last executing test programs: 6.677556638s ago: executing program 3 (id=3742): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xaba2}}], 0x30, 0x4855}, 0x24000052) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-160-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r4, 0x0, 0xe6, 0x6}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000700)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000740)=0x20) r6 = socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="9386", 0x2}, {&(0x7f00000003c0)="da0c9af54a7b98b9f8b7e708022b92de7ca6", 0x12}, {&(0x7f00000018c0)="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", 0xead}], 0x3, 0x0, 0x0, 0x40044}}], 0x1, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, 0x0, 0x0}, 0x94) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x20, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000040)={r10, 0x0, 0x4, 0x7, 0x1, 0x8}, 0x14) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000002b40)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000ff7940d3a6db7369795d6105d7fbf4f500e72e03c982be0f91cc262b21aadd58d5106e541adf3d95563fa10d071804e74683fb61bdb0529056dd42463cd745cfbad1b5cf27ec8ca060b0477bebf369ff974a68da", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002940)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2c, 0x1}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r14, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r14, &(0x7f00000000c0), &(0x7f0000000280)=""/239}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a80)={0x18, 0x1, &(0x7f0000002780)=@raw=[@alu={0x4, 0x1, 0x5, 0x2, 0xb, 0xfffffffffffffffe, 0x10}], &(0x7f00000027c0)='syzkaller\x00', 0xe, 0xe6, &(0x7f0000002800)=""/230, 0x41000, 0x2, '\x00', 0x0, 0x0, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002900)={0x2, 0xf, 0x3, 0x8001}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000029c0)=[r12, r13, r14], &(0x7f0000002a00)=[{0x0, 0x3, 0x2, 0x4}, {0x0, 0x4, 0x4, 0xb}, {0x3, 0x5, 0x0, 0x8}, {0x4, 0x5, 0x8, 0x9}, {0x0, 0x3, 0x3, 0x9}, {0x5, 0x1, 0x2, 0xa}, {0x2, 0x5, 0x10, 0x8}, {0x0, 0x1, 0x7, 0xa}], 0x10, 0x1}, 0x94) sendmmsg$inet_sctp(r0, &(0x7f0000002300)=[{&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000140)="4cf7d47a8a51fa3b6a7156472b527b0e0be1ffa5d567ac376408741fbbbbc8179ef2521b5668119f6484bf0d8348c7efac0257f3b8274b365f1e1aa227c8c09495ab76b0aa2e7eaf8b34817560b2c6cbbf2194f4e021578127da47024ad2eba5a8baeace8487c527d429931b9cd7d58c547de39292e8", 0x76}, {&(0x7f00000001c0)="9945ef69d329ba10508ce2647f9c3efa316e4e682f4438d0f428b009079ea0203f297b425f15ade25c697dbaecf3393da765c064b67b735735ea46e8230574fed68d915e5b48783c8407669e4b0e9f4ad5d2968626fbe996c432aff62c29b3b73abce6879a2bef13037e15115ca568da75360699a67e292fac92be2d3b65fdb612fded13cdd17feaec9add3c23af7734e20f3bfbe15404ec98399a6f3b78f21dd2abfb87c011b8856f68ec7be42a4151df519e1ba560ea570c29787f03d725956bd625f83f5a3d15e1833b40ef933d6bb35dc930224820a5a8f620c365d2afe9", 0xe0}, {&(0x7f0000000300)="5f18b85442492efafbd25c1c9f6c0548ce6e52eeaf96ee76e6eb2d434b50e184ba0adab16940354ba92efb7daa81344da8a0ca349fe856b59ef68ebe92f387122638b9452626fcc1b05e2167556d8727410649231a8942e80acfce8f3fcda2ecd13672f7d34775714e486025cefbb2aced3bb355c03cf16e50fac4a1172c05f1dfbeb8f689d68de1", 0x88}, {&(0x7f00000003c0)="1cef5464f19aa50d9b57717e1a30718a26d9612b3bb1b7711c290294ac2bc7d6a23f1e2a6d7c3717e3b0dc53dfda0813cebbf8a860f8e73b0d0c6f20c97bf76947bbf48d5b6e5c127c960c4a30d0dd32e7cc646775de790d82f4e6cad9f9eeb5e94a668bfa927efc1d5db3b37abe19d1bf9845b7b9d7e19894187a238172bda13c213f7406dbda26c43541ef0361a809c124148cc0039685f1e002b145dff78a92c70b5d65cd82fa87b4c033ed73f5655b9bc4235b1668345fe0159900e41ca519f31369e8c4ec037867bb1adde308e049419d70d2f92dacf1de0557c770d0f7a3b9d2e83fc3a6c3c675b7d9075a", 0xee}, {&(0x7f00000004c0)="be13eb1b8017f6c3a54c1e56edec39bfd3857a6e2024f689eab28697e9df8f0e5b19d0a650b052eff8c0ee380623aac8ce3e2290f12c2ac95214487dcf303bd5", 0x40}, {&(0x7f0000000500)="89c8c4af5467b842f12be9a75da48d8f2e87f3d1d2d13f1e17f6a4ab218277db14f59a4b267f14225b8d76450c5d026b011b5da33d2e86a5f8145fec6cfc48549fc764fee709f890f09d6e9006a1a781b29a2ce5852c521493bceab0be0fcd3afcc6ed92ac339e2d6ae88cea5ba076b2a7656481ddfd097a3048b71c1ffd9e3056a428c0106938fc73dc0633d00ff88e547d5e89da08d7355c66b6cc8f47ce9cc8007d4145c195b516af402480b646", 0xaf}, {&(0x7f00000005c0)="4c1b5b87cc7b3db29e1442f39a57a3499e572c06aa038336554246c1f36193bc4a4b95acfc01bd4d7babccb35b98a0a6da6a1cafe77337f60b46e57ce34012ad", 0x40}, {&(0x7f0000000600)="783ba8f908d4b3ea95702bf3c66323fe10c88597c5305509d12a7a9cc57c197091582693ecef8abe89a97f6fec40e95aa85f205e06e4c19a76e66976b90236a297fd2f52cd179c1e6e893d1cb98d7acd3fc332d0bfeb012c8a27b5d0d7df47afc35cd76bf8b03c4bfe490879", 0x6c}], 0x8, &(0x7f0000000780)=[@dstaddrv6={0x20, 0x84, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0xc6, 0x4, 0x8, 0x8, 0xe7, 0x0, 0x1, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x200, 0x1, 0xb, r5}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7ff}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x4, 0x1, 0x5c29, r10}}], 0xc8, 0x40080}, {&(0x7f0000000880)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000001f00)=[{&(0x7f00000008c0)="ee178d0f5c47ffb5e90e6ff02b652740b3f371103618008478b40d5719b8984aef9c7070336ae317c5c0962eb1c4cf41b2b1a09c8198bccde394995009743189d200165bb7cb5e87508ee022c55b93137a2773e98553d0541996a6f7f9c7417d4badfbe53db40037e182a46a6640631bb866a1644a1533c372548e3e99e01c4373189837420b", 0x86}, {&(0x7f0000000980)="f23a4074b5d80d87825efcd1e52f228f4dc4113a16a93a3578ee25d1f090ebd6567133827e5f5a48c25cafadc6d1bf461613b161d2b961c58f6d75eab6e66cb5a1831ea184f15833a1a06de7f383b7318c71e084626f0738a3ec3f13da0641f37c518382dfcf992c96b3853128ae412fa398fc98822a5cb208836d7500a5182ca3e6b315acba1c0fe644e4d706f379f8fc63c39e9d1cf9a16b9d4d81b4ebb08ea9a99de8fca80cab0ab57133f3600b0eae4bff7d0d89406a2a26f51c6567862a8f86ef662239726610de1a2832572239eebb27a7", 0xd4}, {&(0x7f0000000a80)="e86ef00aec06c768fc634dc726a52ded80510b4d1821a43ef3c62252e7eedf05bbd4fb716d5f9340e7dad96822e032ab0bbd587691f3b76dfc140ac6d30aaee6a2cac5948c902f13a2ec88d731ec435278d316d15af30330754b3ad316c8a2aff7dac9395aff9bb0f7b6005fd5fb345747adcb02660f3766d3c9414bd6f43db482897f0157a05db05e8ca7", 0x8b}, {&(0x7f0000000b40)="7837dab929750b5eb9da29a63723af6ab92ca4427a0f21e9e2531e8da9a963dadf1dbd170f8ae699fa367c77c433333a0fe8f053746a76f51977c953021d76fe3f46aa0d200519df7a7983e796997f4161f7080fff6b02ff03b4116b564aa931297a9afacfc2a5042e17af05fea37725a92889f3203b6128e84030a9dfe78dcf0b957f5a7e2623ec8a401d0aba6780beef1c8af1c23fb8fc386aff8af4d317b62f91b75c707d0a292c77d5802ae2dc536a05ac21180f41ef7a07fbdd37d021661d280e15", 0xc4}, {&(0x7f0000000c40)="5ce448aa49e4819e736a8f0073b854865b2be4b219b6a01479e45a15983f144f8ec20e0486f5993ff13fa76fdfe40e0d5d920c580e09b500af01c537e18651e687c3edfe229de1bc52feaeafc8defa659b4a90319bd9baa20fc502ee00f127d6f2a92869323f0b7b1d3ca4ad2a8cf940cd05b0d7009665b72492438990c15b5ef9ac4b043a34877fe50577e9964d34e01f216df5d46a19784eda8e8dbc953193b0403258aa67efcdd48ddc821e6744c24a1c5aba96b913503242b90eced7f84155a1e13d936d7d84a9c9ac001ca7ffdb0e9d19e9c7a7a36428cb9b264062f532180747194b8a71", 0xe7}, {&(0x7f0000000d40)="9abbdd518de371b057065b70910516c6d0168a3c41429911b4f5b704de9a02f10696fe20a051afc5e1abf7100a27cb61ebe10cc1d1752a9a1faad46c9d8ef37fa02f110aad73e3ceaae8deee177a729d4a65c8557601c5cb8f2063d4ddc0af95a490fc7612e1159b66d986facfce00a57681c69939ee69cbbfdc6b6fef8344bebdddb8394c2771a2a1df6a921407af748352782df3097833d979184c6d5af4d815cd099119fcbbaa0ad7abe1dd4cf81ddf31130c589299fa4b132df81a83327a7fd008ccb61a75045fc00253cbcaacf24bf391a84dddbc8199d27fc9ec4e5f1b320c82384eed5bcd6a3440b1e37bc4ef73ba2122c0df", 0xf6}, {&(0x7f0000000e40)="00806126e4c520d4ab25ab64f535cd18b2709534a30a1a91948a9ff79111885f", 0x20}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="7cfd2396261d82060d07614913af418b99f31fb221eb7f0047e2606b9b1384f4699a27ce355156b72665a7ff3955b6792dc677d44bc37999856b3b47d6634c9efb135cf4370ae7e47fd698749713923ede351f486be4a645ab15f3aa575b5dc5325c72562182e723a333a87334ac11de70f3afc8", 0x74}], 0x9, 0xfffffffffffffffe, 0x0, 0x24008080}, {&(0x7f0000001fc0)=@in6={0xa, 0x4e23, 0xb, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7c}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000002000)="3c4512b17eefc7fdc74da9229673be43a2c0b71067ebe8c013afdca90633c67776ea23d3378d8f1aef80843d07c9e13198bdfe1607b6ecb972ac6d6ea0386507bbfc7895d53bf9", 0x47}], 0x1, &(0x7f00000020c0)=[@authinfo={0x18, 0x84, 0x6, {0x1}}], 0x18, 0x800}, {&(0x7f0000002100)=@in6={0xa, 0x4e24, 0x1, @loopback, 0x43}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000002140)="c034f2f2a3cb1a777279bd78336cb42aae5cdc05f2959a749c047710ddb9d256b46f0a67cbe43381597df6f7e04c5ce6753856719a766ea9d73a1b097158a463eb0875878abb9d43750bdb9c4f5a9bf5f5c166697c17", 0x56}], 0x1, 0x0, 0x0, 0x8000}, {&(0x7f0000002200)=@in6={0xa, 0x4e24, 0x7, @remote, 0xd}, 0x1c, &(0x7f0000002240), 0x0, &(0x7f0000002280)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x3a56}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xfffffffe}}], 0x48}], 0x5, 0x4004001) 5.717367918s ago: executing program 3 (id=3749): socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x98, 0x2, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2c}]}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000040}, 0x40840) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.502505415s ago: executing program 3 (id=3754): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000006e629a9a8c1896d681e28e5e3503d6518899020155a7ac50e14f4cfde8fb6521043f37f63b1b310ea24ad2e5167f3b6f16b6df4d3efea07f098e35cb4435384f55263ea56f8c5ec9cf85df7ca76bea6d262659e684e81643006d9d4f8736306d0d6d63f8ff5aaa728afc3a9ec1f221d890541a862b62", @ANYRES16=r1, @ANYBLOB="00042bbd7000fddbdf25090000000500130005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4(r3, 0x0, &(0x7f00000001c0), 0x80800) bind$bt_hci(r4, &(0x7f0000000200)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="018025bd7000fcdbbc252101000009001f0070687931000000000a0001007770616e348f0000050020"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r5, 0x208, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x4048800) 5.218973404s ago: executing program 3 (id=3759): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@generic={0x1, 0xffffffffffffffff, 0x9}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newrule={0x28, 0x20, 0x20, 0x70bd2c, 0x25dfdbfc, {0x2, 0x10, 0x80, 0x72, 0xd, 0x0, 0x0, 0x8, 0x10}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@dev, 0x0}, &(0x7f0000000200)=0x14) sendmsg$sock(r3, &(0x7f0000000440)={&(0x7f0000000240)=@can={0x1d, r4}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="2f75b4bf16f16f4fff44642b33690dd1173b80ac6b7b8121989bf1dabb012d05707f871ff2a38588d49a402a791abb3679475aa2ac1db93c58e09951f968cb50dfbb8ed36a4ef721577cb7460137953ebcfcc22221b0fc0aa7422c31ecb0203ffa023a2197f01950bf52e2a0c8616bc2a58e59d3a5a3d4741a35", 0x7a}, {&(0x7f0000000340)="936da901e422d54906759532edc28ae37d91604adcc23316c44ad105704f626d66b0263834382abb", 0x28}], 0x2, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x24, 0x9480}}, @timestamping={{0x14, 0x1, 0x25, 0x9582}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x93}}], 0x60}, 0x20000084) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000480)={{0x2, 0x4e24, @broadcast}, {0x6}, 0x26308adeda195cc6, {0x2, 0x8, @multicast2}, 'veth0_to_bond\x00'}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000500)={0x0, 0x9, 0x2, 0x6, 0x7, 0xf8000000}, &(0x7f0000000540)=0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000580)={r7, 0x81, "036ce4a9f5d708d62cdf18be41b8a93de1b16715609ea02ea9e78759b72625c4ee6fba4ef287513c56dcdb39b2d3dcbe39302c92778eb06c6344616df77740d222cc0ba2cb855df5a275176beb4e40e279b629973676f0ec4a2c5a65b1917d92c190d84ce03b40d52a7fd813ad0f4e11004250816377b8ad7d413ad17940dbca77"}, &(0x7f0000000640)=0x89) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x10, r5}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000000700)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x90, 0x3, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x24e}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffffd}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3d3}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0xf4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}]}, 0x90}, 0x1, 0x0, 0x0, 0x801}, 0x14) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000c80)={0x28, 0x0, 0xffffffff}, 0x10) r11 = socket(0x1a, 0xa, 0x7fffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r11) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000d00)={r6, r8}) ioctl$FS_IOC_GETFSSYSFSPATH(r8, 0x80811501, &(0x7f0000000d40)={0x80}) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, &(0x7f0000000e00)) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000e40)=[@in={0x2, 0x4e20, @multicast1}], 0x10) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FICLONE(r2, 0x40049409, r12) setsockopt$nfc_llcp_NFC_LLCP_RW(r11, 0x118, 0x0, &(0x7f0000000e80)=0xf, 0x4) socket$igmp(0x2, 0x3, 0x2) 5.003348251s ago: executing program 3 (id=3760): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x36, 0x2, 0x70bd2d, 0x25dfdbfb, {0x5}, [@nested={0x8, 0xc2, 0x0, 0x1, [@nested={0x4, 0xe5}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000240)="94", 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x1a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1e}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000010301010000ed00000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) recvfrom$ax25(r4, &(0x7f00000000c0)=""/218, 0xda, 0x2000, &(0x7f00000001c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008044) listen(r2, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6015690900462ffffc020000000000000000000000000000ff0200000000000000000000e2ffff00242088a800000000000000000800000086dd88a888be08000000100000ff0100000000000000080022eb00000000200000000200000000010000000000000800655800000000a57baed5898470"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x1000, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @mptcp=@syn={0x1e, 0xc, 0x4, 0x1, 0xff, 0x2, 0xfffffff1}]}}}}}}}}, 0x0) 4.854343239s ago: executing program 3 (id=3764): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0xf, 0x3, 0x5}, 0x10}, 0x94) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x10, 0x2, 0x4) (async) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200cd4c1960b89c40ebb373", 0x39}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f00000000c0)) 4.403689658s ago: executing program 2 (id=3769): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000afc4115a001800000018000000020000000000000001000084060000000000000002000000b1ff7bc55c7d48673cb3cebfe2b31c2a800000000000"], 0x0, 0x32}, 0x28) 4.306801337s ago: executing program 2 (id=3771): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 3.940357511s ago: executing program 2 (id=3774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a201000061d0000010000000a00000000000000", @ANYRES32, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001400)={'vcan0\x00', &(0x7f00000013c0)=@ethtool_modinfo={0x42, 0x4, 0x7}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001340)=ANY=[], &(0x7f0000000300)=""/4096, 0x6f, 0x1000, 0x0, 0x0, 0x38405ec215641686}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x6, [{0x0, 0x2, 0x80}]}]}}, 0x0, 0x32}, 0x28) sendfile(r4, r3, 0x0, 0xffffffff000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x2a020400) setsockopt$inet_int(r5, 0x0, 0x12, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001440)={{0x14}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x58, 0xb, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xc2a}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x26}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe8620e05f0b824db}, @NFTA_SET_USERDATA={0x19, 0xd, 0x1, 0x0, "dd4d760bf5b73ca41533739a6bdc0a69b0ae64fc5b"}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000018110000", @ANYRES32=r0, @ANYRES16=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x51, '\x00', 0x0, @fallback=0x2a, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x0, 0x1, 0x1, 0x3, 0xa5c, 0x802}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r8, 0x8b32, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000900)={0x0, 0x2}, 0xfc1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000000800a0018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000080085000000c800000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0xe3, &(0x7f0000000140)=""/127, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r10, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x401, 0x44000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x2}, 0x50) 3.43410717s ago: executing program 0 (id=3779): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x2100, {0x3, 0x1, 0x2}}]}}, 0x0, 0x32, 0x0, 0x8, 0xdd6}, 0x28) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@bcast, @null, @bcast, @default, @null, @rose, @default, @netrom]}, &(0x7f0000000000)=0x48, 0x80000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:4\t*'], 0xa) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x44, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x6000}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, 0x2, {0x0, 0x7ff}}}}}}}}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00"], 0xfe33) getsockname$netrom(r0, &(0x7f0000000100)={{0x3, @bcast}, [@null, @bcast, @default, @rose, @null, @remote, @rose, @netrom]}, &(0x7f0000000180)=0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x2100, {0x3, 0x1, 0x2}}]}}, 0x0, 0x32, 0x0, 0x8, 0xdd6}, 0x28) (async) accept4$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@bcast, @null, @bcast, @default, @null, @rose, @default, @netrom]}, &(0x7f0000000000)=0x48, 0x80000) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) (async) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) (async) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:4\t*'], 0xa) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x44, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x6000}, {}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, 0x2, {0x0, 0x7ff}}}}}}}}}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00"], 0xfe33) (async) getsockname$netrom(r0, &(0x7f0000000100)={{0x3, @bcast}, [@null, @bcast, @default, @rose, @null, @remote, @rose, @netrom]}, &(0x7f0000000180)=0x48) (async) 3.181054456s ago: executing program 0 (id=3784): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="850000008f0000007b00000000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf389d21e614314b44d3a320471dc33ceec91a1512761160808845c885e7e75118ae8702a167ce7d0ca850e435f105f4c7702c8505fc4669acef909579390b1a6795fae716b04fba77244be06160107ab2a3a30645bbec6570170c1d362e6d6209fa0809ffbcc48bfa0175374dc3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) 3.026889967s ago: executing program 0 (id=3786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd2e, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x144}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x3) 2.782148364s ago: executing program 0 (id=3787): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x800}, @NFTA_QUEUE_TOTAL={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x40) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$unix(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}, 0x1) close(r0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x1, 0x8}, @sack_perm, @mss={0x2, 0x9}, @mss={0x2, 0x8001}], 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x1, 0x8}, @sack_perm, @mss={0x2, 0x9}, @mss={0x2, 0x8001}], 0x4) socket(0x11, 0x3, 0x0) (async) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x5, 0x6, @remote}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r6, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd9, 0x3a}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8844) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8=r5, @ANYRES8=r4], 0xdd12}], 0x1, 0x0, 0x0, 0x20040800}, 0x20040051) 2.729331904s ago: executing program 2 (id=3788): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000d40)=ANY=[@ANYBLOB="100000002300000126bd7000fcdbdf2d"], 0x10}, {&(0x7f0000000f80)=ANY=[@ANYBLOB="10000000082dbd7000ffdbdf25000000"], 0x10}], 0x2, 0x0, 0x0, 0x10}, 0x40000090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x72, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_create1(0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00'], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a00, 0x0) socket$igmp6(0xa, 0x3, 0x2) write(r2, &(0x7f0000000000)="05000000010001", 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create(0x9) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@deltfilter={0x34, 0x2d, 0x100, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff8, 0x3}, {0xfff3, 0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_flower={{0xfffffffffffffe08}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x1, 0x4, &(0x7f0000000100)="8d839cb3", 0x9, 0x8, 0x2, 0x5508, 0xc338, 0x1, 0x7, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2.668134444s ago: executing program 0 (id=3789): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = socket(0xa, 0x3, 0x3a) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000e40)=[{0x0, 0x50}, {0x0}], 0x2, 0x0, 0x0, 0x4048800}, 0x20008801) sendto$inet6(r0, &(0x7f0000000040)="de", 0x1, 0x80, &(0x7f0000000140)={0xa, 0x4e21, 0x2400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0), 0x8) 2.655020723s ago: executing program 4 (id=3790): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x8b}, 0x15, 0x3, 'fo\x00', 0x1, 0x400000, 0x4}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000180)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x35, 0x81, 0x65}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10007, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.218334446s ago: executing program 4 (id=3791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x58, r1, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1000, 0x4}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x27}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x46}]}, 0x58}, 0x1, 0x0, 0x0, 0x8804}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14e30100", @ANYRES16=r7, @ANYBLOB="01002abd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r8, 0x20) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) shutdown(r8, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r8, 0x0, 0x48f, &(0x7f0000000240)={0x84, @broadcast, 0x4e22, 0x4, 'lblcr\x00', 0x18, 0x5, 0x63}, 0x2c) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000340)={r8, 0x9, 0x3, 0x7ff}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r9, 0x84, 0x16, &(0x7f0000000380)={0x5, [0x7, 0x0, 0x3, 0x1ff, 0x6d8f]}, &(0x7f00000003c0)=0xe) 1.728340275s ago: executing program 4 (id=3793): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x1d, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x30}}, 0x44004) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x6, 0x950e, 0x62a9b7b335f03810, @local, @empty, 0x700, 0x0, 0x4, 0x7f}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000560000022abd7000fbdbdf2507000000", @ANYRES32=r2, @ANYBLOB="a019b11289ef1435307e59b3ee3d4ae6ece0d7fc5ff338903f57e2a96f3a5ef7b14eb567b51e83688d3d292174b9371d573ded71c89e8cb32884796a7d3e7484715922ae4032938be54e9c5b4671d094c6ae430ea081f2bffecd2be0a9f64cef77d856b8e9605c2a20dd465e46884aefabca52e0ca42edba24e01fc34118a5efe4f0ec1bc569bb7e4dcc4e0548ecbce73029b9aa1f00275e6135f9a6e6bdeaa6028a5163299d5f194ff9e4a60f33494726098b2798c0c440faf02e95e0f53c661d7bd7c3785c873fb982529a345ebe055080afa2eb0637c0e7a3696925da829b9f6a2d2096ec18156ad5672180249f20d2e278fc43d31c"], 0x53}}, 0x0) 1.646186351s ago: executing program 2 (id=3794): socket$kcm(0x2, 0xa, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x28, 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.499540288s ago: executing program 4 (id=3795): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\n\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000c40)={0x20, r2, 0x539, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040840}, 0xc840) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xf92e, '\x00', r3, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) 1.322037477s ago: executing program 0 (id=3796): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000002030103000000000000000002000000090002"], 0x20}, 0x1, 0x0, 0x0, 0x40049c5}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket(0x8, 0x0, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000200), &(0x7f0000000040)=@tcp6, 0x2}, 0x20) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x30000, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r7, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004050}, 0x24000000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={0x0, 0x0, 0x8}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x54}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f00000003c0)="1f60afeb2173660a8ad8e1a8feefeb5ec05e425c9b126a9d240b85282724ff306433ef0ba982740d0a3668a7bc1064541d068af2fad1d8c17a17d471153d7bf2116d954c8b87966935d1366d3968331aa7", 0x51) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)={0x6c, r10, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x43, 0xe, {{{0x0, 0x2}, {}, @device_a, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x2}, @void, @val={0x76, 0x6, {0x0, 0x0, 0x4000}}}}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 1.234241626s ago: executing program 2 (id=3797): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') close(0x4) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x90, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) 1.232259268s ago: executing program 1 (id=3798): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000400), 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="030000000640"], 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000100003052dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008002500", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff024}, {0x6}]}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) close(r4) socket$inet6(0xa, 0x3, 0x87) connect$inet6(r4, &(0x7f0000001540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x9df}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xf0}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) socket(0xb, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 1.223153014s ago: executing program 4 (id=3799): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030500000020fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x41, 'lblcr\x00', 0x0, 0x10001, 0x200e}, 0x2c) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="0e80010017"], 0x9) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r6, 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) epoll_create1(0x80000) recvmmsg$unix(r8, 0x0, 0x0, 0x400122a0, 0x0) 1.099404492s ago: executing program 1 (id=3800): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$packet(0x11, 0x2, 0x300) socket(0x15, 0x5, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x6}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04080000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) 841.992872ms ago: executing program 1 (id=3801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x200000c8}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xa}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r10, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0xfd, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r11) (async) r12 = socket$unix(0x1, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x6, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_DELAY_DIST={0x7, 0x2, "6ad2a3"}, @TCA_NETEM_CORR={0x10, 0x1, {0x5, 0x5, 0x9}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 667.248205ms ago: executing program 1 (id=3802): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000200)={0x24, r0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000804}, 0x80c1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000001580)={0x1, 0x7, 0x0, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) sendto$packet(r2, &(0x7f0000000240)="db11c7294dc863cb7f1b136c27b1552d4b80c1c51d9966d9c34dd9787b2728c597314afaf7be2b90c7a944f7e2da8d72fae95b7f11fe2c97d7f2a315badf368eb1910b85c6267090649e86f8dfd18994ab606f474cd51ba7c2ac8b683a271fa64915880e448ebc15f5f95b524d2eda149c5f116ddae616530083c0", 0x7b, 0x20082010, &(0x7f00000014c0)={0x11, 0x1a, r4, 0x1, 0x0, 0x6, @random="d363b7ae5064"}, 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x3, 0x3, 0x2, 0x6, 0xb, 0x18}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f00000004c0)=""/4093, 0x0, 0x1}, 0x94) socket$unix(0x1, 0x1, 0x0) 514.450313ms ago: executing program 1 (id=3803): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x9, 0xffff}, {0xc}}}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f00000001c0)="240000001a005f0214f9f4070009060681000000040027f2439e1c7832fdfbff01000000", 0x24) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="2000000000000000180a02000000000000000000000000009500000000bb0000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x65) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}]}, 0x24}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) 210.110495ms ago: executing program 1 (id=3804): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0xcb15, {{0x2, 0x4, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gre0\x00'}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000140)=@x25, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000380)=""/136, 0x88}, {&(0x7f00000001c0)=""/80, 0x50}, {&(0x7f0000000440)=""/29, 0x1d}, {&(0x7f0000000900)=""/216, 0xd8}, {&(0x7f0000000a00)=""/147, 0x93}, {&(0x7f0000000480)=""/22, 0x16}, {&(0x7f0000000ac0)=""/67, 0x43}, {&(0x7f0000000c00)=""/144, 0x90}], 0x8, &(0x7f0000000d80)=""/99, 0x63}, 0x3}], 0x1, 0x40000140, &(0x7f0000000e00)={0x77359400}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8935, &(0x7f0000000b80)={'vxcan1\x00', @ifru_addrs=@hci={0x1f, 0x0, 0x3}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000b40)=""/9, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000c000000180818000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff9e584eb1aa3d10e3dff9f8e583de3a48e95f3b1ef28da212fb3a0d2e2bba5a83d454726fe5a16e3c020146d24c8d98140213c50401c64c9d2e58c8e5858e", 0x6e}], 0x1}, 0x48000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) recvmsg$kcm(r3, &(0x7f00000012c0)={&(0x7f0000000e40)=@hci, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000ec0)=""/70, 0x46}, {&(0x7f0000000f40)=""/186, 0xba}, {&(0x7f0000001000)=""/13, 0x3a}, {&(0x7f0000001040)=""/144, 0x90}, {&(0x7f0000001100)=""/27, 0x1b}, {&(0x7f0000001140)=""/73, 0x49}], 0x6, &(0x7f0000001240)=""/94, 0x5e}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff004) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x4, 0x18}, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000004c0)='%pB \x00'}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000051fd6131000000000600000018110000d0", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000059ec0c000c000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xb, 0x7fffffff, 0xff}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r6, r7, r8, r9, r10, 0xffffffffffffffff], &(0x7f0000000600)=[{0x0, 0x1, 0x1, 0x3}, {0x2, 0x1, 0xe}, {0x3, 0x4, 0xb, 0x1}, {0x0, 0x5, 0x6, 0x2}, {0x4, 0x4, 0x4, 0xb}], 0x10, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 0s ago: executing program 4 (id=3805): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x12288}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}, @IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x4c}}, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) kernel console output (not intermixed with test programs): h1_to_bond: left allmulticast mode [ 358.362220][T15566] netlink: 'syz.0.2411': attribute type 1 has an invalid length. [ 358.392141][T15563] ip6erspan0: left promiscuous mode [ 358.423607][T15563] veth3: left promiscuous mode [ 358.436623][T15563] macsec1: left promiscuous mode [ 358.445137][T15563] bond6: left promiscuous mode [ 358.449967][T15563] geneve2: left promiscuous mode [ 358.456390][T15563] bond7: left promiscuous mode [ 358.463810][T15563] vlan2: left promiscuous mode [ 358.469145][T15563] geneve1: left promiscuous mode [ 358.560315][T15566] bond12: entered promiscuous mode [ 358.573325][T15566] 8021q: adding VLAN 0 to HW filter on device bond12 [ 358.634377][T15559] bond12: (slave veth1): making interface the new active one [ 358.659553][T15559] veth1: entered promiscuous mode [ 358.666044][T15559] bond12: (slave veth1): Enslaving as an active interface with an up link [ 358.906029][T15592] ip6gre2: entered promiscuous mode [ 358.961732][T15592] ip6gre2: entered allmulticast mode [ 359.750412][T15624] __nla_validate_parse: 9 callbacks suppressed [ 359.750435][T15624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2428'. [ 359.858232][T15625] wg1 speed is unknown, defaulting to 1000 [ 359.866903][T15625] wg1 speed is unknown, defaulting to 1000 [ 359.923588][T15624] wg1 speed is unknown, defaulting to 1000 [ 359.942794][T15624] wg1 speed is unknown, defaulting to 1000 [ 360.107140][T15631] wg1 speed is unknown, defaulting to 1000 [ 360.161757][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2432'. [ 360.350677][T15646] bridge_slave_0: left allmulticast mode [ 360.358187][T15631] wg1 speed is unknown, defaulting to 1000 [ 360.365509][T15646] bridge_slave_0: left promiscuous mode [ 360.371655][T15646] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.453761][T15646] vlan3 (unregistering): left promiscuous mode [ 360.476000][T15646] bridge0 (unregistering): left promiscuous mode [ 360.495431][T15646] bridge3: port 1(vlan3) entered disabled state [ 361.729710][T15676] netlink: 'syz.1.2442': attribute type 2 has an invalid length. [ 361.746925][T15670] bond6 (unregistering): Released all slaves [ 361.802833][T15676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2442'. [ 362.076397][T15687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2444'. [ 362.076397][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2444'. [ 362.182564][T15687] bond6: option broadcast_neighbor: invalid value (5) [ 362.210679][T15687] bond6 (unregistering): Released all slaves [ 362.272727][T15684] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 362.580070][T15704] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2451'. [ 362.679374][T15707] wg1 speed is unknown, defaulting to 1000 [ 362.701607][T15707] wg1 speed is unknown, defaulting to 1000 [ 362.703105][T15708] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2452'. [ 362.718215][T15708] netlink: 'syz.0.2452': attribute type 1 has an invalid length. [ 363.292927][T15735] syzkaller1: entered promiscuous mode [ 363.299448][T15735] syzkaller1: entered allmulticast mode [ 363.393193][T15735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2459'. [ 363.816182][T15731] netlink: 558 bytes leftover after parsing attributes in process `syz.2.2458'. [ 363.947952][T15762] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2464'. [ 363.988166][T15762] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 364.581180][T15795] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 364.761206][T15812] __nla_validate_parse: 4 callbacks suppressed [ 364.761228][T15812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2476'. [ 365.070670][T15830] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 365.172147][T15836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2482'. [ 365.197411][T15838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2483'. [ 365.283091][T15844] net_ratelimit: 50 callbacks suppressed [ 365.283113][T15844] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 365.373890][T15846] ipvlan0: entered promiscuous mode [ 365.381002][T15848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2486'. [ 365.391337][T15848] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2486'. [ 365.403902][T15846] ipvlan0: left promiscuous mode [ 365.487184][T15849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2486'. [ 365.695017][T15849] wg1 speed is unknown, defaulting to 1000 [ 365.719343][T15849] wg1 speed is unknown, defaulting to 1000 [ 366.049473][T15862] wg1 speed is unknown, defaulting to 1000 [ 366.057593][T15862] wg1 speed is unknown, defaulting to 1000 [ 366.701356][T15893] netlink: 'syz.2.2497': attribute type 1 has an invalid length. [ 367.228189][T15921] ip6gretap1: entered promiscuous mode [ 367.511612][T15946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2506'. [ 367.635642][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2506'. [ 367.672076][T15940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2508'. [ 368.271842][T15996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 368.370757][T15996] syzkaller0: entered promiscuous mode [ 368.391486][T15996] syzkaller0: entered allmulticast mode [ 368.419354][T15996] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2522'. [ 368.718739][T16012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 368.730347][T16017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.706733][T16035] __nla_validate_parse: 2 callbacks suppressed [ 376.706757][T16035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2534'. [ 376.734816][T16035] openvswitch: netlink: Flow key attr not present in new flow. [ 376.816956][T16041] wg1 speed is unknown, defaulting to 1000 [ 376.829282][T16041] wg1 speed is unknown, defaulting to 1000 [ 376.845958][T16034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2535'. [ 377.146918][T16056] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2538'. [ 377.169935][T16058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2539'. [ 377.209305][T16058] netlink: 'syz.1.2539': attribute type 1 has an invalid length. [ 377.302073][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2539'. [ 377.652660][T16090] netlink: 'syz.4.2547': attribute type 2 has an invalid length. [ 377.662612][T16090] netlink: 'syz.4.2547': attribute type 2 has an invalid length. [ 377.687675][T16090] : entered promiscuous mode [ 377.719612][T16088] tipc: Enabled bearer , priority 0 [ 377.749299][T16088] tipc: Resetting bearer [ 377.807708][T16086] tipc: Disabling bearer [ 378.014436][T16104] tipc: Enabled bearer , priority 0 [ 378.024239][T16102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2551'. [ 378.036462][T16102] lo: entered promiscuous mode [ 378.044296][T16102] tunl0: entered promiscuous mode [ 378.051817][T16102] gre0: entered promiscuous mode [ 378.058047][T16102] gretap0: entered promiscuous mode [ 378.058658][T16108] netlink: 'syz.3.2554': attribute type 1 has an invalid length. [ 378.064285][T16102] erspan0: entered promiscuous mode [ 378.077773][T16102] ip_vti0: entered promiscuous mode [ 378.083408][T16102] v: entered promiscuous mode [ 378.089231][T16102] sit0: entered promiscuous mode [ 378.095302][T16102] ip6tnl0: entered promiscuous mode [ 378.101540][T16102] ip6gre0: entered promiscuous mode [ 378.107504][T16102] ip6gretap0: entered promiscuous mode [ 378.113528][T16102] bridge0: entered promiscuous mode [ 378.119367][T16102] bond0: entered promiscuous mode [ 378.124449][T16102] dummy0: entered promiscuous mode [ 378.131531][T16102] team0: entered promiscuous mode [ 378.137872][T16102] nlmon0: entered promiscuous mode [ 378.143748][T16102] caif0: entered promiscuous mode [ 378.150168][T16102] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 378.167595][T16104] syzkaller0: entered promiscuous mode [ 378.173388][T16104] syzkaller0: entered allmulticast mode [ 378.180532][T16115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2554'. [ 378.259911][T16108] 8021q: adding VLAN 0 to HW filter on device bond6 [ 378.327066][T16112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.337358][T16112] bond6: (slave batadv0): making interface the new active one [ 378.350800][T16112] bond6: (slave batadv0): Enslaving as an active interface with an up link [ 378.425649][T16113] bond8: option arp_all_targets: invalid value (3) [ 378.439198][T16113] bond8 (unregistering): Released all slaves [ 378.530591][T16124] bond8: entered promiscuous mode [ 378.536305][T16124] 8021q: adding VLAN 0 to HW filter on device bond8 [ 378.553891][T16121] tipc: Resetting bearer [ 378.579991][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2560'. [ 378.592230][T16103] tipc: Resetting bearer [ 378.631991][T16103] tipc: Disabling bearer [ 378.693528][T16143] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2561'. [ 378.809608][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.824961][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.031387][T16156] syzkaller0: entered promiscuous mode [ 379.040586][T16156] syzkaller0: entered allmulticast mode [ 379.188314][T16170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2566'. [ 379.651046][T16191] netlink: 'syz.4.2572': attribute type 1 has an invalid length. [ 379.758998][T16191] 8021q: adding VLAN 0 to HW filter on device bond9 [ 379.769338][T16191] bond8: (slave bond9): Enslaving as a backup interface with a down link [ 379.930081][T16205] wg1 speed is unknown, defaulting to 1000 [ 379.987122][T16205] wg1 speed is unknown, defaulting to 1000 [ 380.362010][T16232] netlink: 'syz.2.2582': attribute type 1 has an invalid length. [ 380.631268][T16232] 8021q: adding VLAN 0 to HW filter on device bond9 [ 381.000645][T16235] bond9 (unregistering): Released all slaves [ 381.077274][T16250] wg1 speed is unknown, defaulting to 1000 [ 381.205749][T16250] wg1 speed is unknown, defaulting to 1000 [ 381.421305][T16261] lo: entered promiscuous mode [ 381.458748][T16261] tunl0: entered promiscuous mode [ 381.489263][T16261] gre0: entered promiscuous mode [ 381.538991][T16261] erspan0: left allmulticast mode [ 381.555688][T16261] ip_vti0: entered promiscuous mode [ 381.562850][T16261] ip6_vti0: entered promiscuous mode [ 381.565667][T16273] tipc: Can't bind to reserved service type 1 [ 381.571675][T16261] sit0: entered promiscuous mode [ 381.590440][T16261] ip6tnl0: entered promiscuous mode [ 381.599096][T16261] ip6gre0: entered promiscuous mode [ 381.609181][T16261] ip6gretap0: entered promiscuous mode [ 381.622443][T16261] vcan0: entered promiscuous mode [ 381.633596][T16261] bond0: entered promiscuous mode [ 381.639681][T16261] bond_slave_0: entered promiscuous mode [ 381.645885][T16261] bond_slave_1: entered promiscuous mode [ 381.651893][T16261] dummy0: entered promiscuous mode [ 381.659640][T16261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.667820][T16261] team0: entered promiscuous mode [ 381.673312][T16261] team_slave_0: entered promiscuous mode [ 381.679752][T16261] team_slave_1: entered promiscuous mode [ 381.687324][T16261] veth0_virt_wifi: entered promiscuous mode [ 381.694971][T16261] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.703644][T16261] nlmon0: entered promiscuous mode [ 381.710229][T16261] caif0: entered promiscuous mode [ 381.715979][T16261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.750463][T16267] bond9: option arp_all_targets: invalid value (3) [ 381.759001][T16267] bond9 (unregistering): Released all slaves [ 381.782852][T16275] __nla_validate_parse: 8 callbacks suppressed [ 381.782872][T16275] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2586'. [ 381.795539][T16282] tap0: tun_chr_ioctl cmd 2148553947 [ 382.030040][T16289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2594'. [ 382.245893][T16307] netlink: 'syz.3.2597': attribute type 1 has an invalid length. [ 382.313870][T16311] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2599'. [ 382.325754][T16311] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 382.374247][T16311] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2599'. [ 382.429929][T16316] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2601'. [ 382.457187][T16316] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2601'. [ 382.541688][T16320] lo speed is unknown, defaulting to 1000 [ 382.558008][T16320] lo speed is unknown, defaulting to 1000 [ 382.576814][T16320] lo speed is unknown, defaulting to 1000 [ 382.652144][T16320] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 382.778955][T16327] sctp: [Deprecated]: syz.0.2603 (pid 16327) Use of int in maxseg socket option. [ 382.778955][T16327] Use struct sctp_assoc_value instead [ 382.893429][T16320] lo speed is unknown, defaulting to 1000 [ 382.925003][T16339] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2607'. [ 382.981244][T16320] lo speed is unknown, defaulting to 1000 [ 382.993657][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2607'. [ 383.003372][T16320] lo speed is unknown, defaulting to 1000 [ 383.083546][T16320] lo speed is unknown, defaulting to 1000 [ 383.093329][T16320] lo speed is unknown, defaulting to 1000 [ 383.538057][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2615'. [ 383.569989][T16366] batman_adv: batadv0: Adding interface: macvtap1 [ 383.576524][T16366] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.603020][T16366] batman_adv: batadv0: Interface activated: macvtap1 [ 383.968218][T16397] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2621'. [ 384.000879][T16397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.219954][T16410] netlink: 'syz.4.2627': attribute type 21 has an invalid length. [ 384.314913][T16410] netlink: 'syz.4.2627': attribute type 21 has an invalid length. [ 384.394411][T16410] netlink: 'syz.4.2627': attribute type 21 has an invalid length. [ 384.457800][T16410] netlink: 'syz.4.2627': attribute type 21 has an invalid length. [ 384.530093][T16410] netlink: 'syz.4.2627': attribute type 21 has an invalid length. [ 384.559421][T16428] wg1 speed is unknown, defaulting to 1000 [ 384.568044][T16428] wg1 speed is unknown, defaulting to 1000 [ 384.576618][T16428] lo speed is unknown, defaulting to 1000 [ 384.592046][T16410] netlink: 'syz.4.2627': attribute type 21 has an invalid length. [ 384.749362][T16410] netlink: 'syz.4.2627': attribute type 21 has an invalid length. [ 384.765571][T16435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.782185][T16430] syzkaller0: entered promiscuous mode [ 384.788087][T16430] syzkaller0: entered allmulticast mode [ 384.798480][T16438] tipc: Enabled bearer , priority 0 [ 384.821654][T16410] netlink: 'syz.4.2627': attribute type 21 has an invalid length. [ 384.890750][T16430] tipc: Resetting bearer [ 384.949013][T16410] netlink: 'syz.4.2627': attribute type 21 has an invalid length. [ 385.004592][T16429] tipc: Resetting bearer [ 385.099074][T16429] tipc: Disabling bearer [ 385.114499][T16442] wg1 speed is unknown, defaulting to 1000 [ 385.153949][T16455] bond10: entered promiscuous mode [ 385.160181][T16455] 8021q: adding VLAN 0 to HW filter on device bond10 [ 385.175410][T16442] wg1 speed is unknown, defaulting to 1000 [ 385.275604][T16458] bond11: entered promiscuous mode [ 385.281370][T16458] 8021q: adding VLAN 0 to HW filter on device bond11 [ 385.291509][T16442] lo speed is unknown, defaulting to 1000 [ 385.426771][T16469] netlink: 'syz.2.2640': attribute type 11 has an invalid length. [ 385.904268][T16481] bond11: (slave dummy0): Releasing active interface [ 386.052818][T16481] bridge6: port 1(vlan5) entered blocking state [ 386.059566][T16481] bridge6: port 1(vlan5) entered forwarding state [ 386.137411][T16481] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 386.158272][T16492] openvswitch: netlink: IP tunnel dst address not specified [ 386.179454][T16481] team0: Failed to send options change via netlink (err -105) [ 386.203707][T16481] team0: Port device dummy0 added [ 386.210957][T16488] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 386.227101][T16488] bridge6: port 1(vlan5) entered disabled state [ 386.244042][T16488] team0: Failed to send options change via netlink (err -105) [ 386.259180][T16488] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 386.273031][T16488] team0: Port device dummy0 removed [ 386.283581][T16488] bridge6: port 1(vlan5) entered blocking state [ 386.290153][T16488] bridge6: port 1(vlan5) entered forwarding state [ 386.301556][T16488] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 386.381413][T16497] bond3: (slave bridge6): Releasing active interface [ 386.415853][T16497] bond6: (slave batadv0): Releasing active interface [ 386.450504][T16502] syzkaller0: entered promiscuous mode [ 386.456486][T16502] syzkaller0: entered allmulticast mode [ 386.484191][T16502] syzkaller0: left promiscuous mode [ 386.497292][T16502] syzkaller0: left allmulticast mode [ 386.530987][T16512] wg1 speed is unknown, defaulting to 1000 [ 386.791477][T16512] wg1 speed is unknown, defaulting to 1000 [ 386.853312][T16512] lo speed is unknown, defaulting to 1000 [ 386.998526][T16528] __nla_validate_parse: 134 callbacks suppressed [ 386.998549][T16528] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2655'. [ 387.217253][T16528] wg1 speed is unknown, defaulting to 1000 [ 387.225461][T16528] wg1 speed is unknown, defaulting to 1000 [ 387.258345][T16528] lo speed is unknown, defaulting to 1000 [ 388.105704][T16564] wg1 speed is unknown, defaulting to 1000 [ 388.114319][T16564] wg1 speed is unknown, defaulting to 1000 [ 388.128612][T16564] lo speed is unknown, defaulting to 1000 [ 388.176232][T16593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2667'. [ 388.622515][T16623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2677'. [ 388.735760][T16628] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2676'. [ 388.764012][T16630] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2679'. [ 388.780942][T16628] validate_nla: 5 callbacks suppressed [ 388.780962][T16628] netlink: 'syz.3.2676': attribute type 1 has an invalid length. [ 388.872322][T16636] netlink: 'syz.1.2681': attribute type 21 has an invalid length. [ 388.906534][T16636] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2681'. [ 388.920943][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2681'. [ 389.399146][T16663] syz_tun: entered allmulticast mode [ 389.429181][T16665] vlan6: entered allmulticast mode [ 389.445524][T16665] bridge0: port 2(vlan6) entered blocking state [ 389.452043][T16665] bridge0: port 2(vlan6) entered disabled state [ 389.471183][T16665] vlan6: entered promiscuous mode [ 389.498197][T16665] bridge_slave_0: entered promiscuous mode [ 389.527462][T16667] syz_tun: left allmulticast mode [ 389.700871][T16675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2690'. [ 390.466719][T16704] netlink: 'syz.2.2697': attribute type 4 has an invalid length. [ 390.525166][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2699'. [ 390.554959][T16709] openvswitch: netlink: Missing key (keys=40, expected=80) [ 390.600196][T16709] syzkaller0: entered promiscuous mode [ 390.606618][T16709] syzkaller0: entered allmulticast mode [ 390.687031][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2699'. [ 390.733516][T16716] block nbd1: Unsupported socket: should be TCP or UNIX. [ 391.140107][T16747] tipc: Enabled bearer , priority 0 [ 391.159113][T16747] syzkaller0: entered promiscuous mode [ 391.164641][T16747] syzkaller0: entered allmulticast mode [ 391.214014][T16747] tipc: Resetting bearer [ 391.252128][T16745] tipc: Resetting bearer [ 391.288466][T16745] tipc: Disabling bearer [ 391.311124][T16755] netlink: 'syz.4.2708': attribute type 13 has an invalid length. [ 391.320427][T16755] netlink: 'syz.4.2708': attribute type 17 has an invalid length. [ 391.328985][T16755] lo: left promiscuous mode [ 391.343455][T16755] tunl0: left promiscuous mode [ 391.352213][T16755] gre0: left promiscuous mode [ 391.359329][T16755] gretap0: left promiscuous mode [ 391.409976][T16755] erspan0: left promiscuous mode [ 391.471901][T16755] ip_vti0: left promiscuous mode [ 391.478607][T16755] v: left promiscuous mode [ 391.487164][T16755] sit0: left promiscuous mode [ 391.537653][T16755] ip6tnl0: left promiscuous mode [ 391.551687][T16766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.607718][T16755] ip6gre0: left promiscuous mode [ 391.630205][T16755] ip6gretap0: left promiscuous mode [ 391.663234][T16755] bridge0: left promiscuous mode [ 391.672435][T16755] bond0: left promiscuous mode [ 391.677874][T16755] dummy0: left promiscuous mode [ 391.696362][T16755] team0: left promiscuous mode [ 391.701099][T16773] netlink: 'syz.2.2711': attribute type 1 has an invalid length. [ 391.712003][T16755] nlmon0: left promiscuous mode [ 391.719706][T16755] caif0: left promiscuous mode [ 391.726681][T16755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 391.805570][T16768] wg1 speed is unknown, defaulting to 1000 [ 391.813394][T16768] wg1 speed is unknown, defaulting to 1000 [ 391.821692][T16757] wg1 speed is unknown, defaulting to 1000 [ 391.844168][T16757] wg1 speed is unknown, defaulting to 1000 [ 391.852054][T16768] lo speed is unknown, defaulting to 1000 [ 391.915027][T16757] lo speed is unknown, defaulting to 1000 [ 392.018318][T16781] netlink: 'syz.1.2713': attribute type 8 has an invalid length. [ 392.266281][T16790] netlink: 'syz.1.2718': attribute type 10 has an invalid length. [ 392.296926][T16795] netlink: 'syz.1.2718': attribute type 10 has an invalid length. [ 392.428002][T16803] bond0: option mode: unable to set because the bond device is up [ 392.429514][T16805] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20003 [ 392.566676][T16804] bond0: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 392.615326][ T1040] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 392.755165][ T2993] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 392.790619][T16817] __nla_validate_parse: 6 callbacks suppressed [ 392.790641][T16817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2726'. [ 392.959090][T16824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2727'. [ 393.087924][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2729'. [ 393.134643][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2729'. [ 393.295633][T16833] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2731'. [ 393.342803][T16833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2731'. [ 393.469302][T16842] wg1 speed is unknown, defaulting to 1000 [ 393.502781][T16842] wg1 speed is unknown, defaulting to 1000 [ 393.525541][T16842] lo speed is unknown, defaulting to 1000 [ 393.535258][T16848] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2736'. [ 393.618000][T16852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2737'. [ 393.643464][T16855] tipc: Enabling of bearer rejected, failed to enable media [ 393.673084][T16849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2735'. [ 393.685345][T16849] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2735'. [ 393.730539][T16849] netlink: 'syz.4.2735': attribute type 3 has an invalid length. [ 393.768202][T16852] wg1 speed is unknown, defaulting to 1000 [ 393.780296][T16858] tipc: Enabled bearer , priority 0 [ 393.880202][T16858] syzkaller0: entered promiscuous mode [ 393.909748][T16858] syzkaller0: entered allmulticast mode [ 393.949377][T16852] wg1 speed is unknown, defaulting to 1000 [ 393.974654][T16852] lo speed is unknown, defaulting to 1000 [ 394.102880][T16859] tipc: Resetting bearer [ 394.159510][T16859] tipc: Disabling bearer [ 394.623782][T16893] bond12 (unregistering): Released all slaves [ 394.765502][T16901] tipc: Enabled bearer , priority 0 [ 394.854120][T16901] syzkaller0: entered promiscuous mode [ 394.860380][T16901] syzkaller0: entered allmulticast mode [ 394.930448][T16901] tipc: Resetting bearer [ 394.956057][T16900] tipc: Resetting bearer [ 395.018019][T16900] tipc: Disabling bearer [ 395.056959][T16912] netlink: 'syz.2.2754': attribute type 18 has an invalid length. [ 395.115472][T16911] syzkaller0: entered promiscuous mode [ 395.120994][T16911] syzkaller0: entered allmulticast mode [ 395.443278][T16934] wg1 speed is unknown, defaulting to 1000 [ 395.549468][T16934] wg1 speed is unknown, defaulting to 1000 [ 395.573883][T16934] lo speed is unknown, defaulting to 1000 [ 396.060919][T16959] pim6reg1: entered promiscuous mode [ 396.088324][T16959] pim6reg1: entered allmulticast mode [ 396.344742][T16973] tipc: Enabled bearer , priority 0 [ 396.366531][T16973] syzkaller0: entered promiscuous mode [ 396.375547][T16973] syzkaller0: entered allmulticast mode [ 396.397539][T16971] tipc: Resetting bearer [ 396.503073][T16985] netlink: 'syz.3.2774': attribute type 7 has an invalid length. [ 396.553020][T16971] tipc: Disabling bearer [ 396.562514][T16981] netlink: 'syz.3.2774': attribute type 9 has an invalid length. [ 396.939578][T16996] netlink: 'syz.0.2777': attribute type 13 has an invalid length. [ 396.989616][T16996] bridge6: port 1(vlan5) entered disabled state [ 397.705433][T17018] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 397.728320][T17018] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 397.876134][T17025] __nla_validate_parse: 20 callbacks suppressed [ 397.876159][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2785'. [ 397.931485][T17032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2785'. [ 397.966578][T17032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2785'. [ 398.011927][T17032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2785'. [ 398.044175][T17032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2785'. [ 398.075784][T17032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2785'. [ 398.109250][T17034] wg1 speed is unknown, defaulting to 1000 [ 398.138171][T17032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2785'. [ 398.139375][T17034] wg1 speed is unknown, defaulting to 1000 [ 398.147264][T17032] netlink: 6236 bytes leftover after parsing attributes in process `syz.2.2785'. [ 398.168390][T17034] lo speed is unknown, defaulting to 1000 [ 398.414877][ T30] audit: type=1800 audit(1762744321.640:10): pid=17021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2781" name="cgroup.controllers" dev="tmpfs" ino=2835 res=0 errno=0 [ 399.071899][T17065] wg1 speed is unknown, defaulting to 1000 [ 399.090659][T17065] wg1 speed is unknown, defaulting to 1000 [ 399.139695][T17073] wg1 speed is unknown, defaulting to 1000 [ 399.152219][T17065] lo speed is unknown, defaulting to 1000 [ 399.181215][T17073] wg1 speed is unknown, defaulting to 1000 [ 399.256608][T17081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2798'. [ 399.280637][T17073] lo speed is unknown, defaulting to 1000 [ 399.771630][T17114] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 399.843668][T17117] Bluetooth: MGMT ver 1.23 [ 399.868054][T17113] xt_CT: No such helper "syz0" [ 400.636009][T17145] bond7: option arp_validate: invalid value (18446744073491447809) [ 400.681748][T17145] bond7 (unregistering): Released all slaves [ 400.690625][T17151] netlink: 'syz.0.2814': attribute type 21 has an invalid length. [ 400.743827][T17157] openvswitch: netlink: IP tunnel dst address not specified [ 400.761462][T17151] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2814'. [ 401.836240][T17203] Timeout policy `syz1' can only be used by L3 protocol number 34958 [ 402.090419][T17217] xt_TCPMSS: Only works on TCP SYN packets [ 402.504798][T17242] tipc: Enabled bearer , priority 0 [ 402.512768][T17242] syzkaller0: entered promiscuous mode [ 402.525192][T17242] syzkaller0: entered allmulticast mode [ 402.551785][T17242] openvswitch: netlink: IP tunnel dst address not specified [ 402.561645][T17242] tipc: Resetting bearer [ 402.578174][T17237] tipc: Resetting bearer [ 402.613958][T17237] tipc: Disabling bearer [ 402.644588][T17251] tipc: Enabling of bearer rejected, failed to enable media [ 412.221441][T17277] dvmrp6: entered allmulticast mode [ 412.300245][T17281] tipc: Enabled bearer , priority 0 [ 412.408180][T17281] syzkaller0: entered promiscuous mode [ 412.413889][T17281] syzkaller0: entered allmulticast mode [ 412.425935][T17281] tipc: Resetting bearer [ 412.438419][T17286] __nla_validate_parse: 3 callbacks suppressed [ 412.438439][T17286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2850'. [ 412.464525][T17279] tipc: Resetting bearer [ 414.161787][T17279] tipc: Disabling bearer [ 414.390052][T17315] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2856'. [ 414.480089][T17302] team0 (unregistering): Port device C removed [ 414.492166][T17302] team0 (unregistering): Port device team_slave_1 removed [ 414.517199][T17302] team0 (unregistering): Port device bond4 removed [ 414.625829][T17326] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2858'. [ 414.654875][T17301] wg1 speed is unknown, defaulting to 1000 [ 414.680086][T17301] wg1 speed is unknown, defaulting to 1000 [ 414.680189][T17294] wg1 speed is unknown, defaulting to 1000 [ 414.717363][T17294] wg1 speed is unknown, defaulting to 1000 [ 414.737588][T17301] lo speed is unknown, defaulting to 1000 [ 414.809277][T17294] lo speed is unknown, defaulting to 1000 [ 417.493757][T17383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.882633][T17396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2876'. [ 418.079568][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2875'. [ 418.471953][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 418.485609][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 418.505026][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 418.519505][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 418.528028][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 418.588062][T17409] wg1 speed is unknown, defaulting to 1000 [ 418.596466][T17409] wg1 speed is unknown, defaulting to 1000 [ 418.604457][T17409] lo speed is unknown, defaulting to 1000 [ 419.046315][T17409] chnl_net:caif_netlink_parms(): no params data found [ 419.182327][T17409] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.190453][T17409] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.199100][T17409] bridge_slave_0: entered allmulticast mode [ 419.208067][T17409] bridge_slave_0: entered promiscuous mode [ 419.217293][T17409] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.224537][T17409] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.232328][T17409] bridge_slave_1: entered allmulticast mode [ 419.240802][T17409] bridge_slave_1: entered promiscuous mode [ 419.292209][T17409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.307465][T17409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.361283][T17409] team0: Port device team_slave_0 added [ 419.371525][T17409] team0: Port device team_slave_1 added [ 419.421763][T17409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.429204][T17409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.457134][T17409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.471450][T17409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.478691][T17409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.505571][T17409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.586415][T17409] hsr_slave_0: entered promiscuous mode [ 419.593420][T17409] hsr_slave_1: entered promiscuous mode [ 419.600395][T17409] debugfs: 'hsr0' already exists in 'hsr' [ 419.606952][T17409] Cannot create hsr debugfs directory [ 420.082727][T17409] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 420.093800][T17409] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 420.105384][T17409] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 420.120081][T17409] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 420.193425][T17409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.217519][T17409] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.230369][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.237556][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.257853][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.265126][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.443254][T17409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.486858][T17409] veth0_vlan: entered promiscuous mode [ 420.499506][T17409] veth1_vlan: entered promiscuous mode [ 420.529054][T17409] veth0_macvtap: entered promiscuous mode [ 420.539566][T17409] veth1_macvtap: entered promiscuous mode [ 420.559087][T17409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.566891][ T5837] Bluetooth: hci1: command tx timeout [ 420.573601][T17409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.590343][ T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.599543][ T70] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.610522][ T70] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.619713][ T70] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.684292][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.693099][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.721826][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.730037][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.645159][ T5837] Bluetooth: hci1: command tx timeout [ 424.725087][ T5837] Bluetooth: hci1: command tx timeout [ 424.964288][T17448] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2887'. [ 424.987751][T17448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2887'. [ 425.061435][T17454] bond1: option min_links: invalid value (18446744073709551612) [ 425.069873][T17454] bond1: option min_links: allowed values 0 - 2147483647 [ 425.085520][T17454] bond1 (unregistering): Released all slaves [ 425.086191][T17465] xt_connbytes: Forcing CT accounting to be enabled [ 425.098997][T17465] x_tables: ip6_tables: CT.2 target: invalid size 72 (kernel) != (user) 0 [ 425.410651][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2890'. [ 425.423276][T17476] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 425.505707][T17486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2891'. [ 425.657068][T17500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2897'. [ 425.675153][T17500] netlink: 'syz.3.2897': attribute type 10 has an invalid length. [ 425.692388][T17500] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2897'. [ 425.831308][T17509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2900'. [ 425.885129][T17508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2900'. [ 425.922433][T17508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2900'. [ 425.946499][T17509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2900'. [ 426.189051][T17517] xt_CT: You must specify a L4 protocol and not use inversions on it [ 426.401062][T17525] nbd: must specify at least one socket [ 426.650277][T17533] netlink: 'syz.0.2908': attribute type 1 has an invalid length. [ 426.805033][ T5837] Bluetooth: hci1: command tx timeout [ 426.846336][T17534] bond13: (slave bridge9): making interface the new active one [ 426.854942][T17534] bond13: (slave bridge9): Enslaving as an active interface with an up link [ 427.130747][T17545] wg1 speed is unknown, defaulting to 1000 [ 427.141007][T17545] wg1 speed is unknown, defaulting to 1000 [ 427.155621][T17545] lo speed is unknown, defaulting to 1000 [ 427.477927][T17554] netlink: 'syz.3.2912': attribute type 30 has an invalid length. [ 427.513984][T17554] bond2: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 427.536767][T17554] bond2 (unregistering): Released all slaves [ 427.571228][T17556] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 427.599533][T17556] xt_TCPMSS: Only works on TCP SYN packets [ 427.964519][T17562] netlink: 'syz.2.2915': attribute type 13 has an invalid length. [ 427.973664][T17562] netlink: 'syz.2.2915': attribute type 17 has an invalid length. [ 428.265103][T17572] wg1 speed is unknown, defaulting to 1000 [ 428.301986][T17572] wg1 speed is unknown, defaulting to 1000 [ 428.325309][T17572] lo speed is unknown, defaulting to 1000 [ 428.529984][T17578] bond14: entered promiscuous mode [ 428.978968][T17589] bond0: (slave bond_slave_1): Releasing backup interface [ 429.207352][T17572] netlink: 'syz.2.2918': attribute type 6 has an invalid length. [ 430.011544][T17622] netlink: 'syz.2.2931': attribute type 3 has an invalid length. [ 430.276407][T17637] __nla_validate_parse: 14 callbacks suppressed [ 430.276428][T17637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2936'. [ 430.583814][T17647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2937'. [ 430.859945][T17637] vlan6: left promiscuous mode [ 430.883762][T17637] bridge_slave_0: left promiscuous mode [ 430.919844][T17637] bridge0: port 2(vlan6) entered disabled state [ 430.968312][T17637] batadv1: left allmulticast mode [ 431.001250][T17637] batadv1: left promiscuous mode [ 431.025073][T17637] bridge0: port 1(batadv1) entered disabled state [ 431.171650][T17651] delete_channel: no stack [ 431.754059][T17667] netlink: 428 bytes leftover after parsing attributes in process `syz.4.2945'. [ 431.766234][T17667] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2945'. [ 431.888359][T17675] netlink: 'syz.0.2946': attribute type 1 has an invalid length. [ 432.010626][T17675] bond15: entered promiscuous mode [ 432.031809][T17682] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2946'. [ 432.033283][T17675] 8021q: adding VLAN 0 to HW filter on device bond15 [ 432.103811][T17673] wg1 speed is unknown, defaulting to 1000 [ 432.111882][T17673] wg1 speed is unknown, defaulting to 1000 [ 432.120137][T17673] lo speed is unknown, defaulting to 1000 [ 432.286683][T17684] ip6_vti0 speed is unknown, defaulting to 1000 [ 432.296856][T17684] ip6_vti0 speed is unknown, defaulting to 1000 [ 432.304236][T17684] ip6_vti0 speed is unknown, defaulting to 1000 [ 432.331217][T17681] wg1 speed is unknown, defaulting to 1000 [ 432.349035][T17681] wg1 speed is unknown, defaulting to 1000 [ 432.636427][T17681] lo speed is unknown, defaulting to 1000 [ 432.973242][T17684] infiniband syz2: set down [ 432.999412][T17684] infiniband syz2: added ip6_vti0 [ 433.011023][T17684] syz2: rxe_create_cq: returned err = -12 [ 433.021967][ T5903] ip6_vti0 speed is unknown, defaulting to 1000 [ 433.045203][T17684] infiniband syz2: Couldn't create ib_mad CQ [ 433.052110][T17684] infiniband syz2: Couldn't open port 1 [ 433.066453][T17699] ipvlan0: entered promiscuous mode [ 433.084424][T17699] ipvlan0: left promiscuous mode [ 433.117963][T17684] RDS/IB: syz2: added [ 433.122632][T17684] smc: adding ib device syz2 with port count 1 [ 433.138461][T17684] smc: ib device syz2 port 1 has no pnetid [ 433.178677][T17442] ip6_vti0 speed is unknown, defaulting to 1000 [ 433.189734][T17684] ip6_vti0 speed is unknown, defaulting to 1000 [ 433.313000][T17708] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 433.334619][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2954'. [ 433.345315][T17710] netlink: 'syz.2.2954': attribute type 4 has an invalid length. [ 433.630144][T17684] ip6_vti0 speed is unknown, defaulting to 1000 [ 433.936254][T17684] ip6_vti0 speed is unknown, defaulting to 1000 [ 434.156990][T17717] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2957'. [ 434.294122][T17684] ip6_vti0 speed is unknown, defaulting to 1000 [ 434.505771][T17718] delete_channel: no stack [ 434.619879][T17736] tipc: Enabled bearer , priority 0 [ 434.637337][T17736] syzkaller0: entered promiscuous mode [ 434.643464][T17736] syzkaller0: entered allmulticast mode [ 434.758603][T17736] tipc: Resetting bearer [ 434.831449][T17741] wg1 speed is unknown, defaulting to 1000 [ 434.910597][T17747] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2961'. [ 434.930997][T17734] tipc: Resetting bearer [ 435.066381][T17734] tipc: Disabling bearer [ 435.095882][T17748] tipc: Enabled bearer , priority 0 [ 435.103230][T17749] syzkaller0: entered promiscuous mode [ 435.109109][T17741] wg1 speed is unknown, defaulting to 1000 [ 435.115451][T17749] syzkaller0: entered allmulticast mode [ 435.124181][T17684] ip6_vti0 speed is unknown, defaulting to 1000 [ 435.236997][T17741] lo speed is unknown, defaulting to 1000 [ 435.244040][T17749] tipc: Resetting bearer [ 435.280625][T17749] tipc: Disabling bearer [ 435.448046][T17760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2965'. [ 435.550000][T17769] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2967'. [ 435.815925][T17776] netlink: 'syz.2.2969': attribute type 1 has an invalid length. [ 435.823807][T17776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2969'. [ 435.843876][T17777] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 435.936257][T17741] ip6_vti0 speed is unknown, defaulting to 1000 [ 436.303249][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2975'. [ 436.418941][T17794] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2974'. [ 436.443432][T17794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2974'. [ 436.480198][T17684] ip6_vti0 speed is unknown, defaulting to 1000 [ 436.540208][T17794] wg1 speed is unknown, defaulting to 1000 [ 436.577963][T17794] wg1 speed is unknown, defaulting to 1000 [ 436.612123][T17794] lo speed is unknown, defaulting to 1000 [ 436.965445][T17794] ip6_vti0 speed is unknown, defaulting to 1000 [ 437.360766][T17811] netlink: 'syz.0.2979': attribute type 1 has an invalid length. [ 437.404435][T17813] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2980'. [ 437.415225][T17811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.416407][T17814] netlink: 'syz.0.2979': attribute type 1 has an invalid length. [ 437.452432][T17814] netlink: 'syz.0.2979': attribute type 2 has an invalid length. [ 437.507008][T17811] netlink: 'syz.0.2979': attribute type 1 has an invalid length. [ 437.545093][T17811] netlink: 'syz.0.2979': attribute type 2 has an invalid length. [ 438.042586][T17822] wg1 speed is unknown, defaulting to 1000 [ 438.124291][T17822] wg1 speed is unknown, defaulting to 1000 [ 438.163449][T17822] lo speed is unknown, defaulting to 1000 [ 438.324519][T17822] ip6_vti0 speed is unknown, defaulting to 1000 [ 438.658166][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2988'. [ 438.785018][ T979] IPVS: starting estimator thread 0... [ 438.799887][T17839] netlink: 'syz.3.2989': attribute type 1 has an invalid length. [ 438.865009][T17841] netlink: 'syz.3.2989': attribute type 1 has an invalid length. [ 438.875319][T17840] IPVS: using max 24 ests per chain, 57600 per kthread [ 439.001257][T17839] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 439.045545][T17823] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2983'. [ 439.118195][T17841] netlink: 'syz.3.2989': attribute type 6 has an invalid length. [ 439.126785][T17853] netlink: 'syz.3.2989': attribute type 6 has an invalid length. [ 439.291522][T17839] vlan2: entered allmulticast mode [ 439.297432][T17839] bond1: entered allmulticast mode [ 439.303961][T17839] gretap1: entered allmulticast mode [ 439.380575][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 439.399335][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 439.408160][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 439.423823][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 439.446203][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 439.554057][T17871] tipc: Enabled bearer , priority 0 [ 439.563866][T17872] tipc: Enabling of bearer rejected, already enabled [ 439.660550][T17870] tipc: Disabling bearer [ 439.857500][T17866] wg1 speed is unknown, defaulting to 1000 [ 439.877723][T17884] netlink: 'syz.3.2996': attribute type 1 has an invalid length. [ 439.915749][T17866] wg1 speed is unknown, defaulting to 1000 [ 440.053917][T17888] syzkaller0: entered promiscuous mode [ 440.064892][T17888] syzkaller0: entered allmulticast mode [ 440.078709][T17866] lo speed is unknown, defaulting to 1000 [ 440.090411][T17866] ip6_vti0 speed is unknown, defaulting to 1000 [ 440.253617][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.260113][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.561229][T17889] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2997'. [ 440.573348][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2997'. [ 440.592885][T17889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2997'. [ 440.679610][ T1040] vlan5: left promiscuous mode [ 440.686763][ T1040] dummy0: left promiscuous mode [ 440.694975][ T1040] bridge6: port 1(vlan5) entered disabled state [ 441.056214][ T1040] bond9 (unregistering): (slave gretap1): Releasing active interface [ 441.064378][ T1040] gretap1 (unregistering): left promiscuous mode [ 441.071361][ T1040] gretap1 (unregistering): left allmulticast mode [ 441.140397][ T1040] bond5 (unregistering): (slave geneve2): Releasing active interface [ 441.256913][ T1040] bond7 (unregistering): (slave bridge2): Releasing backup interface [ 441.498473][ T1040] team0: Port device bridge7 removed [ 441.524901][ T5845] Bluetooth: hci0: command tx timeout [ 441.611395][ T1040] bond13 (unregistering): (slave bridge9): Releasing active interface [ 441.861066][ T1040] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 441.871137][ T1040] bond0 (unregistering): Released all slaves [ 441.989335][ T1040] bond1 (unregistering): Released all slaves [ 442.100171][ T1040] bond2 (unregistering): Released all slaves [ 442.215936][ T1040] bond3 (unregistering): Released all slaves [ 442.229743][ T1040] bond4 (unregistering): Released all slaves [ 442.349816][ T1040] bond5 (unregistering): Released all slaves [ 442.462809][ T1040] bond6 (unregistering): Released all slaves [ 442.476541][ T1040] bond7 (unregistering): Released all slaves [ 442.490570][ T1040] bond8 (unregistering): Released all slaves [ 442.618535][ T1040] bond9 (unregistering): Released all slaves [ 442.734560][ T1040] bond10 (unregistering): Released all slaves [ 442.847045][ T1040] bond11 (unregistering): (slave veth3): Releasing active interface [ 442.855977][ T1040] bond11 (unregistering): Released all slaves [ 442.973996][ T1040] bond12 (unregistering): (slave veth1): Releasing backup interface [ 442.983132][ T1040] veth1: left promiscuous mode [ 442.989334][ T1040] bond12 (unregistering): Released all slaves [ 443.003469][ T1040] bond13 (unregistering): Released all slaves [ 443.018272][ T1040] bond14 (unregistering): Released all slaves [ 443.135353][ T1040] bond15 (unregistering): Released all slaves [ 443.150491][ T1040] bond16 (unregistering): Released all slaves [ 443.174007][T17886] wg1 speed is unknown, defaulting to 1000 [ 443.212964][T17886] wg1 speed is unknown, defaulting to 1000 [ 443.241423][T17886] lo speed is unknown, defaulting to 1000 [ 443.607602][ T5845] Bluetooth: hci0: command tx timeout [ 444.938993][T17886] ip6_vti0 speed is unknown, defaulting to 1000 [ 445.419984][ T1040] : left promiscuous mode [ 445.646991][ T1040] tipc: Left network mode [ 445.647349][T17866] chnl_net:caif_netlink_parms(): no params data found [ 445.685240][ T5845] Bluetooth: hci0: command tx timeout [ 445.984885][T17944] wg1 speed is unknown, defaulting to 1000 [ 446.029248][T17944] wg1 speed is unknown, defaulting to 1000 [ 446.068883][T17945] wg1 speed is unknown, defaulting to 1000 [ 446.170728][T17944] lo speed is unknown, defaulting to 1000 [ 446.189811][T17945] wg1 speed is unknown, defaulting to 1000 [ 446.239608][T17945] lo speed is unknown, defaulting to 1000 [ 446.311325][T17866] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.319989][T17866] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.330808][T17866] bridge_slave_0: entered allmulticast mode [ 446.338323][T17866] bridge_slave_0: entered promiscuous mode [ 446.350244][T17866] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.357672][T17866] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.365672][T17866] bridge_slave_1: entered allmulticast mode [ 446.373211][T17866] bridge_slave_1: entered promiscuous mode [ 446.383356][T17944] ip6_vti0 speed is unknown, defaulting to 1000 [ 446.458439][T17866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.498764][T17866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.630734][T17866] team0: Port device team_slave_0 added [ 446.642050][T17866] team0: Port device team_slave_1 added [ 446.714597][T17945] ip6_vti0 speed is unknown, defaulting to 1000 [ 446.736829][T17866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.754011][T17866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.781086][T17866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.809601][T17866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.825156][T17866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.874554][T17866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.045746][T17866] hsr_slave_0: entered promiscuous mode [ 447.052913][T17866] hsr_slave_1: entered promiscuous mode [ 447.060753][T17866] debugfs: 'hsr0' already exists in 'hsr' [ 447.066965][T17866] Cannot create hsr debugfs directory [ 447.764951][ T5845] Bluetooth: hci0: command tx timeout [ 447.977974][ T1040] hsr_slave_0: left promiscuous mode [ 448.005367][ T1040] hsr_slave_1: left promiscuous mode [ 448.112898][T17988] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3012'. [ 448.407740][ T1040] pimreg3 (unregistering): left allmulticast mode [ 449.543565][T18000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3015'. [ 449.680846][T18009] xt_policy: neither incoming nor outgoing policy selected [ 449.744447][T18005] vlan4: entered allmulticast mode [ 449.752718][T18005] veth1: entered allmulticast mode [ 449.861461][T18015] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3020'. [ 449.878848][T18015] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3020'. [ 449.903292][T18015] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3020'. [ 449.966375][T18015] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3020'. [ 449.984412][ T1040] IPVS: stop unused estimator thread 0... [ 450.026861][T18015] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3020'. [ 450.075544][T18015] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3020'. [ 450.099042][T18021] wg1 speed is unknown, defaulting to 1000 [ 450.106499][T18015] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3020'. [ 450.126309][T18015] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3020'. [ 450.137865][T18021] wg1 speed is unknown, defaulting to 1000 [ 450.140577][T17866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 450.189754][T18021] ip6_vti0 speed is unknown, defaulting to 1000 [ 450.190356][T17866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 450.281283][T18029] : renamed from bond_slave_0 (while UP) [ 450.304837][T17866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 450.492546][T18027] wg1 speed is unknown, defaulting to 1000 [ 450.501167][T18027] wg1 speed is unknown, defaulting to 1000 [ 450.561535][T18029] bridge2: entered allmulticast mode [ 450.567230][T18035] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 450.617799][T17866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 450.870800][T18027] ip6_vti0 speed is unknown, defaulting to 1000 [ 451.311072][T17866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.380223][T17866] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.407678][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.415010][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.465174][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.472474][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.853300][T18079] validate_nla: 4 callbacks suppressed [ 451.853321][T18079] netlink: 'syz.3.3035': attribute type 6 has an invalid length. [ 452.234445][T17866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.554273][T17866] veth0_vlan: entered promiscuous mode [ 452.580797][T17866] veth1_vlan: entered promiscuous mode [ 452.645564][T17866] veth0_macvtap: entered promiscuous mode [ 452.671810][T17866] veth1_macvtap: entered promiscuous mode [ 452.719861][T17866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.776514][T17866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.801893][T18112] tun0: tun_chr_ioctl cmd 2148045848 [ 452.905143][T17847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.914199][T17847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.938792][T17850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.966935][T17847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.089699][T18134] netlink: 'syz.1.3047': attribute type 1 has an invalid length. [ 453.145090][T18134] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 453.320563][T18144] __nla_validate_parse: 62 callbacks suppressed [ 453.320585][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3049'. [ 453.341917][T17846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.350485][T17846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.401447][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.420706][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.499651][T18144] 8021q: adding VLAN 0 to HW filter on device bond12 [ 453.597561][T18153] wg1 speed is unknown, defaulting to 1000 [ 453.606573][T18153] wg1 speed is unknown, defaulting to 1000 [ 453.615537][T18153] ip6_vti0 speed is unknown, defaulting to 1000 [ 453.625020][ T30] audit: type=1800 audit(1762744376.860:11): pid=18146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3050" name="cgroup.controllers" dev="tmpfs" ino=237 res=0 errno=0 [ 454.095466][T18159] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3054'. [ 454.377252][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3058'. [ 454.391640][T18164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3058'. [ 454.427278][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3058'. [ 454.452197][T18164] netlink: 'syz.2.3058': attribute type 5 has an invalid length. [ 454.487611][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 454.498228][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 454.509161][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 454.519924][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 454.528979][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 454.536020][T18173] netlink: 'syz.3.3057': attribute type 63 has an invalid length. [ 454.538896][T18171] netlink: 1272 bytes leftover after parsing attributes in process `syz.0.3056'. [ 454.638878][T18171] veth1_macvtap: left promiscuous mode [ 454.790060][T18169] wg1 speed is unknown, defaulting to 1000 [ 454.819329][T18169] wg1 speed is unknown, defaulting to 1000 [ 454.864467][T18169] ip6_vti0 speed is unknown, defaulting to 1000 [ 455.278501][T18190] tipc: Started in network mode [ 455.283474][T18190] tipc: Node identity aa97f082b5c8, cluster identity 4711 [ 455.294877][T18190] tipc: Enabled bearer , priority 0 [ 455.312889][T18190] syzkaller0: entered promiscuous mode [ 455.343183][T18190] syzkaller0: entered allmulticast mode [ 455.430537][T18190] tipc: Resetting bearer [ 455.479453][T18190] tipc: Resetting bearer [ 455.509954][T18190] tipc: Disabling bearer [ 455.527098][T18202] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3063'. [ 455.554559][T18203] pim6reg1: entered promiscuous mode [ 455.561895][T18203] pim6reg1: entered allmulticast mode [ 455.571150][T18204] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3067'. [ 455.845296][T18216] netlink: 'syz.2.3070': attribute type 1 has an invalid length. [ 456.122062][T18236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3072'. [ 456.215745][T18240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.300716][T18236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.375458][T18236] team0: Port device bond0 added [ 456.423482][T18169] chnl_net:caif_netlink_parms(): no params data found [ 456.566496][ T5837] Bluetooth: hci5: command tx timeout [ 456.723644][T18169] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.728053][T18255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3078'. [ 456.740555][T18169] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.748029][T18169] bridge_slave_0: entered allmulticast mode [ 456.756685][T18169] bridge_slave_0: entered promiscuous mode [ 456.777623][T18169] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.785893][T18169] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.793281][T18169] bridge_slave_1: entered allmulticast mode [ 456.801060][T18169] bridge_slave_1: entered promiscuous mode [ 456.940857][T18169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.992849][T18169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.122435][T18267] bond0: entered promiscuous mode [ 457.138263][T18267] : entered promiscuous mode [ 457.154204][T18267] bond0: left promiscuous mode [ 457.169185][T18267] : left promiscuous mode [ 457.203040][T18169] team0: Port device team_slave_0 added [ 457.224130][T18169] team0: Port device team_slave_1 added [ 457.246987][T18283] bond0: entered promiscuous mode [ 457.252254][T18283] bond_slave_0: entered promiscuous mode [ 457.258946][T18283] bond_slave_1: entered promiscuous mode [ 457.265497][T18283] bond0: left promiscuous mode [ 457.270457][T18283] bond_slave_0: left promiscuous mode [ 457.278158][T18283] bond_slave_1: left promiscuous mode [ 457.336250][T18169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.343621][T18169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.378983][T18169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.392781][T18169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.400383][T18169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.426899][T18169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.599025][T18169] hsr_slave_0: entered promiscuous mode [ 457.609962][T18169] hsr_slave_1: entered promiscuous mode [ 457.623824][T18169] debugfs: 'hsr0' already exists in 'hsr' [ 457.630701][T18169] Cannot create hsr debugfs directory [ 457.647034][T18292] wg1 speed is unknown, defaulting to 1000 [ 457.655122][T18292] wg1 speed is unknown, defaulting to 1000 [ 457.663331][T18292] ip6_vti0 speed is unknown, defaulting to 1000 [ 458.398862][T18169] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.521696][T18169] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.614533][T18325] __nla_validate_parse: 3 callbacks suppressed [ 458.614553][T18325] netlink: 91 bytes leftover after parsing attributes in process `syz.2.3096'. [ 458.646323][ T5837] Bluetooth: hci5: command tx timeout [ 458.660251][T18169] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.819718][T18169] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.870288][T18337] netlink: 'syz.2.3099': attribute type 1 has an invalid length. [ 459.158736][T18348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3103'. [ 459.224956][T18348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3103'. [ 459.240602][T18169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 459.553453][T18360] netlink: 'syz.3.3107': attribute type 33 has an invalid length. [ 459.572117][T18360] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3107'. [ 459.591409][T18362] netlink: 'syz.1.3106': attribute type 83 has an invalid length. [ 460.041209][T18169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 460.127311][T18169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 460.149151][T18366] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3108'. [ 460.183473][T18169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 460.531390][T18169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.575193][T18388] netlink: 'syz.2.3113': attribute type 13 has an invalid length. [ 460.738219][ T5837] Bluetooth: hci5: command tx timeout [ 460.761610][T18398] ieee802154 phy0 wpan0: encryption failed: -22 [ 461.497959][T18169] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.676849][ T9666] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.684097][ T9666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.750613][T17850] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.757875][T17850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.931578][T18401] wg1 speed is unknown, defaulting to 1000 [ 461.996145][T18401] wg1 speed is unknown, defaulting to 1000 [ 462.091088][T18435] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.3122'. [ 462.115408][T18401] ip6_vti0 speed is unknown, defaulting to 1000 [ 462.150090][T18438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3123'. [ 462.326558][T18439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3123'. [ 462.345315][T18441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3123'. [ 462.362954][T18438] 8021q: adding VLAN 0 to HW filter on device bond9 [ 462.414304][T18443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3124'. [ 462.468676][T18169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.809080][ T5845] Bluetooth: hci5: command tx timeout [ 463.013669][T18469] Can't find ip_set type hash:n [ 463.175282][T18169] veth0_vlan: entered promiscuous mode [ 463.219006][T18169] veth1_vlan: entered promiscuous mode [ 463.381693][T18169] veth0_macvtap: entered promiscuous mode [ 463.427366][T18169] veth1_macvtap: entered promiscuous mode [ 463.524311][T18169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.555473][T18489] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 463.599804][T18169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.680128][T17850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.708544][T17850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.740267][T17850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.753731][T17850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.821142][T18499] tipc: Enabled bearer , priority 0 [ 463.835921][T18499] syzkaller0: entered promiscuous mode [ 463.841172][T18505] __nla_validate_parse: 5 callbacks suppressed [ 463.841191][T18505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3141'. [ 463.841441][T18499] syzkaller0: entered allmulticast mode [ 463.975319][T18506] bridge10: port 1(veth5) entered blocking state [ 463.982018][T18506] bridge10: port 1(veth5) entered disabled state [ 463.989199][T18506] veth5: entered allmulticast mode [ 463.996224][T18506] veth5: entered promiscuous mode [ 464.021819][T18505] bridge10: port 2(veth0_to_bond) entered blocking state [ 464.040014][T18505] bridge10: port 2(veth0_to_bond) entered disabled state [ 464.057964][T18505] veth0_to_bond: entered allmulticast mode [ 464.079715][T18505] veth0_to_bond: entered promiscuous mode [ 464.091330][T18509] tipc: Resetting bearer [ 464.123231][T18498] tipc: Resetting bearer [ 464.206026][T18498] tipc: Disabling bearer [ 464.291001][T17846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.306768][T17846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.431549][ T9666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.453466][ T9666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.606331][T18534] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3053'. [ 464.619824][T18531] tipc: Enabled bearer , priority 0 [ 464.660363][T18531] syzkaller0: entered promiscuous mode [ 464.685936][T18531] syzkaller0: entered allmulticast mode [ 464.734013][T18531] tipc: Resetting bearer [ 464.770434][T18530] tipc: Resetting bearer [ 464.851708][T18530] tipc: Disabling bearer [ 465.304154][T18557] batadv_slave_1: entered promiscuous mode [ 465.356848][T18557] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3156'. [ 465.415889][T18555] batadv_slave_1: left promiscuous mode [ 465.492879][T18562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3154'. [ 465.544394][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 465.556355][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 465.565886][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 465.578147][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 465.617335][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 465.738449][T18565] wg1 speed is unknown, defaulting to 1000 [ 465.758232][T18565] wg1 speed is unknown, defaulting to 1000 [ 465.767470][T18565] ip6_vti0 speed is unknown, defaulting to 1000 [ 465.992430][T18584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3163'. [ 466.016705][T18584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3163'. [ 466.423603][T18598] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.448899][T18592] wg1 speed is unknown, defaulting to 1000 [ 466.609562][T18598] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.654938][T18592] wg1 speed is unknown, defaulting to 1000 [ 466.662883][T18592] ip6_vti0 speed is unknown, defaulting to 1000 [ 466.750334][T18598] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.910989][T18598] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.228075][T18623] veth0_to_hsr: entered promiscuous mode [ 467.242051][T18623] veth0_to_hsr: entered allmulticast mode [ 467.253304][T18623] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 467.270062][T17847] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.318164][T17847] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.330239][T18565] chnl_net:caif_netlink_parms(): no params data found [ 467.476510][ T9666] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.567316][T18636] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3175'. [ 467.589000][T17850] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.687008][ T5845] Bluetooth: hci2: command tx timeout [ 467.841747][T18565] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.860031][T18565] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.875419][T18565] bridge_slave_0: entered allmulticast mode [ 467.887025][T18565] bridge_slave_0: entered promiscuous mode [ 467.985815][T18655] tipc: Started in network mode [ 467.996653][T18655] tipc: Node identity ce73198e4171, cluster identity 4711 [ 468.016719][T18655] tipc: Enabled bearer , priority 0 [ 468.037712][T18565] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.074307][T18565] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.107206][T18565] bridge_slave_1: entered allmulticast mode [ 468.132580][T18565] bridge_slave_1: entered promiscuous mode [ 468.149400][T18655] tipc: Disabling bearer [ 468.241259][T18658] syzkaller1: entered promiscuous mode [ 468.255363][T18658] syzkaller1: entered allmulticast mode [ 468.320616][T18565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.357362][T18565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.503939][T18565] team0: Port device team_slave_0 added [ 468.534602][T18565] team0: Port device team_slave_1 added [ 468.714845][T18670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3184'. [ 468.736084][T18670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3184'. [ 468.764254][T18565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.764324][T18670] netlink: 'syz.4.3184': attribute type 5 has an invalid length. [ 468.776980][T18565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.808671][T18565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.825326][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3185'. [ 468.900716][T18565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.919428][T18565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.989291][T18565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.063587][T18684] netlink: 'syz.4.3188': attribute type 4 has an invalid length. [ 469.096467][T18684] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3188'. [ 469.197182][T18684] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 469.213188][T18686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3188'. [ 469.303579][T18565] hsr_slave_0: entered promiscuous mode [ 469.313127][T18565] hsr_slave_1: entered promiscuous mode [ 469.319867][T18565] debugfs: 'hsr0' already exists in 'hsr' [ 469.325947][T18565] Cannot create hsr debugfs directory [ 469.364039][T18697] sctp: [Deprecated]: syz.4.3192 (pid 18697) Use of int in maxseg socket option. [ 469.364039][T18697] Use struct sctp_assoc_value instead [ 469.379126][T18691] netlink: 'syz.3.3190': attribute type 3 has an invalid length. [ 469.387743][T18691] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3190'. [ 469.739416][T18712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3200'. [ 469.769938][ T5845] Bluetooth: hci2: command tx timeout [ 469.775724][T18711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3200'. [ 469.931030][T18717] syzkaller0: entered promiscuous mode [ 469.944820][T18717] syzkaller0: entered allmulticast mode [ 470.018691][T18717] netlink: 'syz.3.3201': attribute type 3 has an invalid length. [ 470.030866][T18717] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3201'. [ 470.050906][T18734] lo: entered allmulticast mode [ 470.158366][T18740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3205'. [ 470.177830][T18740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3205'. [ 470.188776][T18740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3205'. [ 470.198993][T18740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3205'. [ 470.291225][T18745] netlink: 'syz.3.3208': attribute type 23 has an invalid length. [ 470.483606][T18753] syzkaller1: entered promiscuous mode [ 470.490346][T18753] syzkaller1: entered allmulticast mode [ 470.499532][T18565] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 470.538241][T18753] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.550497][T18753] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.579818][T18565] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 470.613377][T18565] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 470.637146][T18565] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 471.023704][T18565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.062502][T18770] bridge0: port 3(netdevsim2) entered blocking state [ 471.077175][T18770] bridge0: port 3(netdevsim2) entered disabled state [ 471.091831][T18770] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 471.108474][T18770] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 471.126049][T18565] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.168165][T17847] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.175403][T17847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.252933][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.260204][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.378678][T18782] netlink: 'syz.1.3217': attribute type 1 has an invalid length. [ 471.399063][T18565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.620305][T18795] netlink: 'syz.3.3221': attribute type 1 has an invalid length. [ 471.743036][T18795] 8021q: adding VLAN 0 to HW filter on device bond2 [ 471.849041][ T5845] Bluetooth: hci2: command tx timeout [ 471.909305][T18797] bond2: (slave ip6gretap1): making interface the new active one [ 471.935579][T18797] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 472.001381][T18793] veth3: entered promiscuous mode [ 472.024282][T18793] bond2: (slave veth3): Enslaving as an active interface with a down link [ 472.052945][T18795] erspan0: entered allmulticast mode [ 472.075123][T18795] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 472.115032][T18801] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 472.209639][T18565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.350237][T18565] veth0_vlan: entered promiscuous mode [ 472.373276][T18565] veth1_vlan: entered promiscuous mode [ 472.465893][T18813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.540506][T18565] veth0_macvtap: entered promiscuous mode [ 472.553937][T18565] veth1_macvtap: entered promiscuous mode [ 472.583367][T18565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.598289][T18565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.629702][ T1040] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.659447][ T1040] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.679350][ T1040] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.697865][ T1040] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.889748][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.906607][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.963283][T18816] netlink: 'syz.3.3226': attribute type 4 has an invalid length. [ 473.025500][T18833] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 473.033234][T18833] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 473.049756][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.069445][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.482001][T18849] wg1 speed is unknown, defaulting to 1000 [ 473.519032][T18849] wg1 speed is unknown, defaulting to 1000 [ 473.587074][T18849] ip6_vti0 speed is unknown, defaulting to 1000 [ 473.638697][T18850] wg1 speed is unknown, defaulting to 1000 [ 473.650342][T18850] wg1 speed is unknown, defaulting to 1000 [ 473.925195][ T5845] Bluetooth: hci2: command tx timeout [ 474.394951][T18850] ip6_vti0 speed is unknown, defaulting to 1000 [ 474.565837][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 474.579079][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 474.589277][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 474.598392][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 474.607752][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 474.683339][T18888] syzkaller1: entered promiscuous mode [ 474.707329][T18888] syzkaller1: entered allmulticast mode [ 474.915343][T18893] wg1 speed is unknown, defaulting to 1000 [ 474.935654][T18893] wg1 speed is unknown, defaulting to 1000 [ 475.117442][T18903] wg1 speed is unknown, defaulting to 1000 [ 475.117533][T18893] ip6_vti0 speed is unknown, defaulting to 1000 [ 475.130305][T18903] wg1 speed is unknown, defaulting to 1000 [ 475.295491][T18918] netlink: 'syz.2.3251': attribute type 1 has an invalid length. [ 475.609545][T18903] ip6_vti0 speed is unknown, defaulting to 1000 [ 476.019753][T18893] chnl_net:caif_netlink_parms(): no params data found [ 476.066966][T18932] wg1 speed is unknown, defaulting to 1000 [ 476.154242][T18943] __nla_validate_parse: 9 callbacks suppressed [ 476.154265][T18943] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3258'. [ 476.195504][T18943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.292878][T18932] wg1 speed is unknown, defaulting to 1000 [ 476.363094][T18932] ip6_vti0 speed is unknown, defaulting to 1000 [ 476.646891][ T5845] Bluetooth: hci3: command tx timeout [ 476.907126][T18893] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.914586][T18893] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.922534][T18893] bridge_slave_0: entered allmulticast mode [ 476.931318][T18893] bridge_slave_0: entered promiscuous mode [ 477.001618][T18893] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.031172][T18893] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.041004][T18893] bridge_slave_1: entered allmulticast mode [ 477.072512][T18893] bridge_slave_1: entered promiscuous mode [ 477.219256][T18893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.256206][T18893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.329592][T18893] team0: Port device team_slave_0 added [ 477.352984][T18893] team0: Port device team_slave_1 added [ 477.582273][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3262'. [ 477.602292][T18965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3262'. [ 477.615764][T18893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.632301][T18893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.662982][T18893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.698483][T18893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.706238][T18893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.733404][T18893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.810905][T18893] hsr_slave_0: entered promiscuous mode [ 477.818736][T18893] hsr_slave_1: entered promiscuous mode [ 477.825131][T18893] debugfs: 'hsr0' already exists in 'hsr' [ 477.830904][T18893] Cannot create hsr debugfs directory [ 478.201390][T18985] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 478.242235][T18985] sctp: [Deprecated]: syz.4.3269 (pid 18985) Use of int in maxseg socket option. [ 478.242235][T18985] Use struct sctp_assoc_value instead [ 478.292802][T18990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3270'. [ 478.302194][T18990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3270'. [ 478.364188][T18991] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3270'. [ 478.404200][T18991] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3270'. [ 478.737766][ T5845] Bluetooth: hci3: command tx timeout [ 478.839618][T18893] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 478.873374][T18893] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 478.900128][T18893] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 478.921351][T18893] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 479.164601][T19025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3278'. [ 479.172269][T18893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.202835][T18893] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.204458][T19032] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3279'. [ 479.227956][T17850] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.235395][T17850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.253301][T17847] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.260519][T17847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.319738][T18893] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 479.330567][T18893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.788794][T19058] syzkaller0: refused to change device tx_queue_len [ 479.838328][T19060] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 479.954450][T18893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.027963][T19067] netlink: 'syz.2.3290': attribute type 11 has an invalid length. [ 480.035090][T19071] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3292'. [ 480.075625][T19067] openvswitch: netlink: Flow actions attr not present in new flow. [ 480.116540][T18893] veth0_vlan: entered promiscuous mode [ 480.145390][T18893] veth1_vlan: entered promiscuous mode [ 480.252925][T18893] veth0_macvtap: entered promiscuous mode [ 480.280410][T18893] veth1_macvtap: entered promiscuous mode [ 480.343182][T18893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.370185][T19080] wg1 speed is unknown, defaulting to 1000 [ 480.393370][ T30] audit: type=1800 audit(1762744403.630:12): pid=19084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3296" name="blkio.bfq.time_recursive" dev="tmpfs" ino=111 res=0 errno=0 [ 480.404418][T18893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.454395][T19080] wg1 speed is unknown, defaulting to 1000 [ 480.469625][T17844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.480779][T17844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.484948][ T30] audit: type=1800 audit(1762744403.630:13): pid=19086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3296" name="blkio.bfq.time_recursive" dev="tmpfs" ino=111 res=0 errno=0 [ 480.518871][T17844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.528394][T19080] ip6_vti0 speed is unknown, defaulting to 1000 [ 480.628956][T17844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.761003][T19089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 480.806415][ T5845] Bluetooth: hci3: command tx timeout [ 480.883144][T17846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.918275][T17846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.939706][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.958607][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.044423][T19098] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 481.051971][T19098] syzkaller1: linktype set to 823 [ 481.068482][T19098] netlink: 'syz.4.3299': attribute type 2 has an invalid length. [ 481.315454][T19109] __nla_validate_parse: 2 callbacks suppressed [ 481.315475][T19109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3301'. [ 481.352382][T19111] wg1 speed is unknown, defaulting to 1000 [ 481.479063][T19117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3302'. [ 481.501920][T19120] netlink: 'syz.4.3305': attribute type 1 has an invalid length. [ 481.580184][T19108] tipc: Cannot configure node identity twice [ 481.822372][T19121] macvlan2: entered promiscuous mode [ 481.844061][T19121] macvlan2: entered allmulticast mode [ 481.875602][T19121] bond1: entered promiscuous mode [ 481.884516][T19130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3307'. [ 481.886804][T19121] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 481.936397][T19121] bond1: left promiscuous mode [ 482.050544][T19131] tipc: Started in network mode [ 482.066594][T19131] tipc: Node identity 9aee779a4422, cluster identity 4711 [ 482.074072][T19131] tipc: Enabled bearer , priority 0 [ 482.107600][T19126] tipc: Resetting bearer [ 482.161522][T19132] syzkaller0: entered promiscuous mode [ 482.175641][T19132] syzkaller0: entered allmulticast mode [ 482.188552][T19125] tipc: Resetting bearer [ 482.242482][T19125] tipc: Disabling bearer [ 482.373061][T19150] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3311'. [ 482.411445][T19152] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3312'. [ 482.418474][T19150] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3311'. [ 482.456492][T19150] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3311'. [ 482.496420][T19157] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3311'. [ 482.529687][T19157] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3311'. [ 482.552850][T19160] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3313'. [ 482.623905][T19163] siw: device registration error -23 [ 482.807562][T19169] 0: reclassify loop, rule prio 0, protocol 800 [ 482.885532][ T5845] Bluetooth: hci3: command tx timeout [ 482.942039][T19173] syzkaller0: entered promiscuous mode [ 482.947778][T19173] syzkaller0: entered allmulticast mode [ 483.718635][T19193] netlink: 'syz.0.3324': attribute type 9 has an invalid length. [ 483.930322][T19197] bond1: option mode: invalid value (254) [ 483.977868][T19197] bond1 (unregistering): Released all slaves [ 484.188099][T19209] wg1 speed is unknown, defaulting to 1000 [ 484.197332][T19209] wg1 speed is unknown, defaulting to 1000 [ 484.228199][T19209] ip6_vti0 speed is unknown, defaulting to 1000 [ 485.086560][T19243] netlink: 'syz.3.3339': attribute type 1 has an invalid length. [ 485.113672][T19243] netlink: 'syz.3.3339': attribute type 11 has an invalid length. [ 485.292939][T19230] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.301133][T19230] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.591283][T19230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.677966][T19230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.980588][T19234] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 486.124948][ T1040] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.169361][ T1040] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.365606][ T1040] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.388131][ T1040] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.473342][T19256] wg1 speed is unknown, defaulting to 1000 [ 486.500988][T19270] __nla_validate_parse: 6 callbacks suppressed [ 486.501010][T19270] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3344'. [ 486.528666][T19256] wg1 speed is unknown, defaulting to 1000 [ 486.579000][T19256] ip6_vti0 speed is unknown, defaulting to 1000 [ 486.589899][T19275] batadv_slave_1: entered promiscuous mode [ 486.696080][T19272] batadv_slave_1: left promiscuous mode [ 487.341384][T19305] netlink: 'syz.3.3351': attribute type 1 has an invalid length. [ 487.409623][T19305] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3351'. [ 487.829512][T19316] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3356'. [ 487.934330][T19319] netlink: 'syz.1.3356': attribute type 3 has an invalid length. [ 487.937629][T19316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3356'. [ 487.968512][T19319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3356'. [ 488.738361][T19351] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3367'. [ 488.742283][T19350] netlink: 'syz.0.3367': attribute type 1 has an invalid length. [ 488.807646][T19350] bond1: entered promiscuous mode [ 488.814031][T19350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.971347][T19368] IPv6: Can't replace route, no match found [ 488.985701][T19369] netlink: 1760 bytes leftover after parsing attributes in process `syz.2.3372'. [ 489.022001][T19370] xt_hashlimit: overflow, try lower: 0/0 [ 489.079028][T19372] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3374'. [ 489.420095][T19392] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3381'. [ 489.431201][T19392] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3381'. [ 489.452481][T19392] netlink: 'syz.4.3381': attribute type 10 has an invalid length. [ 489.472779][T19392] batman_adv: batadv0: Adding interface: netdevsim0 [ 489.480091][T19392] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.503840][T19397] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 489.512261][T19392] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 490.320370][T19437] hsr0: entered promiscuous mode [ 490.358558][T19439] erspan0: entered allmulticast mode [ 490.488843][T19445] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 490.694239][T19462] : entered promiscuous mode [ 490.801487][T19464] wg1 speed is unknown, defaulting to 1000 [ 490.828226][T19464] wg1 speed is unknown, defaulting to 1000 [ 490.849912][T19464] ip6_vti0 speed is unknown, defaulting to 1000 [ 491.217933][T19487] wg1 speed is unknown, defaulting to 1000 [ 491.222037][T19489] netlink: 'syz.1.3412': attribute type 5 has an invalid length. [ 491.232776][T19491] netlink: 'syz.4.3413': attribute type 1 has an invalid length. [ 491.351559][T19491] 8021q: adding VLAN 0 to HW filter on device bond4 [ 491.359213][T19487] wg1 speed is unknown, defaulting to 1000 [ 491.386068][T19467] SET target dimension over the limit! [ 491.420447][T19489] ip6erspan0: entered promiscuous mode [ 491.813141][T19487] ip6_vti0 speed is unknown, defaulting to 1000 [ 491.865773][T19515] x_tables: duplicate underflow at hook 2 [ 492.030430][T19521] __nla_validate_parse: 7 callbacks suppressed [ 492.030451][T19521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3420'. [ 492.338604][T19528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3423'. [ 492.365593][T19528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3423'. [ 492.387249][T19528] xt_hashlimit: max too large, truncated to 1048576 [ 493.001474][T19537] sctp: [Deprecated]: syz.0.3424 (pid 19537) Use of int in maxseg socket option. [ 493.001474][T19537] Use struct sctp_assoc_value instead [ 493.680188][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3428'. [ 493.694819][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3428'. [ 493.708287][T19552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3428'. [ 493.893208][T19559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3431'. [ 493.913365][T19559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3431'. [ 494.206986][T19576] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3436'. [ 494.332054][T19571] wg1 speed is unknown, defaulting to 1000 [ 494.342021][T19579] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3438'. [ 494.381713][T19571] wg1 speed is unknown, defaulting to 1000 [ 494.397866][T19571] ip6_vti0 speed is unknown, defaulting to 1000 [ 494.559828][T19588] syzkaller0: entered promiscuous mode [ 494.575058][T19588] syzkaller0: entered allmulticast mode [ 495.367704][T19614] nbd: socks must be embedded in a SOCK_ITEM attr [ 495.429429][T19622] netlink: 'syz.3.3450': attribute type 13 has an invalid length. [ 496.193399][T19618] Set syz1 is full, maxelem 6117 reached [ 496.354604][T19622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.392342][T19622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.614467][T19633] tipc: Enabling of bearer rejected, failed to enable media [ 496.771828][T17847] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.793809][T17847] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.947249][T17847] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.961822][T19637] wg1 speed is unknown, defaulting to 1000 [ 496.974996][T17847] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.017532][T19637] wg1 speed is unknown, defaulting to 1000 [ 497.027830][T19637] ip6_vti0 speed is unknown, defaulting to 1000 [ 497.268906][T19665] Bluetooth: MGMT ver 1.23 [ 497.923466][T19682] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 498.048742][T19685] __nla_validate_parse: 3 callbacks suppressed [ 498.048762][T19685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3464'. [ 498.305531][T19699] netlink: 'syz.3.3468': attribute type 3 has an invalid length. [ 498.332646][T19699] syz_tun: entered allmulticast mode [ 498.403320][T19699] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 498.437627][T19703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3470'. [ 498.458464][T19704] erspan0: left allmulticast mode [ 498.490192][T19704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.499981][T19704] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.513567][T19704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 498.580033][T19709] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3471'. [ 498.583525][T19703] 8021q: adding VLAN 0 to HW filter on device bond5 [ 498.604762][ T5903] ip6_vti0 speed is unknown, defaulting to 1000 [ 498.611183][ T5903] syz2: Port: 1 Link ACTIVE [ 498.631463][T19703] 8021q: adding VLAN 0 to HW filter on device bond5 [ 498.643113][T19703] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 498.659210][T19703] bond5: (slave sit1): Error -95 calling set_mac_address [ 498.678371][ T5834] ip6_vti0 speed is unknown, defaulting to 1000 [ 498.699671][T19695] syz_tun: left allmulticast mode [ 498.748735][T19698] IPVS: set_ctl: invalid protocol: 11146 0.0.0.0:20000 [ 499.230536][T19738] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3478'. [ 499.782714][T19752] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3481'. [ 499.834326][T19754] netlink: 'syz.1.3482': attribute type 12 has an invalid length. [ 500.342489][T19778] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3487'. [ 500.894372][T19811] netlink: 'syz.3.3498': attribute type 1 has an invalid length. [ 500.930695][T19811] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3498'. [ 501.437351][T19831] x_tables: duplicate underflow at hook 1 [ 501.682509][T19842] batadv_slave_0: entered promiscuous mode [ 501.694991][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.700499][T19842] batman_adv: batadv0: Adding interface: macsec0 [ 501.708265][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.729939][T19842] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.797133][T19842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.831571][T19842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.841703][T19842] batman_adv: batadv0: Interface activated: macsec0 [ 502.053374][T19847] wg1 speed is unknown, defaulting to 1000 [ 502.077408][T19847] ip6_vti0 speed is unknown, defaulting to 1000 [ 502.090511][T19864] netlink: 'syz.3.3512': attribute type 2 has an invalid length. [ 502.612313][T19880] syzkaller0: entered promiscuous mode [ 502.624731][T19880] syzkaller0: entered allmulticast mode [ 502.865780][T19888] netlink: 'syz.0.3509': attribute type 6 has an invalid length. [ 503.427700][T19899] wg1 speed is unknown, defaulting to 1000 [ 503.445971][T19899] ip6_vti0 speed is unknown, defaulting to 1000 [ 503.571417][T19905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3522'. [ 503.602607][T19907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3523'. [ 503.652614][T19907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3523'. [ 504.106509][T19910] wg1 speed is unknown, defaulting to 1000 [ 504.163174][T19910] ip6_vti0 speed is unknown, defaulting to 1000 [ 504.988850][T19924] veth1_to_bond: entered allmulticast mode [ 505.016086][T19924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3528'. [ 505.189913][T19935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3531'. [ 505.257408][T19924] bond0: (slave bond_slave_1): Releasing backup interface [ 505.553074][T19924] veth1_to_bond (unregistering): left allmulticast mode [ 505.841630][T19935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.854505][T19935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.864165][T19935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.872573][T19935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.151604][T19947] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3535'. [ 506.199907][T19948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3534'. [ 506.622871][T19948] vlan2: entered allmulticast mode [ 506.660837][T19948] veth1: entered allmulticast mode [ 506.678413][T19967] netlink: 'syz.2.3539': attribute type 1 has an invalid length. [ 506.693203][T19948] bridge1: port 1(vlan2) entered blocking state [ 506.738879][T19948] bridge1: port 1(vlan2) entered disabled state [ 506.850224][T19948] vlan2: entered promiscuous mode [ 506.878379][T19948] veth1: entered promiscuous mode [ 507.009610][T19978] netlink: 'syz.3.3541': attribute type 1 has an invalid length. [ 507.012394][T19967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.067186][T19972] vlan2: entered promiscuous mode [ 507.082597][T19972] bond1: entered promiscuous mode [ 507.092952][T19972] vlan2: entered allmulticast mode [ 507.112536][T19972] bond1: entered allmulticast mode [ 507.200282][T19978] 8021q: adding VLAN 0 to HW filter on device bond3 [ 507.225857][T19979] bond3: (slave geneve2): making interface the new active one [ 507.235387][T19979] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 507.262746][T17846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.280174][T17846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.329172][T17846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.363489][T17846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.448127][T19994] netlink: 'syz.0.3546': attribute type 1 has an invalid length. [ 507.688717][T20005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3549'. [ 507.697589][T20004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3548'. [ 507.702778][T20005] netlink: 'syz.0.3549': attribute type 13 has an invalid length. [ 507.720630][T19985] netlink: 1372 bytes leftover after parsing attributes in process `syz.2.3544'. [ 507.861623][T20005] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.869562][T20005] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.892457][T20012] netlink: 'syz.2.3551': attribute type 12 has an invalid length. [ 508.081830][T17850] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.093630][T17850] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.120898][T17850] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.133340][T17850] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.302850][T20022] wg1 speed is unknown, defaulting to 1000 [ 508.355328][T20022] ip6_vti0 speed is unknown, defaulting to 1000 [ 508.780590][T20044] netlink: 'syz.4.3559': attribute type 1 has an invalid length. [ 508.827363][T20044] netlink: 'syz.4.3559': attribute type 7 has an invalid length. [ 508.835702][T20044] __nla_validate_parse: 3 callbacks suppressed [ 508.835721][T20044] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3559'. [ 509.161077][T20060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3563'. [ 509.215108][T20065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3563'. [ 509.227562][T20060] ip6gretap0: entered promiscuous mode [ 509.233586][T20060] macvtap2: entered promiscuous mode [ 509.250772][T20060] macvtap2: entered allmulticast mode [ 509.256718][T20060] ip6gretap0: entered allmulticast mode [ 509.276240][T20066] netlink: 'syz.1.3561': attribute type 10 has an invalid length. [ 509.285254][T20066] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3561'. [ 509.307423][T20065] ip6gretap0: left allmulticast mode [ 509.312986][T20065] ip6gretap0: left promiscuous mode [ 509.327470][T20066] batadv_slave_1: entered promiscuous mode [ 509.340910][T20066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.377462][T20066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.385639][T20066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.395931][T20066] bridge0: port 3(batadv_slave_1) entered blocking state [ 509.403422][T20066] bridge0: port 3(batadv_slave_1) entered disabled state [ 509.413508][T20066] batadv_slave_1: entered allmulticast mode [ 509.535895][T20078] siw: device registration error -23 [ 509.550182][T20078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3567'. [ 509.571836][T20078] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 509.907938][T20089] wg1 speed is unknown, defaulting to 1000 [ 509.935712][T20089] ip6_vti0 speed is unknown, defaulting to 1000 [ 509.949797][T20092] syz_tun: entered allmulticast mode [ 510.044325][T20092] syz_tun: left allmulticast mode [ 510.106494][T20092] dvmrp1: entered allmulticast mode [ 510.243898][T20103] pim6reg1: entered allmulticast mode [ 510.325079][T20108] netlink: 'syz.1.3576': attribute type 1 has an invalid length. [ 510.388076][T20108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3576'. [ 510.642872][T20124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3579'. [ 510.683714][T20124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3579'. [ 510.729178][T20124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3579'. [ 511.328862][T20144] wg1 speed is unknown, defaulting to 1000 [ 511.396464][T20144] ip6_vti0 speed is unknown, defaulting to 1000 [ 511.691773][T20156] wg1 speed is unknown, defaulting to 1000 [ 512.266853][T20156] ip6_vti0 speed is unknown, defaulting to 1000 [ 512.377863][T20175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3594'. [ 512.412800][T20175] netlink: 'syz.1.3594': attribute type 12 has an invalid length. [ 512.486477][T20175] netlink: 'syz.1.3594': attribute type 12 has an invalid length. [ 512.630911][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.640663][T20181] syzkaller1: entered promiscuous mode [ 512.652517][T20181] syzkaller1: entered allmulticast mode [ 512.728729][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.757103][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.773895][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.907007][T20197] tipc: Enabled bearer , priority 0 [ 513.048636][T20197] tipc: Disabling bearer [ 513.275455][T20211] can: request_module (can-proto-0) failed. [ 513.297914][T20214] can: request_module (can-proto-0) failed. [ 514.163852][T20245] __nla_validate_parse: 9 callbacks suppressed [ 514.163901][T20245] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3610'. [ 514.211880][T20245] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3610'. [ 514.222613][T20245] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3610'. [ 514.379874][T20251] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 514.396257][T20251] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.404239][T20251] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.507414][T20260] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 514.513383][T20260] dvmrp1: linktype set to 5 [ 514.633168][T20258] wg1 speed is unknown, defaulting to 1000 [ 514.709492][T20258] ip6_vti0 speed is unknown, defaulting to 1000 [ 514.739129][T20268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3615'. [ 514.808749][T20269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3613'. [ 514.955542][T20277] !: renamed from dummy0 (while UP) [ 514.975150][T20262] wg1 speed is unknown, defaulting to 1000 [ 514.991621][T20283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3619'. [ 515.190400][T20262] ip6_vti0 speed is unknown, defaulting to 1000 [ 515.570236][T20293] wg1 speed is unknown, defaulting to 1000 [ 515.735863][T20295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3623'. [ 516.176711][T20321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3625'. [ 516.190587][T20293] ip6_vti0 speed is unknown, defaulting to 1000 [ 516.490772][T20327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3632'. [ 516.803835][T20334] syzkaller0: entered promiscuous mode [ 516.811372][T20334] syzkaller0: entered allmulticast mode [ 516.820560][T20333] tipc: Enabled bearer , priority 0 [ 516.953163][T20333] tipc: Resetting bearer [ 517.032934][T20333] tipc: Disabling bearer [ 517.744530][T20344] netlink: 'syz.2.3637': attribute type 5 has an invalid length. [ 517.775219][T20344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3637'. [ 518.463699][T20369] siw: device registration error -23 [ 518.479771][T20370] IPVS: set_ctl: invalid protocol: 43 172.20.20.27:20002 [ 518.636492][T20376] wg1 speed is unknown, defaulting to 1000 [ 518.647602][T20376] ip6_vti0 speed is unknown, defaulting to 1000 [ 518.715622][T20382] syzkaller1: entered promiscuous mode [ 518.721157][T20382] syzkaller1: entered allmulticast mode [ 519.018139][T20398] xt_TCPMSS: Only works on TCP SYN packets [ 519.483916][T20428] __nla_validate_parse: 2 callbacks suppressed [ 519.483945][T20428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3660'. [ 519.540663][T20434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3663'. [ 519.558062][T20435] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3663'. [ 520.031108][T20464] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 520.222608][T20475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3667'. [ 520.257591][T20478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3667'. [ 520.646151][T20378] Bluetooth: hci3: command 0x0405 tx timeout [ 520.672531][T20504] block nbd1: Unsupported socket: should be TCP or UNIX. [ 520.683243][T20505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3675'. [ 520.715774][T20501] block nbd1: Unsupported socket: should be TCP or UNIX. [ 520.782452][ T5927] IPVS: starting estimator thread 0... [ 520.878361][T20512] IPVS: using max 27 ests per chain, 64800 per kthread [ 521.140921][T20515] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.318510][T20515] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.463714][T20515] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.484271][T20549] netlink: 'syz.2.3685': attribute type 1 has an invalid length. [ 521.496093][T20542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3682'. [ 521.630664][ T30] audit: type=1107 audit(1762744444.870:14): pid=20546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 521.654577][T20515] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.879706][T20553] syzkaller0: entered promiscuous mode [ 521.895229][T20553] syzkaller0: entered allmulticast mode [ 521.967211][T20556] netlink: 'syz.0.3687': attribute type 4 has an invalid length. [ 522.023612][T20558] netlink: 'syz.0.3687': attribute type 4 has an invalid length. [ 522.275014][T20560] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3684'. [ 522.285509][T20560] netlink: 'syz.3.3684': attribute type 9 has an invalid length. [ 522.293548][T20560] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3684'. [ 522.303871][T20560] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3684'. [ 522.340200][T20547] syzkaller0: entered promiscuous mode [ 522.355246][T20547] syzkaller0: entered allmulticast mode [ 522.703483][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.723970][T20569] netlink: 'syz.0.3690': attribute type 4 has an invalid length. [ 522.769654][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.830359][T17843] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.919483][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.492845][T20601] openvswitch: netlink: Flow actions attr not present in new flow. [ 523.496474][T20602] syzkaller0: entered promiscuous mode [ 523.534852][T20602] syzkaller0: entered allmulticast mode [ 524.610503][T20625] tipc: Started in network mode [ 524.616176][T20625] tipc: Node identity d29ed1c47c73, cluster identity 4711 [ 524.635003][T20625] tipc: Enabled bearer , priority 0 [ 524.655731][T20627] syzkaller1: entered promiscuous mode [ 524.661252][T20627] syzkaller1: entered allmulticast mode [ 524.688230][T20623] syzkaller0: entered promiscuous mode [ 524.693782][T20623] syzkaller0: entered allmulticast mode [ 524.814999][T20623] tipc: Resetting bearer [ 525.178096][T20623] tipc: Disabling bearer [ 525.753463][T20641] __nla_validate_parse: 3 callbacks suppressed [ 525.753485][T20641] netlink: 316 bytes leftover after parsing attributes in process `syz.1.3714'. [ 527.025992][T20662] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3721'. [ 527.283617][T20669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3723'. [ 527.808362][T20691] netlink: 'syz.1.3727': attribute type 8 has an invalid length. [ 528.181416][T20699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3729'. [ 528.208747][T20698] wg1 speed is unknown, defaulting to 1000 [ 528.281636][T20698] ip6_vti0 speed is unknown, defaulting to 1000 [ 528.756364][T20717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3732'. [ 529.106170][T20726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3735'. [ 529.371968][T20543] Set syz1 is full, maxelem 65536 reached [ 530.066041][T20746] wg1 speed is unknown, defaulting to 1000 [ 530.101266][T20746] ip6_vti0 speed is unknown, defaulting to 1000 [ 530.154012][T20754] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3741'. [ 530.200424][T20754] veth0_macvtap: left promiscuous mode [ 530.207802][T20757] netlink: 'syz.1.3743': attribute type 1 has an invalid length. [ 530.245664][T20757] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3743'. [ 530.294309][T20750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3741'. [ 530.354199][T20763] netlink: 'syz.1.3744': attribute type 1 has an invalid length. [ 530.388027][T20750] geneve2: entered promiscuous mode [ 530.473463][T20763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3744'. [ 530.602771][T20764] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 530.623274][T20764] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 530.856255][T20771] __nla_validate_parse: 2 callbacks suppressed [ 530.856278][T20771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3745'. [ 530.889235][T20774] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3748'. [ 530.899314][T20771] netlink: 'syz.1.3745': attribute type 6 has an invalid length. [ 531.180329][T20789] netlink: 'syz.1.3753': attribute type 1 has an invalid length. [ 531.188543][ T5931] IPVS: starting estimator thread 0... [ 531.299964][T20791] IPVS: using max 24 ests per chain, 57600 per kthread [ 531.500332][T20789] syzkaller0: entered promiscuous mode [ 531.500356][T20806] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3757'. [ 531.515335][T20789] syzkaller0: entered allmulticast mode [ 531.887511][T20821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3762'. [ 531.904740][T20827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3763'. [ 532.274173][T20844] tipc: Started in network mode [ 532.285136][T20844] tipc: Node identity 2a236de9aeb8, cluster identity 4711 [ 532.303835][T20844] tipc: Enabled bearer , priority 0 [ 532.326642][T20845] syzkaller0: entered promiscuous mode [ 532.344841][T20845] syzkaller0: entered allmulticast mode [ 532.443096][T20841] tipc: Resetting bearer [ 532.489883][T20841] tipc: Disabling bearer [ 532.527340][T20853] pim6reg1: entered promiscuous mode [ 532.543685][T20853] pim6reg1: entered allmulticast mode [ 532.681239][T20859] netlink: 'syz.4.3773': attribute type 2 has an invalid length. [ 532.743808][T20862] macvtap1: entered allmulticast mode [ 532.774838][T20862] dummy0: entered allmulticast mode [ 532.807035][T20862] team0: Device macvtap1 failed to register rx_handler [ 532.849220][T20862] dummy0: left allmulticast mode [ 532.945849][T20871] tipc: Enabled bearer , priority 0 [ 532.958322][T20865] syzkaller0: entered promiscuous mode [ 532.985142][T20865] syzkaller0: entered allmulticast mode [ 533.020226][T20865] tipc: Resetting bearer [ 533.036221][T20864] tipc: Resetting bearer [ 533.080403][T20864] tipc: Disabling bearer [ 533.097257][T20876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3777'. [ 533.112709][T20876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3777'. [ 533.149004][T20876] team0: entered promiscuous mode [ 533.162871][T20876] team_slave_0: entered promiscuous mode [ 533.175034][T20876] team_slave_1: entered promiscuous mode [ 533.195866][T20876] erspan0: entered promiscuous mode [ 533.716331][T20904] bridge_slave_0: left allmulticast mode [ 533.722044][T20904] bridge_slave_0: left promiscuous mode [ 533.745268][T20904] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.790191][T20904] bridge_slave_1: left allmulticast mode [ 533.825894][T20904] bridge_slave_1: left promiscuous mode [ 533.835567][T20904] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.957604][T20904] bond0: (slave bond_slave_0): Releasing backup interface [ 534.043146][T20904] bond0: (slave bond_slave_1): Releasing backup interface [ 534.056962][T20904] team0: Port device team_slave_0 removed [ 534.070815][T20904] team0: Port device team_slave_1 removed [ 534.092163][T20904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.171595][T20904] batadv_slave_1: left allmulticast mode [ 534.177922][T20904] bridge0: port 3(batadv_slave_1) entered disabled state [ 534.185810][ T5889] IPVS: starting estimator thread 0... [ 534.261837][T20927] Bluetooth: MGMT ver 1.23 [ 534.295085][T20922] IPVS: using max 23 ests per chain, 55200 per kthread [ 534.336325][ T5896] hid-generic 0005:0002:5508.0001: item fetching failed at offset 3/4 [ 534.355517][ T5896] hid-generic 0005:0002:5508.0001: probe with driver hid-generic failed with error -22 [ 534.377147][T20904] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 534.433242][T20923] pim6reg: entered allmulticast mode [ 534.478975][T20926] pim6reg: left allmulticast mode [ 534.924188][T20938] wg1 speed is unknown, defaulting to 1000 [ 534.932472][T20938] ip6_vti0 speed is unknown, defaulting to 1000 [ 535.261434][T20942] team_slave_0: entered promiscuous mode [ 535.267540][T20942] team_slave_1: entered promiscuous mode [ 535.277017][T20942] vlan3: entered promiscuous mode [ 535.282169][T20942] team0: entered promiscuous mode [ 535.712273][T20959] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ0 [ 535.803882][T20957] wg1 speed is unknown, defaulting to 1000 [ 535.822333][T20950] wg1 speed is unknown, defaulting to 1000 [ 535.830559][T20957] ip6_vti0 speed is unknown, defaulting to 1000 [ 536.273590][T20969] syzkaller0: create flow: hash 2841193363 index 1 [ 536.395050][T17847] syzkaller0: tun_net_xmit 76 [ 536.413834][T17847] syzkaller0: tun_net_xmit 48 [ 536.422930][T20950] ip6_vti0 speed is unknown, defaulting to 1000 [ 536.425720][ T1212] syzkaller0: tun_net_xmit 76 [ 536.630057][T20977] netlink: 'syz.1.3804': attribute type 39 has an invalid length. [ 536.655648][ T5896] syzkaller0: tun_net_xmit 76 [ 536.732365][T20976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.740880][T20976] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 536.765353][ T1212] skbuff: skb_under_panic: text:ffffffff89d949c7 len:-1826819284 put:-1826819380 head:ffff88807b2f4000 data:ffff887fe8124df4 tail:0x120 end:0x6c0 dev:bond0 [ 536.766354][T20981] netlink: 'syz.4.3805': attribute type 1 has an invalid length. [ 536.785508][T20976] bond0: (slave gre0): Error -95 calling set_mac_address [ 536.797420][ T1212] ------------[ cut here ]------------ [ 536.802920][ T1212] kernel BUG at net/core/skbuff.c:212! [ 536.824850][ T1212] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 536.831158][ T1212] CPU: 0 UID: 0 PID: 1212 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 536.840559][ T1212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 536.850644][ T1212] Workqueue: mld mld_ifc_work [ 536.855416][ T1212] RIP: 0010:skb_panic+0x157/0x160 [ 536.860486][ T1212] Code: c7 e0 bb 6c 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 de 96 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 536.864866][ T5896] syzkaller0: tun_net_xmit 76 [ 536.880199][ T1212] RSP: 0018:ffffc900040ef3d8 EFLAGS: 00010286 [ 536.880224][ T1212] RAX: 0000000000000099 RBX: dffffc0000000000 RCX: b7cc4490ddca8200 [ 536.880238][ T1212] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 536.880250][ T1212] RBP: 00000000000006c0 R08: ffffffff8f7ce677 R09: 1ffffffff1ef9cce [ 536.880264][ T1212] R10: dffffc0000000000 R11: fffffbfff1ef9ccf R12: ffff8880517b1790 [ 536.923128][ T1212] R13: ffff88807b2f4000 R14: ffff887fe8124df4 R15: 0000000000000120 [ 536.931220][ T1212] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 536.940172][ T1212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.946758][ T1212] CR2: 0000200000d50030 CR3: 0000000040974000 CR4: 00000000003526f0 [ 536.954820][ T1212] Call Trace: [ 536.958117][ T1212] [ 536.961105][ T1212] ? ipgre_header+0x67/0x290 [ 536.965712][ T1212] ? ipgre_header+0x67/0x290 [ 536.970397][ T1212] skb_push+0xc3/0xe0 [ 536.974844][ T1212] ipgre_header+0x67/0x290 [ 536.979282][ T1212] ? __pfx_ipgre_header+0x10/0x10 [ 536.984316][ T1212] neigh_connected_output+0x286/0x460 [ 536.989703][ T1212] ip6_finish_output2+0xfb3/0x1480 [ 536.994823][ T1212] ? __pfx_ip6_finish_output2+0x10/0x10 [ 537.000371][ T1212] ? ip6_mtu+0x7d/0x490 [ 537.004536][ T1212] ? ip6_mtu+0x38c/0x490 [ 537.008803][ T1212] ? ip6_finish_output+0x2ef/0x4e0 [ 537.013944][ T1212] ? ip6_output+0x126/0x550 [ 537.018464][ T1212] ip6_output+0x340/0x550 [ 537.022892][ T1212] NF_HOOK+0x9e/0x380 [ 537.026874][ T1212] ? NF_HOOK+0x101/0x380 [ 537.031116][ T1212] ? __pfx_NF_HOOK+0x10/0x10 [ 537.035708][ T1212] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 537.041536][ T1212] ? do_raw_spin_unlock+0x122/0x240 [ 537.046852][ T1212] ? icmp6_dst_alloc+0x3a5/0x420 [ 537.051831][ T1212] ? icmp6_dst_alloc+0x3a5/0x420 [ 537.056781][ T1212] mld_sendpack+0x8d4/0xe60 [ 537.061296][ T1212] ? mld_sendpack+0x1e7/0xe60 [ 537.066058][ T1212] ? __pfx_mld_sendpack+0x10/0x10 [ 537.071153][ T1212] mld_ifc_work+0x83e/0xd60 [ 537.075664][ T1212] ? process_scheduled_works+0x9ef/0x17b0 [ 537.081381][ T1212] process_scheduled_works+0xae1/0x17b0 [ 537.087024][ T1212] ? __pfx_process_scheduled_works+0x10/0x10 [ 537.093013][ T1212] worker_thread+0x8a0/0xda0 [ 537.097612][ T1212] kthread+0x711/0x8a0 [ 537.101696][ T1212] ? __pfx_worker_thread+0x10/0x10 [ 537.106808][ T1212] ? __pfx_kthread+0x10/0x10 [ 537.111400][ T1212] ? _raw_spin_unlock_irq+0x23/0x50 [ 537.116601][ T1212] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.121810][ T1212] ? __pfx_kthread+0x10/0x10 [ 537.126407][ T1212] ret_from_fork+0x4bc/0x870 [ 537.131012][ T1212] ? __pfx_ret_from_fork+0x10/0x10 [ 537.136126][ T1212] ? __switch_to_asm+0x39/0x70 [ 537.140888][ T1212] ? __switch_to_asm+0x33/0x70 [ 537.145651][ T1212] ? __pfx_kthread+0x10/0x10 [ 537.150253][ T1212] ret_from_fork_asm+0x1a/0x30 [ 537.155021][ T1212] [ 537.158038][ T1212] Modules linked in: [ 537.163371][ T1212] ---[ end trace 0000000000000000 ]--- [ 537.165475][ T5896] syzkaller0: tun_net_xmit 76 [ 537.266773][ T1212] RIP: 0010:skb_panic+0x157/0x160 [ 537.271859][ T1212] Code: c7 e0 bb 6c 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 de 96 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 537.292506][ T1212] RSP: 0018:ffffc900040ef3d8 EFLAGS: 00010286 [ 537.298646][ T1212] RAX: 0000000000000099 RBX: dffffc0000000000 RCX: b7cc4490ddca8200 [ 537.306687][ T1212] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 537.314946][ T1212] RBP: 00000000000006c0 R08: ffffffff8f7ce677 R09: 1ffffffff1ef9cce [ 537.322962][ T1212] R10: dffffc0000000000 R11: fffffbfff1ef9ccf R12: ffff8880517b1790 [ 537.331028][ T1212] R13: ffff88807b2f4000 R14: ffff887fe8124df4 R15: 0000000000000120 [ 537.339174][ T1212] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 537.348437][ T1212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 537.355119][ T1212] CR2: 0000200000f62030 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 537.363219][ T1212] Kernel panic - not syncing: Fatal exception [ 537.369632][ T1212] Kernel Offset: disabled [ 537.374049][ T1212] Rebooting in 86400 seconds..