc: Enabling of bearer rejected, already enabled [ 255.276555][T11548] lo speed is unknown, defaulting to 1000 [ 255.277941][T11565] syzkaller0: entered promiscuous mode [ 255.297651][T11565] syzkaller0: entered allmulticast mode [ 256.042711][T11587] "syz.1.1454" (11587) uses obsolete ecb(arc4) skcipher [ 256.439935][T11602] syzkaller1: entered promiscuous mode [ 256.450098][T11602] syzkaller1: entered allmulticast mode [ 257.008868][T11629] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 257.635784][T11677] tipc: Enabling of bearer rejected, already enabled [ 257.690348][T11682] __nla_validate_parse: 10 callbacks suppressed [ 257.690368][T11682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1475'. [ 257.801877][T11684] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1478'. [ 258.059169][T11690] IPVS: Scheduler module ip_vs_sip not found [ 258.286939][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1484'. [ 258.466274][T11726] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1487'. [ 258.494839][T11727] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1487'. [ 258.567204][T11731] tipc: Enabling of bearer rejected, already enabled [ 258.584710][T11734] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1486'. [ 259.079572][T11756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1495'. [ 259.101661][T11754] tipc: Enabling of bearer rejected, already enabled [ 259.129031][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1494'. [ 259.182289][T11759] lo speed is unknown, defaulting to 1000 [ 259.225915][T11764] netlink: 'syz.2.1497': attribute type 13 has an invalid length. [ 259.308645][ T7837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.327790][ T7837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.698571][T11759] lo speed is unknown, defaulting to 1000 [ 259.717783][T11759] lo speed is unknown, defaulting to 1000 [ 259.762031][T11779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1500'. [ 259.885267][T11777] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1500'. [ 259.975139][T11786] openvswitch: netlink: Duplicate or invalid key (type 0). [ 259.982676][T11786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.188780][T11783] lo speed is unknown, defaulting to 1000 [ 260.621092][T11805] netlink: 'syz.3.1506': attribute type 1 has an invalid length. [ 260.651966][T11805] netlink: 'syz.3.1506': attribute type 3 has an invalid length. [ 260.695856][T11805] netlink: 'syz.3.1506': attribute type 1 has an invalid length. [ 260.755931][T11805] NCSI netlink: No device for ifindex 0 [ 260.966167][T11783] lo speed is unknown, defaulting to 1000 [ 261.009082][T11783] lo speed is unknown, defaulting to 1000 [ 261.209262][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.509422][T11820] tipc: Enabled bearer , priority 0 [ 261.570570][T11820] syzkaller0: entered promiscuous mode [ 261.595153][T11820] syzkaller0: entered allmulticast mode [ 261.663839][T11830] netlink: 'syz.0.1517': attribute type 1 has an invalid length. [ 261.673372][T11830] netlink: 'syz.0.1517': attribute type 1 has an invalid length. [ 261.778989][T11826] syzkaller0: left promiscuous mode [ 261.786651][T11826] syzkaller0: left allmulticast mode [ 262.816228][T11872] __nla_validate_parse: 6 callbacks suppressed [ 262.816250][T11872] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1532'. [ 262.885666][T11876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1530'. [ 263.029288][T11881] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1530'. [ 263.169883][T11887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1534'. [ 263.214035][T11887] sctp: [Deprecated]: syz.1.1534 (pid 11887) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.214035][T11887] Use struct sctp_sack_info instead [ 263.356967][T11892] netlink: 'syz.1.1536': attribute type 23 has an invalid length. [ 263.635305][T11899] syzkaller0: entered promiscuous mode [ 263.641117][T11899] syzkaller0: entered allmulticast mode [ 263.657177][T11899] syzkaller0: Caught tx_queue_len zero misconfig [ 263.712387][T11898] lo speed is unknown, defaulting to 1000 [ 263.755831][T11909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1539'. [ 263.789691][T11901] IPVS: Scheduler module ip_vs_sip not found [ 263.805853][T11905] IPVS: length: 8 != 446622349272 [ 263.872373][T11912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.018414][T11920] netlink: del zone limit has 8 unknown bytes [ 264.234915][T11929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1545'. [ 264.870514][T11912] lo speed is unknown, defaulting to 1000 [ 264.878636][T11898] lo speed is unknown, defaulting to 1000 [ 264.930177][T11898] lo speed is unknown, defaulting to 1000 [ 265.502376][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1551'. [ 265.532665][T11954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1551'. [ 265.554620][T11912] lo speed is unknown, defaulting to 1000 [ 265.562516][T11912] lo speed is unknown, defaulting to 1000 [ 265.566152][T11954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1551'. [ 265.583303][T11946] lo speed is unknown, defaulting to 1000 [ 265.593555][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1551'. [ 266.078502][T11963] netlink: 'syz.4.1553': attribute type 21 has an invalid length. [ 266.320358][T11971] netlink: 'syz.4.1555': attribute type 1 has an invalid length. [ 266.428663][T11974] netlink: 'syz.1.1556': attribute type 29 has an invalid length. [ 266.492468][T11946] lo speed is unknown, defaulting to 1000 [ 266.502327][T11964] lo speed is unknown, defaulting to 1000 [ 266.547851][T11946] lo speed is unknown, defaulting to 1000 [ 267.125531][T11964] lo speed is unknown, defaulting to 1000 [ 267.253059][T11964] lo speed is unknown, defaulting to 1000 [ 267.291981][T11983] netlink: 'syz.1.1559': attribute type 1 has an invalid length. [ 267.441434][T11985] netlink: 'syz.1.1559': attribute type 1 has an invalid length. [ 267.771197][T11992] tipc: Enabled bearer , priority 0 [ 267.782086][T11992] netlink: 'syz.4.1561': attribute type 303 has an invalid length. [ 268.358580][T12011] netlink: 'syz.2.1566': attribute type 1 has an invalid length. [ 268.434917][T12016] __nla_validate_parse: 3 callbacks suppressed [ 268.434938][T12016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'. [ 268.553571][T12022] netlink: 'syz.2.1566': attribute type 4 has an invalid length. [ 268.615494][T12011] 8021q: adding VLAN 0 to HW filter on device bond7 [ 268.639042][T12023] netlink: 'syz.2.1566': attribute type 4 has an invalid length. [ 268.654376][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'. [ 268.716697][ T9551] lo speed is unknown, defaulting to 1000 [ 268.722814][ T9551] syz2: Port: 1 Link ACTIVE [ 269.109863][T12052] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1577'. [ 269.120250][T12052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1577'. [ 269.138319][T12052] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1577'. [ 269.152763][T12052] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1577'. [ 269.223050][T12055] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 269.241395][T12055] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 269.268145][T12056] tipc: Enabling of bearer rejected, already enabled [ 269.280529][T12056] tipc: Enabling of bearer rejected, already enabled [ 269.600495][T12065] netlink: 'syz.1.1583': attribute type 4 has an invalid length. [ 269.743326][T12086] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1583'. [ 269.779009][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1583'. [ 270.628508][T12126] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1597'. [ 270.655525][T12126] 0·: renamed from hsr0 [ 270.677662][T12126] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.685922][T12128] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1597'. [ 270.697801][T12126] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.697845][T12126] 0·: entered allmulticast mode [ 270.697931][T12126] hsr_slave_0: entered allmulticast mode [ 270.697948][T12126] hsr_slave_1: entered allmulticast mode [ 270.700492][T12126] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 270.771981][T12128] 1·: renamed from 70· (while UP) [ 270.787816][T12128] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 270.905654][T12139] tipc: Enabling of bearer rejected, already enabled [ 271.773948][T12173] tipc: Enabled bearer , priority 0 [ 271.799638][T12173] syzkaller0: entered promiscuous mode [ 271.816134][T12173] syzkaller0: entered allmulticast mode [ 271.928818][T12173] tipc: Resetting bearer [ 271.941813][T12185] tipc: Trying to set illegal importance in message [ 271.981900][T12170] tipc: Resetting bearer [ 272.069002][T12170] tipc: Disabling bearer [ 272.350152][T12203] validate_nla: 1 callbacks suppressed [ 272.350175][T12203] netlink: 'syz.3.1619': attribute type 1 has an invalid length. [ 272.364302][T12200] bridge4: entered promiscuous mode [ 272.456828][T12206] dvmrp8: left allmulticast mode [ 272.642473][T12215] tipc: Resetting bearer [ 272.658722][T12215] tipc: Resetting bearer [ 272.749561][T12215] tipc: Resetting bearer [ 272.756960][T12215] tipc: Resetting bearer [ 272.775374][T12220] tipc: New replicast peer: 255.255.255.255 [ 272.802665][T12220] tipc: Enabled bearer , priority 10 [ 272.854477][T12222] bridge0: entered allmulticast mode [ 273.651880][T12232] tipc: Enabling of bearer rejected, already enabled [ 273.682076][T12232] tipc: Resetting bearer [ 273.851573][T12241] netlink: zone id is out of range [ 274.094992][T12241] lo speed is unknown, defaulting to 1000 [ 274.371088][T12262] sctp: [Deprecated]: syz.0.1638 (pid 12262) Use of int in max_burst socket option. [ 274.371088][T12262] Use struct sctp_assoc_value instead [ 274.476947][T12264] __nla_validate_parse: 11 callbacks suppressed [ 274.476971][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1639'. [ 274.508127][T12266] netlink: 'syz.1.1640': attribute type 1 has an invalid length. [ 274.557743][T12264] macvtap1: entered promiscuous mode [ 274.575127][T12264] macvtap1: entered allmulticast mode [ 274.586528][T12264] team0: entered allmulticast mode [ 274.604111][T12264] bond6: entered allmulticast mode [ 274.611075][T12264] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 274.634737][T12267] team0: left allmulticast mode [ 274.639960][T12267] bond6: left allmulticast mode [ 274.817833][T12270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1642'. [ 274.837017][T12271] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20000 [ 274.858153][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'. [ 274.871703][T12241] lo speed is unknown, defaulting to 1000 [ 274.899201][T12241] lo speed is unknown, defaulting to 1000 [ 274.899225][T12276] tipc: Enabling of bearer rejected, already enabled [ 275.032028][T12283] netlink: 'syz.1.1645': attribute type 21 has an invalid length. [ 275.167923][T12283] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1645'. [ 275.222723][T12289] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 275.895196][T12310] tipc: Invalid UDP bearer configuration [ 275.895256][T12310] tipc: Enabling of bearer rejected, failed to enable media [ 276.503325][T12327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1654'. [ 276.524434][T12330] lo speed is unknown, defaulting to 1000 [ 276.600985][T12331] netlink: 'syz.4.1654': attribute type 13 has an invalid length. [ 276.622988][T12331] netlink: 'syz.4.1654': attribute type 17 has an invalid length. [ 276.678321][T12331] bridge0: left allmulticast mode [ 276.706176][T12331] tipc: Resetting bearer [ 276.722483][T12331] tipc: Resetting bearer [ 276.792634][T12331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.060417][T12350] netlink: 'syz.3.1662': attribute type 5 has an invalid length. [ 277.068797][T12352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1663'. [ 277.658586][T12327] lo speed is unknown, defaulting to 1000 [ 277.668577][T12330] lo speed is unknown, defaulting to 1000 [ 277.696545][T12330] lo speed is unknown, defaulting to 1000 [ 278.066735][T12389] netlink: 'syz.1.1672': attribute type 1 has an invalid length. [ 278.085000][T12389] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1672'. [ 278.179538][T12327] lo speed is unknown, defaulting to 1000 [ 278.179552][T12370] lo speed is unknown, defaulting to 1000 [ 278.439520][T12386] lo speed is unknown, defaulting to 1000 [ 278.827165][T12370] lo speed is unknown, defaulting to 1000 [ 278.827721][T12327] lo speed is unknown, defaulting to 1000 [ 278.889066][T12370] lo speed is unknown, defaulting to 1000 [ 278.889076][T12386] lo speed is unknown, defaulting to 1000 [ 278.931706][T12386] lo speed is unknown, defaulting to 1000 [ 279.698281][T12400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1677'. [ 279.721831][T12400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1677'. [ 279.765657][T12401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1677'. [ 279.808673][T12401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1677'. [ 280.342640][T12417] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1682'. [ 280.372010][T12418] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1682'. [ 280.691628][T12434] lo speed is unknown, defaulting to 1000 [ 280.740167][T12427] netlink: 'syz.4.1685': attribute type 10 has an invalid length. [ 280.817102][T12427] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 280.861259][T12439] tipc: Enabling of bearer rejected, already enabled [ 280.889083][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1692'. [ 280.914819][T12447] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1692'. [ 281.186635][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'. [ 281.210512][T12460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 281.274697][T12460] batadv_slave_0: mtu less than device minimum [ 281.710047][T12452] lo speed is unknown, defaulting to 1000 [ 281.719519][T12434] lo speed is unknown, defaulting to 1000 [ 281.734100][T12434] lo speed is unknown, defaulting to 1000 [ 282.369049][T12452] lo speed is unknown, defaulting to 1000 [ 282.389931][T12452] lo speed is unknown, defaulting to 1000 [ 282.471286][T12486] tipc: Resetting bearer [ 282.660648][T12491] lo speed is unknown, defaulting to 1000 [ 282.687491][T12493] netlink: 'syz.2.1702': attribute type 1 has an invalid length. [ 283.151752][T12491] lo speed is unknown, defaulting to 1000 [ 283.205703][T12491] lo speed is unknown, defaulting to 1000 [ 284.045868][T12526] netlink: 'syz.3.1714': attribute type 21 has an invalid length. [ 284.368323][ T30] audit: type=1800 audit(1753903221.698:3): pid=12546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1720" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1919 res=0 errno=0 [ 284.608710][T12560] tipc: Cannot configure node identity twice [ 284.691144][T12567] netlink: 'syz.4.1724': attribute type 4 has an invalid length. [ 284.763080][T12575] __nla_validate_parse: 3 callbacks suppressed [ 284.763099][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1727'. [ 284.822732][T12569] veth0: entered promiscuous mode [ 284.856783][T12569] vlan2: entered promiscuous mode [ 285.075233][T12591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1732'. [ 285.201075][T12599] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1735'. [ 285.330465][T12607] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.1738'. [ 285.418585][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'. [ 285.431777][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'. [ 285.448323][T12619] netlink: 'syz.1.1739': attribute type 11 has an invalid length. [ 286.213384][T12644] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 286.302476][T12646] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1744'. [ 286.330562][T12647] nbd: device at index 1 is going down [ 286.330983][ T7837] [ 286.338645][ T7837] ====================================================== [ 286.346044][ T7837] WARNING: possible circular locking dependency detected [ 286.353193][ T7837] 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 Not tainted [ 286.360338][ T7837] ------------------------------------------------------ [ 286.367638][ T7837] kworker/u8:61/7837 is trying to acquire lock: [ 286.373900][ T7837] ffff8880257d3358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0 [ 286.383435][ T7837] [ 286.383435][ T7837] but task is already holding lock: [ 286.390909][ T7837] ffff88802579a188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 286.400945][ T7837] [ 286.400945][ T7837] which lock already depends on the new lock. [ 286.400945][ T7837] [ 286.411626][ T7837] [ 286.411626][ T7837] the existing dependency chain (in reverse order) is: [ 286.420738][ T7837] [ 286.420738][ T7837] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 286.429201][ T7837] lock_acquire+0x120/0x360 [ 286.434416][ T7837] down_write+0x96/0x1f0 [ 286.439211][ T7837] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 286.445601][ T7837] nbd_start_device+0x16c/0xac0 [ 286.451341][ T7837] nbd_genl_connect+0x135b/0x18f0 [ 286.457002][ T7837] genl_family_rcv_msg_doit+0x212/0x300 [ 286.463184][ T7837] genl_rcv_msg+0x60e/0x790 [ 286.468219][ T7837] netlink_rcv_skb+0x205/0x470 [ 286.473695][ T7837] genl_rcv+0x28/0x40 [ 286.478312][ T7837] netlink_unicast+0x82f/0x9e0 [ 286.483721][ T7837] netlink_sendmsg+0x805/0xb30 [ 286.489140][ T7837] __sock_sendmsg+0x219/0x270 [ 286.494358][ T7837] ____sys_sendmsg+0x505/0x830 [ 286.499685][ T7837] ___sys_sendmsg+0x21f/0x2a0 [ 286.504902][ T7837] __x64_sys_sendmsg+0x19b/0x260 [ 286.510383][ T7837] do_syscall_64+0xfa/0x3b0 [ 286.515425][ T7837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.521858][ T7837] [ 286.521858][ T7837] -> #1 (&nbd->config_lock){+.+.}-{4:4}: [ 286.529868][ T7837] lock_acquire+0x120/0x360 [ 286.534919][ T7837] __mutex_lock+0x182/0xe80 [ 286.540144][ T7837] refcount_dec_and_mutex_lock+0x30/0xa0 [ 286.547013][ T7837] nbd_config_put+0x2c/0x790 [ 286.552222][ T7837] nbd_release+0xfe/0x140 [ 286.557350][ T7837] bdev_release+0x533/0x650 [ 286.562598][ T7837] blkdev_release+0x15/0x20 [ 286.567725][ T7837] __fput+0x449/0xa70 [ 286.572243][ T7837] fput_close_sync+0x119/0x200 [ 286.577890][ T7837] __x64_sys_close+0x7f/0x110 [ 286.583184][ T7837] do_syscall_64+0xfa/0x3b0 [ 286.588394][ T7837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.594870][ T7837] [ 286.594870][ T7837] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 286.602721][ T7837] validate_chain+0xb9b/0x2140 [ 286.608211][ T7837] __lock_acquire+0xab9/0xd20 [ 286.613605][ T7837] lock_acquire+0x120/0x360 [ 286.618852][ T7837] __mutex_lock+0x182/0xe80 [ 286.623991][ T7837] __del_gendisk+0x129/0x9e0 [ 286.629246][ T7837] del_gendisk+0xe8/0x160 [ 286.634207][ T7837] nbd_dev_remove_work+0x47/0xe0 [ 286.639784][ T7837] process_scheduled_works+0xae1/0x17b0 [ 286.646132][ T7837] worker_thread+0x8a0/0xda0 [ 286.651338][ T7837] kthread+0x70e/0x8a0 [ 286.656395][ T7837] ret_from_fork+0x3fc/0x770 [ 286.661723][ T7837] ret_from_fork_asm+0x1a/0x30 [ 286.667383][ T7837] [ 286.667383][ T7837] other info that might help us debug this: [ 286.667383][ T7837] [ 286.677809][ T7837] Chain exists of: [ 286.677809][ T7837] &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock [ 286.677809][ T7837] [ 286.692192][ T7837] Possible unsafe locking scenario: [ 286.692192][ T7837] [ 286.700059][ T7837] CPU0 CPU1 [ 286.705609][ T7837] ---- ---- [ 286.711157][ T7837] rlock(&set->update_nr_hwq_lock); [ 286.716558][ T7837] lock(&nbd->config_lock); [ 286.723709][ T7837] lock(&set->update_nr_hwq_lock); [ 286.731565][ T7837] lock(&disk->open_mutex); [ 286.736202][ T7837] [ 286.736202][ T7837] *** DEADLOCK *** [ 286.736202][ T7837] [ 286.744648][ T7837] 3 locks held by kworker/u8:61/7837: [ 286.750053][ T7837] #0: ffff888142f00148 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 286.761262][ T7837] #1: ffffc9001ce8fbc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 286.773829][ T7837] #2: ffff88802579a188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 286.784080][ T7837] [ 286.784080][ T7837] stack backtrace: [ 286.790277][ T7837] CPU: 0 UID: 0 PID: 7837 Comm: kworker/u8:61 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 286.790309][ T7837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.790325][ T7837] Workqueue: nbd-del nbd_dev_remove_work [ 286.790364][ T7837] Call Trace: [ 286.790376][ T7837] [ 286.790386][ T7837] dump_stack_lvl+0x189/0x250 [ 286.790410][ T7837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.790429][ T7837] ? __pfx__printk+0x10/0x10 [ 286.790452][ T7837] ? print_lock_name+0xde/0x100 [ 286.790475][ T7837] print_circular_bug+0x2ee/0x310 [ 286.790498][ T7837] check_noncircular+0x134/0x160 [ 286.790522][ T7837] validate_chain+0xb9b/0x2140 [ 286.790546][ T7837] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 286.790570][ T7837] ? arch_stack_walk+0x11c/0x150 [ 286.790593][ T7837] __lock_acquire+0xab9/0xd20 [ 286.790612][ T7837] ? __del_gendisk+0x129/0x9e0 [ 286.790638][ T7837] lock_acquire+0x120/0x360 [ 286.790653][ T7837] ? __del_gendisk+0x129/0x9e0 [ 286.790675][ T7837] ? check_path+0x21/0x40 [ 286.790696][ T7837] __mutex_lock+0x182/0xe80 [ 286.790714][ T7837] ? __del_gendisk+0x129/0x9e0 [ 286.790738][ T7837] ? __del_gendisk+0x129/0x9e0 [ 286.790760][ T7837] ? __pfx___mutex_lock+0x10/0x10 [ 286.790777][ T7837] ? __pfx___might_resched+0x10/0x10 [ 286.790799][ T7837] ? __lock_acquire+0xab9/0xd20 [ 286.790814][ T7837] ? disk_del_events+0xb5/0x210 [ 286.790836][ T7837] ? __del_gendisk+0xc1/0x9e0 [ 286.790857][ T7837] __del_gendisk+0x129/0x9e0 [ 286.790878][ T7837] ? del_gendisk+0xe0/0x160 [ 286.790900][ T7837] ? __pfx___del_gendisk+0x10/0x10 [ 286.790923][ T7837] ? down_read+0x1ad/0x2e0 [ 286.790942][ T7837] del_gendisk+0xe8/0x160 [ 286.790964][ T7837] nbd_dev_remove_work+0x47/0xe0 [ 286.790984][ T7837] ? process_scheduled_works+0x9ef/0x17b0 [ 286.791003][ T7837] process_scheduled_works+0xae1/0x17b0 [ 286.791034][ T7837] ? __pfx_process_scheduled_works+0x10/0x10 [ 286.791059][ T7837] worker_thread+0x8a0/0xda0 [ 286.791089][ T7837] kthread+0x70e/0x8a0 [ 286.791112][ T7837] ? __pfx_worker_thread+0x10/0x10 [ 286.791130][ T7837] ? __pfx_kthread+0x10/0x10 [ 286.791153][ T7837] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.791178][ T7837] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.791193][ T7837] ? __pfx_kthread+0x10/0x10 [ 286.791215][ T7837] ret_from_fork+0x3fc/0x770 [ 286.791232][ T7837] ? __pfx_ret_from_fork+0x10/0x10 [ 286.791251][ T7837] ? __switch_to_asm+0x39/0x70 [ 286.791271][ T7837] ? __switch_to_asm+0x33/0x70 [ 286.791291][ T7837] ? __pfx_kthread+0x10/0x10 [ 286.791313][ T7837] ret_from_fork_asm+0x1a/0x30 [ 286.791342][ T7837] [ 286.792615][T12621] base_sock_release(ffff8880331b6600) sk=ffff888031d4f000 [ 287.031757][T12642] caif:caif_disconnect_client(): nothing to disconnect