last executing test programs: 4.030221171s ago: executing program 2 (id=2017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, 0x0, 0x20048831) syz_genetlink_get_family_id$ieee802154(0x0, r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000009c0), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x2c}}, 0x8000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)={0x28, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x8e}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) 3.808832695s ago: executing program 2 (id=2022): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x46, &(0x7f0000002480)=0x1080, 0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) (async) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000030}, 0x40088c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x11, 0x11, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000009ffffff18220000", @ANYRES32=0x1, @ANYBLOB="00000000a006000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000062d0ce498500000082000000650b4000f0ffffff184b00000200000000000000000000009500000000000000"], &(0x7f00000006c0)='GPL\x00', 0x9, 0x1000, &(0x7f0000000700)=""/4096, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001780)=[{0x0, 0x3, 0xd, 0xb}, {0x1, 0x4, 0x0, 0xa2c8acaeaa5ba5f9}, {0x5, 0x3, 0xa, 0xb}, {0x2, 0x4, 0x0, 0x9}, {0x0, 0x3, 0x9, 0xb}, {0x2, 0x5, 0xd, 0x2}, {0x2, 0x1, 0xc, 0x4}, {0x2, 0x3, 0x0, 0x3}], 0x10, 0x4945}, 0x94) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x18, 0x18, &(0x7f0000001900)=ANY=[@ANYRESOCT=r7, @ANYRES32, @ANYBLOB="00007600000000980100339186000c0000db40003762c300b700000080000000181100", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000dd72db198500000082000000586b0100ffffffff18250000", @ANYRES32, @ANYBLOB="0000000001040000"], &(0x7f00000019c0)='GPL\x00', 0x400, 0x82, &(0x7f0000001a00)=""/130, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001ac0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000001b00)={0x0, 0x10, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000001b40)=[{0x6, 0x2, 0xd, 0x2}, {0x1, 0x1, 0x5, 0x1}, {0x0, 0x5, 0x5, 0x7}, {0x0, 0x4, 0x10, 0x8}, {0x4, 0x4, 0x403, 0x5}, {0x3, 0x3, 0x4, 0x7}, {0x1, 0x3, 0x0, 0x5}, {0x2, 0x3, 0x3, 0x2}, {0x4, 0x5, 0x6, 0x3}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000018c0)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="00e800009dc4a133", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r9, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r13, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) connect$bt_l2cap(r13, &(0x7f00000000c0)={0x1f, 0x2146}, 0xe) (async) r14 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r12}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', r10, 0x2f, 0x2, 0x73, 0x3, 0x20, @dev={0xfe, 0x80, '\x00', 0x2f}, @mcast1, 0x10, 0x8000, 0x2, 0x2}}) 2.821685609s ago: executing program 2 (id=2040): close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000018000000", @ANYRES32, @ANYBLOB="00000000000000002e000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) unshare(0x6a040000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 2.634181888s ago: executing program 1 (id=2041): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x48080) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000003c0), &(0x7f0000000400)=0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) readv(r6, &(0x7f0000000280)=[{&(0x7f0000000240)=""/46, 0xfffffffffffffd0b}], 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x4}, &(0x7f0000000280)=0xc) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r9, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f00000002c0)={r8, 0x4}, 0x8) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000002000000", 0xfe60) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000300012800b00010069703667726500002000028014000700feec"], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8048082) 2.29446258s ago: executing program 4 (id=2044): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xc}]}, 0x40}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x6002, 0x4, 0x410, 0x218, 0x218, 0x110, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@remote, @dev={0xac, 0x14, 0x14, 0xa}, 0xffffff00, 0x0, 0x0, 0xf, {@mac=@remote, {[0x0, 0xff, 0x0, 0x181, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x18, 0x3ff, 0x1, 0x4, 0x1, 0x8, 'syzkaller1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x37c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f06cc6001e11", @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb4, 'syz1\x00', {0x93bf}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@random="1b00be002004", @local, @local, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) unshare(0x2c020400) r5 = socket(0x1e, 0x5, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f0000002200)=0xa20, 0x4) recvfrom$inet(r7, 0x0, 0x0, 0x60000061, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x60, r9, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040010}, 0x44000) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x4010, 0xffffffffffffffff, 0xb0258000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020642500000000202000207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.145762677s ago: executing program 2 (id=2047): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @random="bd1058e7c185"}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000562a4cf3f0c3cc400000082c00fe8000000000000000000000000000aaff020b3dab058500907800000000"], 0x3e) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)=ANY=[], 0xe0}], 0x1}, 0x40048) connect$x25(r2, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) 1.686272888s ago: executing program 1 (id=2050): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r2], 0x5c}}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=@newchain={0x54, 0x64, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0x9}, {0xb, 0xffe0}, {0xb, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0xe9}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0x81, 0x99}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x81, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.506584933s ago: executing program 4 (id=2051): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) unshare(0xa020480) bind$can_j1939(r0, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) unshare(0xa020480) (async) bind$can_j1939(r0, 0x0, 0x0) (async) 1.466682716s ago: executing program 1 (id=2052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x601, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 1.367033077s ago: executing program 4 (id=2054): r0 = socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, 0x0, 0x61) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000400)=@ethtool_rxnfc={0x30, 0x12, 0x4, {0x1, @sctp_ip6_spec={@mcast1, @loopback, 0x4e21, 0x4e23, 0xff}, {0x0, @link_local, 0x1, 0x7, [0xa, 0x7]}, @usr_ip4_spec={@broadcast, @rand_addr=0x64010100, 0xffff, 0x40}, {0x0, @broadcast, 0x5, 0x10, [0x4376, 0x7fff]}, 0x2, 0x64bf}}}) 1.256845336s ago: executing program 4 (id=2056): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) sendmmsg$alg(r1, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="18eb29923c4168eeaa80362a0703c2ab51e1cdf5dd73a3193de0a5977905ded3c4d6d1ec16866711d5bcbe84592bebd4b631188a3679bc72bf58a88c71011af52996040cd7698290c743553e77cf39e993305fabbd036cbb65a2cc0913742e7ed68c22", 0x63}], 0x1, 0x0, 0x0, 0x81}], 0x1, 0x20041000) r2 = socket(0x2, 0x3, 0x100000001) setsockopt(r2, 0xff, 0xffffffc0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002480)=""/4080, 0xff0}, {&(0x7f0000000080)=""/33, 0x21}], 0x2}, 0x40012143) 1.182358019s ago: executing program 2 (id=2057): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000005c0)={0x0}, &(0x7f0000000bc0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000c00)={r2, 0x6, 0x1000, "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"}, 0x1008) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@ip={@broadcast, @empty, 0xffffffff, 0xffffff00, 'bridge0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x2e, 0x3, 0x14}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x5, 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe, 'syz1\x00', {0x6008}}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2, 0x0, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x9, 0x5, 0xffffffff, 'pptp\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000540)=0x10, 0x80000) setsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000580)=0x734a, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000001c0)="2c36bdcef2f1c19a9a4f85d89cc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x438, 0x168, 0x300, 0x0, 0x268, 0x0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x6, &(0x7f0000000680), {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'pim6reg1\x00', 'hsr0\x00', {0xff}, {}, 0x2, 0x2, 0x14}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x0, 0xe, [0x26, 0x24, 0x26, 0x3d, 0x6, 0x1c, 0x3, 0x33, 0xe, 0xe, 0x7, 0x2, 0x2f, 0x3c, 0x40], 0x0, 0x47, 0x2f}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x3a}, 0x0, 0x1fe000000, 'nicvf0\x00', 'bridge0\x00', {0x101}, {0xff}, 0x5e, 0x1, 0x1d}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x26}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffffff, 0xff000000, 'bridge_slave_1\x00', 'veth1_macvtap\x00', {}, {}, 0x32, 0x3, 0x78}, 0x0, 0xd8, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@set={{0x40}, {{0x3, [0x4, 0x3, 0x0, 0x1, 0x2, 0x4], 0x6, 0x6}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0xfc}}}, {{@ip={@empty, @empty, 0xffffff00, 0xffffff00, 'batadv_slave_0\x00', 'macvlan0\x00', {}, {0xff}, 0x1, 0x1}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x7a}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x1f}, 0xff, 0xff, 'batadv0\x00', 'wg2\x00', {0xff}, {0xff}, 0x62, 0x2, 0x18}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xba, 0x9, @private=0xa010101, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) 1.181817897s ago: executing program 3 (id=2058): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x9}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r2 = socket$tipc(0x1e, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x28) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r8, 0x0, 0x2f, &(0x7f0000000700)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r8, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}}}, 0x108) close(r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f00000004c0)={r4, &(0x7f0000000380)=']\x00', 0x501000, &(0x7f00000003c0)={@_ha_fsid={[0x4, 0x81]}, {0xfff8, 0x4, 0x4, 0x980}}, 0x6, &(0x7f0000000440), &(0x7f0000000480)=0x9}) openat$cgroup_pressure(r10, &(0x7f0000000500)='cpu.pressure\x00', 0x2, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r5, &(0x7f00000007c0)=[{&(0x7f0000000180)="8be7ee177cdad9b4b47380e588cafd4371f8fb16063b45b29ec0b5366dcc00f042fe6d886a4f9f5af688724d3bc8df", 0x2f}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xa9}]}]}, 0x58}}, 0x40040c2) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r13, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0x41015) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000180)={0x8, 0x10, '\x00', 0x1, &(0x7f0000000100)=[0x0, 0x0]}) 1.168713417s ago: executing program 0 (id=2059): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000280)={r1, &(0x7f0000000040)='@}&-*~.(.\\%\x00', 0x280000, &(0x7f00000000c0)={@_ha_fsid={[0x206, 0x9]}, {0x3, 0x8, 0x4, 0x4}}, 0xc5b, &(0x7f0000000100), &(0x7f0000000240)=0x9caa}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) listen(r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x7d, &(0x7f0000000200)={0x0, 0xeb, 0x0, 0x6}, 0x10) (async) listen(r5, 0x7) (async) r7 = socket(0xa, 0x1, 0x0) listen(r7, 0x7f) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x80) r9 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r9, 0x0) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvmsg(r10, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) (async) r11 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_OPERSTATE={0x5, 0x10, 0x6c}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_TXQLEN={0x8, 0xd, 0x4}]}, 0x44}}, 0x8000) 1.082670441s ago: executing program 4 (id=2060): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) writev(r0, &(0x7f0000002500)=[{&(0x7f0000000000)="3593", 0x2}], 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002300)={{{@in6=@local, @in=@remote, 0x4e21, 0x0, 0x4e22, 0x5, 0x2, 0x20, 0x120, 0x21, 0x0, 0xee01}, {0x5, 0x80, 0x9, 0x20000000000030, 0x80000001, 0x4, 0x6, 0x401}, {0x2, 0x5, 0x5, 0x3}, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@private2, 0x4d2, 0x2b}, 0x2, @in6=@private2, 0x3506, 0x0, 0x1, 0xfc, 0x3, 0x6, 0x5}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002300)={{{@in6=@local, @in=@remote, 0x4e21, 0x0, 0x4e22, 0x5, 0x2, 0x20, 0x120, 0x21, 0x0, 0xee01}, {0x5, 0x80, 0x9, 0x20000000000030, 0x80000001, 0x4, 0x6, 0x401}, {0x2, 0x5, 0x5, 0x3}, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@private2, 0x4d2, 0x2b}, 0x2, @in6=@private2, 0x3506, 0x0, 0x1, 0xfc, 0x3, 0x6, 0x5}}, 0xe8) close(0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x3c, r2, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x40}, 0x8000) 1.02226842s ago: executing program 1 (id=2061): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x5) bind$netlink(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r3 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r7 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r5, 0xd66771a5e8224ded, 0x1, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_PID={0x8, 0x52, r7}]}, 0x24}}, 0xc0) 1.021735858s ago: executing program 2 (id=2062): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x14, 0x2, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x12f0, 0xffffffff, 0x98, 0x11c0, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@limit={{0x48}, {0xa, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1350) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r3, &(0x7f0000000540)=""/4096, 0x1000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="3fc36e961ed009000000000000003550f358ec98000000c012d40700000002", 0x83) r7 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000003d40)=""/4086, 0xfffffffffffffec1) sendmmsg$alg(r7, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000180)="b01220ee4b5a0b12c273972ea3edd768dbad1c3febf48a9926f16268a3edc6f2ff97ba688eaaaf7ee0f2264fb2ee0f67e6121291692267d8b34d076518f221f60e554115e2810116af423f9f1534f78900edd661bc516f8d574e309f4913645794855756a586a7ccc83d81ea4d2578711903a191dd576ce98d41453c09625efe7dff4b6222712a7309e131c3841dec7fdfdea97eaa9652e221e15ad8cb5793f185774b0f49782a59e05617354be85a35db7bcfe79be4356ede43b918981ce2318a65cfe8b262", 0xc6}, {&(0x7f0000000280)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08ab9992f5ffd89cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc5", 0x6e}, {&(0x7f0000002300)="5599e749c873ff12bae277e2d5027ac7b6e8af5edec249a07e720054d05658cc7c3d17e4ccebd593ef74c49b019f86fa066c575b64dc7a6b9e13c535b4f77a7a745e413de0e7b942cbc20fdfc28910c4c39b0924dfdd3ab53ef5012b7f468cd16db00b011daebe55a0649e207137473d9b4baa2e651fc99d366e780f3f2709ff8b8f682c0001ef29d0d0239498bfba4b21ebd57185c546de5767cc394bb38e2aa88245fd6f41f91cac995d2d1c145b5a4d03a13f8f6dc29c8e9a8e79a740e3746ff5e4b7749d27ecd8d24d43a25c8415f89d63ccc71e456c0c69c6d2fc9faf3dc9b89bbe39c2b39c4babe7baf6ba2e293d07d55e927687c6b99a0badf8dd96ba9c90ab0296824fbf2026bcd56c3faebd60ce7bfd96e264c345bc76f78be3fb69332f3a750ff1e338ebd97e131744ed866f691580bf7908157fe4fe5dc1f301ee9df4324a5bfc96e3fa48c24315a71eca2d636da924f3f94bacee29e7930f9176dcb6bc0032341f4f97bff618dbc1862ce7a1a794010a841f12f2d32c78bf67e786aeb002c3ea772043bd1645d87da8f44db008da4604a28106283d0c21d905f6558449d4ee8510a901c99140432ce551aec56ec5dd4dea78c643ec3f4ffd6f3426a49792c406b8d1e507c4e75afd5819bf584f1993ef6c0f88bc08bc21e6169cae147f95572ced2d1e6f971b41f74bcd816f16bb8b32cdde61870f6c9214bfc66bbe671a8521f4adb5c59d14b5b3e641542f85aada33542ef0e788bc0cb9f97c1e5c865b64494858c11d7f9ccfe7bc6058756b92798d6c4c1c37b726ae1b6dcdea8006b30c3a656a849620cdcfa8e3cf51fad226f6a14945ea770e60aa65cd736314ac361d2406b42e23d0ffe90dd7485e8c159ac27cd59ec29814c76e338d0269ff867480d69e7494d68dd4cbffba6e54de0915de3e56153308f2cb3d53f81d528eeee8c100466e431607ff96329dc9915fa828b2293a4f9e03f41086cffe5302b9c68c739ca38bdd64645d76963a0a80d0d2fcb18ea4ef405e17030f63fde3a92884501b82183ddfab50a17bdb3237878386045a9d0a4495eba8e2ced021f34fc76d85fd854e7978bfb52b80ee6f0cca0dfef78847bd8347433f44559927553639e6f948011f2d013e2a2b1890cff11a82284d79aab555c187ef7c3b7f248618f434a4542d29b7f703f2ade1dd45aad4bfdf992994011f058f4318ab65638060fcfc69a84561696ba64d7b9f58222d41df12431881e74c70a41b5be2e5770b779902248ba5b5c07740ab2c0b5cb9fc6c7f7f45ee89ec1e5992344ec7cded5863862864117421515df64c08735b1d2580c03812dcbb4bf25c6dfd9b0f28a87a7f4d5fdb5dd179d20f941bcfd20dfce6f5aa4ec897f8bcb57db091dc1dde7dc1b830d296e729aee7ac57a3ef81b7584a93b102ca54bd031f651db7727a81d287bcd057758a6b470b0d262ceb0fb322cfb9be8c4ad3e8fe15bd65fe0429f02295b062a0c2fd4119a38a0b2b9a42adb2e7ad855379e9b510a8e90afa4b112e2d7d069917807967d7d4c459a33173864ca5f52eb0c0d6220b8a3f077084c2a1a4b0693cda65bb1e41b6e4a2a4f9cc91a6b8afe5a7d69cfd745150f462593599d5418ac73a768c61d9a969f041eb439f45cf80e22b7cb1f8f2d1f82e675a47782aa37d73328b8053f370b4796003f7ab9d3f5235ac1f065bba0bc86c57f66e40ce813a2df65536e26f7a162d6ce7a8e770060694e82257326f3b6b235b89025f0f65e57b1fce9f356d508c0a845cdbd74dd1a0c246b0d43e3ee2f09f22e04379d4aad9829ac4cb9b2b47356d1c4ea5184a64e664f9099fc5bae50e0237b3bb0e072489804b00e77773db7a21c2759b64faa265835f5251a2305a01a10f3bfd3f905b1032d66efc02f2f0533aab76274366b5008d9e711e84ac6cc06d3c7201957a9c6d62b3ad45259c844af433f17331ad6ebd673362ad79a289fa24e7f992f4e7dcf195dfefd8bc2a76907a1f7bea048aefc3b315b42042b79b31586c7c6a67255dc3b5867fa9daafead5eadc48388c23fe635d0d5c1f8172f8fff8920c685b2bfd3c4e9e556567c425b215e8f74f916e10604c700fd71e2ee01e32894ecc1ff2e79f09b974c80cf3e77b164f67e5bc5c7ce564c00d588b54c6e3c0594c29c92fb058c9275725f68f9cd93ca8953b609f546a11957680168d88b433082c764d93cab2454056db1897c97a2ad109c0b7f4fccfd748e2f9a32cf18b0bfee0531826b3d33819477bff8addb1a49190f25689240c13fd2a2b0021580d0bad26f7f9ca2285580329dd658fba93ec594c262364345af9ad8795433a59e948f95ce195c65ed15e2a31a3c71c2d9426be29a644dc9562440fc8a4e96413818bc631a917819189db338e1cf8177cf5d489e003b70d1a8b73755da2b565eff1456f9ee9dc3d8c3b3dc2c87b6138579ba4f15e9d0f13dbe2e3253b52dab9151a156f1d9024d3f8d79bc3fd71b1c797d0601dcced11ef73caca856b6dbaddec16e27097e00f5fd9f017ef41614bfb084043c451f7c60981e605e92eb2df015808303216d609e1d9826167cc58ef90a4b5211ab113e654995f9b6897894b5302edd5b3d469d01dd977eea6e71866f3b9fc1068dab8a1eac67619e8ee85b9e27a7dd485d409c70062a7a6d7c8c6574757c52a59523e425eb1877f62a2ee974a9ebccb9f145b2d47eeb4a5f994fe091eb57aacbd94c0dc372ce230b07bd3d4211dcfa461bc68379fecc739b20bca97dab74e2c01ed750fcc821e284c5112c865d7e932478a757e537a7d3f21bb823e3aafe42437e2cf974bfbf36ea06f411dea327c829d835385ec0570c2d3fdf77c51498f3a905a221b1496aced4fe43f294cf9ef3cdc8733136fb328504a2f451da4b3d7f32ba824030ec336fd740fc2d344fb00d2502cac23c445d0845b4f957705b46df02882a844194226f3713eea86cfafd63e6fe7d105cef3a2191030a47d32cf193d3d9990c54c023e38fbfe726c2dd77a555c91a3e75143909d710ee41555bbb6256ac035a81c6b743c1c57df53e0fc8ace56d09fd10d10f7c7d63dba8661c5c88ed460cc4f2917c6fc87f3382bfaaac0788c11ade6900b64fc772b7a5db2d3c260345412f15cacffc564de0becefe7c3fb52f9e7403252db215129b7a282f9c4427e6daedab2ad742bc7b6ffbd9723f8dd80197896f61c591d9f44365e4b7f593bab44c82f1a4e49808a78e75c90d2d4556b3a71a4ac9e71e07b6bdd56a542ce791de03e412dfb279eadece4ab0c95f94791158561904900f9c5ef70fb2bdf9ff131ee3bc0fea629f5bfad2a4f8c1fc9dd0eb8a67b3df1ddeaf0e3efb21ea010f30b5df8c17998be28847dea826949b28ad41da9f09e3c1a2d795c4a6d746d1b3ea75458ad6937497acc24eee66d5eebe93c40ca17829eccdb08754770f8961da57f69b7f36b6cac5f5f60880d894e9b7c623d30ea29a0056ce4a0592ce4f6ba285244b298ad06244deafde45dd82fa847353e1b13540353d78d2a365343b4121c4e913c45f1b9d23dc43fc101413fc46457d99af5c867536ec0c5bf1d7212d0b67241f5b0c2d84c09997218587c1a23baf7137b681be288fc8c550fc114dfff", 0xa09}], 0x4, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x7, &(0x7f00000000c0)="feffffff", 0x4) socket$can_bcm(0x1d, 0x2, 0x2) 709.574911ms ago: executing program 3 (id=2063): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6400000010003904fdffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0198050043130500440012800b000100677265746170000034000280080004000600000006000e00020000000500160002000000060010004e230000060018000200000006000f"], 0x64}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x400) r6 = getpid() ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000140)=r6) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c941) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 678.177252ms ago: executing program 0 (id=2064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a01010000000000000000010002000900010073797a30000000000900030073797a32000000002c000000030a05000000000000000000010000050c00024000000000000000010900010073797a3000000000140000001100010000000000000000ef0700000a"], 0xa8}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r1, 0xfffffffc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0) (async) sendmmsg(r4, 0x0, 0x0, 0x80) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="c46a6cc2170d8eb91cf762c68fc5bce994a7849783e2c10aadb55691539fc6ab27d89e0169c65786e2fed70545ab5f366d09c8f5db4dee6fde96f2f09a6ad18a615084ae115b6ff497fa838279bbb1ce330c1f0392d2d4a443112de25e3360bc4392216b300e25d733e059f67f3b5a779461f7c30656e2aef3cebf660a926ce3b6674c78828f8ef66d8bd1801759696edf255e06dd961b586d478e", @ANYRESHEX=r0, @ANYRESOCT=r2, @ANYRES64=r1, @ANYRES8=r3, @ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRES16, @ANYRESOCT=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbfffff7000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES16=r5, @ANYRES32=0xee01, @ANYRESDEC=r0], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000) (async) sendmsg$nl_xfrm(r6, 0x0, 0x48000) socket$netlink(0x10, 0x3, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) 418.931914ms ago: executing program 0 (id=2065): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @empty=0x2000000}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) 414.412322ms ago: executing program 3 (id=2066): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) recvmmsg(r1, &(0x7f0000003bc0)=[{{&(0x7f0000000080)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/159, 0x9f}, {&(0x7f00000001c0)=""/55, 0x37}], 0x2, &(0x7f0000000240)=""/129, 0x81}, 0x8f27}, {{&(0x7f0000000300)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000003780)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/186, 0xba}, {&(0x7f0000001440)=""/4, 0x4}, {&(0x7f0000001480)=""/69, 0x45}, {&(0x7f0000001500)=""/173, 0xad}, {&(0x7f00000015c0)=""/22, 0x16}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/124, 0x7c}, {&(0x7f0000003680)=""/202, 0xca}], 0xa, &(0x7f0000003840)=""/47, 0x2f}, 0x1200}, {{&(0x7f0000003880)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003900)=""/214, 0xd6}, {&(0x7f0000003a00)=""/69, 0x45}, {&(0x7f0000003a80)=""/2, 0x2}], 0x3, &(0x7f0000003b00)=""/191, 0xbf}, 0x80}], 0x3, 0x10040, 0x0) sendto$l2tp(r1, &(0x7f0000003c80)="e7b057de722504d2e3808a7489601d0bee7c911d2e9d9d6ab6b210b8bd700f6ce67ba2cf6093ed7bb8d2e220ab17657c16ff4f7c1e5270dc101b0f866a9b7502317e62b172b6f377618e3d0e27a175235730aac390db7589b8c1cd500d40e03187df91406dd70d23697c43e269ecdfe4a390eb88e0f23d70b3f4", 0x7a, 0x40, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003f00)={0x18, 0x16, &(0x7f0000003d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x0, 0x4, 0x2, 0x7, 0xfffffffffffffff4, 0x10}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @ldst={0x2, 0x3, 0x6, 0x5, 0xa, 0x8, 0x8}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @map_idx={0x18, 0xc}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x4}, @tail_call, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000003dc0)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x40f00, 0x4b, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003e00)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000003e40)={0x4, 0xe, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000003e80)=[0x1, 0xffffffffffffffff, 0x1, r0, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000003ec0)=[{0x4, 0x3, 0x0, 0x5}]}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000003fc0)={r3, 0xffffffffffffffff, 0x1e, 0x0, @void}, 0x10) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000004000)={0xa, 0x9, 0xfffffffffffffffe}) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000004140)={r0, &(0x7f0000004040)='*$+\'%^@+\x00', 0x800, &(0x7f0000004080)={@align=0x101, {0x3, 0x0, 0x10000, 0x96}}, 0x1, &(0x7f00000040c0)={@_ha_fsid}, &(0x7f0000004100)=0x9}) sendmsg$qrtr(r5, &(0x7f0000006900)={&(0x7f0000004180)={0x2a, 0x1, 0x8000}, 0xc, &(0x7f0000005740)=[{&(0x7f00000041c0)="606ffd93cc03cfe5aea259e8db3a3d68b421cf5be8dc237b35a0dd9bb012b028b3a4c29151c5089da7acc43c87745a5d1e3cfddf39f169ebfaa420b6779b1973619954bd5c0dfdaf8cf95b614c15dfdeb71aed0c5799edfd06a8a6a7258df0c7eb63d7bac7b6688dc32dd6afabb67a301f8ef80de5e6f4337110bdae0e4d64fee4a8d84b7490c17fe7afb5bf72af10a4d7d526d553fff8e91d2f8928eff0e31ffa3ac59ffdfae791a20c67c7d0f113fffcadcff9c4f82a7d3746e4293c11000357cd081cdb2a0582a05c67aa5374b1626d52512483ced014", 0xd8}, {&(0x7f00000042c0)="04436e3f618f7ff2c2f2457660314360150c0fd3c96f7c77b178d0a9377e7c1faa1bd800cc97ac3dbacd3e60acb03ba9761ac2e790509dcf1bc3f73abcb417dc27445384212f9ea78e73", 0x4a}, {&(0x7f0000004340)="649c1ffcb574f139baf69fb4bebbd87a7ecefa8051a4ab76efeb70fd2218484efb7ffef3e0bc0e0db9228338e12a5523f3748418806258249df6f343c5375a8ba923f607e5974d1d28ee788f9bc2e8f0facf0987782d5f2d743cf9996990ff66cc48f51859aaa2dae924c103df373dd537b81142be5e2abbdfef81d76f54816366429781000b0d22924dfe35d95a97df3e39452ad4063a9eefe9b666c9dbb42450f31fc3e21d1b31913ef38da3b1e38a88685b48e9395d02254003b9070f9041964ec44322094b71bc7eaa64fc", 0xcd}, {&(0x7f0000004440)="9bcc801a90b980256e7de01dc2504994c50177bad0c8dcfeb5ae561c03a7ca4cfc00132a838046c2eec78131fb592fad77979ad2108f7ba44f910de7c92caa73f233b4f6f9415dd4952eba251a748607f74c71da5b955f80fc366cb6b62468ada0f17ffc966b956e7db7b64f3bb10f03c64d5d5f52bdcb0d466c52dc1fe9b38f2c87bfa61a96c000c2eb7fca54a45f90", 0x90}, {&(0x7f0000004500)="90fbd38b7d69711c338bd27bfa0aecff6cb4731e03743ee21e10dce7cacf931a5e579d3de1d6ccfbd8715d52870b0ce9bc0ff0d3f9866a08c5eb41e85a0d15e9f1e14f365a2ce7f79c4cbd0f25340ea12e11471cffd96a89671e6530cb3a3e27cef8fade34d74c1657b9fff9ad711f77b333052945ab821da85fe366059c0393510ba3b97cd23d77a516edce81daaa2bb3cbd1cc33ccbdcb3247082a6aa963ab679f34e2b41540eb04ffcb6d31ecc29bdd4050f00b234154ff2d408cdbb65249c006cc0acd500de032f5c3ac058417f78cb25b61f62c39f139f516d019e8496899bf7dfbe50c4cd37a47756ec41ba375a1b2d7dffaacedfbc52685b7172c4c83741b0bd07af6629f3d862c1ede5e973f5d35a6497b69da6f3e4cd420767909e0e028c281d826f776c4486600db3e54ac9ac1b0c1dad8ca0fc110cbe9fbaa0214cf545c0efce8fef9a487d432e22a169c621e407cab972680602c4c24db6e2927fbd8b32205249b6e689f5c3b68844c81e62d22b5bd23582485ac3b635ff008a177bf4028bc93a9b7f702f6c3a53fe12d68574642a86689a34080ca111e74fa6d0ed1e7025e71bf4b6fe32a93b2d304ac94a1fc3608f419faf314900d0380b005bee78cc1ad89cea650d58fd028a8376cd97a86f2784b312aa2823f587106fbd1c8558f5917a58356f4e1bf63cd1afc74ec190540eaac8d7dced37623e55bb57586302e7b2e8cb9d4c5f1d1f8a94be0427cb579df65a8b187b9b20c34162acf729af3942646b2d6912663b481c068f806764cbe31fe8fdd47b275576ac7299bb3ff588cbe07462ba62fabc35b158269a92e66145cd1e767c94e48e764cfa136a79835aabee61db3590c32a7462ec76e96dc6ff7b7964307ba7e4586260afc9eaad9836a048c8a1f3196e3fec26f6cd9c5b068933aae269b6ea339ea51d0bb28d30eb78ea06e8f5d25f0fe8ff0462d16287e56ede7dcc9fb276ad414f6cef1fbd3a48e80300e550a70b3f30d3e7e23f76438c311d16d2fa67606333c956d2b3c89787d3302c5b5c2d6409051c0321b32af9d9922c225d470b59dfd0b290d31c5631320fcba552a98927d9940a80fa7f793b6d621399f70e0b902057eadaffc95a04849bf46307289e37d7d5e11b92e225c24f6558b5380a30f863d33ce6a09d192c5f447a33d4b62578e27e31c856a9e3d66d638876af542f0ccb462db886106dec43a368e533387a54f7b67c5c267e194dd3f7f2528c18df1a5e0521ec038a74ebf9ef0cfdd8ebacb03e54561655ea8396b8a4545dd569ae14162cdfa6d7181a9190d778f22ad1f3ff6776ccd7be6588af24f343a379510bd513c226b5f705411013278f30c783763c6c60f7c7a1a72e100c6443e546779901cef566d2e86c56f2479eccd6517e79e79fcf7e2d44f58a5e1bebfdb694f5903570ba270342c894181849b8134e520df98c891befd12dd5a05105704ae6e248ba60ea74429bfadb57b4298cec26e16318e91d6a756e7696f1bce3b3892619d2c66bcd6d018b5ffeab2b4506c30d7d697f045a001e8667ebdabcb343250cbc9312a054ac9773be0246e9452671323ca07e19ead0c2768a482933d199c3604bb41575caf7ef092d97c877166c5d8fe52b3555a621286b83e1d9b7dd0ee5fbad66c415b4f0c8a0112a792f7484c8c08fcc98c05bee27dd71aaf0f2d6948778a776d88dedc3b6eb18ef0c09c0e1a57eaee1ceff9835132ce063080f8e90f371333b6a84cec197919c54b646bcbd0c8749810731bb1c6d9084c76d8b7b49af301858bd7634ec79dfd22675d6f5f2e6bc6744902e7fce89d4b5507976f6c784a300c8ab3adbe5faff8e582e98541655ab8dfd87fb44c25682124e5798c1405fe69e51c65cb2744d29270e1ec4ed101ed5437debcb77c09eb4b649d83d5777641a18d7495fc6fae33aeca91dea885895ce95d46cb6bae5a706ecf97fb8fcdf1d7f4ddcc0c604c5c08bc09eccb5284490fc0e738beb66e69ac13effe72ddfdba457b0ed8f08829cc1c584a0311e2210e39c11164942577d577293e787dca7eb242cef8c97eefe1464483b5dfea46bcbd7bfe2fc6e9efa49fa350456b303fc237dce4dc94fd42174389da1cc5cf70c8c79df1de369beeae5277215230d5a9b1a8276355d97240151f375ab166834f47d64813407c034330c9aef58714b791a997c37b84c68625525c59f15c563a106278f18293d250c22a397a21d9e6492dc395ccd449fcc8d5217bac2d90485f65597a1ce6075e195cadfc932b3851a0ac2a3a5047588eea5e27b135748ce5221f56ab5b6180263d26ba6cc01008cfa235ac33f88175045472b0d71a1e234ada935d9060ee256b5ee207a243722b24bb078a16aaacec4ef49486861eabfea1b2c2492e911c13ff1d918a12329a15f6ce461572d902f33c6adfeeee10584ead0dd03192d50cd5da682bfc08aee905481c04e2f3c1363f8723986d94317dcccddd96059a352e9831ef5f549efbc7f8b7439f5f2781735d2091eafb395389c9e4281df63db1232de2de312392f7510ac093ed97bf61bf81c95adf7f9f7b3ce648b1c5ac0181b29873c00976852a5f22dd4f231f998b24393c1f3ddca352406d3d5114fe8c0965e4bd177a9bfa83f8a4690013004d7ba271dfc167234af9b69395c000da9501c5915a76e647c4fc8b7c24558e98a1dc67eb34d3fb856964a593f155e39b06ecd75af4b8a19718f83e039dd7ef995bf9450b8b368526da35b35418738d09786be28aa805719d72d18349817629388bcf1e91a8fb8d3fbdc0fd2cf39e53cf715b3749bea818395f5de0f0493cdbc20986b3d8e23bb48804c5b8d6d19ba14ef1b3a96ffe3e910219a8207b3faadb514b16440689ba182c71f646cb0a9a64ad99e993d8f24508c07362910247afa7d0390caaedabd2c0776815ac30f40650aa13bd91866ab9ff7e23efc0a8168774fc88e65e4695b5d84d005f4725f14e18eabd8b6a5ad42bcd8f53c4a57043e702bd25f05f3e57fe2d99d355345e27b948ea4860bc1e7423f231d13f81cb4a266a979d10858b177fc843a0b659e1b634b7068923703a3cf6fd35008b3d8cdc1f197868db36d422cada1c4346898663023069b54101a324e7e381ba056d05f4c49dc85ac0c37174062d23d3e75e696ba1cdd594ec5044ceceb6f900cec9cdce294b87c8f3d03b9e3058ef537d812acadd9a6b22f7ac1e36c54257cc77f1dc91d926b7f99d9ff76493c51720c5a6c22e02f409e2672943241b452b5f0c0c3c9950afd6879bdcd043d134f7d0ccb13f0f17e03aa645e18555d7cec825521bf54df8e8436b4afd18a9032793b0a0bc8e86ad8d0f32b67e9036f50a7649c857ff6891ad406c31e98aebbf2606e2dd8d899961de406f491d421d8822c090255ff5f21451074b08e2857954a392ac0e25c97c10d36b184fa8f94b21f64d6d00d93631da545191ad5cac5979d3a08740f97bddf11da682cdbff3ec9c65d5a03beaf28776027ee458b3e1658c0b2e7b719902c6f49f33c91f511de75b4df2205f6482bef93a6eb1fbd88417ca54205ea661ba22b2c55274a04ec4f440c770e892811e01b976f66567023855bcec1d8c80cb09501fe39e22db2847fdd53137e9a30e2839573a7fd901f9d23fb15b02eb5c3800dbed202131bee59b785c0a9454b1bcfa7bead9e9c1591ec4c00960d38edd28ed90ef46daf615b9fb563b05413cd01bfb3961fed82577bd084a4e217c6d8f93629acd3f4629000adbd0f4809a6974dfd5384131174c1936c914ddff8bd53d5654fb42bf64c5dc8f4c3e78d2c6816db73b51f10c5b5277963eaf236ef6adb425cb8549c511ddfc0831d8260926652db13c63e0af4396e20c17f11936392ad49a11abcf614bdfa177280458bddd6dfd3ce329308b3d444faa689daf9eeea879401ab675ffc3912136147b15ff55ab9c323ed93b2b2e2daa74718ecf5c0ab67118e42032232c37660b2720393ea723fa85c0ceeee73d5ee64c9d4e2bf9051e470c7ac9062dcf6b2946c7a1f5ab5bd0b52907292675e81502fa84cbd14b5e12d5dc87d81656fbe16d78548903602c4a7fbabac7b6a64078950d1d8f1b532606e29349fd2d6be1404fbbe2248f7a808879cc2db24aa3c6e206d04eac05eb51661ab3efec197bd75d2e9e8ba0e2a625ddf133a44de4852baec2f5394f660c82663dfb3de9df003f12d107cc34b99ab7be04b38e5c32893143c686f4f1ff2deb04f3b74b9e41211e8cb3242a9f13d9c75e8ac98d26fcd6ad54c126f07ca8ea6aeb93c7b9f3fd9ca48ded48f68a93fd0bee81b072f50ac79171eece8f8e4eb58795a5171030f7e1adfced9d610ef4a4fd46a063a05b23b10884eb4871b32b68b918bcfc4bb56e21b15cb00434f89c1d196482c9cb730474decb44ae5e91f5150901326f4bb9ee79e98964c6eec4924134f093f4de414e0cbb63e3a6cd117620edac15890bd9ab55c91ba1dc0bf3c0533cca150acca138ac44e33921fa947f9266ddc179a71ad36bd585c8a149aab799400222152fdac5033c307bf25e9500b5350305dfc49394bf7b4068be4c7455a749538239359fe7b726b6d0d9511b5536074752674e5b9c79b3324ea257e871999660e4c8ef8ccf596d37c27c38089f9eaf05b4dfc5cfe5619b89e30e65694e6e6cd8a3cf18aa0058ee1b232bf719f98aaac0134c35bbba1ca48d7920a6b697751ab446e27bf1df3b789008048e7b442dcfd1e1b20f6fbd6f90a9fb134cc97109d5b7549f267b40ab65000719a1e3978ac692a59d804172c7060001582a73914ac1a534714987e51da693fdd555bd219df8a509781410647a44226e0ac6074f1d43e731d658f9c0e8b4b0683e2b36ecc57284d68fd4d3ce07186d2901c3f03fdb631b06c9a3ce90bb81d77f4c6d1af615ac16dea9ed4630c1e4aaa8d07c62f62d00b5bebfa77b39d437114d854d68c77bad2be6cb36620ac9f87671b2fde195d6bf81137f1998fe625cba029c4f5dd4c2ffb014d4b40907a7b69bd64e1d1baec47ba138582daa5510105d7f1c5ecb76d1d4a9d4e0b8f7ab406bbf23f060b1b4b049af74a2a96844ec606b146d12a6e3837a0e6b9180bc12fdc72bb433a3a2550c8c5a9b6ed90c456ac352d0eb8ff5b3dbf4697e0d932318e5385348fda335e1a278484317938b080339f5cf91e6782818e067bd44a14169921993315fe349621ee39909a9d438c26dfe2f6adfbef26f0935ffe47c8bc61b714564b49c36c7530529f54ea203d848add25d1c8792b80649dc958a528392487945e59d6d10ff5c2a053f0abcea3c52ec24c85076e1f282e4d9153ec99952d003f0d8ee58780dbb0445c336b36d6f0f4eac32986c467d73fbb380fbbb9aec03d4e8245c4c4606f715c522c643ae7a0d44d7318e35e41ed1e4c88181fcecc169d151781ccb90b373bf2457e3097fa0afd1f63b99750cb5e7bcf89b16c2fd45e1f81eae0d6b56843f79e45ed65b1e4f167f358aa8ed3b43400411413a613ebf6ee1f4a6603655de631fb4983896b8947c06015c7f3f179cc08b638c9578d24ea8ad90b31676477eee43cc27493835807ce1232197c0da287731f0c54b191891a75316f943b7a82ffb45c08a9f0bf8cc7281714c7e5680cd511a98ce93cfe375a04faed4b546fa2303c8ee1107d4d968afee0d43baf32b329d54cf0eb81fcd4fb7970e93d3167e300fc6cb0aeb97c3593b85b35817198f64d22e881c530b873c7628bcd5335b5c8558d616ba4a9f8a2aa885ab6770c9673c1ba32ba3ccb389df", 0x1000}, {&(0x7f0000005500)="80010a97db4bd199864128772596a1e29ffe6934582f20eb0b23196b8969a84768ed9756a18ca63e0c1b305afca83eb2214a5dc82a473f2af8328b6526f7cd1b0cd9c609ea08bca6499a670c93d07e3f73c3bf02ccaf38c98878f18e63d4e8c6244ddff1cb4d093bd72e3fe1173b0818a520281c2a02685138b9caf5477e440dd8543b622f34038c8c3325255dfb6aa5e7e5d2ac5c0bf0ae3e97332e11b1abd4ba49218b6170ca62dbe6275aeb79da447d659cbf233ce32fac55a81643fbc8823ea29e3d8e5080eed8b78d578fbcb6c778739108ee3a45c5af87775edecb80ea67f54de0e26afc23d7be56e4cfea49", 0xef}, {&(0x7f0000005600)="c61363cf356ca10ccd31d2a4ed6a49d581c8c36621e3365fb7f0dccc61ba3ff7e3fd1abf24e7d850da7b4829867ad0f87776ef5c75e421bf90887bd715dadfd43314ca9d402739c8b51d5ed090620e6e9063bf3f0c62f03be106726a", 0x5c}, {&(0x7f0000005680)="41bde5daced03e28468629756421f75b3f5473758cd48fac91f8913e34ca235f9a5995d98845a5519a2c84c3105ab6261077ad5ca4e6c72893d7190bc7b4ceb5c5907ea3344644c6ed71e4933fef11061e3bb00f7cbf88e7d54fc7ab17b30753fa61be4bedd456f754b87502980a8d5bf3ac1bad66090a79e48a2992241eea19fe7cc6b4bf404639f1d01efee2d3af0a2f1cc00433facf65bb7f43d05f3dcc68bd751b32fd02cbb7a6a2", 0xaa}], 0x8, &(0x7f00000057c0)=[{0x1010, 0x108, 0x0, "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"}, {0x80, 0x103, 0xfffffffb, "0220380efda3bd60ef42b1eb45ff114dfc19de0729af6eb3985e1a7a17b4e6f3edbd925c0ee01dba64eceb031f00a27a65401878142445e753529a39822c0f245ca0902d1ab731911a4a11324e3b54fb0a45ac6fa629e038e4018daee1454064761c6876490b3056c266da29e817e0db"}, {0x20, 0xff, 0x7, "0a4f4b07b6aa3f264864"}, {0x18, 0x1, 0xfffffffb, "b8c5dc50e8"}, {0x70, 0x112, 0x6, "c50a91a8befb25173c4e00f571e3400e863b5556d7a0642884d9bd3bbbbc1eceea1df54b936731dbc37d1c017166188d8f647b782f47f3c67f7a274a7b71495c0de14d8b0facd2e36b5b59c14e44d6b5fea600e8d13b91cc1d1e"}], 0x1138, 0x1}, 0x38) sendmsg$nl_generic(r5, &(0x7f0000006ac0)={&(0x7f0000006940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006a80)={&(0x7f0000006980)={0xd0, 0x1c, 0x400, 0x70bd2a, 0x25dfdbff, {0xf}, [@generic="39020fd9db0c244da4252b822260c8a0dd43fd3c15ff947c1323199bef20da732fbdc4d6492572fdea188795221eaabaf78df48387e061c4f39080ff9baa84729503a4894b4a7e64d1f719b72fe449922f5d51fba57dfaaa6b509fd1e052ad93ab86e840e29c5e061eddaacd86efa7028da5b4a6ddf58ddce40b300082f1ed05e08117421568294fb12e8c0f4884a4d1b00e1e2d9c97d196d81fce1536a44cb3e7ea5c9a29e4d5883348ac135e58d89654f9fd7123f50c127f"]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000006b40), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000006b80)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r6, &(0x7f0000006c40)={&(0x7f0000006b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000006c00)={&(0x7f0000006bc0)={0x2c, r7, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000006c80)={r5, r5, 0x0, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000006d00), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000006dc0)={&(0x7f0000006cc0)={0x10, 0x0, 0x0, 0x80000004}, 0xc, &(0x7f0000006d80)={&(0x7f0000006d40)={0x1c, r9, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0xfffffff3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x24000004) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000006e00)='ipvlan1\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000006e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000006f40)={&(0x7f0000006e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000006f00)={&(0x7f0000006ec0)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8, 0x7a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000006f80)={{0x0, 0x800, 0x10, 0x4, 0x7fffffffffffffff, 0x7, 0x800, 0x7, 0xfff, 0x9, 0xeb4, 0x8, 0xdf6e, 0x80000000, 0x2}, 0x18, [0x0, 0x0, 0x0]}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007080), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000007240)={&(0x7f0000007040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000007200)={&(0x7f00000070c0)={0x110, r11, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x98}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa486000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa1c}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc8ac}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x57}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x110}, 0x1, 0x0, 0x0, 0x4080}, 0x44080) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f00000072c0)=@add_del={0x2, &(0x7f0000007280)='dummy0\x00'}) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000007400)={&(0x7f0000007300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000073c0)={&(0x7f0000007340)={0x58, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x27, 0xa8, @random="32a9b184e7b6007770e09ec74ee8f77f46b94ae37460e825c5a2bc994aa708cd7940be"}, @handle=@pci={{0x8}, {0x11}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008844}, 0xc0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000007440)={0x0, 'wg2\x00', {}, 0x7}) r12 = syz_genetlink_get_family_id$team(&(0x7f00000074c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000007500)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000007e00)={&(0x7f0000007480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000007dc0)={&(0x7f0000007840)={0x56c, r12, 0x0, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r2}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r13}, {0x24c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4901}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5, 0x1, 0xd, 0xc58}, {0x6, 0x0, 0x2, 0x9}, {0x2, 0xa0, 0x4, 0x6c71a825}, {0x0, 0x4, 0x4, 0x5}, {0x0, 0x8, 0x89, 0x8}, {0x1, 0x10, 0x6, 0xffff}, {0x5, 0x4, 0x9, 0xf5}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x56c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8e02e63edd0284f2) 338.21472ms ago: executing program 3 (id=2067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e00000001300"], 0xe0}}, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000200e10000c5"], 0x24}, 0x1, 0x0, 0x0, 0x2004}, 0x20000800) 221.911038ms ago: executing program 1 (id=2068): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x4, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x1403, 0x400, 0x70bd28, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8810}, 0x448c0) 220.929868ms ago: executing program 0 (id=2069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) r2 = accept4(r1, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) (async) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="78d8f92dbf64605cdd118f48e23e98c60b", 0x11}], 0x1, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4000003}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@remote, @in=@broadcast, 0x4e23, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x26d, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x8000}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r2) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x8c, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) (async) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) (async) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f00000000c0), 0x4) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x20, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4000) (async) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x8000000}, {0x0, 0x0, 0xc75f}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071121200000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 185.458355ms ago: executing program 3 (id=2070): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x0}, &(0x7f0000000080)=0x60) close(r0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x500, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) r7 = socket(0x1d, 0x5, 0xbf) ioctl$XFS_IOC_BULKSTAT(r7, 0x8040587f, &(0x7f00000007c0)={{0x8, 0x4, 0x7, 0x4, 0x6}, &(0x7f0000000400)=[{}, {}, {}, {}, {}]}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x598, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000008c0)={0x0, @local, @dev}, &(0x7f0000000900)=0xc) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x20, 0x4, 0x9, 0x7c, 0x10, r8, 0x1, '\x00', r9, r10, 0x3, 0x1, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) ppoll(&(0x7f0000000a40)=[{r11, 0x4}, {r11, 0x4000}, {r11, 0x58}, {r12, 0xd11c}, {r0, 0x22}], 0x5, &(0x7f0000000a80), &(0x7f0000000ac0)={[0x3f0a3fdd]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000bc0)={'ip6_vti0\x00', &(0x7f0000000b40)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x95, 0xc, 0x20, @local, @mcast1, 0x1, 0x40, 0x9, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000c80)={'syztnl1\x00', &(0x7f0000000c00)={'ip6_vti0\x00', r9, 0x29, 0x8, 0x5, 0x7fff, 0x11, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, 0x40, 0x1, 0x80000001, 0x7}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r10, &(0x7f0000000f00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x200, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x48a08d2cd59ad1f}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000f40)={'ipvlan1\x00', 0x2000}) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r16, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="84a931188904"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) sendmsg$SOCK_DESTROY(r10, &(0x7f00000015c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001580)={&(0x7f0000001100)={0x468, 0x15, 0x4, 0x70bd27, 0x25dfdbfe, {0x2c, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "19c4dda67e5ab05a9fc9678cfac19ef3bf1744e70071c48c6c572ff9f3641ed5544fe86ef650ed5d11d77970870df24e30e603b6963d10a04765a1d35c6549147e03cad2af8bf2c97f1cae9c0919cc690501a904f02eeeb19125179ce227c03817db553abde4157c5163551883fe5718dfc251c43a3ebb343718d5"}, @INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "1c116d5162b0e35aba125455541c9b5bdfd8cbd8dcf802c9a70eecce919a25194441afdaf38cd66007ec7a9c5f8af2915c07eeb8969247140e1f57f7f0b8d82e895bcaff69ba4d7e08d22344933ea288ee12dd92a001fe8a4cbc47d39520a95a78ff84dfb2a2a6c90c3b9b895263f23bdc0a85c5a2061cbbe6b319da6bce060a0b8c207eeb6541944d8347b099d936cbf8696c8bfc27f23c64fe1fbc8d8f67962d4dc231772fdc212319a2bb8ae0288b4ee33ead453b690440305fa909eb5c89e509c673b1676f4a17a18ec12a5730"}, @INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "3018d9c36d6725c4bd82d01ffe69838660d6be86ff66ac9df09ed1272af09b8a1a179177ce522e5ee98b6fbfa4135ba52d22b0c998d1af9695d31e7d7e84cd6411c2aba578619d5efec825f2271678983a7068c2e6142e0450a6b98153e13d6c5b04de3efe0d3301fc980700fff67775510099d1deacbb05090f3b6a07d85d02af68d1873758df23d17ae68fcd1f567aaf036ae91372ed4c46db00c9ca4aac6daec43f9572c416ccffe79c6df4948af63ba4b1d49dfdd68dc3db001badf39ddbba116e1e46cc5bc922016212e695c64d8e4be828f9e380cd6f6e6ca6e338b8"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "e14c656e3fb9fc0aa41ed8415883a875092686e18e391306a6367ad3e31ebfe89e5599a671f4a2cfdb734a3ad0e241506829c3b77c991406feda4712cc2eee7ff2cacb7245eeb996204088e82bef0be7565f20ac1a7272763a506b457488529cf436f9ab13d7e8502d0fc02d90df5941827a69c703c9cff617456649cb95805fc93bee3c68820ebb11c652e9ad683457820c8b19dc5b59c5393532aa89186ed9b3a85517d82b4cd7583b0ee50922e3dc8dadfcbf2d59be"}, @INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "ab78d6e204877260204278a43e38430ecb2c100e24a0be9144a35bad2b1c3d50b3d12c94ed8f65f2655be6ad5c5728381940428b609a6caaef74ef7836c84b1998a46fcc78a077c9e76b2bc2eb5a4be94cb9984033b057aa1cc482d04625f4fc3e37c15075f58ceb99c53484919cbc6830a20798372ed071"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "3d7735e1600df5b82b4ea9e7d738760a2433ef47903b7cabf3fe94d2f743667cf2ec6c1f6b91604a7c36ff7b39e9ebb7da908b2ae05e1e8d29703c3402ea0d40d907544dc1674637eb9722c7387a9da53d085295e70c662c8d0d8facfe579be16a7a25368685e0f517899bff6c20df62555b52b04089493d293556aad0a5bc4cd191af9b4479ebabc4e42081d5d33e36bfe43b918d04e6542d2be1"}, @INET_DIAG_REQ_BYTECODE={0x41, 0x1, "224dca3944102139c691439ad3237d1cd721917ee799f69ea05c6c3444af0cc0f9c0519921af3215533abd9445f2e5cbb503ac175c19be7c7893b1b6d7"}]}, 0x468}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) socket$unix(0x1, 0x0, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r7, 0xc038586b, &(0x7f0000001700)={r15, &(0x7f0000001600)='nfc\x00', 0x80000, &(0x7f0000001640)={@align, {0x0, 0x9, 0xffff0000}}, 0x80000000, &(0x7f0000001680), &(0x7f00000016c0)=0x9}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001740)={'veth1_to_batadv\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000001800)={'syztnl0\x00', &(0x7f0000001780)={'ip6tnl0\x00', r13, 0x2f, 0xdc, 0x9, 0x9, 0x1, @local, @empty, 0x1, 0x7, 0x4, 0x10}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x20, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8051}, 0x4004001) 144.71672ms ago: executing program 0 (id=2071): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x4, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 144.063006ms ago: executing program 1 (id=2072): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async, rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="85c2470bf94a1414d9fadcb1150ebd664ddb28717f14f93b30b7a880fc3c7da67660c2444e567711d8dd6f3f9b5070a6064098e7", 0x34}, {&(0x7f0000000700)="7140eaa452fd87ec43360010f2adbf42b351ab6fbe7c4d5a6cc5c66ea1230435b6783663439e80913bbd795149bf81d5b89b3003f6a01e6ab751d518f8b626e59eeef9e6c897294eca08a234a6ffb08aaedc858f22320294780d16946cd3ce1a4301bd93b469cea64e0a488af452fbd9e74740d3c08fee858826fb801481f98118b0a8561f5bf5fc0f7d623721140fbef2", 0x91}, {&(0x7f00000000c0)="a0d77265465183d6e7e41d975203deb1b79d2f4fa4f3bcc3cb8892515bd1fe4a8f6ee1226dfb619c44e0727a90e50f3bb5b533d5d315ca68c62a54f46740aa0c41402373ab4f0f0964efe4", 0x4b}, {&(0x7f0000000180)="4a2d5453dad9a3af6dc4b58e3e64cd3355f32e3ce6db7139330eb0b3cd13c88804d8e5f373b1d431e52040449af57529bfce22ec2c533434907af5a2de3c616bd7a3a524106eefbbcd5d69a5f72a9e42372d8314f8b3d4fef9d09f64212129645ee733ff92fb0cedcdc82c76b50f75a9f6e98358e05be4ea91bbb8041d039f4500cb117b8cbf40223e82f563658469ab293fa36329136aa9dcaf67193f55f1a17a66b3cfedb92a34e6ee7933c932e5f2a516e9b40ffc371825327ce2b57b", 0xbe}], 0x4) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000840)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e340a00000025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736f1caacc2bbf1194598a652677efb930a5b6ee292c57402", 0xda}], 0x1}}], 0x2, 0x2090) 58.815145ms ago: executing program 4 (id=2073): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@newtaction={0x2c8, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [{0x2b4, 0x1, [@m_ipt={0xe0, 0x7, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x2a, 0x6, {0xb16d, 'security\x00', 0x3, 0x8}}]}, {0x81, 0x6, "3d0155179af52c218360f63b587b119bad958e13fdbef37483f1f2edf990373f1d7af2b17f247597099a981c0d86da1867e12c5be84d558a41eeaa0b3557e239bac0e1583360beff1ca128be336489bdfc2a0e7d3aed52c86121b03ee2a4749a645e0e58b3a42c39d715850ac9db2347e25ec5f4a6640029c120edb0bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0x1d0, 0x3, 0x0, 0x0, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xe2, 0x6, {0x5, 'mangle\x00', 0x8, 0xe3b, "0ebc4893e1f25cc6758583874b993cc4b0e64fc98548df584a50d6c4ffe31db182ba08da381c2ace7dd7076bcc3cc469cabac8a8b750ec27afad699584796e98144fec955f7e2a1bbe13e264e322ab42fe923a78a995d4e8ba45234c72962fe9b1f88194f6ec0e329944a7a46e892fd9761261c6d39c254cee2e7a77b25f50bfc006736e0491b0399ee06cf0b254f530f453312f55133e146a27399643e60c6738de50789f8c0433f2dd41e022046ff00cf0e82ecab1f7fe"}}]}, {0xc1, 0x6, "b45c3e50999e0ff8b7cd267bd965c50b99594ae946a060b65c67ba37c0725f48dfc5713acdb126ac4fea463fdc8a72f0d8febaebccde90bfc89a2328790a2e1f3e4a8ec650f40dd2685113c4394824707942abe9ad835a1f6128ba736e738d0124901995773000610ee900ae766d905ff4cba66c2cb8027195714c33e2b2dd00a1ac21a0136f9dce38751e61106037d11a50f191c9c43e9712bac48b8926c40a45232fe7f5551fe5e22a68ccbe72dc6cef4f6eba13919d8b37efe0ce2e"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x2c8}}, 0x40c1) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/108, 0x6c}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}, 0xb}], 0x2, 0x10, 0x0) sendfile(r4, r1, &(0x7f00000001c0), 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r7], 0x44}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(r8, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x41, 0x1000003}}], 0x10}}], 0x1, 0x20000000) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="4400000010001fff000000018000000000000000afb087e9812fae8a8b04a7d1b50f6ed7ae72534284bcca5837344da70d34a037702803ce7f303c1dc04dbd98526b13fce343f2e9f48231592cf8fa4f6a1d82cda4ea4eb3dc635565cf50719e4cfe74d32e2f932636a1635a2e070aa73590", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="1c0012800b00010062726964676500000c0002800500070006000000"], 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 22.546074ms ago: executing program 3 (id=2074): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="fa", 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) 0s ago: executing program 0 (id=2075): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, 0x0, 0x10, 0xfd, &(0x7f0000000240)=""/253, 0x40f00, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000440)=[{0x2, 0x2, 0xf, 0x2}, {0x0, 0x1, 0x4, 0x5}, {0x0, 0x5, 0x2}, {0x4, 0x4, 0x1, 0xa}, {0x5, 0x5, 0x2, 0x8}], 0x10, 0x4}, 0x94) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cubic', 0xb) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000380)=0xffffffff, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff8}, [@generic={0x91, 0x1, 0x1, 0x8a}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) kernel console output (not intermixed with test programs): 93.261609][ T51] Bluetooth: hci0: command tx timeout [ 93.280532][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.291203][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.331095][ T51] Bluetooth: hci1: command tx timeout [ 93.336686][ T5145] Bluetooth: hci2: command tx timeout [ 93.337215][ T51] Bluetooth: hci3: command tx timeout [ 93.347118][ T5991] 8021q: VLANs not supported on vcan0 [ 93.410989][ T51] Bluetooth: hci4: command tx timeout [ 93.470579][ T149] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.502723][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 93.515974][ T6000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13'. [ 93.540460][ T6000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13'. [ 93.557072][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 93.587435][ T149] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.621404][ T149] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.714491][ T149] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.824915][ T6006] warning: `syz.2.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.977250][ T6016] geneve2: entered promiscuous mode [ 95.430691][ T6078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.791548][ T6145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.34'. [ 97.055695][ T6150] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.35'. [ 97.323303][ T6169] netlink: 'syz.1.37': attribute type 10 has an invalid length. [ 97.368870][ T6170] netlink: 'syz.1.37': attribute type 10 has an invalid length. [ 97.412058][ T6175] netlink: 'syz.1.37': attribute type 10 has an invalid length. [ 97.459691][ T6170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.473536][ T6175] netlink: 40 bytes leftover after parsing attributes in process `syz.1.37'. [ 97.510178][ T6170] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 97.579441][ T6175] batadv0: entered promiscuous mode [ 97.587471][ T6175] batadv0: entered allmulticast mode [ 97.597558][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.39'. [ 97.609009][ T6175] bond0: (slave batadv0): Releasing backup interface [ 97.639941][ T6175] bridge0: port 3(batadv0) entered blocking state [ 97.656914][ T6175] bridge0: port 3(batadv0) entered disabled state [ 97.781784][ T6150] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.791503][ T6105] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 97.800927][ T6105] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 97.880365][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 98.077394][ T6194] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 98.085114][ T6194] netlink: 96 bytes leftover after parsing attributes in process `syz.0.43'. [ 98.097357][ T6194] netlink: 1 bytes leftover after parsing attributes in process `syz.0.43'. [ 98.272912][ T6205] netlink: 'syz.2.45': attribute type 1 has an invalid length. [ 98.925808][ T6234] netlink: 24 bytes leftover after parsing attributes in process `syz.3.51'. [ 99.118966][ T6242] netlink: 'syz.3.54': attribute type 13 has an invalid length. [ 99.142438][ T6238] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 99.161918][ T6242] netlink: 'syz.3.54': attribute type 17 has an invalid length. [ 99.228571][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.237301][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.324397][ T6263] netlink: 14 bytes leftover after parsing attributes in process `syz.4.53'. [ 99.430722][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 99.550156][ T6269] netlink: 76 bytes leftover after parsing attributes in process `syz.1.57'. [ 99.644262][ T6240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.658517][ T6240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.917508][ T6242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.926723][ T6242] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.939780][ T6242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.049269][ T6100] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.078852][ T6100] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.112061][ T6100] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.244884][ T6100] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.267344][ T6282] netlink: 36 bytes leftover after parsing attributes in process `syz.4.60'. [ 101.110143][ T6319] netlink: 'syz.4.67': attribute type 1 has an invalid length. [ 101.158357][ T6311] Illegal XDP return value 4294967282 on prog (id 10) dev N/A, expect packet loss! [ 101.390733][ T6324] syzkaller0: entered promiscuous mode [ 101.417047][ T6324] syzkaller0: entered allmulticast mode [ 101.819170][ T6350] nbd: must specify a device to reconfigure [ 102.113586][ T6361] netlink: 'syz.0.76': attribute type 10 has an invalid length. [ 102.631565][ T6366] sctp: [Deprecated]: syz.1.77 (pid 6366) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.631565][ T6366] Use struct sctp_sack_info instead [ 103.023632][ T6375] __nla_validate_parse: 5 callbacks suppressed [ 103.023654][ T6375] netlink: 68 bytes leftover after parsing attributes in process `syz.4.79'. [ 103.221509][ T6361] dummy0: entered promiscuous mode [ 103.227992][ T6361] bridge0: port 3(dummy0) entered blocking state [ 103.235688][ T6361] bridge0: port 3(dummy0) entered disabled state [ 103.242570][ T6361] dummy0: entered allmulticast mode [ 103.250498][ T6361] bridge0: port 3(dummy0) entered blocking state [ 103.257051][ T6361] bridge0: port 3(dummy0) entered forwarding state [ 103.348377][ T6377] netlink: 40 bytes leftover after parsing attributes in process `syz.3.80'. [ 103.487370][ T6384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.83'. [ 103.552487][ T6391] netlink: 'syz.3.84': attribute type 20 has an invalid length. [ 103.699679][ T6393] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.86'. [ 103.715284][ T6393] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 103.727835][ T6393] tipc: Started in network mode [ 103.787149][ T6393] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 103.816970][ T6393] tipc: Enabled bearer , priority 14 [ 103.896816][ T6405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.89'. [ 103.987638][ T6409] netlink: 72 bytes leftover after parsing attributes in process `syz.4.89'. [ 104.312383][ T6419] vlan2: entered promiscuous mode [ 104.330461][ T6419] bridge0: entered promiscuous mode [ 104.831812][ T5910] tipc: Node number set to 10463914 [ 105.120278][ T6466] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 105.156299][ T6466] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 105.272911][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.104'. [ 105.427883][ T6477] netlink: 27 bytes leftover after parsing attributes in process `syz.2.108'. [ 105.557018][ T6479] bond1: (slave bond_slave_1): Device is not our slave [ 105.651021][ T6479] bond1: option active_slave: invalid value (bond_slave_1) [ 105.683388][ T6479] bond1 (unregistering): Released all slaves [ 105.876878][ T6493] netlink: 96 bytes leftover after parsing attributes in process `syz.4.111'. [ 105.947974][ T6493] netlink: 104 bytes leftover after parsing attributes in process `syz.4.111'. [ 106.024435][ T6493] xt_hashlimit: size too large, truncated to 1048576 [ 106.249810][ T6500] xfrm0: entered allmulticast mode [ 106.257283][ T6500] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 106.779742][ T6520] dvmrp0: entered allmulticast mode [ 106.799192][ T6520] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.850589][ T6522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.867600][ T6526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.956278][ T6522] veth0_to_bond: entered promiscuous mode [ 106.966765][ T6522] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 107.958350][ T6573] sctp: [Deprecated]: syz.1.136 (pid 6573) Use of int in max_burst socket option deprecated. [ 107.958350][ T6573] Use struct sctp_assoc_value instead [ 108.046302][ T6577] tipc: Enabling of bearer rejected, failed to enable media [ 108.387276][ T6596] __nla_validate_parse: 4 callbacks suppressed [ 108.387298][ T6596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.141'. [ 108.724696][ T6612] veth1_to_team: entered promiscuous mode [ 109.124754][ T6624] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 109.140990][ T6624] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 109.437377][ T6645] syzkaller0: entered promiscuous mode [ 109.452410][ T6645] syzkaller0: entered allmulticast mode [ 109.503632][ T6656] netlink: 76 bytes leftover after parsing attributes in process `syz.1.153'. [ 109.917497][ T6658] netlink: 'syz.1.154': attribute type 1 has an invalid length. [ 109.927528][ T6659] netlink: 'syz.1.154': attribute type 1 has an invalid length. [ 110.041423][ T6663] netlink: 'syz.0.155': attribute type 2 has an invalid length. [ 110.177759][ T6671] netlink: 20 bytes leftover after parsing attributes in process `syz.0.155'. [ 110.853316][ T6685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.159'. [ 110.864409][ T6685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.159'. [ 111.807779][ T6702] netlink: 256 bytes leftover after parsing attributes in process `syz.0.165'. [ 111.817775][ T6703] netlink: 256 bytes leftover after parsing attributes in process `syz.0.165'. [ 111.841012][ T6700] syzkaller0: entered promiscuous mode [ 111.846665][ T6700] syzkaller0: entered allmulticast mode [ 111.853805][ T6702] sctp: [Deprecated]: syz.0.165 (pid 6702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.853805][ T6702] Use struct sctp_sack_info instead [ 111.868248][ T6700] af_packet: tpacket_rcv: packet too big, clamped from 68 to 4294967272. macoff=96 [ 111.890632][ T6698] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 112.148888][ T6712] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 112.611404][ T6745] netlink: 'syz.3.175': attribute type 1 has an invalid length. [ 112.783882][ T6745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.248922][ T6747] vlan2: entered allmulticast mode [ 113.263785][ T6747] bond1: entered allmulticast mode [ 113.298579][ T6753] bond1: (slave geneve2): making interface the new active one [ 113.370919][ T6753] geneve2: entered allmulticast mode [ 113.378850][ T6753] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 113.414961][ T6100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.433430][ T6100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.447096][ T6100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.456550][ T6100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.631370][ T6773] netlink: 'syz.4.181': attribute type 21 has an invalid length. [ 113.845256][ T6784] netlink: 'syz.2.184': attribute type 1 has an invalid length. [ 113.871480][ T6784] netlink: 228 bytes leftover after parsing attributes in process `syz.2.184'. [ 113.896082][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 113.909831][ T6783] netlink: 'syz.1.183': attribute type 11 has an invalid length. [ 113.945839][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 113.971448][ T6794] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20001 [ 114.107181][ T6801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.148589][ T6793] team0: Port device team_slave_0 removed [ 114.304460][ T6810] Cannot find set identified by id 0 to match [ 114.367889][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 114.379481][ T6814] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.193'. [ 114.403932][ T6814] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.424443][ T6814] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 114.444784][ T6817] Bluetooth: MGMT ver 1.23 [ 114.790015][ T6826] netlink: 16 bytes leftover after parsing attributes in process `syz.3.196'. [ 115.326318][ T6845] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 115.337447][ T6845] bridge1: entered allmulticast mode [ 115.343458][ T6842] syzkaller1: entered promiscuous mode [ 115.349092][ T6842] syzkaller1: entered allmulticast mode [ 115.402902][ T6842] netlink: 168 bytes leftover after parsing attributes in process `syz.1.200'. [ 115.429650][ T6842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.200'. [ 115.822457][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'. [ 115.842785][ T6861] netlink: 'syz.2.206': attribute type 15 has an invalid length. [ 115.880952][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.206'. [ 115.941615][ T6868] hsr0: entered promiscuous mode [ 115.956801][ T6868] hsr0: left promiscuous mode [ 115.963105][ T6870] netlink: 'syz.1.208': attribute type 3 has an invalid length. [ 115.973244][ T6870] netlink: 'syz.1.208': attribute type 1 has an invalid length. [ 116.109069][ T6877] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 116.426439][ T6897] bridge0: port 3(dummy0) entered disabled state [ 116.433276][ T6897] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.441712][ T6897] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.666380][ T6914] netlink: 'syz.2.220': attribute type 9 has an invalid length. [ 117.099493][ T6933] netlink: 'syz.1.226': attribute type 3 has an invalid length. [ 117.171187][ T6933] netlink: 'syz.1.226': attribute type 3 has an invalid length. [ 117.766918][ T6963] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 117.833222][ T6963] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 117.840152][ T6963] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 117.847114][ T6963] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 117.854035][ T6963] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 117.860966][ T6963] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 117.867820][ T6963] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 117.874719][ T6963] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 117.881643][ T6963] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 117.888499][ T6963] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 118.916376][ T6992] __nla_validate_parse: 14 callbacks suppressed [ 118.916401][ T6992] netlink: 13 bytes leftover after parsing attributes in process `syz.3.237'. [ 118.959395][ T6996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.238'. [ 118.971091][ T6992] netlink: 13 bytes leftover after parsing attributes in process `syz.3.237'. [ 119.621673][ T7022] netlink: 32 bytes leftover after parsing attributes in process `syz.4.246'. [ 119.996960][ T7036] bond2: option tlb_dynamic_lb: invalid value (5) [ 120.057841][ T7036] bond2 (unregistering): Released all slaves [ 120.164242][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.254'. [ 120.398087][ T7060] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 120.398087][ T7060] Please contact the netfilter-devel mailing list or update your nftables rules. [ 120.409597][ T7065] netlink: 40 bytes leftover after parsing attributes in process `syz.0.256'. [ 120.492454][ T7065] netlink: 40 bytes leftover after parsing attributes in process `syz.0.256'. [ 120.722747][ T7078] netlink: 20 bytes leftover after parsing attributes in process `syz.3.261'. [ 120.764919][ T7078] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.772455][ T7078] IPv6: NLM_F_CREATE should be set when creating new route [ 120.779792][ T7078] IPv6: NLM_F_CREATE should be set when creating new route [ 121.239499][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.264'. [ 121.538926][ T7097] vti0: entered promiscuous mode [ 121.561809][ T7097] vti0: entered allmulticast mode [ 121.602106][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'. [ 121.674640][ T7099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.695274][ T7105] macsec1: entered allmulticast mode [ 121.700652][ T7105] bond1: entered allmulticast mode [ 121.885840][ T7105] bond1: left allmulticast mode [ 122.320048][ T7122] tipc: Enabled bearer , priority 10 [ 122.545611][ T7132] netlink: 'syz.4.274': attribute type 10 has an invalid length. [ 122.569841][ T7134] sctp: [Deprecated]: syz.1.275 (pid 7134) Use of int in max_burst socket option. [ 122.569841][ T7134] Use struct sctp_assoc_value instead [ 123.081733][ T7149] veth0_macvtap: left promiscuous mode [ 123.752170][ T7170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.509666][ T7194] __nla_validate_parse: 1 callbacks suppressed [ 124.509687][ T7194] netlink: 32 bytes leftover after parsing attributes in process `syz.4.289'. [ 125.112852][ T7204] netlink: 28 bytes leftover after parsing attributes in process `syz.3.291'. [ 125.352056][ T7199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.396775][ T7199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.645173][ T7200] tipc: Started in network mode [ 125.670523][ T7200] tipc: Node identity ac1414aa, cluster identity 4711 [ 125.687699][ T7200] tipc: New replicast peer: 100.1.1.1 [ 125.711258][ T7200] tipc: Enabled bearer , priority 10 [ 125.736714][ T6112] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.746289][ T7202] netlink: 'syz.4.292': attribute type 2 has an invalid length. [ 125.796833][ T6112] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.862421][ T6112] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.893748][ T6112] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.973954][ T6112] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.986424][ T7220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.297'. [ 126.010994][ T6112] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.084476][ T7220] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.117690][ T6112] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.148772][ T6112] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.433639][ T7239] netlink: 'syz.4.301': attribute type 39 has an invalid length. [ 126.479572][ T7243] syzkaller0: entered promiscuous mode [ 126.485158][ T7243] syzkaller0: entered allmulticast mode [ 126.509356][ T7245] syzkaller0: entered promiscuous mode [ 126.519290][ T7245] syzkaller0: entered allmulticast mode [ 126.538128][ T7243] xt_hashlimit: size too large, truncated to 1048576 [ 126.561058][ T7243] xt_hashlimit: max too large, truncated to 1048576 [ 126.707067][ T7251] net_ratelimit: 2487 callbacks suppressed [ 126.707090][ T7251] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 126.732912][ T7214] tipc: Node number set to 2886997162 [ 126.903571][ T7253] lo speed is unknown, defaulting to 1000 [ 126.932991][ T7253] lo speed is unknown, defaulting to 1000 [ 126.939729][ T7253] lo speed is unknown, defaulting to 1000 [ 126.999012][ T7253] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 127.071663][ T7261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.307'. [ 127.245186][ T7255] 8021q: adding VLAN 0 to HW filter on device bond3 [ 127.664215][ T7253] lo speed is unknown, defaulting to 1000 [ 127.674761][ T7253] lo speed is unknown, defaulting to 1000 [ 127.702878][ T7253] lo speed is unknown, defaulting to 1000 [ 127.746825][ T7253] lo speed is unknown, defaulting to 1000 [ 127.775189][ T7253] lo speed is unknown, defaulting to 1000 [ 127.858678][ T7272] netlink: 210512 bytes leftover after parsing attributes in process `syz.0.310'. [ 127.868334][ T7271] netlink: 60 bytes leftover after parsing attributes in process `syz.2.309'. [ 128.075654][ T7278] netlink: 'syz.3.313': attribute type 15 has an invalid length. [ 128.279039][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 128.302089][ T7284] netlink: 36 bytes leftover after parsing attributes in process `syz.3.316'. [ 128.374250][ T7287] lo speed is unknown, defaulting to 1000 [ 128.925577][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 128.944235][ T7302] lo speed is unknown, defaulting to 1000 [ 128.958465][ T7307] lo speed is unknown, defaulting to 1000 [ 129.119926][ T7305] bond1: entered promiscuous mode [ 129.128749][ T7320] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 129.143337][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'. [ 129.211935][ T7305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.463626][ T7329] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 129.535599][ T7329] bond1 (unregistering): Released all slaves [ 129.590196][ T7308] lo speed is unknown, defaulting to 1000 [ 129.792468][ T7351] netlink: 'syz.1.329': attribute type 11 has an invalid length. [ 129.856626][ T7342] __nla_validate_parse: 2 callbacks suppressed [ 129.856651][ T7342] netlink: 36 bytes leftover after parsing attributes in process `syz.1.329'. [ 129.938917][ T7342] netlink: 128 bytes leftover after parsing attributes in process `syz.1.329'. [ 129.979368][ T7343] syzkaller1: entered promiscuous mode [ 129.995394][ T7343] syzkaller1: entered allmulticast mode [ 130.069766][ T7359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.333'. [ 130.352126][ T7368] netlink: 176 bytes leftover after parsing attributes in process `syz.2.335'. [ 130.966315][ T7397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.341'. [ 130.993013][ T7401] lo speed is unknown, defaulting to 1000 [ 131.030280][ T7397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.341'. [ 131.106078][ T7407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.342'. [ 131.221783][ T7397] ifb0: entered promiscuous mode [ 131.237594][ T7397] dummy0: entered promiscuous mode [ 131.255570][ T7397] debugfs: 'hsr0' already exists in 'hsr' [ 131.263538][ T7397] Cannot create hsr debugfs directory [ 131.275818][ T7397] hsr0: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 131.392568][ T7410] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 131.412397][ T7410] syzkaller1: linktype set to 260 [ 131.418523][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 131.617115][ T7430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.348'. [ 131.660151][ T7430] bond0: entered promiscuous mode [ 131.687219][ T7430] bond_slave_0: entered promiscuous mode [ 131.699344][ T7430] bond_slave_1: entered promiscuous mode [ 131.708114][ T7430] gretap0: entered promiscuous mode [ 131.715242][ T7430] hsr1: entered promiscuous mode [ 132.286848][ T7443] lo speed is unknown, defaulting to 1000 [ 132.396828][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 132.609550][ T7455] bond2: entered promiscuous mode [ 132.731106][ T7455] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.787434][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.794461][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.841558][ T7467] bond2: entered promiscuous mode [ 132.847722][ T7467] bond2: entered allmulticast mode [ 132.853773][ T7467] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.873067][ T7458] lo speed is unknown, defaulting to 1000 [ 133.500551][ T7496] wg1: Master is either lo or non-ether device [ 133.817553][ T7505] netlink: 'syz.3.358': attribute type 4 has an invalid length. [ 134.904550][ T7557] __nla_validate_parse: 8 callbacks suppressed [ 134.904573][ T7557] netlink: 60 bytes leftover after parsing attributes in process `syz.0.368'. [ 134.925058][ T7557] syzkaller0: entered promiscuous mode [ 134.943062][ T7557] syzkaller0: entered allmulticast mode [ 135.118311][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.369'. [ 135.155118][ T7563] bridge1: entered promiscuous mode [ 135.163342][ T7563] bridge1: port 1(macvtap1) entered blocking state [ 135.170172][ T7563] bridge1: port 1(macvtap1) entered disabled state [ 135.179632][ T7563] macvtap1: entered allmulticast mode [ 135.185441][ T7563] bridge1: entered allmulticast mode [ 135.208725][ T7563] macvtap1: left allmulticast mode [ 135.217899][ T7563] bridge1: left allmulticast mode [ 135.227118][ T7563] bridge1: left promiscuous mode [ 135.480645][ T7575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.741192][ T7585] vxcan5: entered promiscuous mode [ 136.349936][ T7615] netlink: 28 bytes leftover after parsing attributes in process `syz.4.378'. [ 136.362769][ T7615] netlink: 'syz.4.378': attribute type 7 has an invalid length. [ 136.370632][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'. [ 136.769792][ T7630] netlink: 44 bytes leftover after parsing attributes in process `syz.4.383'. [ 136.988820][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 137.009238][ T7642] netlink: 312 bytes leftover after parsing attributes in process `syz.0.385'. [ 137.056888][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 137.275477][ T7651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.387'. [ 137.316403][ T7653] netlink: 'syz.1.388': attribute type 7 has an invalid length. [ 137.332870][ T7653] netlink: 'syz.1.388': attribute type 7 has an invalid length. [ 137.583847][ T7661] openvswitch: netlink: Message has 16 unknown bytes. [ 137.666723][ T7664] netlink: 60 bytes leftover after parsing attributes in process `syz.2.391'. [ 137.710478][ T7664] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 137.745964][ T7664] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 139.044851][ T7720] lo speed is unknown, defaulting to 1000 [ 139.488928][ T7743] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.739827][ T7751] syzkaller0: entered promiscuous mode [ 139.746249][ T7751] syzkaller0: entered allmulticast mode [ 139.827594][ T7762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.862000][ T7760] netlink: 'syz.4.414': attribute type 2 has an invalid length. [ 139.968049][ T7776] __nla_validate_parse: 5 callbacks suppressed [ 139.968072][ T7776] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.417'. [ 140.082836][ T7781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.419'. [ 140.420167][ T7792] lo speed is unknown, defaulting to 1000 [ 140.663020][ T7804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.423'. [ 141.079578][ T7802] netlink: 'syz.0.422': attribute type 1 has an invalid length. [ 141.184196][ T7802] bond4: entered promiscuous mode [ 141.219871][ T7802] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.300199][ T7821] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 141.311821][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.431'. [ 141.337139][ T7831] xt_connbytes: Forcing CT accounting to be enabled [ 141.351997][ T7821] bond2 (unregistering): Released all slaves [ 141.357930][ T7829] netlink: 'syz.2.431': attribute type 1 has an invalid length. [ 141.366051][ T7831] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 141.373034][ T7829] netlink: 60 bytes leftover after parsing attributes in process `syz.2.431'. [ 141.388385][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.431'. [ 141.452891][ T7826] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.478681][ T7826] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 141.499516][ T7826] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 141.514946][ T7826] bond4: (slave gre1): making interface the new active one [ 141.522335][ T7826] gre1: entered promiscuous mode [ 141.530016][ T7826] bond4: (slave gre1): Enslaving as an active interface with an up link [ 141.649297][ T7843] netlink: 60 bytes leftover after parsing attributes in process `syz.2.432'. [ 141.677589][ T7837] netlink: 'syz.4.433': attribute type 3 has an invalid length. [ 141.892888][ T7850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.436'. [ 142.231052][ T7873] xt_l2tp: v2 doesn't support IP mode [ 142.247696][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 142.769076][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.446'. [ 142.791259][ T7888] nbd: must specify at least one socket [ 143.077846][ T7899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.131392][ T7899] netlink: 'syz.2.451': attribute type 3 has an invalid length. [ 143.437887][ T7911] xt_CT: No such helper "pptp" [ 144.867051][ T7977] block nbd2: NBD_DISCONNECT [ 144.904837][ T7977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.272316][ T7984] __nla_validate_parse: 11 callbacks suppressed [ 145.272339][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 145.672251][ T29] audit: type=1800 audit(1776199718.014:2): pid=7992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.476" name=CB dev="tmpfs" ino=546 res=0 errno=0 [ 145.738962][ T7994] netlink: 'syz.2.477': attribute type 1 has an invalid length. [ 145.779405][ T7994] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.895476][ T7998] Bluetooth: MGMT ver 1.23 [ 146.116428][ T8002] team_slave_0: entered promiscuous mode [ 146.122426][ T8002] team_slave_1: entered promiscuous mode [ 146.142802][ T8002] vlan2: entered promiscuous mode [ 146.147907][ T8002] team0: entered promiscuous mode [ 146.164492][ T8005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.481'. [ 146.652635][ T8016] lo speed is unknown, defaulting to 1000 [ 147.040676][ T8032] netlink: 'syz.4.489': attribute type 9 has an invalid length. [ 147.226317][ T8035] IPVS: Unknown mcast interface: dvmrp1 [ 147.741518][ T8062] netlink: 'syz.0.499': attribute type 4 has an invalid length. [ 147.921392][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'. [ 147.981047][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 147.987305][ T5833] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 148.595830][ T8086] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.603758][ T8086] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.843995][ T8086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.885496][ T8086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.263835][ T8093] vlan2: entered allmulticast mode [ 149.276028][ T8093] bridge0: port 3(vlan2) entered blocking state [ 149.288567][ T8093] bridge0: port 3(vlan2) entered disabled state [ 149.314721][ T8093] vlan2: entered promiscuous mode [ 149.364896][ T8090] netlink: 92 bytes leftover after parsing attributes in process `syz.3.509'. [ 149.384086][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.509'. [ 149.424218][ T8090] tc_dump_action: action bad kind [ 149.443375][ T6100] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.481278][ T6100] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.660226][ T6100] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.679664][ T6100] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.825834][ T8122] netlink: 'syz.0.515': attribute type 11 has an invalid length. [ 149.847565][ T8122] netlink: 'syz.0.515': attribute type 23 has an invalid length. [ 149.857040][ T8125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.515'. [ 149.866099][ T8122] netlink: 224 bytes leftover after parsing attributes in process `syz.0.515'. [ 150.227611][ T8146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.521'. [ 150.279558][ T8146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.521'. [ 150.298578][ T8146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.521'. [ 150.309515][ T8146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.521'. [ 150.366130][ T8146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.521'. [ 150.394001][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.523'. [ 150.396059][ T8146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.521'. [ 150.424774][ T8152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.523'. [ 150.443659][ T8146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.521'. [ 150.471340][ T8146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.521'. [ 150.527552][ T8146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.521'. [ 150.540411][ T8146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.521'. [ 150.594554][ T8158] gretap1: entered promiscuous mode [ 150.632327][ T8158] batman_adv: batadv0: Adding interface: gretap1 [ 150.664927][ T8158] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 150.728298][ T8158] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 151.055343][ T8181] syzkaller1: entered promiscuous mode [ 151.083562][ T8181] syzkaller1: entered allmulticast mode [ 151.194469][ T8186] netlink: 'syz.4.526': attribute type 13 has an invalid length. [ 151.241254][ T8186] syz_tun: refused to change device tx_queue_len [ 151.280364][ T8186] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 151.431398][ T8190] netlink: 'syz.1.530': attribute type 11 has an invalid length. [ 152.473151][ T29] audit: type=1800 audit(1776199724.814:3): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.539" name="memory.events" dev="tmpfs" ino=492 res=0 errno=0 [ 152.569937][ T8239] veth0: entered allmulticast mode [ 152.695626][ T8244] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.789840][ T8248] netlink: 'syz.1.544': attribute type 9 has an invalid length. [ 152.825298][ T8248] netlink: 'syz.1.544': attribute type 6 has an invalid length. [ 152.841266][ T8248] netlink: 'syz.1.544': attribute type 7 has an invalid length. [ 152.862624][ T8248] netlink: 'syz.1.544': attribute type 8 has an invalid length. [ 152.909200][ T8251] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 152.951996][ T8251] syzkaller0: entered promiscuous mode [ 152.957551][ T8251] syzkaller0: entered allmulticast mode [ 153.600983][ T8271] openvswitch: netlink: Duplicate or invalid key (type 0). [ 153.630990][ T8271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.902435][ T8283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.929765][ T8287] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 156.914409][ T8287] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.101356][ T8355] __nla_validate_parse: 161 callbacks suppressed [ 157.101379][ T8355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.565'. [ 157.132414][ T8355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.565'. [ 157.153952][ T8358] netlink: 'syz.3.567': attribute type 1 has an invalid length. [ 157.243802][ T8358] bond4: entered promiscuous mode [ 157.249220][ T8358] 8021q: adding VLAN 0 to HW filter on device bond4 [ 157.269077][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.565'. [ 157.319330][ T8355] openvswitch: netlink: Unknown nsh attribute 0 [ 157.504745][ T8370] netlink: 'syz.3.569': attribute type 1 has an invalid length. [ 157.548248][ T8372] trusted_key: syz.2.570 sent an empty control message without MSG_MORE. [ 157.602038][ T8378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 157.633289][ T8370] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.652435][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 157.742856][ T8370] bond5 (unregistering): Released all slaves [ 157.847393][ T8386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.574'. [ 157.859209][ T8386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.574'. [ 157.869871][ T8386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.574'. [ 157.880037][ T8386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.574'. [ 157.923078][ T8384] netlink: 'syz.2.573': attribute type 30 has an invalid length. [ 157.933167][ T8384] netlink: 56 bytes leftover after parsing attributes in process `syz.2.573'. [ 158.205460][ T8406] netlink: 'syz.0.580': attribute type 2 has an invalid length. [ 158.262960][ T8406] hmac(sha224): entered promiscuous mode [ 158.297460][ T8414] lo speed is unknown, defaulting to 1000 [ 158.736460][ T8433] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 158.782245][ T8433] bond5 (unregistering): Released all slaves [ 158.871679][ T8435] ip6gre1: entered promiscuous mode [ 158.878184][ T8435] ip6gre1: entered allmulticast mode [ 159.402370][ T6277] IPVS: starting estimator thread 0... [ 159.504338][ T8477] IPVS: using max 27 ests per chain, 64800 per kthread [ 159.513233][ T8481] netlink: 'syz.0.600': attribute type 62 has an invalid length. [ 160.053443][ T8499] openvswitch: netlink: IP tunnel dst address not specified [ 160.122820][ T8505] openvswitch: netlink: Flow key attr not present in new flow. [ 160.423240][ T8516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.542126][ T8516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.636735][ T8526] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 160.656672][ T8528] x_tables: unsorted underflow at hook 3 [ 160.682537][ T8516] syz.2.607 (8516) used greatest stack depth: 17600 bytes left [ 160.823264][ T8537] lo speed is unknown, defaulting to 1000 [ 161.804233][ T8595] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 161.814672][ T8595] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 161.815904][ T8597] openvswitch: netlink: Flow actions attr not present in new flow. [ 161.853540][ T8599] raw_sendmsg: syz.4.632 forgot to set AF_INET. Fix it! [ 162.002660][ T8615] tipc: Started in network mode [ 162.010353][ T8610] netlink: 'syz.4.635': attribute type 1 has an invalid length. [ 162.025470][ T8615] tipc: Node identity 080211, cluster identity 4711 [ 162.038462][ T8597] xt_CT: No such helper "syz0" [ 162.044892][ T8615] tipc: Enabled bearer , priority 0 [ 162.095861][ T8614] tipc: Enabling of bearer rejected, already enabled [ 162.163038][ T8623] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.452911][ T8629] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 162.504327][ T8636] __nla_validate_parse: 12 callbacks suppressed [ 162.504352][ T8636] netlink: 20 bytes leftover after parsing attributes in process `syz.4.640'. [ 162.526518][ T8629] netlink: 'syz.3.637': attribute type 21 has an invalid length. [ 162.547612][ T8636] nbd: must specify a size in bytes for the device [ 162.562488][ T8640] nbd: couldn't find device at index 54979 [ 162.615006][ T8629] netlink: 156 bytes leftover after parsing attributes in process `syz.3.637'. [ 162.637522][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 162.654658][ T8639] syzkaller0: entered promiscuous mode [ 162.667584][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 163.169298][ T6273] tipc: Node number set to 134353152 [ 163.197669][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.650'. [ 163.317229][ T8673] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 163.345796][ T8673] bond3: (slave lo): Enslaving as an active interface with an up link [ 163.355444][ T8673] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 163.626902][ T8689] tipc: Started in network mode [ 163.659219][ T8689] tipc: Node identity 866c92360f8, cluster identity 4711 [ 163.681589][ T8689] tipc: Enabled bearer , priority 0 [ 163.940216][ T8696] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 164.000024][ T8696] syzkaller0: entered promiscuous mode [ 164.014273][ T8696] syzkaller0: entered allmulticast mode [ 164.027365][ T8696] tipc: Resetting bearer [ 164.066215][ T8711] netlink: 60 bytes leftover after parsing attributes in process `syz.1.664'. [ 164.088006][ T8696] tipc: Resetting bearer [ 164.130541][ T8696] tipc: Disabling bearer [ 164.170549][ T8711] tipc: Enabling of bearer rejected, failed to enable media [ 164.230950][ T8720] syzkaller0: entered promiscuous mode [ 164.236514][ T8720] syzkaller0: entered allmulticast mode [ 164.379495][ T8732] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.667'. [ 164.407038][ T8732] netlink: Conntrack attr has 4 unknown bytes [ 164.516164][ T8737] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 164.537359][ T8737] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 164.562041][ T8737] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 164.591503][ T8737] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 164.627339][ T8737] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 164.673280][ T8737] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 164.698352][ T8737] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 164.796453][ T8753] smc: net device wlan0 applied user defined pnetid SYZ0 [ 164.805919][ T8750] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20002 [ 164.996538][ T8762] netlink: 60 bytes leftover after parsing attributes in process `syz.3.678'. [ 165.498211][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 165.519129][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.685'. [ 165.535260][ T8784] syzkaller0: entered promiscuous mode [ 165.549727][ T8784] syzkaller0: entered allmulticast mode [ 165.915523][ T8800] sctp: [Deprecated]: syz.1.687 (pid 8800) Use of int in max_burst socket option. [ 165.915523][ T8800] Use struct sctp_assoc_value instead [ 166.734577][ T8822] bond0 (unregistering): left promiscuous mode [ 166.751980][ T8822] bond_slave_0: left promiscuous mode [ 166.758529][ T8822] bond_slave_1: left promiscuous mode [ 166.859801][ T8822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.938265][ T8822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.962500][ T8822] bond0 (unregistering): Released all slaves [ 167.462614][ T8737] net_ratelimit: 814 callbacks suppressed [ 167.462636][ T8737] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 167.505543][ T8737] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 167.558003][ T8737] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 167.580295][ T8737] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 167.599538][ T8737] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 167.610509][ T8737] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 167.643593][ T8737] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 167.702144][ T8737] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 167.723504][ T8737] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 167.741035][ T8737] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 167.894917][ T8864] netlink: 'syz.1.708': attribute type 10 has an invalid length. [ 167.949775][ T8864] veth0_vlan: left promiscuous mode [ 167.973805][ T8864] veth0_vlan: entered promiscuous mode [ 168.025475][ T8864] team0: Device veth0_vlan failed to register rx_handler [ 168.112819][ T6100] tipc: Resetting bearer [ 168.412364][ T8879] Cannot find del_set index 4 as target [ 168.664825][ T8737] syz.0.670 (8737) used greatest stack depth: 16704 bytes left [ 168.675330][ T8886] __nla_validate_parse: 13 callbacks suppressed [ 168.675347][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'. [ 168.723885][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'. [ 168.748133][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'. [ 168.803074][ T8888] netlink: 60 bytes leftover after parsing attributes in process `syz.4.717'. [ 168.819015][ T8891] syzkaller0: entered promiscuous mode [ 168.830899][ T8891] syzkaller0: entered allmulticast mode [ 168.857703][ T8888] tipc: Enabling of bearer rejected, failed to enable media [ 168.990940][ T8892] syzkaller0: entered promiscuous mode [ 168.997961][ T8892] syzkaller0: entered allmulticast mode [ 169.058163][ T8891] lo speed is unknown, defaulting to 1000 [ 169.272153][ T8914] syzkaller1: entered promiscuous mode [ 169.280948][ T8914] syzkaller1: entered allmulticast mode [ 169.417541][ T8918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.725'. [ 169.536723][ T8922] bond2: entered allmulticast mode [ 169.557309][ T8922] vxcan3: entered promiscuous mode [ 169.564120][ T8922] vxcan3: entered allmulticast mode [ 169.569894][ T8922] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 169.584798][ T8922] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 169.972197][ T8946] syzkaller0: entered promiscuous mode [ 169.981300][ T8946] syzkaller0: entered allmulticast mode [ 170.008113][ T8951] netlink: 'syz.2.732': attribute type 1 has an invalid length. [ 170.033217][ T8951] netlink: 240 bytes leftover after parsing attributes in process `syz.2.732'. [ 170.044754][ T8949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.731'. [ 170.107031][ T8953] netlink: 'syz.2.732': attribute type 10 has an invalid length. [ 170.118983][ T8953] netlink: 2 bytes leftover after parsing attributes in process `syz.2.732'. [ 170.138225][ T8953] hsr0: entered promiscuous mode [ 170.172810][ T8953] bridge0: port 3(hsr0) entered blocking state [ 170.179422][ T8953] bridge0: port 3(hsr0) entered disabled state [ 170.189566][ T8953] hsr0: entered allmulticast mode [ 170.199424][ T8953] hsr_slave_0: entered allmulticast mode [ 170.213899][ T8953] hsr_slave_1: entered allmulticast mode [ 170.240035][ T8953] bridge0: port 3(hsr0) entered blocking state [ 170.246453][ T8953] bridge0: port 3(hsr0) entered forwarding state [ 170.305027][ T8969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.735'. [ 170.361924][ T8969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.735'. [ 170.432588][ T8978] netlink: 'syz.4.738': attribute type 2 has an invalid length. [ 170.440544][ T8978] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 170.480858][ T8978] netlink: 'syz.4.738': attribute type 2 has an invalid length. [ 170.509703][ T8978] netlink: 'syz.4.738': attribute type 2 has an invalid length. [ 170.530980][ T8978] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 170.549908][ T8980] tipc: Enabling of bearer rejected, failed to enable media [ 170.563979][ T8980] syzkaller0: entered promiscuous mode [ 170.569696][ T8980] syzkaller0: entered allmulticast mode [ 170.583491][ T8978] netlink: 'syz.4.738': attribute type 2 has an invalid length. [ 170.738953][ T8989] bridge2: entered promiscuous mode [ 170.748384][ T8989] bridge2: entered allmulticast mode [ 170.757806][ T8989] team0: Port device bridge2 added [ 170.768511][ T8989] bridge0: port 3(team0) entered blocking state [ 170.775830][ T8989] bridge0: port 3(team0) entered disabled state [ 170.783251][ T8989] team0: entered allmulticast mode [ 170.788651][ T8989] team_slave_0: entered allmulticast mode [ 170.795953][ T8989] team_slave_1: entered allmulticast mode [ 170.806106][ T8989] team0: entered promiscuous mode [ 170.812986][ T8994] netlink: 'syz.4.744': attribute type 1 has an invalid length. [ 170.813268][ T8989] team_slave_0: entered promiscuous mode [ 170.829628][ T8989] team_slave_1: entered promiscuous mode [ 170.873555][ T8996] tipc: Enabled bearer , priority 10 [ 171.182883][ T10] lo speed is unknown, defaulting to 1000 [ 171.227623][ T9024] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.005249][ T9061] bond5: entered allmulticast mode [ 172.011420][ T9061] 8021q: adding VLAN 0 to HW filter on device bond5 [ 172.124300][ T9075] tipc: Enabling of bearer rejected, failed to enable media [ 172.137640][ T9075] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 172.145360][ T9075] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 172.652923][ T9091] lo speed is unknown, defaulting to 1000 [ 172.991219][ T9113] vlan2: entered allmulticast mode [ 173.000881][ T9113] macvtap0: entered allmulticast mode [ 173.006409][ T9113] veth0_macvtap: entered allmulticast mode [ 173.858671][ T9154] __nla_validate_parse: 23 callbacks suppressed [ 173.858696][ T9154] netlink: 24 bytes leftover after parsing attributes in process `syz.1.790'. [ 173.911927][ T9157] netlink: 56 bytes leftover after parsing attributes in process `syz.1.790'. [ 174.203475][ T9161] bond2: entered promiscuous mode [ 174.234551][ T9161] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.260411][ T9166] validate_nla: 8 callbacks suppressed [ 174.260428][ T9166] netlink: 'syz.1.792': attribute type 1 has an invalid length. [ 174.287089][ T9166] netlink: 'syz.1.792': attribute type 2 has an invalid length. [ 174.831633][ T9202] netlink: 'syz.1.802': attribute type 4 has an invalid length. [ 174.862592][ T9202] netlink: 'syz.1.802': attribute type 4 has an invalid length. [ 175.184551][ T9236] netlink: 'syz.1.807': attribute type 1 has an invalid length. [ 175.271026][ T9236] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.807'. [ 175.468314][ T9242] bond5: ARP target 9.0.0.0 is already present [ 175.474752][ T9242] bond5: option arp_ip_target: invalid value (9) [ 175.484428][ T9242] bond5 (unregistering): Released all slaves [ 175.499935][ T9249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.811'. [ 175.755637][ T9256] netlink: 44 bytes leftover after parsing attributes in process `syz.2.813'. [ 175.833792][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.814'. [ 175.968530][ T9245] bond3: (slave bond_slave_1): Device is not our slave [ 175.978236][ T9245] bond3: option active_slave: invalid value (bond_slave_1) [ 175.992731][ T9245] bond3 (unregistering): Released all slaves [ 176.042436][ T9264] netlink: 'syz.4.814': attribute type 1 has an invalid length. [ 176.274293][ T9281] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 176.278864][ T9279] netlink: 11 bytes leftover after parsing attributes in process `syz.2.819'. [ 176.521499][ T9289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.821'. [ 176.552305][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.821'. [ 176.585169][ T9289] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.821'. [ 176.679911][ T9298] netlink: 'syz.0.824': attribute type 1 has an invalid length. [ 176.729550][ T9298] 8021q: adding VLAN 0 to HW filter on device bond6 [ 177.052647][ T9301] bond6 (unregistering): Released all slaves [ 177.366988][ T9307] net_ratelimit: 196 callbacks suppressed [ 177.367020][ T9307] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 177.915356][ T9336] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 178.086444][ T9336] syz.2.836 uses old SIOCAX25GETINFO [ 178.244846][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.271332][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.851520][ T9394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.977728][ T9402] __nla_validate_parse: 11 callbacks suppressed [ 178.977751][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.853'. [ 179.001298][ T9402] netlink: 168 bytes leftover after parsing attributes in process `syz.3.853'. [ 179.016657][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.853'. [ 179.084441][ T9409] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 179.157332][ T9410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.314697][ T9419] bond0: option all_slaves_active: invalid value (5) [ 179.397339][ T9419] bond0 (unregistering): Released all slaves [ 179.717647][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'. [ 179.814515][ T9434] bond3: entered promiscuous mode [ 179.823061][ T9434] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.906969][ T9449] netlink: 'syz.4.869': attribute type 3 has an invalid length. [ 179.969652][ T9433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.864'. [ 180.679775][ T9494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.881'. [ 180.744009][ T9505] netlink: 80 bytes leftover after parsing attributes in process `syz.0.881'. [ 180.820902][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.881'. [ 180.962631][ T9509] lo speed is unknown, defaulting to 1000 [ 181.033694][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.886'. [ 181.247430][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'. [ 181.441506][ T9538] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 181.492701][ T9541] bond3: entered promiscuous mode [ 181.507589][ T9541] 8021q: adding VLAN 0 to HW filter on device bond3 [ 181.564547][ T9541] bond3 (unregistering): Released all slaves [ 181.609831][ T9551] netlink: 'syz.1.894': attribute type 1 has an invalid length. [ 181.755334][ T9550] tipc: Enabling of bearer rejected, failed to enable media [ 182.038472][ T9562] lo speed is unknown, defaulting to 1000 [ 182.311877][ T9588] erspan0: entered promiscuous mode [ 182.317899][ T9588] macsec1: entered promiscuous mode [ 182.355125][ T9588] erspan0: left promiscuous mode [ 182.464536][ T6276] IPVS: starting estimator thread 0... [ 182.475350][ T6276] IPVS: starting estimator thread 0... [ 182.522356][ T9593] "syz.0.906" (9593) uses obsolete ecb(arc4) skcipher [ 182.601375][ T9606] IPVS: using max 26 ests per chain, 62400 per kthread [ 182.641967][ T9607] IPVS: using max 25 ests per chain, 60000 per kthread [ 183.212589][ T9646] erspan1: entered promiscuous mode [ 183.228139][ T9646] erspan1: entered allmulticast mode [ 183.376303][ T9658] xt_connbytes: Forcing CT accounting to be enabled [ 183.623349][ T9673] openvswitch: netlink: Flow actions attr not present in new flow. [ 183.675415][ T9677] Bluetooth: MGMT ver 1.23 [ 183.701004][ T9677] netlink: 'syz.2.925': attribute type 11 has an invalid length. [ 183.796537][ T9683] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 184.080530][ T9708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.603281][ T9724] __nla_validate_parse: 8 callbacks suppressed [ 184.603302][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.937'. [ 184.620709][ T9724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.937'. [ 184.673925][ T9728] syzkaller0: entered promiscuous mode [ 184.700945][ T9728] syzkaller0: entered allmulticast mode [ 184.803570][ T9738] netlink: 'syz.2.940': attribute type 1 has an invalid length. [ 184.852001][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'. [ 185.160405][ T9747] openvswitch: netlink: Key type 310 is out of range max 32 [ 185.567525][ T9765] bond6: option miimon: invalid value (18446744073709551608) [ 185.576196][ T9765] bond6: option miimon: allowed values 0 - 2147483647 [ 185.588485][ T9765] bond6 (unregistering): Released all slaves [ 185.623670][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'. [ 185.841318][ T9788] netlink: 'syz.0.957': attribute type 2 has an invalid length. [ 185.874078][ T9788] !: entered promiscuous mode [ 185.901927][ T9788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.957'. [ 186.140163][ T9808] netlink: 'syz.0.964': attribute type 3 has an invalid length. [ 186.150831][ T9808] netlink: 'syz.0.964': attribute type 1 has an invalid length. [ 186.158753][ T9808] netlink: 212 bytes leftover after parsing attributes in process `syz.0.964'. [ 186.173867][ T9808] NCSI netlink: No device for ifindex 813332851 [ 186.395912][ T9807] lo speed is unknown, defaulting to 1000 [ 186.721135][ T9824] netlink: 'syz.2.967': attribute type 89 has an invalid length. [ 186.907281][ T9828] tipc: Started in network mode [ 186.932096][ T9828] tipc: Node identity 028e330a3dca, cluster identity 4711 [ 186.978060][ T9828] tipc: Enabled bearer , priority 0 [ 187.069211][ T9839] netlink: 'syz.1.971': attribute type 3 has an invalid length. [ 187.282150][ T9835] syzkaller0: entered promiscuous mode [ 187.287711][ T9835] syzkaller0: entered allmulticast mode [ 187.318097][ T9835] tipc: Resetting bearer [ 187.420150][ T6098] tipc: Resetting bearer [ 187.469317][ T9815] tipc: Resetting bearer [ 187.547057][ T9853] netlink: 'syz.0.976': attribute type 10 has an invalid length. [ 187.569617][ T9853] netlink: 228 bytes leftover after parsing attributes in process `syz.0.976'. [ 189.397741][ T9815] tipc: Disabling bearer [ 189.412319][ T6276] tipc: Node number set to 1061434122 [ 189.609845][ T9901] netlink: zone id is out of range [ 189.620922][ T9901] netlink: zone id is out of range [ 189.626785][ T9901] netlink: zone id is out of range [ 189.644017][ T9901] netlink: zone id is out of range [ 189.656625][ T9901] netlink: zone id is out of range [ 189.671074][ T9901] netlink: zone id is out of range [ 189.681204][ T9901] netlink: zone id is out of range [ 189.686477][ T9901] netlink: zone id is out of range [ 189.700892][ T9901] netlink: zone id is out of range [ 189.706148][ T9901] netlink: zone id is out of range [ 189.744447][ T9905] netlink: 'syz.4.988': attribute type 10 has an invalid length. [ 189.752619][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.988'. [ 189.763035][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'. [ 189.869057][ T9912] netlink: 60 bytes leftover after parsing attributes in process `syz.3.991'. [ 189.906124][ T9909] lo speed is unknown, defaulting to 1000 [ 189.946442][ T9912] tipc: Enabling of bearer rejected, failed to enable media [ 189.964247][ T9912] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 189.973790][ T9912] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 190.193131][ T9922] netlink: 'syz.0.994': attribute type 12 has an invalid length. [ 190.201192][ T9922] netlink: 'syz.0.994': attribute type 29 has an invalid length. [ 190.209315][ T9922] netlink: 148 bytes leftover after parsing attributes in process `syz.0.994'. [ 190.219978][ T9922] netlink: 'syz.0.994': attribute type 1 has an invalid length. [ 190.228110][ T9922] netlink: 47 bytes leftover after parsing attributes in process `syz.0.994'. [ 190.259420][ T9922] veth0_virt_wifi: entered allmulticast mode [ 190.871195][ T9944] netlink: 'syz.2.1000': attribute type 4 has an invalid length. [ 190.923985][ T9947] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1001'. [ 191.071767][ T9953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1002'. [ 191.217526][ T9961] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1005'. [ 191.231802][ T9963] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1003'. [ 191.378288][ T9974] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1008'. [ 191.389789][ T9974] netlink: 'syz.1.1008': attribute type 1 has an invalid length. [ 191.507707][ T9974] tipc: Resetting bearer [ 191.527642][ T9974] bond2: left promiscuous mode [ 191.541961][ T9974] bond3: left promiscuous mode [ 191.547713][ T9974] erspan1: left promiscuous mode [ 191.601647][ T9981] can: request_module (can-proto-3) failed. [ 191.747067][ T9981] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 191.808780][ T9981] bond6 (unregistering): Released all slaves [ 191.963729][T10001] netlink: 'syz.0.1016': attribute type 1 has an invalid length. [ 192.216329][T10015] netlink: 'syz.3.1018': attribute type 1 has an invalid length. [ 192.255315][T10020] bridge0: port 4(syz_tun) entered blocking state [ 192.292387][T10020] bridge0: port 4(syz_tun) entered disabled state [ 192.320978][T10020] syz_tun: entered allmulticast mode [ 192.341968][T10020] syz_tun: entered promiscuous mode [ 192.796956][T10045] lo speed is unknown, defaulting to 1000 [ 193.271441][T10066] netlink: 'syz.1.1033': attribute type 1 has an invalid length. [ 193.393571][T10066] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.526818][T10072] bond4: (slave veth3): Enslaving as an active interface with a down link [ 193.633834][T10066] bond4: (slave bridge1): Enslaving as an active interface with a down link [ 193.876450][T10086] syzkaller0: entered promiscuous mode [ 193.891035][T10086] syzkaller0: entered allmulticast mode [ 193.943682][T10093] tipc: Enabled bearer , priority 0 [ 193.952715][T10090] xt_hashlimit: size too large, truncated to 1048576 [ 193.968257][T10093] syzkaller0: entered promiscuous mode [ 193.985300][T10093] syzkaller0: entered allmulticast mode [ 194.058318][T10093] tipc: Resetting bearer [ 194.090443][T10091] tipc: Resetting bearer [ 194.126884][T10091] tipc: Disabling bearer [ 194.149909][T10098] syzkaller1: tun_chr_ioctl cmd 35108 [ 194.259364][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.268016][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.611832][T10056] net_ratelimit: 1124 callbacks suppressed [ 194.611855][T10056] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 194.681815][T10056] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 194.723953][T10056] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 194.755658][T10056] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 194.806431][T10056] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 194.838094][T10056] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 194.865699][T10119] xfrm1: entered allmulticast mode [ 194.891779][T10056] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 194.913330][T10119] ip6erspan0: entered allmulticast mode [ 194.942194][T10056] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 195.026770][T10126] __nla_validate_parse: 11 callbacks suppressed [ 195.026796][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 195.043241][T10056] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 195.053569][T10056] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 195.423161][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1054'. [ 195.451493][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1054'. [ 195.663937][T10145] netlink: 'syz.0.1056': attribute type 11 has an invalid length. [ 195.782068][T10148] lo speed is unknown, defaulting to 1000 [ 195.788753][T10153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1059'. [ 195.922363][T10166] netlink: 'syz.2.1062': attribute type 46 has an invalid length. [ 195.946868][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'. [ 195.983489][T10171] netlink: 'syz.2.1062': attribute type 46 has an invalid length. [ 196.002246][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'. [ 196.155653][T10185] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1066'. [ 196.569505][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1065'. [ 196.901166][T10200] netlink: 'syz.3.1071': attribute type 32 has an invalid length. [ 196.940738][T10201] netlink: 'syz.3.1071': attribute type 32 has an invalid length. [ 196.963442][T10204] netlink: 'syz.1.1073': attribute type 1 has an invalid length. [ 196.975802][T10204] netlink: 'syz.1.1073': attribute type 2 has an invalid length. [ 197.019533][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1074'. [ 197.031607][T10210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1072'. [ 197.287699][T10218] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.887357][T10246] netlink: 'syz.0.1083': attribute type 178 has an invalid length. [ 198.439307][T10278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.567608][T10278] netlink: 'syz.3.1092': attribute type 5 has an invalid length. [ 199.390119][T10321] x_tables: duplicate underflow at hook 3 [ 199.472432][T10330] x_tables: ip6_tables: mark.1 match: invalid size 16 (kernel) != (user) 24 [ 199.606280][T10330] veth0_virt_wifi: entered allmulticast mode [ 199.888563][T10349] netlink: 'syz.2.1112': attribute type 8 has an invalid length. [ 200.226308][T10365] netlink: 'syz.1.1114': attribute type 4 has an invalid length. [ 200.375867][T10376] __nla_validate_parse: 8 callbacks suppressed [ 200.375889][T10376] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1118'. [ 200.537237][T10385] net_ratelimit: 227 callbacks suppressed [ 200.537251][T10385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.870466][T10411] bridge_slave_0 (unregistering): left allmulticast mode [ 200.887046][T10410] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1129'. [ 200.896270][T10411] bridge_slave_0 (unregistering): left promiscuous mode [ 200.903867][T10411] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.000256][T10426] IPVS: set_ctl: invalid protocol: 58 172.20.20.61:20000 [ 201.172264][T10435] validate_nla: 3 callbacks suppressed [ 201.172285][T10435] netlink: 'syz.4.1134': attribute type 1 has an invalid length. [ 201.237007][T10435] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 201.381544][T10452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1138'. [ 201.413797][T10445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1135'. [ 202.079964][ T5833] Bluetooth: hci4: link tx timeout [ 202.085956][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 202.155601][T10462] netlink: 'syz.3.1140': attribute type 2 has an invalid length. [ 202.163598][T10462] tipc: Cannot configure node identity twice [ 202.267592][T10484] netlink: 'syz.2.1148': attribute type 10 has an invalid length. [ 202.300379][T10484] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1148'. [ 202.395839][T10491] netlink: 876 bytes leftover after parsing attributes in process `syz.0.1149'. [ 202.426471][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'. [ 202.479850][T10496] netlink: 'syz.2.1150': attribute type 1 has an invalid length. [ 202.597058][T10496] bond3: entered promiscuous mode [ 202.602803][T10496] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.652562][T10496] 8021q: adding VLAN 0 to HW filter on device bond3 [ 202.680103][T10496] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 202.724238][T10496] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 202.746300][T10496] bond3: (slave vcan1): making interface the new active one [ 202.754069][T10496] vcan1: entered promiscuous mode [ 202.762950][T10496] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 203.491418][T10548] netlink: 'syz.0.1165': attribute type 66 has an invalid length. [ 203.592668][T10548] syzkaller0: entered promiscuous mode [ 203.598228][T10548] syzkaller0: entered allmulticast mode [ 203.607932][T10553] xt_TPROXY: Can be used only with -p tcp or -p udp [ 203.656624][T10556] bond0: option lacp_active: invalid value (8) [ 203.664875][T10556] bond0 (unregistering): Released all slaves [ 203.740716][T10561] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1168'. [ 203.979743][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 204.141505][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 205.160212][T10561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.368706][T10588] netlink: 704 bytes leftover after parsing attributes in process `syz.3.1177'. [ 205.435470][T10588] x_tables: duplicate underflow at hook 1 [ 206.190127][T10638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1190'. [ 206.239366][T10640] openvswitch: netlink: Flow key attr not present in new flow. [ 206.257018][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1192'. [ 206.369325][T10637] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.531852][T10637] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.654261][T10637] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.698037][T10639] lo speed is unknown, defaulting to 1000 [ 206.839605][T10637] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.842172][T10665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1198'. [ 207.009255][T10668] : entered promiscuous mode [ 207.061296][ T6098] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.077690][ T6105] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.162745][ T6105] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.203820][ T6098] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.239493][T10675] syzkaller0: entered promiscuous mode [ 207.246999][T10675] syzkaller0: entered allmulticast mode [ 207.339236][ T5833] block nbd0: Receive control failed (result -32) [ 207.339408][ T5828] block nbd0: Receive control failed (result -32) [ 207.352037][T10679] block nbd0: Receive control failed (result -32) [ 207.361449][ T5837] block nbd0: Receive control failed (result -32) [ 207.381821][T10677] bond5: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 207.577248][T10686] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1203'. [ 207.711502][T10689] lo speed is unknown, defaulting to 1000 [ 207.886849][T10704] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1206'. [ 208.296742][T10719] lo speed is unknown, defaulting to 1000 [ 208.698049][T10736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.765269][T10746] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1216'. [ 208.774670][T10746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1216'. [ 208.851552][T10747] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 208.956860][T10753] bridge0: port 4(wlan0) entered blocking state [ 208.964034][T10753] bridge0: port 4(wlan0) entered disabled state [ 208.970947][T10753] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 208.982168][T10753] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 209.020144][T10753] syzkaller0: entered promiscuous mode [ 209.025928][T10753] syzkaller0: entered allmulticast mode [ 209.111590][T10757] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 209.200470][T10757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.346737][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1223'. [ 209.358462][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1223'. [ 210.247258][T10817] ip6gretap0: entered promiscuous mode [ 210.333510][T10824] netlink: 'syz.2.1236': attribute type 1 has an invalid length. [ 210.342961][T10816] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1236'. [ 210.926105][T10845] bond4: entered promiscuous mode [ 210.933967][T10845] 8021q: adding VLAN 0 to HW filter on device bond4 [ 210.953141][T10845] bond4 (unregistering): Released all slaves [ 211.049018][T10851] lo speed is unknown, defaulting to 1000 [ 211.387795][T10874] __nla_validate_parse: 6 callbacks suppressed [ 211.387817][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1251'. [ 211.653065][T10785] Bluetooth: hci2: command 0x0401 tx timeout [ 211.660734][T10785] Bluetooth: hci1: command 0x0406 tx timeout [ 211.667223][T10785] Bluetooth: hci3: command 0x0406 tx timeout [ 211.850470][T10896] tipc: Enabled bearer , priority 0 [ 211.879223][T10902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1259'. [ 211.886902][T10896] syzkaller0: entered promiscuous mode [ 211.889934][T10902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1259'. [ 211.923635][T10896] syzkaller0: entered allmulticast mode [ 211.985008][T10896] tipc: Resetting bearer [ 212.010017][T10895] tipc: Resetting bearer [ 212.030412][T10895] tipc: Disabling bearer [ 212.254586][T10919] netlink: 49 bytes leftover after parsing attributes in process `syz.0.1264'. [ 212.284521][T10919] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1264'. [ 212.310929][T10919] netlink: 49 bytes leftover after parsing attributes in process `syz.0.1264'. [ 212.481212][ T7215] IPVS: starting estimator thread 0... [ 212.582074][T10931] IPVS: using max 25 ests per chain, 60000 per kthread [ 212.667960][T10941] tipc: Enabled bearer , priority 0 [ 212.685655][T10941] syzkaller0: entered promiscuous mode [ 212.695981][T10941] syzkaller0: entered allmulticast mode [ 212.705745][T10941] tipc: Resetting bearer [ 212.723903][T10937] tipc: Resetting bearer [ 212.766887][T10937] tipc: Disabling bearer [ 212.775917][T10944] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1267'. [ 212.816399][T10940] xt_CT: No such helper "snmp_trap" [ 212.859859][T10946] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1269'. [ 212.922852][T10946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1269'. [ 213.083082][T10957] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1274'. [ 213.125079][T10955] lo speed is unknown, defaulting to 1000 [ 213.139516][T10952] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 213.208570][T10957] 8021q: VLANs not supported on ip_vti0 [ 213.537014][T10976] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 213.613909][T10976] vlan3: entered promiscuous mode [ 213.722940][T10985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.768094][ T5910] IPVS: starting estimator thread 0... [ 213.788533][T10987] batman_adv: batadv0: Adding interface: vlan3 [ 213.791477][T10990] netlink: 'syz.2.1280': attribute type 1 has an invalid length. [ 213.808896][T10987] batman_adv: batadv0: The MTU of interface vlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.847953][T10987] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 213.881065][T10988] IPVS: using max 28 ests per chain, 67200 per kthread [ 213.945778][T10994] netlink: 'syz.1.1282': attribute type 1 has an invalid length. [ 213.954481][T10994] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:17956 [ 214.045528][T10994] lo speed is unknown, defaulting to 1000 [ 214.619627][T11019] netlink: 'syz.4.1288': attribute type 1 has an invalid length. [ 215.324460][T11033] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 215.405910][T11037] netlink: 'syz.0.1292': attribute type 10 has an invalid length. [ 215.444465][T11037] lo speed is unknown, defaulting to 1000 [ 216.497654][T11084] netlink: 'syz.0.1304': attribute type 1 has an invalid length. [ 216.506087][T11084] netlink: 'syz.0.1304': attribute type 2 has an invalid length. [ 216.661111][T11082] __nla_validate_parse: 6 callbacks suppressed [ 216.661136][T11082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1302'. [ 216.728350][T11092] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1305'. [ 216.742040][T11082] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1302'. [ 216.774148][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1303'. [ 216.792381][T11082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1302'. [ 216.881281][T11082] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1302'. [ 217.339144][T11104] netlink: 'syz.4.1308': attribute type 1 has an invalid length. [ 217.497586][T11106] IPv6: Can't replace route, no match found [ 217.537900][T11106] IPv6: Can't replace route, no match found [ 217.619577][T11104] bond6: entered promiscuous mode [ 217.625670][T11104] 8021q: adding VLAN 0 to HW filter on device bond6 [ 218.567473][T11127] netlink: 'syz.1.1314': attribute type 4 has an invalid length. [ 218.607374][T11127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1314'. [ 218.911113][T11147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.431599][T11161] netlink: 540 bytes leftover after parsing attributes in process `syz.1.1322'. [ 219.453067][T11161] netlink: 540 bytes leftover after parsing attributes in process `syz.1.1322'. [ 219.872651][T11171] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 219.880284][T11171] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 219.997708][T11175] lo speed is unknown, defaulting to 1000 [ 220.345286][T11188] netlink: 'syz.4.1329': attribute type 1 has an invalid length. [ 220.468093][T11188] 8021q: adding VLAN 0 to HW filter on device bond7 [ 220.541722][T11190] bond7: (slave veth9): Enslaving as an active interface with a down link [ 220.611985][T11188] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1329'. [ 221.121284][T11219] tipc: Enabling of bearer rejected, already enabled [ 221.523081][ T6112] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.553979][ T6112] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.582763][ T6112] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.613665][ T6112] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.922974][T11251] netlink: 'syz.1.1343': attribute type 11 has an invalid length. [ 221.931060][T11251] __nla_validate_parse: 3 callbacks suppressed [ 221.931077][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'. [ 222.041460][T11258] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 223.255476][T11281] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 224.004722][T11325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1356'. [ 224.017770][T11320] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.056008][T11320] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.137709][T11320] bridge0: port 3(hsr0) entered disabled state [ 224.176142][T11320] tipc: Resetting bearer [ 224.187604][T11320] tipc: Resetting bearer [ 224.210510][T11320] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 224.220008][T11320] bond3: left promiscuous mode [ 224.225042][T11320] vcan1: left promiscuous mode [ 224.455572][ T35] tipc: Resetting bearer [ 224.467180][ T35] tipc: Resetting bearer [ 224.552328][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1359'. [ 224.690364][T11350] netlink: 'syz.0.1362': attribute type 1 has an invalid length. [ 224.715440][T11350] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1362'. [ 224.791374][T11354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1363'. [ 224.862991][T11354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1363'. [ 224.909525][T11354] ip6gre2: entered promiscuous mode [ 224.961716][T11354] ip6gre2: entered allmulticast mode [ 225.029388][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1365'. [ 225.263190][T11374] tipc: New replicast peer: 255.255.255.255 [ 225.279270][T11374] tipc: Enabled bearer , priority 10 [ 225.377882][T11383] tipc: Enabling of bearer rejected, failed to enable media [ 225.430857][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1370'. [ 225.604177][T11397] netlink: 'syz.1.1373': attribute type 2 has an invalid length. [ 225.623130][T11398] netlink: 'syz.1.1373': attribute type 2 has an invalid length. [ 225.639375][T11397] !Мо: entered promiscuous mode [ 225.649001][T11398] !Мо: left promiscuous mode [ 225.847284][T11407] lo speed is unknown, defaulting to 1000 [ 225.995589][T11419] bridge3: entered promiscuous mode [ 226.001062][T11419] bridge3: entered allmulticast mode [ 226.011271][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'. [ 226.165724][T11427] netlink: 'syz.1.1380': attribute type 1 has an invalid length. [ 226.203435][T11429] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1378'. [ 226.228592][T11432] netlink: 'syz.0.1379': attribute type 10 has an invalid length. [ 227.443539][T11490] __nla_validate_parse: 2 callbacks suppressed [ 227.443561][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1395'. [ 227.636092][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1395'. [ 228.154458][T11517] netlink: 'syz.0.1402': attribute type 9 has an invalid length. [ 228.316473][T11532] vlan4: entered allmulticast mode [ 228.334494][T11532] vlan0: entered allmulticast mode [ 228.360043][T11532] veth0_vlan: entered allmulticast mode [ 229.239652][T11568] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1405'. [ 229.292056][T11568] netlink: 'syz.4.1405': attribute type 1 has an invalid length. [ 229.461805][T11580] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1410'. [ 229.490887][T11580] netlink: 'syz.3.1410': attribute type 2 has an invalid length. [ 229.541246][T11580] netlink: 'syz.3.1410': attribute type 1 has an invalid length. [ 229.578204][T11586] netlink: 'syz.4.1411': attribute type 6 has an invalid length. [ 229.592241][T11586] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1411'. [ 229.886857][T11604] netlink: 'syz.0.1417': attribute type 4 has an invalid length. [ 229.955192][T11604] netlink: 'syz.0.1417': attribute type 4 has an invalid length. [ 229.979351][T11607] ip6t_srh: unknown srh invflags 4000 [ 230.010702][T11604] netlink: 'syz.0.1417': attribute type 4 has an invalid length. [ 230.489865][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1422'. [ 230.745691][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'. [ 231.184103][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1429'. [ 231.240149][T11655] netlink: 'syz.1.1430': attribute type 4 has an invalid length. [ 231.247991][T11652] openvswitch: netlink: Tunnel attr 2560 out of range max 16 [ 231.248161][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1429'. [ 231.248182][T11652] openvswitch: netlink: Tunnel attr 2560 out of range max 16 [ 231.248365][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1429'. [ 231.304346][T11652] openvswitch: netlink: Tunnel attr 2560 out of range max 16 [ 231.365903][T11655] netlink: 'syz.1.1430': attribute type 4 has an invalid length. [ 231.416141][T11660] xt_TCPMSS: Only works on TCP SYN packets [ 231.601330][T11671] macvtap0: entered promiscuous mode [ 231.606707][T11671] syz_tun: entered promiscuous mode [ 231.619886][T11674] icmp: detected local route for 100.1.1.1 during ICMP sending, src 172.20.20.187 [ 231.629683][T11671] macvtap0: entered allmulticast mode [ 231.638369][T11671] syz_tun: entered allmulticast mode [ 231.664866][T11671] syz_tun: left allmulticast mode [ 231.670355][T11671] syz_tun: left promiscuous mode [ 232.087597][T11678] lo speed is unknown, defaulting to 1000 [ 232.557211][T11710] __nla_validate_parse: 6 callbacks suppressed [ 232.557234][T11710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1445'. [ 232.625877][T11714] pim6reg: entered allmulticast mode [ 232.728693][T11722] x_tables: duplicate underflow at hook 1 [ 233.328471][T11734] lo speed is unknown, defaulting to 1000 [ 233.346593][T11738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.388242][T11740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1448'. [ 233.764015][T11755] validate_nla: 4 callbacks suppressed [ 233.764038][T11755] netlink: 'syz.3.1453': attribute type 21 has an invalid length. [ 233.831031][T11755] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1453'. [ 233.851068][T11755] netlink: 'syz.3.1453': attribute type 5 has an invalid length. [ 233.858961][T11755] netlink: 'syz.3.1453': attribute type 6 has an invalid length. [ 233.882569][T11755] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1453'. [ 234.240249][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1458'. [ 234.408557][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1459'. [ 234.427463][T11777] bridge4: port 1(erspan0) entered blocking state [ 234.448773][T11777] bridge4: port 1(erspan0) entered disabled state [ 234.459776][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'. [ 234.481161][T11777] erspan0: entered allmulticast mode [ 234.499730][T11777] erspan0: entered promiscuous mode [ 234.534328][T11777] bridge4: port 1(erspan0) entered blocking state [ 234.541002][T11777] bridge4: port 1(erspan0) entered forwarding state [ 234.796308][T11794] bridge4: port 2(bond7) entered blocking state [ 234.831636][T11794] bridge4: port 2(bond7) entered disabled state [ 234.846780][T11794] bond7: entered allmulticast mode [ 234.856661][T11794] bond7: entered promiscuous mode [ 234.948452][T11803] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 235.001636][T11803] tipc: Resetting bearer [ 235.098413][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'. [ 235.107512][T11822] netlink: 'syz.1.1466': attribute type 15 has an invalid length. [ 235.115891][T11822] netlink: 'syz.1.1466': attribute type 25 has an invalid length. [ 235.140908][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'. [ 235.290160][T11831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1470'. [ 235.330016][T11831] bond6: entered promiscuous mode [ 235.336771][T11831] 8021q: adding VLAN 0 to HW filter on device bond6 [ 235.347779][T11832] netlink: 'syz.0.1470': attribute type 1 has an invalid length. [ 235.356368][T11832] netlink: 'syz.0.1470': attribute type 2 has an invalid length. [ 235.365758][T11837] netlink: 'syz.0.1470': attribute type 1 has an invalid length. [ 235.391154][T11837] netlink: 'syz.0.1470': attribute type 2 has an invalid length. [ 235.414946][T11832] 8021q: adding VLAN 0 to HW filter on device bond6 [ 235.422563][T11832] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 235.434420][T11832] bond6: (slave vcan1): Error -95 calling set_mac_address [ 235.481481][T11831] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 235.511494][T11831] bond6: (slave vcan1): Error -95 calling set_mac_address [ 235.676014][ T144] tipc: Resetting bearer [ 235.701694][T11843] netlink: 'syz.2.1473': attribute type 1 has an invalid length. [ 235.919623][T11853] bond7: entered promiscuous mode [ 235.927301][T11853] 8021q: adding VLAN 0 to HW filter on device bond7 [ 235.992830][T11856] bridge23: entered promiscuous mode [ 235.999184][T11856] bond7: (slave bridge23): Enslaving as an active interface with an up link [ 236.096097][T11853] bond7 (unregistering): (slave bridge23): Releasing backup interface [ 236.133744][T11853] bridge23: left promiscuous mode [ 236.149910][T11853] bond7 (unregistering): Released all slaves [ 236.371651][T11872] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 236.786526][T11893] tipc: Resetting bearer [ 237.588612][T11923] bond8: entered promiscuous mode [ 237.638274][T11923] 8021q: adding VLAN 0 to HW filter on device bond8 [ 237.759812][T11931] bridge5: entered promiscuous mode [ 237.796670][T11931] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 237.820380][T11947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.052297][T11954] lo speed is unknown, defaulting to 1000 [ 238.153379][T11915] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 238.271589][T11970] __nla_validate_parse: 13 callbacks suppressed [ 238.271610][T11970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1506'. [ 238.417329][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1509'. [ 238.494846][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1509'. [ 238.779639][T11990] 8021q: adding VLAN 0 to HW filter on device bond9 [ 238.870533][T12005] validate_nla: 4 callbacks suppressed [ 238.870556][T12005] netlink: 'syz.1.1516': attribute type 1 has an invalid length. [ 238.991150][T12005] 8021q: adding VLAN 0 to HW filter on device bond8 [ 239.026817][T12004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1518'. [ 239.074455][T12004] netlink: 'syz.4.1518': attribute type 13 has an invalid length. [ 239.099931][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1520'. [ 239.112971][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1520'. [ 239.192726][T12027] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1523'. [ 239.239654][T12027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.271671][T12027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.308492][T12027] bond0 (unregistering): Released all slaves [ 239.337309][T12026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1522'. [ 239.357000][T12031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1525'. [ 239.465124][T12031] netlink: 'syz.3.1525': attribute type 4 has an invalid length. [ 239.508693][T12033] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 239.517268][T12033] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 239.762338][T12048] block nbd1: server does not support multiple connections per device. [ 239.776749][T12048] block nbd1: shutting down sockets [ 239.882862][T12056] vlan1: entered allmulticast mode [ 239.910696][T12056] gretap0: entered allmulticast mode [ 239.931486][T12056] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1533'. [ 239.942410][T12065] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 239.958838][T12066] sctp: [Deprecated]: syz.0.1535 (pid 12066) Use of int in maxseg socket option. [ 239.958838][T12066] Use struct sctp_assoc_value instead [ 239.987701][T12056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.010403][T12056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.032822][T12056] bond0 (unregistering): Released all slaves [ 240.243659][T12079] netlink: 'syz.4.1540': attribute type 1 has an invalid length. [ 240.294121][T12078] lo speed is unknown, defaulting to 1000 [ 240.316334][T12084] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 240.329152][T12084] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 240.386606][T12079] bond0: (slave gretap1): making interface the new active one [ 240.397334][T12079] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 240.421353][T12079] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32) [ 240.645183][T12093] geneve1: entered promiscuous mode [ 241.094890][T12113] netlink: 'syz.2.1551': attribute type 4 has an invalid length. [ 241.120976][T12113] .`: renamed from bond0 (while UP) [ 241.182596][T12117] netlink: 'syz.2.1551': attribute type 3 has an invalid length. [ 241.220141][T12117] netlink: 'syz.2.1551': attribute type 3 has an invalid length. [ 241.244471][T12117] netlink: 'syz.2.1551': attribute type 3 has an invalid length. [ 241.253043][T12117] netlink: 'syz.2.1551': attribute type 3 has an invalid length. [ 241.261482][T12117] netlink: 'syz.2.1551': attribute type 3 has an invalid length. [ 241.524829][T12139] tipc: Enabling of bearer rejected, failed to enable media [ 241.626793][T12148] bridge24: entered promiscuous mode [ 241.637117][T12148] bridge24: entered allmulticast mode [ 241.653629][T12148] team0: Port device bridge24 added [ 241.675019][T12148] bridge0: port 5(team0) entered blocking state [ 241.688220][T12148] bridge0: port 5(team0) entered disabled state [ 241.694932][T12148] team0: entered allmulticast mode [ 241.704890][T12148] team_slave_1: entered allmulticast mode [ 241.714710][T12148] team0: entered promiscuous mode [ 241.719881][T12148] team_slave_1: entered promiscuous mode [ 242.293964][T12198] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 242.347089][T12191] ipvlan1: entered promiscuous mode [ 242.371718][T12191] ipvlan1: left promiscuous mode [ 242.386073][T12205] sock: sock_set_timeout: `syz.3.1577' (pid 12205) tries to set negative timeout [ 242.402741][T12205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.383463][T12230] Unsupported ieee802154 address type: 0 [ 243.628529][T12241] lo speed is unknown, defaulting to 1000 [ 243.646460][T12235] __nla_validate_parse: 13 callbacks suppressed [ 243.646484][T12235] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1586'. [ 243.791954][T12235] xt_CT: No such helper "syz1" [ 243.820204][T12252] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1588'. [ 243.886880][T12248] tipc: Enabling of bearer rejected, failed to enable media [ 244.006584][T12259] validate_nla: 62 callbacks suppressed [ 244.006607][T12259] netlink: 'syz.2.1592': attribute type 6 has an invalid length. [ 244.033262][T12259] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1592'. [ 244.327569][T12272] xt_l2tp: invalid flags combination: 8 [ 244.341171][T12272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1595'. [ 244.394732][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1597'. [ 244.544542][T12280] netlink: 'syz.0.1598': attribute type 8 has an invalid length. [ 244.870653][T12291] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1602'. [ 244.918963][T12291] tipc: Enabling of bearer rejected, failed to enable media [ 246.354931][T12321] netlink: 'syz.0.1610': attribute type 17 has an invalid length. [ 246.583021][T12331] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1612'. [ 246.922626][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'. [ 247.153390][T12342] tipc: Enabled bearer , priority 0 [ 247.199928][T12342] syzkaller0: entered promiscuous mode [ 247.231055][T12342] syzkaller0: entered allmulticast mode [ 247.381113][T12342] tipc: Resetting bearer [ 247.441756][T12358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1620'. [ 247.452028][T12342] tipc: Disabling bearer [ 247.555169][T12360] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1621'. [ 247.605913][T12367] netlink: 'syz.4.1623': attribute type 30 has an invalid length. [ 248.428821][T12409] lo speed is unknown, defaulting to 1000 [ 248.446270][T12409] gre3: entered allmulticast mode [ 248.659087][T12422] __nla_validate_parse: 2 callbacks suppressed [ 248.659110][T12422] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1640'. [ 248.675142][T12419] netlink: 'syz.3.1642': attribute type 2 has an invalid length. [ 248.683796][T12419] tipc: Cannot configure node identity twice [ 248.704797][T12425] netlink: 'syz.1.1641': attribute type 1 has an invalid length. [ 248.740629][T12425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.753040][T12425] netlink: 'syz.1.1641': attribute type 1 has an invalid length. [ 248.757432][T12421] veth0: Caught tx_queue_len zero misconfig [ 248.767158][T12425] netlink: 'syz.1.1641': attribute type 3 has an invalid length. [ 248.803525][T12419] openvswitch: netlink: Duplicate key (type 21). [ 248.838368][T12425] netlink: 'syz.1.1641': attribute type 1 has an invalid length. [ 248.854834][T12425] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1641'. [ 248.904337][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'. [ 248.915612][T12432] bond0: (slave veth9): Enslaving as an active interface with a down link [ 249.013233][T12432] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 249.020476][T12432] bond0: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 249.301771][T12449] xt_hashlimit: max too large, truncated to 1048576 [ 249.314225][T12449] xt_bpf: check failed: parse error [ 249.329989][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1650'. [ 249.347874][T12452] syzkaller1: entered promiscuous mode [ 249.357858][T12452] syzkaller1: entered allmulticast mode [ 249.395492][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1651'. [ 249.567720][T12464] netlink: 'syz.3.1656': attribute type 1 has an invalid length. [ 249.579016][T12464] netlink: 'syz.3.1656': attribute type 2 has an invalid length. [ 249.588960][T12464] netlink: 'syz.3.1656': attribute type 2 has an invalid length. [ 249.597205][T12464] netlink: 'syz.3.1656': attribute type 2 has an invalid length. [ 249.605681][T12464] netlink: 'syz.3.1656': attribute type 1 has an invalid length. [ 249.614090][T12464] netlink: 'syz.3.1656': attribute type 2 has an invalid length. [ 249.808150][T12476] 8021q: VLANs not supported on xfrm0 [ 249.908688][T12488] netlink: 'syz.0.1662': attribute type 10 has an invalid length. [ 250.114608][T12499] No such timeout policy "syz1" [ 250.128390][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1666'. [ 250.189114][T12503] netlink: 'syz.4.1667': attribute type 1 has an invalid length. [ 250.269220][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'. [ 250.478257][T12512] netlink: 'syz.4.1671': attribute type 1 has an invalid length. [ 250.527897][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1672'. [ 250.538230][T12514] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1672'. [ 250.550317][T12514] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1672'. [ 250.941114][T12529] netlink: 'syz.1.1677': attribute type 21 has an invalid length. [ 251.227089][T12542] unsupported nlmsg_type 40 [ 252.139542][T12562] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003 [ 252.954846][T12601] team0: Device vlan3 is already an upper device of the team interface [ 254.312771][T12655] __nla_validate_parse: 13 callbacks suppressed [ 254.312793][T12655] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1720'. [ 254.357162][T12655] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1720'. [ 254.537842][T12667] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 254.623854][T12667] validate_nla: 4 callbacks suppressed [ 254.623876][T12667] netlink: 'syz.2.1723': attribute type 7 has an invalid length. [ 254.662078][T12667] netlink: 'syz.2.1723': attribute type 7 has an invalid length. [ 255.090053][T12695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.225178][T12697] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1732'. [ 255.322150][T12701] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1734'. [ 255.382139][T12703] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1733'. [ 255.396728][T12705] xt_hashlimit: size too large, truncated to 1048576 [ 255.423915][T12703] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1733'. [ 255.484071][T12706] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 255.568878][T12691] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1729'. [ 255.594184][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'. [ 255.660119][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.931339][T12729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1740'. [ 255.958086][T12727] lo speed is unknown, defaulting to 1000 [ 256.116272][T12740] netlink: 'syz.1.1744': attribute type 4 has an invalid length. [ 256.148951][T12740] netlink: 'syz.1.1744': attribute type 4 has an invalid length. [ 256.244911][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1746'. [ 256.301143][T12750] ip6tnl5: entered promiscuous mode [ 256.503598][ T29] audit: type=1800 audit(1776199828.844:4): pid=12753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1748" name="e" dev="tmpfs" ino=1880 res=0 errno=0 [ 256.654696][T12763] openvswitch: netlink: Duplicate key (type 21). [ 257.100088][T12790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.379427][T12805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.419644][ T5889] lo speed is unknown, defaulting to 1000 [ 257.427542][ T5889] syz2: Port: 1 Link DOWN [ 257.432861][ T6112] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.443539][ T6112] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.484405][ T6112] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.505515][ T6112] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.674413][T12814] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 257.683925][T12814] netlink: 'syz.4.1766': attribute type 39 has an invalid length. [ 257.842188][T12817] netlink: 'syz.1.1767': attribute type 2 has an invalid length. [ 257.878225][T12819] xt_hashlimit: size too large, truncated to 1048576 [ 257.899616][T12817] hmac(sha224): entered promiscuous mode [ 257.910312][T12819] xt_hashlimit: max too large, truncated to 1048576 [ 258.039557][T12819] xt_bpf: check failed: parse error [ 258.059039][T12834] lo speed is unknown, defaulting to 1000 [ 258.265715][T12839] netlink: 'syz.0.1773': attribute type 15 has an invalid length. [ 258.316410][T12845] netlink: 'syz.3.1775': attribute type 1 has an invalid length. [ 258.488439][T12849] batman_adv: batadv0: Adding interface: ipvlan2 [ 258.495423][T12849] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 258.519075][T12856] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 258.535724][T12856] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 258.546098][T12849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.558404][T12856] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 258.567946][T12849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.580481][T12856] ip_tunnel_core: Dead loop on virtual device gre1 (net 34), fix it urgently! [ 258.590208][T12849] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 258.778725][T12866] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 259.319155][T12891] netlink: 'syz.4.1787': attribute type 1 has an invalid length. [ 259.432148][T12891] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 259.443397][T12891] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 259.550240][T12907] FAULT_INJECTION: forcing a failure. [ 259.550240][T12907] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 259.566589][T12907] CPU: 0 UID: 0 PID: 12907 Comm: syz.2.1789 Not tainted syzkaller #0 PREEMPT(full) [ 259.566622][T12907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 259.566645][T12907] Call Trace: [ 259.566654][T12907] [ 259.566664][T12907] dump_stack_lvl+0xe8/0x150 [ 259.566710][T12907] should_fail_ex+0x412/0x560 [ 259.566752][T12907] _copy_from_user+0x2d/0xb0 [ 259.566782][T12907] __sys_sendto+0x2b0/0x710 [ 259.566818][T12907] ? __pfx___sys_sendto+0x10/0x10 [ 259.566847][T12907] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 259.566889][T12907] ? __fget_files+0x3a0/0x420 [ 259.566922][T12907] ? ksys_write+0x242/0x270 [ 259.566952][T12907] ? __pfx_ksys_write+0x10/0x10 [ 259.566984][T12907] __x64_sys_sendto+0xde/0x100 [ 259.567020][T12907] do_syscall_64+0x14d/0xf80 [ 259.567045][T12907] ? trace_irq_disable+0x3b/0x150 [ 259.567066][T12907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.567090][T12907] ? clear_bhb_loop+0x40/0x90 [ 259.567118][T12907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.567141][T12907] RIP: 0033:0x7f25f699c819 [ 259.567167][T12907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.567187][T12907] RSP: 002b:00007f25f7936028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 259.567220][T12907] RAX: ffffffffffffffda RBX: 00007f25f6c15fa0 RCX: 00007f25f699c819 [ 259.567237][T12907] RDX: 000000000000ffeb RSI: 0000200000000100 RDI: 0000000000000005 [ 259.567252][T12907] RBP: 00007f25f7936090 R08: 0000200000001100 R09: 0000000000000010 [ 259.567268][T12907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.567282][T12907] R13: 00007f25f6c16038 R14: 00007f25f6c15fa0 R15: 00007fffea96a118 [ 259.567317][T12907] [ 259.607126][T12897] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 259.762490][T12897] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 259.867586][T12912] netlink: 'syz.3.1792': attribute type 3 has an invalid length. [ 259.899402][T12912] __nla_validate_parse: 6 callbacks suppressed [ 259.899423][T12912] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1792'. [ 260.004450][T12924] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1795'. [ 260.150967][T12940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1796'. [ 260.248387][T12945] bond5: entered promiscuous mode [ 260.253908][T12945] bond5: entered allmulticast mode [ 260.412373][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1802'. [ 260.456186][T12953] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1802'. [ 260.785090][T12976] netlink: 'syz.4.1809': attribute type 1 has an invalid length. [ 260.798562][T12976] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1809'. [ 260.870107][T12980] netlink: 'syz.1.1811': attribute type 1 has an invalid length. [ 260.892541][T12980] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1811'. [ 261.019930][T12997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1813'. [ 261.221102][T13006] netlink: 'syz.2.1816': attribute type 32 has an invalid length. [ 261.238277][T12995] lo speed is unknown, defaulting to 1000 [ 261.557844][T13025] wg2: Caught tx_queue_len zero misconfig [ 261.827050][T13037] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1825'. [ 262.088746][T13043] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1827'. [ 262.396743][T13054] xt_hashlimit: size too large, truncated to 1048576 [ 262.471076][T13055] xt_hashlimit: size too large, truncated to 1048576 [ 262.481240][T13051] nbd1: detected capacity change from 0 to 63 [ 262.488536][T13055] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 262.493060][T13052] nbd: must specify a device to reconfigure [ 262.590546][ T5828] block nbd1: Receive control failed (result -104) [ 262.804526][T13072] netlink: 'syz.4.1835': attribute type 10 has an invalid length. [ 262.824418][T13072] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 262.837413][T13072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.848247][T13072] hsr0: entered promiscuous mode [ 262.891523][T13072] bridge0: port 5(hsr0) entered blocking state [ 262.897950][T13072] bridge0: port 5(hsr0) entered disabled state [ 262.932202][T13072] hsr0: entered allmulticast mode [ 262.937655][T13072] hsr_slave_0: entered allmulticast mode [ 262.991014][T13072] hsr_slave_1: entered allmulticast mode [ 263.056935][T13082] bond0: entered promiscuous mode [ 263.063723][T13082] bond_slave_0: entered promiscuous mode [ 263.069792][T13082] bond_slave_1: entered promiscuous mode [ 263.077999][T13082] batadv_slave_0: entered promiscuous mode [ 263.094245][T13082] batadv_slave_0: left promiscuous mode [ 263.115194][T13082] bond0: left promiscuous mode [ 263.120346][T13082] bond_slave_0: left promiscuous mode [ 263.136127][T13082] bond_slave_1: left promiscuous mode [ 263.180149][T13084] Bluetooth: MGMT ver 1.23 [ 263.218940][T13086] netlink: 'syz.1.1841': attribute type 9 has an invalid length. [ 263.294618][T13088] netlink: 'syz.4.1842': attribute type 1 has an invalid length. [ 263.421760][T13088] 8021q: adding VLAN 0 to HW filter on device bond12 [ 263.482991][T13094] team_slave_1: Caught tx_queue_len zero misconfig [ 263.517806][T13088] net_ratelimit: 1 callbacks suppressed [ 263.517828][T13088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.608846][T13111] netlink: 'syz.4.1847': attribute type 1 has an invalid length. [ 263.676146][T13111] 8021q: adding VLAN 0 to HW filter on device bond13 [ 263.761550][T13113] bond13: (slave veth13): Enslaving as an active interface with a down link [ 263.821557][T13111] netlink: 'syz.4.1847': attribute type 1 has an invalid length. [ 263.848881][T13111] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 263.856612][T13111] bond13: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 263.916351][T13125] netlink: 'syz.3.1850': attribute type 1 has an invalid length. [ 264.283538][T13106] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 265.024712][T13166] 8021q: adding VLAN 0 to HW filter on device bond4 [ 265.204080][T13166] bond4: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 265.252180][ T149] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 265.291711][T13185] __nla_validate_parse: 138 callbacks suppressed [ 265.291737][T13185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1866'. [ 265.411089][ T6112] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 265.480186][T13185] erspan1: entered promiscuous mode [ 265.496416][T13185] erspan1: entered allmulticast mode [ 265.571752][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 265.713942][T13204] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1864'. [ 266.094388][T13221] netlink: 'syz.3.1872': attribute type 1 has an invalid length. [ 266.849996][T13258] syzkaller0: entered promiscuous mode [ 266.857011][T13258] syzkaller0: entered allmulticast mode [ 266.884098][T13247] tipc: Enabled bearer , priority 0 [ 266.891688][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1876'. [ 266.903682][T13247] openvswitch: netlink: Invalid VLAN frame [ 266.922683][T13247] tipc: Resetting bearer [ 267.009623][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1881'. [ 267.057920][T13246] tipc: Resetting bearer [ 267.097836][T13246] tipc: Disabling bearer [ 267.205812][T13283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1882'. [ 267.333739][T13288] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 267.781859][T13304] bond6: option all_slaves_active: invalid value (5) [ 267.792548][T13304] bond6 (unregistering): Released all slaves [ 268.003404][T13316] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1892'. [ 268.229582][T13327] netlink: 'syz.2.1895': attribute type 1 has an invalid length. [ 268.306826][T13327] 8021q: adding VLAN 0 to HW filter on device bond5 [ 268.435313][T13332] bond5: (slave veth5): Enslaving as an active interface with a down link [ 268.543335][T13334] bond7: invalid ARP target 0.0.0.0 specified for addition [ 268.550623][T13334] bond7: option arp_ip_target: invalid value (0) [ 268.579290][T13334] bond7 (unregistering): Released all slaves [ 268.627523][T13332] netlink: 'syz.2.1895': attribute type 1 has an invalid length. [ 268.698800][T13314] tipc: Resetting bearer [ 268.726497][T13314] tipc: Resetting bearer [ 268.839984][T13332] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 268.847297][T13332] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 268.876697][T13354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1899'. [ 269.062024][T13350] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.107779][T13350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.226600][T13372] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 269.244219][T13372] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1905'. [ 269.261899][T13372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1905'. [ 269.434971][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 269.480313][T13385] netlink: 'syz.1.1903': attribute type 29 has an invalid length. [ 269.523683][T13385] lo: Caught tx_queue_len zero misconfig [ 269.535369][T13385] sch_tbf: peakrate 7 is lower than or equals to rate 3980700071732255316 ! [ 269.607479][T13395] No such timeout policy "syz1" [ 269.681776][T13392] lo speed is unknown, defaulting to 1000 [ 269.867617][T13412] netlink: 'syz.3.1912': attribute type 2 has an invalid length. [ 269.920198][T13414] netlink: 'syz.3.1912': attribute type 2 has an invalid length. [ 269.981724][T13412] !Љ9: entered promiscuous mode [ 270.151504][T13424] netlink: 'syz.2.1915': attribute type 12 has an invalid length. [ 270.820390][T13447] tipc: Enabled bearer , priority 0 [ 270.829578][T13447] syzkaller0: entered promiscuous mode [ 270.835278][T13447] syzkaller0: entered allmulticast mode [ 270.861507][T13447] tipc: Resetting bearer [ 270.872750][T13447] __nla_validate_parse: 1 callbacks suppressed [ 270.872773][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1923'. [ 270.888919][T13447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1923'. [ 270.911316][T13446] tipc: Resetting bearer [ 270.954104][T13446] tipc: Disabling bearer [ 271.146061][T13458] syzkaller0: entered promiscuous mode [ 271.171329][T13458] syzkaller0: entered allmulticast mode [ 271.219712][T13458] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1926'. [ 271.348760][T13462] block nbd2: Unsupported socket: should be TCP or UNIX. [ 271.553881][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1931'. [ 271.707842][T13485] bond4: option mode: unable to set because the bond device has slaves [ 271.754744][T13486] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 271.819303][T13486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.021644][T13493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1934'. [ 272.340083][T13504] netlink: 'syz.1.1936': attribute type 15 has an invalid length. [ 272.363201][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1937'. [ 272.426558][T13509] lo speed is unknown, defaulting to 1000 [ 272.441885][T13505] 8021q: VLANs not supported on gre0 [ 272.849969][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1947'. [ 272.882743][T13532] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1944'. [ 272.949151][T13532] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1944'. [ 272.978739][T13532] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1944'. [ 273.293742][T13555] pimreg0: tun_chr_ioctl cmd 1074025681 [ 273.359511][T13559] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.378851][T13559] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.400407][T13559] .` (unregistering): Released all slaves [ 273.737915][T13573] x_tables: duplicate underflow at hook 3 [ 274.122733][ T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 274.601491][T13624] netlink: 'syz.2.1970': attribute type 1 has an invalid length. [ 274.705688][T13624] 8021q: adding VLAN 0 to HW filter on device bond6 [ 274.782983][T13635] bond6: (slave veth7): Enslaving as an active interface with a down link [ 274.820109][T13627] bond6: (slave veth9): Enslaving as an active interface with a down link [ 274.847028][T13624] bond6: (slave bridge5): Enslaving as an active interface with a down link [ 274.991353][T13626] vlan3: entered promiscuous mode [ 275.003332][T13626] geneve1: entered promiscuous mode [ 275.024228][T13626] vlan3: entered allmulticast mode [ 275.044919][T13626] geneve1: entered allmulticast mode [ 275.329088][T13667] netlink: 'syz.1.1979': attribute type 1 has an invalid length. [ 275.365779][T13666] netlink: 'syz.1.1979': attribute type 1 has an invalid length. [ 275.976648][T13695] __nla_validate_parse: 9 callbacks suppressed [ 275.976673][T13695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1985'. [ 276.153893][T13710] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 276.162896][T13709] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1988'. [ 276.240333][T13708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1987'. [ 276.518386][T13725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1994'. [ 276.550410][T13729] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1995'. [ 277.248515][T13760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2000'. [ 277.292358][T13763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1999'. [ 277.330356][T13763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1999'. [ 277.343356][T13760] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2000'. [ 277.348703][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 277.527438][T13759] lo speed is unknown, defaulting to 1000 [ 277.559165][T13760] ip6gretap0: entered promiscuous mode [ 277.793042][T13760] ip6gretap0: left promiscuous mode [ 278.009989][T13783] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2003'. [ 278.176098][T13788] veth11: entered promiscuous mode [ 278.755524][T13801] lo speed is unknown, defaulting to 1000 [ 278.884674][T13806] netlink: 'syz.4.2009': attribute type 58 has an invalid length. [ 279.126104][T13815] bond0: entered promiscuous mode [ 279.157406][T13815] bond0: left promiscuous mode [ 279.403134][T13826] netlink: 'syz.4.2014': attribute type 10 has an invalid length. [ 279.419572][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 279.484176][T13830] netlink: 'syz.2.2017': attribute type 2 has an invalid length. [ 280.382699][T13888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.685148][T13896] bridge0: port 6(veth0_to_batadv) entered blocking state [ 280.715980][T13896] bridge0: port 6(veth0_to_batadv) entered disabled state [ 280.731596][T13896] veth0_to_batadv: entered allmulticast mode [ 280.760782][T13896] veth0_to_batadv: entered promiscuous mode [ 280.781402][T13897] veth0_to_batadv: left allmulticast mode [ 280.787212][T13897] veth0_to_batadv: left promiscuous mode [ 280.821242][T13897] bridge0: port 6(veth0_to_batadv) entered disabled state [ 280.909637][T13911] ip6gre1: entered promiscuous mode [ 280.957416][T13903] lo speed is unknown, defaulting to 1000 [ 281.851521][T13950] __nla_validate_parse: 13 callbacks suppressed [ 281.851544][T13950] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2049'. [ 281.867327][T13950] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 282.114011][T13961] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2053'. [ 282.263671][T13970] x_tables: duplicate underflow at hook 3 [ 282.284822][T13970] x_tables: duplicate underflow at hook 1 [ 282.404199][T13972] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.433186][T13972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.505089][ T5889] lo speed is unknown, defaulting to 1000 [ 282.520916][ T5889] syz2: Port: 1 Link ACTIVE [ 282.551256][ T5889] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 282.608911][T13987] lo speed is unknown, defaulting to 1000 [ 282.625511][T13972] tipc: Enabled bearer , priority 0 [ 282.640375][T13972] tipc: Resetting bearer [ 282.671167][ T6098] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 282.727692][T13989] lo speed is unknown, defaulting to 1000 [ 283.409493][T14028] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 283.421463][T14028] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 283.429922][T14028] CPU: 1 UID: 0 PID: 14028 Comm: syz.4.2073 Not tainted syzkaller #0 PREEMPT(full) [ 283.439332][T14028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 283.449426][T14028] RIP: 0010:memcpy_sglist+0x420/0x730 [ 283.454867][T14028] Code: e8 55 b4 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 67 af 52 fd 4c 89 f3 eb 07 e8 5d af 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 283.474515][T14028] RSP: 0018:ffffc9000fc27698 EFLAGS: 00010202 [ 283.480631][T14028] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 283.488639][T14028] RDX: ffffc9000dd75000 RSI: 0000000000000237 RDI: 0000000000000238 [ 283.496655][T14028] RBP: dffffc0000000000 R08: 0600c10000fef7b1 R09: 9e99503e5cb40006 [ 283.504666][T14028] R10: dffffc0000000000 R11: ffffed100e75f09a R12: 000000000000000a [ 283.512672][T14028] R13: ffff888028137c80 R14: ffff88803429c0a0 R15: 0000000000000008 [ 283.520684][T14028] FS: 00007fe50b7ab6c0(0000) GS:ffff888125547000(0000) knlGS:0000000000000000 [ 283.529686][T14028] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.536311][T14028] CR2: 000000110c2da14d CR3: 000000002a3b0000 CR4: 00000000003526f0 [ 283.544326][T14028] Call Trace: [ 283.547650][T14028] [ 283.550624][T14028] aead_recvmsg+0x719/0x1030 [ 283.555271][T14028] ? __pfx_aead_recvmsg+0x10/0x10 [ 283.560380][T14028] ? __pfx_aead_recvmsg+0x10/0x10 [ 283.565549][T14028] sock_recvmsg_nosec+0x10c/0x140 [ 283.570626][T14028] ____sys_recvmsg+0x3e3/0x4a0 [ 283.575468][T14028] ? __pfx_____sys_recvmsg+0x10/0x10 [ 283.580818][T14028] ? import_iovec+0x73/0xa0 [ 283.585548][T14028] ___sys_recvmsg+0x215/0x590 [ 283.590278][T14028] ? __lock_acquire+0x6b5/0x2cf0 [ 283.595007][ T7215] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 283.595262][T14028] ? __pfx____sys_recvmsg+0x10/0x10 [ 283.608264][T14028] do_recvmmsg+0x334/0x800 [ 283.612736][T14028] ? __pfx_do_recvmmsg+0x10/0x10 [ 283.617720][T14028] ? __pfx_do_futex+0x10/0x10 [ 283.621108][ T7215] tipc: Node number set to 2313982518 [ 283.622628][T14028] __x64_sys_recvmmsg+0x198/0x250 [ 283.633080][T14028] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 283.638684][T14028] do_syscall_64+0x14d/0xf80 [ 283.643323][T14028] ? trace_irq_disable+0x3b/0x150 [ 283.648395][T14028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.654499][T14028] ? clear_bhb_loop+0x40/0x90 [ 283.659198][T14028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.665119][T14028] RIP: 0033:0x7fe50a99c819 [ 283.669576][T14028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.689220][T14028] RSP: 002b:00007fe50b7ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 283.697695][T14028] RAX: ffffffffffffffda RBX: 00007fe50ac15fa0 RCX: 00007fe50a99c819 [ 283.705718][T14028] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000006 [ 283.713743][T14028] RBP: 00007fe50aa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 283.721736][T14028] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000 [ 283.729732][T14028] R13: 00007fe50ac16038 R14: 00007fe50ac15fa0 R15: 00007ffccca64d68 [ 283.737740][T14028] [ 283.740792][T14028] Modules linked in: [ 283.745600][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 283.747204][T14028] ---[ end trace 0000000000000000 ]--- [ 283.781384][T14028] RIP: 0010:memcpy_sglist+0x420/0x730 [ 283.787035][T14028] Code: e8 55 b4 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 67 af 52 fd 4c 89 f3 eb 07 e8 5d af 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 283.807418][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 283.846557][T14035] netlink: 'syz.4.2073': attribute type 1 has an invalid length. [ 283.848616][T14028] RSP: 0018:ffffc9000fc27698 EFLAGS: 00010202 [ 283.871215][T14028] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 283.879419][T14028] RDX: ffffc9000dd75000 RSI: 0000000000000237 RDI: 0000000000000238 [ 283.897269][T14028] RBP: dffffc0000000000 R08: 0600c10000fef7b1 R09: 9e99503e5cb40006 [ 283.907587][T14028] R10: dffffc0000000000 R11: ffffed100e75f09a R12: 000000000000000a [ 283.915767][T14028] R13: ffff888028137c80 R14: ffff88803429c0a0 R15: 0000000000000008 [ 283.924035][T14028] FS: 00007fe50b7ab6c0(0000) GS:ffff888125447000(0000) knlGS:0000000000000000 [ 283.934665][T14028] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.941462][T14028] CR2: 00007f2d65fe9f00 CR3: 000000002a3b0000 CR4: 00000000003526f0 [ 283.949616][T14028] Kernel panic - not syncing: Fatal exception [ 283.956328][T14028] Kernel Offset: disabled [ 283.960665][T14028] Rebooting in 86400 seconds..