last executing test programs: 7.853759001s ago: executing program 1 (id=5659): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYBLOB="c1e6d68b74c1ea8db0db188be78a01afaa200869987313a4116afab56f7b480e", @ANYRES8=0x0, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0000400000000800450000270000000000019078ac1e0001ac1414aa0500907803000000450000000000000000d08fa7aa000000ffff7fff"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'pim6reg\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000003100)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="9f2834b1ca6c81088dfc2f85ba69240a4af162ff56aed8b1620624", 0x1b}, {&(0x7f0000000340)="3e7d1df2ea6985041f9783e126908a5a2e81ebeea0f79400bbdbdc2efa0a61cabad093846059d4f5281bb072233edf9d42ddc169b361f542eb04a2209f2a544ab900ff1066ab7a89882950fda5bc9b0554e8993fa373252dc8420fce43cb0c0d38a0cb936638a0ce7cb9a65fc8eb48579bc99a4eb33a787512451d9c6fe301533b2f242e668660dd70c1861e0edb0e5701af331c2b3c50775b08c31b97ae865cec2c174c1fb6c10e6423196120a88e9820554ffb7ae6e8d6578e4937196c8b08b9cc5eae4cba2218e4b537bbc8d110a27cf57feefbe365232df4e86ede005536e51f16bff944dd1d3db3fa2668e0b8ad3b0944da", 0xf4}, {&(0x7f0000000440)="489cff71b7638585593aaf6bf7b3813ec6624c05592d29a898fcd8157c917ee13c81ad73db507583a4ebbf9cabc63fb86b352d2164e6d20eb8ff3232e738089ebaca824ad1a6e1f3d7bd89de63e6f111471f7607db37f79d4cd2165df8629442", 0x60}], 0x3, &(0x7f00000004c0)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xaf, 0x3, 0x7, [{@broadcast, 0x7}, {@initdev={0xac, 0x1e, 0x4, 0x0}, 0x3}, {@rand_addr=0x64010100, 0x3ff}]}, @end, @ssrr={0x89, 0x7, 0x81, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@end, @end, @rr={0x7, 0xb, 0x84, [@private=0xa010101, @multicast1]}, @cipso={0x86, 0x2b, 0x0, [{0x1, 0x5, "5618b8"}, {0x1, 0xf, "c205bea0543be5b5b3e6ef355d"}, {0x0, 0x5, "82025f"}, {0x2, 0x4, "990b"}, {0x0, 0x8, "02b0acfae60f"}]}, @rr={0x7, 0x1f, 0x8, [@empty, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x2c, 0x2c, 0x0, 0x0, [0x8, 0x0, 0x9, 0x200, 0x1f2370ec, 0x7ff, 0x1, 0x9, 0x8, 0x2]}, @timestamp_prespec={0x44, 0xc, 0x57, 0x3, 0x0, [{@broadcast, 0x7}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1c7c00}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @broadcast}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@noop, @ssrr={0x89, 0xf, 0x4e, [@loopback, @multicast2, @multicast1]}, @ssrr={0x89, 0x7, 0x3e, [@multicast2]}, @noop, @timestamp={0x44, 0x14, 0x47, 0x0, 0x9, [0xb10, 0x6, 0xef, 0x1]}, @cipso={0x86, 0x2b, 0x3, [{0x1, 0x8, "48ddc34a70f5"}, {0x5, 0xc, "6392e665e7031b71aeee"}, {0x2, 0x7, "5e4b2f16dd"}, {0x7, 0xa, "5d7785aa7cff57ff"}]}, @ssrr={0x89, 0x1b, 0x18, [@dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0x38}, @loopback, @loopback, @multicast1, @local]}, @timestamp_addr={0x44, 0x1c, 0xa0, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@private=0xa010100, 0xe1c9}]}, @lsrr={0x83, 0xf, 0x47, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote]}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@generic={0x88, 0xe, "0e479197092d15d7fae3ee0f"}, @timestamp_prespec={0x44, 0x34, 0xbf, 0x3, 0x9, [{@remote, 0x2fcf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@broadcast, 0x8}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x97}, {@private=0xa010100, 0xe}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x34, [@rand_addr=0x64010101]}, @end, @ssrr={0x89, 0xb, 0xa9, [@remote, @loopback]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @broadcast}}}], 0x270}}, {{&(0x7f0000000740)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000000780)="96bab332ae5398678eef5d3500faff76dd7acc6f266b70cf5c5569e92036a7fdb93c69236ada14ad958ef87255f81403d5b752430bb52ebba8de0e76b15977d727bb7facb1302e29ff8981", 0x4b}, {&(0x7f0000000800)="a7f6e0928d21fbcf970d09", 0xb}, {&(0x7f0000000840)="2ae52d9c6a7e2f0688672b3a41e7c11555a2e18058ad2dd11ea190ce03fc89aa03ff4617fa3e63de2e02b432617cf184366d3020447ba98e125547a78b2f5c7783157284a9c68113e03dd2853e6694e66cc84a9ea6b4a712d61960579b26c2ade3eb8b860e904a853f4aa4e197a1ae1498ee0e2ec60ac74dd7a2a350e91f9b", 0x7f}, {&(0x7f00000008c0)="62110b5ad5aac8de471553c202de6dd56251f448873a4f3d404cbbd6b82f6568253c8205ba08dc3ba7f7a5e34f2587bfb07a306d5f457b7cc47e2b58afbaaf4eafdb4b9429fa016f493319cc4b1eccb380ccca359ffc09cfc117c8063de7f9d16ac898f4bfb18f3acb0b7ff20ef574df05d44fad66fcac0930d59ecd81e4bb8d1375e7f9a040fde743579f7f79ff216aff15caa833563446c75bbc87c90b915b0816d03db5e3", 0xa6}, {&(0x7f0000000980)="0003e1a25125834ae5b3c7ede3615d1b2e27f3763d9654a1400243586313d9a246d64dd06078ba134d30ff8508fc941d3e2005aab8007c3d454cc0db49f268849536085c717cc8f9d217a69a789a164587d0a6b859ec39b832770a053b8e03ed706fc1b9b714062311a43260498d43d44cc1a0ccc909acd874fa124ad2118dabe9ccd003b6d740b2ba12f29e3bb108cbd0b4ab5cbde01422b2a5faa39580937d5c457ec7e049652ba28ae5f76f35cd0a43d969769c82", 0xb6}, {&(0x7f0000000a40)="54cb71fb18820e66e3570e276a742fc1f960d5114ee7f12c518c1ca96e812b9c8e03e0154f4471bfc4fb0282dfbb04f0f0b469c7ac6eb6a0ac09689a36c968b85134cb9d3048f45ceab5fa1e04a65edecd2381c1989cf15fdf115853ab9c5b72a032749f148f861ab8a9", 0x6a}, {&(0x7f0000000ac0)="3e4b82d28f655433aae6ac7161cdfb46a6567dcb60060e7027ce5e26e21bff5be2fd96f37a91f9ea82368891c0b25f70c2e0f4117a85c87a4e49a604c22beec71d59fdad20981890", 0x48}, {&(0x7f0000000b40)="9fcb393dcd868bcdd82646408760c913b356863891544a7e29a22521ec71e4470f8f7ee6a262c6c14a5d78de8656e9627262bff4abee43e8bc6d487b3724e4667ce0a1c786ac7636fd6090bf4e7ce25d05db47e372e53918b2db06c03958cfc93c9b8673908fb1b1c6b368b14cf6de9710a1b1a3681efc5b09ee485b9114c39c1874b6b2d08f964f8519af6a36f5a2cf6cf828344db69532eef030d46cf160bd63279cf4ef6f6ef7d28dd410fb64a87051ed06cd33b070ab1f072f21a8446525e73a8ea8805cb3337b72cf633b7701862beb60ef6645bb2125feb63b5537838be6f0eead5b63f8ced3a85e002ea1833a693412d8e3bba793bcfe5ee626957d70997affc243695d5b400584abf1331c80c6702bb1f7e0d3bccd5d2e42d5a49fea195d0f87b4cf9a973e05eb178970071b4f6c00faaf9b35dd67e5d512f5cbddba092abbac2e6420bbf3c2a8d67e249453283598b5cdaabe1b695da91e0323c9a4fed1a551904a5a342bfdae174ee4419b9a3f525db4424ac4a465ef1ab917c793426c5e91b88ad0a155ad83c9ef0e71081ae0540017fb3221357d88e43740387c39e394ab1c7021e9fe5fec48577a584314724f07691e306757a89e23f8ed91fafd6d96744e5e4cffaeff1c7f6519032920eabc6d64844da3e7e43a7cd1f117ae90948597b8cefd0c55f09ce68349946d40e10ef253ba41c6f1556af69c2000634bc187bd753f2d48c6309d7275acb0361a876d48008eeb30eba559b856d8e08de1946c71584e5e9e1cd46c9f69a403c5cc345d6a6ab2658d12d0fed69ac0f899db02cb71bc8f8f4658edad50613e71e17c341883c98761cedb8bda39ac289d341e6172653c59789641af9e317ecd367cfb840a37a6dac884d6501e9a89322b512b1826f4bf7a0495211c437570a37a39f502610980fc738d0f9d28baedd375ede9bca7dbac8e322f81c53dd7611a9e3e5780c706905689d4c4042025a1264495de9ae5df971bd0f61ac059eb19d784a19bae11fe934ab956edf75bae9329b61c9ed79c8cfdfad4d2bc964f707174c183a6b8c8d24d4d01ecfd85c508d8e407f895ddd5fd61c1b11453c566655b45915250528eba6de6ea4d4ff55146b7dad19870a830eea4b3c167a3bb08952f585e0b794183d2b6136f849dd20fc1d7ed2feab5bae1b8cd6280393670d02d781efa62cdeedaaf2c64224b45b6d3d3e6dfaf0b5c7cf65ced27e3a1d36037cc6dc9a863a54a1369460f1545f470f273d61db750da0a0cbf0640720789c268a80b904e7bbe2b13d590f5586c7af62f38404d5d8364b1af8f6da0b76650b774a6df81269d22817275856aa99c8d2be340fa2abf9c10fdd25750eb8ab4d2721c6e09e3c2ded431f89922e1df745c09db1303e16ac70ef940ca8964ec0f0371c04abc0532d0fcf2d7b4882f1b0950457b87b1aaf0fa673a63e5436f36ff4be9ce1d8330271b6ae4e43e1c912809bcf2e85e53ec3f8ec0e7c7dd18bae5994d6c74b75fbb04f2822d169473f156a94cdd37da864606ef9ffed93ba0b420c47439b8930b6c5a70cbc4ad35720f29718ea0676d4d7882462454ab4fee5aace87ce32948809615c993c9c4f7ead958cf472d188ea44d5789f711bb6bb8a4ae311a600f5c18d9e38384387476716bce85d88798036904292a7d8a9dd0651f3bb05928479076b22fdab87d347917cf6f93f22af120ce7cb645fe95e7aecefd01eb4b2c5c620d31a7ba211a347932196f6005f00da6a13535edf7fb25b814267600919f7e4bb67d1a5fca6f03c0c6fdf1fbad2b2cad1d32f21c8da3cd8443ba5f9dcf8d1cdca150e8487b2e41f43bcd43fb046c0e7043c7c506b650c37b59ec8843ca15dd0235d88edb3dd1e65a27d210d391a81a08e116d7a2c91fba138f47c4133f9c4da84f48caaca768d12688a1a11d4a3a4290771264ef4da1c20ef624237c37f406c3b3dfcbd298b30e1936d9a7fcdecd29e023512e8672c3b868aaab40fb8a50c347e60359d0cb7be3727e27284b042922e64948c4993e66f141d9f1a405f5a9b410226466f7185839c934876b81672cfc2d7026be8c56afd921a0fb7142f329f75eea77df5b8f12fe2ebee443f55b3da0327fc58181c42eda3abaa420f8226d991837efb1f3190ad1b5ad6c92f1f7c0d8bf9914017e1079ff71617e6441b321d20b2f44d0159d001853efec56edc8b3ce170760ecf9454e8591dfc581166e21da185306a69a37afeae65d3861e44da528e0e39f9f9cd47d9c6fbe13e1144451f3d70d13e6d395a1d34243ab501458bb23ff533f4331e70b4e1596bfa1ed061957c5c19e2ecfd332dfdea01f2edf6e1f5359aff26d8bba609027d31b72f5685285899b2844b1b389582b5a01548dd8c12b498decf2f8cfa4b684279eec9d85bcbc2d52a3b88f5dec9b6451026332a65d160289a4aa8a4bc3a82824e070e86490757cc485ef51561aa6c3faf8cab8700cb79cac4100d76c4b7db7d26c165d556b9ab80c634906ba38a44ba58829f980bb71021d611a2e7db7db36d5e91deb193e514f71c9eeb9fc45f21740d012566ca442a187e589cfaa85aee751f0d7a2192415db48af1b0e1479c7b7aa4f2686067bc87c4e88f49d955d67fe0dd439f384ccf0df5efdff6a0cd83d636db00f8e4070ff1109002f7476632616fda34820a17598c44f3c88be5f280089e2dabaa65915899b8d87a5e52097ae38cb2862f8f54b2289313eceab5da0bab7f9e3ef039e825b669f72cb0ed06d9de7721e149429256a7a9257999a61a0cb3f25c8bc37d8c74d3440b79306311ffa9288747e9a27ac20c9e15477433d5adcde01cbdc4eb68e7199cef20c62150e82506f3bf3540833539e9f0511cc534fbefbdefbb81a877752e300d0fc876cab7a7e3d498e1fa235cc936783583286b7800fbd416a8418166cc17530554568d5679312b113058064032c18674019e1a9b36dcb94e533e0b95695a0ca31df3ceeb4815ccb4748f4a094006cff7c0ea86713146ba0c531b35c8b89f45f7c0fe30c499fe1d1f2c2af127c2f55da15cd748fb61503549010d36f8c9f253c35ce0ce4bae04f63f028c7342ddda13422dc950a7e0b712d0daf9d1e2c0529d1dba228f91079cbdbf83455915a697a864661b0a3b0e093c3326d4f4c25bdbad58881a6afb562fec7b6c2502f8d0fd26f87673810fe9ab1b654edba7a06d0bc4fe031a3cd82affa74c145a13b170cc113a4bfeb6e39dc52c4c9cc16347de18b92fee07109d4e69acb993ed744a5a586b8605974080fcc80a07c347db9375637120ea4f52fdfa4f02e29cf158d9230476581ac5f0e98618cdd6983123800af6d193fac645e6086d9e2f23b9f7a7263f8e9d0eb18e13a590a86c4c80465a3b161862dfac5839de9fe888bdf7005acfd52e3187855d623896ff3275e66f1b30314dfa9c05323760705dbf6a934e84bd44f404b4948d49c652f76eaf7a390b07b6696d1b83afc098bdfab20917b8efe8b03283be77b665c7d29da6938a555a36469aafabcc4d6baad83dbe3d4e2e71174f94394e8a9a639973cb86d0fd8dacb1b967855a8fee649c9c314af4939dc03380e8afa3dd25e857c93e9775fc8fda2b77f8d21742d8855acfb6658f2f280ae0f39242c5f813d48f9af560271052478e65d1abe91796e9a9740ff3aa3e19d8319abae554cfed20de070cc7ddf5d8626612353c797bae25f089d803172b766d6a0b47fe592fc235a3f8292fc7ab3f15d7233f4713d96935f78a398a667fdd0f80a35bab8b4b146935b2a680ca3f5dcc7212da828814ebc69353b82f9a8c3691ecb6a55f88a690790429ceb0ed7638b7eec9e80208738fc55f93077bedf9838901d7be2a47a1f4d11742ba4dcd4ee0718f2ea80381ff3c4053e4e1b9c194a2184f93e7f786f4b7aecbe0213ebb7436e8736b12f11a0cc638789fb2de0354305b76c4fb854eab37cf1bbf7d0c44c6866e12c0ae92d2336e3d750578b1dcdf122661c3dc5eed118dd68e86f2dd4a83f173d69e4c2a5d20f369f46c1651953a193334b56e581f7a277094c4e94ecf51ee86e3f688be0f91a8082075432121f1b7593e874c713b205f4bfb1cc664c48a635476132b25f579bd009f40a1cd0d4bf5996e42b944ee545a55fe0181fcd23203426301c435eaee490eb838954382231880c0e86af54878fe71ef612a5060ce0c3188be5a9025de8ca8d6a248f26ad52d5ef76d66f6b386972565f7ff53fc3443beaf2a3a9dd69febc360ffcb7844cd99a046ad503f98df5164e7532767a020bfe2499d8e740cb93c282f299f9bd20a08f43d677fc78597569c8b6ffe52484c5f4811e0321708fe6bc08d066176240db66f1e55546d1a8899360012ac1c3c2229486d0c73882b2a8d28becc45301b690508c37ac79aa4f7949cedbff2f74f12d6caecac3ac8d7fdeeb41cd60fdde25d122217dca63c8b2579ffc16f1cc91da1cbd2c1375963b413a5ba0ba1825593ec8554481865e12e094e3cab84b0d8ed6f8373ff3feea25c754e03ca0df53c3afc1a34ed1df72905d81f1715c4f073495a957e92f624d460f6aefefbb764418be72b663cd0acb3bfe81420910fd200ad99faf47226a48ac01ccc9eaf9f8255d3c933d461fac5c5e8eaf91186178095b7929a0bc3113fe8447495f4c8af72c1e3d6c29ca8eeed171a9d224041fdda8d020ac1e7be2579784b055ca62f92ebec5bcbd5611fc01a79b90dcf830337543ec5047f358dc658d65c56d8fd1af1cc7da0ee3a78dc5503fa8ce2d94908e00b00a452518873d66bd1a77b300d3c909e064b8f7e5d9fd83189640fccfa6389e244a468bb34f2b67f886fe952ff054a10e9a83fc83da6ad96367531fa34410e8eccd985506bf29432c312117332a8c1e65612f692c8396d87fe1c83e5e2c8b34cc48e29730e3b65dbf6caade03f9c68e62264f0b3d3f5ef776004c0329a0bc21c28cbef3b917967f6a22d7cf8a37142ccef4c932359473b7b82ef2a62baa0319c5497d71ba6e62630b0b421f9a14a2b5b02b8c0135af42e06785142e67555f2ffe38fe0185b5af38f02f5973608e28af045622f59b945151c2d0ed23ab2ae2ef6e8109f8a748b4a5de119a4d12072debf990c6eb4c5e2edf5f1b5bdbbc04042697cae50c084066ac900b3b90b0862a87bdd1aad468effe39de178fe07bb7d3af2d642aac7904dc1ef4a77dfd05a00d50006425ac7d98a47138a10f91f6301b1565d1bd178353a1a35b161026ab900863eaa35ee9e13d6ba2ed7baa6be50f29bb92578f9c18f7474266ffbfb37f2b8d8813f21a04b8adad192572c449db19ea92203c420d3750b5f432b73aa7a3e4b9e17b005414383a9ef4914bb6bb9a438322bba4ed017229925ddd8082d3e3cb8957dd740b20bf8c4dd5f3688c3490f764a9ea45d4e4eb6512902776f0041e23cca347bcaab56552c07a74efb09c7d718c49b9ddf5d23dbeff99fec49cb70da522074cab15473ec6f411036cc02b657480364673b966a77d712c64a664bb2846fc3044d5360fd6962e371d39de5f94d064d257de7dc8504a4696bd8f6c594275e69174ea2281bd760584ba8484752e3816503d50ac180559fe32d7fe0e9f63a64de2f073b464a548a4e14c2a44a4b73990b96e2fc876701ea329bc652eab3eaf1809204b4f7476157a5fd8a7fc8f5ab8c9b2d2597dcd54e414a6a02308f33a2fbbf92da339c6e8a22a195c86d6deecb3cca6af13565bd3627eca25b362eae62662e983eb0e1a850802123fa5bee1ff6e0056a0bf0c3b0376e90c419d46", 0x1000}], 0x8, &(0x7f0000001bc0)=[@ip_retopts={{0x24, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x2c, [@empty, @remote, @broadcast, @empty]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0x0, [@multicast2, @multicast2, @broadcast, @local, @multicast2, @private=0xa010101, @private=0xa010102]}, @end, @timestamp_prespec={0x44, 0x44, 0x7a, 0x3, 0xf, [{@multicast1, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@loopback, 0xa2}, {@local, 0x2}, {@loopback, 0x2}, {@multicast2, 0x7}, {@rand_addr=0x64010101, 0x1}, {@private=0xa010102, 0x354d}]}]}}}], 0xb8}}, {{&(0x7f0000001c80)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002f00)=[{&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000002cc0)="cca788e3ed4694a015ed89c99df67ca0009d486e96310b4a1a4fa9e9660c56d188fc17ef", 0x24}, {&(0x7f0000002d00)="56aa2dcca28557c1664138b3da1f830b5ac8324e51e024c13f46ddf8ffccc4f8ab2fbbda31debd79c0f3040ebe93d60cdc5ade9ef09e6be1acd4c29cc49177198686a295384b309794c85007693260cffd9efaa5339d8bd6688975964730395304882da5d19c275e847e773dfc200163ddc195c94f5ea8fde0b3c4737532a73bbf0fbbb9325fd6d26ecde52056bf62cc8fa073cfef538cc862fcd7b0b764b87783f0aed4044b1d90b1a1ec8348728900bcb974eb375ebaaabd892ff686a8c7157286cc4ba0abf288f5", 0xc9}, {&(0x7f0000002e00)="733467d0b338d3906d5f15113ce8d5e040c37945985e6bf1b0c472a60a347faaf44ac8a597b0c6466e5098dd06d20cd24ed12b277a6a057396e9d51b18b626da447c4cde219166df05699b64a43be0a90f83726fa4f01fb3fae981fc347eade52ad80d77b33b706cc0f9917eeb1e491bbf3a773cbb4447fe45f4566410c2b23336ec078aba650d234d37a71786224f811dd39dc2af84a2c44f06d454ca4661bd6f0f38ac413cab0cff808d3e490b96117636d3d7e0b69212e87fc303073f23d4fd153aadc48e125e26d604db1a", 0xcd}], 0x4, &(0x7f0000002f40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x58, 0x0, 0x7, {[@generic={0x83, 0xc, "f1ccaa99a0cab7f9e156"}, @rr={0x7, 0xf, 0xfa, [@local, @loopback, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0x1d, 0x3, 0x7, [{@multicast2, 0x100}, {@broadcast, 0x4}, {@private=0xa010102, 0x8}, {@private=0xa010100, 0x7fff}, {@remote, 0x9}]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0xb8}}, {{&(0x7f0000003000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000030c0)=[{&(0x7f0000003040)="a2ad011bb0775e780c9f6ee4d2054b2d5593a6c9dc0790d2716cad8ca1c4390ab776327e8867b7b1f145c2560bee3064524b27ed0cd9a18d7eb55d35e832afa8a4f90d59bfd629a1a1def78be1d2f3a474c8139ba83f61893307e4dcfc16dceabdf94e314d1a55", 0x67}], 0x1}}], 0x4, 0x11) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b, 0x80}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4004800) 7.389437563s ago: executing program 1 (id=5664): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000229bd7000fcdbdf25120000005c00018008000300020000001400020076657468305f746f5f626f6e640000001400020000000000000000000000000000000000080003000200000008000100", @ANYRES32=r5, @ANYBLOB="08000700000000000800010001000000428464f1a353410e"], 0x70}}, 0x40040) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40500000000000061107a0000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4070000000000000057b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b5d5213d6546b1a08252783dff1202f84844eed8340d9f6db0cb60200000087ad14d45ce0b33786084cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e70ca7370fbbbbf1777164557260ac4aaf3a1d0dc47f67a54c4d7e368356099928a3974e56fa1d1fbedae38520b7717ceca2f491a185b0894c87f7252ffcd1c6c326a39ddbcf836fe936b467441708b786fdfc376d90025814e7881b813a7fc96613c15460b390471e85d23e139f34d6c317858d1400230d"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) readv(r6, &(0x7f0000000480)=[{&(0x7f0000000300)=""/124, 0x7c}, {&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000440)=""/5, 0x5}], 0x3) 7.335662654s ago: executing program 1 (id=5665): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x44, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, [@hopopts={0x11}], "bf0c7de8ed8f6ec5402a1859"}}}}}}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, r3, 0x1, 0x0, 0x25dfdc01, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40000) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xc0, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x75}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x746b86cc4b794f03}, 0x40000) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0x1}, 0x1c) recvmmsg(r6, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, 0x0, 0x20008010) sendmsg$SEG6_CMD_GET_TUNSRC(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x7ff, 0x1, 0xd, 0x2, 0xfffffffe]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x48}}, 0x8001) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000983cd52d7000100180001801400020073797a5f74756e00"], 0x44}}, 0x0) 7.182460463s ago: executing program 1 (id=5668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2000000}, 0x90) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) connect$nfc_raw(r1, &(0x7f00000000c0)={0x27, r2, 0xffffffffffffffff, 0x2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[], 0x0, 0x5b}, 0x28) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10) sendmsg$tipc(r5, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) r6 = socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}, @TCA_U32_MARK={0x10, 0xa, {0x800, 0x8001}}]}}]}, 0x84}}, 0x20000000) setsockopt$inet6_mreq(r6, 0x29, 0x3fd307b025974beb, &(0x7f0000000140)={@private1, r9}, 0x14) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0800080007000000000014000000456f001c00660000401190780a010102231514124e204e2000089078"], 0x2a) 6.854903535s ago: executing program 1 (id=5672): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) connect$netlink(r1, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="af6d5e547258acbe596ab290e7c330000000", @ANYRES16=r3, @ANYBLOB="800227bd7000fbdbdf250000000008000500ac14142614000c0000000000000000000000ffffac1e0001"], 0x30}, 0x1, 0x0, 0x0, 0x4904}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}]}, 0x44}}, 0x0) 6.711345587s ago: executing program 1 (id=5675): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000080), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000080)={0x8, 'veth0\x00', {}, 0xa}) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_queued\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x20, r6, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x4b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000041}, 0x4081) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, 0x0, 0x0) (async, rerun: 64) listen(r8, 0x3) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (async) r12 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r12, &(0x7f0000000100)={0x1d, r13, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r12, &(0x7f0000000080)={0x1d, r13, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) sendmsg$can_j1939(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)="c8ac65a9fd17e04d5b50c4b29b125b0d71355e39ddb2ac7452cb8820193bed15439063b91fb164ed54aa9a6f2e403d78cdbb885025a17931ded46740ffd157db30a050e17e3299f49fdade81", 0x4c}, 0x1, 0x0, 0x0, 0x20000081}, 0x480c4) (async) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r11, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) (async, rerun: 32) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (rerun: 32) 1.588773939s ago: executing program 2 (id=5760): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x8, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}}, 0x80) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) sendmsg$NFC_CMD_DEP_LINK_UP(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fbdbdf250400000006000a0001000000080001006b9838"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) 1.536213376s ago: executing program 4 (id=5762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0xe38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd300800100000008000100ac14"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000580), &(0x7f00000005c0)=0x4) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x46) socketpair(0x5, 0x6, 0xfffffff9, &(0x7f0000000380)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000180)={0x154, r7, 0xbe3c2dd83aaa6de4, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x800}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xcb8}, {0x6, 0x11, 0xc}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x8}}]}, 0x154}}, 0x40080) 1.403135321s ago: executing program 2 (id=5765): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x8, 0x7800, 0x1, 0x2, {{0x1c, 0x4, 0x3, 0x2a, 0x70, 0x68, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x54, 0x6b, 0x1, 0x2, [{@rand_addr=0x64010102, 0x7ff}, {@loopback, 0x2a5}, {@private=0xa010102, 0x23}, {@local, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty, 0x9bd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@remote, 0x2}, {@rand_addr=0x64010101, 0x9}]}, @noop, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0x40, 0x9, 0x5, 0x0, @local, @private2, 0x7, 0x10, 0x7, 0xcf}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @empty, @broadcast}, &(0x7f00000002c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1cc, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x1a4, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x5, 0xf9, 0x1, 0x6}, {0x3, 0x0, 0x8, 0x3}, {0x6, 0x6, 0x8, 0x8000}, {0x7f, 0x9, 0x0, 0x1000000}, {0x488, 0x9, 0xab, 0xef}, {0xd4bc, 0x9, 0x7, 0x1}, {0xa, 0x4, 0xa, 0x4}, {0x5, 0x8, 0xa, 0x4}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x4}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x5}, 0x4010) r6 = socket(0x3, 0x6, 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@deltaction={0x54, 0x31, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x4004011) bind$bt_hci(r6, &(0x7f0000000700)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) sendmsg$nl_route(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@ipv6_getaddr={0x34, 0x16, 0x300, 0x70bd28, 0x25dfdbfc, {0xa, 0x80, 0x80, 0xc8, r5}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_CACHEINFO={0x14, 0x6, {0x4c5563a7, 0xd, 0x8001, 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000840)={0x1f, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000008c0)={0x4, &(0x7f0000000880)=[{0xa, 0x7f, 0x5, 0x5}, {0x3, 0x8, 0x6, 0x1}, {0x7, 0x5, 0x5, 0x720}, {0x6, 0x5, 0x88, 0x5}]}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000900)={0x3}, 0x4) ioctl$sock_netdev_private(r8, 0x89f3, &(0x7f0000000940)="3d40c8e55d8e6ef5627a47561ce03a8c4bd5e5e4ed325d1c82fcc6e21be69e8e904cded615211c64b0c7391a535adfd0682e66d8ae12a1f8b940e1c108d72efd5d2a5806427bd6744666e1b775447de2ba9b6691ebb81832c57c0765c55a71fb07dfe9ac1d4317") ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000009c0)={0x4, 0x6, "9bb07e", 0x6, 0x6}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r9, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0xa, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x24008080) socket(0x23, 0x0, 0xd) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, &(0x7f0000000b00)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b80)=0x14) sendmsg$nl_route(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=@ipv4_getaddr={0x2c, 0x16, 0x200, 0x70bd26, 0x25dfdbff, {0x2, 0x8, 0xa3, 0xff, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x4d, 0x4, 0x713b, 0xc152}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x5) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000d40)={0x0, 0x74, &(0x7f0000000cc0)=[@in6={0xa, 0x4e24, 0xfffffffa, @private2, 0x7}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e24, 0x6, @empty, 0xa9}, @in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, @in={0x2, 0x4e20, @rand_addr=0x64010101}]}, &(0x7f0000000d80)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000dc0)={r11, 0xc}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000e00)={r11, @in={{0x2, 0x4e21, @empty}}, 0x37, 0x2}, &(0x7f0000000ec0)=0x90) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r12, &(0x7f0000000f00)={0x1, @le_set_adv_data={{0x2008, 0x20}, {0x0, "390008d6cb11bc471596990f7e019ea6de7e23fc2fdac1edc08b3494e98cdc"}}}, 0x24) 1.216564156s ago: executing program 4 (id=5768): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c5eaaf07391c763e1daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket(0x2d, 0x2, 0x0) ioctl$SIOCNRDECOBS(r3, 0x89e2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x7e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd700000000000070000000c00118005000200010000001400018008000300ac1414aa0600010002000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x1) 1.064506583s ago: executing program 2 (id=5771): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x0, 0x10, 0x0, 0x2}, &(0x7f0000000500)=0x18) write(r1, &(0x7f0000000080)="24000000580025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) (async) write(r1, &(0x7f0000000080)="24000000580025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r3 = socket(0x2a, 0x2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000280)={0x9, {{0x2, 0x1, @multicast2}}}, 0x90) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x9bb2, 0x8}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000008000000c8"], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000008000000c8"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="001c0000008500000086000000181100000000f0ff000000000000009b1c4d0ba27fd9f8a02f41da7c98c41b3ff749277fe3a07b507b497cc36b7fe9391c170db3fe6e11878fb90de67a58486a0d7f67e51daeeea0b63f1f2762cd628ef39f268e2a4c0b978c812b17f378dbb9551cfa49cf56e0afd8eda0ffb3d2390bc10b417acbfa2c07436692d9141a4da2a9027510de261dc4064a8503d6aba3273233a8229d5928e56379565c75582fca79caf2bc9c2d64dca585847e8dcf2bbd0c4a5c4bbb503f287df4ca39f5e84ee4", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x19, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800008d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b71e1de2d3c35aa304000000000000850000008200000003000000bf91000000000000b7020000010000008500000084000000b7000000000000009500"/119], &(0x7f0000000240)='GPL\x00', 0x10000, 0x12, &(0x7f0000000480)=""/18, 0x41000, 0x76, '\x00', r5, 0x25, r9, 0x8, &(0x7f0000000640)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x4, 0x3, 0x7e}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000740)=[r10], &(0x7f0000000780)=[{0x4, 0x4, 0x4, 0x9}], 0x10, 0x5}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=@newtfilter={0x4c, 0x2c, 0x605, 0x70bd2a, 0x20, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x4c}}, 0x48c0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newaddr={0x34, 0x14, 0x210, 0x70bd29, 0x25dfdbfd, {0x2, 0xe7, 0x40, 0xfe, r5}, [@IFA_RT_PRIORITY={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x1, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000410) 1.045077358s ago: executing program 0 (id=5772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x7000000}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}]}}]}, 0x48}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r8, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240280d5}, 0x40005) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x210, 0x3a8, 0x138, 0x210, 0x0, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@remote, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@private=0xa010100, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x32}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x9, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x34, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x800}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xfffffffe, 0xfb}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000000)={'hsr0\x00', 0x2}) r10 = socket(0x1e, 0x80000, 0x1ff) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r10, 0x89fb, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={@remote, @private=0xa010102, 0x1, 0xf}}) 1.000300199s ago: executing program 4 (id=5773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0x3}, @func={0xc, 0x0, 0x0, 0xc, 0x1}, @fwd={0x8}]}, {0x0, [0x0, 0x10, 0x61, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000080)=""/53, 0x48, 0x35, 0x0, 0x9c27, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0xf2d, '\x00', r2, r3, 0x3, 0x1a, 0x1}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r1, r5, 0x25, 0x2}, 0x14) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[], 0x16) 991.338923ms ago: executing program 3 (id=5774): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockname$packet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000080)={@local, @multicast2}, 0x8) 871.301269ms ago: executing program 2 (id=5775): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) 772.329684ms ago: executing program 4 (id=5776): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) (async) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0), 0x38) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x28, r1, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x14f84d99, 0x7c}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) 766.177706ms ago: executing program 0 (id=5777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000e80040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f0, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r6, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffe85) sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000150001000000000000000000ac1e0001000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00002100030000000a00100088"], 0x5c}}, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f0000000500)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0xfac, 0x0, @opaque="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"}}}, 0xfce) 749.62668ms ago: executing program 4 (id=5778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x148}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x3b4, 0x3, 0x5, 0x801, 0x70bd25, 0x25dfdbfc, {0x1, 0x0, 0x3}, [@generic="56ec5515f7c6303a3b68598665960b8dba24c4509ebf57493a1814c7679bbcd3288014e59c88cc1e141ee5b3240a38a8cfa5915707c1b555a4bdf095de965a555f58e23a108c14c82dca7335ccc982984816bf32f48182f16ef2575f4a2d0437d532a94831ede860f790dab69e2e0f6febe0687186500ce2bc14e2c156e9e9139318c7fc38edaa5ba8b1f9c0f45fc7b45d2070b5ff13334553bfeaec634d0b4e7a698cae48fc6c13a16cece50ca0a60c856944d1", @typed={0x8, 0x1f, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x1a6, 0xf4, 0x0, 0x1, [@nested={0x4, 0x149}, @generic="0e3acf72988fd547cea851c9a6670898844489544d497a6c783d557859933c5d5589e2762ec9df8694aa1ea9a5fea2c4203281e88be6ec14a03b5d350bf45187cc8e2bf7d171cbaf5393bb7a8cf71d199745", @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@multicast1}, @generic="a76f1413b5b6661a588f63ae0a02e16a687d816ad35f80dae1d1d17323314b77b6d3acb28f9bfd0235a9e52a4565f3b25a058e660468adfd222e25b7b4f6d1b730246701e95985bf75dcb40d1ea2e882ee17f393e49b1f56a6badc724c9f153e956f55295eb9ca0311329cc6b108432af9aaa1f9d062066b8d47d826b97faffb5f58fd56e32a2c61146ce55aec916ecc08f2a626f9a75163b6368137bc101d5630c396c3", @nested={0x4, 0xe0}, @generic="a0b0a604cfe764363e84038ea0589fb5282bfe7779a9a707da991a9d860d0d57ce696fbb05e449c83eec7a2dee9f09060d138bcd44b8a6014744", @typed={0x8, 0x6c, 0x0, 0x0, @uid=r1}, @nested={0x4, 0x7a}, @generic="fc43404530818b601b0e2258ededb7afe995c155d397619990ba16492b58d8ba3cd831da98fd514ff2463d4dbdac92e021c7dadb1974038c34cb124014d8dbbf2f7986d6b5bf09ab0fda6332cd49ecb4fc3ee146f92d"]}, @nested={0x13c, 0x46, 0x0, 0x1, [@typed={0xc, 0x7a, 0x0, 0x0, @u64=0x3de8}, @nested={0x4, 0xd8}, @nested={0x4, 0xb6}, @nested={0x4, 0xbf}, @nested={0x4, 0x3f}, @generic="1bd8d2b350334bc382d42e0c0500112bb8190534a32c5fef013bfa06a32a690f2e4765241e6dfc8345306ed1", @typed={0xee, 0x8d, 0x0, 0x0, @binary="1532e7a299e17f1cf316598f3394ad1c6e8eebc7f6cff99a5245c2a0875862503cfff7d271eb406efc82a16ffe1e12ed8cf90da15222d69c7b54fbcc2a0d1fcbc42ba909c00cc41c0e1f3998747bad6a74d2bece9caf67d1f8e704b10e49fd89eb910cc97e3d5a6655f1a50e9b1546bf00802e3eae1cf162230c8063d7e99aea6a7670c6686ac7e1d74ccd1f65bb63b1cd8d244c91b955e451438a8dd881335ebe231be37165562ecf610491687f8e935851d7bb6c9489d5d68696a0bf424f41aac862f3acecd2366c499958699953b49d3e7f3cf967e9d97ce041596d41097a92058d85e661a9ccb11a"}]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x8000}, 0x881) 738.451741ms ago: executing program 2 (id=5779): socket$rds(0x15, 0x5, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) r2 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="0400cd003c003300c0a80300080211000001ffffffffffff505050329aa759d8d490e95050502465fe008c001f008c18de094e411291279b2bfebedcc398e8ba9b19f3a20e96896f"], 0x5c}, 0x1, 0x0, 0x0, 0x80800}, 0x4004000) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="0400cd003c003300c0a80300080211000001ffffffffffff505050329aa759d8d490e95050502465fe008c001f008c18de094e411291279b2bfebedcc398e8ba9b19f3a20e96896f"], 0x5c}, 0x1, 0x0, 0x0, 0x80800}, 0x4004000) shutdown(r1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0xc, &(0x7f0000000040)=0xfffffffb, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0xc, &(0x7f0000000040)=0xfffffffb, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) socket(0x1e, 0x4, 0x0) (async) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r5, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000c40)=""/69, 0x45}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000e00)=""/185, 0xb9}], 0x1}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001640)=""/112, 0x70}], 0x1}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001a80)=""/8, 0x8}], 0x1}}], 0x4, 0x400123a0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000007c0)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000007c0)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x4, 0x7fff}, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x4, 0x7fff}, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$alg(0x26, 0x5, 0x0) 652.216385ms ago: executing program 3 (id=5780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r0, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', r1, r2, 0x0, 0x5, 0x5}, 0x50) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x2, 0xc, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x40, 0x7fff, 0x1}}) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) (async, rerun: 64) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r8, 0x0) (async) ioctl$SIOCX25SFACILITIES(r8, 0x89e3, &(0x7f0000000440)={0x4, 0x0, 0xa, 0xb, 0x20000}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in=@private=0xa010101, @in=@empty, 0x4e22, 0x1b1, 0x4e22, 0x26, 0x2, 0xb0, 0x20, 0x0, r6, r7}, {0x43d, 0x7, 0x5, 0xfffffffffffff369, 0xc, 0x8, 0x34, 0x10}, {0x0, 0xfaa, 0x10000, 0x4}, 0xb31, 0x6e6bb9, 0x0, 0x1, 0x2, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0xff}, 0xa, @in6=@private0, 0x0, 0x3, 0x1, 0xe, 0x2, 0xfffffffe, 0x1}}, 0xe8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da52deda337f8af0366be93702298a20b912b44091a10ec9d76ab09f3b44ee95c1de86a9fee94df8dc49001ce17774fea95cd2cbd5e662f1ea9d73351feabf5ef6f6bba0853c240188f92c5f4ae3c27038150a5c6ac31cb4545d6baabd07f705a1ea0e", &(0x7f0000000100), 0x1003, r0}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r0, &(0x7f0000000180)="f85115", 0x0}, 0x20) 650.786398ms ago: executing program 4 (id=5781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4048040}, 0x20000000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x34, r4, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x20040080) bind$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfd, 0x80000200}, 0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x44, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x80}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1e8f}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x5}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x200}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x9}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040081}, 0xe080) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80) recvmmsg$unix(r2, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/18, 0x12}], 0x1}}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "709c897c82b1095a67232d63"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 489.074544ms ago: executing program 3 (id=5782): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r2 = socket(0x2, 0x2, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0035742bbd7000fedbdf2502000000", @ANYRES32=r4, @ANYBLOB="1e002606080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000004) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0035742bbd7000fedbdf2502000000", @ANYRES32=r4, @ANYBLOB='!'], 0x24}, 0x1, 0x0, 0x0, 0x8803}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x50483}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 464.727692ms ago: executing program 0 (id=5783): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ce000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706", 0x11}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000140)={0xc8, 0x5, 0x3ff, 0x401}, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d000100756470"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ce000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706", 0x11}], 0x1}, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000140)={0xc8, 0x5, 0x3ff, 0x401}, 0x10) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d000100756470"], 0x54}}, 0x0) (async) 307.597294ms ago: executing program 3 (id=5784): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000200)=[{{0x4, 0x0, 0x1}, {0x2}}, {{0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x1}, {0x2, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x1}}, {{0x0, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}], 0x48) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) close(r1) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) (async) sendto$inet6(r2, &(0x7f00000002c0)="c82e", 0x2, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) write$tun(0xffffffffffffffff, &(0x7f0000000380)={@val={0xa}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @multicast, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x6000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x86dd, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100, @val=0x80}}}}}}}}, 0x3e) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x5, 0x2}, 0x8) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}, {&(0x7f00000000c0)="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", 0xfb}], 0x2}, 0x6400000c) 277.308267ms ago: executing program 0 (id=5785): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async, rerun: 32) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x634c, 0x4, 0x3, 0x0, r3}, 0x10) (async) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000b00000040000580070001"], 0x54}}, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x18, {0x4e22, 0xffff}}]}, 0x24}}, 0x0) socket(0x22, 0x0, 0x1) 200.940005ms ago: executing program 3 (id=5786): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000180)=0x3, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xc, 0xff, {{0x5, 0x4, 0x2, 0x8, 0x14, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @empty}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket(0x1a, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r5, 0x8}, 0x8) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140000002e0001e707afa0dc3030ab3228e6ef77"], 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/38, 0x26) 193.412609ms ago: executing program 0 (id=5787): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x20, 0x0, 0xfe, 0x0, 0x0, 0xb}, [@RTA_VIA={0x14, 0x12, {0x0, "853c1c9341b05be66feefda4e4b7"}}]}, 0x30}}, 0x0) 67.514864ms ago: executing program 0 (id=5788): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {}, {0x5, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x0, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x20004084) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x4c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x2a}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x4c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r10, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x20}, 0x1, 0x0, 0x0, 0x48001}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x64, r7, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x64}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x20004090) 39.049641ms ago: executing program 3 (id=5789): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) 0s ago: executing program 2 (id=5790): socket(0x2c, 0x3, 0x40) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2ae, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x7, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000900000000000000030000008510000005000000245180000400000018290000", @ANYRES32, @ANYBLOB="00000000090000008500000042000000182b0000", @ANYRES32, @ANYBLOB="000000000200000010390300100015001835000001fffffffffffffff5e1ffff9400000000000000"], &(0x7f0000000340)='GPL\x00', 0x44f5, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x31, r1, 0x8, &(0x7f0000001380)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x0, 0x944, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000001400)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001440)=[{0x0, 0x1, 0x4, 0x1}, {0x4, 0x5, 0xf, 0x8}, {0x0, 0x1, 0x4, 0x8}, {0x3, 0x2, 0x1, 0x2}, {0x3, 0x4, 0x5, 0xc}, {0x1, 0x2, 0x0, 0x2}, {0x1, 0x1, 0xc, 0x7}, {0x2, 0x2, 0x5, 0xa}, {0x4, 0x3, 0xb, 0x8}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001600)={{r3}, &(0x7f0000000180), &(0x7f00000015c0)=r4}, 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r5}]}}}, @IFLA_MTU={0x8, 0x3}]}, 0x40}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x7fe}, 0x1c, 0x0}}], 0x1, 0x20048000) kernel console output (not intermixed with test programs): [ 388.738038][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 388.759065][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 388.767952][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 388.779200][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 388.787988][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 388.848887][T17881] netlink: 'syz.4.3353': attribute type 1 has an invalid length. [ 389.627597][T17877] syzkaller0 speed is unknown, defaulting to 1000 [ 389.646263][T17877] wlan0 speed is unknown, defaulting to 1000 [ 390.370296][T17877] chnl_net:caif_netlink_parms(): no params data found [ 390.815219][ T5830] Bluetooth: hci0: command tx timeout [ 390.997091][T17963] team0 (unregistering): Port device team_slave_0 removed [ 391.027337][T17963] team0 (unregistering): Port device team_slave_1 removed [ 391.370981][T17877] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.409824][T17877] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.440663][T17877] bridge_slave_0: entered allmulticast mode [ 391.491389][T17877] bridge_slave_0: entered promiscuous mode [ 391.520358][T17877] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.579871][T17877] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.590316][T18007] Can't find ip_set type hash:ip,GPL [ 391.610841][T17877] bridge_slave_1: entered allmulticast mode [ 391.641518][T17877] bridge_slave_1: entered promiscuous mode [ 391.675881][T18006] netlink: 'syz.4.3376': attribute type 3 has an invalid length. [ 391.693364][T18006] netlink: 766 bytes leftover after parsing attributes in process `syz.4.3376'. [ 391.914373][T17877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.952841][T18018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3378'. [ 391.973279][T17877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.130846][T17877] team0: Port device team_slave_0 added [ 392.140875][T17877] team0: Port device team_slave_1 added [ 392.197377][T18035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3381'. [ 392.367439][T18034] netlink: 'syz.4.3380': attribute type 28 has an invalid length. [ 392.443335][T18042] netlink: 'syz.2.3382': attribute type 1 has an invalid length. [ 392.540659][T17877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.553031][T17877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.581668][T17877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.629155][T18046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3383'. [ 392.638878][T18046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3383'. [ 392.650027][T17877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.663617][T17877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.734245][T17877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.880947][T17877] hsr_slave_0: entered promiscuous mode [ 392.894393][ T5830] Bluetooth: hci0: command tx timeout [ 392.904363][T17877] hsr_slave_1: entered promiscuous mode [ 392.920526][T17877] debugfs: 'hsr0' already exists in 'hsr' [ 392.926895][T17877] Cannot create hsr debugfs directory [ 393.025914][T18057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.281737][T18071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.318292][T18072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.697894][T17877] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.744805][T17877] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.782615][T17877] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 393.920833][T18105] netlink: 'syz.2.3395': attribute type 1 has an invalid length. [ 393.973785][T18101] netlink: 'syz.1.3394': attribute type 4 has an invalid length. [ 394.070498][T17877] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.121779][T17877] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.146204][T18113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3395'. [ 394.163325][T17877] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 394.435440][T18105] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.544623][T18109] veth3: entered promiscuous mode [ 394.564130][T18109] bond1: (slave veth3): Enslaving as an active interface with an up link [ 394.666441][T17877] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.698784][T17877] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.733155][T17877] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 394.751775][T18135] netlink: 'syz.2.3400': attribute type 4 has an invalid length. [ 394.782230][T18135] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3400'. [ 394.925349][T18135] `: renamed from bond0 (while UP) [ 394.973811][ T5830] Bluetooth: hci0: command tx timeout [ 395.058747][T17877] bond0: (slave netdevsim0): Releasing backup interface [ 395.097243][T17877] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.143766][T17877] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.169524][T17877] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 395.552645][T17877] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 395.567158][T18166] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.3407'. [ 395.606557][T17877] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 395.653321][T17877] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 395.698381][T17877] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 395.945079][T17877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.982188][T17877] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.017664][T12689] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.024959][T12689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.049081][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.056343][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.190078][T18164] infiniband syz1: set down [ 396.237813][T18164] infiniband syz1: added ipvlan0 [ 396.253536][T18193] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 396.264454][ T130] IPVS: starting estimator thread 0... [ 396.363081][T18196] IPVS: using max 27 ests per chain, 64800 per kthread [ 396.521255][T18164] RDS/IB: syz1: added [ 396.533285][T18164] smc: adding ib device syz1 with port count 1 [ 396.559341][T18164] smc: ib device syz1 port 1 has no pnetid [ 396.919214][T17877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.054770][ T5830] Bluetooth: hci0: command tx timeout [ 397.105965][T17877] veth0_vlan: entered promiscuous mode [ 397.135881][T17877] veth1_vlan: entered promiscuous mode [ 397.242054][T17877] veth0_macvtap: entered promiscuous mode [ 397.309245][T17877] veth1_macvtap: entered promiscuous mode [ 397.365183][T17877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.411273][T17877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.435728][T14106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.450894][T14106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.476835][T14106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.494370][T14106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.667675][T12709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.688746][T12709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.771385][T12709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.797489][T12709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.879893][T18251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3423'. [ 398.184666][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3426'. [ 398.405448][T18267] xt_CT: You must specify a L4 protocol and not use inversions on it [ 398.500403][T18274] netlink: 'syz.3.3430': attribute type 13 has an invalid length. [ 398.531663][T18274] netlink: 'syz.3.3430': attribute type 58 has an invalid length. [ 398.555254][T18274] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3430'. [ 398.976764][T18287] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3434'. [ 399.087942][T18295] bond3: entered promiscuous mode [ 399.094464][T18295] bond3: entered allmulticast mode [ 399.100300][T18295] 8021q: adding VLAN 0 to HW filter on device bond3 [ 399.280846][T18305] netlink: 'syz.4.3438': attribute type 10 has an invalid length. [ 399.396274][T18305] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 399.409792][T18305] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 400.248531][T18341] openvswitch: netlink: Message has 4 unknown bytes. [ 400.276117][T18341] Bluetooth: MGMT ver 1.23 [ 400.503278][T18352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3447'. [ 400.557374][T18355] ipt_REJECT: TCP_RESET invalid for non-tcp [ 400.828445][T18358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3448'. [ 400.885636][ T5495] veth0_vlan: left promiscuous mode [ 400.959782][ T5495] veth0_vlan: entered promiscuous mode [ 401.061843][T18368] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3452'. [ 401.094550][T18368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3452'. [ 401.214875][T18372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.226972][T18344] syzkaller0 speed is unknown, defaulting to 1000 [ 401.265626][ T30] audit: type=1800 audit(1766777377.689:8): pid=18372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3453" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=432 res=0 errno=0 [ 401.307023][T18344] wlan0 speed is unknown, defaulting to 1000 [ 401.483361][T18378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3455'. [ 401.797219][T18386] netlink: 'syz.4.3456': attribute type 16 has an invalid length. [ 401.865794][T18386] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3456'. [ 402.241250][T18405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.503491][T18417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3464'. [ 402.543480][T18417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3464'. [ 402.730015][T18427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3467'. [ 402.959991][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3468'. [ 403.508705][T18448] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 403.544717][T18459] syzkaller0: entered promiscuous mode [ 403.561527][T18459] syzkaller0: entered allmulticast mode [ 404.139636][T18473] tipc: Started in network mode [ 404.161420][T18473] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 404.178977][T18473] tipc: Enabled bearer , priority 10 [ 404.287643][T18478] veth5: entered allmulticast mode [ 404.989990][T18535] netlink: 'syz.2.3494': attribute type 11 has an invalid length. [ 405.016113][T18535] netlink: 'syz.2.3494': attribute type 11 has an invalid length. [ 405.213193][ T5830] Bluetooth: hci0: command 0x080f tx timeout [ 405.293482][ T5956] tipc: Node number set to 4269801492 [ 405.816752][T18571] syzkaller0: entered promiscuous mode [ 405.828023][T18571] syzkaller0: entered allmulticast mode [ 406.145751][T18588] xt_hashlimit: overflow, try lower: 3/0 [ 406.163810][T18586] xt_hashlimit: overflow, try lower: 3/0 [ 406.173889][T18593] __nla_validate_parse: 7 callbacks suppressed [ 406.173907][T18593] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3517'. [ 406.449277][T18608] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3522'. [ 406.458982][T18608] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3522'. [ 406.624860][T18616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3525'. [ 406.676466][T18616] sch_fq: defrate 0 ignored. [ 406.741046][T18622] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3526'. [ 406.986170][T18637] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3528'. [ 407.038435][T18639] veth1_macvtap: left promiscuous mode [ 407.057274][T18639] macsec0: entered promiscuous mode [ 407.062570][T18639] macsec0: entered allmulticast mode [ 407.116830][T18639] veth1_macvtap: entered promiscuous mode [ 407.122652][T18639] veth1_macvtap: entered allmulticast mode [ 407.159516][T18639] macsec0: left promiscuous mode [ 407.174739][T18639] macsec0: left allmulticast mode [ 407.185748][T18639] veth1_macvtap: left allmulticast mode [ 407.225956][T18641] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3528'. [ 409.363747][T18686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3539'. [ 409.396463][T18686] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 409.411203][T18692] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3541'. [ 409.434006][T18686] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3539'. [ 409.616280][T18705] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 409.799470][T18721] netlink: 'syz.0.3547': attribute type 4 has an invalid length. [ 409.871786][T18721] `: renamed from bond0 (while UP) [ 410.348538][T18744] bond0 (unregistering): Released all slaves [ 410.409348][T18750] netlink: 'syz.0.3560': attribute type 21 has an invalid length. [ 410.706203][T18768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 410.713535][T18768] IPv6: NLM_F_CREATE should be set when creating new route [ 411.212832][T18804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.228309][T18800] __nla_validate_parse: 10 callbacks suppressed [ 411.228331][T18800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3578'. [ 411.248173][T18808] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3579'. [ 411.250300][T18798] netlink: 576 bytes leftover after parsing attributes in process `syz.2.3577'. [ 411.444276][T18817] netlink: 'syz.4.3582': attribute type 11 has an invalid length. [ 411.923930][T18830] Cannot find map_set index 0 as target [ 411.950399][T18827] ip6gre1: entered promiscuous mode [ 411.956520][T18827] ip6gre1: entered allmulticast mode [ 411.964286][T18830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3585'. [ 412.002307][T18836] netlink: 'syz.1.3585': attribute type 10 has an invalid length. [ 412.082098][T18836] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.092404][T18836] bond0: (slave team0): Enslaving as an active interface with an up link [ 412.227820][T18841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.325708][T18841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.587475][T18863] syzkaller0: entered promiscuous mode [ 412.607005][T18863] syzkaller0: entered allmulticast mode [ 412.627675][T18863] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 413.101867][T18883] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 413.653826][T18898] sctp: [Deprecated]: syz.4.3607 (pid 18898) Use of int in max_burst socket option deprecated. [ 413.653826][T18898] Use struct sctp_assoc_value instead [ 413.838688][T18907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3611'. [ 413.873691][T18909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3612'. [ 413.917968][T18909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3612'. [ 414.055122][T18917] netlink: 'syz.1.3614': attribute type 4 has an invalid length. [ 414.370373][T18933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3618'. [ 414.441710][T18940] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3620'. [ 414.480669][T18940] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3620'. [ 414.767233][T18949] bond1 (unregistering): Released all slaves [ 415.028745][T18971] netlink: 'syz.0.3626': attribute type 1 has an invalid length. [ 415.071265][T18972] netlink: 'syz.3.3628': attribute type 1 has an invalid length. [ 415.083261][T18976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.177825][T18972] bond4: option resend_igmp: invalid value (32767) [ 415.184675][T18972] bond4: option resend_igmp: allowed values 0 - 255 [ 415.195670][T18972] bond4 (unregistering): Released all slaves [ 415.435167][T12705] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.468808][T12705] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.492834][T12705] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.514643][T12705] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.988544][T19020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.221881][ T1093] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.234989][T19028] __nla_validate_parse: 5 callbacks suppressed [ 416.235011][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3644'. [ 416.288711][T19028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3644'. [ 416.307841][T19033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.358387][T19038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3647'. [ 416.382073][ T1093] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.402189][ T1093] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.423746][T19038] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.431109][T19038] IPv6: NLM_F_CREATE should be set when creating new route [ 416.440527][ T1093] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.453276][T19033] sctp: [Deprecated]: syz.1.3647 (pid 19033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.453276][T19033] Use struct sctp_sack_info instead [ 416.544808][T19033] netlink: 'syz.1.3647': attribute type 1 has an invalid length. [ 416.561033][T19033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3647'. [ 416.743428][T19055] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3652'. [ 416.790925][T19059] sctp: [Deprecated]: syz.1.3655 (pid 19059) Use of int in max_burst socket option. [ 416.790925][T19059] Use struct sctp_assoc_value instead [ 416.884465][T19064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3657'. [ 416.903081][T19064] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3657'. [ 416.925414][T19064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3657'. [ 416.946582][T19055] bond0: entered promiscuous mode [ 416.956700][T19055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.984710][T19064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3657'. [ 417.023296][T19066] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3658'. [ 417.331657][T19083] netlink: 'syz.4.3663': attribute type 10 has an invalid length. [ 417.501565][T19095] 8021q: VLANs not supported on sit0 [ 417.797477][T19113] tipc: Enabled bearer , priority 0 [ 417.818977][T19113] syzkaller0: entered promiscuous mode [ 417.825474][T19113] syzkaller0: entered allmulticast mode [ 417.848269][T19113] tipc: Resetting bearer [ 417.862537][T19112] tipc: Resetting bearer [ 417.910335][T19112] tipc: Disabling bearer [ 418.267614][T19143] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.274914][T19143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.282454][T19143] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.289820][T19143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.311294][T19143] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.318625][T19143] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.573577][T19161] netlink: 'syz.3.3686': attribute type 15 has an invalid length. [ 419.140965][T19187] syzkaller1: entered promiscuous mode [ 419.170659][T19187] syzkaller1: entered allmulticast mode [ 419.745970][T19199] nbd: nbd64 already in use [ 419.753381][ T50] bridge_slave_1: left allmulticast mode [ 419.759173][ T50] bridge_slave_1: left promiscuous mode [ 419.823931][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.901434][ T50] bridge_slave_0: left allmulticast mode [ 419.948691][ T50] bridge_slave_0: left promiscuous mode [ 419.958487][T19074] udevd[19074]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 419.988271][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.419199][ T50] bond6 (unregistering): (slave gretap3): Releasing active interface [ 420.920393][ T50] bond0 (unregistering): left promiscuous mode [ 420.927608][ T50] : left promiscuous mode [ 420.932309][ T50] bond_slave_1: left promiscuous mode [ 420.939646][ T50] bond0 (unregistering): (slave 32): Releasing backup interface [ 420.953989][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.965669][ T50] bond0 (unregistering): Released all slaves [ 420.982827][ T50] bond1 (unregistering): Released all slaves [ 421.001302][ T50] bond2 (unregistering): Released all slaves [ 421.017943][ T50] bond3 (unregistering): Released all slaves [ 421.122635][ T50] bond4 (unregistering): (slave veth3): Releasing active interface [ 421.138257][ T50] bond4 (unregistering): Released all slaves [ 421.235579][ T50] bond5 (unregistering): Released all slaves [ 421.252497][ T50] bond6 (unregistering): Released all slaves [ 421.267062][ T50] bond7 (unregistering): Released all slaves [ 421.367981][ T50] bond8 (unregistering): Released all slaves [ 421.463713][ T50] bond9 (unregistering): Released all slaves [ 421.478597][ T50] bond10 (unregistering): Released all slaves [ 421.578465][ T50] bond11 (unregistering): Released all slaves [ 421.633356][T19235] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 421.671055][T19249] __nla_validate_parse: 15 callbacks suppressed [ 421.671077][T19249] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3708'. [ 421.822357][ T50] 9: left promiscuous mode [ 421.935272][T19260] ieee802154 phy0 wpan0: encryption failed: -22 [ 422.066708][ T50] tipc: Disabling bearer [ 422.126551][ T50] tipc: Disabling bearer [ 422.140298][ T50] tipc: Disabling bearer [ 422.181085][ T50] tipc: Left network mode [ 422.193814][T19276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3716'. [ 422.341695][ T50] IPVS: stopping master sync thread 13362 ... [ 422.527853][T19298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3723'. [ 422.574744][T19298] team1: entered promiscuous mode [ 422.579847][T19298] team1: entered allmulticast mode [ 422.684213][T19304] netlink: 'syz.4.3725': attribute type 12 has an invalid length. [ 422.967067][T19319] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3729'. [ 423.003000][T19319] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3729'. [ 423.146477][T19323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3730'. [ 423.177851][T19331] tap0: tun_chr_ioctl cmd 1074025676 [ 423.188026][T19331] tap0: owner set to 0 [ 423.570867][T19357] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3738'. [ 423.708726][T19353] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.716505][T19353] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.731244][T19366] netlink: 'syz.3.3740': attribute type 1 has an invalid length. [ 423.908901][T19353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.925932][T19353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.112367][T19353] veth3: left promiscuous mode [ 424.125966][T19353] bond0: left promiscuous mode [ 424.299558][T19366] 8021q: adding VLAN 0 to HW filter on device bond4 [ 424.368912][T19368] bond4: (slave gretap3): making interface the new active one [ 424.395100][T19368] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 424.438071][T12727] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.471756][T12727] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.490285][T12727] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.506011][T12727] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.553340][T12727] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.567389][T19383] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3746'. [ 424.593077][T12727] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.650151][T12727] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.695402][T12727] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.804462][T19391] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3749'. [ 425.142252][T19402] tipc: Started in network mode [ 425.164782][T19402] tipc: Node identity 5a148db515, cluster identity 4711 [ 425.191294][T19402] tipc: Enabled bearer , priority 0 [ 425.218925][T19408] syzkaller0: entered promiscuous mode [ 425.246954][T19408] syzkaller0: entered allmulticast mode [ 425.318199][T19402] tipc: Resetting bearer [ 425.338438][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3753'. [ 425.354994][T19383] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 425.424368][T19396] tipc: Resetting bearer [ 425.483999][T19420] netlink: 'syz.3.3758': attribute type 10 has an invalid length. [ 425.532498][T19396] tipc: Disabling bearer [ 425.861643][ T50] batadv0: left promiscuous mode [ 425.901333][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.909231][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.946749][ T50] vlan0: left allmulticast mode [ 425.951690][ T50] vlan0: left promiscuous mode [ 425.968606][ T50] veth0_macvtap: left promiscuous mode [ 425.974967][ T50] veth1_vlan: left promiscuous mode [ 426.653141][ T5150] Bluetooth: hci0: command 0x080f tx timeout [ 426.769116][ T50] vlan1 (unregistering): left allmulticast mode [ 426.775655][ T50] veth0_vlan (unregistering): left allmulticast mode [ 427.046132][ T50] team0 (unregistering): Port device team_slave_1 removed [ 427.089820][ T50] team0 (unregistering): Port device team_slave_0 removed [ 427.497253][T19447] __nla_validate_parse: 2 callbacks suppressed [ 427.497276][T19447] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3765'. [ 427.654358][T19475] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 427.750888][T19486] netlink: 'syz.3.3770': attribute type 1 has an invalid length. [ 427.772250][T19486] netlink: 'syz.3.3770': attribute type 1 has an invalid length. [ 427.934064][T19498] IPVS: length: 149 != 8 [ 428.015467][T19501] netlink: 'syz.3.3774': attribute type 1 has an invalid length. [ 428.050011][ T50] IPVS: stop unused estimator thread 0... [ 428.251239][T19517] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3779'. [ 428.322538][T19517] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3779'. [ 428.401758][T19525] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 428.436882][T19529] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 428.449980][T19531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3784'. [ 428.623928][T19536] netlink: 'syz.2.3785': attribute type 3 has an invalid length. [ 428.867248][T19549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3791'. [ 428.876630][T19548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3791'. [ 428.901655][T19549] netlink: 'syz.3.3791': attribute type 39 has an invalid length. [ 428.903807][T19548] netlink: 'syz.3.3791': attribute type 39 has an invalid length. [ 428.955360][T19552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3792'. [ 429.376027][T19567] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3798'. [ 429.383868][T19569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3800'. [ 429.566782][T19573] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 429.595843][T19577] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3803'. [ 430.574260][ T5150] Bluetooth: hci0: command 0x080f tx timeout [ 431.252619][T19594] ip6gre1: entered allmulticast mode [ 431.475196][T19615] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 431.568993][T19611] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 431.671634][T19621] pimreg: entered allmulticast mode [ 431.816495][T19629] syzkaller0: entered promiscuous mode [ 431.822129][T19629] syzkaller0: entered allmulticast mode [ 432.255111][T19634] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 432.570240][T19650] __nla_validate_parse: 6 callbacks suppressed [ 432.570259][T19650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3825'. [ 432.591797][T19650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3825'. [ 432.604530][T19650] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3825'. [ 432.614744][T19655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3826'. [ 432.617388][T19651] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3824'. [ 432.711392][T19667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3829'. [ 432.745388][T19651] bond1: entered promiscuous mode [ 432.774644][T19671] sctp: [Deprecated]: syz.3.3830 (pid 19671) Use of int in max_burst socket option deprecated. [ 432.774644][T19671] Use struct sctp_assoc_value instead [ 432.938231][T19689] netlink: 'syz.2.3835': attribute type 7 has an invalid length. [ 432.968867][T19689] netlink: 'syz.2.3835': attribute type 7 has an invalid length. [ 432.982289][T12727] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.995819][T12727] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.015163][T12727] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.036857][T12727] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.250114][T19704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.348373][T19707] xt_hashlimit: invalid interval [ 433.356690][T19707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3840'. [ 433.440089][T19709] veth0: entered promiscuous mode [ 433.449213][T19709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3841'. [ 433.686025][T19671] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 433.809682][T19723] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 433.818016][T19723] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 433.841467][T19730] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3847'. [ 433.855961][T19726] netlink: 'syz.1.3845': attribute type 21 has an invalid length. [ 434.081025][T19735] syzkaller1: entered promiscuous mode [ 434.107066][T19735] syzkaller1: entered allmulticast mode [ 434.243443][T19753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3853'. [ 434.400232][T19758] syzkaller1: entered promiscuous mode [ 434.414643][T19758] syzkaller1: entered allmulticast mode [ 434.457947][T19767] netlink: 'syz.1.3858': attribute type 1 has an invalid length. [ 434.483944][T19762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.497812][T19767] netlink: 'syz.1.3858': attribute type 1 has an invalid length. [ 434.516877][ T130] IPVS: starting estimator thread 0... [ 434.603109][T19770] IPVS: using max 26 ests per chain, 62400 per kthread [ 434.663111][T19772] netlink: 'syz.0.3859': attribute type 3 has an invalid length. [ 434.814235][T19784] netlink: 'syz.3.3865': attribute type 11 has an invalid length. [ 434.886179][T19784] netlink: 'syz.3.3865': attribute type 11 has an invalid length. [ 434.894720][ T5150] Bluetooth: hci0: command 0x080f tx timeout [ 434.930367][T19784] netlink: 'syz.3.3865': attribute type 11 has an invalid length. [ 434.963290][T19784] netlink: 'syz.3.3865': attribute type 11 has an invalid length. [ 434.994420][T19784] netlink: 'syz.3.3865': attribute type 11 has an invalid length. [ 435.029090][T19784] netlink: 'syz.3.3865': attribute type 11 has an invalid length. [ 435.071536][T19784] netlink: 'syz.3.3865': attribute type 11 has an invalid length. [ 435.079458][T19799] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 435.107121][T19784] netlink: 'syz.3.3865': attribute type 11 has an invalid length. [ 435.118110][T19784] netlink: 'syz.3.3865': attribute type 11 has an invalid length. [ 435.128089][T19784] netlink: 'syz.3.3865': attribute type 11 has an invalid length. [ 435.174026][T19805] syzkaller0: entered promiscuous mode [ 435.179570][T19805] syzkaller0: entered allmulticast mode [ 435.219397][T19805] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 435.443954][T19818] netlink: 'syz.3.3873': attribute type 2 has an invalid length. [ 435.480409][T19818] 9: entered promiscuous mode [ 436.176359][T19847] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 437.393575][T19907] netlink: 'syz.1.3893': attribute type 4 has an invalid length. [ 438.664609][T19901] erspan0: entered allmulticast mode [ 438.874154][T19918] __nla_validate_parse: 39 callbacks suppressed [ 438.874186][T19918] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3899'. [ 438.923359][T19918] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.3899'. [ 439.035197][T19923] xt_TPROXY: Can be used only with -p tcp or -p udp [ 440.935371][T19952] netlink: 'syz.4.3908': attribute type 21 has an invalid length. [ 440.959670][T19952] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3908'. [ 441.246033][T19970] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3915'. [ 442.168537][T20022] netlink: 'syz.2.3931': attribute type 10 has an invalid length. [ 442.200903][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3931'. [ 442.211619][T20023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3930'. [ 442.273337][T20030] netlink: 'syz.3.3933': attribute type 21 has an invalid length. [ 442.353738][T20030] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3933'. [ 442.363548][T20028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3932'. [ 442.404783][T20030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3933'. [ 442.742144][T20055] x_tables: duplicate underflow at hook 2 [ 442.790897][T20054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3938'. [ 443.065075][T18615] IPVS: starting estimator thread 0... [ 443.234663][T20074] IPVS: using max 27 ests per chain, 64800 per kthread [ 443.573106][T20099] netlink: 'syz.4.3949': attribute type 1 has an invalid length. [ 443.699700][T20106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.227685][T20141] __nla_validate_parse: 9 callbacks suppressed [ 444.227705][T20141] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3958'. [ 444.473748][T20149] netlink: 'syz.3.3963': attribute type 21 has an invalid length. [ 444.540377][T20149] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 444.554405][T20149] bond5 (unregistering): Released all slaves [ 444.795318][T20170] netlink: 'syz.1.3968': attribute type 2 has an invalid length. [ 444.861881][T20170] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3968'. [ 445.110289][T20187] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3971'. [ 445.298019][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.125291][T20235] delete_channel: no stack [ 446.131367][T20240] IPv6: addrconf: prefix option has invalid lifetime [ 446.238002][T20247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3988'. [ 446.271396][T20247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3988'. [ 446.341722][T20255] netlink: 'syz.2.3990': attribute type 1 has an invalid length. [ 446.383561][T20253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3988'. [ 446.400121][T20260] IPVS: set_ctl: invalid protocol: 45 0.0.0.0:0 [ 446.421090][T20253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3988'. [ 446.545543][T20255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 446.607828][T20261] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 447.219422][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.229497][T20311] xt_TPROXY: Can be used only with -p tcp or -p udp [ 447.586074][T20323] veth0_to_team: entered promiscuous mode [ 447.619328][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.630177][T20289] wlan0 speed is unknown, defaulting to 1000 [ 448.494419][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.658416][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.671769][T20340] netlink: 'syz.1.4006': attribute type 3 has an invalid length. [ 449.699755][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.952425][T20364] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 450.175013][T20377] netlink: 'syz.3.4017': attribute type 21 has an invalid length. [ 450.205323][T20377] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4017'. [ 450.227767][T20374] netlink: 'syz.0.4016': attribute type 10 has an invalid length. [ 450.241422][T20377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4017'. [ 450.264324][T20374] bridge0: port 3(team0) entered blocking state [ 450.270781][T20374] bridge0: port 3(team0) entered disabled state [ 450.306740][T20374] team0: entered allmulticast mode [ 450.311936][T20374] team_slave_0: entered allmulticast mode [ 450.326891][T20374] team_slave_1: entered allmulticast mode [ 450.337933][T20374] team0: entered promiscuous mode [ 450.353361][T20374] team_slave_0: entered promiscuous mode [ 450.359380][T20374] team_slave_1: entered promiscuous mode [ 450.366715][T20374] bridge0: port 3(team0) entered blocking state [ 450.373165][T20374] bridge0: port 3(team0) entered forwarding state [ 450.502456][T20387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4019'. [ 450.535015][T20387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4019'. [ 450.836325][T20406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4023'. [ 451.057974][T20406] bridge_slave_1: left allmulticast mode [ 451.093105][T20406] bridge_slave_1: left promiscuous mode [ 451.138018][T20406] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.191654][T20406] bridge_slave_0: left allmulticast mode [ 451.229673][T20406] bridge_slave_0: left promiscuous mode [ 451.252175][T20406] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.772515][T20442] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 451.780037][T20442] IPv6: NLM_F_CREATE should be set when creating new route [ 451.824987][T20447] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4032'. [ 451.887147][T20444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4033'. [ 452.185451][T20457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4036'. [ 452.599011][T20472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4040'. [ 452.615011][T20475] openvswitch: netlink: Key 13 has unexpected len 4755 expected 24 [ 452.668950][T20114] udevd[20114]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 453.057416][T20499] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4049'. [ 453.148726][T20505] netlink: 'syz.4.4050': attribute type 10 has an invalid length. [ 453.555181][T20478] wlan0 speed is unknown, defaulting to 1000 [ 454.705961][T20597] netlink: zone id is out of range [ 454.735886][T20597] netlink: zone id is out of range [ 454.759864][T20597] netlink: zone id is out of range [ 454.766207][T20597] netlink: zone id is out of range [ 454.771438][T20597] netlink: zone id is out of range [ 454.776836][T20597] netlink: zone id is out of range [ 454.782057][T20597] netlink: zone id is out of range [ 454.787768][T20597] netlink: set zone limit has 4 unknown bytes [ 455.060341][T20611] tipc: Enabled bearer , priority 0 [ 455.289871][T20611] syzkaller0: entered promiscuous mode [ 455.298037][T20611] syzkaller0: entered allmulticast mode [ 455.308463][T20611] tipc: Resetting bearer [ 455.321517][T20627] netlink: 'syz.3.4083': attribute type 1 has an invalid length. [ 455.344593][T20627] __nla_validate_parse: 10 callbacks suppressed [ 455.344610][T20627] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4083'. [ 455.568456][T12715] tipc: Resetting bearer [ 455.594773][T20609] tipc: Resetting bearer [ 457.109027][T20609] tipc: Disabling bearer [ 457.200254][T20632] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 457.201231][T20628] syzkaller1: entered promiscuous mode [ 457.219430][T20628] syzkaller1: entered allmulticast mode [ 457.291072][ T57] tipc: Node number set to 3758096386 [ 457.365631][T20645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4090'. [ 457.474782][T20650] Cannot find add_set index 2 as target [ 457.609968][T20662] IPv4: Oversized IP packet from 127.202.26.0 [ 457.708105][T20379] udevd[20379]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 457.742514][T20114] udevd[20114]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 457.930042][T20679] netlink: 'syz.0.4102': attribute type 1 has an invalid length. [ 457.996502][T20679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.079564][T20682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4103'. [ 458.130243][T20683] bond0: (slave veth1): Enslaving as an active interface with a down link [ 458.157261][T20682] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 458.193268][T20682] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 458.223166][T20682] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 458.880008][T20724] Unsupported ieee802154 address type: 0 [ 459.117009][T20737] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4119'. [ 459.180335][T20741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4121'. [ 459.224340][T20745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4121'. [ 459.259002][T20749] netlink: 'syz.4.4123': attribute type 7 has an invalid length. [ 459.819153][T20787] syzkaller0: entered promiscuous mode [ 459.825315][T20787] syzkaller0: entered allmulticast mode [ 460.084687][T20763] netlink: 'syz.2.4125': attribute type 2 has an invalid length. [ 460.107568][T20763] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4125'. [ 460.605087][T20821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4140'. [ 460.646371][T20821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4140'. [ 460.706018][T20825] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4141'. [ 460.743478][T20828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4142'. [ 460.825262][T20831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4143'. [ 461.129264][T20857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4150'. [ 461.146590][T20858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4150'. [ 461.262845][ T5829] IPVS: starting estimator thread 0... [ 461.303896][T20862] syzkaller0: entered promiscuous mode [ 461.316948][T20862] syzkaller0: entered allmulticast mode [ 461.380587][T20865] IPVS: using max 37 ests per chain, 88800 per kthread [ 461.400929][T20878] netlink: 'syz.0.4156': attribute type 2 has an invalid length. [ 461.452182][T20879] netlink: 'syz.0.4156': attribute type 2 has an invalid length. [ 462.008777][T20914] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4169'. [ 462.018279][T20914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4169'. [ 462.061494][T20918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4170'. [ 462.341533][T20927] netlink: 'syz.0.4172': attribute type 3 has an invalid length. [ 462.356360][T20928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.708316][T20944] syzkaller1: entered promiscuous mode [ 462.735081][T20944] syzkaller1: entered allmulticast mode [ 463.513623][T20989] tipc: Enabled bearer , priority 10 [ 463.812537][T21017] openvswitch: netlink: Unknown nsh attribute 0 [ 463.950192][T21021] gretap1: entered promiscuous mode [ 464.012808][T21024] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 464.043620][T21024] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 464.383805][T21037] openvswitch: netlink: Key type 105 is out of range max 32 [ 464.448815][T21053] netlink: 'syz.2.4209': attribute type 10 has an invalid length. [ 465.038170][T21087] : entered promiscuous mode [ 466.001381][T21146] __nla_validate_parse: 20 callbacks suppressed [ 466.001401][T21146] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4233'. [ 466.210761][T21160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.229670][T21158] bond0: entered promiscuous mode [ 466.235872][T21158] bond_slave_0: entered promiscuous mode [ 466.263243][T21158] bond_slave_1: entered promiscuous mode [ 466.269221][T21158] team0: entered promiscuous mode [ 466.276356][T21158] team_slave_0: entered promiscuous mode [ 466.282775][T21158] team_slave_1: entered promiscuous mode [ 466.357313][T21156] veth7: entered allmulticast mode [ 466.364484][T21165] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4242'. [ 466.374033][T21165] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4242'. [ 467.635407][T21182] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.4246'. [ 467.650191][T21183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4248'. [ 467.661178][T21182] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.4246'. [ 467.723853][T21182] batadv_slave_1: entered promiscuous mode [ 467.751646][T21181] batadv_slave_1: left promiscuous mode [ 467.763311][T21188] netlink: zone id is out of range [ 467.778148][T21188] netlink: zone id is out of range [ 467.785589][T21188] netlink: zone id is out of range [ 467.791235][T21188] netlink: zone id is out of range [ 467.797831][T21188] netlink: zone id is out of range [ 467.806027][T21188] netlink: zone id is out of range [ 467.811319][T21188] netlink: zone id is out of range [ 467.817107][T21188] netlink: zone id is out of range [ 467.822581][T21188] netlink: zone id is out of range [ 467.828978][T21188] netlink: zone id is out of range [ 467.853098][ T52] Bluetooth: hci5: command 0x040f tx timeout [ 468.091904][T21201] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4255'. [ 468.380992][T21224] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4263'. [ 468.546057][T21208] netlink: 'syz.1.4257': attribute type 20 has an invalid length. [ 468.558136][T21208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4257'. [ 468.597468][T21208] netlink: 'syz.1.4257': attribute type 20 has an invalid length. [ 468.615922][T21208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4257'. [ 468.719860][T21231] netlink: 'syz.2.4266': attribute type 23 has an invalid length. [ 468.903155][T21243] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 468.931257][T21243] bridge0: entered promiscuous mode [ 469.089217][T21256] sctp: [Deprecated]: syz.1.4272 (pid 21256) Use of int in maxseg socket option. [ 469.089217][T21256] Use struct sctp_assoc_value instead [ 469.096183][T21250] bond3: entered allmulticast mode [ 469.109735][T21250] 8021q: adding VLAN 0 to HW filter on device bond3 [ 469.471051][T21283] netlink: 'syz.4.4278': attribute type 10 has an invalid length. [ 469.629378][T21288] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 469.904888][T21304] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 469.950154][T21308] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 469.991721][T21310] bond0: entered promiscuous mode [ 470.010683][T21310] bond_slave_0: entered promiscuous mode [ 470.026289][T21310] bond_slave_1: entered promiscuous mode [ 470.032338][T21310] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 470.047253][T21310] ip6gretap0: entered promiscuous mode [ 470.054894][T21310] hsr1: entered promiscuous mode [ 470.264931][T21326] tipc: Enabling of bearer rejected, failed to enable media [ 470.445660][T21333] xt_ecn: cannot match TCP bits for non-tcp packets [ 471.901225][T21344] netlink: 'syz.4.4299': attribute type 12 has an invalid length. [ 471.923428][T21349] tipc: Enabling of bearer rejected, failed to enable media [ 472.139613][T21361] netlink: 'syz.4.4303': attribute type 1 has an invalid length. [ 472.217521][T21368] __nla_validate_parse: 5 callbacks suppressed [ 472.217542][T21368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4308'. [ 472.248935][T21361] 8021q: adding VLAN 0 to HW filter on device bond4 [ 472.282849][T21368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4308'. [ 472.314354][T21367] netlink: 'syz.3.4308': attribute type 1 has an invalid length. [ 472.507805][T21384] tipc: Started in network mode [ 472.513945][T21384] tipc: Node identity a6683abc7aff, cluster identity 4711 [ 472.521390][T21384] tipc: Enabled bearer , priority 0 [ 472.697476][T21382] tipc: Disabling bearer [ 472.716303][T21399] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4318'. [ 472.799717][T21397] geneve2: entered promiscuous mode [ 472.950571][T21418] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4320'. [ 473.024926][T21423] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 473.119031][T21433] net_ratelimit: 44 callbacks suppressed [ 473.119053][T21433] netlink: zone id is out of range [ 473.131693][T21433] netlink: zone id is out of range [ 473.141971][T21433] netlink: zone id is out of range [ 473.168221][T21433] netlink: zone id is out of range [ 473.185100][T21433] netlink: zone id is out of range [ 473.190464][T21433] netlink: zone id is out of range [ 473.196504][T21433] netlink: zone id is out of range [ 473.201842][T21433] netlink: set zone limit has 4 unknown bytes [ 473.282804][T21440] C: renamed from lo (while UP) [ 473.311068][T21440] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 473.349411][T21444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4331'. [ 473.396094][T21444] netlink: 'syz.4.4331': attribute type 1 has an invalid length. [ 474.087342][T21479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4339'. [ 474.099495][T21474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4336'. [ 474.113078][T21479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4339'. [ 474.117783][T21482] xt_socket: unknown flags 0xe4 [ 474.224982][T21487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4340'. [ 474.236336][T21487] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4340'. [ 474.674766][T21523] wireguard0: entered promiscuous mode [ 474.680350][T21523] wireguard0: entered allmulticast mode [ 474.689244][T21523] team0: Device wireguard0 is of different type [ 475.871814][T21581] netlink: 'syz.3.4368': attribute type 3 has an invalid length. [ 476.174574][T21602] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 476.196242][T21602] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 476.204286][T21602] gretap1: entered promiscuous mode [ 476.209541][T21602] gretap1: entered allmulticast mode [ 476.436592][T21622] netlink: 'syz.2.4380': attribute type 24 has an invalid length. [ 476.821824][T21637] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 476.920387][T21653] netlink: Conntrack attr has 4 unknown bytes [ 477.166434][T21666] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 477.414721][T21681] netlink: 'syz.2.4401': attribute type 2 has an invalid length. [ 477.450310][T21686] __nla_validate_parse: 20 callbacks suppressed [ 477.450332][T21686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4403'. [ 477.465962][T21681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4401'. [ 477.515571][T21689] netlink: 'syz.2.4401': attribute type 2 has an invalid length. [ 477.527495][T21686] netlink: 'syz.0.4403': attribute type 1 has an invalid length. [ 477.574677][T21689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4401'. [ 477.612190][T21691] macsec1: entered promiscuous mode [ 477.619959][T21691] macsec1: entered allmulticast mode [ 477.626310][T21691] bridge0: entered allmulticast mode [ 477.651637][T21691] bridge0: port 1(macsec1) entered blocking state [ 477.659682][T21691] bridge0: port 1(macsec1) entered disabled state [ 477.679387][T21691] bridge0: left allmulticast mode [ 477.765528][T21702] netlink: 'syz.2.4408': attribute type 6 has an invalid length. [ 477.799566][T21696] netlink: 'syz.3.4406': attribute type 11 has an invalid length. [ 477.812826][T21705] netlink: 'syz.2.4408': attribute type 6 has an invalid length. [ 477.848422][T21700] erspan0: left allmulticast mode [ 477.997652][T21700] bridge0: port 3(team0) entered disabled state [ 478.004479][T21700] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.012275][T21700] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.042841][T21715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4409'. [ 478.094551][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 478.227909][T21719] syzkaller0: entered promiscuous mode [ 478.235508][T21719] syzkaller0: entered allmulticast mode [ 478.290067][T21726] netlink: 182 bytes leftover after parsing attributes in process `syz.0.4414'. [ 478.333777][T21723] netlink: 'syz.3.4411': attribute type 10 has an invalid length. [ 478.366515][T21723] team0: Port device dummy0 added [ 478.388408][T21722] bridge: RTM_NEWNEIGH with invalid ether address [ 478.702838][T21752] netlink: 340 bytes leftover after parsing attributes in process `syz.1.4421'. [ 478.792267][T21754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4422'. [ 478.806519][ T50] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 478.830050][ T50] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 478.937086][T21765] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4425'. [ 479.248983][T21789] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4431'. [ 479.569606][T21807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4433'. [ 479.766037][T21817] netlink: 'syz.1.4436': attribute type 13 has an invalid length. [ 479.945302][T21821] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 479.976191][T21821] net_ratelimit: 2 callbacks suppressed [ 479.976209][T21821] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 480.194135][T21843] sock: sock_timestamping_bind_phc: sock not bind to device [ 481.110012][T21909] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 481.673919][T21954] validate_nla: 3 callbacks suppressed [ 481.673940][T21954] netlink: 'syz.4.4477': attribute type 1 has an invalid length. [ 481.825523][T21959] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 481.870853][T21971] x_tables: duplicate underflow at hook 3 [ 481.882460][T21966] netlink: 'syz.3.4478': attribute type 1 has an invalid length. [ 481.890796][T21960] netlink: 'syz.3.4478': attribute type 1 has an invalid length. [ 481.903948][T21969] netlink: 'syz.1.4481': attribute type 12 has an invalid length. [ 482.000345][T21977] Bluetooth: MGMT ver 1.23 [ 482.236659][T21982] vxcan2: entered allmulticast mode [ 482.329247][T21986] netlink: 'syz.3.4485': attribute type 10 has an invalid length. [ 482.339279][T21987] netlink: 'syz.1.4486': attribute type 1 has an invalid length. [ 482.395742][T21991] block nbd1: Unsupported socket: should be TCP or UNIX. [ 482.420500][T21987] 8021q: adding VLAN 0 to HW filter on device bond2 [ 482.445858][T21986] veth0_virt_wifi: entered allmulticast mode [ 482.469137][T21986] team0: Port device veth0_virt_wifi added [ 482.503906][T21992] __nla_validate_parse: 8 callbacks suppressed [ 482.503922][T21992] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4489'. [ 482.705910][T21987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4486'. [ 482.722041][T22003] netlink: 'syz.3.4491': attribute type 1 has an invalid length. [ 482.751677][T22003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4491'. [ 482.816353][T22004] nft_compat: unsupported protocol 0 [ 482.901150][T22021] syzkaller0: entered promiscuous mode [ 482.914795][T22021] syzkaller0: entered allmulticast mode [ 482.933543][T22023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4495'. [ 482.962347][T22023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4495'. [ 483.089230][T22033] netlink: 'syz.3.4496': attribute type 21 has an invalid length. [ 483.198100][T22033] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 483.223258][T22033] bond5 (unregistering): Released all slaves [ 483.924203][T22081] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 484.114604][T22101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4515'. [ 484.125362][T22090] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4511'. [ 484.134506][T22101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4515'. [ 484.330179][T22108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4518'. [ 484.352050][T22109] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4519'. [ 484.404403][T22111] netlink: 'syz.4.4520': attribute type 1 has an invalid length. [ 484.485534][T22117] ip6erspan0: entered promiscuous mode [ 484.491134][T22117] ip6erspan0: entered allmulticast mode [ 484.586299][T22125] Unsupported ieee802154 address type: 0 [ 484.845184][T22141] bridge_slave_1: left allmulticast mode [ 484.853114][T22141] bridge_slave_1: left promiscuous mode [ 484.859050][T22141] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.886020][T22141] bridge_slave_0: left allmulticast mode [ 484.893265][T22141] bridge_slave_0: left promiscuous mode [ 484.900931][T22141] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.158711][T22158] xt_TCPMSS: Only works on TCP SYN packets [ 485.197707][T22157] bond7: (slave bridge5): making interface the new active one [ 485.230861][T22157] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 486.925919][T22157] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 486.949967][T22171] tap0: tun_chr_ioctl cmd 1074025672 [ 486.956050][T22171] tap0: ignored: set checksum disabled [ 487.265032][T22180] bond3: Unable to set up delay as MII monitoring is disabled [ 487.306516][T22180] bond3 (unregistering): Released all slaves [ 487.413052][T22187] netlink: 'syz.1.4531': attribute type 4 has an invalid length. [ 487.436478][T22200] 8021q: VLANs not supported on gre0 [ 487.944156][T22231] syzkaller0: entered promiscuous mode [ 487.949693][T22231] syzkaller0: entered allmulticast mode [ 488.333550][ T5150] Bluetooth: hci4: command 0x0419 tx timeout [ 488.444421][T22254] vxlan1: entered promiscuous mode [ 488.453250][T22254] vxlan1: entered allmulticast mode [ 488.522827][T22266] __nla_validate_parse: 3 callbacks suppressed [ 488.529359][T22266] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.4553'. [ 488.561610][T22262] syzkaller1: entered promiscuous mode [ 488.574904][T22262] syzkaller1: entered allmulticast mode [ 488.666896][T22273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4555'. [ 489.071857][T22300] netlink: 'syz.4.4563': attribute type 10 has an invalid length. [ 489.089772][T22303] netlink: 'syz.0.4560': attribute type 1 has an invalid length. [ 489.151346][T22306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4560'. [ 489.164843][T22303] bond2: entered promiscuous mode [ 489.173569][T22303] 8021q: adding VLAN 0 to HW filter on device bond2 [ 489.201818][T22308] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4562'. [ 489.246659][T22309] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4564'. [ 489.259469][T22306] bond2: entered allmulticast mode [ 489.271249][T22312] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 489.291884][T22299] syzkaller1: entered promiscuous mode [ 489.301546][T22299] syzkaller1: entered allmulticast mode [ 489.359285][T22303] bond2: (slave bridge4): making interface the new active one [ 489.378452][T22303] bridge4: entered promiscuous mode [ 489.430191][T22303] bridge4: entered allmulticast mode [ 489.444948][T22318] netlink: 'syz.2.4566': attribute type 1 has an invalid length. [ 489.464489][T22303] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 489.515218][T22319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4568'. [ 489.777563][T22326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4569'. [ 489.794961][T22326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4569'. [ 490.142798][T22341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4576'. [ 490.157703][T22341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4576'. [ 490.625511][T22373] netlink: 'syz.2.4584': attribute type 63 has an invalid length. [ 490.777353][T22386] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 491.094734][T22405] netlink: 'syz.1.4591': attribute type 8 has an invalid length. [ 493.300732][T22460] syzkaller0: entered promiscuous mode [ 493.318862][T22460] syzkaller0: entered allmulticast mode [ 493.457559][ T5150] Bluetooth: hci1: command 0x0405 tx timeout [ 493.553732][T22478] __nla_validate_parse: 7 callbacks suppressed [ 493.554620][T22478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4612'. [ 493.579617][T22478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4612'. [ 495.316718][T22502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4621'. [ 495.404627][T22512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4622'. [ 495.525836][T22512] syzkaller1: entered promiscuous mode [ 495.536682][T22521] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4623'. [ 495.546060][T22512] syzkaller1: entered allmulticast mode [ 495.547885][T22518] netlink: 'syz.3.4625': attribute type 64 has an invalid length. [ 495.564249][T22521] block nbd0: Unsupported socket: should be TCP or UNIX. [ 495.582992][T22518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4625'. [ 495.594267][T22522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4624'. [ 495.795304][T22533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4628'. [ 495.966378][T22506] wlan0 speed is unknown, defaulting to 1000 [ 495.989705][T22542] netlink: 'syz.3.4629': attribute type 4 has an invalid length. [ 496.175950][T22546] batadv1: entered allmulticast mode [ 496.190004][T22548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4630'. [ 496.213114][T22548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4630'. [ 496.414998][T22564] netlink: 'syz.4.4635': attribute type 1 has an invalid length. [ 496.524378][T22564] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR [ 496.762585][T16997] macsec0: left allmulticast mode [ 496.780483][T16997] macsec0: left promiscuous mode [ 496.785953][T16997] bridge0: port 4(macsec0) entered disabled state [ 496.802140][T16997] batadv1: left allmulticast mode [ 496.807948][T16997] batadv1: left promiscuous mode [ 496.822713][T16997] bridge0: port 3(batadv1) entered disabled state [ 496.979084][T22594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.106979][T16997] dvmrp0 (unregistering): left allmulticast mode [ 497.543446][ T5150] Bluetooth: hci0: command 0x080f tx timeout [ 497.590430][T16997] bond1 (unregistering): Released all slaves [ 497.611887][T16997] bond0 (unregistering): Released all slaves [ 497.633994][T16997] bond2 (unregistering): Released all slaves [ 497.648056][T16997] bond3 (unregistering): Released all slaves [ 497.670309][T16997] bond4 (unregistering): Released all slaves [ 497.688134][T16997] bond5 (unregistering): Released all slaves [ 497.703858][T16997] bond6 (unregistering): (slave lo): Releasing backup interface [ 497.712035][T16997] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 497.731335][T16997] bond6 (unregistering): Released all slaves [ 497.747137][T16997] bond7 (unregistering): Released all slaves [ 497.760691][T22583] bridge_slave_0: default FDB implementation only supports local addresses [ 497.789094][T22586] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 497.955026][T16997] tipc: Disabling bearer [ 498.021030][T16997] tipc: Left network mode [ 498.089279][T22607] netlink: 'syz.3.4646': attribute type 3 has an invalid length. [ 498.400789][T22617] netlink: 'syz.0.4649': attribute type 10 has an invalid length. [ 498.630066][T22617] geneve0: entered promiscuous mode [ 498.663263][T22617] geneve0: entered allmulticast mode [ 498.670041][T22617] team0: Port device geneve0 added [ 498.767547][T22635] __nla_validate_parse: 9 callbacks suppressed [ 498.767570][T22635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4652'. [ 498.825549][T22637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4653'. [ 499.041502][T22651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4657'. [ 499.128350][T22644] tap0: tun_chr_ioctl cmd 2148553947 [ 499.874280][T22688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4668'. [ 499.942653][T22691] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4669'. [ 500.404110][T22716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4675'. [ 500.553613][T16997] hsr_slave_0: left promiscuous mode [ 500.625718][T16997] hsr_slave_1: left promiscuous mode [ 500.677098][T16997] : left allmulticast mode [ 500.776407][T22743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4680'. [ 500.865044][T16997] team0 (unregistering): Port device batadv2 removed [ 500.900092][T22251] udevd[22251]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 500.932145][T22750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4680'. [ 501.496443][T12709] smc: removing ib device !yz! [ 501.849610][T22743] veth0: entered promiscuous mode [ 501.859801][T22747] veth0: left promiscuous mode [ 502.079493][T22755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4681'. [ 502.132189][T22760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4685'. [ 503.520583][T22820] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 503.527931][T22820] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 503.540074][T22782] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 503.796068][T22826] __nla_validate_parse: 3 callbacks suppressed [ 503.796090][T22826] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4703'. [ 503.848646][T22826] netlink: 'syz.4.4703': attribute type 7 has an invalid length. [ 503.859149][T22827] netlink: 'syz.1.4704': attribute type 16 has an invalid length. [ 503.879192][T22826] netlink: 'syz.4.4703': attribute type 8 has an invalid length. [ 503.883647][T22827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4704'. [ 503.943884][T22826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4703'. [ 503.959812][T22833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4703'. [ 504.180780][T22840] x_tables: duplicate underflow at hook 1 [ 504.239144][T22840] tipc: Started in network mode [ 504.269104][T22840] tipc: Node identity , cluster identity 4711 [ 504.298738][T22840] tipc: Failed to set node id, please configure manually [ 504.309401][T22848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4710'. [ 504.319871][T22847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4711'. [ 504.339149][T22840] tipc: Enabling of bearer rejected, failed to enable media [ 504.630301][T22847] xfrm1: entered promiscuous mode [ 504.665534][T22847] xfrm1: entered allmulticast mode [ 504.711925][T22856] netlink: 'syz.1.4711': attribute type 1 has an invalid length. [ 504.776847][T22864] netlink: 'syz.1.4711': attribute type 1 has an invalid length. [ 505.094632][T22877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4717'. [ 505.123561][T22878] bond0: entered allmulticast mode [ 505.401850][T22892] netlink: 'syz.2.4722': attribute type 1 has an invalid length. [ 505.422051][T22894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4722'. [ 505.491160][T22901] pimreg: left allmulticast mode [ 505.548442][T22902] sctp: [Deprecated]: syz.3.4724 (pid 22902) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.548442][T22902] Use struct sctp_sack_info instead [ 505.818912][T22921] x_tables: unsorted underflow at hook 2 [ 505.830702][T22921] sctp: [Deprecated]: syz.3.4732 (pid 22921) Use of int in maxseg socket option. [ 505.830702][T22921] Use struct sctp_assoc_value instead [ 505.847770][T22921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4732'. [ 505.932817][T22926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4734'. [ 506.741260][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 506.850023][T22993] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 506.880926][T22995] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 506.999306][T22998] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 507.067301][T22998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.158604][T23006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.747264][T23020] syzkaller0: entered promiscuous mode [ 507.752807][T23020] syzkaller0: entered allmulticast mode [ 508.089557][T23029] team0: Port device veth0_virt_wifi removed [ 508.183685][T23042] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 508.205233][T23039] netlink: 'syz.1.4765': attribute type 1 has an invalid length. [ 508.215263][T23039] nbd: error processing sock list [ 508.233897][T23039] block nbd1: shutting down sockets [ 508.304662][T23048] netlink: 'syz.0.4767': attribute type 1 has an invalid length. [ 508.508294][ T52] Bluetooth: hci0: command 0x080f tx timeout [ 508.662559][T23071] geneve2: entered promiscuous mode [ 508.669028][T23071] geneve2: entered allmulticast mode [ 508.766529][T23075] bond3: (slave lo): Device is not bonding slave [ 508.789272][T23080] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20003 [ 508.825281][T23083] __nla_validate_parse: 8 callbacks suppressed [ 508.825301][T23083] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.4778'. [ 508.852170][T23075] bond3: option active_slave: invalid value (lo) [ 508.884879][T23075] bond3 (unregistering): Released all slaves [ 509.012539][T23095] netlink: 'syz.1.4780': attribute type 1 has an invalid length. [ 509.028151][T23095] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4780'. [ 509.343844][T23104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4784'. [ 509.529386][T23117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.781255][T23137] openvswitch: netlink: IP tunnel dst address not specified [ 510.036547][T23154] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4801'. [ 510.058226][T23154] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4801'. [ 510.091449][T23154] IPVS: sh: FWM 3 0x00000003 - no destination available [ 510.297314][T23169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4803'. [ 510.315034][T23169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4803'. [ 510.334161][T23173] netlink: 'syz.0.4804': attribute type 6 has an invalid length. [ 510.471048][T23180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.510265][T23182] netlink: 'syz.0.4809': attribute type 21 has an invalid length. [ 510.522217][T23179] delete_channel: no stack [ 510.532238][T23182] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4809'. [ 510.608779][T23191] "syz.4.4812" (23191) uses obsolete ecb(arc4) skcipher [ 510.775168][T23200] netlink: 'syz.0.4816': attribute type 4 has an invalid length. [ 510.795987][T23206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4815'. [ 510.921123][T23212] syzkaller0: entered promiscuous mode [ 510.951925][T23212] syzkaller0: entered allmulticast mode [ 511.282472][T23235] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4823'. [ 511.987433][T23286] netlink: 'syz.0.4842': attribute type 4 has an invalid length. [ 511.998772][T23286] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20004 [ 512.349815][T23304] bridge6: entered promiscuous mode [ 512.355388][T23304] bridge6: entered allmulticast mode [ 513.316235][T23342] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1514) ! [ 513.489222][T23351] tc_dump_action: action bad kind [ 513.595194][T23365] netlink: 'syz.3.4866': attribute type 3 has an invalid length. [ 513.611292][T23364] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 513.664422][T23366] netlink: 'syz.3.4866': attribute type 3 has an invalid length. [ 513.851955][T23382] __nla_validate_parse: 74 callbacks suppressed [ 513.851977][T23382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4872'. [ 513.925337][T23384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4873'. [ 513.956063][T23384] netlink: 'syz.4.4873': attribute type 10 has an invalid length. [ 513.985012][T23390] netlink: 'syz.0.4875': attribute type 1 has an invalid length. [ 514.088467][T23396] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4878'. [ 514.101671][T23391] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4876'. [ 514.421544][T23418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4885'. [ 514.441608][T23418] netlink: 'syz.2.4885': attribute type 1 has an invalid length. [ 514.484963][T23418] netlink: 'syz.2.4885': attribute type 2 has an invalid length. [ 514.547203][T23427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4889'. [ 514.604891][T23427] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4889'. [ 514.749319][T23440] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4893'. [ 514.759952][T23440] netlink: 'syz.0.4893': attribute type 2 has an invalid length. [ 514.767957][T23440] netlink: 119 bytes leftover after parsing attributes in process `syz.0.4893'. [ 514.907231][T23442] netlink: 'syz.1.4894': attribute type 64 has an invalid length. [ 514.918583][T23442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4894'. [ 515.064647][T23454] bond0: (slave caif0): Error: Device type is different from other slaves [ 515.309614][T23467] netlink: 'syz.2.4905': attribute type 12 has an invalid length. [ 515.369323][T23467] bond4: option primary_reselect: invalid value (255) [ 515.383854][T23467] bond4 (unregistering): Released all slaves [ 515.633039][T23489] veth0: entered promiscuous mode [ 515.662612][T23487] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 515.827470][T23494] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 515.845580][T23494] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 515.896009][T23500] netlink: 'syz.1.4914': attribute type 1 has an invalid length. [ 515.962464][T23500] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 516.066311][T23514] netlink: 'syz.3.4915': attribute type 13 has an invalid length. [ 516.219430][T23519] tipc: Enabling of bearer rejected, failed to enable media [ 516.423743][T23483] veth0: left promiscuous mode [ 516.477545][T23532] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 516.491945][T23534] netlink: 'syz.4.4923': attribute type 1 has an invalid length. [ 516.523061][T23532] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 516.637795][T23534] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 516.726090][T23545] netlink: 'syz.1.4925': attribute type 3 has an invalid length. [ 516.815484][T23549] wg1 speed is unknown, defaulting to 1000 [ 516.838436][T23551] netlink: 'syz.3.4926': attribute type 4 has an invalid length. [ 516.863483][T23549] wg1 speed is unknown, defaulting to 1000 [ 516.879478][T23549] wg1 speed is unknown, defaulting to 1000 [ 516.940283][T23549] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 517.179505][T23562] macvtap1: entered promiscuous mode [ 517.186638][T23562] vlan0: entered promiscuous mode [ 517.204058][T23562] macvtap1: entered allmulticast mode [ 517.214875][T23562] vlan0: entered allmulticast mode [ 517.225917][T23562] veth0_vlan: entered allmulticast mode [ 517.247606][T23549] wg1 speed is unknown, defaulting to 1000 [ 517.267585][T23549] wg1 speed is unknown, defaulting to 1000 [ 517.286531][T23549] wg1 speed is unknown, defaulting to 1000 [ 517.353203][T23549] wg1 speed is unknown, defaulting to 1000 [ 517.386126][T23549] wg1 speed is unknown, defaulting to 1000 [ 517.427344][T23549] wg1 speed is unknown, defaulting to 1000 [ 517.465027][T23549] wg1 speed is unknown, defaulting to 1000 [ 517.475262][T23575] openvswitch: netlink: Flow key attr not present in new flow. [ 517.541375][T23581] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 517.627624][T23581] bond3 (unregistering): Released all slaves [ 517.743290][T23592] syzkaller1: entered promiscuous mode [ 517.760042][T23592] syzkaller1: entered allmulticast mode [ 518.565594][T23626] bond8: entered promiscuous mode [ 518.571336][T23626] 8021q: adding VLAN 0 to HW filter on device bond8 [ 519.215295][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 520.779923][T23678] tipc: Enabled bearer , priority 0 [ 520.933702][T23672] syzkaller0: entered promiscuous mode [ 520.939214][T23672] syzkaller0: entered allmulticast mode [ 520.946906][T23672] tipc: Resetting bearer [ 521.024077][T23687] __nla_validate_parse: 11 callbacks suppressed [ 521.024097][T23687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4959'. [ 521.091438][T23688] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 521.246130][T23671] tipc: Resetting bearer [ 521.332649][T23703] validate_nla: 4 callbacks suppressed [ 521.332670][T23703] netlink: 'syz.3.4963': attribute type 10 has an invalid length. [ 521.349651][T23706] xt_hashlimit: size too large, truncated to 1048576 [ 521.368599][T23703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4963'. [ 522.104043][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 523.024389][T23671] tipc: Disabling bearer [ 523.344945][T23741] xt_hashlimit: max too large, truncated to 1048576 [ 523.459972][T23743] netlink: 'syz.1.4970': attribute type 8 has an invalid length. [ 523.632783][T23755] tipc: Enabled bearer , priority 0 [ 523.722704][T23763] netlink: 'syz.4.4974': attribute type 1 has an invalid length. [ 523.755033][T23760] netlink: 'syz.3.4976': attribute type 3 has an invalid length. [ 524.061060][T23780] nbd1: detected capacity change from 0 to 127 [ 524.085398][ T52] block nbd1: Receive control failed (result -32) [ 524.127826][T23791] block nbd1: Dead connection, failed to find a fallback [ 524.146731][T23791] block nbd1: shutting down sockets [ 524.152634][T23791] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.165447][T23791] Buffer I/O error on dev nbd1, logical block 0, async page read [ 524.175274][T23792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4982'. [ 524.193188][T23791] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.202739][T23791] Buffer I/O error on dev nbd1, logical block 1, async page read [ 524.232452][T23791] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.249143][T23791] Buffer I/O error on dev nbd1, logical block 2, async page read [ 524.262679][T23791] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.272546][T23791] Buffer I/O error on dev nbd1, logical block 3, async page read [ 524.281146][T23791] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.291272][T23791] Buffer I/O error on dev nbd1, logical block 0, async page read [ 524.310524][T23791] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.321310][T23791] Buffer I/O error on dev nbd1, logical block 1, async page read [ 524.331187][T23791] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.342011][T23791] Buffer I/O error on dev nbd1, logical block 2, async page read [ 524.351095][T23791] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.361434][T23791] Buffer I/O error on dev nbd1, logical block 3, async page read [ 524.369783][T23791] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.380161][T23791] Buffer I/O error on dev nbd1, logical block 0, async page read [ 524.389921][T23791] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 524.400390][T23791] Buffer I/O error on dev nbd1, logical block 1, async page read [ 524.411702][T23791] ldm_validate_partition_table(): Disk read failed. [ 524.421470][T23803] nbd: must specify at least one socket [ 524.429999][T23791] Dev nbd1: unable to read RDB block 0 [ 524.437200][T23791] nbd1: unable to read partition table [ 524.459839][T23791] ldm_validate_partition_table(): Disk read failed. [ 524.467566][T23791] Dev nbd1: unable to read RDB block 0 [ 524.491327][T23791] nbd1: unable to read partition table [ 524.795313][T23795] netlink: 'syz.2.4984': attribute type 1 has an invalid length. [ 524.807237][T23809] netlink: 'syz.4.4986': attribute type 1 has an invalid length. [ 524.819585][T23809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4986'. [ 524.829780][T23809] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4986'. [ 524.984415][T23819] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4987'. [ 524.998230][T23822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4989'. [ 525.007358][T23819] netlink: 'syz.2.4987': attribute type 9 has an invalid length. [ 525.018017][T23823] netlink: 'syz.0.4988': attribute type 126 has an invalid length. [ 525.027965][T23819] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4987'. [ 525.051775][T23824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4987'. [ 525.053324][T23822] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4989'. [ 525.179118][T23829] xt_CT: No such helper "snmp_trap" [ 525.476672][T23853] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 525.592542][T23852] netlink: 'syz.3.4999': attribute type 4 has an invalid length. [ 525.722782][T23868] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 525.919560][T23878] block nbd2: not configured, cannot reconfigure [ 525.946602][T23883] wlan0 speed is unknown, defaulting to 1000 [ 525.953864][T23883] wlan0 speed is unknown, defaulting to 1000 [ 525.960704][T23883] wlan0 speed is unknown, defaulting to 1000 [ 526.022188][T23883] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 526.127248][T23887] netlink: 'syz.4.5013': attribute type 1 has an invalid length. [ 526.142632][T23883] wlan0 speed is unknown, defaulting to 1000 [ 526.185882][T23883] wlan0 speed is unknown, defaulting to 1000 [ 526.225062][T23883] wlan0 speed is unknown, defaulting to 1000 [ 526.369767][T23883] wlan0 speed is unknown, defaulting to 1000 [ 526.401205][T23902] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 526.449528][T23902] bond10: (slave lo): Enslaving as a backup interface with an up link [ 526.473808][T23902] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 526.507612][T23883] wlan0 speed is unknown, defaulting to 1000 [ 526.518571][T23883] wlan0 speed is unknown, defaulting to 1000 [ 526.566003][T23883] wlan0 speed is unknown, defaulting to 1000 [ 526.860739][T23919] delete_channel: no stack [ 527.185322][T23936] __nla_validate_parse: 6 callbacks suppressed [ 527.185344][T23936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5026'. [ 527.377610][T23945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5029'. [ 527.483255][T23945] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5029'. [ 527.621803][T23957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5031'. [ 527.641369][T23957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5031'. [ 527.756781][T23964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5036'. [ 527.826506][T23969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5037'. [ 527.837619][T23968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5037'. [ 527.875753][T23970] syzkaller0: entered promiscuous mode [ 527.883169][T23970] syzkaller0: entered allmulticast mode [ 527.906749][T23972] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 527.945543][T23968] Cannot find del_set index 49151 as target [ 528.294900][T23992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5043'. [ 528.475238][T23998] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 528.516199][T24000] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 528.553841][T24000] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 528.741256][T24011] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5049'. [ 528.762673][T24011] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 528.776174][T24011] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 528.954965][T24018] openvswitch: netlink: Message has -2 unknown bytes. [ 529.308611][T24031] gretap0: entered promiscuous mode [ 529.368610][T24031] gretap0: left promiscuous mode [ 529.419738][T24043] ip6t_rpfilter: unknown options [ 530.416180][T24077] erspan0: entered allmulticast mode [ 530.562467][T24090] netlink: 'syz.2.5074': attribute type 2 has an invalid length. [ 530.790622][T24103] tipc: Enabling of bearer rejected, media not registered [ 531.054203][T24124] netlink: 'syz.2.5082': attribute type 4 has an invalid length. [ 531.200564][T24129] xt_socket: unknown flags 0x50 [ 531.231963][T24131] vlan2: entered promiscuous mode [ 531.241923][T24131] bridge0: entered promiscuous mode [ 531.414806][T24144] syzkaller1: entered promiscuous mode [ 531.428576][T24144] syzkaller1: entered allmulticast mode [ 531.672746][T24153] bond5: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 531.708572][T24153] bond5 (unregistering): Released all slaves [ 531.851550][T24164] can: request_module (can-proto-4) failed. [ 532.021326][T24178] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 532.090950][T24183] netlink: 'syz.1.5100': attribute type 1 has an invalid length. [ 532.111365][T24183] netlink: 'syz.1.5100': attribute type 4 has an invalid length. [ 532.205573][T24190] __nla_validate_parse: 16 callbacks suppressed [ 532.205593][T24190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5104'. [ 532.244553][T24191] netlink: 'syz.4.5103': attribute type 3 has an invalid length. [ 533.169076][T24205] netlink: 'syz.4.5105': attribute type 10 has an invalid length. [ 533.187458][T24205] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5105'. [ 533.201805][T24205] netlink: 'syz.4.5105': attribute type 10 has an invalid length. [ 533.210549][T24205] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5105'. [ 533.231335][T24205] netlink: 'syz.4.5105': attribute type 10 has an invalid length. [ 533.242655][T24205] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5105'. [ 533.252675][T24205] netlink: 'syz.4.5105': attribute type 10 has an invalid length. [ 533.260903][T24205] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5105'. [ 533.270769][T24205] netlink: 'syz.4.5105': attribute type 10 has an invalid length. [ 533.280789][T24205] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5105'. [ 533.303491][T24205] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5105'. [ 533.327744][T24205] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5105'. [ 533.338027][T24205] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5105'. [ 533.363313][T24205] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5105'. [ 534.118637][T24183] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 535.398754][T24280] syzkaller1: entered promiscuous mode [ 535.427905][T24280] syzkaller1: entered allmulticast mode [ 535.451403][T24279] syzkaller0: entered allmulticast mode [ 535.590041][T24293] validate_nla: 61 callbacks suppressed [ 535.590064][T24293] netlink: 'syz.4.5127': attribute type 1 has an invalid length. [ 535.608940][T24282] tipc: Enabling of bearer rejected, already enabled [ 535.796044][T24293] 8021q: adding VLAN 0 to HW filter on device bond11 [ 536.473885][T24347] netlink: 'syz.1.5140': attribute type 13 has an invalid length. [ 536.490549][T24348] SET target dimension over the limit! [ 536.523946][T24347] veth0_macvtap: left promiscuous mode [ 536.556626][T24347] macvtap0: entered allmulticast mode [ 536.580685][T24347] macvtap0: refused to change device tx_queue_len [ 536.826558][T24368] syzkaller0: entered promiscuous mode [ 536.833309][T24368] syzkaller0: entered allmulticast mode [ 537.330691][T24397] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 537.510017][T24410] netlink: 'syz.2.5158': attribute type 1 has an invalid length. [ 537.521404][T24393] syzkaller0: entered promiscuous mode [ 537.531467][T24393] syzkaller0: entered allmulticast mode [ 537.630705][T24411] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 537.654056][T24413] __nla_validate_parse: 67 callbacks suppressed [ 537.654076][T24413] netlink: 352 bytes leftover after parsing attributes in process `syz.2.5158'. [ 537.710037][T24399] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5152'. [ 537.935770][T24421] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.060043][T24421] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.126185][T24440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5164'. [ 538.152018][T24443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5164'. [ 538.221687][T24442] IPVS: sh: FWM 3 0x00000003 - no destination available [ 538.366025][T24452] netlink: 'syz.3.5166': attribute type 1 has an invalid length. [ 538.375158][T24452] netlink: 'syz.3.5166': attribute type 1 has an invalid length. [ 538.383414][T24452] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.5166'. [ 538.444329][T24452] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5166'. [ 540.029163][T24421] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.041696][T24421] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.224642][T24421] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.249139][T24421] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.440870][T24421] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.470269][T24421] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.795340][T24495] x_tables: duplicate underflow at hook 3 [ 540.802769][T24496] x_tables: duplicate underflow at hook 3 [ 540.818039][T24495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5175'. [ 541.019449][T12689] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.043907][T12689] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.078680][T12689] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.089238][T12689] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.154119][ T50] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.162457][ T50] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.247017][T24421] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.280353][T24421] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.396418][T24421] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.421212][T24421] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.434575][T24524] netlink: 'syz.0.5180': attribute type 10 has an invalid length. [ 541.434576][T24523] netlink: 'syz.0.5180': attribute type 10 has an invalid length. [ 541.505955][T24523] bridge_slave_1: left allmulticast mode [ 541.511922][T24523] bridge_slave_1: left promiscuous mode [ 541.518617][T24523] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.536475][T24523] `: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 541.588531][T24421] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.627103][T24421] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.763396][T24535] tipc: Enabling of bearer rejected, failed to enable media [ 541.936489][T24547] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 542.168474][T24559] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5190'. [ 542.410793][T24580] xt_hashlimit: invalid interval [ 542.477918][T24586] netlink: 212 bytes leftover after parsing attributes in process `syz.0.5200'. [ 542.668281][T24597] tipc: Enabling of bearer rejected, failed to enable media [ 542.693851][T24597] netlink: 'syz.3.5203': attribute type 10 has an invalid length. [ 542.724356][T24597] bridge_slave_1: left allmulticast mode [ 542.735457][T24597] bridge_slave_1: left promiscuous mode [ 542.750018][T24597] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.798372][T24597] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 542.876792][T24611] sock: sock_timestamping_bind_phc: sock not bind to device [ 542.906578][T24615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.917407][T24615] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5206'. [ 542.929485][T24615] 8021q: VLANs not supported on ip6_vti0 [ 543.001398][T24620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.028096][T24619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5209'. [ 543.039192][T24620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5206'. [ 543.202424][T24628] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 543.240640][T24626] nbd: device at index 3 is going down [ 543.295879][T24636] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5212'. [ 543.331592][T24636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5212'. [ 543.510389][T24635] udevd[24635]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 543.561539][T24635] udevd[24635]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 543.702494][T24658] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5217'. [ 543.762491][T24660] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5218'. [ 543.778092][T24660] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5218'. [ 543.916434][T24670] sock: sock_timestamping_bind_phc: sock not bind to device [ 544.164340][T24686] tipc: Enabled bearer , priority 0 [ 544.274211][T24686] syzkaller0: entered promiscuous mode [ 544.279972][T24686] syzkaller0: entered allmulticast mode [ 544.287237][T24686] tipc: Resetting bearer [ 544.296083][T24694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5228'. [ 544.323393][T24675] tipc: Resetting bearer [ 544.880607][T24716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5235'. [ 544.996433][T24693] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 546.186943][T24675] tipc: Disabling bearer [ 546.208406][ T9] tipc: Node number set to 3700898492 [ 546.253532][ T5150] Bluetooth: hci4: command 0x0419 tx timeout [ 546.374664][T24728] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 546.385949][T24729] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 546.519954][T24736] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 546.903686][T24757] netlink: 'syz.3.5251': attribute type 8 has an invalid length. [ 546.985342][T24762] tipc: Enabling of bearer rejected, already enabled [ 546.994775][T24762] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 547.025888][T24762] tipc: Resetting bearer [ 547.318822][ T1093] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.339535][ T1093] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.364471][ T1093] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.385475][ T1093] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.551410][T24796] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 547.569982][T24795] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 547.580406][T24803] Cannot find add_set index 2 as target [ 547.674810][T24803] ip6t_rpfilter: unknown options [ 547.739478][T24817] x_tables: duplicate underflow at hook 1 [ 547.945530][T24823] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:32789 [ 548.354567][T24836] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 548.444414][T24835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 548.554898][T24857] __nla_validate_parse: 7 callbacks suppressed [ 548.554934][T24857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5282'. [ 548.664487][T24862] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5285'. [ 548.685318][T24863] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.5284'. [ 548.698357][T24863] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 548.854082][T24874] netlink: 'syz.3.5289': attribute type 1 has an invalid length. [ 548.881443][T24874] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5289'. [ 548.984979][T24881] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5291'. [ 549.202373][T24892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5295'. [ 549.226775][T24881] can: request_module (can-proto-3) failed. [ 549.435869][T24898] tipc: Enabled bearer , priority 2 [ 549.470269][T24902] siw: device registration error -23 [ 549.659102][T24917] netlink: 'syz.4.5306': attribute type 24 has an invalid length. [ 549.695643][T24922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5304'. [ 549.866891][T24930] pim6reg: entered allmulticast mode [ 549.889490][T24930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5308'. [ 549.901694][T24933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5309'. [ 549.912217][T24930] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5308'. [ 550.165018][T24940] IPVS: sh: FWM 3 0x00000003 - no destination available [ 550.171930][T24950] netlink: 'syz.0.5315': attribute type 1 has an invalid length. [ 550.186108][T24952] netlink: 'syz.0.5315': attribute type 1 has an invalid length. [ 550.252141][T24950] 8021q: adding VLAN 0 to HW filter on device bond4 [ 550.367267][T24958] 8021q: adding VLAN 0 to HW filter on device bond4 [ 550.378144][T24958] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 550.394554][T24958] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 550.688712][T24979] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 550.750382][T24979] bond4 (unregistering): Released all slaves [ 550.766813][T24992] SET target dimension over the limit! [ 550.792066][T24993] tipc: Enabling of bearer rejected, failed to enable media [ 550.899944][T24989] syzkaller0: entered promiscuous mode [ 550.905713][T24989] syzkaller0: entered allmulticast mode [ 552.675729][T25011] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 552.693863][T25014] netem: change failed [ 553.096103][T25046] veth11: entered promiscuous mode [ 553.118230][T25046] veth11: entered allmulticast mode [ 553.744461][T25088] netlink: 'syz.1.5345': attribute type 7 has an invalid length. [ 553.843721][T25095] IPv6: NLM_F_CREATE should be specified when creating new route [ 553.843725][T25096] IPv6: NLM_F_CREATE should be specified when creating new route [ 554.084443][T25114] veth0: entered promiscuous mode [ 554.207193][T25114] veth0: left promiscuous mode [ 554.259142][T25123] netlink: 'syz.3.5355': attribute type 1 has an invalid length. [ 554.341123][T25123] bond5: entered promiscuous mode [ 554.346595][T25123] bond5: entered allmulticast mode [ 554.353749][T25123] 8021q: adding VLAN 0 to HW filter on device bond5 [ 554.386822][T25123] __nla_validate_parse: 6 callbacks suppressed [ 554.386838][T25123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5355'. [ 554.405323][T25135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5358'. [ 554.420699][T25135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5358'. [ 554.448681][T25123] macvlan3: entered promiscuous mode [ 554.486156][T25123] macvlan3: entered allmulticast mode [ 554.636787][T25146] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5361'. [ 554.662627][T25146] xt_policy: neither incoming nor outgoing policy selected [ 554.702418][T25146] netlink: 'syz.0.5361': attribute type 10 has an invalid length. [ 554.770666][T25146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.801619][T25146] `: (slave batadv0): Enslaving as an active interface with an up link [ 554.877761][T25159] netlink: 'syz.2.5365': attribute type 1 has an invalid length. [ 554.883637][T25160] netlink: 'syz.2.5365': attribute type 1 has an invalid length. [ 554.908315][T25159] netlink: 'syz.2.5365': attribute type 3 has an invalid length. [ 554.916109][T25160] netlink: 'syz.2.5365': attribute type 3 has an invalid length. [ 554.916130][T25160] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5365'. [ 554.980807][T25163] veth5: entered allmulticast mode [ 554.998517][T25159] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5365'. [ 555.024936][T25167] veth7: entered allmulticast mode [ 555.050248][T25169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5368'. [ 555.541424][T25202] netlink: 'syz.2.5378': attribute type 13 has an invalid length. [ 555.553220][T25202] macvtap0: entered allmulticast mode [ 555.559152][T25202] macvtap0: refused to change device tx_queue_len [ 555.584422][T25201] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5379'. [ 555.624422][T25207] netlink: 'syz.3.5380': attribute type 1 has an invalid length. [ 555.713570][T25207] 8021q: adding VLAN 0 to HW filter on device bond6 [ 555.716165][T25211] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5382'. [ 555.768566][T25212] bond6: (slave geneve2): making interface the new active one [ 555.811117][T25212] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 555.847233][T25201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5379'. [ 556.464828][T25263] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 556.473722][ T57] IPVS: starting estimator thread 0... [ 556.578702][T25265] IPVS: using max 23 ests per chain, 55200 per kthread [ 556.589298][T25267] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 556.608128][T25267] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 556.849227][T25279] syzkaller0: entered promiscuous mode [ 556.855009][T25279] syzkaller0: entered allmulticast mode [ 556.932035][T25284] netlink: 'syz.4.5402': attribute type 16 has an invalid length. [ 558.742058][T25281] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.752058][T25281] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.809408][T25291] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 558.953387][ T5829] wg1 speed is unknown, defaulting to 1000 [ 559.067017][T25315] validate_nla: 2 callbacks suppressed [ 559.067037][T25315] netlink: 'syz.2.5411': attribute type 1 has an invalid length. [ 559.324886][T25332] netlink: 'syz.1.5414': attribute type 2 has an invalid length. [ 559.380025][T25338] netlink: 'syz.4.5420': attribute type 1 has an invalid length. [ 559.398993][T25340] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 559.436799][T25340] __nla_validate_parse: 9 callbacks suppressed [ 559.436820][T25340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5418'. [ 559.505834][T25342] veth13: entered promiscuous mode [ 559.915938][T25371] netlink: 'syz.1.5429': attribute type 10 has an invalid length. [ 559.927062][T25368] syzkaller0: entered promiscuous mode [ 559.932597][T25368] syzkaller0: entered allmulticast mode [ 559.986822][T25371] dummy0: entered promiscuous mode [ 559.992708][T25371] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 568.181532][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 614.917160][T25379] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5430'. [ 615.351620][T25406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5441'. [ 615.367398][T25408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5442'. [ 615.503974][T25414] x_tables: duplicate entry at hook 3 [ 615.643270][T25421] openvswitch: netlink: Duplicate or invalid key (type 0). [ 615.665767][T25424] netlink: 'syz.3.5446': attribute type 1 has an invalid length. [ 615.686080][T25421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.718157][T25424] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5446'. [ 615.853036][T25439] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5451'. [ 615.871881][T25438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5452'. [ 616.100952][T25451] xt_ecn: cannot match TCP bits for non-tcp packets [ 616.322430][T25464] xt_hashlimit: max too large, truncated to 1048576 [ 616.351039][T25469] xt_hashlimit: max too large, truncated to 1048576 [ 616.704960][T25493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5469'. [ 616.756290][T25499] netlink: 'syz.1.5470': attribute type 21 has an invalid length. [ 616.814506][T25499] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5470'. [ 616.827809][T25507] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5472'. [ 616.837619][T25506] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5472'. [ 616.863243][T25499] netlink: 'syz.1.5470': attribute type 4 has an invalid length. [ 616.871600][T25499] netlink: 'syz.1.5470': attribute type 5 has an invalid length. [ 617.117329][T25523] C: entered promiscuous mode [ 617.148392][T25523] gre0: entered promiscuous mode [ 617.280324][T25523] ip_vti0: entered promiscuous mode [ 618.201375][T25549] netlink: 'syz.0.5485': attribute type 25 has an invalid length. [ 618.391143][T25563] netlink: Conntrack attr has 4 unknown bytes [ 619.012048][T25571] wg1 speed is unknown, defaulting to 1000 [ 619.020604][T25571] wlan0 speed is unknown, defaulting to 1000 [ 619.241742][T25605] netlink: 'syz.0.5507': attribute type 4 has an invalid length. [ 619.262312][T25605] syzkaller1: entered promiscuous mode [ 619.267981][T25605] syzkaller1: entered allmulticast mode [ 619.934548][T25647] __nla_validate_parse: 14 callbacks suppressed [ 619.934574][T25647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5520'. [ 619.978138][T25647] : entered promiscuous mode [ 619.989353][T25653] Cannot find set identified by id 65534 to match [ 620.182633][T25668] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5525'. [ 620.205133][T25667] tipc: Enabled bearer , priority 0 [ 620.229183][T25668] netlink: 'syz.1.5525': attribute type 3 has an invalid length. [ 620.229927][T25667] tipc: Resetting bearer [ 620.395939][T25683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5532'. [ 620.735159][T25696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5535'. [ 620.903417][T25710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5537'. [ 621.197241][T25724] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5541'. [ 621.209198][T25724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5541'. [ 621.318249][T25731] tipc: Enabling of bearer rejected, failed to enable media [ 621.489595][T25738] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5548'. [ 621.504464][T25738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5548'. [ 621.797003][T25753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5551'. [ 622.164070][T25780] tipc: Enabling of bearer rejected, media not registered [ 622.674119][T25812] netlink: 'syz.2.5568': attribute type 7 has an invalid length. [ 622.887519][T25824] gretap0: entered promiscuous mode [ 622.895982][T25824] vlan0: entered promiscuous mode [ 623.140320][T25840] veth0: entered promiscuous mode [ 623.195204][T25840] veth0 (unregistering): left promiscuous mode [ 623.421937][T25859] block nbd0: reconnected socket [ 623.473510][T25864] netlink: 'syz.4.5584': attribute type 7 has an invalid length. [ 623.481351][T25864] netlink: 'syz.4.5584': attribute type 8 has an invalid length. [ 623.501874][ T5150] block nbd0: Receive control failed (result -32) [ 623.770169][T25884] lo: entered promiscuous mode [ 623.807263][T25884] tunl0: entered promiscuous mode [ 623.841617][T25884] gre0: entered promiscuous mode [ 623.896045][T25895] xt_hashlimit: max too large, truncated to 1048576 [ 623.973888][T25884] gretap0: entered promiscuous mode [ 624.111749][T25884] erspan0: entered promiscuous mode [ 624.133950][T25884] ip_vti0: entered promiscuous mode [ 624.473442][T25910] netlink: 'syz.1.5598': attribute type 2 has an invalid length. [ 624.533370][T25921] syzkaller0: entered promiscuous mode [ 624.538914][T25921] syzkaller0: entered allmulticast mode [ 624.658900][T25928] netlink: 'syz.2.5602': attribute type 1 has an invalid length. [ 624.884143][T25937] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 624.908950][T25929] bond4 (unregistering): Released all slaves [ 624.917823][T25943] openvswitch: netlink: Flow key attr not present in new flow. [ 624.958413][T25928] ip6tnl3: entered promiscuous mode [ 624.964794][T25928] ip6tnl3: entered allmulticast mode [ 624.982529][T25941] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 625.009065][T25941] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 625.212481][T25955] __nla_validate_parse: 9 callbacks suppressed [ 625.212504][T25955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5612'. [ 625.649837][T25981] netlink: 'syz.2.5621': attribute type 1 has an invalid length. [ 625.869461][T25988] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 625.893286][T25988] syzkaller1: linktype set to 823 [ 625.900621][T25990] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 625.909660][T25990] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 626.512045][T26032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5635'. [ 626.567987][T26031] netlink: 'syz.0.5637': attribute type 1 has an invalid length. [ 626.592744][T26031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5637'. [ 626.763554][T26046] netlink: 344 bytes leftover after parsing attributes in process `syz.0.5639'. [ 626.774246][T26046] openvswitch: netlink: Flow key attr not present in new flow. [ 626.793891][T26039] mac80211_hwsim hwsim39 syzkaller0: left promiscuous mode [ 626.801188][T26039] mac80211_hwsim hwsim39 syzkaller0: left allmulticast mode [ 627.147516][T26064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5646'. [ 627.685702][T26096] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.5656'. [ 627.715802][T26096] xt_CONNSECMARK: invalid mode: 0 [ 627.754850][T26104] netlink: 'syz.3.5658': attribute type 10 has an invalid length. [ 627.760538][T26103] netlink: 'syz.3.5658': attribute type 10 has an invalid length. [ 627.835347][T26078] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 627.886580][T26104] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.920039][T26104] bond0: (slave team0): Enslaving as an active interface with an up link [ 628.000408][T26117] syzkaller0: entered promiscuous mode [ 628.007836][T26117] syzkaller0: entered allmulticast mode [ 628.235333][T26129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5663'. [ 628.274509][T26129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5663'. [ 628.468937][T26142] syzkaller1: entered promiscuous mode [ 628.474781][T26142] syzkaller1: entered allmulticast mode [ 628.491667][T26144] tipc: Failed to obtain node identity [ 628.498844][T26144] tipc: Enabling of bearer rejected, failed to enable media [ 628.523414][T26141] netlink: 'syz.3.5667': attribute type 4 has an invalid length. [ 628.802214][T26159] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 628.876382][T26169] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5673'. [ 629.130517][T26181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5678'. [ 629.178332][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b122c00: rx timeout, send abort [ 629.248016][T26192] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20000 [ 629.431252][T26200] netlink: 'syz.3.5684': attribute type 1 has an invalid length. [ 629.452050][T26200] netlink: 'syz.3.5684': attribute type 1 has an invalid length. [ 629.490381][T26200] netlink: 'syz.3.5684': attribute type 2 has an invalid length. [ 629.528746][T26200] netlink: 'syz.3.5684': attribute type 10 has an invalid length. [ 629.544458][T26204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 629.622601][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 629.678520][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b120800: rx timeout, send abort [ 629.687230][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b122c00: abort rx timeout. Force session deactivation [ 629.719061][ C0] vxcan0: j1939_xtp_rx_rts_session_active: 0xffff88805b120800: connection exists (fe ff). last cmd: 20 [ 629.731411][T26213] IPVS: Unknown mcast interface: vcan0 [ 629.746701][T26214] IPVS: Unknown mcast interface: vcan0 [ 629.778798][T26218] syzkaller1: entered promiscuous mode [ 629.788405][T26218] syzkaller1: entered allmulticast mode [ 629.968990][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b120000: rx timeout, send abort [ 630.477509][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b120000: abort rx timeout. Force session deactivation [ 630.511263][ C0] vxcan0: j1939_xtp_rx_rts_session_active: 0xffff88805b120800: connection exists (fe ff). last cmd: 20 [ 630.706359][T26271] __nla_validate_parse: 7 callbacks suppressed [ 630.706389][T26271] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5706'. [ 630.760482][T26276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5706'. [ 630.769880][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b120400: rx timeout, send abort [ 631.016519][T26301] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5715'. [ 631.269975][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b120400: abort rx timeout. Force session deactivation [ 631.298522][ C0] vxcan0: j1939_xtp_rx_rts_session_active: 0xffff88805b120800: connection exists (fe ff). last cmd: 20 [ 631.385274][T26321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5720'. [ 631.394472][T26321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5720'. [ 631.405000][T26321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5720'. [ 631.441610][T26325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5721'. [ 631.548468][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805d0c6400: rx timeout, send abort [ 631.671667][T26338] tc_dump_action: action bad kind [ 631.798491][T26347] tipc: Enabling of bearer rejected, already enabled [ 631.811698][T26347] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 632.056934][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805d0c6400: abort rx timeout. Force session deactivation [ 632.091546][ C0] vxcan0: j1939_xtp_rx_rts_session_active: 0xffff88805b120800: connection exists (fe ff). last cmd: 20 [ 632.108451][ T52] Bluetooth: hci0: command 0x080f tx timeout [ 632.169132][T26367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5731'. [ 632.179321][T26367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5731'. [ 632.211696][T26324] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 632.341467][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805d0c7c00: rx timeout, send abort [ 632.352457][T26382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5732'. [ 632.633216][T26397] bond0: (slave rose0): Error: Device can not be enslaved while up [ 632.850011][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805d0c7c00: abort rx timeout. Force session deactivation [ 632.871075][T26409] netlink: 'syz.3.5742': attribute type 1 has an invalid length. [ 632.878200][ C0] vxcan0: j1939_xtp_rx_rts_session_active: 0xffff88805b120800: connection exists (fe ff). last cmd: 20 [ 633.127937][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805d0c7800: rx timeout, send abort [ 633.630155][T26446] vlan2: entered allmulticast mode [ 633.636322][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805d0c7800: abort rx timeout. Force session deactivation [ 633.669818][ C0] vxcan0: j1939_xtp_rx_rts_session_active: 0xffff88805b120800: connection exists (fe ff). last cmd: 20 [ 633.892013][T26463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 633.919768][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805d0c6800: rx timeout, send abort [ 634.002329][T26467] netlink: 'syz.2.5760': attribute type 10 has an invalid length. [ 634.016268][T26467] netlink: 'syz.2.5760': attribute type 1 has an invalid length. [ 634.036803][T26467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 634.183494][ T52] Bluetooth: hci0: command 0x080f tx timeout [ 634.428275][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805d0c6800: abort rx timeout. Force session deactivation [ 634.458051][ C0] vxcan0: j1939_xtp_rx_rts_session_active: 0xffff88805b120800: connection exists (fe ff). last cmd: 20 [ 634.670098][T26510] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 634.686682][T26510] : renamed from hsr0 (while UP) [ 634.707985][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805d0c7400: rx timeout, send abort [ 634.915016][T26527] openvswitch: netlink: IP tunnel dst address not specified [ 634.929871][T26527] syzkaller1: entered promiscuous mode [ 634.936233][T26527] syzkaller1: entered allmulticast mode [ 635.150532][T26538] x_tables: unsorted underflow at hook 3 [ 635.216528][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805d0c7400: abort rx timeout. Force session deactivation [ 635.244117][ C0] vxcan0: j1939_xtp_rx_rts_session_active: 0xffff88805b120800: connection exists (fe ff). last cmd: 20 [ 635.502729][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805d0c6c00: rx timeout, send abort [ 635.916972][T12710] smc: removing ib device syz1 [ 636.000726][T26575] __nla_validate_parse: 15 callbacks suppressed [ 636.000746][T26575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5794'. [ 636.011196][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805d0c6c00: abort rx timeout. Force session deactivation [ 636.039642][ C0] vxcan0: j1939_xtp_rx_rts_session_active: 0xffff88805b120800: connection exists (fe ff). last cmd: 20 [ 636.066966][ T57] ================================================================== [ 636.075188][ T57] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 636.084014][ T57] Read of size 8 at addr ffff88805b75e2e8 by task kworker/0:2/57 [ 636.091776][ T57] [ 636.094160][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 636.094188][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 636.094203][ T57] Workqueue: events smc_ib_port_event_work [ 636.094246][ T57] Call Trace: [ 636.094256][ T57] [ 636.094265][ T57] dump_stack_lvl+0x189/0x250 [ 636.094293][ T57] ? rcu_is_watching+0x15/0xb0 [ 636.094325][ T57] ? __kasan_check_byte+0x12/0x40 [ 636.094353][ T57] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.094377][ T57] ? rcu_is_watching+0x15/0xb0 [ 636.094403][ T57] ? lock_release+0x4b/0x3b0 [ 636.094426][ T57] ? __virt_addr_valid+0x1c8/0x5c0 [ 636.094455][ T57] ? __virt_addr_valid+0x4a5/0x5c0 [ 636.094486][ T57] print_report+0xca/0x240 [ 636.094508][ T57] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 636.094540][ T57] kasan_report+0x118/0x150 [ 636.094566][ T57] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 636.094603][ T57] __ethtool_get_link_ksettings+0x5e/0x170 [ 636.094638][ T57] ib_get_eth_speed+0x15e/0x7b0 [ 636.094666][ T57] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 636.094698][ T57] ? do_raw_spin_unlock+0x122/0x240 [ 636.094733][ T57] rxe_query_port+0x93/0x3d0 [ 636.094759][ T57] ib_query_port+0x170/0x830 [ 636.094791][ T57] smc_ib_port_event_work+0x15a/0x940 [ 636.094824][ T57] ? _raw_spin_unlock_irq+0x23/0x50 [ 636.094857][ T57] ? process_scheduled_works+0x9ef/0x1770 [ 636.094878][ T57] ? process_scheduled_works+0x9ef/0x1770 [ 636.094900][ T57] process_scheduled_works+0xad1/0x1770 [ 636.094940][ T57] ? __pfx_process_scheduled_works+0x10/0x10 [ 636.094972][ T57] worker_thread+0x8a0/0xda0 [ 636.095009][ T57] kthread+0x711/0x8a0 [ 636.095037][ T57] ? __pfx_worker_thread+0x10/0x10 [ 636.095058][ T57] ? __pfx_kthread+0x10/0x10 [ 636.095086][ T57] ? _raw_spin_unlock_irq+0x23/0x50 [ 636.095117][ T57] ? lockdep_hardirqs_on+0x98/0x140 [ 636.095138][ T57] ? __pfx_kthread+0x10/0x10 [ 636.095164][ T57] ret_from_fork+0x599/0xb30 [ 636.095186][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 636.095212][ T57] ? __switch_to_asm+0x39/0x70 [ 636.095240][ T57] ? __switch_to_asm+0x33/0x70 [ 636.095266][ T57] ? __pfx_kthread+0x10/0x10 [ 636.095292][ T57] ret_from_fork_asm+0x1a/0x30 [ 636.095351][ T57] [ 636.095360][ T57] [ 636.318548][ T57] Allocated by task 16907: [ 636.323003][ T57] kasan_save_track+0x3e/0x80 [ 636.327754][ T57] __kasan_kmalloc+0x93/0xb0 [ 636.332356][ T57] __kvmalloc_node_noprof+0x5d5/0x920 [ 636.337754][ T57] alloc_netdev_mqs+0xa6/0x11b0 [ 636.342651][ T57] rtnl_create_link+0x31f/0xcf0 [ 636.347521][ T57] rtnl_newlink_create+0x25c/0xb00 [ 636.352835][ T57] rtnl_newlink+0x16e7/0x1c90 [ 636.357567][ T57] rtnetlink_rcv_msg+0x7cf/0xb70 [ 636.362557][ T57] netlink_rcv_skb+0x208/0x470 [ 636.367355][ T57] netlink_unicast+0x82f/0x9e0 [ 636.372302][ T57] netlink_sendmsg+0x805/0xb30 [ 636.377107][ T57] __sock_sendmsg+0x21c/0x270 [ 636.381837][ T57] __sys_sendto+0x3bd/0x520 [ 636.386372][ T57] __x64_sys_sendto+0xde/0x100 [ 636.391150][ T57] do_syscall_64+0xfa/0xf80 [ 636.395666][ T57] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.401566][ T57] [ 636.403896][ T57] Freed by task 26568: [ 636.407969][ T57] kasan_save_track+0x3e/0x80 [ 636.412679][ T57] kasan_save_free_info+0x46/0x50 [ 636.417752][ T57] __kasan_slab_free+0x5c/0x80 [ 636.422548][ T57] kfree+0x1c0/0x660 [ 636.426458][ T57] device_release+0x9e/0x1d0 [ 636.431056][ T57] kobject_put+0x228/0x570 [ 636.435483][ T57] netdev_run_todo+0xd2c/0xea0 [ 636.440263][ T57] rtnl_dellink+0x5b5/0x720 [ 636.444800][ T57] rtnetlink_rcv_msg+0x7cf/0xb70 [ 636.449763][ T57] netlink_rcv_skb+0x208/0x470 [ 636.454553][ T57] netlink_unicast+0x82f/0x9e0 [ 636.459338][ T57] netlink_sendmsg+0x805/0xb30 [ 636.464159][ T57] __sock_sendmsg+0x21c/0x270 [ 636.468853][ T57] ____sys_sendmsg+0x505/0x820 [ 636.473628][ T57] ___sys_sendmsg+0x21f/0x2a0 [ 636.478328][ T57] __x64_sys_sendmsg+0x19b/0x260 [ 636.483322][ T57] do_syscall_64+0xfa/0xf80 [ 636.487855][ T57] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.493776][ T57] [ 636.496123][ T57] The buggy address belongs to the object at ffff88805b75e000 [ 636.496123][ T57] which belongs to the cache kmalloc-cg-4k of size 4096 [ 636.510556][ T57] The buggy address is located 744 bytes inside of [ 636.510556][ T57] freed 4096-byte region [ffff88805b75e000, ffff88805b75f000) [ 636.524536][ T57] [ 636.527003][ T57] The buggy address belongs to the physical page: [ 636.533456][ T57] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b758 [ 636.542409][ T57] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 636.551030][ T57] memcg:ffff88805844d741 [ 636.555307][ T57] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 636.562891][ T57] page_type: f5(slab) [ 636.566899][ T57] raw: 00fff00000000040 ffff88813ffb0500 dead000000000100 dead000000000122 [ 636.575507][ T57] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff88805844d741 [ 636.584133][ T57] head: 00fff00000000040 ffff88813ffb0500 dead000000000100 dead000000000122 [ 636.592842][ T57] head: 0000000000000000 0000000000040004 00000000f5000000 ffff88805844d741 [ 636.601560][ T57] head: 00fff00000000003 ffffea00016dd601 00000000ffffffff 00000000ffffffff [ 636.610254][ T57] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 636.618932][ T57] page dumped because: kasan: bad access detected [ 636.625455][ T57] page_owner tracks the page as allocated [ 636.631197][ T57] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15904, tgid 15902 (syz.3.2855), ts 339078855204, free_ts 339051322275 [ 636.652844][ T57] post_alloc_hook+0x234/0x290 [ 636.657659][ T57] get_page_from_freelist+0x2365/0x2440 [ 636.663384][ T57] __alloc_frozen_pages_noprof+0x181/0x370 [ 636.669240][ T57] alloc_pages_mpol+0x232/0x4a0 [ 636.674140][ T57] allocate_slab+0x86/0x3b0 [ 636.678687][ T57] ___slab_alloc+0xf2b/0x1960 [ 636.683397][ T57] __slab_alloc+0x65/0x100 [ 636.687841][ T57] __kmalloc_noprof+0x47d/0x800 [ 636.692718][ T57] __register_sysctl_table+0x72/0x1340 [ 636.698200][ T57] __addrconf_sysctl_register+0x328/0x4c0 [ 636.703947][ T57] addrconf_sysctl_register+0x168/0x1c0 [ 636.709528][ T57] ipv6_add_dev+0xd26/0x13a0 [ 636.714136][ T57] addrconf_notify+0x771/0x1050 [ 636.719016][ T57] notifier_call_chain+0x19d/0x3a0 [ 636.724162][ T57] register_netdevice+0x15bd/0x1a70 [ 636.729392][ T57] bond_newlink+0x48/0xd0 [ 636.733750][ T57] page last free pid 15904 tgid 15902 stack trace: [ 636.740272][ T57] __free_frozen_pages+0xbc8/0xd30 [ 636.745418][ T57] __put_partials+0x146/0x170 [ 636.750141][ T57] put_cpu_partial+0x1f2/0x2d0 [ 636.754934][ T57] __slab_free+0x288/0x2a0 [ 636.759379][ T57] qlist_free_all+0x97/0x100 [ 636.763987][ T57] kasan_quarantine_reduce+0x148/0x160 [ 636.769473][ T57] __kasan_slab_alloc+0x22/0x80 [ 636.774346][ T57] kmem_cache_alloc_noprof+0x37d/0x710 [ 636.779945][ T57] __kernfs_new_node+0xdc/0x880 [ 636.784826][ T57] kernfs_new_node+0x102/0x210 [ 636.789643][ T57] __kernfs_create_file+0x4b/0x2e0 [ 636.794790][ T57] sysfs_add_file_mode_ns+0x238/0x300 [ 636.800191][ T57] internal_create_group+0x667/0x1170 [ 636.805581][ T57] sysfs_create_groups+0x59/0x120 [ 636.810619][ T57] netdev_queue_update_kobjects+0x2a6/0x6c0 [ 636.816539][ T57] netdev_register_kobject+0x258/0x310 [ 636.822028][ T57] [ 636.824369][ T57] Memory state around the buggy address: [ 636.830014][ T57] ffff88805b75e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 636.838095][ T57] ffff88805b75e200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 636.846172][ T57] >ffff88805b75e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 636.854248][ T57] ^ [ 636.861719][ T57] ffff88805b75e300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 636.869814][ T57] ffff88805b75e380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 636.877976][ T57] ================================================================== [ 636.888443][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805b9e0000: rx timeout, send abort [ 636.899584][ T57] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 636.906845][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 636.916101][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 636.926199][ T57] Workqueue: events smc_ib_port_event_work [ 636.932067][ T57] Call Trace: [ 636.935380][ T57] [ 636.938346][ T57] dump_stack_lvl+0x99/0x250 [ 636.943072][ T57] ? __asan_memcpy+0x40/0x70 [ 636.947701][ T57] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.952938][ T57] ? __pfx__printk+0x10/0x10 [ 636.957663][ T57] vpanic+0x237/0x6d0 [ 636.961689][ T57] ? __pfx_vpanic+0x10/0x10 [ 636.966243][ T57] ? preempt_schedule+0xae/0xc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 636.971136][ T57] ? __pfx_preempt_schedule+0x10/0x10 [ 636.976559][ T57] panic+0xb9/0xc0 [ 636.980326][ T57] ? __pfx_panic+0x10/0x10 [ 636.984786][ T57] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 636.990735][ T57] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 636.996760][ T57] check_panic_on_warn+0x89/0xb0 [ 637.001748][ T57] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 637.007778][ T57] end_report+0x6f/0x140 [ 637.012064][ T57] kasan_report+0x129/0x150 [ 637.016618][ T57] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 637.022648][ T57] __ethtool_get_link_ksettings+0x5e/0x170 [ 637.028509][ T57] ib_get_eth_speed+0x15e/0x7b0 [ 637.033408][ T57] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 637.038829][ T57] ? do_raw_spin_unlock+0x122/0x240 [ 637.044097][ T57] rxe_query_port+0x93/0x3d0 [ 637.048747][ T57] ib_query_port+0x170/0x830 [ 637.053398][ T57] smc_ib_port_event_work+0x15a/0x940 [ 637.058971][ T57] ? _raw_spin_unlock_irq+0x23/0x50 [ 637.064234][ T57] ? process_scheduled_works+0x9ef/0x1770 [ 637.070015][ T57] ? process_scheduled_works+0x9ef/0x1770 [ 637.075793][ T57] process_scheduled_works+0xad1/0x1770 [ 637.081418][ T57] ? __pfx_process_scheduled_works+0x10/0x10 [ 637.087464][ T57] worker_thread+0x8a0/0xda0 [ 637.092116][ T57] kthread+0x711/0x8a0 [ 637.096234][ T57] ? __pfx_worker_thread+0x10/0x10 [ 637.101424][ T57] ? __pfx_kthread+0x10/0x10 [ 637.106153][ T57] ? _raw_spin_unlock_irq+0x23/0x50 [ 637.111404][ T57] ? lockdep_hardirqs_on+0x98/0x140 [ 637.116644][ T57] ? __pfx_kthread+0x10/0x10 [ 637.121284][ T57] ret_from_fork+0x599/0xb30 [ 637.125930][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 637.131104][ T57] ? __switch_to_asm+0x39/0x70 [ 637.135929][ T57] ? __switch_to_asm+0x33/0x70 [ 637.140744][ T57] ? __pfx_kthread+0x10/0x10 [ 637.145386][ T57] ret_from_fork_asm+0x1a/0x30 [ 637.150218][ T57] [ 637.153440][ T57] Kernel Offset: disabled [ 637.157786][ T57] Rebooting in 86400 seconds..