last executing test programs: 2.808862482s ago: executing program 4 (id=4313): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) (async) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000300)=""/7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd2}, 0xb6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r0, 0x0, 0x1, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061112800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 2.667089776s ago: executing program 4 (id=4315): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x12a, &(0x7f00000001c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x32, 0x4, 0x0, 0x0, 0x11c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@noop, @timestamp_prespec={0x44, 0x4c, 0xc6, 0x3, 0xb, [{@rand_addr=0x64010100, 0xff}, {@private=0xa010101, 0xfffffc01}, {@empty, 0x1ff}, {@private=0xa010100, 0x4}, {@loopback, 0x1000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@private=0xa010101, 0x3ff}, {@multicast1, 0x9}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0x58, 0x3, 0x6, [{@local, 0xffff0000}, {@private=0xa010100, 0x8}, {@multicast1, 0x4}, {@empty, 0x4}]}, @timestamp_addr={0x44, 0x3c, 0xdf, 0x1, 0xc, [{@multicast1, 0x3}, {@rand_addr=0x64010102}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x9}, {@multicast1, 0x727}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@broadcast, 0x4}, {@rand_addr=0x64010101, 0xfd79}]}]}}, {0x0, 0x4e20, 0x54, 0x0, @opaque="53cf6e50e8661baf1477fea988f5026269f213313b2fcb6f86028a25d0affdfca62bf3c6baa2fd59bc01b22fc6cbd9dfe32fee0a77e73b2eb7308a1e4aabca7efcde5669d034ab20921ea4e4"}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710431000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.588005005s ago: executing program 0 (id=4316): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x8000, 0x1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) (async) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) getsockopt$inet6_opts(r3, 0x29, 0x39, 0x0, &(0x7f0000000240)) (async) r4 = socket(0x10, 0x4, 0x3) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async, rerun: 64) listen(r0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x88, 0x30, 0x20, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x0, 0xb, @empty}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_LABELS_MASK={0xfffffffffffffddf, 0x8, "6853fd63c64fb993c41651eb9b0197ba"}, @TCA_CT_NAT_PORT_MAX={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000300)=""/108, &(0x7f00000003c0)=0x6c) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000600)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, &(0x7f0000000100)={0x77359400}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd2b, 0x70bd2b, 0xfffeffff, {0x0, 0x0, 0x0, r9, {0xfff1}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_ACT={0x4}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x4, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x58}}, 0x24040084) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x44, 0x2c, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x5e}}]}}]}, 0x44}}, 0x24040084) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x2}, 0x10) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x7) (async) accept4(r0, 0x0, 0x0, 0x0) 2.587719745s ago: executing program 3 (id=4317): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200048c3}, 0x4894) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x10c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xcf035dfa34b81343}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0xe4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "111a84b0dc61a9a7601738f9b697fb1b6962b698f9d184ccb5a775db39542c82"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff800000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e2bdea3d5e4ba1056b0523380dc698c3"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "564f9a598a7f694314a530e17d5bcb56134e24961a58cafaaddce2e4a929eabc"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "91e51401addf0d892115482202f36732"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40004}, 0x40000080) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f00000009c0)) 2.416540555s ago: executing program 3 (id=4319): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) listen(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 2.363521802s ago: executing program 3 (id=4321): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYRES8=r2, @ANYRES32=r2, @ANYBLOB="060066008e8d00000a00060008021100000100002200330030240200080211000001ffffffffffff5050505050508200"], 0x54}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000001590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x0) 2.216023706s ago: executing program 3 (id=4322): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000780)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000001e00)={{r1}, r5, 0x2, @inherit={0x58, &(0x7f0000000980)={0x0, 0x2, 0x6, 0x8, {0x4, 0x3ff, 0x8, 0xffffffffffffffff, 0x2}, [0x3, 0x5]}}, @name="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"}) (async) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) (async) ppoll(&(0x7f0000000140)=[{r1, 0x200}, {r0, 0x421}], 0x2, 0x0, 0x0, 0x0) 2.082332982s ago: executing program 2 (id=4324): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, ';o\'.'}, &(0x7f0000000040)=0x28) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x4) sendmsg$netlink(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002380)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="f5b1020000000000140012800b0001006970766c616e00000400028008000500", @ANYRESOCT=r5, @ANYBLOB="08001f0002"], 0x44}, 0x1, 0x0, 0x0, 0x20000880}, 0x800) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0xffffffffffffffff, 0x8, 0x9, 0x4, @vifc_lcl_ifindex=r8, @private=0xa010101}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x28, 0x10, 0x503, 0x40000000, 0x25dfdbfb, {0x0, 0xcf, 0x0, 0x0, 0x200}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x28}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r9) sendmsg$NLBL_CALIPSO_C_ADD(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r10, 0x1}, 0x14}}, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r11, 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) r13 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r13, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) connect$llc(r13, &(0x7f0000000380)={0x1a, 0x313, 0x3f, 0xf, 0xff, 0xba, @broadcast}, 0x10) connect$vsock_stream(r12, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) accept(r11, 0x0, 0x0) 1.974808783s ago: executing program 2 (id=4326): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00'}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="000000000000000000aca932135450853f541a91f8eb165723520366796e6487cde1110724dfb997a268a1873bccf59ed6f496e64536bfe3dd90", 0x3a}], 0x1}}], 0x1, 0x41) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0x0, 0x3}, 0x1}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x10}, 0x20000050) 1.79933721s ago: executing program 2 (id=4329): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d00792984"], 0x4c}}, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @rand_addr=0x64010101}]}}}]}, 0x40}}, 0x8040) (async) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @rand_addr=0x64010101}]}}}]}, 0x40}}, 0x8040) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xa3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44400}, 0x20000005) 1.765042464s ago: executing program 1 (id=4330): r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x48, 0x0}}], 0x1, 0x0, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1}, 0xc) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1000000000000173) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x30011}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.624584134s ago: executing program 4 (id=4331): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x20000000, 0x2, 0x6}, 0x1c}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) (async) close(r3) (async) r6 = socket(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r5, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000001125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) (async) r8 = socket(0x10, 0x80002, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f0000000700)={{r6, &(0x7f0000000000)='flow\x00', 0x80, &(0x7f0000000200)={@align=0x9, {0x8, 0x1, 0x0, 0x1}}, 0xffffffff, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0xd7}, {[0xb, 0x8, 0x3, 0x3]}, 0x81, 0x89, &(0x7f0000000640)=""/137}) bind$bt_hci(r9, &(0x7f0000000780)={0x1f, 0x2, 0x2}, 0x6) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0xfffffffc, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x20}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 1.613386188s ago: executing program 0 (id=4332): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710447000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) unshare(0x100000) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000300)={0x1a, 0x4, 0x0, 0x0, 0x81, 0x42}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) listen(r0, 0x2) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020100000003000000e0ffffff000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b2d, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="407c0af5", @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="24005a802000018014000300000000000200080001000000000000000400020004000100"], 0x40}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r11, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r11, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48e4}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x1e8, 0x1e8, 0x118, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@ip={@private=0xa010102, @empty, 0xffffffff, 0xff000000, 'ipvlan1\x00', 'wlan1\x00', {0xff}, {0xff}, 0x32, 0x2, 0x2e}, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "e018"}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x2, 0x0, 0x0, 0x6], 0x0, 0x1}, {0x2, [0x1, 0x2, 0x1, 0x1, 0x2, 0x3], 0x1, 0x2}}}}, {{@uncond, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x9c]}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x3, 0x1}, {0x0, 0x3, 0x3}, 0x128, 0x2}}}, {{@ip={@local, @broadcast, 0xff, 0x0, 'pimreg\x00', 'tunl0\x00', {0xff}, {}, 0x73, 0x1, 0x64}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x12, "178d", 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x9, 0x4, [0x8, 0x2d, 0x39, 0x33, 0x36, 0x1e, 0x19, 0x15, 0x40, 0x6, 0x2c, 0x3f, 0x7, 0x6, 0x38, 0x1c], 0x1, 0x0, 0xffffffffffff7be0}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 1.502715265s ago: executing program 2 (id=4333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x548, 0x370, 0x280, 0x1b0, 0x280, 0x280, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [0x0, 0xffffffff], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x300}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x10, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0xfd}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@rand_addr=0x64010101, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], 0x4e22, 0x4e21, 0x4e21, 0x4e22, 0x7, 0x8, 0xdb1, 0x3, 0xffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x220, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "bc198481b486ae0f20c4c1b3c8dde5802348dac4"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "27f29334ca484321b55a54991311978481160c6d1536323fe15ff4c0c3"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x549}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x25}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x30}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7997f81d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x91b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "dc003ed5677829639593ceb2859f0122c4466738aa3380972f44978523964a2743"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}]}]}, 0x220}}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x1040, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "fc654c187d6eb5f0ca15095cc8787b50b96435ad3147dd10e867248d37187c2a131a62d105462ce34d5cf8ded36159aea612a3460534d8c298556e91590238f40dd2c7148d365ab6cdd5f2a7f74bac8d59f731c655a46917f18b28ed05e58b70287d26677601258a5c0ab9f679e2e520228c3a1f1aede04c6ba82cc38cc2ab6b35a24fb20e032dedf6f6caf4bfea5435f746f746fd46ca192e3744eb6908b358c10833bf484237ba654641e6186a45957c6345e61ea620fdc74383ce1df4a24e7044bae596f018736424a5bfa438865044e7026fa37a3540fadd0e89d87aecd3bc127e0cb10274991d6127224a0f2a4ef19e2c4dedbe45f2471abcc38c584ead0e3df3f9211022b2421fb6b327361e8f58f2b73134fc5444b350ede95ecef5bbbf9950e75c9f772a3ff0180d2cfac287228709726a6abbab2971982de7f1a9149d71dcbfd212e89ff17cf284b7f8ad82a469cb1c1e3d9d1d3689271c8dad0ba89dda651d4242062ac0bc5877e397236fa9476ac5fac7c2c896babca09d74720004cd0e634327de4fd87ed72ae069c095d2c70caed52e3335478c1c3719925e24f2fd7755baebd5cde385727a0f0440dd3b662248c43ff5afc4f186ff0051ba8eaa07623b79c4bb6985f14c5ac15041a6ff7584f921982e5414481d4db4c76798d70a59b5aeccb6e7882aefe70993758b55b4dc4039c2b1c98452113aaf23ccdf68cb6eff6e048f9da6f39a2def3caaf80cdcbadb83b029b8738391f02fec90c8a8b6f036aae8ceaff5dca7d3e0098423fedc676c6774ab0e6a72bd246c0b3004d1988f802b846d62ca59e9a63ce12814176ec4380e1cf29d27e7b2f7e7eadcaae8f182498ad32e67323fe6ef9508fec40dd38897652053ef92e44a909060c237890c196f0c26ab10248f999001f6231813a81313971bea77a5470f312d185dce689adc99e430e4010a3a341482c51fb71c23c3cdf92303c7580c73775f9a74685a61ce9849eaca52b97ee7ffe2e672dc1be5267c285a102711b1b5d81d6dbb76494f2892fd4f85244ade3cdd3809fd5fdfce5157fc1658f0bceb379489732583707c170fc6392aa4f5b94843aeb18da58e0156e029c2b722918b1b3dc7c151cb9c248ddd18423629b53cd4b0ab2693b0df29c88c04657f4eccdc41357de8186fdc0ec86f92950734975921a2fde57c3e7176b57c871d76ff8a8f36520b67e64930cf34bcde9ad92d057a359ca022b646df18e2b7202845bd8ac4be5e5ebae436dc4b93dfaaf2778a53e7e4be937e83dac7d1d481bdbd8081ab0ac08af067e62580bbdbf397cbc629db9b023734b6fad7824d1a8b3257c1c18d6ebc928140060f004ec484b183560f830a1eb0c527c8600bb2600d761e847454e677aa29486aa407a9e9a5e9dc9542de038e3e55fdfec13184cdb16716556f972eef5c56230c43d146c86a9147265c309a279db6d138647920410896c5397c5f83634fa5e92b5161f786482d84830864388b91c2c1e3e9f9f038d5fa66f7fe904e14df0a60d46066c6b1f37cec6e13c35832f512be21da21a5921b81cc452b0076c2ec10fc5481cd0e1ca917b40cb3aa839b120ce6eb9773e942b74ececac6bdcd22eb8dd6cd9f148e0ebe5ef3094f42adc39bc5ca2259e1eab5059ccf5e82bb57b97d4d13a90747299b2e6b64f962aabf222e4f287503181de3c3a68fb2b0068583f3b97e40ce06e9805a7121eccac0527b8f1b18a62762efe0a9ce4114b7d1ba942bc93533ee0b1bd7f0a607207b976dfa1fbe3ce0868e7f4e31b41a0aada0ac6b291aefe22ea5338f07e57b981b8e4e4a121f231d2f46989fd5dd09a7c1d198f5886b4f1a222eccdabff096a81fef3c9e497621128562880938fe05a1f1c4da81daba55bf326f1e3a1712d79f01fbef2ee230615d4e454be67f0ad4dc2bfffaecbb683742925738b45854ab713ae548b9709e9ea2e28224ef466bced79e3ec6c163d45db187bc01c75afa85f78003927dcd122086acc8dd1b1224de41d62b83e34083dd39fe68aa5a479ba403f5dbddf9b763ca521b7efca6234be16484f1e0112d963672a6d24cdac15e80bcb82b3b22231670c41fe7e8a0a083b6df768e7fb0d94a004f8372f5cf8b9b45cc679eb67828a94d0ffabfe09d95ad2789cb8657f7ea86a46260416a72e6fc7b44e549a2e39fe015c7647cc0bec15fa63d26894be1cc5326331e7e0b1c505934182accf049bab033b026d48fda51de740afc0666e6c891e0c5192f4b2df21493477ff45319d7d8b816f0b73ccfa12d6846362feb4b85063ca42e950eb577c630300dc52698a38ca19cbbb398404a1e8e27d0be49985e59caef03da096d1ccbeed73bd7c9588325b747ab77f4d7c1c1f18388ce1771882ee680ed737ad197ff92f1052e5e79f6ffa5b85ba3fac5db13e0d0046c9dca0ab4b74b20299ba6bdd758940e088df31e1382cee6901503299028467a864d27affae30fd9aef5a6ff948c052124511a75a46d5a316e28fb6c5bfac787be5833c63c535557235b0e09f9a78a338aa8864613fca77a7e252d1975af2c4a6bcc969d1e20e3cd4dfc1b2fe34b70fd7804dbfde4fa4d950e5fb4eb926dece9e4601b12efe322bb42ac808158fef0a26900000000726654987e7de20d1e41e82c607c33c6bae7bb234744b51dc683d5857afd6ba8246cebc734e393806ef102a6baaf04f3a7c3cb888d5830e1c6ae170c5c920e806b4f518be4416b216cdf9b1658a412d9e4eab6c9b20ce99960f27e77fdf9a2e98b35c63859f9db6bdcbef1001a19e12e41370f9358531987851ab64c250e68a8569ace4418e2118caff7d3d4caf1c87bc50a8ae75770fdae88a8490c041b39d08190d8b7c908caddd66331a508929d53dd6bc2dbc86f97115ff0a364b70f96918e6ed354c97e59ea5e2c7b149cd51d7c85a27ac658e78b99326857858df0ac0ee240cbb6ee9d9ee6c2c2ff7c29dd25fd337dc08bddeb50305ed48b9f5d89c55ffedde29ce0412ea8e2c976f961eb0c4966d2a8be0b657a5e51048a8a10005c488e1f637ce208a35b5aed0c2067465191dc42ebf6e4853cc89998bdf2ef755f38a3cd985b62df36a5ebc3b47df32423ee46857f9db9d756ff69ecd4ef2f307dcaefd4a1f399543952df972269c28200df8ebacad4eed1c00b9ce9841799bea583cafdeaa8d4a371a8ae55d8ffe4846833985975d8b234adff63eace9d2c4d1680c370827ebe1831ef311077607e8c4920506e03528861085dcfdb918f1efe91420c390fbca0a38377e1635c402ec1c34eddae986ffa8756b27f6c340907bae99f4a6b328fca8177b4dfaceea5ad3ceb901dbcefc15ded322bece4e750969e81935764ebe88749464af7e692e3d324c519b456013daae93bd63215540380a7fe08f0e050cdeb25db2a8b9b6f5720ad1e7d2c5b6d609712eccd321d6211fb642a4cdf72504aabd017a9b4827d1e0e0264435a5e1045dbe33834968d2db503972995559b1efe1b9ce475405118346b63f637b1abf8e8374e7100d6b41c9c672d2b244c7a82ffb882522efd9e903fc69db14c469685780005843856c6623591f305d383eae55a1a1d5619dfff0027413f26fa6a793a348ba8b192e1b088745a2175d55517a75d4b63cce41cc0dcaca9002cd37a1ccc6710ba2a099297b0824f976919e8abf3b1510b1305a95241fefbd036afa9d4538affc82f005d29b9f2c0e60d6c20f673b8ca28cb088e1e89efe334f25ffe1a3fb3581e5aa63b9a4a49f269b5538788aacbbc04d49902ae2af1f59d2484ab6ba7a9b477be0d92e221fc48cdbc00bef7125bfe36f9afb1cbd58fef21625ec99ffd2e35fb00767e3f22dba7d36163203cfaf1860a8b1afe0d878ea00fe08f68fd592a6395fb357acbdc2834c8ac85571527dbf1dbaaccede3d583e2b9bf076737716785f44aebc7ba917fb426d5541adff1e75836ab70fb0b43565ab5e24c5902879f31701cc006b4ee2f57be0916cf0b6cd489c4fa9129031a4af75a00048f20eb962f0c6f68cda0d7756a4e83f7d065c4a00b8263d95f6b979507b7ca01735e83a5e5ff0b76f077ef6e4c1150f9202b5311a231b76111d48a387e09075edb2448fb19d2869ae420ada8ee7577fe980ed7e057dc963c0a98db790bb5b7920220f8a55213b6530637b832abdf3c6fefdefb712a2c2c9eba8087ce39335ddabdadb86f493061e593981c6b2d70b4bac3b58885787c46f85c1022f5ff6cec16ba227aa5dac2e0be30522c08369f18d170b9cb454f3ebf86d1e923fdd65245d8e0c476bfedddcb772453f4d0e70d059e79b8811c379c9eff6e45d99f81186930b32b24cdcb906a41fe29c147ed834b37e77800a33c15e65d121ee85a924ef6bbc1c8f4a423fbc5d14645a08178227f4c7f111fa318823a6c075ddf9e131c9bca8d56dec4a68fbab9a0c1a128880d8b4dec59b89ec33c19eb76f09f31ad730cba735b60deba54c399119949e45af4de5c758281945fe6b6a25ac1cd57a81b48f11a6575e79b82e529d4ba1b2a1175cfa03ef6d149b165195fa64736b302e28ee6444368fb395a2d89c8747348b546a07ed0306682971539f0031d88ffa020d0b3d40369e0a3d2238293a75a155eb5c0749f64ed37a9af5be26d5a4322a55a23c33d176280bd0e4c5168f2e66bca925304d0f32074f5e68d7c43f9e2e3f14a6bcf3e77e6b71737131c3e90208072e37c8a6cad1cabd756aa694e85b86256ce13b43541a26438374b6029ee461d223ed34ed1e9a3e580cec7b2b41bc9823b3729e683f079a498636d022799dd94c5e870b6aa7f3d36fb51ffb6c5e317fcde6b5ae45073f8e90ee0fc1fa0641ff6f0b789dcc6df2fe9a3b5e6ed9d2be3403f5af96e7c6019b0a0ce4f8342323638a52c121956de068069fe5c44946b5023e1db7742fec29cb749bcdc09d795b683c553dbae1298540b2cf1bc3e5e52adf252bca47ba2182c80541daf1d11b1c67675171e69c1abe3c0bc3a0f2d1a6e2165ca1647c394970a404a6002621a258cef01e2ca12a138888dace9ad06d2f0c0209f286c11b289626aa557cc201560651054a6042e84c6fc5e345e2f702d61851fed5ffa36ade652f76db815dabb7b8eee016ea0836d0086f2a2f7bd1c4a4ceb1d706817b41347a891c34b45eb06a9ecb19041d5a39f050cb0413662dc4700385fac2e1823e1ce4d08c66692fde0862a057f2aa2425d511735fff53d0e3d88bfb245e7724ba4ba8452e469862d333dad5c63bfa778809c043132db3a57e122d0495441f7a07034a3ac1024b8fc063694d8316c29639cb6605ff362a853f976c763f6d10e4e0972760e60f08acdd8a73607e7311819fe24ad8b670bbf0adede086f91bd0839ce37927f43a263e3e8369932db9ab786ba66e1bba664bfa8aa50d98ed18fc90e560933c2e8da72757a4539756740a73c41180cf97fde47cf3e9e6005302459d831eea7a03157e0c3178776e4d4add3999b9a1efca7c99b8234ff9d33492431dd9bd0814301ee49260e30b8b6afc46ce8a733bc9d7850c789e5e98cdefbfb11131a85bc24e75453a16c6780ab4229b985d1fe7a255f71cfe18398e881d493ded88300b54f6c4a5567fd84a6e1f11835433448a00420ab1b3a49fcc0e9938da52b68f9409c94a0de61f0beb69532c4f7a11fae6a9ffd10db7de01e3272448b517ad795a06f3fef8148b7196cb81a80aed42e395c1ac346dd27f9bce87661e19f957a17d54d59b68e023c1516ae9ba4d75f18d4b8fc7e9fe6f74e38597b0e520000000000"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1040}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}}, 0x3e) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r7, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6dd}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x70e2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4050}, 0x20000000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x83, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.448620795s ago: executing program 1 (id=4334): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff8001}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f0000001200)={0x0, 0x1}, 0x8}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000}, 0x50) 1.403388337s ago: executing program 0 (id=4335): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0xffffffffffffffff, 0x12) sendfile(r1, 0xffffffffffffffff, 0x0, 0xbdc4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000280)=0x1, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000006c0)={@loopback, 0x77, r6}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x13, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x30000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @ldst={0x3, 0x3, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x4}]}, &(0x7f0000000640)='GPL\x00', 0x1, 0x6f, &(0x7f0000000680)=""/111, 0x41000, 0x3, '\x00', r6, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xf, 0x2, 0x6}, 0x10, r8, r1, 0x0, &(0x7f0000000800)=[r0, r0], 0x0, 0x10, 0xf}, 0x94) 1.341251451s ago: executing program 4 (id=4336): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getpeername$inet(r0, &(0x7f0000000140)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x2, 0x2008, 0x6}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32=r4], 0x38}}, 0x0) (async) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32=r4], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x23, &(0x7f0000000300)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x90}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0x1, 0x1, 0xa, 0x10, 0x10}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0x0, 0x7, 0x1, 0x1, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xe27b}], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x23, &(0x7f0000000300)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x90}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0x1, 0x1, 0xa, 0x10, 0x10}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0x0, 0x7, 0x1, 0x1, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xe27b}], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.199944892s ago: executing program 1 (id=4337): r0 = socket(0x23, 0x5, 0xff) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000015c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001580)={&(0x7f0000000200)={0x137c, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0x4c, 0x3, "15b35dfa34d1eb800df19c32499f2db5685a72ade07f9a2086a50caf10f293bd1c4893dbe826377d5578abefd11b95079cca35f17e5ffffe39ef49e74b51bfc483a6c1c1a5c476db"}, @ETHTOOL_A_WOL_MODES={0x10e4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x49, 0x5, "8f23018716eb00c16c85f723bc583f94709aad7e21884ceb51ad4c2cc6a8434e35dc42b5c5a8bb71b1593a8e183bf00af018fe67cc78b298c3abe8df357eb804d63f506522"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0x14, 0x4, "4178e5c83bf047ff36864ae25e2d4c50"}, @ETHTOOL_A_BITSET_VALUE={0x79, 0x4, "e48d7119b0115504932ca38008951f49bf098685b4787ba3f217583a654aa2059000f12a90ce8e3933774a4ab1ae3d1def99599b1e5dafdcd82be45dc8c4d3505b24bf7089789f3b3184ef2fadbcb880e0dd674454d26a18f4bca74e8c433e20286b1fe03178676d2a1795d898a66343f1f5b763ee"}]}, @ETHTOOL_A_WOL_SOPASS={0x9f, 0x3, "84b5b8fd5810cff47c1a17056555de9a4f15341bad2683aac74c94aee5fbf98369ce3e214fc41b8ba8664311c5205db41af400357048a0f76ea17cdd4f54f4970d37cb658fce77155cb498a8b71aa194175bf1aea001ee7350681c2f56b04b12cd1d37c01a827125fd5e7033ab7e0df4bdd67c4f694f4dcf424acb5c92a77a77dea578780294d3f785d65f683c98a0e1c56abee65f3abb8757da4e"}, @ETHTOOL_A_WOL_MODES={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'erspan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'pim6reg\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x48db01d9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb43}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'+.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ')\x85[-&]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xc1, 0x5, "80da13a32ad996b600e9f612920a0cd7533a82d29352d1d48638df2521f7d33557578304b8f83c33ce4fd964db629476dc80db91b9933f814f67714cf00c26a54a845484af38b9b98ee30e7b880bd26e8a73712e00e18919bba61d5dd45be84d7836097330c255af00cc711452890fefa1de91b4b5db34ce3364d81eca47088ac9781cea6619665058c8bf4c3d6f102204cf62be4f86110bb2478cc1497028f17f1bafa2c209cc3cab221f583975f3c271fcb17564c165f437cb818884"}]}]}, 0x137c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@flowinfo={{0x14, 0x29, 0xb, 0x14}}], 0x18}, 0x922bac8556bda5ce) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'pim6reg\x00', {0x34}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffff5e) socketpair(0x23, 0x4, 0x7, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, &(0x7f0000000100)={'erspan0\x00', {0x2, 0x0, @empty}}) 1.199215949s ago: executing program 3 (id=4338): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x58, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7, 0x18}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000240)={&(0x7f0000000140)=""/183, 0xb7, 0x400, 0x7ff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async) r2 = socket(0x10, 0x80002, 0x0) (async, rerun: 32) r3 = socket(0x200000000000011, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00010100080500ff00d600000000000f0071000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (rerun: 64) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000200)={r7}, &(0x7f0000000340)=0x8) (async, rerun: 32) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) (rerun: 32) 1.122427844s ago: executing program 2 (id=4339): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x38}}, 0x4000800) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x400c840) 1.086652856s ago: executing program 4 (id=4340): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = accept4$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10, 0x800) close(r3) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x44, 0x0, 0x0, 0x116}, {0x6}]}, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000180)={0x0, 0xfffffffffffffe4b, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r11, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x14, r10, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x4000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0xe7, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xf4, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) getpeername$packet(r4, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xe8, r10, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xba}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r14}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1a}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r15}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 940.013562ms ago: executing program 1 (id=4341): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd73, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xd5f, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea"}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004e00010000006ed06dbb2f8b58e9"], 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x3c, r6, 0x1, 0x10000, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x94, r6, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x5d3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xba}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7fff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x8020}, 0x1) 884.098227ms ago: executing program 0 (id=4342): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1, 0x6) getsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000840), &(0x7f0000000880)=0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) syz_emit_ethernet(0x1f, &(0x7f00000000c0)={@local, @link_local={0x3}, @void, {@llc_tr={0x11, {@snap={0x0, 0xab, 'I', "282896", 0xd, "f69b32a2a5cb407308"}}}}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) 844.731961ms ago: executing program 3 (id=4343): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000000)={0xfffffffffffffff8, 0x81, 0xde6, 0x7}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x85, 0x0, &(0x7f0000000440)=0x9b) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) listen(r1, 0x7) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000000)={0xfffffffffffffff8, 0x81, 0xde6, 0x7}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg$sock(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x85, 0x0, &(0x7f0000000440)=0x9b) (async) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) listen(r1, 0x7) (async) 699.72184ms ago: executing program 2 (id=4344): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)={0x74, r4, 0x101, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_FRAME={0x4f, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xff}, @broadcast, @broadcast, @random="eec513c8ebed", {0x4, 0x9}, @value=@ver_80211n={0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xa}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0xae4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x92db33d6b782c5d0, 0x100, 0xa}}, @val={0x72, 0x6}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x44001}, 0x4004004) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x40041) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) connect$unix(r6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r7, @ANYBLOB="400002803c000100"], 0x5c}, 0x1, 0x400000000000000, 0x0, 0x80}, 0x40010) 470.260538ms ago: executing program 0 (id=4345): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000006060102000000000000000005000001866dec7701d264dc0900020073797a30000000004b8b6eb3cc9d5fb937a85b83d6c666b9334c856c26aca6"], 0x28}, 0x1, 0x0, 0x0, 0x40000000}, 0x44010) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000240)={r6, 0x2}, 0x8) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20991, 0x11c05}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) 459.687457ms ago: executing program 1 (id=4346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000010f40), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000010f40), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf25030000000c0002000500000000000000400007800c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0ce6018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00060003000000000000000c0006000200000000000000280007800c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="08000100000000000c0006000100000000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x20008089}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, 0x0, 0x4000000) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, 0x0, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000a00000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="8cf070063e0eae31af2eba510d8374ec659f97f5ec2303", @ANYRES64=0x0], 0x10) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@o_path={0x0, 0x0, 0x8}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000020000003f00000040"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001340)={{r9, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000001300)='%pB \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r10, &(0x7f00000004c0), &(0x7f00000001c0)=""/13}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x10081, &(0x7f0000000b40)={@_ha_fsid={[0x6, 0x9]}, {0x5, 0x1, 0x9, 0xff}}, 0x4, &(0x7f0000000b80)={@_ha_fsid}, &(0x7f0000000bc0)=0x2}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x10081, &(0x7f0000000b40)={@_ha_fsid={[0x6, 0x9]}, {0x5, 0x1, 0x9, 0xff}}, 0x4, &(0x7f0000000b80)={@_ha_fsid}, &(0x7f0000000bc0)=0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xa, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="2c1c0000000800000000000007000000b7080000000000007b8af8ff00000000b708000002000000798af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000060000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x97, 0x7b, &(0x7f0000000500)=""/123, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, r7, r8, r10, r11], 0x0, 0x10, 0x3e}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xa, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="2c1c0000000800000000000007000000b7080000000000007b8af8ff00000000b708000002000000798af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600000085000000060000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x97, 0x7b, &(0x7f0000000500)=""/123, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, r7, r8, r10, r11], 0x0, 0x10, 0x3e}, 0x94) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x4044) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r13) (async) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r13) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r13) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r13) sendmsg$NL802154_CMD_DEL_SEC_KEY(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="060000007d00fdcc9da5d1c9dbdf25180000001800308014f873d6907f41a6e909a0b9000180050002000200005b6ff39a000100000008000300", @ANYRES32=r15, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x24000000) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="060000007d00fdcc9da5d1c9dbdf25180000001800308014f873d6907f41a6e909a0b9000180050002000200005b6ff39a000100000008000300", @ANYRES32=r15, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x24000000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=r15, @ANYBLOB, @ANYRES32=r16, @ANYBLOB="08000d000000000008e70d000100000008000d0000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40088c8}, 0x4000040) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=r15, @ANYBLOB, @ANYRES32=r16, @ANYBLOB="08000d000000000008e70d000100000008000d0000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40088c8}, 0x4000040) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 375.84361ms ago: executing program 4 (id=4347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x90d00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)={0x0, 'ip_vti0\x00', {0x4}, 0xb7d6}) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000300010000", 0x7) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@deltaction={0xcc, 0x31, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x43}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdc0}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000000c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 286.377839ms ago: executing program 0 (id=4348): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89e0, 0x500) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000697ef25a7b1a724f8109f41a4fceb96673e88a571e092ed94dfad80422e2aa30e931422c2f9e120325d49d5f87e37377e86ee08baa065f086d11cf89f540c4609e1889bda0e0e6a797ff3cb9e296b934707669a97d64dff0c6218d8fc4a58ea47778203c99a915e62bd1b1cb1b1ce3df377580a2f600e54b8e9d7e21afd20545f908ef5752727e174b7d4d8dba9f26156dd562a7ea20fe13641baac7fc419e986cae2aa9da6b1a9d317e4bb5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0xe}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, 0x0, &(0x7f00000002c0)=0x37) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000280)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809001600ff0000f03ac7e7ee0000000200000000a80c41668b6f220101c9c8888334f400000000", 0x58}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000240), &(0x7f00000003c0)=@udp6=r4, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 0s ago: executing program 1 (id=4349): r0 = socket$packet(0x11, 0x2, 0x300) r1 = accept(r0, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000001c0)=0x80) r2 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r2, @ANYBLOB="3d1754019b641c83e6485c8acff59ad4f9c8dff4ae3463482e40e118a5ca91c7f600b17d26c5ee97c3797039d9798de6819fb11e5936ecb6cb2ef93bf66c0524693865562b8fb90b62df049c8babade7a6ca307ba396743d01a59313a4927e4d5bc8c91c1cb6ae458c02"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$AUDIT_SET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x3e9, 0x10, 0x70bd29, 0x25dfdbfc, {0x1, 0x0, 0x1, r2, 0xfffffff8, 0xe958, 0x8, 0x4, 0x0, 0x100, 0x39c}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044000}, 0x20048055) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000400)={0x0, 0x9, [0x7, 0x3, 0xf, 0xfffffffffffffff9, 0x80, 0x8]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r3, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): 7][T16176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2700'. [ 485.667500][T16177] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2699'. [ 485.719664][T16176] geneve2: entered promiscuous mode [ 485.732866][T16176] geneve2: entered allmulticast mode [ 485.780219][T16186] netlink: 'syz.2.2703': attribute type 8 has an invalid length. [ 485.789259][T16186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2703'. [ 485.801894][T16188] netlink: 'syz.2.2703': attribute type 8 has an invalid length. [ 485.850021][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2704'. [ 485.883954][T16194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2705'. [ 486.017641][T16184] syzkaller1: entered promiscuous mode [ 486.033388][T16184] syzkaller1: entered allmulticast mode [ 486.057186][T16203] xt_hashlimit: max too large, truncated to 1048576 [ 486.346433][T16214] bond0: Caught tx_queue_len zero misconfig [ 486.575258][T16230] netlink: 'syz.0.2717': attribute type 10 has an invalid length. [ 486.609555][T16230] geneve4: entered promiscuous mode [ 486.623213][T16230] geneve4: entered allmulticast mode [ 486.833709][T16238] xt_limit: Overflow, try lower: 271964/0 [ 486.887559][T16245] syzkaller0: entered promiscuous mode [ 486.907007][T16245] syzkaller0: entered allmulticast mode [ 486.998406][T16243] tipc: Enabled bearer , priority 0 [ 487.041330][T16241] tipc: Resetting bearer [ 487.157469][T16241] tipc: Disabling bearer [ 487.276956][T16272] netlink: 'syz.1.2730': attribute type 10 has an invalid length. [ 487.310205][T16272] geneve3: entered promiscuous mode [ 487.325563][T16272] geneve3: entered allmulticast mode [ 488.354990][T16327] netlink: 'syz.2.2745': attribute type 13 has an invalid length. [ 488.379778][T16327] netlink: 'syz.2.2745': attribute type 58 has an invalid length. [ 488.398515][T16329] netlink: 'syz.3.2746': attribute type 10 has an invalid length. [ 488.499895][T16329] geneve2: entered promiscuous mode [ 488.524500][T16329] geneve2: entered allmulticast mode [ 488.707866][T16342] netlink: 'syz.2.2751': attribute type 10 has an invalid length. [ 488.725375][T16342] veth1_macvtap: left promiscuous mode [ 488.983724][T16356] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 489.006611][T16359] bridge: RTM_NEWNEIGH with invalid ether address [ 489.022847][T16356] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 489.300000][T16376] netlink: 'syz.0.2761': attribute type 21 has an invalid length. [ 489.355469][T16379] ip6gre2: entered allmulticast mode [ 489.743144][T16403] 8021q: adding VLAN 0 to HW filter on device bond11 [ 489.902184][T16411] bond11: (slave ip6gretap1): making interface the new active one [ 489.930800][T16411] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 490.717533][T16435] syzkaller0: entered promiscuous mode [ 490.743125][T16435] syzkaller0: entered allmulticast mode [ 491.238762][T16465] vti0: entered allmulticast mode [ 491.606991][T16485] __nla_validate_parse: 16 callbacks suppressed [ 491.607012][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2787'. [ 491.649741][T16485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2787'. [ 491.697050][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2788'. [ 491.794987][T16490] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 491.982386][T16500] validate_nla: 5 callbacks suppressed [ 491.982403][T16500] netlink: 'syz.1.2791': attribute type 1 has an invalid length. [ 491.983472][T16505] netlink: 'syz.1.2791': attribute type 1 has an invalid length. [ 492.005654][T16504] netlink: 'syz.2.2792': attribute type 5 has an invalid length. [ 492.083071][T16500] 8021q: adding VLAN 0 to HW filter on device bond5 [ 492.106727][T16504] netlink: 'syz.2.2792': attribute type 2 has an invalid length. [ 492.123972][T16511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.577023][T16530] netlink: 'syz.1.2799': attribute type 1 has an invalid length. [ 492.652885][T16530] 8021q: adding VLAN 0 to HW filter on device bond6 [ 492.831891][T16537] netlink: 'syz.2.2801': attribute type 1 has an invalid length. [ 492.920981][T16539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2803'. [ 492.955379][T16539] SET target dimension over the limit! [ 493.178393][T16549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2806'. [ 493.216723][T16549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2806'. [ 493.248453][T16554] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 493.271065][T16557] ip6tnl0: Caught tx_queue_len zero misconfig [ 493.309740][T16549] syzkaller0: entered promiscuous mode [ 493.323775][T16549] syzkaller0: entered allmulticast mode [ 493.425645][ T30] audit: type=1804 audit(1782689081.035:8): pid=16562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2809" name="/newroot/580/cgroup.controllers" dev="tmpfs" ino=2978 res=1 errno=0 [ 493.493323][ T30] audit: type=1800 audit(1782689081.035:9): pid=16562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2809" name="cgroup.controllers" dev="tmpfs" ino=2978 res=0 errno=0 [ 494.486501][T16619] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 494.762004][T16647] netlink: 'syz.3.2831': attribute type 1 has an invalid length. [ 494.991765][T16659] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2832'. [ 495.133710][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2833'. [ 495.313548][T16670] geneve2: entered promiscuous mode [ 495.322692][T16670] geneve2: entered allmulticast mode [ 495.351552][ T6894] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 495.383893][ T6894] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 495.401293][ T6894] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 495.707876][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2843'. [ 495.776805][T16707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2842'. [ 495.823855][T16679] syzkaller1: entered promiscuous mode [ 495.833268][T16679] syzkaller1: entered allmulticast mode [ 495.949124][T16713] netlink: 'syz.4.2847': attribute type 11 has an invalid length. [ 496.315106][T16736] netlink: 'syz.3.2854': attribute type 9 has an invalid length. [ 496.327416][T16728] bond16: Unable to set peer notification delay as MII monitoring is disabled [ 496.343209][T16728] bond16 (unregistering): Released all slaves [ 496.407290][T16735] syzkaller0: entered promiscuous mode [ 496.427188][T16735] syzkaller0: entered allmulticast mode [ 497.068887][T16771] __nla_validate_parse: 1 callbacks suppressed [ 497.068906][T16771] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2867'. [ 497.415933][T16786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2871'. [ 497.473570][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2871'. [ 497.512726][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2871'. [ 497.737246][T16804] netlink: 'syz.3.2875': attribute type 1 has an invalid length. [ 497.777539][T16810] netlink: 'syz.0.2879': attribute type 1 has an invalid length. [ 497.841869][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2879'. [ 497.931748][T16802] bridge0: port 1(gretap0) entered blocking state [ 497.938497][T16802] bridge0: port 1(gretap0) entered listening state [ 497.952909][ T2176] syz_tun: tun_net_xmit 110 [ 498.018096][T16802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.048581][T16802] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.151633][T16802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 498.197744][T16802] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 498.246500][ T24] lo speed is unknown, defaulting to 1000 [ 498.249462][ T43] syz_tun: tun_net_xmit 110 [ 498.256105][ T24] syś2: Port: 1 Link ACTIVE [ 498.273325][ T7557] syz_tun: tun_net_xmit 110 [ 498.421370][T16804] 8021q: adding VLAN 0 to HW filter on device bond12 [ 498.550038][T16812] bond12: (slave veth11): Enslaving as an active interface with a down link [ 498.667299][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 498.688899][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 498.690049][T16822] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 498.705179][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 498.720450][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 498.729268][T16822] bond12: (slave batadv3): making interface the new active one [ 498.739339][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 498.772446][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 498.780085][T16822] batadv3: entered promiscuous mode [ 498.785980][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 498.794421][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 498.808512][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 498.818374][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 498.855658][T16822] bond12: (slave batadv3): Enslaving as an active interface with an up link [ 498.905658][T16837] netlink: 'syz.4.2883': attribute type 4 has an invalid length. [ 498.926319][T16840] netlink: 'syz.4.2883': attribute type 4 has an invalid length. [ 499.126751][T16846] netlink: 'syz.2.2884': attribute type 1 has an invalid length. [ 499.178199][T16846] netlink: 'syz.2.2884': attribute type 2 has an invalid length. [ 499.293172][ T5746] syz_tun: tun_net_xmit 90 [ 499.308198][ T5746] syz_tun: tun_net_xmit 110 [ 499.388317][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2887'. [ 499.448657][T16867] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 499.677851][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.691217][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.988693][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.040285][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.237532][ T36] bond0: (slave netdevsim1): Releasing backup interface [ 500.257565][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.274793][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.298404][T16830] lo speed is unknown, defaulting to 1000 [ 500.362117][T16830] tunl0 speed is unknown, defaulting to 1000 [ 500.444637][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.473766][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.567594][T16903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2901'. [ 500.618280][T16903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2901'. [ 500.629122][ T1115] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.667495][ T1115] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.708796][ T1115] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.745391][ T1115] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.771124][T16909] netlink: 'syz.2.2904': attribute type 2 has an invalid length. [ 500.803530][T16910] netlink: 'syz.3.2903': attribute type 11 has an invalid length. [ 500.893015][ T5633] Bluetooth: hci5: command tx timeout [ 501.020711][T16917] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 501.029733][T16917] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 501.221107][T16925] netlink: 'syz.2.2910': attribute type 1 has an invalid length. [ 501.271020][T16927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2910'. [ 501.298363][ T36] bridge_slave_1: left allmulticast mode [ 501.304927][T16931] xt_hashlimit: size too large, truncated to 1048576 [ 501.312832][ T36] bridge_slave_1: left promiscuous mode [ 501.326419][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.355337][ T36] bridge_slave_0: left allmulticast mode [ 501.371288][ T36] bridge_slave_0: left promiscuous mode [ 501.381610][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.438730][ T36] pim6reg: left allmulticast mode [ 501.455895][ T36] pimreg: left allmulticast mode [ 501.462904][ T36] C: left allmulticast mode [ 501.702467][T16939] netlink: 'syz.0.2914': attribute type 11 has an invalid length. [ 501.710911][T16939] netlink: 4320 bytes leftover after parsing attributes in process `syz.0.2914'. [ 501.735711][T16939] netlink: 'syz.0.2914': attribute type 1 has an invalid length. [ 502.166354][ T36] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 502.210699][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.223991][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.237908][ T36] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 502.255578][ T36] bond0 (unregistering): (slave bond3): Releasing backup interface [ 502.265986][ T36] bond0 (unregistering): Released all slaves [ 502.276605][ T36] bond1 (unregistering): Released all slaves [ 502.291013][ T36] bond2 (unregistering): Released all slaves [ 502.293388][ T6894] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 502.310371][ T36] bond3 (unregistering): Released all slaves [ 502.331258][ T36] bond4 (unregistering): Released all slaves [ 502.349582][ T36] bond5 (unregistering): Released all slaves [ 502.371451][ T36] bond6 (unregistering): Released all slaves [ 502.392732][T16830] lo speed is unknown, defaulting to 1000 [ 502.393884][T16925] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 502.407714][ T58] smc: removing ib device syz1 [ 502.533491][T16939] 8021q: adding VLAN 0 to HW filter on device bond7 [ 502.576359][T16955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2916'. [ 502.585653][T16955] tipc: Resetting bearer [ 502.607369][T16955] tipc: Disabling bearer [ 502.637306][T16957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2916'. [ 502.651399][ T58] smbdirect: ib_dev[syz1] removed [ 502.660017][T16957] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2916'. [ 502.703039][T16955] bond0: (slave bond_slave_1): Releasing backup interface [ 502.918692][T16941] bond7: (slave geneve4): making interface the new active one [ 502.930853][T16941] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 502.974287][ T5633] Bluetooth: hci5: command tx timeout [ 503.111414][T16967] netlink: 'syz.3.2920': attribute type 13 has an invalid length. [ 503.140893][T16967] netlink: 'syz.3.2920': attribute type 58 has an invalid length. [ 503.150145][T16967] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2920'. [ 503.230279][T16969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2921'. [ 503.427651][T16981] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2921'. [ 503.574915][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2924'. [ 503.619207][T16995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2925'. [ 503.663758][T16995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2925'. [ 503.734772][T16988] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2924'. [ 503.909835][T17005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.455562][T17037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.941409][T17040] bond8: option packets_per_slave: invalid value (18446744073709551615) [ 504.979675][T17040] bond8: option packets_per_slave: allowed values 0 - 65535 [ 505.053547][ T5633] Bluetooth: hci5: command tx timeout [ 505.116365][T17040] bond8 (unregistering): Released all slaves [ 505.585861][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 506.176222][T17094] tipc: Enabled bearer , priority 24 [ 506.279677][ T36] tipc: Left network mode [ 507.045688][T16830] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.072955][T16830] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.102124][T16830] bridge_slave_0: entered allmulticast mode [ 507.136759][ T5633] Bluetooth: hci5: command tx timeout [ 507.143725][T16830] bridge_slave_0: entered promiscuous mode [ 507.195802][T16830] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.208906][T16830] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.219435][T16830] bridge_slave_1: entered allmulticast mode [ 507.228256][T16830] bridge_slave_1: entered promiscuous mode [ 507.307727][T17156] netlink: 'syz.3.2957': attribute type 4 has an invalid length. [ 507.333938][T17157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.356571][T17156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.573383][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 507.640929][T16830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.670284][T16830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.690720][T17176] xt_hashlimit: size too large, truncated to 1048576 [ 507.744897][T17184] __nla_validate_parse: 4 callbacks suppressed [ 507.744917][T17184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2962'. [ 507.805892][ T36] hsr_slave_0: left promiscuous mode [ 507.817476][ T36] hsr_slave_1: left promiscuous mode [ 507.849859][ T36] veth0_macvtap: left promiscuous mode [ 507.867738][ T36] veth1_vlan: left promiscuous mode [ 507.877049][ T36] veth0_vlan: left promiscuous mode [ 508.252345][ T36] team0 (unregistering): Port device team_slave_1 removed [ 508.386526][T16830] team0: Port device team_slave_0 added [ 508.402102][T17189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.426333][T16830] team0: Port device team_slave_1 added [ 508.501356][T16830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.522507][T16830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.588882][T16830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.629484][T16830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.636613][T16830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.664704][T16830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.805067][T16830] hsr_slave_0: entered promiscuous mode [ 508.811540][T16830] hsr_slave_1: entered promiscuous mode [ 509.025876][ T36] IPVS: stop unused estimator thread 0... [ 509.953365][ T1162] batadv3: left promiscuous mode [ 510.556799][T17169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.649976][T16830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 510.721964][T16830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 510.762096][T16830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 510.763820][T17214] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2974'. [ 510.801509][T16830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 510.825373][T16830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 511.042943][T16830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 511.093875][T16830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 511.145873][T16830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 511.210845][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2977'. [ 511.403234][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2979'. [ 511.454822][T17254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2979'. [ 511.498749][T17256] 8021q: adding VLAN 0 to HW filter on device bond16 [ 511.566070][T17263] tipc: Enabled bearer , priority 0 [ 511.810783][T17263] syzkaller0: entered promiscuous mode [ 511.817039][T17263] syzkaller0: entered allmulticast mode [ 511.823836][T17263] tipc: Resetting bearer [ 511.847068][T16830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.897868][T17284] tipc: Enabling of bearer rejected, failed to enable media [ 511.911376][T17261] tipc: Resetting bearer [ 512.977594][ C1] bridge0: port 1(gretap0) entered learning state [ 514.319363][T17261] tipc: Disabling bearer [ 514.383606][T16830] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.426206][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.433434][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.468855][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.476066][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.872191][T17323] syzkaller0: entered promiscuous mode [ 514.890949][T17323] syzkaller0: entered allmulticast mode [ 515.223105][T17352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.279044][T17349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2996'. [ 515.511523][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3003'. [ 515.766824][T17384] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 515.791183][T17384] syzkaller0: entered promiscuous mode [ 515.807864][T17384] syzkaller0: entered allmulticast mode [ 515.844453][T17391] syzkaller0: entered promiscuous mode [ 515.865123][T17391] syzkaller0: entered allmulticast mode [ 515.896107][T17384] syzkaller0: left allmulticast mode [ 516.078691][T16830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.132937][T17400] syz.2.3009 (17400) used obsolete PPPIOCDETACH ioctl [ 516.399378][T17418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3011'. [ 516.496679][T16830] veth0_vlan: entered promiscuous mode [ 516.560854][T16830] veth1_vlan: entered promiscuous mode [ 516.656239][T17432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3014'. [ 516.788543][T16830] veth0_macvtap: entered promiscuous mode [ 516.825447][T16830] veth1_macvtap: entered promiscuous mode [ 516.959797][T16830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.985667][T17442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3017'. [ 516.993761][T17450] tun0: tun_chr_ioctl cmd 1074025675 [ 517.002702][T17450] tun0: persist disabled [ 517.075376][T16830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.116699][T17442] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3017'. [ 517.160556][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.184207][T17450] lo speed is unknown, defaulting to 1000 [ 517.190530][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.240546][T17461] xt_bpf: check failed: parse error [ 517.263946][T17450] lo speed is unknown, defaulting to 1000 [ 517.263968][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.311148][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.396873][T17461] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 517.935794][T17478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3024'. [ 517.977950][T17499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3026'. [ 518.146718][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.160296][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.246557][T17508] netlink: 'syz.4.3028': attribute type 3 has an invalid length. [ 518.258619][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.285787][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.357834][T17517] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3030'. [ 518.477179][T17515] ip6t_srh: unknown srh invflags 4000 [ 518.534756][T17515] syzkaller1: entered promiscuous mode [ 518.564962][T17515] syzkaller1: entered allmulticast mode [ 519.643733][T17566] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3036'. [ 519.822345][T17558] batadv2: entered allmulticast mode [ 519.869049][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 519.883698][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 519.893263][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 519.904075][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 519.915332][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 522.030545][ T5626] Bluetooth: hci1: command tx timeout [ 522.594835][ T5623] syz_tun (unregistering): left promiscuous mode [ 522.619698][T17589] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 522.718802][T17597] netlink: 'syz.1.3040': attribute type 1 has an invalid length. [ 522.756765][T17597] netlink: 756 bytes leftover after parsing attributes in process `syz.1.3040'. [ 522.837509][T17608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.131812][T17621] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3045'. [ 523.189740][T17621] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3045'. [ 523.230788][T17575] lo speed is unknown, defaulting to 1000 [ 523.247605][T17575] lo speed is unknown, defaulting to 1000 [ 523.567582][T17640] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3049'. [ 523.580819][T17642] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3050'. [ 523.925135][T17659] netlink: 'syz.4.3053': attribute type 4 has an invalid length. [ 524.095336][ T5626] Bluetooth: hci1: command tx timeout [ 524.122301][T17575] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.129864][T17575] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.137365][T17575] bridge_slave_0: entered allmulticast mode [ 524.145624][T17575] bridge_slave_0: entered promiscuous mode [ 524.189055][T17575] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.211831][T17575] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.223997][T17575] bridge_slave_1: entered allmulticast mode [ 524.231979][T17575] bridge_slave_1: entered promiscuous mode [ 524.283940][T17662] netlink: 420 bytes leftover after parsing attributes in process `syz.0.3054'. [ 524.312363][T17682] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 524.322231][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3054'. [ 524.345667][T17669] syzkaller0: entered promiscuous mode [ 524.359106][T17662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3054'. [ 524.382934][T17669] syzkaller0: entered allmulticast mode [ 524.405263][T17575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.470207][T17688] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 524.506768][T17575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.677392][T17575] team0: Port device team_slave_0 added [ 524.710817][T17575] team0: Port device team_slave_1 added [ 524.828646][T17575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.848861][T17575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.913797][T17575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.966329][T17575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.984013][T17575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.057511][T17575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.209882][T17575] hsr_slave_0: entered promiscuous mode [ 525.217184][T17575] hsr_slave_1: entered promiscuous mode [ 525.223793][T17575] debugfs: 'hsr0' already exists in 'hsr' [ 525.229704][T17575] Cannot create hsr debugfs directory [ 525.470446][T17738] sctp: [Deprecated]: syz.4.3065 (pid 17738) Use of int in maxseg socket option. [ 525.470446][T17738] Use struct sctp_assoc_value instead [ 525.491432][T17737] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3066'. [ 525.517391][T17740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3068'. [ 525.685921][T17751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.857602][T17757] netlink: 'syz.0.3072': attribute type 39 has an invalid length. [ 526.099953][T17757] hsr_slave_0: left promiscuous mode [ 526.150815][T17757] hsr_slave_1: left promiscuous mode [ 526.173779][ T5626] Bluetooth: hci1: command tx timeout [ 526.242966][T17765] bridge_slave_0: invalid flags given to default FDB implementation [ 526.358523][T17775] netlink: 'syz.4.3074': attribute type 63 has an invalid length. [ 526.371031][T17777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.405495][T17575] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 526.425193][T17782] netlink: 'syz.4.3074': attribute type 63 has an invalid length. [ 526.609462][T17575] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 526.741463][T17575] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 527.488772][T17575] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 527.557757][T17575] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 527.572506][T17834] netlink: 'syz.0.3089': attribute type 3 has an invalid length. [ 527.592287][T17575] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 527.634501][T17575] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 527.659943][T17575] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 527.724745][T17575] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 527.758807][T17575] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 527.799773][T17575] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 528.003202][T17839] syzkaller0: entered promiscuous mode [ 528.037226][T17839] syzkaller0: entered allmulticast mode [ 528.058978][T17860] __nla_validate_parse: 7 callbacks suppressed [ 528.058999][T17860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3093'. [ 528.168116][T17860] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 528.252980][ T5626] Bluetooth: hci1: command tx timeout [ 528.333101][ C1] bridge0: port 1(gretap0) entered forwarding state [ 528.339812][ C1] bridge0: topology change detected, propagating [ 528.548747][T17575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.660451][T17575] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.721465][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.728724][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.828313][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.835547][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.939226][T17890] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3099'. [ 529.034130][T17893] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 529.205548][T17900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3102'. [ 529.261290][T17900] openvswitch: netlink: EtherType 0 is less than min 600 [ 529.288147][T17910] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3102'. [ 529.495974][T17930] netlink: 'syz.4.3107': attribute type 8 has an invalid length. [ 529.512983][T17930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3107'. [ 530.055917][T17927] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 530.995101][T17988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3116'. [ 534.357150][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3127'. [ 534.369216][T17575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.527794][T17575] veth0_vlan: entered promiscuous mode [ 534.564936][T17575] veth1_vlan: entered promiscuous mode [ 534.698742][T17575] veth0_macvtap: entered promiscuous mode [ 534.741258][T17575] veth1_macvtap: entered promiscuous mode [ 534.797197][T18070] netlink: 'syz.4.3135': attribute type 4 has an invalid length. [ 534.931064][T18068] syzkaller0: entered promiscuous mode [ 534.940736][T18068] syzkaller0: entered allmulticast mode [ 534.981232][T17575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.090743][T18090] netlink: 'syz.1.3139': attribute type 7 has an invalid length. [ 535.109528][T18090] netlink: 'syz.1.3139': attribute type 8 has an invalid length. [ 535.230486][T18095] IPVS: set_ctl: invalid protocol: 59 172.20.20.38:20000 [ 537.595523][T18090] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3139'. [ 537.605695][T18094] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 537.625015][T17575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.723620][ T6882] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.745912][ T6882] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.771287][T18111] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 537.804350][T18111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.825373][ T6882] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.860644][ T6882] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.941470][T18128] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3148'. [ 538.038878][T18134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3149'. [ 538.156858][ T6882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.189661][ T6882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.391966][ T6888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.419995][ T6888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.539102][T18170] netlink: 'syz.1.3157': attribute type 9 has an invalid length. [ 538.694160][T18179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3034'. [ 538.723450][T18179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3034'. [ 538.874224][T18186] xt_hashlimit: overflow, rate too high: 0 [ 538.899902][ T6888] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.939128][T18184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3161'. [ 538.978933][ T6888] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.015419][ T6888] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.071244][ T6888] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.294346][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 539.309999][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 539.319216][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 539.336895][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 539.344914][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 539.470718][T18219] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3169'. [ 539.801518][ T5624] syz_tun (unregistering): left allmulticast mode [ 539.829081][T18234] netlink: 39 bytes leftover after parsing attributes in process `syz.0.3173'. [ 539.876482][T18237] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3174'. [ 539.982335][T18249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3176'. [ 540.158704][T18255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3177'. [ 540.424189][T18209] lo speed is unknown, defaulting to 1000 [ 540.447820][T18209] lo speed is unknown, defaulting to 1000 [ 540.538829][T18280] netlink: 'syz.1.3185': attribute type 4 has an invalid length. [ 540.554459][T18280] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3185'. [ 540.706372][T18293] vlan2: entered promiscuous mode [ 540.711503][T18293] hsr0: entered promiscuous mode [ 540.717172][T18293] vlan2: entered allmulticast mode [ 540.722358][T18293] hsr0: entered allmulticast mode [ 540.728020][T18293] hsr_slave_0: entered allmulticast mode [ 540.738391][T18293] hsr_slave_1: entered allmulticast mode [ 540.827226][T18293] xt_hashlimit: size too large, truncated to 1048576 [ 541.204145][T18209] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.224406][T18209] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.279175][T18209] bridge_slave_0: entered allmulticast mode [ 541.316985][T18209] bridge_slave_0: entered promiscuous mode [ 541.351900][T18209] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.379060][T18209] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.401011][T18209] bridge_slave_1: entered allmulticast mode [ 541.416963][T18333] netlink: 'syz.0.3192': attribute type 1 has an invalid length. [ 541.453277][ T5633] Bluetooth: hci2: command tx timeout [ 541.461533][T18209] bridge_slave_1: entered promiscuous mode [ 541.567876][T18337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3193'. [ 541.719661][T18343] netlink: 'syz.2.3195': attribute type 1 has an invalid length. [ 541.722799][T18339] bridge1: entered promiscuous mode [ 541.766089][T18345] netlink: 'syz.3.3197': attribute type 1 has an invalid length. [ 541.780760][T18339] bridge1: entered allmulticast mode [ 541.799722][T18209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.834538][T18343] 8021q: adding VLAN 0 to HW filter on device bond8 [ 541.852951][ T13] wlan1: Trigger new scan to find an IBSS to join [ 541.863508][T18209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.949470][T18343] bond8: (slave geneve2): making interface the new active one [ 541.961833][T18343] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 541.975267][T18209] team0: Port device team_slave_0 added [ 541.981440][T18352] syzkaller0: entered promiscuous mode [ 541.992968][T18352] syzkaller0: entered allmulticast mode [ 542.033837][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3196'. [ 542.044386][T18209] team0: Port device team_slave_1 added [ 542.062960][T18348] netlink: 'syz.0.3196': attribute type 10 has an invalid length. [ 542.085765][T18348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3196'. [ 542.146742][T18209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.156134][T18364] netlink: 'syz.3.3201': attribute type 1 has an invalid length. [ 542.162692][T18209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.191123][T18209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.206102][T18209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.213472][T18209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.262398][T18209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.441373][T18209] hsr_slave_0: entered promiscuous mode [ 542.456144][T18209] hsr_slave_1: entered promiscuous mode [ 542.472889][T18209] debugfs: 'hsr0' already exists in 'hsr' [ 542.479077][T18209] Cannot create hsr debugfs directory [ 542.521969][T18373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.535600][T18373] bond0: (slave bond1): Enslaving as an active interface with an up link [ 543.073737][T18396] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3213'. [ 543.084523][T18393] veth5: entered allmulticast mode [ 543.106160][T18398] netlink: 'syz.0.3215': attribute type 4 has an invalid length. [ 543.181475][T18209] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.228155][T18209] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.400522][T18405] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 543.416391][T18405] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 543.532875][ T5633] Bluetooth: hci2: command tx timeout [ 543.555265][T18209] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.565726][T18209] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.639070][T18209] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.650524][T18209] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.788091][T18209] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.806540][T18209] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.022002][T18440] netlink: 'syz.0.3227': attribute type 10 has an invalid length. [ 544.068581][T18440] geneve6: entered promiscuous mode [ 544.079683][T18440] geneve6: entered allmulticast mode [ 544.226139][T18443] lo speed is unknown, defaulting to 1000 [ 544.394169][T18443] lo speed is unknown, defaulting to 1000 [ 544.520625][T18462] __nla_validate_parse: 6 callbacks suppressed [ 544.520643][T18462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3233'. [ 544.747032][T18209] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 544.765956][T18209] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 544.859693][T18209] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 544.873680][T18209] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.884837][T18474] syzkaller0: entered promiscuous mode [ 544.891207][T18474] syzkaller0: entered allmulticast mode [ 544.899773][T18209] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 544.941897][T18209] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.950187][T18209] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 544.981469][T18209] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 545.074599][T18478] syzkaller0: entered promiscuous mode [ 545.081523][T18478] syzkaller0: entered allmulticast mode [ 545.265294][T18209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.279470][T18492] netlink: 'syz.3.3238': attribute type 1 has an invalid length. [ 545.318016][T18492] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3238'. [ 545.333739][T18492] netlink: 'syz.3.3238': attribute type 1 has an invalid length. [ 545.344087][T18461] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 545.354580][T18209] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.392847][ T6882] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.400060][ T6882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.468925][ T5633] Bluetooth: hci5: link tx timeout [ 545.482527][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 545.499341][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.506561][ T6888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.544311][ T5633] Bluetooth: hci5: link tx timeout [ 545.551067][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 545.615524][ T5633] Bluetooth: hci2: command tx timeout [ 545.622097][T18209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.740271][T18513] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3244'. [ 545.884962][T18524] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 546.001073][T18528] syzkaller1: entered promiscuous mode [ 546.015563][T18528] syzkaller1: entered allmulticast mode [ 546.111460][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3251'. [ 546.176030][T18542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3252'. [ 546.190133][T18542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3252'. [ 546.298352][T18542] vlan0: entered promiscuous mode [ 546.510947][T18556] netlink: 'syz.1.3255': attribute type 7 has an invalid length. [ 546.541215][ T6888] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.561804][T18556] netlink: 'syz.1.3255': attribute type 7 has an invalid length. [ 546.570112][ T6888] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.599840][ T6888] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.622037][ T5633] Bluetooth: hci5: link tx timeout [ 546.629001][ T5633] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 546.685502][T18568] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3259'. [ 546.719524][ T6888] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.878356][T18209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.981141][T18578] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 547.010408][T18578] bond2 (unregistering): Released all slaves [ 547.029914][T18585] tipc: Started in network mode [ 547.043158][T18585] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 547.058430][T18585] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:003c [ 547.099056][T18585] tipc: Enabled bearer , priority 10 [ 547.250001][T18599] syz_tun: entered allmulticast mode [ 547.269773][T18602] pim6reg: entered allmulticast mode [ 547.440283][T18209] veth0_vlan: entered promiscuous mode [ 547.477669][T18209] veth1_vlan: entered promiscuous mode [ 547.548061][ T5633] Bluetooth: hci5: command 0x0406 tx timeout [ 547.612042][T18209] veth0_macvtap: entered promiscuous mode [ 547.641447][T18209] veth1_macvtap: entered promiscuous mode [ 547.693033][ T5633] Bluetooth: hci2: command 0x0419 tx timeout [ 547.731313][T18209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.778560][T18209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.820017][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.842755][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.891022][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.909051][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.089902][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.109717][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.206814][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.222705][ T24] tipc: Node number set to 1 [ 548.234689][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.734298][T18666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3284'. [ 548.922346][T18675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3287'. [ 549.047584][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 549.067607][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 549.081694][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 549.107346][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 549.119914][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 549.288946][T18690] netlink: 'syz.1.3290': attribute type 10 has an invalid length. [ 549.306761][T18688] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3287'. [ 549.501204][T18690] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.535880][T18690] bond0: (slave team0): Enslaving as an active interface with an up link [ 549.549498][T18697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3292'. [ 549.551604][T18696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3292'. [ 549.570815][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3291'. [ 549.580958][T18698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3291'. [ 549.598403][T18698] netlink: 'syz.4.3291': attribute type 14 has an invalid length. [ 549.662781][T18698] netlink: 'syz.4.3291': attribute type 13 has an invalid length. [ 549.773953][ T5633] Bluetooth: hci2: command 0x0419 tx timeout [ 549.990858][T18708] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.998758][T18708] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.327965][T18722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3297'. [ 550.340255][T18722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3297'. [ 550.404446][T18724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.451044][T18723] h: entered promiscuous mode [ 550.468755][T18727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.546458][T18723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.569529][T18724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.628986][T18723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.691099][T18724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.732688][T18723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.826980][T18678] lo speed is unknown, defaulting to 1000 [ 550.848428][T18720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.868876][T18678] lo speed is unknown, defaulting to 1000 [ 551.213234][ T5633] Bluetooth: hci3: command tx timeout [ 552.036156][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3309'. [ 552.067170][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3309'. [ 552.174571][T18796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.217636][T18801] syzkaller1: entered promiscuous mode [ 552.243110][T18801] syzkaller1: entered allmulticast mode [ 552.275045][T18803] netlink: 'syz.3.3312': attribute type 1 has an invalid length. [ 552.312061][T18678] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.326286][T18801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3312'. [ 552.345183][T18678] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.366721][T18678] bridge_slave_0: entered allmulticast mode [ 552.399848][T18678] bridge_slave_0: entered promiscuous mode [ 552.494485][T18803] 8021q: adding VLAN 0 to HW filter on device bond2 [ 552.512408][T18678] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.530856][T18678] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.550160][T18678] bridge_slave_1: entered allmulticast mode [ 552.564717][T18678] bridge_slave_1: entered promiscuous mode [ 552.575068][T18817] : renamed from dummy0 (while UP) [ 552.750454][T18678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.789672][T18678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.303100][ T5633] Bluetooth: hci3: command tx timeout [ 553.364134][T18678] team0: Port device team_slave_0 added [ 553.404326][T18678] team0: Port device team_slave_1 added [ 553.570430][T18678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.605335][T18678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.662007][T18678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.680860][T18678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.690287][T18678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 553.743436][T18678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.913986][T18678] hsr_slave_0: entered promiscuous mode [ 553.928130][T18678] hsr_slave_1: entered promiscuous mode [ 553.944389][T18678] debugfs: 'hsr0' already exists in 'hsr' [ 553.954081][T18678] Cannot create hsr debugfs directory [ 554.088503][T18864] netlink: 'syz.0.3326': attribute type 1 has an invalid length. [ 554.366788][T18871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3328'. [ 554.586011][T18678] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.600147][T18678] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.791924][T18893] netlink: 'syz.0.3335': attribute type 1 has an invalid length. [ 554.842047][T18678] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.853441][T18678] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.866330][T18895] netlink: 'syz.0.3335': attribute type 83 has an invalid length. [ 554.923955][T18893] 8021q: adding VLAN 0 to HW filter on device bond8 [ 554.999905][T18902] netlink: 'syz.0.3338': attribute type 2 has an invalid length. [ 555.126671][T18906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'. [ 555.148022][T18906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'. [ 555.375066][ T5633] Bluetooth: hci3: command tx timeout [ 555.539261][T18896] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 555.740204][T18678] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.793945][T18678] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.000732][T18678] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.016176][T18944] netlink: 'syz.0.3346': attribute type 16 has an invalid length. [ 556.027818][T18944] netlink: 'syz.0.3346': attribute type 17 has an invalid length. [ 556.036231][T18678] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.106213][T18940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.140037][T18944] 0Ŗī{X¹¦: left allmulticast mode [ 556.151305][T18944] erspan0: entered promiscuous mode [ 556.187927][T18944] bond0: left promiscuous mode [ 556.194384][T18944] bond_slave_0: left promiscuous mode [ 556.200023][T18944] bond_slave_1: left promiscuous mode [ 556.207728][T18944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.218022][T18944] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.237974][T18944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.308015][T18944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.321649][T18944] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 556.350729][T18939] lo speed is unknown, defaulting to 1000 [ 556.369510][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.376752][ T1115] bridge0: port 1(bridge_slave_0) entered listening state [ 556.391444][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.398674][ T1115] bridge0: port 2(bridge_slave_1) entered listening state [ 556.438902][T18939] lo speed is unknown, defaulting to 1000 [ 556.606921][T18907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 556.685102][T18936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 556.719140][T18950] netlink: 'syz.3.3347': attribute type 19 has an invalid length. [ 557.009334][T18678] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 557.061242][T18678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 557.085329][T18678] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 557.114246][T18967] netlink: 'syz.1.3351': attribute type 1 has an invalid length. [ 557.126303][T18678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 557.141089][ T58] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 557.168062][T18968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3351'. [ 557.206271][ T2176] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 557.251641][T18967] bond1: entered promiscuous mode [ 557.257883][T18967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 557.306713][T18678] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 557.328161][T18678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 557.348530][T18968] bond1: entered allmulticast mode [ 557.395969][T18980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3355'. [ 557.426766][T18967] bond1: (slave bridge2): making interface the new active one [ 557.452804][ T5633] Bluetooth: hci3: command tx timeout [ 557.460631][T18967] bridge2: entered promiscuous mode [ 557.473449][T18967] bridge2: entered allmulticast mode [ 557.488326][T18967] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 557.503863][T18678] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 557.528231][T18678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 557.666352][T18988] syzkaller1: entered promiscuous mode [ 557.674717][T18988] syzkaller1: entered allmulticast mode [ 558.174310][ T58] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 558.223069][ T58] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 558.284204][T18907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 558.344216][T18678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.517134][T18678] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.547175][T19029] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.579637][T19029] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 558.626402][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.633652][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.683103][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.690424][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.517807][T19067] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3378'. [ 559.546146][T19067] openvswitch: netlink: Message has 512 unknown bytes. [ 559.750784][T19079] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3380'. [ 559.799598][T19081] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3381'. [ 560.136697][T19098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.185100][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3384'. [ 560.534662][T19111] bond9: option fail_over_mac: invalid value (66) [ 560.548413][T19111] bond9 (unregistering): Released all slaves [ 560.687131][T18678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.751568][T19123] xt_HMARK: spi-set and port-set can't be combined [ 560.900365][T18678] veth0_vlan: entered promiscuous mode [ 560.941924][T18678] veth1_vlan: entered promiscuous mode [ 561.018713][T18678] veth0_macvtap: entered promiscuous mode [ 561.056294][T18678] veth1_macvtap: entered promiscuous mode [ 561.088522][T18678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.111117][T18678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.138047][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.160156][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.212787][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.252259][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.740416][T19151] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.344332][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 563.571596][T19116] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 563.845568][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.882944][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.894929][T19180] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3404'. [ 563.956797][T19180] netlink: 'syz.4.3404': attribute type 7 has an invalid length. [ 563.975235][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.994086][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.002463][T19183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3404'. [ 564.033099][T19180] netlink: 'syz.4.3404': attribute type 8 has an invalid length. [ 564.050627][T19183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3404'. [ 564.080355][T19180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3404'. [ 564.082397][T19190] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3406'. [ 564.107973][T19183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3404'. [ 564.196225][T19180] ip6gretap0: entered promiscuous mode [ 564.216907][T19180] syz_tun: entered promiscuous mode [ 564.232342][T19180] erspan0: entered promiscuous mode [ 564.261642][T19180] debugfs: 'hsr1' already exists in 'hsr' [ 564.277371][T19180] Cannot create hsr debugfs directory [ 564.332113][T19190] vlan4: entered promiscuous mode [ 564.358222][T19190] bridge0: entered promiscuous mode [ 564.564353][T19203] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3410'. [ 564.625900][T19203] netlink: 'syz.2.3410': attribute type 11 has an invalid length. [ 564.662093][T19203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3410'. [ 564.771488][ T1162] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.792814][T19203] netlink: 'syz.2.3410': attribute type 11 has an invalid length. [ 564.824667][ T1162] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.853545][T19203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3410'. [ 564.881953][T19212] netlink: 'syz.3.3413': attribute type 7 has an invalid length. [ 564.910483][T19212] netlink: 'syz.3.3413': attribute type 8 has an invalid length. [ 564.926680][ T1162] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.954121][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 564.954173][ T1162] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 564.987790][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 564.999314][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 565.013666][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 565.025468][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 565.261329][T19221] xt_TCPMSS: Only works on TCP SYN packets [ 565.715425][ T43] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.726940][ T43] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.879120][T19238] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.3418'. [ 565.888035][T19248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3421'. [ 565.944665][ T43] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.979389][ T43] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.137540][ T43] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.177899][ T43] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.270689][ T5626] Bluetooth: hci3: command tx timeout [ 566.294242][T19263] Cannot find add_set index 0 as target [ 566.332174][ T43] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.351315][ T43] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.469676][T19267] syzkaller0: entered promiscuous mode [ 566.491799][T19267] syzkaller0: entered allmulticast mode [ 566.500839][T19213] lo speed is unknown, defaulting to 1000 [ 566.524276][T19213] lo speed is unknown, defaulting to 1000 [ 566.866858][T19274] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3429'. [ 567.064962][ T43] bridge_slave_1: left promiscuous mode [ 567.086643][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.119256][ T43] bridge_slave_0: left allmulticast mode [ 567.125910][ T43] bridge_slave_0: left promiscuous mode [ 567.131953][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.146226][ T5626] Bluetooth: hci0: command tx timeout [ 567.160270][ T43] pim6reg: left allmulticast mode [ 567.538324][ T43] bond7 (unregistering): (slave geneve4): Releasing active interface [ 567.563941][ T43] bond4 (unregistering): (slave geneve3): Releasing active interface [ 567.675744][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.685991][ T43] bond_slave_0: left allmulticast mode [ 567.700343][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.715521][ T43] bond_slave_1: left allmulticast mode [ 567.724634][ T43] bond0 (unregistering): Released all slaves [ 567.739041][ T43] bond1 (unregistering): Released all slaves [ 567.757954][ T43] bond2 (unregistering): Released all slaves [ 567.781065][ T43] bond3 (unregistering): Released all slaves [ 567.800390][ T43] bond4 (unregistering): Released all slaves [ 567.829716][ T43] bond5 (unregistering): Released all slaves [ 567.848970][ T43] bond6 (unregistering): Released all slaves [ 567.878712][ T43] bond7 (unregistering): Released all slaves [ 567.897961][ T43] bond8 (unregistering): Released all slaves [ 568.069459][ T43] tipc: Left network mode [ 568.153193][ T43] IPVS: stopping backup sync thread 17893 ... [ 568.290159][T19213] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.304846][T19213] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.315730][T19213] bridge_slave_0: entered allmulticast mode [ 568.325119][T19213] bridge_slave_0: entered promiscuous mode [ 568.335039][T19213] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.342402][T19213] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.350552][T19213] bridge_slave_1: entered allmulticast mode [ 568.359459][T19213] bridge_slave_1: entered promiscuous mode [ 568.431009][T19213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.451111][T19213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.508899][T19213] team0: Port device team_slave_0 added [ 568.519814][T19213] team0: Port device team_slave_1 added [ 568.581240][T19213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.589244][T19213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.617225][T19213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.619507][T19235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 568.631213][T19213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.646439][T19213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.676935][T19213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.749986][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.778364][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.896260][T19292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3432'. [ 569.222999][ T5626] Bluetooth: hci0: command tx timeout [ 569.555994][ T43] team0 (unregistering): Port device team_slave_1 removed [ 569.575930][ T43] team0 (unregistering): Port device team_slave_0 removed [ 570.022306][T19213] hsr_slave_0: entered promiscuous mode [ 570.041786][T19213] hsr_slave_1: entered promiscuous mode [ 570.055590][T19213] debugfs: 'hsr0' already exists in 'hsr' [ 570.071703][T19213] Cannot create hsr debugfs directory [ 570.161093][T19322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3437'. [ 570.214221][T19322] macsec1: entered promiscuous mode [ 570.219565][T19322] bridge0: entered promiscuous mode [ 570.225774][T19322] macsec1: entered allmulticast mode [ 570.231188][T19322] bridge0: entered allmulticast mode [ 570.260100][T19322] bridge0: port 3(macsec1) entered blocking state [ 570.273286][T19322] bridge0: port 3(macsec1) entered disabled state [ 570.300383][T19322] bridge0: left allmulticast mode [ 570.306009][T19322] bridge0: left promiscuous mode [ 570.348987][T19325] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 570.421882][ T43] IPVS: stop unused estimator thread 0... [ 571.296490][ T5626] Bluetooth: hci0: command tx timeout [ 571.872379][T19296] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 571.913233][T19213] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 572.001042][T19213] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 572.036805][T19213] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 572.087067][T19213] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 572.107840][T19213] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 572.146194][T19213] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 572.169410][T19213] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 572.326341][T19213] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 572.749587][T19213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.910813][T19410] netlink: 'syz.1.3455': attribute type 5 has an invalid length. [ 572.958457][T19213] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.005265][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.013411][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.132563][ T6888] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.139776][ T6888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.260693][T19418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3458'. [ 573.331951][T19423] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 573.373870][ T5626] Bluetooth: hci0: command tx timeout [ 573.379882][T19424] veth2: entered promiscuous mode [ 573.588001][T19434] netlink: 'syz.4.3464': attribute type 1 has an invalid length. [ 573.606463][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3464'. [ 573.632062][T19434] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 573.927094][T19450] netlink: 'syz.4.3468': attribute type 12 has an invalid length. [ 574.206610][ T30] audit: type=1800 audit(1782689161.805:10): pid=19463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3472" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=278 res=0 errno=0 [ 574.300577][T19467] netlink: 'syz.2.3473': attribute type 1 has an invalid length. [ 574.393429][T19213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.560512][T19472] netlink: 'syz.2.3475': attribute type 1 has an invalid length. [ 574.595612][T19474] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3477'. [ 574.681149][T19477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3475'. [ 574.705959][T19477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3475'. [ 574.731334][T19480] netlink: 'syz.1.3478': attribute type 11 has an invalid length. [ 574.771501][T19482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3476'. [ 574.771935][T19487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3476'. [ 574.801870][T19213] veth0_vlan: entered promiscuous mode [ 575.001330][T19213] veth1_vlan: entered promiscuous mode [ 575.051144][T19502] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 575.131147][T19502] syzkaller0: entered promiscuous mode [ 575.162275][T19502] syzkaller0: entered allmulticast mode [ 575.249391][T19213] veth0_macvtap: entered promiscuous mode [ 575.273995][T19213] veth1_macvtap: entered promiscuous mode [ 575.371506][T19518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3485'. [ 575.380915][T19514] wlan1: mtu less than device minimum [ 575.380971][T19518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3485'. [ 575.417993][T19213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.446301][T19213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.531328][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.544786][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.560453][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.577005][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.847119][T19530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3490'. [ 575.925373][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.962821][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.120438][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.151526][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.327981][T19539] syzkaller1: entered promiscuous mode [ 576.361467][T19539] syzkaller1: entered allmulticast mode [ 576.387525][T19539] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 577.032275][T19572] netlink: 'syz.3.3501': attribute type 32 has an invalid length. [ 577.689543][T19611] netlink: 'syz.4.3514': attribute type 13 has an invalid length. [ 577.761553][T19611] veth1_macvtap: left promiscuous mode [ 577.790906][T19611] macsec0: entered allmulticast mode [ 577.945575][T19624] netlink: 'syz.0.3517': attribute type 4 has an invalid length. [ 578.391355][T19638] bond1: entered promiscuous mode [ 578.434059][T19654] netlink: 'syz.1.3526': attribute type 4 has an invalid length. [ 578.443730][T19646] __nla_validate_parse: 3 callbacks suppressed [ 578.443764][T19646] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3523'. [ 578.604112][T19663] netlink: 'syz.4.3529': attribute type 1 has an invalid length. [ 578.629770][T19663] netlink: 'syz.4.3529': attribute type 1 has an invalid length. [ 578.710288][T19666] netlink: 'syz.0.3531': attribute type 24 has an invalid length. [ 579.414621][T19691] netlink: 13 bytes leftover after parsing attributes in process `syz.2.3537'. [ 579.417687][T19693] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3538'. [ 579.466729][T19692] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3538'. [ 580.051798][T19713] netlink: 'syz.0.3544': attribute type 19 has an invalid length. [ 580.108148][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.117923][T19713] netlink: 'syz.0.3544': attribute type 19 has an invalid length. [ 580.130024][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.160314][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.214742][ T1115] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.430549][T19733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3549'. [ 580.499051][T19728] tipc: Started in network mode [ 580.510419][T19728] tipc: Node identity c66e1225b082, cluster identity 4711 [ 580.518397][T19728] tipc: Enabled bearer , priority 0 [ 580.539798][T19728] syzkaller0: entered promiscuous mode [ 580.557134][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3551'. [ 580.577522][T19728] syzkaller0: entered allmulticast mode [ 580.587554][T19735] netlink: 'syz.4.3551': attribute type 10 has an invalid length. [ 580.613180][T19735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3551'. [ 580.622066][T19728] tipc: Resetting bearer [ 580.651475][T19727] tipc: Resetting bearer [ 580.688186][T19727] tipc: Disabling bearer [ 580.712670][T19735] geneve2: entered promiscuous mode [ 580.718107][T19735] geneve2: entered allmulticast mode [ 580.896920][T19737] syzkaller0: entered promiscuous mode [ 580.926636][T19737] syzkaller0: entered allmulticast mode [ 581.035122][T19750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3556'. [ 581.209060][T19758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3558'. [ 581.243355][T19758] netlink: 'syz.1.3558': attribute type 7 has an invalid length. [ 581.269050][T19758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3558'. [ 581.618062][T19767] sit2: entered promiscuous mode [ 581.644906][T19767] sit2: entered allmulticast mode [ 581.865406][T19781] netlink: 'syz.4.3566': attribute type 10 has an invalid length. [ 581.907344][T19781] geneve2: entered promiscuous mode [ 581.917609][T19781] geneve2: entered allmulticast mode [ 582.038125][T19791] mac80211_hwsim hwsim22 ’: renamed from wlan1 [ 582.183829][ T58] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 582.573582][T19807] ip6gre1: entered promiscuous mode [ 582.579801][T19807] ip6gre1: entered allmulticast mode [ 583.000649][T19814] team0 (unregistering): Port device team_slave_0 removed [ 583.038467][T19831] x_tables: duplicate entry at hook 3 [ 583.049853][T19814] team0 (unregistering): Port device team_slave_1 removed [ 583.586620][T19857] bridge_slave_0: left allmulticast mode [ 583.593104][T19857] bridge_slave_0: left promiscuous mode [ 583.610782][T19857] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.642039][T19857] bridge_slave_1: left allmulticast mode [ 583.657973][T19857] bridge_slave_1: left promiscuous mode [ 583.675443][T19857] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.698840][T19857] bond0: (slave bond_slave_0): Releasing backup interface [ 583.721187][T19857] bond0: (slave bond_slave_1): Releasing backup interface [ 583.746267][T19857] team0: Port device team_slave_0 removed [ 583.768726][T19857] team0: Port device team_slave_1 removed [ 583.780264][T19857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.790783][T19857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.803268][T19857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.810827][T19857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.890174][T19857] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 584.022331][T19866] syzkaller0: entered promiscuous mode [ 584.036639][T19866] syzkaller0: entered allmulticast mode [ 584.206334][T19878] __nla_validate_parse: 7 callbacks suppressed [ 584.206357][T19878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3590'. [ 584.595736][T19893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3595'. [ 584.686670][T19893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3595'. [ 584.832459][T19903] syzkaller0: entered promiscuous mode [ 584.890283][T19903] syzkaller0: entered allmulticast mode [ 585.261068][T19918] openvswitch: netlink: Message has 8 unknown bytes. [ 585.290125][T19918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.483969][T19925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3604'. [ 585.515850][T19925] netlink: 'syz.2.3604': attribute type 1 has an invalid length. [ 585.551096][T19925] netlink: 'syz.2.3604': attribute type 1 has an invalid length. [ 585.597878][T19925] netlink: 'syz.2.3604': attribute type 2 has an invalid length. [ 585.629715][T19925] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3604'. [ 585.891052][T19952] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3609'. [ 585.904267][ T1162] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.919517][ T1162] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.000777][ T1162] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.050553][ T1162] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.106997][ T1162] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.161685][ T1162] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.199419][T19953] syzkaller0: entered promiscuous mode [ 586.223528][T19953] syzkaller0: entered allmulticast mode [ 586.248956][ T1162] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.287338][ T1162] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.386866][T19981] xfrm1: entered allmulticast mode [ 586.408949][T19982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.444465][T19984] lo: entered promiscuous mode [ 586.457601][T19991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3620'. [ 586.460233][T19984] tunl0: entered promiscuous mode [ 586.480606][T19992] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 586.498201][T19984] gre0: entered promiscuous mode [ 586.540418][T19984] gretap0: entered promiscuous mode [ 586.566663][T19984] erspan0: entered promiscuous mode [ 586.591307][T19984] ip_vti0: entered promiscuous mode [ 586.615210][T19988] tipc: Enabling of bearer rejected, failed to enable media [ 586.690828][T20000] Bluetooth: MGMT ver 1.23 [ 586.771139][T20004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3626'. [ 586.808433][T20005] netlink: 'syz.4.3624': attribute type 4 has an invalid length. [ 586.887479][T20012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3628'. [ 587.007150][T20021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3629'. [ 587.273222][T20040] netlink: 'syz.0.3636': attribute type 10 has an invalid length. [ 587.281904][T20040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.290366][T20040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.300761][T20040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.308668][T20040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.756704][T20066] netlink: 'syz.4.3644': attribute type 1 has an invalid length. [ 587.802013][T20066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 587.915095][T20065] bridge1: port 1(veth3) entered blocking state [ 587.930997][T20065] bridge1: port 1(veth3) entered disabled state [ 587.938168][T20065] veth3: entered allmulticast mode [ 587.948985][T20065] veth3: entered promiscuous mode [ 587.971164][T20066] bond2: (slave geneve2): making interface the new active one [ 587.981830][T20066] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 587.994075][T20078] bridge1: port 2(veth0_to_bond) entered blocking state [ 588.008874][T20082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.024435][T20078] bridge1: port 2(veth0_to_bond) entered disabled state [ 588.036849][T20078] veth0_to_bond: entered allmulticast mode [ 588.045585][T20078] veth0_to_bond: entered promiscuous mode [ 588.054720][T20078] bridge1: port 2(veth0_to_bond) entered blocking state [ 588.061873][T20078] bridge1: port 2(veth0_to_bond) entered forwarding state [ 588.578207][T20124] netlink: 'syz.3.3664': attribute type 1 has an invalid length. [ 588.590542][T20122] tipc: Invalid UDP bearer configuration [ 588.590594][T20122] tipc: Enabling of bearer rejected, failed to enable media [ 588.743327][T20132] syzkaller0: entered promiscuous mode [ 588.751440][T20132] syzkaller0: entered allmulticast mode [ 588.832296][ T36] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 588.878204][T20142] netlink: 'syz.0.3668': attribute type 1 has an invalid length. [ 589.029923][T20146] ip6tnl2: entered allmulticast mode [ 589.252092][T20157] vlan2: entered allmulticast mode [ 589.263794][T20157] bond0: entered allmulticast mode [ 589.269031][T20157] bond_slave_0: entered allmulticast mode [ 589.274976][T20157] bond_slave_1: entered allmulticast mode [ 589.358630][T20162] syzkaller0: entered promiscuous mode [ 589.372121][T20162] syzkaller0: entered allmulticast mode [ 589.486498][T20174] __nla_validate_parse: 9 callbacks suppressed [ 589.486532][T20174] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3675'. [ 589.679926][T20184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3679'. [ 589.690027][T20184] netlink: 'syz.4.3679': attribute type 10 has an invalid length. [ 589.700616][T20184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3679'. [ 589.718511][T20184] geneve3: entered promiscuous mode [ 589.770876][T20184] geneve3: entered allmulticast mode [ 589.820147][T20191] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3682'. [ 590.008711][T20203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3686'. [ 590.249140][T20212] gtp0: entered allmulticast mode [ 590.277985][T20212] team0: Port device gtp0 added [ 590.336106][T20217] netlink: 'syz.2.3691': attribute type 29 has an invalid length. [ 590.481274][T20223] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3694'. [ 590.496169][T20221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3693'. [ 590.536104][T20225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3695'. [ 590.661883][T20230] vlan5: entered promiscuous mode [ 590.839604][T20244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3702'. [ 590.896688][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3702'. [ 590.946963][T20243] can: request_module (can-proto-0) failed. [ 591.128259][T20244] 8021q: adding VLAN 0 to HW filter on device bond2 [ 591.782153][T20296] syzkaller0: entered promiscuous mode [ 591.788765][T20296] syzkaller0: entered allmulticast mode [ 591.888015][T20303] syzkaller0: entered promiscuous mode [ 591.911976][T20303] syzkaller0: entered allmulticast mode [ 592.309278][T20325] netlink: 'syz.3.3729': attribute type 74 has an invalid length. [ 592.651299][T20334] syzkaller0: entered promiscuous mode [ 592.664950][T20336] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 592.690584][T20334] syzkaller0: entered allmulticast mode [ 592.742064][T20336] bond3: (slave ip6gre0): Device is not bonding slave [ 592.749150][T20336] bond3: option active_slave: invalid value (ip6gre0) [ 592.758026][T20336] bond3 (unregistering): Released all slaves [ 592.817329][T20346] netlink: 'syz.4.3735': attribute type 12 has an invalid length. [ 593.001606][T20354] netlink: 'syz.4.3737': attribute type 1 has an invalid length. [ 593.215028][T20363] netlink: 'syz.4.3741': attribute type 1 has an invalid length. [ 593.509592][T20381] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.516926][T20381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.711376][T20397] xt_hl: Unknown TTL match mode: 255 [ 593.975012][T20413] SET target dimension over the limit! [ 593.980817][T20410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.478467][T20448] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 594.537174][T20448] bond1 (unregistering): Released all slaves [ 594.546184][T20444] SET target dimension over the limit! [ 594.758220][T20466] netlink: 'syz.3.3768': attribute type 13 has an invalid length. [ 595.032449][T20487] __nla_validate_parse: 13 callbacks suppressed [ 595.032469][T20487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3773'. [ 595.371244][ T6882] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.382198][T20502] netlink: 'syz.3.3781': attribute type 2 has an invalid length. [ 595.401263][ T6882] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.410113][T20502] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3781'. [ 595.434174][ T6882] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.443135][T20513] netlink: 'syz.0.3780': attribute type 23 has an invalid length. [ 595.453971][ T6882] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.921431][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3787'. [ 595.948078][T20525] bond1: entered promiscuous mode [ 595.958559][T20552] netlink: 'syz.4.3787': attribute type 5 has an invalid length. [ 595.969729][T20552] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3787'. [ 595.987256][T20552] geneve3: entered promiscuous mode [ 595.992846][T20552] geneve3: entered allmulticast mode [ 595.999763][ T43] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 596.034853][ T43] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 596.284301][T20547] 8021q: adding VLAN 0 to HW filter on device bond4 [ 596.381769][T20547] bond4: entered allmulticast mode [ 596.395866][T20547] bond0: (slave bond4): Enslaving as an active interface with an up link [ 596.417433][ T5633] Bluetooth: hci0: command 0x0405 tx timeout [ 596.428816][ T43] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 596.521291][ T43] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 596.597977][T20580] netlink: 'syz.0.3797': attribute type 15 has an invalid length. [ 596.609705][T20580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3797'. [ 596.632267][T20583] SET target dimension over the limit! [ 596.717299][T20580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3797'. [ 596.847202][T20601] netlink: 'syz.2.3799': attribute type 5 has an invalid length. [ 596.876047][T20597] ±’: renamed from lo (while UP) [ 596.966047][T20605] siw: device registration error -23 [ 597.001491][T20607] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 597.012207][T20607] block nbd0: NBD_DISCONNECT [ 597.037222][T20613] sctp: [Deprecated]: syz.4.3807 (pid 20613) Use of int in max_burst socket option deprecated. [ 597.037222][T20613] Use struct sctp_assoc_value instead [ 597.042920][T20607] block nbd0: Send disconnect failed -32 [ 597.071511][T20613] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3807'. [ 597.090931][T20607] block nbd0: shutting down sockets [ 597.123433][ T43] gretap0: left allmulticast mode [ 597.136104][ T43] gretap0: left promiscuous mode [ 597.151647][ T43] bridge0: port 1(gretap0) entered disabled state [ 597.460634][ T43] ip6gretap0 (unregistering): left promiscuous mode [ 597.515181][ T43] bond5 (unregistering): (slave ip6gre2): Releasing backup interface [ 597.560758][ T43] bond11 (unregistering): (slave ip6gretap1): Releasing active interface [ 597.692163][T20650] netlink: 'syz.1.3812': attribute type 10 has an invalid length. [ 597.730573][T20650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3812'. [ 597.747086][ T43] erspan0 (unregistering): left promiscuous mode [ 597.906826][ T43] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 597.980580][ T43] bond6 (unregistering): (slave bridge7): Releasing backup interface [ 598.011252][ T43] bond7 (unregistering): (slave bridge9): Releasing backup interface [ 598.041656][ T43] bond10 (unregistering): (slave bridge10): Releasing backup interface [ 598.068939][ T43] bond0 (unregistering): Released all slaves [ 598.091071][ T43] bond1 (unregistering): Released all slaves [ 598.111426][T20658] netlink: 'syz.3.3814': attribute type 21 has an invalid length. [ 598.112366][ T43] bond2 (unregistering): Released all slaves [ 598.120970][T20658] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3814'. [ 598.151756][ T43] bond3 (unregistering): Released all slaves [ 598.166041][ T43] bond4 (unregistering): Released all slaves [ 598.181732][ T43] bond5 (unregistering): Released all slaves [ 598.204798][ T43] bond6 (unregistering): Released all slaves [ 598.224256][ T43] bond7 (unregistering): Released all slaves [ 598.238632][ T43] bond8 (unregistering): Released all slaves [ 598.261238][ T43] bond9 (unregistering): Released all slaves [ 598.276131][ T43] bond10 (unregistering): Released all slaves [ 598.299165][ T43] bond11 (unregistering): Released all slaves [ 598.317869][ T43] bond12 (unregistering): (slave veth11): Releasing active interface [ 598.326286][ T43] batadv3: entered promiscuous mode [ 598.337349][ T43] bond12 (unregistering): (slave batadv3): Releasing active interface [ 598.350352][ T43] bond12 (unregistering): Released all slaves [ 598.380878][T20636] netlink: 'syz.1.3812': attribute type 4 has an invalid length. [ 598.435288][T20650] team0: Port device geneve1 added [ 598.488951][T20658] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3814'. [ 598.625813][T20660] netlink: 'syz.0.3815': attribute type 1 has an invalid length. [ 598.634299][ T43] tipc: Left network mode [ 598.680640][T20662] syzkaller0: entered promiscuous mode [ 598.694880][T20662] syzkaller0: entered allmulticast mode [ 598.821095][ T5633] Bluetooth: hci5: link tx timeout [ 598.826437][ T5633] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 598.888045][T20678] netlink: 'syz.1.3821': attribute type 1 has an invalid length. [ 599.106033][T20678] bond2: entered promiscuous mode [ 599.111663][T20678] 8021q: adding VLAN 0 to HW filter on device bond2 [ 599.759046][ T43] hsr_slave_0: left promiscuous mode [ 600.778547][ T6888] smbdirect: ib_dev[syś2] removed [ 600.788016][T20728] bond0: entered promiscuous mode [ 600.800945][T20728] bond_slave_0: entered promiscuous mode [ 600.814077][T20728] bond_slave_1: entered promiscuous mode [ 600.820056][T20728] bond4: entered promiscuous mode [ 600.865923][T20729] gtp0: left allmulticast mode [ 600.877867][T18917] lo speed is unknown, defaulting to 1000 [ 600.893777][ T5633] Bluetooth: hci5: command 0x0406 tx timeout [ 600.906766][T18917] infiniband syś2: ib_query_port failed (-19) [ 600.930303][ T6897] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.952154][ T6897] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.125798][ T6897] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.137501][T20783] __nla_validate_parse: 6 callbacks suppressed [ 601.137518][T20783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3843'. [ 601.149135][ T6897] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.153879][T20783] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3843'. [ 601.440918][T20803] openvswitch: netlink: IP tunnel dst address not specified [ 601.468163][ T43] IPVS: stop unused estimator thread 0... [ 601.671082][T20809] veth3: entered promiscuous mode [ 601.711860][T20809] veth3: entered allmulticast mode [ 601.825865][T20821] Cannot find del_set index 3 as target [ 601.851703][T20821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 602.048944][T20838] sctp: [Deprecated]: syz.0.3858 (pid 20838) Use of int in max_burst socket option. [ 602.048944][T20838] Use struct sctp_assoc_value instead [ 602.117356][T20838] netlink: 'syz.0.3858': attribute type 2 has an invalid length. [ 602.148881][T20838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3858'. [ 602.319636][T20851] veth0_to_bridge: entered promiscuous mode [ 602.427482][T20858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3864'. [ 602.530598][T20859] veth0_to_bridge: left promiscuous mode [ 602.796620][ T6894] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 602.818010][T20875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 602.857052][T20895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3867'. [ 602.859352][T20894] netlink: 'syz.4.3870': attribute type 3 has an invalid length. [ 602.887201][T20887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3868'. [ 603.028623][T20903] openvswitch: netlink: Actions may not be safe on all matching packets [ 603.042391][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3873'. [ 603.068801][T20904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3873'. [ 603.094099][T20903] netlink: 'syz.2.3872': attribute type 1 has an invalid length. [ 603.148544][T20907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3872'. [ 603.190238][T20905] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3873'. [ 603.190262][T20911] x_tables: duplicate underflow at hook 1 [ 603.251152][T20911] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 603.425524][T20921] netlink: 'syz.3.3878': attribute type 19 has an invalid length. [ 603.475718][ T6894] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.488076][T20921] netlink: 'syz.3.3878': attribute type 19 has an invalid length. [ 603.505634][ T6894] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.547907][ T6894] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.580291][ T6894] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.861559][T20946] vlan2: entered promiscuous mode [ 603.885518][T20946] bridge0: entered promiscuous mode [ 604.203072][T20967] netlink: 'syz.3.3892': attribute type 1 has an invalid length. [ 604.361036][T20983] netlink: 'syz.1.3896': attribute type 1 has an invalid length. [ 604.478910][T20983] 8021q: adding VLAN 0 to HW filter on device bond3 [ 604.570416][T20983] bond3: (slave veth0_to_bond): making interface the new active one [ 604.641084][T20983] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 604.865517][T21025] ip6tnl0: Caught tx_queue_len zero misconfig [ 605.054689][ T6897] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.078823][ T6897] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.157714][T21046] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 605.170758][T21046] bond2 (unregistering): Released all slaves [ 605.230042][ T6897] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.245526][T21055] netlink: 'syz.0.3912': attribute type 1 has an invalid length. [ 605.267895][ T6897] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.619075][T21076] macsec0: left allmulticast mode [ 606.366605][T21136] netlink: 'syz.2.3930': attribute type 12 has an invalid length. [ 606.515284][T21145] __nla_validate_parse: 18 callbacks suppressed [ 606.515306][T21145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3933'. [ 606.644691][T21154] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 606.696480][T21154] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3934'. [ 606.781735][T21149] syzkaller1: entered promiscuous mode [ 606.801517][T21149] syzkaller1: entered allmulticast mode [ 606.838279][ T24] IPVS: starting estimator thread 0... [ 606.942970][T21169] IPVS: using max 27 ests per chain, 64800 per kthread [ 607.027409][T21166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.165360][T21181] netlink: 'syz.2.3937': attribute type 1 has an invalid length. [ 607.193693][T21181] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3937'. [ 607.295045][T21139] netlink: 'syz.0.3932': attribute type 4 has an invalid length. [ 607.631721][T21209] syz_tun (unregistering): left allmulticast mode [ 607.860337][T21233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3945'. [ 607.896071][T21236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3946'. [ 607.930401][T21236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3946'. [ 607.936305][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3949'. [ 607.950732][T21233] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 607.995600][T21233] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 608.030045][T21233] gretap1: entered promiscuous mode [ 608.044145][T21233] gretap1: entered allmulticast mode [ 608.836884][T21307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3962'. [ 608.900315][T21306] raw_sendmsg: syz.1.3963 forgot to set AF_INET. Fix it! [ 609.097728][T21320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3965'. [ 609.571087][T21342] bond0: (slave team0): Releasing backup interface [ 609.622877][T21288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3960'. [ 609.638229][T21342] bridge_slave_0: left allmulticast mode [ 609.653636][T21342] bridge_slave_0: left promiscuous mode [ 609.669162][T21342] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.688319][T21342] bridge_slave_1: left allmulticast mode [ 609.702718][T21342] bridge_slave_1: left promiscuous mode [ 609.726608][T21342] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.749094][T21342] bond3: (slave veth0_to_bond): Releasing active interface [ 609.762106][T21342] bond0: (slave bond_slave_0): Releasing backup interface [ 609.775862][T21342] bond0: (slave bond_slave_1): Releasing backup interface [ 609.800931][T21342] team0: Port device team_slave_0 removed [ 609.813406][T21342] team0: Port device team_slave_1 removed [ 609.820229][T21342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.828846][T21342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.838961][T21342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 609.846881][T21342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.856871][T21342] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 609.886535][T21350] validate_nla: 1 callbacks suppressed [ 609.886555][T21350] netlink: 'syz.4.3970': attribute type 29 has an invalid length. [ 610.068362][T21364] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 610.102781][T21367] netlink: 'syz.4.3974': attribute type 2 has an invalid length. [ 610.167809][T21367] netlink: 'syz.4.3974': attribute type 1 has an invalid length. [ 610.222145][T21372] netlink: 'syz.4.3974': attribute type 2 has an invalid length. [ 610.729891][T21404] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20004 [ 610.921632][T21421] vlan3: entered allmulticast mode [ 611.203402][T21435] syzkaller0: entered promiscuous mode [ 611.232363][T21435] syzkaller0: entered allmulticast mode [ 611.970722][T21486] block nbd0: Unsupported socket: should be TCP or UNIX. [ 612.011104][T21493] __nla_validate_parse: 11 callbacks suppressed [ 612.011122][T21493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4004'. [ 612.058921][T21493] vlan0: entered promiscuous mode [ 612.291372][T21506] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4007'. [ 612.393207][T21513] netlink: 'syz.2.4007': attribute type 1 has an invalid length. [ 612.544441][T21513] bond2: option mode: invalid value (8) [ 612.553628][T21513] bond2 (unregistering): Released all slaves [ 612.691411][T21527] : renamed from dummy0 [ 613.151055][T21553] netlink: 'syz.2.4013': attribute type 10 has an invalid length. [ 613.173188][T21553] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4013'. [ 613.359397][T21572] Cannot find set identified by id 0 to match [ 613.463744][T21578] xt_ipcomp: unknown flags 1D [ 613.757465][T21602] netlink: 'syz.4.4027': attribute type 12 has an invalid length. [ 613.840926][T21605] vcan0: tx address claim with dlc 1 [ 614.019629][T21608] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4027'. [ 614.055169][T21617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4030'. [ 614.281403][T21628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4034'. [ 614.491521][T21632] openvswitch: netlink: Actions may not be safe on all matching packets [ 614.749958][T21650] tipc: Started in network mode [ 614.768936][T21650] tipc: Node identity ac14140f, cluster identity 4711 [ 614.781356][T21650] tipc: New replicast peer: 255.255.255.255 [ 614.790989][T21650] tipc: Enabled bearer , priority 10 [ 615.097722][T21675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4050'. [ 615.138786][T21686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4051'. [ 615.150124][T21686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4051'. [ 615.160075][T21686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4051'. [ 615.170860][T21686] openvswitch: netlink: Message has 4 unknown bytes. [ 615.710407][T21659] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 615.745837][T21689] netlink: 'syz.3.4053': attribute type 1 has an invalid length. [ 615.917388][T18907] tipc: Node number set to 2886997007 [ 616.737151][ T30] audit: type=1800 audit(1782689204.345:11): pid=21760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4076" name="memory.events" dev="tmpfs" ino=724 res=0 errno=0 [ 616.759186][ T30] audit: type=1800 audit(1782689204.355:12): pid=21760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4076" name="memory.events" dev="tmpfs" ino=724 res=0 errno=0 [ 616.785422][ T30] audit: type=1800 audit(1782689204.355:13): pid=21760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4076" name="memory.events" dev="tmpfs" ino=724 res=0 errno=0 [ 616.818708][ T30] audit: type=1800 audit(1782689204.355:14): pid=21760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4076" name="memory.events" dev="tmpfs" ino=724 res=0 errno=0 [ 616.840766][ T30] audit: type=1800 audit(1782689204.355:15): pid=21760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4076" name="memory.events" dev="tmpfs" ino=724 res=0 errno=0 [ 616.863360][ T30] audit: type=1804 audit(1782689204.425:16): pid=21763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4076" name="/newroot/138/memory.events" dev="tmpfs" ino=724 res=1 errno=0 [ 616.885327][ T30] audit: type=1804 audit(1782689204.425:17): pid=21760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4076" name="/newroot/138/memory.events" dev="tmpfs" ino=724 res=1 errno=0 [ 616.908119][ T30] audit: type=1800 audit(1782689204.425:18): pid=21760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4076" name="memory.events" dev="tmpfs" ino=724 res=0 errno=0 [ 616.911334][T21762] bond3: Removing last ns target with arp_interval on [ 616.930094][ T30] audit: type=1800 audit(1782689204.425:19): pid=21760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4076" name="memory.events" dev="tmpfs" ino=724 res=0 errno=0 [ 616.930144][ T30] audit: type=1800 audit(1782689204.425:20): pid=21760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4076" name="memory.events" dev="tmpfs" ino=724 res=0 errno=0 [ 617.119769][T21776] syzkaller0: entered promiscuous mode [ 617.126121][T21776] syzkaller0: entered allmulticast mode [ 617.398836][T21792] netlink: 'syz.0.4081': attribute type 1 has an invalid length. [ 617.425571][T21792] 8021q: adding VLAN 0 to HW filter on device bond5 [ 617.435956][T21792] __nla_validate_parse: 7 callbacks suppressed [ 617.435970][T21792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4081'. [ 617.452364][T21792] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 617.469559][T21792] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4081'. [ 617.488589][T21792] bond5: (slave batadv0): Opening slave failed [ 617.607947][T18922] IPVS: starting estimator thread 0... [ 617.703581][T21801] IPVS: using max 55 ests per chain, 132000 per kthread [ 619.628305][T21753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 619.796853][T21817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4086'. [ 619.917721][T21824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4090'. [ 620.060738][T21840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4094'. [ 620.791636][T21890] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4107'. [ 621.148011][ T5626] Bluetooth: hci0: link tx timeout [ 621.158853][ T5626] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 621.282237][ T5626] Bluetooth: hci0: link tx timeout [ 621.287722][ T5626] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 621.303650][ T5626] Bluetooth: hci0: link tx timeout [ 621.311157][ T5626] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 621.537490][ T5626] Bluetooth: hci0: link tx timeout [ 621.543043][ T5626] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 621.800337][T21966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4125'. [ 621.854234][ T5626] Bluetooth: hci0: link tx timeout [ 621.861624][ T5626] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 621.999953][T21980] xt_TCPMSS: Only works on TCP SYN packets [ 622.469408][ T5626] Bluetooth: hci0: link tx timeout [ 622.476223][ T5626] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 622.575350][ T5626] Bluetooth: hci0: link tx timeout [ 622.580653][ T5626] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 622.719877][T22026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4141'. [ 622.747266][T22029] veth0_macvtap: Caught tx_queue_len zero misconfig [ 622.755155][T22026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4141'. [ 622.783683][T22029] netlink: 'syz.3.4142': attribute type 1 has an invalid length. [ 622.814217][T22032] tipc: Enabled bearer , priority 0 [ 622.867888][T22031] syzkaller0: entered promiscuous mode [ 622.874308][T22031] syzkaller0: entered allmulticast mode [ 622.882181][T22031] tipc: Resetting bearer [ 622.910924][T22030] tipc: Resetting bearer [ 622.944316][ T5626] Bluetooth: hci0: link tx timeout [ 622.949518][ T5626] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 623.004249][T22038] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4145'. [ 623.153869][T22022] infiniband syz0: set active [ 623.160394][T22022] infiniband syz0: added veth0_vlan [ 623.184109][T22022] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 623.199929][T22022] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 623.217789][ T5626] Bluetooth: hci0: command 0x0405 tx timeout [ 623.225505][T22022] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 623.263105][T22022] RDS/IB: syz0: added [ 623.269519][T22022] smc: adding ib device syz0 with port count 1 [ 623.277695][T22022] smc: ib device syz0 port 1 has no pnetid [ 625.750223][T22030] tipc: Disabling bearer [ 625.943853][T22052] xt_cluster: node mask cannot exceed total number of nodes [ 626.024981][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4149'. [ 626.074243][T22058] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4151'. [ 626.096892][T22058] netlink: 75 bytes leftover after parsing attributes in process `syz.4.4151'. [ 626.125950][T22058] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4151'. [ 626.140596][T22062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4152'. [ 626.159128][T22061] syzkaller0: entered promiscuous mode [ 626.178185][T22061] syzkaller0: entered allmulticast mode [ 626.440766][T22070] netlink: 'syz.3.4156': attribute type 1 has an invalid length. [ 626.707720][T22088] sctp: [Deprecated]: syz.1.4161 (pid 22088) Use of int in max_burst socket option. [ 626.707720][T22088] Use struct sctp_assoc_value instead [ 626.963380][T22093] syzkaller1: entered promiscuous mode [ 626.976188][T22093] syzkaller1: entered allmulticast mode [ 627.009014][T22097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 627.181572][T22105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4167'. [ 627.212031][T22105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4167'. [ 627.242686][T22105] netlink: 'syz.4.4167': attribute type 14 has an invalid length. [ 627.267765][T22105] netlink: 'syz.4.4167': attribute type 13 has an invalid length. [ 627.717486][T22131] sctp: [Deprecated]: syz.1.4174 (pid 22131) Use of int in max_burst socket option. [ 627.717486][T22131] Use struct sctp_assoc_value instead [ 627.733176][T22132] __nla_validate_parse: 2 callbacks suppressed [ 627.733196][T22132] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4172'. [ 628.086373][T22144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4178'. [ 628.142783][T22151] xt_CT: You must specify a L4 protocol and not use inversions on it [ 628.542215][T22171] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4187'. [ 628.584716][T22171] syzkaller1: entered promiscuous mode [ 628.598327][T22171] syzkaller1: entered allmulticast mode [ 628.915491][T22187] vlan3: entered promiscuous mode [ 628.930777][T22187] bridge0: entered promiscuous mode [ 629.106430][T22197] netlink: 'syz.4.4194': attribute type 5 has an invalid length. [ 629.144282][T22196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4193'. [ 629.154396][T22196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4193'. [ 629.377421][T22215] veth0: entered promiscuous mode [ 629.460601][T22214] veth0: left promiscuous mode [ 629.729771][T22250] xt_hashlimit: size too large, truncated to 1048576 [ 629.821214][T22255] syzkaller0: entered promiscuous mode [ 629.852971][T22255] syzkaller0: entered allmulticast mode [ 629.892498][T22262] vlan4: entered promiscuous mode [ 629.907909][T22262] hsr0: entered promiscuous mode [ 629.927394][T22262] vlan4: entered allmulticast mode [ 629.964318][T22262] hsr0: entered allmulticast mode [ 629.976772][T22262] hsr_slave_0: entered allmulticast mode [ 630.007127][T22262] hsr_slave_1: entered allmulticast mode [ 630.156043][T22277] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4215'. [ 630.200128][T22283] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20000 [ 630.235330][T22279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.275811][T22279] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 630.367603][T22294] netlink: 'syz.1.4221': attribute type 11 has an invalid length. [ 630.548548][T22304] netlink: 'syz.4.4224': attribute type 1 has an invalid length. [ 630.617094][T22304] 8021q: adding VLAN 0 to HW filter on device bond4 [ 630.636519][T22308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4224'. [ 630.688055][T22313] xt_cgroup: xt_cgroup: no path or classid specified [ 630.695577][T22304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4224'. [ 630.737447][T22315] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 630.926059][T22325] bond6: Unable to set down delay as MII monitoring is disabled [ 630.946738][T22325] bond6 (unregistering): Released all slaves [ 631.055967][T22336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4235'. [ 631.109682][ T5633] block nbd0: Receive control failed (result -107) [ 631.236087][T22347] netlink: get zone limit has 8 unknown bytes [ 631.475586][T22359] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes. [ 631.590045][T22365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4246'. [ 631.656122][T22370] openvswitch: netlink: Flow actions attr not present in new flow. [ 632.328780][T22422] xt_cgroup: invalid path, errno=-2 [ 632.370698][T22419] 8021q: adding VLAN 0 to HW filter on device bond6 [ 632.403376][T22418] syzkaller0: entered promiscuous mode [ 632.424107][T22418] syzkaller0: entered allmulticast mode [ 632.628060][T22435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 632.635374][T22435] IPv6: NLM_F_CREATE should be set when creating new route [ 632.684571][T22435] sock: sock_timestamping_bind_phc: sock not bind to device [ 632.819408][T22450] __nla_validate_parse: 5 callbacks suppressed [ 632.819428][T22450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4268'. [ 632.874595][T22450] xt_TPROXY: Can be used only with -p tcp or -p udp [ 633.153999][T22478] netlink: 'syz.0.4274': attribute type 1 has an invalid length. [ 633.212903][T22484] netlink: 'syz.1.4276': attribute type 5 has an invalid length. [ 633.447269][T22495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4278'. [ 633.541280][T22500] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 633.629201][T22505] netlink: 'syz.3.4282': attribute type 28 has an invalid length. [ 633.647381][T22503] netlink: 'syz.1.4281': attribute type 3 has an invalid length. [ 633.662388][T22507] xt_CT: You must specify a L4 protocol and not use inversions on it [ 633.796001][T22517] syzkaller0: entered promiscuous mode [ 633.801988][T22517] syzkaller0: entered allmulticast mode [ 634.006935][T22524] netlink: 'syz.0.4288': attribute type 32 has an invalid length. [ 634.025433][T22524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4288'. [ 634.047166][T22527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4290'. [ 634.087695][T22524] bond7: Setting coupled_control to off (0) [ 634.112012][T22527] team0: entered promiscuous mode [ 634.116591][T22524] netlink: 'syz.0.4288': attribute type 32 has an invalid length. [ 634.133789][T22524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4288'. [ 634.146060][T22527] team_slave_0: entered promiscuous mode [ 634.179183][T22527] team_slave_1: entered promiscuous mode [ 634.214926][T22527] team0: left promiscuous mode [ 634.230018][T22527] team_slave_0: left promiscuous mode [ 634.244696][T22527] team_slave_1: left promiscuous mode [ 634.267303][T22530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4288'. [ 634.276507][T22530] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4288'. [ 634.286051][T22530] netlink: 'syz.0.4288': attribute type 4 has an invalid length. [ 634.294208][T22535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4288'. [ 634.304415][T22535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4288'. [ 634.313824][T22535] netlink: 'syz.0.4288': attribute type 4 has an invalid length. [ 634.353569][T22524] bond8: Setting coupled_control to off (0) [ 634.361531][T22544] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4294'. [ 634.450144][T22550] veth6: entered promiscuous mode [ 634.620119][T22557] bridge4: port 1(dummy0) entered blocking state [ 634.658500][T22564] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 634.680406][T22557] bridge4: port 1(dummy0) entered disabled state [ 634.716512][T22557] dummy0: entered allmulticast mode [ 634.724687][T22557] dummy0: entered promiscuous mode [ 634.726311][T22567] xt_hashlimit: size too large, truncated to 1048576 [ 635.412397][T22611] netlink: 'syz.1.4312': attribute type 1 has an invalid length. [ 636.545398][T22681] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 636.600627][T22681] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 636.632279][T22681] gretap1: entered promiscuous mode [ 636.664077][T22681] gretap1: entered allmulticast mode [ 636.901429][T22658] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 636.934966][T22658] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 637.077045][T22716] nft_compat: unsupported protocol 0 [ 637.207486][T22713] bond9: entered promiscuous mode [ 637.243820][T22713] 8021q: adding VLAN 0 to HW filter on device bond9 [ 637.278629][T22737] netlink: 'syz.4.4340': attribute type 1 has an invalid length. [ 637.406184][T22737] bond5: entered promiscuous mode [ 637.431561][T22737] 8021q: adding VLAN 0 to HW filter on device bond5 [ 637.479903][T22742] bond5: entered allmulticast mode [ 637.603754][T22757] bond5: (slave bridge1): making interface the new active one [ 637.633438][T22757] bridge1: entered promiscuous mode [ 637.647836][T22757] bridge1: entered allmulticast mode [ 637.665585][T22757] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 637.722090][T22758] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 637.764453][T22758] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 637.811970][T22758] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 637.826124][T22777] tipc: Enabling of bearer rejected, failed to enable media [ 637.835548][T22758] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 637.846484][T22777] __nla_validate_parse: 12 callbacks suppressed [ 637.846501][T22777] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4344'. [ 637.897259][T22758] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 637.908800][T22758] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 637.915031][T22779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4345'. [ 638.036605][T22758] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 638.040289][T22791] Bluetooth: MGMT ver 1.23 [ 638.053643][T22758] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 638.110293][T22758] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 638.128124][T22758] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 638.263328][T22758] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 638.275268][T22758] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 638.283715][T22758] CPU: 0 UID: 0 PID: 22758 Comm: syz.3.4343 Not tainted syzkaller #0 PREEMPT(full) [ 638.293083][T22758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 638.303390][T22758] RIP: 0010:klist_remove+0x156/0x340 [ 638.308682][T22758] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 bd da 89 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 9e da 89 f6 49 8b 44 24 58 48 89 44 24 08 [ 638.328280][T22758] RSP: 0018:ffffc90007117820 EFLAGS: 00010202 [ 638.334354][T22758] RAX: 000000000000000b RBX: ffff88807db19f00 RCX: 0000000000000000 [ 638.342321][T22758] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 638.350277][T22758] RBP: ffffc90007117920 R08: ffffffff90192563 R09: 1ffffffff20324ac [ 638.358236][T22758] R10: dffffc0000000000 R11: fffffbfff20324ad R12: 0000000000000000 [ 638.366192][T22758] R13: 1ffff1100f40000c R14: ffff88807a000060 R15: dffffc0000000000 [ 638.374151][T22758] FS: 00007f16555ae6c0(0000) GS:ffff888125226000(0000) knlGS:0000000000000000 [ 638.383069][T22758] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 638.389638][T22758] CR2: 00007f10023ea540 CR3: 000000004dc52000 CR4: 00000000003526f0 [ 638.397610][T22758] Call Trace: [ 638.400873][T22758] [ 638.403794][T22758] ? __pfx_klist_remove+0x10/0x10 [ 638.408807][T22758] ? kobject_move+0x5e2/0x720 [ 638.413471][T22758] ? __pfx_kobject_move+0x10/0x10 [ 638.418480][T22758] ? do_raw_spin_unlock+0xf5/0x210 [ 638.423595][T22758] ? get_device_parent+0x366/0x3a0 [ 638.428698][T22758] device_move+0x18e/0x720 [ 638.433107][T22758] hci_conn_del_sysfs+0xb8/0x1a0 [ 638.438041][T22758] hci_conn_del+0xc3d/0x1200 [ 638.442620][T22758] hci_conn_hash_flush+0x189/0x260 [ 638.447723][T22758] hci_dev_close_sync+0x7fc/0x10a0 [ 638.452826][T22758] ? __pfx___mutex_lock+0x10/0x10 [ 638.457837][T22758] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 638.463371][T22758] ? do_raw_spin_lock+0x12b/0x2f0 [ 638.468392][T22758] hci_dev_do_close+0x30/0xc0 [ 638.473062][T22758] hci_rfkill_set_block+0x1f4/0x290 [ 638.478248][T22758] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 638.483955][T22758] rfkill_set_block+0x19f/0x4d0 [ 638.488810][T22758] rfkill_fop_write+0x43b/0x560 [ 638.493643][T22758] ? apparmor_file_permission+0x1f4/0x300 [ 638.499356][T22758] ? __pfx_rfkill_fop_write+0x10/0x10 [ 638.504713][T22758] ? security_kernfs_init_security+0x240/0x270 [ 638.510861][T22758] ? rw_verify_area+0x203/0x4c0 [ 638.515710][T22758] ? __pfx_rfkill_fop_write+0x10/0x10 [ 638.521073][T22758] vfs_write+0x296/0xba0 [ 638.525307][T22758] ? __pfx_vfs_write+0x10/0x10 [ 638.530068][T22758] ? __fget_files+0x2a/0x420 [ 638.534646][T22758] ? __fget_files+0x2a/0x420 [ 638.539228][T22758] ? __fget_files+0x3a2/0x420 [ 638.543891][T22758] ? __fget_files+0x2a/0x420 [ 638.548469][T22758] ksys_write+0x150/0x270 [ 638.552786][T22758] ? __pfx_ksys_write+0x10/0x10 [ 638.557628][T22758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.563684][T22758] do_syscall_64+0x174/0x580 [ 638.568260][T22758] ? trace_irq_disable+0x3b/0x140 [ 638.573270][T22758] ? clear_bhb_loop+0x40/0x90 [ 638.577939][T22758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.583819][T22758] RIP: 0033:0x7f165479ce59 [ 638.588231][T22758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.607833][T22758] RSP: 002b:00007f16555ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 638.616238][T22758] RAX: ffffffffffffffda RBX: 00007f1654a15fa0 RCX: 00007f165479ce59 [ 638.624195][T22758] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 638.632151][T22758] RBP: 00007f1654832e6f R08: 0000000000000000 R09: 0000000000000000 [ 638.640106][T22758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.648062][T22758] R13: 00007f1654a16038 R14: 00007f1654a15fa0 R15: 00007ffd8cc81c28 [ 638.656029][T22758] [ 638.659044][T22758] Modules linked in: [ 638.664693][T22758] ---[ end trace 0000000000000000 ]--- [ 638.678796][T22758] RIP: 0010:klist_remove+0x156/0x340 [ 638.684198][T22758] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 bd da 89 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 9e da 89 f6 49 8b 44 24 58 48 89 44 24 08 [ 638.704126][T22758] RSP: 0018:ffffc90007117820 EFLAGS: 00010202 [ 638.710240][T22758] RAX: 000000000000000b RBX: ffff88807db19f00 RCX: 0000000000000000 [ 638.721684][T22758] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 638.729934][T22758] RBP: ffffc90007117920 R08: ffffffff90192563 R09: 1ffffffff20324ac [ 638.738448][T22758] R10: dffffc0000000000 R11: fffffbfff20324ad R12: 0000000000000000 [ 638.746605][T22758] R13: 1ffff1100f40000c R14: ffff88807a000060 R15: dffffc0000000000 [ 638.755168][T22758] FS: 00007f16555ae6c0(0000) GS:ffff888125226000(0000) knlGS:0000000000000000 [ 638.764333][T22758] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 638.771145][T22758] CR2: 00007f0df65ea2f8 CR3: 000000004dc52000 CR4: 00000000003526f0 [ 638.779764][T22758] Kernel panic - not syncing: Fatal exception [ 638.786193][T22758] Kernel Offset: disabled [ 638.790504][T22758] Rebooting in 86400 seconds..