last executing test programs: 3.508147044s ago: executing program 0 (id=3473): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$kcm(0x29, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) unshare(0x28000400) r2 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$sock_int(r2, 0x1, 0x22, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, 0x0, 0x20008000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r4, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0xb00, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 2.904341494s ago: executing program 2 (id=3478): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002540)={0x2, 0x2}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000985131eb5af76a46d96a5556f95ad08b5eae1aa28b1f1107d6328868e6db37794ec066a0f1fc637057d5ba9043947338fb5f30187c64c25cb78dd1caae4689f32bd1f78086f7626704c2c4cf65959a80aab5a6e11d0427b97ce42db6c49dbd6b8c20f84d92622079bb84e393935a44dd31a953e90e5b7861c4c6e1278808723eb7b673c618a7d4e8b043edce4bd686dcffc6206d1e3e31c72abaf27365509e61b6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB='\x00'/13], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x4) listen(r1, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x6c, r6, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0xd98467891cc0c680) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf2501000000080002000000000005000500000000000800030001000000480001800500020020000000060001000200000008000600030000000800"], 0x84}}, 0x20000000) 2.667677316s ago: executing program 2 (id=3480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x1) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000001c0)=0xc, 0x4) (async) connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async, rerun: 32) r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) (async, rerun: 32) connect$ax25(r4, &(0x7f0000000000)={{0x3, @default, 0x10000}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0xfffffffffffffd45, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r6], 0x20}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x7, 0x800, 0x401}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r8, 0x4}, &(0x7f00000002c0)=0x8) 2.136387088s ago: executing program 3 (id=3485): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{}, 0x0, 0x0}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000040)=0xb, 0x12) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1ee5e559b3699cc67f80000007000000000000006981128cab10ba4f62d88aae301633a70b3f8d7bf7a0be43b619990203071eb6872f7a052d0505ad51e2e5cbdaaca936341c29214ff3f481d3068e4b46154d65a079793734779b88c2f9b661bdbcd4ba7548e49593eb17ead409f6e507a1a34e77271ed227", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, 0x0}, 0x20) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) writev(r3, &(0x7f0000000080), 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x80800) sendmmsg$alg(r10, &(0x7f0000000240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x90}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r10, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001280)}}], 0x1, 0x200, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000003e000701feffffff00000000017c0000040042800c00018006000600800a00007b5bfd82d0c93723999edb3ca641a8bb84d63e84e649d2d7d775f410b5f3e7c7167b9fb90b4ed4501c4255de968f5353408cd2df56700e6ef08fba0af9079d59a6c77c51cf3077bbfd79653edde110eae8d252ea4986925d84316a5b7e6254eeffa24f11b62e2cb3de0d445689d3aaa3a66b817a41fd0e6e6bf61894f6c7d31bf9238b7632eb8791aca20b0d0de016d29b66300b33ee69272f019694a6cb77b2889e20"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)=r8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x40000001) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r7, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) 1.841144584s ago: executing program 4 (id=3486): r0 = socket$netlink(0x10, 0x3, 0x14) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f0000000080), 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffff, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8}, {{0x1, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) (async) write$nci(r8, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) (async) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000180)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb1, 0xf}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008021}, 0x4804) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 1.764222137s ago: executing program 0 (id=3487): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x24, 0x14, 0x65c28d33709e660d, 0x0, 0x0, {0x11, 0x36}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "91fabc0b03e55e3719"}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x800) 1.671196444s ago: executing program 3 (id=3489): r0 = socket$isdn(0x22, 0x2, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000000000000002000000ff00002004000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000007ccd38611da3c397f88362038937da953bc265f69170e76d4caeac2b30b4e7c5d64c8c4d987125dd87575d84fce02fce3ca9f682c78bd8f339c6d55513a73fa32fde493483a73a70cf6d7af09b993898fcd50102a988b5bb8e8e26d58fe5491d06e3a9ff3ff74f7756d783bc7d8ef8ed78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x24, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000200)={0x5c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x5c}}, 0x0) close(r0) 1.592498677s ago: executing program 4 (id=3490): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002540)={0x2, 0x2}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000985131eb5af76a46d96a5556f95ad08b5eae1aa28b1f1107d6328868e6db37794ec066a0f1fc637057d5ba9043947338fb5f30187c64c25cb78dd1caae4689f32bd1f78086f7626704c2c4cf65959a80aab5a6e11d0427b97ce42db6c49dbd6b8c20f84d92622079bb84e393935a44dd31a953e90e5b7861c4c6e1278808723eb7b673c618a7d4e8b043edce4bd686dcffc6206d1e3e31c72abaf27365509e61b6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB='\x00'/13], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x4) listen(r1, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x6c, r6, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0xd98467891cc0c680) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf2501000000080002000000000005000500000000000800030001000000480001800500020020000000060001000200000008000600030000000800"], 0x84}}, 0x20000000) 1.201273536s ago: executing program 2 (id=3491): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xf}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xf}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) (async) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}}, 0x0) (async) 1.200218109s ago: executing program 1 (id=3492): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000300016900000500030080ffffff0500030004e300000800020003"], 0x50}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x4480) 1.199401548s ago: executing program 3 (id=3493): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001780)={0x11c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x10b, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0x0, 0xa31e, 0x9}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000018c0)={0x150c, r1, 0x110, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x1450, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "5f20e437bb73af7faca8c345a791ba907602ac8b65164b8391325a71719ef0dfcd235ad2d2ccdc8628c01444cc60f6bd888924c2a264793a7cfae28bad8831182c426c178ab122628ec432a77461396703d21d1632cebb1175bb37db04419e5904408919a4dc8b80cba13910f19d1493a87dccc4d93236e220a3eff7b29332a7e3112af2c78f197c32357a662af3bf3aef0e05fe84103da8ca9f90c8690fda36b4249177895415aa67105d0135736e30ae4c06a3213d29fac461de5ebd6d4a9ae232b673a3bf1cea8c975a3104ac803b24750308a3155d6da42bb04ab302bb10bcb506b7a0b9106c0500f2885b141cc2eaa2cfc51e7b1f06346804693c0318b3282bc35bc49ec2d68c09e8e5fbaaa08ff7db49d7ff937cb30d2de569e536c9bbbbd89650628c3c015eded091a25be5595ff8ba2fd85b13c5c004a081d021b58a0ccf63bb27bb3b8461b7a3739bc54cf12dc34b96799d25b3dfb98718e28292a6106beba79ba259bded6c6e27ecf11f5d45f50007f60bdd8f1a99d66ec2176e4150be113d10bdb73996a4b9cbc28f72a71a830f904377aa376183faa26f6f9d123a09a726d236580cb7a30e6d4f9b720266cdccc2b14d488897600280cca0fe7eae9d7da0cd3fa4cc8ed73640a96f92495ddcd38a5f6e9b93abcdbd8839680e511223b152bb24ec5c22c14c2f788411c8c2053e939e667772bc875034ffb7b741bd46133a4dcea6a006bae25cfba10450b6d1dadaf818be464dfc96e2caf5593fb3b5562519ee5d543db4e0971841fcede9d542bf22e9c3e90ae122434b2d194ff344a3f6651c923c5a27cfd0baedc7f93e0c96f97bd40f0777d146bf9f9671ab1212fa0609281cd25ba2fe2ea99d1208a8bcf751bde726ebf048dee0c6ddd0ec80a0c8d2d4d39206502fdea2ceb9d5f6ca7581b4a28af83434792f6753f4a89fea869a994165da39fb932b6e04a9d7a0e4571fdaf48e48cec7ee7e12aeeef57642efe7709f3dcd142ad170f41ee133a6fc7a6156d20421c5707ecfe9d3dc17755b88ce9a1a78eacdc92534e77bf9a2fe5f18213562f8cdb6fcb38ab63f52bac5ec547dc8e7b411df831a8986a76ee7668dc4e9347776c96a02e519a0ca453ce7826d457e9914024adda82d9a8e4b307db4b7befa3a775c017feefe949ad352b9a2f08ce2793256c9e9fc6a7d5867f003f2c30ac1718422c6a55f910bd4d2a1f02502675a983daa9c1160b742693f2568875beaf99a85dc2900400be4647359cee03e0d5addf9e885cac0d9813cab362fe53acfa02de798530af0b0aec48344e1c62d30a86fde0f59ebd7edcb2ca0e5d662351d13366718b9f282ab0ef09750e80cd0febb7d4e4b363a36156b03cd4b3a6c42f7dd7c7ccce8ae003f330b8c2284650eb872148a3eb8692a499279468331f86a191112c5af4b50c3c8a457180bdc07073ef46cbb04845a0a20da51b1552193b9162f15303ca93f859a5526a6ed95030b65b7731c4257423925c2105c8e99c456f8a4ec34a8ad189b3067029c9c43a1660a791f27d37ec3cc1d7718ab9b14bfe1832b49f1a512503a316a3410a8ad4a05fd57901725298088bc8cacd92358c200dc60735784f799a7428137c37ed91ede8104e8f8da19dde0d82425616143a323fe3044a0e3f367ec0425ae55fb2a74883135bcc024f37bdac16a9c8b7d83ee5c27ab7c7fe5872b32978c619d4cf8e85c3b273c5339735cf0b155ac039ff9a50321bca3a33a3b7e1916db48d4b9ccdb3414ccb00e821d178ca30eede183ecf9e6c25bfc0cbe723198919d8621e66eb892035a77edfeabde7c32cc4e2fb9f03327e13382b489cc73d81dcec8462897107a2ab56ce344667ab079b8375a4ce910646137bb95e1b2d51122f99f27d1e92293f1121dd60171d34d83ac61a49afc5bc39c6d72ecddcf314e825dc9d37188683caa6bdf5ad0282ddac0d9d91c763672343a75cd5982270e992886d2e9c1a5c5077e767576a2629fc642d1cd68413391dcd8bc7b44fa5a07dc7472f7781a04332f0578629a6acdf0d16a5c8c9f59eeed7e49a3b9df86ca520ce5953d3d7ba28556b7c0e9271bf6e7e27400cb8706d353d356d6ad187c39b467d416c905d28038b25efeb68b2904fb589a52877f049e07abd542b448628d0dc83b679231c2491a298e31390c66aa4a1f63bd3d6cf848a3d6a53ac28fa6f02d8a8a23639e17c5c031e35f81cdeac4028843219b148195da0857a73239ccf267bae4854559deb2f7c9d675c2fa4e4adc1ea39b3f2358ca533ba504d8cc2152359bf1dac46c81a20399b80828777137da5128d40e1ff405427f6cc09c1c0310aec72fe77fc6b27941d7ebae9110b0c460335c38e3608385fcbdac6aaa1d24bafdd02e456e69abe29a9c55f7e34ec3bd2625538c1e938cdae5b75a4e6908adbb07223c9f6d354da3f4ead6d9bbdf0807520f99926f60953da362b62b176d1eb49e2a64acc44a6124b2d5d73ece87315a1a8c8bfa772a4875a336e2a29f997e90f1ff7d49a882a9792638e09102d83cdd68ce32d7f30fb4b1a541d50bb11f9391dce1abc55b8a64e1a5dffde28dfc0302e1dfdf36270397bcc9e1ee8602bb0969dd19648cf554e05cc9efd407b6b557e37f0ac9d266c846d798b925d382816c7fe36ebb2abd2591105c57961cf1d67700ce68683f0a7e5cb4cae5cd3abdb243e410f71ff01a36b7057f6d34d9a4e0837ec128806741ccafc3dea30fa74472c286d6832cfc5fb54aa519edd0c941ac8ff708807c8fea096606a63609c8e4c11ef40ca9821d60901cf5178f233aa93a30da95c7fb15bbe36bbfd72e60a3333d0616a17a956b7b30065b4521d82ba1b9cfbe7be1fb3114057ef3008a915283c9e139378eff8372922e7ca5a8af453c09676f615c5c0ae8017196f86fdc997189a38fe94e6470156eb23a075d01be32cd167a7451e2774d625eb8b4fbb5abfa0a36b76ab6f5a83cf983cf6f27e0a4122cc004c1786bec0bfaf3e7079e318850184364abba715b042911600127eb5ee0e92bb79f462cf996b66e34e6029158ab98c7a58b588cccde21431de6ad444e08a876466d5418bb059bcb910dd714661370d3ea39a5adc6c01f7fa78cb519d2a192bd9fa47a1e6c1fb87f9ee0bef1a89663fec492f95b41fc6bab69a05e3e323f55f9f846347e913d54955e748350bf56ad4adfa2c5ae7bdb6d5cad97c3ddf1b3e302674afeb379ccfeb60318f18c8349c574cc8faa26699bbfe8188f568274a14687085f8b1b1e17ff6c1433fff7194de9c56e919efbc93f35a56581ce4997797a90f59e83e0d4d1aaac569dbe88192c5182b5a4d8fda7c1ae86108d8b3a84322c645043f6b06cd3846f270652ca803e91bcb2043fc2136fb4731920e73034618df5ab33de92646bb9dab7a2d7329d7e737b08984a0c8783fb971314e4e41e54ae9ba9856a8fb3cf75de0cffd433470a1111545fd2e00e0fe5f89581e2decb1b6a5352f40278148e06f61760b2899b530e12a00e60a4dc92b0c9dcf577dbe37f0e64cd2dfb3966bf5920754f6d99fce5833a09f0662598c7f45914cca85cf4a0d92b0b07222cf0488a313a50a66a21647669d8ea77fa132e16a4cff0e9bbce30d8bd7c4d0b39117201c68e4e991f6736c03a93b2e1a87cae33f483a3573aa0537ec45a368db3b6adabf57c94e2717cd47f91317034ee5c04d805f17875e92ad2fb10fe96a00912ac40a1879b1fdebd4d14669cdf437a23fe010114d0b597068aa5001e0e6149ab14e04b6b89fc81a2bd041cdff9984fa7d31ef3e215a495656a94eeef5a7bc259eae1b44b0fca8fdf288a66065f7a13cbad52454d34e0794573cb16d3cdcabeec0803cdff34b36b2fe35eceff0d665e7c3da067f73f4c1169857fc5b1e73a5a3b9200e5b0df87cf867b47b4ef26b9c717870276062394bca1a45bc9a85e09212a34938667ece10f6f6473c465b1b4e8ec0fc731bdf06a790cb321160e5209e319cbadb4848ee29151312e9c5076a94c367c1e6b67ed8dcc5ebd2fb981c73073e6d043926906f316904d9e5d661fe5098e2409598c3f71d32560d7e7db2f23adbb5bbadb1ee304f932f046c89fa8bd09a4d2945831de1e947f03d41dc527fb6191226b153414c7cfe5f04f1491bc0a2b89e0ba45cd39d394fa1c4dfaba62da6c2052807490a19ebdc1b6ec4993c75822840770f242d7494fc20c8ddbaafc0fe6e6501c7a4ca0fe60b8d6307e1b128fde2ea17c1ceee665e7cdbcd90a02de9fcbc935185809ce72e98fdd00875efcf3c2dd372a14f994c4a5243516f03959b56c968d660f76db56dcc7b3b6b0287a3e1831102c29074acbac2bd9b8c5b96729c977f306df92707906cc1ac5c1246ff7e675c9948aaafc69c5115f95fcca4baf0f0c8f9d94bad58689b1e2f738a9e7edc93bda29585e1163e8b66a79a964894bd552195544aa33aa93389ccaafd1522a36dbd1ff8acc079ed2290badc316aae1ce7ca69923a6cbfd85ca403e68d0a7d0770fc417eeb98c4e682263b5a94b1f6fc0d834d636daafab50697aad7f6aee513671f95772ec068bc890bdc6eae033d16acfc4a9f78d61b5079dd77229baed7733e5e751304a023805ea5ed74e8d7c5c3af30eece7a6eb6807a4d2d9b8039b2d469fe829fb6eae64d75423cbefe2dabe4cacbfeb7524c324a3ceae9c1c4fb36c8119e9d2b44356559c5092ca897df3392b2134dd2c5ebab6fa8f8aa8b8d31fc6a506185afd1edf81e28b4be077a85fc9327876af446931cbf041591484228312c6970f06a3b74e92272e0dab9f96b30917fece6091443f21d24c292ede5b197238e51a4b133414acb64759b3d902da36430289868418af99f00458a8fd39bff7174b9a11011034975c42f9f9bf2f011ab647535780f5ada2deb5c0c11bc83028fde5e28d63764b83d0b0406189af8e9c0c922bd57655f100beb8d68565929d3d763d641cdbd6abf5350a71f43750b54e085550fd864411d11df63a72680a97a8e51bad54ba20797f6224f2cc931add074e981f5db99c0c6b268d406d5fb73afc42541db12d4c6e12e6af5b8946195f9a53d135631e5442b60d738011e59c0cd167cc9d51cc13c3a183b76894ab9672eb90db1f7164cc91c910bf8bd33e739c22a769a38aa8d92dd7ef26584a4dded7efa953fe1e7c7f0d2b59dbe4bdd41ad5cb3a272bf867db0fec4cac05efe74685e2e92bebf9de83ae1a79d10c1bd748f9c0ab0d971331808275ab5099547249e8cf03a7e82fcbd796be483e3a32a2a61cca559071abb592599558482f6a25a514067b173b26379721debb6d7bf032dbd9c578de91b6a27df4c42ac965999b10746cba1cd687c3a6d331bf7548dac5df212d5ecd6c3fb6129379f381abe3bd887a588019f1e32e6acbc9e8dcd17237826c147847f0914ac027d4fbe3542b4d9388a5cb06fe153f8f0275afbd228544339092803a2266ad218c47a16b4ace9e62f847c475b984f8b77bcb465590219846c3b88a78041adf1231681d348b7bb51831e9ce675518af6cfdd1a69ec27599014a58099225b262d2d4aa7beca56e3ac85300ec6f05575622910a7cd755bdc2070c2be90285e918bd0490a5c5b184c437122c3922bcdb7d634c73b704641d76f55bae6712ad8ce61a69beec56eadac956b034c824f103f0f5b32ce182770ec63f174ceb95624e5b4c43d825152054f30d121cc7016415cf5117e4c8827163d25b078cb7552dd798f73d2f74b96e0709c6f9d774b124ec3563b4712fb443c6aceeb1783d62a7555a7a"}, @ETHTOOL_A_BITSET_BITS={0x15c, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x58}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^,.]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '\n/\'/+}:\'!.#*%*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbf5c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '![*!-$]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, '@\xf8$(}-\\-$%\x95*+/-},$\\,\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':\'!.$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xd7#\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x64a38f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}]}, @ETHTOOL_A_BITSET_MASK={0x2f, 0x5, "bec5d6448c77427b95283e25ebc9d93e7a400803ebc8df3f1d9c87143a6d5b795196fce3036414e24fe4d1"}, @ETHTOOL_A_BITSET_VALUE={0x89, 0x4, "c2bbbcaec9499522026d991c32b68e3e86cd42432ef76958fe7d1377e7755286eceb3d1b4aad568969afe58d4cef3d341e5e8d164a7b9dbd0d6bf84e0a385e5adc8773f0187e538a49b74d90b1c84eb23393c10290c230ca8584b651329aee91edfdb1f022e7f94d0742b1ad51e47cd7bff42b450303f98cdcf3af64423f7f94445c40e92e"}, @ETHTOOL_A_BITSET_VALUE={0x86, 0x4, "ef64c1d54a7e6ac9b9d81b2d7e185a44767e952ccb7617ac606a54caa95a7769c6358cfc5c2a7240b8abce7b32dad530c88496ab61db4dda4dcc36548e9f1fcafeffb18f9d3e6a11c6c956f76181d94527f3d82567dd8098f0e51dea065c817f600b48b7fef47c528eda469ad4fe17c315927fc40c81389f6a70a0346f6bbd1ed432"}, @ETHTOOL_A_BITSET_MASK={0x27, 0x5, "864bb64c248133f3a8d5ba9d7449f1204948750e57d4138836c9e45d642b36c8ea6a52"}, @ETHTOOL_A_BITSET_MASK={0xde, 0x5, "ea1ea1b916f8ba12fffdc244aca59310e20719fc1b8dc6b23ea0c6f399a41899042c395a100ac16538f624a6d5888275f93171899d705867e651961255e829ec404bc74155868caa94dc0c631ffad4dccf57586e3621b5ca9e96dd8729f68f6c3e34f38f250f9c369e819e3a5eda4d0c5baac57f4a3641f66de99de2fcf233b8f04588bc25989397f70ca03b41bb1ec019635499f2d96aaa530b6a232a31a90d4451223f07d8dac0335342c22d6e78eed766a4341d2579b5bf04e20b37c7f7278167877b4c412257d6b596544c0fb5d902d716641ed38d9cc8d7"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x24, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x150c}, 0x1, 0x0, 0x0, 0x840}, 0x2400c004) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, r1, 0xb01, 0x70bd25}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa0, 0x1405, 0x102, 0x70bd26, 0x25dfdbfd, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x7, 0x1, 0x2}, {0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 1.198833696s ago: executing program 0 (id=3494): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001c005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) r1 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}}}}) 1.194747279s ago: executing program 1 (id=3495): unshare(0x400) r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$inet(r0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 1.190867631s ago: executing program 2 (id=3496): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES8=r0, @ANYBLOB="3b1e6da82608000300", @ANYRES32=r2, @ANYBLOB="04002e80"], 0x20}, 0x1, 0x0, 0x0, 0x4c010}, 0x24048010) 1.189014572s ago: executing program 4 (id=3497): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$kcm(0x29, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) unshare(0x28000400) r2 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$sock_int(r2, 0x1, 0x22, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, 0x0, 0x20008000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r4, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x1200, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 1.188611979s ago: executing program 0 (id=3498): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x15, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000039000000000000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000015000000b7030000000000008500000083000000bf0900000000000055090100bbe19bc19500000000000000851000000300000018310000040000000000000000000000f578f4ffffffffff85200000030000006753feff00000000bf91000000000000b7020000010000008500000085000000b70000000000000095000000000000000fe0cd03e6f3f93a9203925495dbbe331b1cf46af62f40d9dbac537c64230189eeff7e8f6cdd22633a874d472ba2bce82695024d5a3bb90ed7bc"], &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'blkio'}, {0x2b, 'cpuset'}, {0x2b, 'rlimit'}, {0x2d, 'rlimit'}, {0x2d, 'io'}]}, 0x23) 1.187446382s ago: executing program 1 (id=3499): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000440)={'veth0_to_bond\x00'}) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0xa3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x100000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100), 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x8000001, @mcast2, 0x4}}, 0x0, 0x0, 0xf, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r9, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r1, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x2400008c}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100d0000000bbdbdf250100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) socket$nl_generic(0x10, 0x3, 0x10) 1.146523803s ago: executing program 3 (id=3500): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x4, 0x8, 0xb, @empty, @mcast1, 0x8000, 0x8, 0x8e, 0x1}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000900)={'veth0_to_batadv\x00'}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000000f140100000002000000000000008ddaabf60d11000800010002000000080001be3b0000001100450069625f6d756c7469636173740000000008004500737270000800010000000000090045"], 0x50}}, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x9}) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x0, [0x529e, 0x7fffffff, 0x8]}, &(0x7f00000005c0)=0x44) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000140)) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1c8, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0xb, 0xe}, {0x6, 0xc5b377f61037765b}}, [@filter_kind_options=@f_flow={{0x9}, {0x188, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0x800}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x8003}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x14c, 0x9, 0x0, 0x1, [@m_ct={0xa4, 0x1b, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_ZONE={0x6, 0x4, 0xfffb}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @dev={0xac, 0x14, 0x14, 0x30}}]}, {0x64, 0x6, "effbbfbb9975b98b391b34602a99202c04f8aff0f475c3649e7f9024793790e685860edfb7d78570905ca6acc9165a1fb42c399f209c0f00a8f4866f081cd17e904ddc3210cc30ec49b70f2b1fb3ead1fe143d5356ac58b602d03fa75b270e66"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0xa4, 0x3, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x7, 0x6, 0x6, 0x4}, @multicast2, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x6, 0x2, 0x5, 0xff}, @remote, @rand_addr=0x64010100, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x3, 0x5, 0x5}, @rand_addr=0x64010102, @multicast1, 0xffffff00}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1b0ee}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x441d}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x3, 0xc, &(0x7f0000000c00)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r6, @ANYRES64=r0, @ANYRESOCT=r5], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r8}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="013d", 0x2}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x20000000, @remote, 0x5}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000380)="5bf26fda", 0x4}], 0x1}}], 0x3, 0x0) shutdown(r4, 0x1) 955.898515ms ago: executing program 0 (id=3501): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000006c80), &(0x7f0000006cc0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x400000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x208}, {r2, 0x8014}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x25dfdbff, {0x7, 0x0, 0x0, r6, 0x80, 0x801076469c94fa07}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x48080) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0xe000, @void}}}}}}}}, 0x32) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000015000100000000000000000305000000080001"], 0x1c}}, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000080), 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f00000005c0)={{r2}, "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"}) ioctl$TUNGETSNDBUF(r7, 0x800454d3, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 940.886783ms ago: executing program 1 (id=3502): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000100)) 843.902432ms ago: executing program 4 (id=3503): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20008884) (async) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010140)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x4c}}, 0x0) 686.319264ms ago: executing program 2 (id=3504): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) socketpair(0xb, 0x3, 0x3, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000240)=0x6, 0x4) r4 = socket(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2043}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000d80)=""/216, 0xd8}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f0000000040)=""/50, 0x32}], 0x5}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x9, 0x40010020, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001d0001"], 0x14}}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r9, 0x112, 0xf, &(0x7f0000000000)=0x2, &(0x7f0000000180)=0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000b40)=""/4096, 0x1000, 0x3) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd24, 0x8000, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xafcc, 0x7, 0xffffffffffffffff, 0x8, 0x8001}, 0x7, 0x1}, [{0xe205, 0x80000001, 0x9, 0x1842, 0x1, 0x8000}, {0xfffffff9, 0x8, 0x7, 0xb145, 0x4, 0x8}, {0x0, 0xf8d5, 0x1ff, 0x87, 0xa, 0x5}, {0xf, 0x7e7, 0x9, 0x7, 0x0, 0xa}, {0x1, 0x101, 0x5c78, 0xffffff56, 0xee, 0x8}, {0x3, 0x73, 0xb, 0x7, 0x2, 0x6}, {0x8, 0x5, 0x4, 0x4, 0x2, 0x8}, {0x1ff, 0x1, 0x2f, 0x7, 0x533f, 0x200}, {0x8, 0x4bd5, 0x5, 0x2, 0x2, 0xf8}, {0x2, 0x8, 0x4, 0x7, 0x32, 0x1000}, {0x6, 0x9, 0x0, 0x20000008, 0x6, 0x5}, {0x5, 0x9, 0x1, 0x10, 0x8, 0x4}, {0x4, 0x0, 0x3, 0x80000000, 0x2, 0x1}, {0x6, 0xfffff800, 0xbf, 0x1, 0xffffffff, 0x8}, {0x48a3, 0x3ff, 0x9, 0x6e, 0x3, 0x8}, {0x4, 0x200000, 0xaeb, 0x360, 0x2, 0x400}, {0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x8}, {0x5ad, 0xfaec, 0x401, 0x9, 0x8, 0x45}, {0x3, 0x9, 0x400, 0x3, 0x6, 0x5}, {0xde, 0x0, 0x5, 0x8000, 0x2, 0xffff}, {0x80, 0x3491, 0x83, 0x8001, 0x3, 0x165c}, {0x6d, 0x5, 0xf, 0xe, 0x8, 0xec}, {0x6, 0x1, 0xfffffffc, 0x5, 0xfffffffc, 0x81}, {0xcd0, 0x9, 0x6, 0x7fffffff, 0x80, 0xfffffff8}, {0x7, 0x3, 0x2b0, 0x5, 0x2, 0xd6}, {0x6, 0x3, 0x0, 0x2, 0xc4}, {0x0, 0x99, 0x200, 0x1b8, 0x4, 0x1}, {0x1cff, 0xc7a9, 0x25, 0xffffffff, 0x7, 0x2}, {0xff, 0x4, 0x7fff, 0x7, 0xfffffff9, 0xd46}, {0x7, 0x2, 0xec, 0x0, 0x8}, {0x3, 0x8, 0x0, 0x8, 0xebc, 0x8}, {0x3, 0xfe9, 0x1, 0x4, 0x0, 0x401}, {0x4, 0x8, 0xd, 0x7fff, 0xb, 0x87c}, {0x4a, 0x1000, 0x1, 0x81, 0x6063, 0x1}, {0xfffffe00, 0xe392, 0x0, 0x9, 0x3, 0x9}, {0x8, 0xff, 0x1, 0x101, 0x10000000, 0x4ac9}, {0x8, 0xffffffdb, 0x3, 0xe4c, 0x3, 0x2ca759d6}, {0x5, 0x4, 0x9, 0x2, 0x2, 0xfffffffa}, {0x0, 0x3, 0x4, 0x1, 0x10001, 0x9}, {0x5f21eb86, 0x1, 0x9, 0x40, 0x4, 0x9}, {0x55f, 0x8, 0x401, 0x5, 0x3, 0x40}, {0x7, 0x6, 0x7, 0x8000, 0x81}, {0x4, 0x9, 0x5, 0x6, 0x3, 0x2}, {0x100, 0x4, 0x7, 0x8, 0x66, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x2, 0x80000001}, {0x8, 0x6, 0x88, 0x9, 0x6, 0x1}, {0x7b, 0x74, 0x1, 0xd, 0x8, 0x7fff}, {0x69, 0xcd, 0x7f, 0xd, 0x200006, 0xf}, {0x9, 0x0, 0xe0e, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x4, 0xc9, 0x6, 0xfffffff7}, {0xb, 0x2, 0x5, 0x7fdf, 0x101, 0x1}, {0x3, 0x392, 0xb19, 0x1, 0x8d, 0x9}, {0xff, 0x5, 0xffff, 0x6972, 0x1, 0xfffffff9}, {0x6, 0x200, 0xb1, 0x1, 0x1000, 0x401}, {0x8, 0x54a0ee99, 0xfffffffa, 0x2, 0x99, 0x4}, {0x4, 0x2, 0xc979, 0x2, 0x4, 0x7ff}, {0xffffffff, 0x8, 0x7, 0x8, 0x7fffffff, 0x2b25}, {0x85, 0x4, 0xd55, 0xff, 0x0, 0x2}, {0x5, 0x2cfd091, 0x8, 0x9, 0x8, 0x3}, {0x0, 0x8, 0x1b89, 0x7, 0x5, 0x6}, {0x2887b03a, 0xc54, 0x3, 0x0, 0x5, 0x7}, {0x2ee, 0x2, 0x8, 0x7, 0x10001, 0x5}, {0x3, 0x6, 0xe, 0x8, 0x5}, {0x1000, 0x9, 0x6, 0x1, 0x40, 0x7}, {0x9, 0x7fff, 0x4, 0x0, 0x4, 0x10}, {0xffff0000, 0x7, 0x8, 0xe, 0x400, 0xfffff521}, {0x7, 0x6, 0xd65a, 0x2, 0x3, 0xffffff93}, {0x6, 0x7, 0xffffff7d, 0x5, 0x80000000, 0xfffffffc}, {0x7, 0x800, 0xc, 0x7fff, 0x2, 0x4}, {0x0, 0x6c0, 0x2, 0x3ff, 0x8, 0x7fd7}, {0x0, 0x8000010, 0xa52, 0x3, 0x4, 0xd91}, {0x0, 0x80000000, 0x400, 0x2, 0x6, 0x7}, {0x1, 0xad3, 0x9, 0x12000000, 0x7, 0x6}, {0x7, 0x6, 0x4, 0x5, 0x9, 0x9}, {0x9e2, 0x8, 0x5, 0x1, 0x400, 0x2}, {0x74863fbb, 0x5, 0xffc000, 0x401, 0xffffff8e, 0xfffffff8}, {0xa99b, 0x4, 0x4, 0x5, 0x4, 0xfffffffa}, {0x8001, 0x0, 0xfffffffe, 0x2, 0x0, 0x7}, {0x6, 0x7, 0x0, 0x7, 0x80000000, 0x50}, {0x0, 0x0, 0xc, 0x2, 0x3, 0x4}, {0x1ff, 0x4, 0xb5, 0x7, 0x1cec, 0x7f}, {0x5, 0x7, 0x9, 0x1, 0x7, 0x7}, {0x7, 0x2, 0x71e892ab, 0xe8, 0xfffffff8, 0x4}, {0x80000000, 0xb07, 0x1, 0x8, 0x6, 0x3}, {0x9, 0x2, 0x5, 0x2, 0x9, 0xe}, {0xfffffff5, 0x2, 0x0, 0x5, 0x4a3, 0x8}, {0x5, 0x9, 0x4, 0x10000, 0x3, 0x6}, {0x4, 0x3, 0xfff, 0x4, 0x4, 0x1}, {0x1, 0x6, 0x8, 0x4, 0x7, 0x40}, {0x80000001, 0x389, 0x6, 0x400, 0x5, 0x7fffffff}, {0x65, 0x7fffffff, 0x6, 0x6, 0xea8, 0x8}, {0xb, 0x0, 0x4, 0x33, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1, 0x8, 0xb49}, {0x1, 0xd, 0x1ff, 0x7, 0x9, 0x9}, {0xc98f, 0x2, 0x10004, 0x8, 0x6, 0xc2f}, {0x4, 0x80000000, 0xc, 0x100, 0xe961, 0xffffffff}, {0x1, 0x5, 0x8, 0x9, 0xff, 0x800}, {0x5, 0x6, 0x5, 0x77, 0x0, 0x8}, {0x5, 0x10000, 0x81, 0xb, 0x1ff, 0x5}, {0x1, 0x0, 0xfffffff8, 0xc0c, 0x6fa, 0x8c1}, {0x8, 0x80000000, 0x9, 0x8, 0x0, 0x7}, {0x4, 0x0, 0x2, 0x0, 0x100, 0x5}, {0x2, 0x10001, 0x1, 0x53da, 0x2, 0x8001}, {0x401, 0x68c, 0x9, 0x2, 0x8, 0x7}, {0x5, 0x80000001, 0x7f, 0x5, 0xb0e, 0xeb}, {0x6, 0xad2b, 0x1, 0x85, 0x101, 0x3ff}, {0x93, 0x7, 0x4, 0x99b, 0x5, 0x11aa729f}, {0x8, 0x3, 0x3, 0x4, 0x32a, 0x10001}, {0x5, 0x80000000, 0x6, 0x1000, 0xffffff81, 0x200}, {0xd4, 0x91000, 0x80, 0xc, 0x4, 0x2}, {0x10000, 0xfffffff4, 0x0, 0x1, 0x6, 0xe5}, {0x3, 0x100, 0x6, 0x2, 0x8, 0x1}, {0x1, 0xffff, 0x10001, 0x1ff, 0x3, 0xfffffff5}, {0x4, 0x7, 0xfffffffc, 0x6, 0x6, 0x2}, {0xf74f, 0xd, 0x0, 0x0, 0x3ff, 0x6}, {0xfff, 0xff, 0x3, 0x2, 0x8, 0xc}, {0x5, 0x9, 0x45, 0x1, 0x6, 0x1000}, {0x4, 0x0, 0x1ff, 0xb, 0xa, 0x1}, {0x5, 0x6, 0x6a5, 0x0, 0x7}, {0x0, 0x5, 0x7fffffff, 0x6, 0x9, 0x9}, {0x18152e2c, 0x5, 0x0, 0xff, 0x2, 0xffffffff}, {0x7554, 0xffffffff, 0x5, 0x1, 0xfffffffe, 0x6}, {0xef6, 0x7, 0x61a, 0x0, 0x4, 0x9}, {0x19, 0x10001, 0x3, 0x3, 0x0, 0xfff}, {0x8000007, 0x4000, 0x100, 0x10000}, {0x57b, 0x2, 0x10e, 0x80, 0x407, 0x5}, {0x9a, 0x5, 0x3, 0x0, 0x3, 0x7fff}, {0x2000000, 0x9, 0x7, 0x0, 0x2, 0x101}], [{0x3}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x3}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xe, 0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x3}, {0x5}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0xdcdcfc412ebb7d41}, {0x1, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x1}, {}, {0x5}, {0x4}, {0xbe9e5652533709fb}, {0x4}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xf8}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x4800) connect$bt_sco(r10, &(0x7f0000000280)={0x1f, @none}, 0x8) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 685.580446ms ago: executing program 3 (id=3505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x805, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) connect$tipc(r1, &(0x7f0000000000)=@id, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ac}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x34}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x3, 0x8200, 0x5, 0x10001}, &(0x7f00000000c0)=0x10) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x497}]}, @TIPC_NLA_LINK={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x48c4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xd, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe00, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 684.595536ms ago: executing program 4 (id=3506): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r3, 0x0, 0x0, 0x32, 0x0, 0x0) (async) recvfrom(r3, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) syz_emit_ethernet(0x76, &(0x7f0000000440)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x54, 0x0, @gue={{0x2, 0x0, 0x0, 0x40, 0x100}, "d5bc676b32782f94713b61f2b2d25f5708f988cd0ae423d11f5c6bfa77c6092cab993f100e6a63b6555a0436a55f4d5c32ebb5efaecd133b30b098956bb4bc340dbb3bca"}}}}}}, 0x0) recvfrom(r3, 0x0, 0x0, 0x40, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r1, 0x25, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r1, 0x25, 0x0, @val=@tcx={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x28, 0x14, 0x119, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "115aa5e9d0c8e22babc259d2ac"}]}, 0x28}}, 0x0) 549.642924ms ago: executing program 1 (id=3507): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) 536.992961ms ago: executing program 4 (id=3508): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r3, 0x0, 0x2000) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r4, 0xffffffffffffffff, 0x34}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r5, 0x0, 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000095) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000000010002", 0x7) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a00ac1e0001000000000000000000000000e000000100ff03000000000000000000f4fdbf"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 164.021661ms ago: executing program 3 (id=3509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket(0x2c, 0x80000, 0x7fff) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r3) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000001c00000cda2d0000007201310091e4417ca6c500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 112.469961ms ago: executing program 0 (id=3510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @broadcast}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0xff, 0x0, 0xff]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 70.85038ms ago: executing program 1 (id=3511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x29}}, 0x48}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0xb, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 0s ago: executing program 2 (id=3512): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='ip_vti0\x00'}) syz_emit_ethernet(0x42, &(0x7f0000000200)={@multicast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0xc, 0x11, 0x0, @empty, @empty, {[], {0x0, 0x4f22, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x5, 0x100, @void}}}}}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}}, 0x0) kernel console output (not intermixed with test programs): 02][T11251] pim6reg: entered promiscuous mode [ 259.259002][T11251] bond1: entered promiscuous mode [ 259.264856][T11251] bond2: entered promiscuous mode [ 259.270771][T11251] veth2: entered promiscuous mode [ 259.277058][T11251] veth3: entered promiscuous mode [ 259.283169][T11251] veth4: entered promiscuous mode [ 259.289189][T11251] veth5: entered promiscuous mode [ 259.294949][T11251] gre1: entered promiscuous mode [ 259.301772][T11251] macvlan2: entered promiscuous mode [ 259.307412][T11251] veth6: entered promiscuous mode [ 259.312629][T11251] veth7: entered promiscuous mode [ 259.318371][T11251] bridge1: entered promiscuous mode [ 259.323784][T11251] veth8: entered promiscuous mode [ 259.330268][T11251] veth9: entered promiscuous mode [ 259.335610][T11251] vxlan0: entered promiscuous mode [ 259.341308][T11251] macvlan3: left allmulticast mode [ 259.347296][T11251] bond3: entered promiscuous mode [ 259.352735][T11251] bond4: entered promiscuous mode [ 259.359757][T11251] bridge2: entered promiscuous mode [ 259.365435][T11251] bridge3: entered promiscuous mode [ 259.371706][T11251] bond5: entered promiscuous mode [ 259.377944][T11251] veth10: entered promiscuous mode [ 259.383355][T11251] veth11: entered promiscuous mode [ 259.388952][T11251] veth12: entered promiscuous mode [ 259.394272][T11251] veth13: entered promiscuous mode [ 259.399639][T11251] syztnl2: entered promiscuous mode [ 259.405521][T11251] bond6: entered promiscuous mode [ 259.411649][T11251] bond7: entered promiscuous mode [ 259.416897][T11251] bridge0: entered promiscuous mode [ 259.424247][T11251] syztnl1: entered promiscuous mode [ 259.429980][T11251] veth14: entered promiscuous mode [ 259.435264][T11251] veth15: entered promiscuous mode [ 259.442068][T11251] pimreg3: entered promiscuous mode [ 259.449286][T11251] sit1: entered promiscuous mode [ 259.455738][T11251] ip6erspan0: entered promiscuous mode [ 259.464643][T11251] macsec1: entered promiscuous mode [ 259.470675][T11251] bridge4: entered promiscuous mode [ 259.520860][ T6617] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.601029][ T6617] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.627195][ T6617] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.649211][ T6617] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.669093][T11294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1479'. [ 259.777516][ T6617] veth0_to_bond: left promiscuous mode [ 259.894610][T11315] delete_channel: no stack [ 259.982556][T11322] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 260.227824][T11335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.266628][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.433556][T11341] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1493'. [ 260.588890][T11352] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1494'. [ 260.598644][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1494'. [ 260.610152][T11352] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1494'. [ 260.619357][T11352] netlink: 'syz.0.1494': attribute type 2 has an invalid length. [ 260.630423][T11352] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1494'. [ 260.720518][T11357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.812947][T11357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.895413][T11357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.951136][T11369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.048713][T11374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1503'. [ 261.080984][T11377] tipc: Enabled bearer , priority 10 [ 261.104241][T11379] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1503'. [ 261.140165][T11377] netlink: 'syz.2.1505': attribute type 1 has an invalid length. [ 261.156783][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1505'. [ 261.283496][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.286213][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.422735][T11398] veth0: entered promiscuous mode [ 261.468922][T11401] netlink: 'syz.0.1511': attribute type 4 has an invalid length. [ 261.520492][T11407] netlink: 'syz.0.1511': attribute type 4 has an invalid length. [ 261.999723][ T5873] Bluetooth: hci1: command tx timeout [ 263.358150][T11511] netlink: 'syz.1.1532': attribute type 2 has an invalid length. [ 263.966010][T11557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.199748][T11564] __nla_validate_parse: 11 callbacks suppressed [ 264.199771][T11564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1546'. [ 264.208346][T11566] netlink: 'syz.4.1547': attribute type 30 has an invalid length. [ 264.238387][T11568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1546'. [ 264.286753][T11572] netlink: 'syz.4.1547': attribute type 30 has an invalid length. [ 264.316530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.420648][T11578] netlink: 'syz.3.1549': attribute type 2 has an invalid length. [ 264.520809][T11582] veth5: entered allmulticast mode [ 264.601705][T11593] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1554'. [ 264.629569][T11593] sctp: [Deprecated]: syz.3.1554 (pid 11593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.629569][T11593] Use struct sctp_sack_info instead [ 264.755672][T11595] IPVS: persistence engine module ip_vs_pe_À not found [ 264.862719][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1557'. [ 264.999957][T11613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1559'. [ 265.088311][T11618] bridge0: entered promiscuous mode [ 265.102550][T11618] bridge0: entered allmulticast mode [ 265.187966][T11630] atomic_op ffff888056b3a998 conn xmit_atomic 0000000000000000 [ 265.208367][T11630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1562'. [ 265.327337][T11630] 8021q: adding VLAN 0 to HW filter on device bond8 [ 265.411836][T11640] lo: entered promiscuous mode [ 265.430338][T11640] tunl0: entered promiscuous mode [ 265.448541][T11640] gre0: entered promiscuous mode [ 265.465791][T11640] gretap0: entered promiscuous mode [ 265.476634][T11640] erspan0: entered promiscuous mode [ 265.482668][T11640] ip_vti0: entered promiscuous mode [ 265.508750][T11646] 8021q: adding VLAN 0 to HW filter on device bond8 [ 265.515939][T11646] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 265.526231][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1566'. [ 265.539320][T11646] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 266.118903][T11682] netlink: 'syz.4.1574': attribute type 10 has an invalid length. [ 266.149772][T11682] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 266.172391][T11685] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1573'. [ 266.195171][T11687] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1577'. [ 266.369064][T11694] tipc: Enabling of bearer rejected, failed to enable media [ 266.409126][T11694] only policy match revision 0 supported [ 266.409149][T11694] unable to load match [ 267.189589][T11737] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1591'. [ 267.528867][T11752] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 267.572073][T11752] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 267.999771][T11781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.244981][T11783] netlink: 'syz.0.1609': attribute type 5 has an invalid length. [ 268.860786][T11827] tipc: Enabled bearer , priority 0 [ 268.881678][T11827] syzkaller0: entered promiscuous mode [ 268.894313][T11827] syzkaller0: entered allmulticast mode [ 268.991808][T11827] tipc: Resetting bearer [ 269.019881][T11825] tipc: Resetting bearer [ 269.072422][T11825] tipc: Disabling bearer [ 269.245341][T11847] __nla_validate_parse: 4 callbacks suppressed [ 269.245403][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1630'. [ 269.488439][T11863] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 269.570695][T11876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1636'. [ 269.692802][T11879] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1637'. [ 269.721481][T11879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1637'. [ 269.735948][T11881] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1638'. [ 269.738868][T11879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1637'. [ 269.936087][T11902] netlink: 'syz.3.1644': attribute type 11 has an invalid length. [ 269.959184][T11902] netlink: 'syz.3.1644': attribute type 11 has an invalid length. [ 269.982310][T11902] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1644'. [ 270.144451][T11917] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1645'. [ 270.181227][T11919] tipc: Enabling of bearer rejected, failed to enable media [ 270.393471][T11930] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1649'. [ 270.777069][T11954] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1656'. [ 270.981149][T11966] veth1_to_bond: mtu less than device minimum [ 271.398811][T11984] tipc: Enabling of bearer rejected, failed to enable media [ 272.401390][T12044] tipc: Enabled bearer , priority 0 [ 272.409363][T12044] syzkaller0: entered promiscuous mode [ 272.417551][T12044] syzkaller0: entered allmulticast mode [ 272.505026][T12039] tipc: Resetting bearer [ 272.548204][T12038] tipc: Resetting bearer [ 272.621633][T12038] tipc: Disabling bearer [ 272.725792][T12059] tipc: Enabling of bearer rejected, failed to enable media [ 272.796527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.104075][T12081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.623906][T12103] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.636977][T12103] team0: Port device bond3 added [ 274.121154][T12132] tipc: Enabling of bearer rejected, failed to enable media [ 274.965830][T12174] __nla_validate_parse: 30 callbacks suppressed [ 274.965851][T12174] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1717'. [ 275.012969][T12174] netlink: 'syz.4.1717': attribute type 1 has an invalid length. [ 275.145029][T12190] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1722'. [ 275.167199][T12190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1722'. [ 275.183485][T12190] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1722'. [ 275.205348][T12190] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1722'. [ 275.330853][T12202] netlink: 'syz.4.1728': attribute type 2 has an invalid length. [ 275.366517][T12202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1728'. [ 275.868117][T12239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1738'. [ 275.883513][T12239] nbd: nbd0 already in use [ 275.962349][T12244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1738'. [ 276.196983][T12254] openvswitch: netlink: EtherType 257 is less than min 600 [ 276.399514][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1746'. [ 276.527925][T12275] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 276.699205][T12286] netlink: 696 bytes leftover after parsing attributes in process `syz.4.1748'. [ 276.718147][T12286] netlink: 'syz.4.1748': attribute type 1 has an invalid length. [ 276.726226][T12286] netlink: 'syz.4.1748': attribute type 1 has an invalid length. [ 277.286926][T12310] netlink: 'syz.3.1758': attribute type 1 has an invalid length. [ 277.319639][T12310] netlink: 'syz.3.1758': attribute type 1 has an invalid length. [ 277.782731][T12320] syzkaller0: entered promiscuous mode [ 277.813512][T12320] syzkaller0: entered allmulticast mode [ 277.843482][T12327] tipc: Enabled bearer , priority 0 [ 278.012610][T12340] veth0_to_bond: left promiscuous mode [ 278.056405][T12340] veth0_to_bond: entered allmulticast mode [ 278.077708][T12318] tipc: Resetting bearer [ 278.107236][T12349] nbd: socks must be embedded in a SOCK_ITEM attr [ 279.388039][T12318] tipc: Disabling bearer [ 279.970988][T12408] syzkaller0: entered promiscuous mode [ 279.984250][T12408] syzkaller0: entered allmulticast mode [ 280.255725][T12414] __nla_validate_parse: 24 callbacks suppressed [ 280.255749][T12414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1791'. [ 280.280878][T12418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1792'. [ 280.576011][T12428] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1794'. [ 280.598005][T12428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1794'. [ 280.621046][T12428] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1794'. [ 280.645985][T12428] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1794'. [ 280.663185][T12434] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1798'. [ 280.673478][T12434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.677911][T12433] netlink: 'syz.2.1796': attribute type 13 has an invalid length. [ 280.810286][T12433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.829576][T12433] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.859729][T12433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.064117][T12449] netlink: 'syz.0.1802': attribute type 10 has an invalid length. [ 281.214791][T12453] tipc: Resetting bearer [ 281.777650][T11270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.904001][T12503] netem: change failed [ 282.057752][T11270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.136633][T12519] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1821'. [ 282.145732][T12519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1821'. [ 282.162052][T12519] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1821'. [ 282.364611][T12525] IPv6: sit3: Disabled Multicast RS [ 282.374152][T12525] sit3: entered allmulticast mode [ 282.763730][T12555] netlink: 'syz.3.1834': attribute type 6 has an invalid length. [ 282.941039][T12559] team0: Device ip6gre3 is of different type [ 283.065211][T12576] sch_fq: defrate 0 ignored. [ 283.131664][T12575] sctp: [Deprecated]: syz.0.1842 (pid 12575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.131664][T12575] Use struct sctp_sack_info instead [ 283.300207][T12593] bond0: (slave bridge_slave_1): Releasing backup interface [ 283.346167][T12593] bond0: (slave bond_slave_0): Releasing backup interface [ 283.379306][T12593] bond0: (slave bond_slave_1): Releasing backup interface [ 283.422873][T12593] team0: Port device team_slave_0 removed [ 283.439691][T12593] team0: Port device team_slave_1 removed [ 283.450222][T12593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.459057][T12593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.470971][T12593] bond3: (slave bond4): Releasing backup interface [ 283.484757][T12593] bond7: (slave bridge0): Releasing active interface [ 283.521555][T12608] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 283.552954][T12609] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 284.042638][T12644] netlink: 'syz.3.1861': attribute type 2 has an invalid length. [ 285.018099][T12682] Unsupported xt match [ 285.018123][T12682] unable to load match [ 285.029465][T12682] !€ÿ: renamed from bond_slave_0 (while UP) [ 285.294675][T12702] __nla_validate_parse: 22 callbacks suppressed [ 285.294698][T12702] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1879'. [ 285.326811][T12702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1879'. [ 285.369701][T12702] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1879'. [ 285.389855][T12702] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1879'. [ 285.588675][T12718] veth19: entered allmulticast mode [ 285.680255][T12721] tipc: Enabled bearer , priority 0 [ 285.689336][T12721] syzkaller0: entered promiscuous mode [ 285.694959][T12721] syzkaller0: entered allmulticast mode [ 285.713883][T12721] tipc: Resetting bearer [ 285.729312][T12720] tipc: Resetting bearer [ 285.748560][T12720] tipc: Disabling bearer [ 285.873852][T12728] tap0: tun_chr_ioctl cmd 1074025677 [ 285.882024][T12728] tap0: linktype set to 65534 [ 286.181835][T12745] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1892'. [ 286.207218][T12745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1892'. [ 286.228878][T12745] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1892'. [ 286.252022][T12745] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1892'. [ 286.431265][T12752] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1896'. [ 286.461330][T12754] netlink: 'syz.2.1895': attribute type 33 has an invalid length. [ 286.482154][T12752] netlink: 'syz.3.1896': attribute type 9 has an invalid length. [ 286.666228][T12767] netlink: 'syz.2.1902': attribute type 11 has an invalid length. [ 286.679507][T12768] veth0: entered promiscuous mode [ 286.763160][T12760] veth0: left promiscuous mode [ 287.065281][T12786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1905'. [ 287.352474][T12802] syzkaller1: entered promiscuous mode [ 287.369257][T12802] syzkaller1: entered allmulticast mode [ 287.645217][T12826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.670547][T12826] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 288.066522][T12853] netlink: 'syz.1.1930': attribute type 2 has an invalid length. [ 288.195686][T12863] netlink: 'syz.3.1931': attribute type 1 has an invalid length. [ 288.232740][T12861] tipc: Enabled bearer , priority 0 [ 288.241892][T12861] syzkaller0: entered promiscuous mode [ 288.253762][T12861] syzkaller0: entered allmulticast mode [ 288.277231][T12861] tipc: Resetting bearer [ 288.298636][T12860] tipc: Resetting bearer [ 288.359469][T12860] tipc: Disabling bearer [ 289.051694][T12918] veth11: entered allmulticast mode [ 289.079904][T12918] netlink: 'syz.3.1951': attribute type 2 has an invalid length. [ 289.324303][T12937] netlink: 'syz.3.1954': attribute type 1 has an invalid length. [ 289.363595][T12938] tipc: Enabled bearer , priority 10 [ 289.436483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.803895][T12962] netlink: 'syz.3.1962': attribute type 10 has an invalid length. [ 289.815031][T12962] bond0: (slave wlan1): Opening slave failed [ 290.286788][T12980] tipc: Enabling of bearer rejected, failed to enable media [ 290.368701][T12985] __nla_validate_parse: 24 callbacks suppressed [ 290.368726][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1967'. [ 290.416753][T12985] netlink: 'syz.1.1967': attribute type 4 has an invalid length. [ 290.470709][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1967'. [ 290.803085][T12995] syzkaller0: entered promiscuous mode [ 290.809832][T12995] syzkaller0: entered allmulticast mode [ 290.827754][T13006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1973'. [ 290.842532][T13006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1973'. [ 290.852661][T13006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1973'. [ 290.862768][T13006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1973'. [ 291.053958][T13012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1976'. [ 291.185974][T13017] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 292.530413][T13034] syzkaller0: entered promiscuous mode [ 292.564365][T13034] syzkaller0: entered allmulticast mode [ 292.655029][T13048] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1986'. [ 292.686012][T13048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1986'. [ 292.709623][T13049] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1987'. [ 293.178136][T13078] netlink: 'syz.2.1993': attribute type 16 has an invalid length. [ 293.264561][T13078] netlink: 'syz.2.1993': attribute type 17 has an invalid length. [ 293.303813][T13078] lo: left promiscuous mode [ 293.426079][T13078] tunl0: left promiscuous mode [ 293.480711][T13078] gre0: left promiscuous mode [ 293.522090][T13078] gretap0: left promiscuous mode [ 293.644903][T13078] erspan0: left promiscuous mode [ 293.653244][T13078] ip_vti0: left promiscuous mode [ 293.660632][T13078] ip6_vti0: left promiscuous mode [ 293.669081][T13078] sit0: left promiscuous mode [ 293.674888][T13078] ip6tnl0: left promiscuous mode [ 293.691000][T13078] ip6gre0: left promiscuous mode [ 293.794903][T13078] ip6gretap0: left promiscuous mode [ 293.864167][T13078] vcan0: left promiscuous mode [ 293.869771][T13078] bond0: left promiscuous mode [ 293.875962][T13078] team0: left promiscuous mode [ 293.884176][T13078] dummy0: left promiscuous mode [ 293.890623][T13078] nlmon0: left promiscuous mode [ 293.903295][T13078] caif0: left promiscuous mode [ 293.909125][T13078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.140418][T13099] macvtap0: mtu less than device minimum [ 294.177299][T13104] macvtap0: mtu less than device minimum [ 294.498855][T13122] netlink: 'syz.4.2004': attribute type 17 has an invalid length. [ 294.523053][T13124] netlink: 'syz.0.2005': attribute type 1 has an invalid length. [ 294.566852][T13124] netlink: 'syz.0.2005': attribute type 1 has an invalid length. [ 294.863335][T13136] veth1_to_bond: entered allmulticast mode [ 294.908133][T13139] veth1_to_bond: left allmulticast mode [ 295.262374][T13154] ip6gre3: entered allmulticast mode [ 295.297913][T13161] IPv6: NLM_F_CREATE should be specified when creating new route [ 295.385852][T13125] mpoa:mpoad_close: () going down [ 295.478375][T13167] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1536) ! [ 295.512596][ T12] tipc: Subscription rejected, illegal request [ 295.566800][T13168] __nla_validate_parse: 13 callbacks suppressed [ 295.566823][T13168] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2018'. [ 295.671003][T13173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.717023][T11281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.970337][T13193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2029'. [ 295.984544][T13193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2029'. [ 296.356116][T13219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2038'. [ 296.359666][T13214] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2037'. [ 296.368669][T13219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2038'. [ 296.387660][T13219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2038'. [ 296.405343][T13219] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 296.418021][T13219] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 296.537195][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2041'. [ 296.557086][T11281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.566730][T13225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2041'. [ 296.606762][T13229] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2042'. [ 296.755832][T13242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.785079][T13245] netlink: 'syz.4.2047': attribute type 29 has an invalid length. [ 296.795481][T13245] netlink: 'syz.4.2047': attribute type 29 has an invalid length. [ 296.812934][T13245] netlink: 'syz.4.2047': attribute type 29 has an invalid length. [ 296.823348][T13245] netlink: 'syz.4.2047': attribute type 29 has an invalid length. [ 296.838313][T13245] netlink: 'syz.4.2047': attribute type 29 has an invalid length. [ 297.378950][T13277] bond3: entered promiscuous mode [ 297.384227][T13277] bond3: entered allmulticast mode [ 297.390230][T13277] 8021q: adding VLAN 0 to HW filter on device bond3 [ 297.625229][T13292] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 298.134722][T13316] syzkaller0: entered promiscuous mode [ 298.157102][T13316] syzkaller0: entered allmulticast mode [ 299.436635][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.641807][T13343] validate_nla: 1 callbacks suppressed [ 299.641829][T13343] netlink: 'syz.0.2074': attribute type 1 has an invalid length. [ 299.747624][T13343] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.830414][T13347] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.842180][T13347] bond4: (slave vxcan4): The slave device specified does not support setting the MAC address [ 299.855573][T13347] bond4: (slave vxcan4): Error -95 calling set_mac_address [ 299.883264][T13357] tipc: Enabling of bearer rejected, failed to enable media [ 299.893117][T13349] netlink: 'syz.3.2077': attribute type 10 has an invalid length. [ 299.893987][T13362] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 299.943599][T13354] netlink: 'syz.3.2077': attribute type 10 has an invalid length. [ 300.162407][T13368] netlink: 'syz.4.2083': attribute type 1 has an invalid length. [ 300.265424][T13383] netlink: 'syz.3.2087': attribute type 1 has an invalid length. [ 300.289101][T13376] bond8: (slave bridge4): making interface the new active one [ 300.305141][T13376] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 300.329092][T13383] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 300.565090][T13398] netlink: 'syz.0.2094': attribute type 7 has an invalid length. [ 300.589235][T13398] netlink: 'syz.0.2094': attribute type 8 has an invalid length. [ 300.610532][T13398] __nla_validate_parse: 9 callbacks suppressed [ 300.610552][T13398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2094'. [ 300.670807][T13404] syzkaller1: entered promiscuous mode [ 300.677151][T13404] syzkaller1: entered allmulticast mode [ 300.805022][T13397] netlink: 'syz.2.2091': attribute type 83 has an invalid length. [ 300.840074][T13414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2097'. [ 300.931557][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2097'. [ 300.953716][T13420] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2100'. [ 300.970231][T13420] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2100'. [ 300.977713][T13422] netlink: 'syz.1.2097': attribute type 4 has an invalid length. [ 301.017502][T13420] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2100'. [ 301.034071][T13420] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2100'. [ 301.195932][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2100'. [ 301.524434][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2107'. [ 301.539385][T13449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2107'. [ 301.711167][T13454] xfrm0: left promiscuous mode [ 301.918393][T13468] netlink: 'syz.3.2113': attribute type 1 has an invalid length. [ 302.223374][T13493] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 306.442534][T13547] __nla_validate_parse: 6 callbacks suppressed [ 306.442558][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2137'. [ 306.908857][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2144'. [ 306.950344][T13573] netlink: 'syz.0.2144': attribute type 1 has an invalid length. [ 306.975856][T13576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2145'. [ 307.033454][T13577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 307.063999][T13579] netlink: 'syz.3.2146': attribute type 30 has an invalid length. [ 307.079234][T13570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2144'. [ 307.182545][T13584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.287462][T13591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.356450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.384040][T13584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.498727][T13600] netlink: 'syz.0.2150': attribute type 10 has an invalid length. [ 307.509500][T13600] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2150'. [ 307.523058][T13600] dummy0: entered promiscuous mode [ 307.530623][T13600] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 307.664939][T13610] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2153'. [ 307.688006][T13610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2153'. [ 307.719850][T13610] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2153'. [ 307.738765][T13610] netlink: 'syz.1.2153': attribute type 3 has an invalid length. [ 307.747308][T13610] netlink: 'syz.1.2153': attribute type 2 has an invalid length. [ 307.755102][T13610] netlink: 31 bytes leftover after parsing attributes in process `syz.1.2153'. [ 307.953363][T13631] netlink: 'syz.1.2161': attribute type 29 has an invalid length. [ 308.409779][T13660] netlink: 'syz.4.2167': attribute type 3 has an invalid length. [ 308.472448][T13663] netlink: 'syz.2.2170': attribute type 3 has an invalid length. [ 308.542218][T13664] syzkaller1: entered promiscuous mode [ 308.563059][T13664] syzkaller1: entered allmulticast mode [ 308.710343][T13672] netlink: 'syz.2.2173': attribute type 12 has an invalid length. [ 308.795419][T13672] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 309.243091][T13694] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 309.829401][ T6511] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 309.853765][ T6511] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.879971][ T6511] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.902858][ T6511] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.014695][T13734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.072910][T13735] vlan2: entered promiscuous mode [ 310.091800][T13735] vlan2: entered allmulticast mode [ 310.109234][T13735] hsr_slave_1: entered allmulticast mode [ 310.219669][T13747] tipc: Enabling of bearer rejected, failed to enable media [ 310.663245][T13779] netlink: 'syz.4.2201': attribute type 2 has an invalid length. [ 310.751392][T13783] tipc: Resetting bearer [ 310.761682][T13783] tipc: Resetting bearer [ 310.797691][T13783] gretap0: entered promiscuous mode [ 310.836090][T13785] 0ªî{X¹¦: renamed from gretap0 [ 310.872776][T13785] tipc: Disabling bearer [ 310.892058][T13785] 0ªî{X¹¦: left promiscuous mode [ 310.898680][T13785] 0ªî{X¹¦: entered allmulticast mode [ 310.905191][T13785] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 311.003038][T13792] syzkaller0: entered promiscuous mode [ 311.012535][T13792] syzkaller0: entered allmulticast mode [ 311.057798][T13794] veth1_to_bond: entered promiscuous mode [ 311.072952][T13801] sctp: [Deprecated]: syz.0.2206 (pid 13801) Use of struct sctp_assoc_value in delayed_ack socket option. [ 311.072952][T13801] Use struct sctp_sack_info instead [ 311.103420][T13798] nbd1: detected capacity change from 0 to 549764202496 [ 311.507019][T13818] bond0: Device is already in use. [ 311.683916][T13835] tipc: Enabling of bearer rejected, failed to enable media [ 311.769035][ T5873] block nbd1: Receive control failed (result -32) [ 312.074759][T13849] __nla_validate_parse: 23 callbacks suppressed [ 312.074781][T13849] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2217'. [ 312.146034][T13849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2217'. [ 312.178831][T13849] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2217'. [ 312.203561][T13849] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2217'. [ 312.220247][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2219'. [ 312.409146][T13868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2223'. [ 312.564908][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2224'. [ 312.588838][T13882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2227'. [ 312.589558][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2224'. [ 312.613228][T13882] validate_nla: 3 callbacks suppressed [ 312.613250][T13882] netlink: 'syz.2.2227': attribute type 21 has an invalid length. [ 312.628722][T13882] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2227'. [ 312.639181][T13882] netlink: 'syz.2.2227': attribute type 1 has an invalid length. [ 312.739402][T13888] netlink: 'syz.2.2230': attribute type 1 has an invalid length. [ 312.849148][T13894] tipc: Enabling of bearer rejected, failed to enable media [ 313.333925][T13921] ip6erspan0: entered promiscuous mode [ 313.355538][T13923] ip6gre2: entered allmulticast mode [ 313.470940][T13933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.881478][T13969] tipc: Enabling of bearer rejected, failed to enable media [ 314.069346][T13975] netlink: 'syz.2.2251': attribute type 1 has an invalid length. [ 314.174460][T13975] 8021q: adding VLAN 0 to HW filter on device bond9 [ 314.258132][T13975] vlan2: entered allmulticast mode [ 314.263519][T13975] veth1: entered allmulticast mode [ 314.326960][T13997] netlink: zone id is out of range [ 314.358621][T13997] netlink: zone id is out of range [ 314.380229][T13997] netlink: zone id is out of range [ 314.400890][T13997] netlink: zone id is out of range [ 314.412994][T13997] netlink: zone id is out of range [ 314.436710][T13997] netlink: zone id is out of range [ 314.442120][T13997] netlink: zone id is out of range [ 314.447542][T13997] netlink: zone id is out of range [ 314.458203][T13997] netlink: zone id is out of range [ 314.702638][T14016] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 314.719329][T14016] team0: Device macvtap2 is already an upper device of the team interface [ 315.041809][T14033] ip6gretap0: entered promiscuous mode [ 315.064724][T14034] netlink: 'syz.4.2266': attribute type 1 has an invalid length. [ 315.113466][T14034] netlink: 'syz.4.2266': attribute type 1 has an invalid length. [ 315.147342][T14040] tipc: Enabling of bearer rejected, failed to enable media [ 315.196916][ T7009] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.235569][ T7009] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.260567][ T7009] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.277740][ T7009] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.712667][T14076] netlink: 'syz.4.2276': attribute type 10 has an invalid length. [ 315.734525][T14076] bond0: (slave wlan1): Opening slave failed [ 316.132534][T14107] IPv6: sit1: Disabled Multicast RS [ 316.142418][T14107] sit1: entered allmulticast mode [ 316.151587][T14109] netlink: 'syz.4.2284': attribute type 1 has an invalid length. [ 316.516119][T14135] tipc: Enabling of bearer rejected, failed to enable media [ 317.215204][T14180] __nla_validate_parse: 20 callbacks suppressed [ 317.215226][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2301'. [ 317.259096][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2301'. [ 317.691650][T14217] tipc: Enabling of bearer rejected, failed to enable media [ 318.145520][T14244] delete_channel: no stack [ 318.291158][T14250] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2320'. [ 318.370239][T14256] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2323'. [ 318.512364][T14264] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 318.533759][T14267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2326'. [ 318.590422][T14264] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 319.299425][T14286] tipc: Enabling of bearer rejected, failed to enable media [ 319.353226][T14288] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2331'. [ 319.417077][T14288] 8021q: VLANs not supported on gre0 [ 320.165246][T14332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2340'. [ 320.212952][T14337] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2341'. [ 320.282739][T14340] net_ratelimit: 221 callbacks suppressed [ 320.282763][T14340] openvswitch: netlink: Multiple metadata blocks provided [ 320.337157][T14337] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2341'. [ 320.428802][T14346] team0: Device vti0 is of different type [ 320.521160][T14348] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2344'. [ 320.700826][T14362] tipc: Enabling of bearer rejected, failed to enable media [ 320.980879][T14381] netlink: 'syz.1.2354': attribute type 12 has an invalid length. [ 321.122390][T14385] netlink: 'syz.4.2355': attribute type 7 has an invalid length. [ 322.720624][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.356762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.455449][T14400] __nla_validate_parse: 5 callbacks suppressed [ 342.455474][T14400] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2361'. [ 342.476137][T14405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2359'. [ 342.488477][T14400] openvswitch: netlink: Flow key attr not present in new flow. [ 342.507474][T14408] netlink: 404 bytes leftover after parsing attributes in process `syz.3.2362'. [ 342.522176][T14408] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2362'. [ 342.540470][T14411] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2360'. [ 342.544203][T14408] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2362'. [ 342.551748][T14411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2360'. [ 342.580142][T14408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2362'. [ 342.608932][T14411] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2360'. [ 342.630915][T14408] netlink: 404 bytes leftover after parsing attributes in process `syz.3.2362'. [ 342.706745][T14413] nbd: must specify a size in bytes for the device [ 342.890238][T14425] netlink: 'syz.2.2368': attribute type 23 has an invalid length. [ 342.907264][T14425] syzkaller1: entered promiscuous mode [ 342.915032][T14425] syzkaller1: entered allmulticast mode [ 342.954992][T14428] tipc: Enabling of bearer rejected, failed to enable media [ 343.026672][T14431] netlink: 'syz.4.2370': attribute type 22 has an invalid length. [ 343.207773][T14431] netlink: 'syz.4.2370': attribute type 22 has an invalid length. [ 343.374234][T14450] tipc: Can't bind to reserved service type 0 [ 343.824023][T14475] lo: left promiscuous mode [ 343.840088][T14475] tunl0: left promiscuous mode [ 343.849513][T14475] gre0: left promiscuous mode [ 343.882431][T14475] gretap0: left promiscuous mode [ 343.892577][T14475] erspan0: left promiscuous mode [ 343.900237][T14475] ip_vti0: left promiscuous mode [ 343.911112][T14475] dummy0: left promiscuous mode [ 343.917941][T14475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.068543][T14480] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 344.079048][T14480] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 344.137619][T14497] FAULT_INJECTION: forcing a failure. [ 344.137619][T14497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.165797][T14497] CPU: 1 UID: 0 PID: 14497 Comm: syz.4.2387 Not tainted syzkaller #0 PREEMPT(full) [ 344.165828][T14497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 344.165855][T14497] Call Trace: [ 344.165864][T14497] [ 344.165874][T14497] dump_stack_lvl+0x189/0x250 [ 344.165906][T14497] ? __pfx____ratelimit+0x10/0x10 [ 344.165937][T14497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.165963][T14497] ? __pfx__printk+0x10/0x10 [ 344.166002][T14497] ? __might_fault+0xb0/0x130 [ 344.166045][T14497] should_fail_ex+0x414/0x560 [ 344.166079][T14497] _copy_from_user+0x2d/0xb0 [ 344.166105][T14497] ___sys_sendmsg+0x158/0x2a0 [ 344.166131][T14497] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.166196][T14497] ? __fget_files+0x2a/0x420 [ 344.166232][T14497] ? __fget_files+0x3a0/0x420 [ 344.166276][T14497] __x64_sys_sendmsg+0x19b/0x260 [ 344.166300][T14497] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.166333][T14497] ? __pfx_ksys_write+0x10/0x10 [ 344.166360][T14497] ? rcu_is_watching+0x15/0xb0 [ 344.166387][T14497] ? do_syscall_64+0xbe/0x3b0 [ 344.166423][T14497] do_syscall_64+0xfa/0x3b0 [ 344.166452][T14497] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.166479][T14497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.166500][T14497] ? clear_bhb_loop+0x60/0xb0 [ 344.166526][T14497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.166547][T14497] RIP: 0033:0x7fab3578ebe9 [ 344.166567][T14497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.166586][T14497] RSP: 002b:00007fab3662f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.166610][T14497] RAX: ffffffffffffffda RBX: 00007fab359b5fa0 RCX: 00007fab3578ebe9 [ 344.166626][T14497] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 344.166639][T14497] RBP: 00007fab3662f090 R08: 0000000000000000 R09: 0000000000000000 [ 344.166651][T14497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.166663][T14497] R13: 00007fab359b6038 R14: 00007fab359b5fa0 R15: 00007ffdbc22c6d8 [ 344.166698][T14497] [ 344.484199][T14503] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 344.542657][T14514] tipc: Enabling of bearer rejected, failed to enable media [ 345.108280][T14551] netlink: 'syz.4.2397': attribute type 21 has an invalid length. [ 345.130619][T14551] netlink: 'syz.4.2397': attribute type 6 has an invalid length. [ 345.631407][T14580] netlink: 'syz.1.2406': attribute type 2 has an invalid length. [ 345.641239][T14580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.250780][T14615] openvswitch: netlink: IPv4 tun info is not correct [ 346.393681][T14625] tipc: Enabled bearer , priority 0 [ 346.408300][T14627] tipc: Enabling of bearer rejected, already enabled [ 346.502614][T14627] syzkaller0: mtu less than device minimum [ 346.509847][T14629] syzkaller0: mtu less than device minimum [ 346.641023][T14640] sctp: [Deprecated]: syz.3.2428 (pid 14640) Use of int in maxseg socket option. [ 346.641023][T14640] Use struct sctp_assoc_value instead [ 346.667139][T14643] FAULT_INJECTION: forcing a failure. [ 346.667139][T14643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.684495][T14643] CPU: 1 UID: 0 PID: 14643 Comm: syz.2.2429 Not tainted syzkaller #0 PREEMPT(full) [ 346.684526][T14643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.684539][T14643] Call Trace: [ 346.684548][T14643] [ 346.684557][T14643] dump_stack_lvl+0x189/0x250 [ 346.684587][T14643] ? __pfx____ratelimit+0x10/0x10 [ 346.684619][T14643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.684645][T14643] ? __pfx__printk+0x10/0x10 [ 346.684676][T14643] ? __might_fault+0xb0/0x130 [ 346.684719][T14643] should_fail_ex+0x414/0x560 [ 346.684762][T14643] _copy_from_iter+0x1db/0x16f0 [ 346.684788][T14643] ? rcu_is_watching+0x15/0xb0 [ 346.684811][T14643] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 346.684843][T14643] ? __pfx__copy_from_iter+0x10/0x10 [ 346.684865][T14643] ? __build_skb_around+0x257/0x3e0 [ 346.684901][T14643] ? netlink_sendmsg+0x642/0xb30 [ 346.684931][T14643] ? skb_put+0x11b/0x210 [ 346.684965][T14643] netlink_sendmsg+0x6b2/0xb30 [ 346.685008][T14643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.685043][T14643] ? aa_sock_msg_perm+0xf1/0x1d0 [ 346.685079][T14643] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 346.685102][T14643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.685134][T14643] __sock_sendmsg+0x21c/0x270 [ 346.685165][T14643] ____sys_sendmsg+0x505/0x830 [ 346.685192][T14643] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.685222][T14643] ? import_iovec+0x74/0xa0 [ 346.685249][T14643] ___sys_sendmsg+0x21f/0x2a0 [ 346.685274][T14643] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.685335][T14643] ? __fget_files+0x2a/0x420 [ 346.685366][T14643] ? __fget_files+0x3a0/0x420 [ 346.685408][T14643] __x64_sys_sendmsg+0x19b/0x260 [ 346.685434][T14643] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.685468][T14643] ? __pfx_ksys_write+0x10/0x10 [ 346.685494][T14643] ? rcu_is_watching+0x15/0xb0 [ 346.685526][T14643] ? do_syscall_64+0xbe/0x3b0 [ 346.685562][T14643] do_syscall_64+0xfa/0x3b0 [ 346.685592][T14643] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.685621][T14643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.685642][T14643] ? clear_bhb_loop+0x60/0xb0 [ 346.685670][T14643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.685691][T14643] RIP: 0033:0x7f035238ebe9 [ 346.685712][T14643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.685730][T14643] RSP: 002b:00007f03531cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.685764][T14643] RAX: ffffffffffffffda RBX: 00007f03525b5fa0 RCX: 00007f035238ebe9 [ 346.685780][T14643] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 346.685794][T14643] RBP: 00007f03531cb090 R08: 0000000000000000 R09: 0000000000000000 [ 346.685808][T14643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.685821][T14643] R13: 00007f03525b6038 R14: 00007f03525b5fa0 R15: 00007ffee2b10468 [ 346.685856][T14643] [ 346.977765][T14645] 8021q: VLANs not supported on sit0 [ 347.070955][T14652] netlink: 'syz.4.2432': attribute type 1 has an invalid length. [ 347.125503][T14652] gretap3: entered promiscuous mode [ 347.135259][T14652] bond9: (slave gretap3): making interface the new active one [ 347.145878][T14652] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 347.234781][T14624] tipc: Disabling bearer [ 347.548839][T14680] __nla_validate_parse: 271 callbacks suppressed [ 347.548860][T14680] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2441'. [ 347.569188][T14680] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 347.912714][T14702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2444'. [ 348.421155][T14722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2451'. [ 348.431341][T14722] chnl_net:caif_netlink_parms(): no params data found [ 348.688612][T14736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2456'. [ 348.811328][T14748] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2456'. [ 349.050563][T14757] netlink: 'syz.3.2461': attribute type 10 has an invalid length. [ 349.065447][T14757] hsr0: mtu greater than device maximum [ 349.153236][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2462'. [ 349.172738][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'. [ 349.280243][T14775] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2465'. [ 349.297085][T14767] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 349.297999][T14780] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 349.542718][T14775] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 349.566137][T14797] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2467'. [ 349.566160][T14775] bond0 (unregistering): Released all slaves [ 349.625399][T14801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2470'. [ 349.824667][T14806] tipc: Enabled bearer , priority 0 [ 349.854844][T14803] syzkaller0: entered promiscuous mode [ 349.867969][T14803] syzkaller0: entered allmulticast mode [ 349.935557][T14803] tipc: Resetting bearer [ 349.965292][T14812] tipc: Enabled bearer , priority 0 [ 349.980771][T14802] tipc: Resetting bearer [ 350.040128][T14802] tipc: Disabling bearer [ 350.104610][T14811] tipc: Disabling bearer [ 350.199335][T14824] netlink: 'syz.3.2479': attribute type 1 has an invalid length. [ 350.245660][T14824] 8021q: adding VLAN 0 to HW filter on device bond4 [ 350.329054][T14833] openvswitch: netlink: Flow key attribute not present in set flow. [ 350.546359][T14847] tipc: Enabled bearer , priority 10 [ 350.808642][T14861] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 350.939977][T14865] bridge0: port 1(veth0_to_bridge) entered blocking state [ 350.967781][T14865] bridge0: port 1(veth0_to_bridge) entered disabled state [ 350.975179][T14865] veth0_to_bridge: entered allmulticast mode [ 351.008371][T14865] veth0_to_bridge: entered promiscuous mode [ 351.030604][T14865] bridge0: port 1(veth0_to_bridge) entered blocking state [ 351.037979][T14865] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 351.331949][T14888] openvswitch: netlink: Message has -1 unknown bytes. [ 351.360506][T14888] netlink: 'syz.2.2502': attribute type 1 has an invalid length. [ 351.420175][T14894] netlink: 'syz.3.2504': attribute type 1 has an invalid length. [ 351.712264][T14916] netlink: 'syz.0.2511': attribute type 11 has an invalid length. [ 352.194331][T14942] netlink: 'syz.3.2520': attribute type 1 has an invalid length. [ 352.231535][T14950] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 352.502896][T14962] tipc: Enabled bearer , priority 0 [ 352.615593][T14972] tipc: Disabling bearer [ 352.723640][T14975] __nla_validate_parse: 11 callbacks suppressed [ 352.723663][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2528'. [ 353.164513][T14998] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2533'. [ 353.567922][T15019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2541'. [ 353.598814][T15023] netlink: 'syz.4.2537': attribute type 23 has an invalid length. [ 353.607818][T15019] netlink: 'syz.3.2541': attribute type 1 has an invalid length. [ 353.628701][T15019] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2541'. [ 353.652078][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2540'. [ 353.665270][T15022] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2540'. [ 353.703256][T15021] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2540'. [ 354.006134][T15043] openvswitch: netlink: Actions may not be safe on all matching packets [ 354.055790][T15045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2548'. [ 354.293468][T15058] netlink: 'syz.4.2553': attribute type 13 has an invalid length. [ 354.371418][T15058] tipc: Resetting bearer [ 354.452775][T15068] FAULT_INJECTION: forcing a failure. [ 354.452775][T15068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.473742][T15069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2557'. [ 354.493026][T15068] CPU: 1 UID: 0 PID: 15068 Comm: syz.2.2556 Not tainted syzkaller #0 PREEMPT(full) [ 354.493060][T15068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.493074][T15068] Call Trace: [ 354.493083][T15068] [ 354.493092][T15068] dump_stack_lvl+0x189/0x250 [ 354.493125][T15068] ? __pfx____ratelimit+0x10/0x10 [ 354.493155][T15068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.493180][T15068] ? __pfx__printk+0x10/0x10 [ 354.493225][T15068] should_fail_ex+0x414/0x560 [ 354.493259][T15068] _copy_to_user+0x31/0xb0 [ 354.493285][T15068] simple_read_from_buffer+0xe1/0x170 [ 354.493323][T15068] proc_fail_nth_read+0x1b3/0x220 [ 354.493353][T15068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.493381][T15068] ? rw_verify_area+0x2a6/0x4d0 [ 354.493406][T15068] ? __lock_acquire+0xab9/0xd20 [ 354.493435][T15068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.493462][T15068] vfs_read+0x200/0xa30 [ 354.493490][T15068] ? fdget_pos+0x247/0x320 [ 354.493513][T15068] ? __pfx___mutex_lock+0x10/0x10 [ 354.493544][T15068] ? __pfx_vfs_read+0x10/0x10 [ 354.493574][T15068] ? __fget_files+0x2a/0x420 [ 354.493615][T15068] ? __fget_files+0x3a0/0x420 [ 354.493646][T15068] ? __fget_files+0x2a/0x420 [ 354.493687][T15068] ksys_read+0x145/0x250 [ 354.493718][T15068] ? __pfx_ksys_read+0x10/0x10 [ 354.493742][T15068] ? rcu_is_watching+0x15/0xb0 [ 354.493770][T15068] ? do_syscall_64+0xbe/0x3b0 [ 354.493806][T15068] do_syscall_64+0xfa/0x3b0 [ 354.493835][T15068] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.493863][T15068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.493885][T15068] ? clear_bhb_loop+0x60/0xb0 [ 354.493911][T15068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.493932][T15068] RIP: 0033:0x7f035238d5fc [ 354.493961][T15068] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 354.493980][T15068] RSP: 002b:00007f03531cb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 354.494004][T15068] RAX: ffffffffffffffda RBX: 00007f03525b5fa0 RCX: 00007f035238d5fc [ 354.494020][T15068] RDX: 000000000000000f RSI: 00007f03531cb0a0 RDI: 0000000000000004 [ 354.494033][T15068] RBP: 00007f03531cb090 R08: 0000000000000000 R09: 0000000000000000 [ 354.494046][T15068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 354.494059][T15068] R13: 00007f03525b6038 R14: 00007f03525b5fa0 R15: 00007ffee2b10468 [ 354.494094][T15068] [ 354.778621][T15058] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.806104][T15058] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.921421][T15076] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2560'. [ 355.154654][T15090] veth0: entered promiscuous mode [ 355.171888][T15090] veth0: entered allmulticast mode [ 355.191735][T15089] veth0: left promiscuous mode [ 355.294787][T15102] team0: Refused to change device type [ 355.473612][T15114] tipc: Enabled bearer , priority 0 [ 355.492124][T15114] 8021q: VLANs not supported on wg1 [ 355.512853][T15114] syzkaller0: entered promiscuous mode [ 355.530073][T15114] syzkaller0: entered allmulticast mode [ 355.624712][T15124] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 355.636159][T15126] netlink: 'syz.1.2576': attribute type 1 has an invalid length. [ 355.663109][T15124] bond6: (slave vcan1): Error -95 calling set_mac_address [ 355.686908][T15132] tipc: Resetting bearer [ 355.711007][T15113] tipc: Resetting bearer [ 355.740204][T15113] tipc: Disabling bearer [ 355.996591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.085154][T15161] tipc: Enabling of bearer rejected, failed to enable media [ 357.141052][T15217] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.167390][T15220] netlink: 'syz.2.2605': attribute type 1 has an invalid length. [ 357.192080][T15217] IPVS: set_ctl: invalid protocol: 448 0.32.0.0:5121 [ 357.294200][T15224] tipc: Enabling of bearer rejected, failed to enable media [ 357.724564][T15254] dvmrp1: entered allmulticast mode [ 357.910935][T15260] __nla_validate_parse: 15 callbacks suppressed [ 357.910959][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2616'. [ 358.275061][T15279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2620'. [ 358.496266][T15296] netlink: 'syz.3.2624': attribute type 25 has an invalid length. [ 358.675268][T15302] xt_HMARK: proto mask must be zero with L3 mode [ 358.707432][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'. [ 358.831690][T15311] tipc: Enabling of bearer rejected, failed to enable media [ 358.888328][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2631'. [ 358.949778][T15318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2632'. [ 359.051795][T15325] tipc: Enabling of bearer rejected, failed to enable media [ 359.299722][T15342] netlink: 'syz.3.2636': attribute type 1 has an invalid length. [ 359.800154][T15364] veth1: entered allmulticast mode [ 360.117698][T15380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2647'. [ 360.139412][T15382] tipc: Enabling of bearer rejected, failed to enable media [ 360.759416][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2653'. [ 360.808799][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2655'. [ 360.852698][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2655'. [ 360.876497][T15427] netlink: 'syz.2.2656': attribute type 1 has an invalid length. [ 360.935873][T15427] netlink: 'syz.2.2656': attribute type 1 has an invalid length. [ 360.970008][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2655'. [ 361.044324][T15439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.347488][T15454] tipc: Enabling of bearer rejected, failed to enable media [ 361.798059][T15474] netlink: 'syz.3.2670': attribute type 11 has an invalid length. [ 362.554200][T15509] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20000 [ 362.653529][T15516] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 362.690696][T15510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.469208][T15552] __nla_validate_parse: 8 callbacks suppressed [ 363.469231][T15552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2691'. [ 363.739301][T15566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2695'. [ 363.899137][T15575] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2698'. [ 363.899411][T15577] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2700'. [ 363.924099][T15575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'. [ 363.935999][T15577] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2700'. [ 363.951450][T15577] openvswitch: netlink: Missing valid actions attribute. [ 363.959876][T15577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.200800][T15591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2707'. [ 364.282204][T15598] netlink: 'syz.4.2708': attribute type 10 has an invalid length. [ 364.300311][T15598] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 364.347061][T15598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.387998][T15602] syz_tun: entered allmulticast mode [ 364.400691][T15602] tipc: Enabling of bearer rejected, failed to enable media [ 364.432590][T15598] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2708'. [ 364.490576][T15602] syz_tun: left allmulticast mode [ 364.506993][T15610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2712'. [ 364.589467][T15618] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2715'. [ 364.688923][T15623] pim6reg1: entered promiscuous mode [ 364.722445][T15623] pim6reg1: entered allmulticast mode [ 364.830997][T15634] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 365.047612][T15640] sctp: [Deprecated]: syz.2.2722 (pid 15640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.047612][T15640] Use struct sctp_sack_info instead [ 365.593416][T15674] netlink: 'syz.4.2728': attribute type 1 has an invalid length. [ 365.634927][T15674] 8021q: adding VLAN 0 to HW filter on device bond10 [ 365.702374][T15674] vlan0: entered allmulticast mode [ 365.708230][T15674] veth1: entered allmulticast mode [ 365.715411][T15674] bond10: (slave vlan0): Opening slave failed [ 366.029700][T15705] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 366.167010][T15716] netlink: 'syz.1.2742': attribute type 1 has an invalid length. [ 366.201388][T15716] netlink: 'syz.1.2742': attribute type 2 has an invalid length. [ 366.210182][T15716] netlink: 'syz.1.2742': attribute type 1 has an invalid length. [ 366.225763][T15711] 8021q: adding VLAN 0 to HW filter on device bond10 [ 366.268468][T15720] vlan2: entered allmulticast mode [ 366.279352][T15720] bond10: entered allmulticast mode [ 367.114888][T15771] netlink: 'syz.2.2757': attribute type 1 has an invalid length. [ 367.246673][T15782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.379998][T15788] netlink: 'syz.1.2763': attribute type 7 has an invalid length. [ 367.558846][T15802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.677274][T15805] netlink: 'syz.0.2772': attribute type 1 has an invalid length. [ 367.723699][T15805] 8021q: adding VLAN 0 to HW filter on device bond7 [ 367.980283][T15829] IPv6: NLM_F_CREATE should be specified when creating new route [ 368.385426][T15853] netlink: 'syz.1.2790': attribute type 6 has an invalid length. [ 368.552763][T15868] openvswitch: netlink: Flow actions attr not present in new flow. [ 368.600166][T15871] netlink: 'syz.3.2795': attribute type 1 has an invalid length. [ 368.615898][T15871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.691914][T15876] tipc: Enabled bearer , priority 0 [ 368.721247][T15874] tipc: Disabling bearer [ 368.742366][T15881] __nla_validate_parse: 16 callbacks suppressed [ 368.742390][T15881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2798'. [ 369.023564][T15897] syzkaller1: entered promiscuous mode [ 369.031981][T15897] syzkaller1: entered allmulticast mode [ 369.037819][T15899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2806'. [ 369.474383][T15925] netlink: 'syz.3.2814': attribute type 4 has an invalid length. [ 370.106889][T15949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.126318][T15957] ieee802154 phy0 wpan0: encryption failed: -22 [ 370.502648][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2827'. [ 370.687861][T15982] bond11: entered promiscuous mode [ 370.693267][T15982] bond11: entered allmulticast mode [ 370.699386][T15982] 8021q: adding VLAN 0 to HW filter on device bond11 [ 370.801184][T15995] netlink: 'syz.4.2836': attribute type 1 has an invalid length. [ 370.875533][T15999] veth0: entered promiscuous mode [ 370.892875][T15999] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2837'. [ 371.021683][T15998] veth0: left promiscuous mode [ 371.083242][T16016] netlink: 'syz.2.2841': attribute type 1 has an invalid length. [ 371.094185][T16016] netlink: 'syz.2.2841': attribute type 7 has an invalid length. [ 371.171858][T16016] : entered promiscuous mode [ 371.294413][T16021] netlink: 'syz.0.2843': attribute type 17 has an invalid length. [ 371.311575][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 371.335151][T16021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2843'. [ 371.362375][T16021] gretap0: entered promiscuous mode [ 371.389012][T16021] gretap0: left promiscuous mode [ 371.439010][T16035] netlink: 'syz.3.2847': attribute type 12 has an invalid length. [ 371.454585][T16035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2847'. [ 371.501430][T16035] netlink: 'syz.3.2847': attribute type 12 has an invalid length. [ 371.556924][T16035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2847'. [ 371.806594][T16052] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2849'. [ 371.841000][T16048] netlink: 'syz.1.2849': attribute type 1 has an invalid length. [ 371.872764][T16063] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2853'. [ 372.072439][T16074] bond4 (unregistering): Released all slaves [ 372.639199][T16104] netlink: 'syz.4.2861': attribute type 21 has an invalid length. [ 372.667433][T16104] netlink: 'syz.4.2861': attribute type 22 has an invalid length. [ 372.689846][T16104] netlink: 'syz.4.2861': attribute type 23 has an invalid length. [ 373.391260][T16148] nbd: must specify at least one socket [ 374.128663][T16170] __nla_validate_parse: 13 callbacks suppressed [ 374.128685][T16170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2878'. [ 374.203519][T16170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2878'. [ 374.349022][T16170] veth13: entered allmulticast mode [ 374.359006][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.378190][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.387608][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.405166][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.415359][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.445387][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.454279][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.462200][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.471428][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.479363][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.547733][T16184] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2883'. [ 374.662607][T16189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2884'. [ 374.925702][T16203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2889'. [ 375.675080][T16223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2895'. [ 375.924044][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059d1ac00: rx timeout, send abort [ 376.045506][ T7008] bond0 (unregistering): Released all slaves [ 376.075654][ T7008] bond1 (unregistering): Released all slaves [ 376.214514][ T7008] bond2 (unregistering): Released all slaves [ 376.235274][ T7008] bond3 (unregistering): Released all slaves [ 376.367316][ T7008] bond4 (unregistering): Released all slaves [ 376.425248][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059d1a400: rx timeout, send abort [ 376.434210][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059d1ac00: abort rx timeout. Force session deactivation [ 376.509626][ T7008] bond5 (unregistering): Released all slaves [ 376.558939][ T5873] Bluetooth: hci0: command tx timeout [ 376.629884][ T7008] bond6 (unregistering): Released all slaves [ 376.646833][ T7008] bond7 (unregistering): Released all slaves [ 376.748595][ T7008] bond8 (unregistering): Released all slaves [ 376.845722][ T7008] bond9 (unregistering): Released all slaves [ 376.934359][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059d1a400: abort rx timeout. Force session deactivation [ 376.960992][ T7008] bond10 (unregistering): Released all slaves [ 377.083241][T16175] chnl_net:caif_netlink_parms(): no params data found [ 377.211095][ T7008] : left promiscuous mode [ 377.236946][T16244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2903'. [ 377.309371][T16249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2905'. [ 377.337925][T16244] veth0: entered promiscuous mode [ 377.349263][ T7008] tipc: Disabling bearer [ 377.352540][T16249] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2905'. [ 377.371018][T16249] validate_nla: 3 callbacks suppressed [ 377.371050][T16249] netlink: 'syz.4.2905': attribute type 25 has an invalid length. [ 377.371139][ T7008] tipc: Disabling bearer [ 377.395112][ T7008] tipc: Left network mode [ 377.408152][T16243] veth0: left promiscuous mode [ 377.453302][ T7008] IPVS: stopping backup sync thread 8665 ... [ 377.502488][T16256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2906'. [ 377.555886][T16175] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.569161][T16175] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.599547][T16175] bridge_slave_0: entered allmulticast mode [ 377.614725][T16175] bridge_slave_0: entered promiscuous mode [ 377.723621][T16175] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.747683][T16175] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.773818][T16175] bridge_slave_1: entered allmulticast mode [ 377.799933][T16175] bridge_slave_1: entered promiscuous mode [ 378.055628][T16175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.059526][T16287] netlink: 'syz.1.2915': attribute type 1 has an invalid length. [ 378.080446][T16175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.161974][T16280] netlink: 'syz.0.2912': attribute type 7 has an invalid length. [ 378.203314][T16289] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 378.283054][T16294] netlink: 'syz.3.2916': attribute type 5 has an invalid length. [ 378.557148][ T6511] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 378.578114][T16175] team0: Port device team_slave_0 added [ 378.641962][T16175] team0: Port device team_slave_1 added [ 378.722715][ T5873] Bluetooth: hci0: command tx timeout [ 379.263040][ T7008] pimreg3 (unregistering): left allmulticast mode [ 379.494543][ T7008] pim6reg (unregistering): left allmulticast mode [ 380.250955][T16175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.258593][T16175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.286109][T16175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.349064][T16175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.356157][T16175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.406700][T16175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.577157][T16332] netlink: 'syz.3.2928': attribute type 1 has an invalid length. [ 380.608596][T16332] __nla_validate_parse: 3 callbacks suppressed [ 380.608616][T16332] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2928'. [ 380.634404][T16332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2928'. [ 380.765309][T16339] nr0: entered allmulticast mode [ 380.785582][T16338] nr0: left allmulticast mode [ 380.798550][ T5873] Bluetooth: hci0: command tx timeout [ 380.819300][T16175] hsr_slave_0: entered promiscuous mode [ 380.826137][T16175] hsr_slave_1: entered promiscuous mode [ 380.834107][T16175] debugfs: 'hsr0' already exists in 'hsr' [ 380.839968][T16175] Cannot create hsr debugfs directory [ 381.220510][T16369] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2937'. [ 381.248690][T16369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2937'. [ 381.288358][T16372] delete_channel: no stack [ 381.420935][ T7008] IPVS: stop unused estimator thread 0... [ 381.797135][T16399] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2944'. [ 381.898445][T16405] netlink: 'syz.3.2946': attribute type 11 has an invalid length. [ 381.917027][T16405] netlink: 'syz.3.2946': attribute type 11 has an invalid length. [ 381.941174][T16405] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2946'. [ 382.095788][T16175] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 382.130470][T16175] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 382.163184][T16175] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 382.201166][T16175] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 382.283846][T16434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2952'. [ 382.316484][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 382.369061][T16175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.402845][T16175] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.423473][ T7009] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.430751][ T7009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.439914][T16440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2953'. [ 382.465700][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.473089][ T6511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.651780][T16450] netlink: 'syz.0.2957': attribute type 1 has an invalid length. [ 382.667154][T16450] netlink: 'syz.0.2957': attribute type 2 has an invalid length. [ 382.880892][ T5873] Bluetooth: hci0: command tx timeout [ 383.038742][T16175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.177257][T16175] veth0_vlan: entered promiscuous mode [ 383.207117][T16477] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2964'. [ 383.220721][T16477] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2964'. [ 383.220815][T16175] veth1_vlan: entered promiscuous mode [ 383.314461][T16175] veth0_macvtap: entered promiscuous mode [ 383.341258][T16175] veth1_macvtap: entered promiscuous mode [ 383.385178][T16175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.409709][T16175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.434731][ T7008] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.471634][ T7008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.506830][ T7008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.533982][ T7008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.663347][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.682814][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.764738][ T7009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.781655][ T7009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.990050][T16515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.112577][T16518] 8021q: VLANs not supported on tunl0 [ 384.177384][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.306591][T16527] netlink: 'syz.1.2980': attribute type 13 has an invalid length. [ 384.683116][T16549] netlink: 'syz.1.2984': attribute type 5 has an invalid length. [ 385.245382][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 385.264187][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 385.277002][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 385.289671][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 385.315092][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 385.727700][T16593] __nla_validate_parse: 3 callbacks suppressed [ 385.727721][T16593] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2995'. [ 385.740792][T16576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2990'. [ 385.845442][T16599] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2997'. [ 385.867541][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2997'. [ 385.950525][T16605] netlink: 212388 bytes leftover after parsing attributes in process `syz.4.2999'. [ 385.973115][T16605] openvswitch: netlink: Message has 5 unknown bytes. [ 386.011045][T16576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.262982][T16565] chnl_net:caif_netlink_parms(): no params data found [ 386.383544][T16624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3004'. [ 386.393105][T16624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3004'. [ 386.407105][T16624] netlink: 'syz.0.3004': attribute type 14 has an invalid length. [ 386.415070][T16624] netlink: 'syz.0.3004': attribute type 13 has an invalid length. [ 386.860434][T16565] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.871089][T16655] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3012'. [ 386.884205][T16565] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.900073][T16565] bridge_slave_0: entered allmulticast mode [ 386.924869][T16565] bridge_slave_0: entered promiscuous mode [ 386.974689][T16662] Dead loop on virtual device ip6_vti0, fix it urgently! [ 386.985345][T16565] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.993071][T16565] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.000992][T16565] bridge_slave_1: entered allmulticast mode [ 387.009166][T16565] bridge_slave_1: entered promiscuous mode [ 387.073835][T16565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.099464][T16565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.187755][T16565] team0: Port device team_slave_0 added [ 387.203862][T16565] team0: Port device team_slave_1 added [ 387.247021][T16565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.254002][T16565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.283023][T16565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.303520][T16565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.311039][T16565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.338111][T16565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.357237][ T5873] Bluetooth: hci4: command tx timeout [ 387.401879][T16565] hsr_slave_0: entered promiscuous mode [ 387.408823][T16565] hsr_slave_1: entered promiscuous mode [ 387.415245][T16565] debugfs: 'hsr0' already exists in 'hsr' [ 387.422196][T16565] Cannot create hsr debugfs directory [ 387.571774][T16565] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.583388][T16565] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.644563][T16565] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.654730][T16565] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.713492][T16672] netlink: 'syz.4.3016': attribute type 1 has an invalid length. [ 387.726397][T16672] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3016'. [ 387.740264][T16565] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.770935][T16565] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.880497][T16677] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3019'. [ 387.919928][T16565] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.935630][T16565] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.019869][T16690] TCP: TCP_TX_DELAY enabled [ 388.171902][T16694] netlink: 'syz.2.3023': attribute type 6 has an invalid length. [ 388.391795][T16705] netlink: 'syz.4.3028': attribute type 1 has an invalid length. [ 388.414373][T16565] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 388.437454][T16565] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 388.470562][T16708] netlink: 'syz.4.3028': attribute type 1 has an invalid length. [ 388.619740][T16565] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 388.710160][T16708] 8021q: adding VLAN 0 to HW filter on device bond12 [ 388.745048][T16718] vlan0: entered allmulticast mode [ 388.752188][T16718] bond12: (slave vlan0): Opening slave failed [ 388.784774][T16565] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 389.229142][T16757] tipc: Enabled bearer , priority 0 [ 389.334813][T16757] syzkaller0: entered promiscuous mode [ 389.341011][T16757] syzkaller0: entered allmulticast mode [ 389.352324][T16757] tipc: Resetting bearer [ 389.437136][ T5873] Bluetooth: hci4: command tx timeout [ 389.447521][ T12] tipc: Resetting bearer [ 389.474172][T16753] tipc: Resetting bearer [ 390.566519][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 390.838011][T16753] tipc: Disabling bearer [ 390.859327][T16565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.900733][T16565] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.950927][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.958174][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.988757][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.995972][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.516510][ T5873] Bluetooth: hci4: command tx timeout [ 392.047261][T16565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.177902][T16819] __nla_validate_parse: 9 callbacks suppressed [ 392.177925][T16819] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3055'. [ 392.270976][T16823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.331797][T16825] netlink: 576 bytes leftover after parsing attributes in process `syz.1.3056'. [ 392.369958][T16826] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3057'. [ 392.427575][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3058'. [ 392.470774][T16831] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3058'. [ 392.608022][T16565] veth0_vlan: entered promiscuous mode [ 392.688669][T16565] veth1_vlan: entered promiscuous mode [ 392.870752][T16565] veth0_macvtap: entered promiscuous mode [ 392.909019][T16565] veth1_macvtap: entered promiscuous mode [ 392.996129][T16565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.006992][T16867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3066'. [ 393.052053][T16867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3066'. [ 393.084001][T16565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.169972][ T7008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.200187][ T7008] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.236043][T16871] bridge_slave_0: entered promiscuous mode [ 393.247872][ T7008] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.279608][ T7008] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.411600][T16885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3072'. [ 393.428156][T16885] netlink: 'syz.4.3072': attribute type 7 has an invalid length. [ 393.437204][T16885] netlink: 'syz.4.3072': attribute type 8 has an invalid length. [ 393.445553][T16885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3072'. [ 393.501478][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.550113][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.598569][ T5873] Bluetooth: hci4: command tx timeout [ 393.663817][ T6626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.697283][ T6626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.850378][T16906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2979'. [ 394.777518][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 394.801438][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 394.811538][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 394.821261][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 394.829533][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 395.112423][ T7009] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.124578][ T7009] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.135668][ T7009] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 395.204117][T16955] tipc: Enabling of bearer rejected, failed to enable media [ 395.327891][ T7009] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.356474][ T7009] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.397434][ T7009] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 395.578451][ T7009] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.597010][ T7009] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.607903][ T7009] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 395.732362][ T7009] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.752941][ T7009] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.765694][ T7009] netdevsim netdevsim4  (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 396.242749][T16936] chnl_net:caif_netlink_parms(): no params data found [ 396.383030][ T7009] tipc: Resetting bearer [ 396.773827][ T7009] tipc: Disabling bearer [ 396.807521][ T7009] bond9 (unregistering): (slave gretap3): Releasing active interface [ 396.881643][ T5873] Bluetooth: hci1: command tx timeout [ 396.894142][ T7009] team0: Port device geneve0 removed [ 397.138095][ T7009] bond8 (unregistering): (slave bridge4): Releasing active interface [ 397.438493][ T7009] bond1 (unregistering): Released all slaves [ 397.454671][ T7009] bond2 (unregistering): Released all slaves [ 397.472311][ T7009] bond3 (unregistering): Released all slaves [ 397.488405][ T7009] bond4 (unregistering): Released all slaves [ 397.508877][ T7009] bond5 (unregistering): Released all slaves [ 397.528445][ T7009] bond6 (unregistering): Released all slaves [ 397.546852][ T7009] bond7 (unregistering): Released all slaves [ 397.566154][ T7009] bond8 (unregistering): Released all slaves [ 397.581113][ T7009] bond9 (unregistering): Released all slaves [ 397.695487][ T7009] bond0 (unregistering): Released all slaves [ 397.801074][ T7009] bond10 (unregistering): Released all slaves [ 397.903554][ T7009] bond11 (unregistering): Released all slaves [ 398.005422][ T7009] bond12 (unregistering): Released all slaves [ 398.272254][T17040] netlink: 'syz.3.3109': attribute type 6 has an invalid length. [ 398.311813][T17042] __nla_validate_parse: 1 callbacks suppressed [ 398.311836][T17042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3111'. [ 398.312801][T17045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3112'. [ 398.384142][T17046] tipc: Enabled bearer , priority 0 [ 398.419346][T17045] bridge_slave_0: left allmulticast mode [ 398.425208][T17045] bridge_slave_0: left promiscuous mode [ 398.432177][T17045] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.443664][T17045] bridge_slave_1: left allmulticast mode [ 398.450408][T17045] bridge_slave_1: left promiscuous mode [ 398.456242][T17045] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.468920][T17045] bond0: (slave bond_slave_0): Releasing backup interface [ 398.483006][T17045] bond0: (slave bond_slave_1): Releasing backup interface [ 398.500430][T17045] team0: Port device team_slave_0 removed [ 398.512118][T17045] team0: Port device team_slave_1 removed [ 398.521103][T17045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.528739][T17045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.544398][T17045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.552607][T17045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.571007][T17037] syzkaller0: entered promiscuous mode [ 398.580787][T17037] syzkaller0: entered allmulticast mode [ 398.783876][T17037] tipc: Resetting bearer [ 398.798487][T16936] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.826971][T16936] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.845117][T16936] bridge_slave_0: entered allmulticast mode [ 398.862043][T16936] bridge_slave_0: entered promiscuous mode [ 398.873820][T17035] tipc: Resetting bearer [ 398.927365][T17035] tipc: Disabling bearer [ 398.951164][T16936] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.966496][ T5873] Bluetooth: hci1: command tx timeout [ 398.972799][T16936] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.982566][T16936] bridge_slave_1: entered allmulticast mode [ 399.008478][T16936] bridge_slave_1: entered promiscuous mode [ 399.102600][T17073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3120'. [ 399.178289][T17077] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3120'. [ 399.330574][T16936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.345341][T16936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.365485][T17067] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 399.548745][T16936] team0: Port device team_slave_0 added [ 399.568576][T16936] team0: Port device team_slave_1 added [ 399.751917][T16936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.768073][T16936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.895436][T16936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.921252][T17086] tipc: Started in network mode [ 399.926303][T17086] tipc: Node identity d2c5dd77b1ff, cluster identity 4711 [ 399.946579][T17086] tipc: Enabled bearer , priority 0 [ 399.956697][T17092] netlink: 'syz.3.3124': attribute type 1 has an invalid length. [ 399.964572][T17092] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3124'. [ 399.975135][T17089] syzkaller0: entered promiscuous mode [ 400.024470][T17089] syzkaller0: entered allmulticast mode [ 400.106366][T17086] tipc: Resetting bearer [ 400.134180][T16936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.159235][T16936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.226920][T16936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.300072][ T7009] tipc: Left network mode [ 400.317251][T17085] tipc: Resetting bearer [ 400.371674][T17085] tipc: Disabling bearer [ 400.669247][T17111] tipc: Enabling of bearer rejected, failed to enable media [ 400.710771][T16936] hsr_slave_0: entered promiscuous mode [ 400.738654][T16936] hsr_slave_1: entered promiscuous mode [ 400.748764][T16936] debugfs: 'hsr0' already exists in 'hsr' [ 400.764496][T16936] Cannot create hsr debugfs directory [ 400.821491][T17116] Dead loop on virtual device ip6_vti0, fix it urgently! [ 401.037108][ T5873] Bluetooth: hci1: command tx timeout [ 401.352924][ T7009] hsr_slave_0: left promiscuous mode [ 401.379431][ T7009] hsr_slave_1: left promiscuous mode [ 401.605544][T17156] netlink: 'syz.0.3143': attribute type 83 has an invalid length. [ 402.585515][T17163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3146'. [ 402.603237][T17163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3146'. [ 402.628163][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3146'. [ 402.689371][T17170] tipc: Enabling of bearer rejected, failed to enable media [ 402.823982][T17178] netlink: 'syz.2.3150': attribute type 8 has an invalid length. [ 403.017178][ T7009] IPVS: stop unused estimator thread 0... [ 403.110266][T17189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3153'. [ 403.119477][ T5873] Bluetooth: hci1: command tx timeout [ 403.165080][T17192] netlink: 'syz.0.3155': attribute type 10 has an invalid length. [ 403.173878][T17192] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 403.192004][T17192] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 403.253778][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.282508][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.325648][T17192] Dead loop on virtual device ip6_vti0, fix it urgently! [ 403.472745][T16936] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 403.517627][T16936] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 403.545723][T16936] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 403.570602][T17204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.582944][T16936] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 403.840423][T17223] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3162'. [ 403.944838][T16936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.991710][T16936] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.020059][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.027330][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.084129][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.091419][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.104031][T17228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3164'. [ 404.385309][T17237] dvmrp0: entered allmulticast mode [ 404.402415][T17237] netlink: 'syz.2.3166': attribute type 23 has an invalid length. [ 404.794240][T16936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.179990][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3175'. [ 405.237882][T17269] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.254002][T17269] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.418732][T17269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.444689][T17269] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.539110][T17287] tipc: Enabled bearer , priority 0 [ 405.599128][T17269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.613366][T17269] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.670906][T17287] syzkaller0: entered promiscuous mode [ 405.677393][T17287] syzkaller0: entered allmulticast mode [ 405.683610][T17287] tipc: Resetting bearer [ 405.709186][T17269] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 405.719931][T17269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.731577][T17269] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.827670][T16936] veth0_vlan: entered promiscuous mode [ 405.835545][T17298] tipc: Resetting bearer [ 405.907201][T17305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3184'. [ 405.916707][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 406.536361][ T5922] tipc: Node number set to 222675187 [ 407.404823][T17298] tipc: Disabling bearer [ 407.491566][T16936] veth1_vlan: entered promiscuous mode [ 407.594006][ T37] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.631691][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.662743][T17324] tipc: Enabling of bearer rejected, failed to enable media [ 407.677275][ T6626] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.686914][ T6626] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.747651][ T6605] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.774002][ T6605] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.862063][ T37] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.901162][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.924297][T17332] tipc: Enabling of bearer rejected, failed to enable media [ 408.019238][T16936] veth0_macvtap: entered promiscuous mode [ 408.067832][T16936] veth1_macvtap: entered promiscuous mode [ 408.163403][T16936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.179053][T17348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3193'. [ 408.188531][T17352] netlink: 'syz.0.3194': attribute type 2 has an invalid length. [ 408.204194][T16936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.261672][ T6511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.284691][ T6511] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.295217][ T6511] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.321433][ T6511] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.555329][T17367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3199'. [ 408.556276][T17366] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3199'. [ 408.578901][ T6628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.601657][ T6628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.692243][ T6628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.724313][ T6628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.213239][T17392] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3208'. [ 409.252440][T17395] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3210'. [ 409.405674][T17395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3210'. [ 409.480415][T17395] tipc: Enabled bearer , priority 0 [ 409.556838][T17395] syzkaller0: entered promiscuous mode [ 409.562387][T17395] syzkaller0: entered allmulticast mode [ 409.623443][T17403] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 409.748409][T17398] tipc: Resetting bearer [ 409.759468][T17395] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3210'. [ 409.841424][T17394] tipc: Resetting bearer [ 409.932963][T17394] tipc: Disabling bearer [ 409.960904][T17413] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 409.975089][T17413] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 409.985323][T17413] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 409.995881][T17413] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 410.010143][T17413] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 410.128957][ T5864] syz_tun (unregistering): left allmulticast mode [ 410.265695][T17422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3217'. [ 410.352196][T17425] bond4: entered allmulticast mode [ 410.362223][T17425] 8021q: adding VLAN 0 to HW filter on device bond4 [ 410.373973][T17425] bridge0: port 2(bond4) entered blocking state [ 410.383597][T17425] bridge0: port 2(bond4) entered disabled state [ 410.395171][T17425] bond4: entered promiscuous mode [ 410.411773][T17425] bridge0: port 2(bond4) entered blocking state [ 410.418305][T17425] bridge0: port 2(bond4) entered forwarding state [ 410.710897][T17451] syzkaller0: entered promiscuous mode [ 410.718956][T17451] syzkaller0: entered allmulticast mode [ 410.740686][ T7009] bridge0: port 2(bond4) entered disabled state [ 410.982624][T17408] chnl_net:caif_netlink_parms(): no params data found [ 411.334676][T17408] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.355420][T17408] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.376347][T17408] bridge_slave_0: entered allmulticast mode [ 411.402211][T17408] bridge_slave_0: entered promiscuous mode [ 411.433023][T17408] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.445697][T17408] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.460766][T17408] bridge_slave_1: entered allmulticast mode [ 411.473772][T17408] bridge_slave_1: entered promiscuous mode [ 411.617179][T17486] netlink: 'syz.1.3233': attribute type 1 has an invalid length. [ 411.634473][T17486] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3233'. [ 411.648379][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3233'. [ 411.701435][T17408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.715433][T17408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.817685][T17408] team0: Port device team_slave_0 added [ 411.828133][T17408] team0: Port device team_slave_1 added [ 412.076874][ T5873] Bluetooth: hci3: command tx timeout [ 412.082472][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3238'. [ 412.166146][T17408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.186530][T17408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.213437][T17408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.237643][T17506] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 412.260416][T17506] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 412.289846][T17408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.306140][T17408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.335351][T17408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.440350][T17518] netlink: 'syz.2.3241': attribute type 1 has an invalid length. [ 412.492697][T17518] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3241'. [ 412.524242][T17521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3243'. [ 412.571755][T17521] team_slave_0: entered promiscuous mode [ 412.577882][T17521] team_slave_1: entered promiscuous mode [ 412.639820][T17408] hsr_slave_0: entered promiscuous mode [ 412.659818][T17408] hsr_slave_1: entered promiscuous mode [ 412.740171][T17529] netlink: 'syz.2.3245': attribute type 1 has an invalid length. [ 412.875040][T17529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.932933][T17534] bond1: (slave veth5): Enslaving as an active interface with a down link [ 412.982465][T17536] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 413.052004][T17544] veth1_macvtap: left promiscuous mode [ 413.212800][T17529] bond1: (slave veth7): Enslaving as an active interface with a down link [ 413.451133][T17408] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.462539][T17408] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.546743][T17408] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.557788][T17408] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.582236][T17568] netlink: 'syz.4.3257': attribute type 4 has an invalid length. [ 413.615930][T17408] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.632405][T17408] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.683196][T17571] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 413.705514][T17408] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.718544][T17408] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.910227][T17577] xfrm1: entered allmulticast mode [ 413.946890][T17408] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 413.959086][T17408] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 413.974005][T17408] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 413.992635][T17408] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 414.090813][T17581] netlink: 'syz.4.3261': attribute type 10 has an invalid length. [ 414.157476][ T5873] Bluetooth: hci3: command tx timeout [ 414.213105][T17408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.243813][T17408] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.269069][ T7009] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.276319][ T7009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.299262][ T7009] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.306624][ T7009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.503867][T17408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.698676][T17603] unknown channel width for channel at 909000KHz? [ 414.725861][T17603] unknown channel width for channel at 909000KHz? [ 414.918806][T17613] __nla_validate_parse: 6 callbacks suppressed [ 414.918830][T17613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3267'. [ 415.038618][T17613] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3267'. [ 415.312308][T17622] sctp: [Deprecated]: syz.4.3268 (pid 17622) Use of int in maxseg socket option. [ 415.312308][T17622] Use struct sctp_assoc_value instead [ 415.387447][T17626] pim6reg: entered allmulticast mode [ 415.471008][T17408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.624261][T17408] veth0_vlan: entered promiscuous mode [ 415.681435][T17408] veth1_vlan: entered promiscuous mode [ 415.721354][T17643] tipc: Enabling of bearer rejected, failed to enable media [ 415.792692][T17408] veth0_macvtap: entered promiscuous mode [ 415.831621][T17645] syzkaller1: entered promiscuous mode [ 415.858375][T17645] syzkaller1: entered allmulticast mode [ 415.871480][T17652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3276'. [ 415.874097][T17408] veth1_macvtap: entered promiscuous mode [ 416.238867][ T5873] Bluetooth: hci3: command tx timeout [ 416.261239][T17664] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3277'. [ 416.272151][T17408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.295817][T17408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.365667][ T6511] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.409402][ T6511] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.435779][ T6511] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.508513][ T6511] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.860577][ T7008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.889815][ T7008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.198480][ T6605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.222436][ T6605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.302216][T17698] netlink: 'syz.3.3287': attribute type 3 has an invalid length. [ 417.553052][T17709] tipc: Enabling of bearer rejected, failed to enable media [ 418.316444][ T5873] Bluetooth: hci3: command tx timeout [ 418.463636][T17413] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 418.518602][T17413] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 418.539670][T17413] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 418.571184][T17413] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 418.588168][T17413] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 418.748678][T17741] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 418.776795][T17742] dvmrp0: left allmulticast mode [ 419.243474][T17762] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3302'. [ 419.308454][T17763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3300'. [ 419.483308][T17734] chnl_net:caif_netlink_parms(): no params data found [ 419.734150][T17773] tipc: Enabling of bearer rejected, failed to enable media [ 419.818587][T17734] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.825866][T17734] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.857285][T17734] bridge_slave_0: entered allmulticast mode [ 419.886479][T17734] bridge_slave_0: entered promiscuous mode [ 419.909442][T17734] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.959359][T17734] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.991599][T17734] bridge_slave_1: entered allmulticast mode [ 419.998059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.087690][T17734] bridge_slave_1: entered promiscuous mode [ 420.303867][T17734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.348503][T17734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.475640][T17801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3308'. [ 420.493988][T17734] team0: Port device team_slave_0 added [ 420.535297][T17801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.548203][T17803] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3309'. [ 420.578980][T17734] team0: Port device team_slave_1 added [ 420.639234][ T5873] Bluetooth: hci5: command tx timeout [ 420.652333][T17803] netlink: 'syz.3.3309': attribute type 4 has an invalid length. [ 420.783267][T17734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.797379][T17808] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 420.806964][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.807003][T17734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.809437][T17734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.853742][ T30] audit: type=1800 audit(1755751349.068:2): pid=17808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3309" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 420.882689][T17808] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 420.893175][T17808] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 420.913468][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.964492][T17734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.980618][T17814] netlink: 'syz.0.3310': attribute type 4 has an invalid length. [ 421.140546][T17825] netlink: zone id is out of range [ 421.259193][T17829] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3316'. [ 421.282832][T17829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3316'. [ 421.292715][T17829] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3316'. [ 421.410807][T17734] hsr_slave_0: entered promiscuous mode [ 421.427868][T17734] hsr_slave_1: entered promiscuous mode [ 421.434537][T17734] debugfs: 'hsr0' already exists in 'hsr' [ 421.466381][T17734] Cannot create hsr debugfs directory [ 421.676928][T17842] tipc: Enabling of bearer rejected, failed to enable media [ 421.982433][T17847] bond1: (slave veth0_to_bond): Releasing active interface [ 422.161024][T17847] bond1: (slave veth5): Releasing active interface [ 422.182332][T17847] bond1: (slave veth5): the permanent HWaddr of slave - 2e:2e:45:6b:e0:13 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 422.217267][T17847] bond1: (slave veth7): Releasing active interface [ 422.251935][T17860] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.449678][T17873] tipc: Enabling of bearer rejected, failed to enable media [ 422.468792][T17872] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3328'. [ 422.478246][T17872] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3328'. [ 422.498184][T17872] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3328'. [ 422.617043][T17876] IPv6: NLM_F_REPLACE set, but no existing node found! [ 422.625243][T17734] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.721143][ T5873] Bluetooth: hci5: command tx timeout [ 422.723968][T17888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3327'. [ 422.868318][T17734] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.284171][T17734] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.403184][T17904] netlink: 'syz.4.3336': attribute type 3 has an invalid length. [ 423.429947][T17904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.579106][T17734] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.882591][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3340'. [ 424.568680][T17734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 424.582305][T17924] tipc: Enabling of bearer rejected, failed to enable media [ 424.601444][T17734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 424.706109][T17734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 424.769302][T17734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 424.796437][ T5873] Bluetooth: hci5: command tx timeout [ 425.122116][T17734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.201597][T17734] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.247087][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.254344][ T6626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.337090][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.344416][ T6626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.512323][T17987] __nla_validate_parse: 3 callbacks suppressed [ 425.512345][T17987] netlink: 212364 bytes leftover after parsing attributes in process `syz.3.3358'. [ 425.551392][T17987] openvswitch: netlink: Message has 5 unknown bytes. [ 425.814504][T18005] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3363'. [ 425.823876][T18005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3363'. [ 425.842215][T18005] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3363'. [ 425.993977][T18016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3366'. [ 426.133913][T18019] netlink: 'syz.0.3368': attribute type 4 has an invalid length. [ 426.144002][T17734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.361554][T17734] veth0_vlan: entered promiscuous mode [ 426.416869][T17734] veth1_vlan: entered promiscuous mode [ 426.534363][T17734] veth0_macvtap: entered promiscuous mode [ 426.552353][T17734] veth1_macvtap: entered promiscuous mode [ 426.618229][T17734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.664292][T17734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.723106][ T7009] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.751158][ T7009] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.797466][ T7009] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.845745][ T6626] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.877990][ T5873] Bluetooth: hci5: command tx timeout [ 427.069198][T18043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3373'. [ 427.218053][T18043] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3373'. [ 427.253034][T18043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3373'. [ 427.266378][ T6511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.277803][ T6511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.444101][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.481491][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.847723][T18077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3380'. [ 427.900052][T18079] tipc: Enabling of bearer rejected, failed to enable media [ 427.922935][T18084] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.3383'. [ 428.655921][T18122] netlink: 'syz.1.3390': attribute type 2 has an invalid length. [ 428.957898][ T5873] Bluetooth: hci5: command tx timeout [ 429.300377][T18151] tipc: Enabling of bearer rejected, failed to enable media [ 430.538298][T18201] __nla_validate_parse: 13 callbacks suppressed [ 430.538321][T18201] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3414'. [ 430.693078][T18207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.720819][T18206] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3416'. [ 430.730301][T18206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3416'. [ 430.743771][T18206] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3416'. [ 430.776450][T18212] Bluetooth: MGMT ver 1.23 [ 430.787013][T18209] syz.3.3417 (18209) used obsolete PPPIOCDETACH ioctl [ 430.960589][T18219] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3420'. [ 430.987357][T18219] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3420'. [ 431.158151][T18227] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.3424'. [ 431.175317][T18227] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 431.195311][T18227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3424'. [ 431.481872][T18243] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3429'. [ 431.509265][T18243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3429'. [ 431.533825][T18245] netlink: 'syz.1.3430': attribute type 11 has an invalid length. [ 431.816077][T18254] IPv6: sit1: Disabled Multicast RS [ 432.134716][T18266] pim6reg: entered allmulticast mode [ 432.144898][T18266] pim6reg: left allmulticast mode [ 433.750228][T18347] xfrm1: entered allmulticast mode [ 433.772835][T18350] netlink: 'syz.2.3463': attribute type 1 has an invalid length. [ 433.845902][T18350] bond2: entered promiscuous mode [ 433.856078][T18350] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.950914][T18356] 8021q: adding VLAN 0 to HW filter on device bond3 [ 433.986161][T18356] bond2: (slave bond3): making interface the new active one [ 433.993990][T18356] bond3: entered promiscuous mode [ 434.001232][T18356] bond2: (slave bond3): Enslaving as an active interface with an up link [ 434.044780][T18364] erspan0: entered promiscuous mode [ 434.065435][T18364] gretap0: entered promiscuous mode [ 434.576604][T18384] x_tables: ip_tables: udp match: only valid for protocol 17 [ 434.705238][T18391] x_tables: ip_tables: udp match: only valid for protocol 17 [ 434.999888][T18404] netlink: 'syz.4.3479': attribute type 4 has an invalid length. [ 435.753764][T18405] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.761916][T18405] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.847893][T18405] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 436.251459][T18440] __nla_validate_parse: 15 callbacks suppressed [ 436.251484][T18440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3491'. [ 436.283062][T18441] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3490'. [ 436.308974][T18441] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3490'. [ 436.342588][T18441] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3490'. [ 436.362677][T18446] netlink: 'syz.3.3493': attribute type 11 has an invalid length. [ 436.372375][T18446] netlink: 'syz.3.3493': attribute type 11 has an invalid length. [ 436.392393][T18446] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3493'. [ 436.948469][T18474] netlink: 'syz.1.3502': attribute type 1 has an invalid length. [ 437.054634][T18474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.121178][T18479] bond1: (slave geneve2): making interface the new active one [ 437.131818][T18479] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 437.277936][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 437.557638][T18495] netlink: 'syz.1.3507': attribute type 1 has an invalid length. [ 437.802132][T18516] [ 437.804531][T18516] ====================================================== [ 437.811579][T18516] WARNING: possible circular locking dependency detected [ 437.818628][T18516] syzkaller #0 Not tainted [ 437.823055][T18516] ------------------------------------------------------ [ 437.830253][T18516] syz.2.3512/18516 is trying to acquire lock: [ 437.836325][T18516] ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 437.845950][T18516] [ 437.845950][T18516] but task is already holding lock: [ 437.853761][T18516] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 437.863537][T18516] [ 437.863537][T18516] which lock already depends on the new lock. [ 437.863537][T18516] [ 437.873953][T18516] [ 437.873953][T18516] the existing dependency chain (in reverse order) is: [ 437.882975][T18516] [ 437.882975][T18516] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 437.890903][T18516] lock_acquire+0x120/0x360 [ 437.895947][T18516] _raw_spin_lock_bh+0x36/0x50 [ 437.901245][T18516] nr_rt_ioctl+0x390/0xd50 [ 437.906196][T18516] sock_do_ioctl+0xd9/0x300 [ 437.911238][T18516] sock_ioctl+0x576/0x790 [ 437.916191][T18516] __se_sys_ioctl+0xfc/0x170 [ 437.921318][T18516] do_syscall_64+0xfa/0x3b0 [ 437.926368][T18516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.932800][T18516] [ 437.932800][T18516] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 437.940823][T18516] lock_acquire+0x120/0x360 [ 437.945968][T18516] _raw_spin_lock_bh+0x36/0x50 [ 437.951282][T18516] nr_rt_ioctl+0x193/0xd50 [ 437.956239][T18516] sock_do_ioctl+0xd9/0x300 [ 437.961301][T18516] sock_ioctl+0x576/0x790 [ 437.966196][T18516] __se_sys_ioctl+0xfc/0x170 [ 437.971337][T18516] do_syscall_64+0xfa/0x3b0 [ 437.976389][T18516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.982813][T18516] [ 437.982813][T18516] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 437.990694][T18516] validate_chain+0xb9b/0x2140 [ 437.996001][T18516] __lock_acquire+0xab9/0xd20 [ 438.001215][T18516] lock_acquire+0x120/0x360 [ 438.006262][T18516] _raw_spin_lock_bh+0x36/0x50 [ 438.011559][T18516] nr_rt_device_down+0xa9/0x720 [ 438.017056][T18516] nr_device_event+0x137/0x150 [ 438.022357][T18516] notifier_call_chain+0x1b3/0x3e0 [ 438.028001][T18516] netif_close_many+0x29c/0x410 [ 438.033408][T18516] netif_close+0x158/0x210 [ 438.038360][T18516] dev_close+0x10a/0x220 [ 438.043140][T18516] bpq_device_event+0x377/0x6a0 [ 438.048523][T18516] notifier_call_chain+0x1b3/0x3e0 [ 438.054161][T18516] netif_close_many+0x29c/0x410 [ 438.059549][T18516] netif_close+0x158/0x210 [ 438.064593][T18516] dev_close+0x10a/0x220 [ 438.069380][T18516] bond_setup_by_slave+0x5f/0x3f0 [ 438.074945][T18516] bond_enslave+0x7a0/0x3a20 [ 438.080089][T18516] bond_do_ioctl+0x635/0x9b0 [ 438.085864][T18516] bond_siocdevprivate+0x17e/0x350 [ 438.091603][T18516] dev_ifsioc+0xb57/0xf00 [ 438.096468][T18516] dev_ioctl+0x84c/0x1150 [ 438.101344][T18516] sock_ioctl+0x719/0x790 [ 438.106285][T18516] __se_sys_ioctl+0xfc/0x170 [ 438.111435][T18516] do_syscall_64+0xfa/0x3b0 [ 438.116596][T18516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.123034][T18516] [ 438.123034][T18516] other info that might help us debug this: [ 438.123034][T18516] [ 438.133294][T18516] Chain exists of: [ 438.133294][T18516] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 438.133294][T18516] [ 438.147132][T18516] Possible unsafe locking scenario: [ 438.147132][T18516] [ 438.154672][T18516] CPU0 CPU1 [ 438.160039][T18516] ---- ---- [ 438.165408][T18516] lock(nr_neigh_list_lock); [ 438.170101][T18516] lock(&nr_node->node_lock); [ 438.177399][T18516] lock(nr_neigh_list_lock); [ 438.184607][T18516] lock(nr_node_list_lock); [ 438.189204][T18516] [ 438.189204][T18516] *** DEADLOCK *** [ 438.189204][T18516] [ 438.197351][T18516] 2 locks held by syz.2.3512/18516: [ 438.202550][T18516] #0: ffffffff8f537c08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 438.211381][T18516] #1: ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 438.221456][T18516] [ 438.221456][T18516] stack backtrace: [ 438.227371][T18516] CPU: 1 UID: 0 PID: 18516 Comm: syz.2.3512 Not tainted syzkaller #0 PREEMPT(full) [ 438.227396][T18516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.227411][T18516] Call Trace: [ 438.227419][T18516] [ 438.227428][T18516] dump_stack_lvl+0x189/0x250 [ 438.227455][T18516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.227476][T18516] ? __pfx__printk+0x10/0x10 [ 438.227502][T18516] ? print_lock_name+0xde/0x100 [ 438.227529][T18516] print_circular_bug+0x2ee/0x310 [ 438.227551][T18516] check_noncircular+0x134/0x160 [ 438.227574][T18516] validate_chain+0xb9b/0x2140 [ 438.227595][T18516] ? rt6_disable_ip+0x6b3/0x720 [ 438.227622][T18516] ? __lock_acquire+0xab9/0xd20 [ 438.227649][T18516] __lock_acquire+0xab9/0xd20 [ 438.227677][T18516] ? nr_rt_device_down+0xa9/0x720 [ 438.227696][T18516] lock_acquire+0x120/0x360 [ 438.227721][T18516] ? nr_rt_device_down+0xa9/0x720 [ 438.227747][T18516] ? nr_rt_device_down+0xa9/0x720 [ 438.227766][T18516] _raw_spin_lock_bh+0x36/0x50 [ 438.227788][T18516] ? nr_rt_device_down+0xa9/0x720 [ 438.227808][T18516] nr_rt_device_down+0xa9/0x720 [ 438.227829][T18516] ? do_raw_spin_unlock+0x122/0x240 [ 438.227853][T18516] nr_device_event+0x137/0x150 [ 438.227871][T18516] notifier_call_chain+0x1b3/0x3e0 [ 438.227894][T18516] netif_close_many+0x29c/0x410 [ 438.227922][T18516] ? __pfx_netif_close_many+0x10/0x10 [ 438.227947][T18516] ? bond_netdev_event+0x227/0xe80 [ 438.227970][T18516] netif_close+0x158/0x210 [ 438.227994][T18516] ? __pfx_netif_close+0x10/0x10 [ 438.228017][T18516] ? tun_device_event+0x77/0x1020 [ 438.228047][T18516] ? __pfx___neigh_ifdown+0x10/0x10 [ 438.228069][T18516] ? macsec_notify+0x104/0x660 [ 438.228090][T18516] dev_close+0x10a/0x220 [ 438.228119][T18516] bpq_device_event+0x377/0x6a0 [ 438.228146][T18516] notifier_call_chain+0x1b3/0x3e0 [ 438.228167][T18516] netif_close_many+0x29c/0x410 [ 438.228194][T18516] ? __pfx_netif_close_many+0x10/0x10 [ 438.228224][T18516] netif_close+0x158/0x210 [ 438.228247][T18516] ? __pfx_netif_close+0x10/0x10 [ 438.228275][T18516] ? do_raw_spin_lock+0x121/0x290 [ 438.228299][T18516] ? __local_bh_enable_ip+0x12d/0x1c0 [ 438.228316][T18516] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.228342][T18516] dev_close+0x10a/0x220 [ 438.228370][T18516] bond_setup_by_slave+0x5f/0x3f0 [ 438.228396][T18516] bond_enslave+0x7a0/0x3a20 [ 438.228427][T18516] ? finish_task_switch+0x266/0x950 [ 438.228451][T18516] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.228475][T18516] ? __pfx_bond_enslave+0x10/0x10 [ 438.228502][T18516] ? apparmor_capable+0x137/0x1b0 [ 438.228523][T18516] ? full_name_hash+0x92/0xe0 [ 438.228543][T18516] ? netdev_name_node_lookup+0xdf/0x120 [ 438.228565][T18516] bond_do_ioctl+0x635/0x9b0 [ 438.228595][T18516] ? __pfx_bond_do_ioctl+0x10/0x10 [ 438.228623][T18516] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 438.228648][T18516] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 438.228674][T18516] ? rcu_is_watching+0x15/0xb0 [ 438.228694][T18516] bond_siocdevprivate+0x17e/0x350 [ 438.228729][T18516] ? __pfx_bond_siocdevprivate+0x10/0x10 [ 438.228759][T18516] ? full_name_hash+0x92/0xe0 [ 438.228778][T18516] ? netdev_name_node_lookup+0xdf/0x120 [ 438.228800][T18516] dev_ifsioc+0xb57/0xf00 [ 438.228829][T18516] dev_ioctl+0x84c/0x1150 [ 438.228855][T18516] sock_ioctl+0x719/0x790 [ 438.228877][T18516] ? __pfx_sock_ioctl+0x10/0x10 [ 438.228898][T18516] ? __fget_files+0x3a0/0x420 [ 438.228925][T18516] ? __fget_files+0x2a/0x420 [ 438.228953][T18516] ? bpf_lsm_file_ioctl+0x9/0x20 [ 438.228976][T18516] ? __pfx_sock_ioctl+0x10/0x10 [ 438.228996][T18516] __se_sys_ioctl+0xfc/0x170 [ 438.229019][T18516] do_syscall_64+0xfa/0x3b0 [ 438.229045][T18516] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.229068][T18516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.229086][T18516] ? clear_bhb_loop+0x60/0xb0 [ 438.229106][T18516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.229128][T18516] RIP: 0033:0x7fbc1818ebe9 [ 438.229146][T18516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.229163][T18516] RSP: 002b:00007fbc19099038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 438.229183][T18516] RAX: ffffffffffffffda RBX: 00007fbc183b5fa0 RCX: 00007fbc1818ebe9 [ 438.229196][T18516] RDX: 0000200000000180 RSI: 00000000000089f0 RDI: 0000000000000006 [ 438.229208][T18516] RBP: 00007fbc18211e19 R08: 0000000000000000 R09: 0000000000000000 [ 438.229219][T18516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.229230][T18516] R13: 00007fbc183b6038 R14: 00007fbc183b5fa0 R15: 00007ffe100da738 [ 438.229251][T18516] [ 438.687396][T18516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.688137][T18530] netlink: 808 bytes leftover after parsing attributes in process `syz.2.3512'. [ 438.694678][T18516] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 438.715270][T18516] bond0: (slave ip_vti0): Error -95 calling set_mac_address