last executing test programs: 3.570804767s ago: executing program 1 (id=5693): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000140)=0x14) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x8000) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9"], 0x0}, 0x94) (async) write$tun(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f"], 0xfdef) (async) getsockopt(r2, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_ts_info}) 3.37975401s ago: executing program 1 (id=5696): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000140)={0x2, 0x7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) bind$can_raw(r3, &(0x7f00000001c0), 0x10) close(0x3) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r4, 0x405, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) 3.304857427s ago: executing program 1 (id=5698): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x410}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x71bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r3) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010325bd7000fedbdf25020000003a78cc935e3f36195f7e052426b7b5a6f1ce37d25d903b3cb8a86af3d36693a54a58fd7e6a1428a902de47f1f4c185fc3add2720a4bdc8928edc4feeec195b4594419832d7a52c2f0386b40dfe28b3190b2fec395d26d581bb6619e9ed7c389e2f3f19020ddb8f88d5f47c3e090622fad79c1306f1dbd62c6aaf4c98831ba55f6f6694984977cf64dd80cf417c4d4fcf8cc028843cc43cbea32805c8ad0f23d543f4924b80d816ac4c927d1eaca9d6a7e24612b1b66421c16f5a87d4307647256b283f8ba586278099076012e0f6772e3ddf9f165d8a03aa3e2ea867f9ba2de602f1f1fd"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c840) openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="eb7a2bbd7000fedbdf252100000009001f0070687908000000000500200004000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000414000200697036677265300000000000000018000380080099c8fe50000000000100180004003423d5d28f9b6442fed7e27e1f872f9b954a9df8a18be38f8c7bf5b9bf576ad78d20f63f64e41b017e54ed61ce5083f7dfe122e8bc4ed9899c89216dc8a7235908d19815fe8702b35007a5e00907baff571ff4fea70225b62bbc1f6832"], 0x44}}, 0x0) socket$kcm(0xa, 0x3, 0x87) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x5, 0x800007, 0x2, 0x6, 0x8, 0x8, 0x7, 0x4}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.199343158s ago: executing program 1 (id=5718): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x439, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x2704}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x5}]}}}]}, 0x44}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x80}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="611272000000000061137e0000000000bf2000000000000007020100180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d"], 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) close(r3) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r7, &(0x7f0000000280), 0x0}, 0x20) recvfrom$inet6(r1, &(0x7f00000000c0)=""/247, 0xf7, 0x40000001, &(0x7f0000000000)={0xa, 0x4e23, 0x3c03e9c6, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) 1.788517618s ago: executing program 4 (id=5726): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079104800000000001f000000000000f987349656b11bb000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.788125777s ago: executing program 2 (id=5727): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3}]]}}}]}, 0x40}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x7, &(0x7f0000003480), &(0x7f0000000080)=0x80) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880}], 0x1, 0x80001) 1.62788861s ago: executing program 4 (id=5730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, 0x3, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_LABELS_MASK={0x18, 0x17, [0x3, 0x5, 0x4, 0xba2, 0x1]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xa3f5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000081}, 0x8c4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000140)="3f03", 0x2, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff070000140003002e000000000000d700000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1.627494208s ago: executing program 0 (id=5731): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22, &(0x7f0000000380)=@ringbuf={{}, {}, {}, [@kfunc, @generic, @map_idx, @ringbuf_query, @printk={@s}, @jmp, @map_fd]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x92, &(0x7f0000000240)=""/146}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x10, &(0x7f0000000300)=@raw=[@tail_call, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x3, 0x9, 0x8, 0x30, 0xffffffffffffffff}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd3}], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x6, &(0x7f0000000080)=""/6, 0x41000, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xf, 0x8, 0x4489af81}, 0x10, 0x166bc, r0, 0x8, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x4, 0x5, 0x5, 0x8}, {0x3, 0x3, 0xc, 0xd}, {0x5, 0x1, 0x0, 0x2}, {0x5, 0x1, 0xe, 0xc}, {0x5, 0x1, 0x2, 0x3}, {0x4, 0x5, 0x3, 0x3}, {0x1, 0x1, 0x4}, {0x1, 0x1, 0xa, 0xc}], 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd63, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x8d3eef5c29e39553) 1.623867546s ago: executing program 2 (id=5732): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) write$ppp(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x8, 0x3, "c4250260"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 1.568666489s ago: executing program 4 (id=5733): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500242f09880bd320d98a61a90057e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="59235bd7a9324ff307d87177332368fbdeefaa1544600ea1870645446c357de433206896637019b84d57c3de1ea07638e494dd701db1af6fc15db78cf79f5ab4bc7aee8553677ffe377a35b4afdb989fb7da1ff63956ffb796d51daf1c268b9f1a4a06583f8c03ec1671b151a8a495c1b006fa5f2f3a54a46aeee8005b178b9516d2b928984ccb942fa2278a2e33a0b619f2dd814fc91942e03c48fd9b7d19d9a6612b46805b267ef3132a724cbfcd1c715be67930e2ae2b9a2479c5a4b2fecd301a745a6fd67598a5e5ecc1e56e58159c47def7f9285acfedc980596377e6f9ee076fa094e5d8f838b718ed63ff8265a1dbc1549bed03e6b27b6fc2b8a07373506a1a41d5a71cbf0eaa24ec737b02a8a2d5114c3c4e5810a2c3eae3373fd341800cfb0fb35cefe04ca4da2b02a83c40126e23cdf3c817b530bbe7b431bc0b7d864e3e6dd1ab90259a8bd7ad7dd4c6366ea6da661fd016b394adcce5988fff85fbc832a927c97b89337e195f562cd284911eef1ee52e4ff033b33beedea7cf43c4d0cc0471fa91011e1e7e8733bf82c01346d6ecb49f1a84e92d063c81a7227d89be33f7273b87e29ae53a5f38dc94cf391fcb82c9432821ef1a0f6bbfe8f7d6574479a8f621e1d8f7d9bb20f3d8d469e6d232d7d7837ff12a224a65c604907e787baaf7c863ad48a5edecbe1470c20507a6ee5dee75e9ef84c71af5af800a9ce9787ebdee9e1c8189fbf66048d5c3757fb2b697ce68cfd316a7b25a385111e0cd2fddb81602e36e74c4f99b403cb304a4774e648054c0456c7869f9d97873ff80e2664c1265292941a9b767c7f40767cfccdbcaa156453d6a910fd5440f7a2bf8f4bb6d6d9fd443f2304617a684b6afa99c157dcf70e51fdb55fd0dbf5c6733841024599f8d1791a07c5dc3a4ccaf4d7c0ca3d101b2beba3a49d2378c9fe4fdb10babd95083a0c4db5a30c4490828d97efe807a13e587fbac1089843964facfd27d287262759384fe9b610f81048be430c1e8fe6327c0f2fd003021d20563ec0c7e39aec6718649c958da2e02cb3848c76924492678889c18bea02ed5ee080106e9838cbca9ad5f66c0434182225b13a236b342cf80562c10d4a3459aea17589b84904d3d2c2b", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000000000001000000050003000100000006000240000000000c0004"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x90) 1.549387303s ago: executing program 0 (id=5734): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="4647b4f310d036b398bd576db787e7b4202ee128ae26c942fc41e537802686e8", 0x20}], 0x1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x7f81, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f0000000000)={0x2, @rand_addr=0x64010101, 0x4e21, 0x0, 'lc\x00', 0x14, 0x0, 0x58}, 0x2c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r5, &(0x7f0000000480), 0x0}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r6, 0x0, 0x32, &(0x7f0000000000)=""/2, &(0x7f0000000040)=0x2) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) connect(r0, &(0x7f0000000140)=@nfc_llcp={0x27, r11, 0xffffffff, 0x3, 0x1, 0x6, "80893bda2c461577a1689cf37a2e15bbc647f7f599074d1c29fc13358080fe33c37bc04130c4cf96fc7e6e8b4594af665511b80f1a7058082825f5788480c9", 0x8}, 0x80) connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000140)) 1.430809902s ago: executing program 2 (id=5737): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.427039432s ago: executing program 4 (id=5738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac"], 0x50}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x25, r5}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) close(r8) r9 = socket$phonet(0x23, 0x2, 0x1) close(r9) sendmsg$can_j1939(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)="8de8d5281008a44da871cfd7d8c50ba0", 0x10}, 0x1, 0x0, 0x0, 0x4040001}, 0x4c0c0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}}, 0x0) 1.179781001s ago: executing program 0 (id=5739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100), 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xfed0, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 1.066147048s ago: executing program 0 (id=5741): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="42065e8c9ca1332c8b9087e087bc9f34ece5bda75feaf059c90ae8c069ffbd2aa924ac53fc5c5ee041d3e656ac6201d3d31a9ff7ae06321b5568865fa134f4b2a6081ba76f8d05ed8821569dceb160a740b01756a4c543d59d994438144933749d2062ac0b7cf6a045b8ea0dcf71e4021df637e7bc5804d005edfe6275b1ca89aea9e8c40eee4f3a2ba6dc98"], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x865d50d53373b244, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x60}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0x0) 1.039663534s ago: executing program 2 (id=5742): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x8, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r2 = socket(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x200008c0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x18000000000002a0, 0x19, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00001100630677", 0x0, 0xfa, 0x2000000, 0x3f, 0x5e, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ipvlan1\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001580)=@gettfilter={0x0, 0x2e, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xb}, {0x1, 0x8}, {0x6, 0x3}}, [{0x0, 0xb, 0x314e}, {0x0, 0xb, 0xfff}]}, 0x74}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x3) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001680)=ANY=[@ANYBLOB="4c0000002000020026bd7000090000003200000c40f7329f3d7939e0c8d7125237357e000e2400000000a20ab0fe8038cbf1c858f04668000000000024fe8000000000000000000000000000aa4e2200004e2107ff020000a088000000703f6d419535e435fe3a6cb53800ca44a23c938ef3ebeb4b15698cbc9a5bd4604d2d297a5fe8d6c6ad47c1191c23858f3da984796600fffffff2b3b8de46863e07352da59cd59dfa092225301764e93b4f7e368d6a15af01c09fed339b9c2e99c2730ad6e63e9e21bf36d7866f8e2e8b5369b48da58d58d0f353ee7f97314fb7477b0c6ff090ccf34095680380bd5a650450eeec4f7483de02d62a85", @ANYRES32=0x0, @ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x48040) sendto$l2tp6(r10, &(0x7f0000000580)="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", 0x1000, 0x48000, &(0x7f0000000080)={0xa, 0x0, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6, 0x2}, 0x20) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000300)='\x00!G', 0x3}], 0x1, 0x7fffffff, 0x0) r11 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000300)={0x40, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r11, &(0x7f00000002c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x841}, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES16=r0], 0x0) 987.651621ms ago: executing program 1 (id=5743): r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8700b700001f0000000005000000180001801400020073797a5f74756e0000000000000000000500070002000000"], 0x34}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x80, 0x80, 0xd1, 0x3, {{0x5, 0x4, 0x3, 0x25, 0x14, 0x66, 0x0, 0xf8, 0x2f, 0x0, @empty, @empty}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x6c, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xff}, @ETHTOOL_A_CHANNELS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10004084}, 0x4) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x6c, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xff}, @ETHTOOL_A_CHANNELS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10004084}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000001dc0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r8], 0x3c}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r9, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7f, 0x5d}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4b6}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x26a}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x630}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x60e}]}, 0x68}, 0x1, 0x0, 0x0, 0x60048000}, 0x84) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r12) sendmsg$NL80211_CMD_REQ_SET_REG(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x20, r13, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x20, r13, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) socket$inet6(0xa, 0x3, 0x5) (async) r14 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r14, 0x29, 0x9, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r14, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) (async) sendmmsg(r14, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000370312cd8acb5af1ea4700000006000a58000000060a090cfeffffff000000000200fffc901ac7434240ab6e38e40100637400001c0002800500030001000000080004400000001608000240000000040900010073797a30000000000900020073797a320000000014000000110001000000"], 0x80}}, 0x0) 986.111076ms ago: executing program 3 (id=5744): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x2, [0x5, 0x6]}}) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x40, 0xfff, 0x46, @remote, @loopback, 0x20, 0xb7e755b7a023b86b, 0x8, 0xf4}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0], 0x0, 0x42, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x1b, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740), 0x4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xdbd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x19, 0x12, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x2, 0x1, 0x3, 0x9, 0x7}, @alu={0x4, 0x0, 0xb, 0x3, 0x4, 0xfffffffffffffff4, 0x4}, @ldst={0x3, 0x3, 0x6, 0xb, 0xd, 0x2, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x8450e8f7070242f2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x9, 0x9e, &(0x7f0000000200)=""/158, 0x41100, 0x48, '\x00', r2, @fallback=0x4, r3, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x8, 0x6}, 0x10, r4, r5, 0x5, &(0x7f0000000880)=[r6, r7], &(0x7f00000008c0)=[{0x1, 0x3, 0x2, 0x7}, {0x3, 0x1, 0xe, 0xc}, {0x0, 0x4, 0x4, 0xc}, {0x3, 0x1, 0x6, 0x6}, {0x3, 0x2, 0x2, 0x9}], 0x10, 0x1}, 0x94) r9 = socket$inet6_sctp(0xa, 0x0, 0x84) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000b80)={0x0, r6}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@volatile={0xd, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x5f, 0x61, 0x61, 0x2e]}}, &(0x7f0000000a40)=""/226, 0x2a, 0xe2, 0x0, 0x1, 0x10000, @value=r10}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d80), &(0x7f0000000dc0)='%ps \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0x17, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0xb6}, @call={0x85, 0x0, 0x0, 0x38}, @generic={0x69, 0xf, 0xf, 0x3, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @ldst={0x0, 0x1, 0x1, 0x9, 0x2, 0xffffffffffffffc0, 0xffffffffffffffff}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @ringbuf_query]}, &(0x7f0000000c80)='GPL\x00', 0x200, 0xe, &(0x7f0000000cc0)=""/14, 0x40f00, 0x50, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000d00)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000d40)={0x3, 0xd, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000e40)=[r11, r1], &(0x7f0000000e80)=[{0x3, 0x3}, {0x2, 0x4, 0x9, 0xa}, {0x3, 0x3, 0x3, 0x5}], 0x10, 0xfffffffb}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001000)={{r6, 0xffffffffffffffff}, &(0x7f0000000f80), &(0x7f0000000fc0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001040)={r12, 0xffffffffffffffff}, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001080)={0x0, 0x7f}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000001100)={r14, 0x100}, &(0x7f0000001140)=0x8) r15 = getuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001200)=0x0) r17 = gettid() r18 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000003a00), 0x80000) r19 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003a40)={0x0, 0x0, 0x0}, &(0x7f0000003a80)=0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003ac0)={r11, 0xffffffffffffffff}, 0x4) r22 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg$netlink(r13, &(0x7f0000003c00)={&(0x7f0000001180)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000039c0)=[{&(0x7f00000011c0)={0x38, 0x12, 0x4, 0x70bd29, 0x25dfdbff, "", [@generic="c0477b6f47e258fec63c1d3acda72132060fde475db7430c0d36f7b27be8", @typed={0x8, 0x61, 0x0, 0x0, @fd=r11}]}, 0x38}, {&(0x7f0000001240)={0x12c8, 0x11, 0x300, 0x70bd29, 0x25dfdbfb, "", [@nested={0x1140, 0x71, 0x0, 0x1, [@generic="04b96decb085a7f7bc16f24f05e762e8fe8707dbd3d5b565cf4bfc5a4ceb21e4b70f07c99be86e22c8554dca3dd7b6adc4690e510e1de895f6a7eb4f416e3974cc997cbfb38d58642f7c24c7", @generic="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", @nested={0x4, 0x7d}, @typed={0x8, 0x1b, 0x0, 0x0, @uid=r15}, @typed={0x14, 0xca, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0x42, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0xc, 0xec, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0x9e}, @generic="a4f11bfa0a4dd406f50bb61edde9acace2e957220cb179bc4862f5fe891d125b7e7a6430d8fed3d66b6d3c9c821d25262782716501fdafab2c047250e520609dcbbb1e8c5e42a7b9761a1dedc3e2d46d7d321079682300e661a359ed7827f34aad96d6c72df4c49537bc54012060c4f9e79bec84da7bd173af24734c13c209fb7dfee11d86b4d3f3279e0b279c4789681774379c0237fdb468444bc8151c83997d316c3ea374c4ff8c8e33d8a73f3fe931048d76", @nested={0x4, 0x21}]}, @typed={0x8, 0xd5, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x12e, 0x0, 0x1, [@typed={0x8, 0x103, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x1f, 0x0, 0x0, @uid=r16}, @nested={0x4, 0x57}]}, @generic="49f0035b8381c0faa1a7b86afc612beb8f4c70b906cd4ed6c2685b0f5afbb58a823b45241f603bf9f6faa4c51c3cd2f92e094e520fbb7493f949fa77bd63705e06228b04ded44b7b3679bc0d641ac8f5a5d2e79935f27a5916df145dc6374d4b8f0fb3fa60ee375b23f9287950497840dd8a0371079ea3388276ac8e9d3e8670f7bff5dbc3496767937dd6c1d3f36e22457ad46837e8095e59550152d3851a0b9f440737963032369babfa804e4dd022ac388eedb42a46fab45ffb95e381f970b1b1a6babb14d454bdf11204831c68a4ec2ef51b69790e8dc72c04663bb026a51ee96d1c5b74be557d3e6a7a60710ac23b", @generic="b286d81febdcaab3b78ef9e514d102c6994272ff4ff84c8dcc63bbb7f1516806d6a311d9684c1f952b61a656c54959bcea5b921eefe65835c4feecd0858d88192a146bf217d4e45172ff252a1b3abbc80f571e699183670dd23cddd58edf215eda49418717b9"]}, 0x12c8}, {&(0x7f0000002540)={0x1448, 0x2c, 0x100, 0x70bd26, 0x25dfdbfe, "", [@generic="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", @nested={0x87, 0x111, 0x0, 0x1, [@nested={0x4, 0x53}, @nested={0x4, 0xb8}, @typed={0xc, 0x11b, 0x0, 0x0, @str='syztnl1\x00'}, @typed={0x8, 0x13b, 0x0, 0x0, @u32=0x8}, @generic="40235bbfcbde429a9d120bdc2059ca6219f23786b243cd61a69f93c220772a4555f1086f5718bdb6d1a925a431e9b422af3785032703455bd76670ef3d30377b98599fbd19c9ab377e2fe46ac2debdf364ad342a8f26", @generic="b37fbc2d10515d473c69f416e4d8d30933"]}, @generic="7bf2d7b0bbee467f0f57d3eaf3d1f0c41722dd03e15a7b2c8c76dc74d064dd2b0b5beebbe726010f6167ee77f30e0a51ff6428058ce42b20598718776c7977dd443ee8705ef49ca4b31f792e981148f174ac2f4e654ff5e9b53c76df874a31f6b1289faf3ad0585c80a3022f363c8526e1e7d4343d1ef75ee5e2e44dd0a815dd358dbfae2e4597e11e37bba12103dbcf438df5cd07f4cd52bd0bdbfd24ff8d8f44ea1f5a35c671350675ff5d37d330d3b761d913839a1049ea5fe540c577e06c427beca50f2f63931308cdd85ea2e3bade18eb639de2bed4b67e876695191844f843c6b7c8671a2f33a754", @nested={0x8, 0xa2, 0x0, 0x1, [@nested={0x4, 0xce}]}, @nested={0x18, 0x52, 0x0, 0x1, [@nested={0x4, 0x5b}, @typed={0x8, 0xb7, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x122, 0x0, 0x0, @fd=r7}]}, @generic="5c667ead455a8f574783a0abc3e2f5549b76600749a8f7e1a54f9ba3a273274f196a364edcbcf080", @nested={0x10ab, 0x134, 0x0, 0x1, [@typed={0x8, 0x134, 0x0, 0x0, @pid=r17}, @typed={0xc, 0x1d, 0x0, 0x0, @u64}, @nested={0x4, 0x15}, @generic="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", @generic="2b49879e2103a84a3cbe3ceb32bac03c0fc3bf201b95bfcc35e8f699c257eefd29a9badb24baa2a2baf3155ef6ec805225bba3d042d0e0e39e8ad347daea64c16f7b21f8ac24bc353ae2ebd1dc36864512dfe20c8e13d8b1b355459e27705043722419200fd2fc6821a6f66957012767bf0b12ac2e07cf4d0565b7d0e829b477f8734aa75ff933cb8d5cec", @nested={0x4, 0x12}]}, @generic="060752709c7686fcb48d0670f9c065bd40f8a76164a06c0d9103d270b90af6e97a86862a9503511940e0b2dd32b343fa38780344132e743b8e81631e594450400a11698c81a8840ff923924e7d954dd07ca6ec8111e36216fc077d9994c7b117908706f9433f647a5ce239d733e4915bc87acf2f11428e69ae65ec81c47292e70b7a4300945b1a9a98430593a4e5490d8a4f48a2ecb34668a3a771b0a25ae74c0adeee536c32e20242cdbc258e81e6766de42c80be3011130fe5292f7f7108ffcef5a2ef68554437fdc1af286b5f40", @nested={0x4, 0x132}]}, 0x1448}], 0x3, &(0x7f0000003b00)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x20, 0x1, 0x1, [r8, r18, r12, r6]}}, @rights={{0x2c, 0x1, 0x1, [r8, r3, r19, r12, r1, r6, r12]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r20}}}, @rights={{0x30, 0x1, 0x1, [r21, r7, r1, r0, r13, r13, r22, r12]}}, @rights={{0x1c, 0x1, 0x1, [r3, r7, r9]}}], 0xd8, 0x40000c1}, 0x8000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003c40), &(0x7f0000003c80)=0xc) 887.933859ms ago: executing program 4 (id=5745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r4) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xb3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008080) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async, rerun: 32) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (rerun: 32) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x800) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'bridge_slave_1\x00', @multicast}) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r12) (async) r13 = socket$unix(0x1, 0x2, 0x0) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "a493"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 681.668349ms ago: executing program 3 (id=5746): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000006c0)={0x0, @sco, @can, @in={0x2, 0x4e21, @remote}, 0xfffb, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)='ip_vti0\x00', 0x4, 0xe000000000000000, 0xfffa}) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000003c0)={r2, 0xcb}, 0x8) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x11, 0x4, 0x4, 0x12, 0x880, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133}], 0x9}, 0x40020000) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 588.094566ms ago: executing program 2 (id=5747): write(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) 566.91216ms ago: executing program 3 (id=5748): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x4000880}, 0x4008000) (async) accept$nfc_llcp(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) listen(r2, 0xef84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061105f000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x90) 524.997174ms ago: executing program 3 (id=5749): syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @private2, @mcast2, {[], @dest_unreach={0x1, 0x6, 0x0, 0x6, '\x00', {0x0, 0x6, "317413", 0x10, 0x0, 0x0, @empty, @loopback}}}}}}}, 0x0) 443.787252ms ago: executing program 3 (id=5750): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "08e48ff0bf597edc"}, 0x28) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000032, 0x0, 0x0) close(0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x7) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000300), 0x0, 0x0, &(0x7f0000000540)=""/165, 0xa5}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0x20, &(0x7f0000000700)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x6, r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000ffffffff01000000000000080002000000", @ANYRES32=r8, @ANYBLOB="08000200e0000002"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20d3000000f8ff070000400000000200e9fffd96948d95f2ae00b79cdb3c6e7a366591bb5ac01b3725f0f30b5ebeef0509195b1e2551bf4650c683a90baf8ea24e4a265dc61c8cd3c2f0ea5ec350a986c120b34cf1d8b77900cf6d0ae4b83468263554c6e2d695c05f115a9f25812bd5f663c845dccccd68447026d0c57e30ddc57e3203646fcb17228d4f40352c2904327ad629d5698f3259629f6a7f2e26aaaf641625fa94d387a2f87dfc0914de204fe1996273d1afa635a6e71673cdda2b5d32aba24cd94bb2d5e217a572257a98e6ad6e13bae131cd13066bc6316053ab6c9ab2f2df9a9c0d8e541d2d72f597e3b1c1269972e450e7f96437c7812042ce910b8ab92842d43ead1cbe086c461a2d26d50ca5cb7d404a1d54091c061fcfaf50a7eb168cabff04410f1cc2d6cdc61eb44d0d9f2863300200e2422eb0074657b114ac849d37870e8d650d668290b37e3e20dd31355dee5de71e8abf090c890d010000800e90533fca6c4191348b950419d7364b4ce8a9e814748f84132c63361df38176debae6887c6f4ebea5668d7e0b7a5f4d6ef96fdea07df0886ce3511a9c4c296f44791dcb21ba24e9d8130c6402f5ccae6ddd92bb059c60bf87d4db733917b2323164ad45a28b3f86dba1bc8407f6ed00d6595555240408fea985fb93f4cf88e8d7", @ANYRESOCT=r5, @ANYBLOB="080002fddf000002"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) 386.458539ms ago: executing program 3 (id=5751): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16, @ANYBLOB="0500000000000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a"], 0x10e0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000940)={0x9c, 0x0, 0x504, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x3}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2f}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "9e3ad53b3b82a0ae"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x6d}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "e3e9935de22f5038"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000140), 0x4d) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80) r5 = socket$kcm(0x1e, 0x4, 0x0) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x3c, r3, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x5}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="1c0100002b00010000000000fcdbdf250a01f2800c00090008ac0f000000000014"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) 147.791722ms ago: executing program 0 (id=5752): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x4000) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000000c0)=0x4, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903}, 0x20) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x3c, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="3de44d599a91"}, @NL80211_ATTR_PMKID={0x14, 0x55, "fbecfe47f945950227bceb1eba619098"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000004b0000000e0001"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r9, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0x11}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0) 39.823844ms ago: executing program 1 (id=5753): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r1 = socket$inet6(0x10, 0x2, 0x6) (rerun: 64) sendto$inet6(r1, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRES64=0x0, @ANYRES8=r0, @ANYRESOCT=r0], 0xb8}}, 0x80) (async) r2 = socket$inet(0x2, 0x5, 0x0) sendfile(r2, r2, 0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00012abd7000fddbdf250100000008000300", @ANYRES32=0x0, @ANYBLOB="1a90933a4cffab97a0d529d315485486c41ce429a0ab163474522014e113663723e3721f844eb87d805be0b3baf251e192768e5928a254ccb88ea3abbba07d5e5aa419fa616454b7bea02a71afb6470ca43d65f624d6e7fd320c489136764c4301839bbb1e36d15481a9b8b27b6317a1706c01d31910d0113840d0326253bf6b5cd632c638989012b8ed4826b6f595293ec2cce965a1f405b63c1569a6885760afbaff52b382a5ba1f4ba2161d024bc7594dbb2234f80ccd8dacc2c026b21a85b55a9965ad5a656ee55c48ffba"], 0x1c}}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) getsockopt$sock_timeval(r5, 0x1, 0x4c, 0x0, &(0x7f0000000300)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x4000040) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000c00)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @rand_addr=0x64010102}}, {{0x2, 0x0, @dev}}]}, 0x190) (async, rerun: 32) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) (rerun: 32) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c00018006000600843b00004c150280081517"], 0x1570}, 0x1, 0x0, 0x0, 0x2}, 0xc800) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) (async, rerun: 32) setsockopt$MRT_DEL_MFC(r8, 0x0, 0xcd, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x22}, @multicast1, 0x0, "1e37f9bcc4f1382ab4b78b9c3f6b54953d3e830ec7fa3dcb9ce7ad8f42240fc4", 0x9, 0x2, 0xff, 0x80000}, 0x3c) (rerun: 32) 39.47871ms ago: executing program 2 (id=5754): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f00000000c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz0\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 38.79461ms ago: executing program 0 (id=5755): r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x3, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe, 0x9}}}}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000efffffffffffffff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_ext={0x1c, 0x12, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffff1359}, [@ldst={0x1, 0x0, 0x6, 0x0, 0xa, 0xffffffffffffffe0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1059}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000a40)='syzkaller\x00', 0x9, 0x5b, &(0x7f0000000a80)=""/91, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1701f, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)=[0xffffffffffffffff, r2, r2, r2, r2], 0x0, 0x10, 0x350c}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@map=r2, 0x1e, 0x0, 0x11, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000880)=[0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r7, r7, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r6, r7, 0x2f, 0x8, 0x4}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)={@cgroup=r5, r3, 0x1, 0xc, 0x0, @void, @value=r6, @void, @void, r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x7f, 0xf}, {0xfffd, 0x0, 0x0, 0x81}, {0x8001, 0x2a, 0x4, 0x1}]}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b0f, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r8, 0x40309410, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x12, r9, 0x4}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x2c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r11, 0x8b27, &(0x7f0000000040)) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'macsec0\x00', 0xf29}) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r12}, 0x8) 0s ago: executing program 4 (id=5756): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x82, 0x2, 0x1000000}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000041c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) shutdown(r3, 0x0) kernel console output (not intermixed with test programs): netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.161346][ T6821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.634661][ T6825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.665474][ T6825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.680606][ T5848] Bluetooth: hci2: command tx timeout [ 405.721214][T17816] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3388'. [ 405.730773][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.740724][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.963918][T17822] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 406.003616][T17829] netlink: 'syz.2.3392': attribute type 11 has an invalid length. [ 406.014837][T17829] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3392'. [ 406.213537][T17838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3392'. [ 406.225238][T17834] bridge_slave_0: left allmulticast mode [ 406.249226][T17834] bridge_slave_0: left promiscuous mode [ 406.265417][T17834] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.304397][T17834] bridge_slave_1: left allmulticast mode [ 406.319460][T17834] bridge_slave_1: left promiscuous mode [ 406.326596][T17834] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.464757][T17834] bond0: (slave bond_slave_0): Releasing backup interface [ 406.497435][T17834] bond0: (slave bond_slave_1): Releasing backup interface [ 406.525302][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 406.528887][T17834] team0: Port device team_slave_0 removed [ 406.538389][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 406.550342][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 406.563413][T17834] team0: Port device team_slave_1 removed [ 406.575382][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 406.578260][T17834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.585827][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 406.593493][T17834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.613348][T17834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.621066][T17834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.632935][T17834] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 406.670218][T17841] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3395'. [ 406.693347][T17838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 406.740798][T17842] 8021q: adding VLAN 0 to HW filter on device bond2 [ 406.752881][T17842] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 406.767579][T17842] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 407.086386][T17854] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.094411][T17854] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.271158][T17854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.287980][T17854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.450846][ T6826] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.471557][ T6826] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.490613][ T6826] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.519036][ T6826] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.752243][ T5847] Bluetooth: hci2: command tx timeout [ 407.811029][T17845] chnl_net:caif_netlink_parms(): no params data found [ 407.934470][T17891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3408'. [ 407.956026][T17891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.964126][T17891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.974029][T17891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.148454][T17903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3411'. [ 408.285399][T17845] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.296363][T17845] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.311459][T17845] bridge_slave_0: entered allmulticast mode [ 408.327250][T17845] bridge_slave_0: entered promiscuous mode [ 408.344467][T17845] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.356008][T17845] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.364880][T17845] bridge_slave_1: entered allmulticast mode [ 408.391781][T17845] bridge_slave_1: entered promiscuous mode [ 408.483769][T17911] veth0_to_hsr: entered promiscuous mode [ 408.491144][T17911] veth0_to_hsr: entered allmulticast mode [ 408.508176][T17912] macvlan2: entered promiscuous mode [ 408.515952][T17912] team0: entered promiscuous mode [ 408.523060][T17912] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 408.577082][T17912] team0: left promiscuous mode [ 408.614574][T17845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.643211][ T5847] Bluetooth: hci4: command tx timeout [ 408.652492][T17845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.864592][T17845] team0: Port device team_slave_0 added [ 408.918243][T17845] team0: Port device team_slave_1 added [ 409.083511][T17845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.124277][T17845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.208958][T17845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.242718][T17845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.254195][T17845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.281954][T17845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.445329][T17845] hsr_slave_0: entered promiscuous mode [ 409.454903][T17845] hsr_slave_1: entered promiscuous mode [ 409.462819][T17845] debugfs: 'hsr0' already exists in 'hsr' [ 409.468807][T17845] Cannot create hsr debugfs directory [ 409.533684][T17952] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3424'. [ 409.640199][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3426'. [ 409.657031][T17959] tipc: Started in network mode [ 409.662671][T17959] tipc: Node identity 8a50bf05370e, cluster identity 4711 [ 409.672047][T17959] tipc: Enabled bearer , priority 0 [ 409.752189][T17959] syzkaller0: entered promiscuous mode [ 409.758848][T17959] syzkaller0: entered allmulticast mode [ 409.818282][T17959] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 409.869295][T17958] tipc: Resetting bearer [ 409.912711][T17958] tipc: Disabling bearer [ 410.140465][T17978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3435'. [ 410.264375][T17981] netlink: 'syz.2.3436': attribute type 10 has an invalid length. [ 410.274440][T17981] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3436'. [ 410.308959][T17981] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 410.324373][T17981] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 410.324910][T17986] openvswitch: netlink: Message has 5372 unknown bytes. [ 410.335928][T17981] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 410.379315][T17986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.415781][T17986] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3438'. [ 410.432180][T17989] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3439'. [ 410.444260][T17991] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3440'. [ 410.524409][T17845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 410.585020][T17845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 410.602959][T17998] netlink: 'syz.1.3443': attribute type 33 has an invalid length. [ 410.605572][T17845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 410.618007][T17998] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3443'. [ 410.641196][T17845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 410.709454][ T5847] Bluetooth: hci4: command tx timeout [ 410.791234][T18011] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3447'. [ 410.871876][T18015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.938169][T17845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.971201][T18020] sctp: [Deprecated]: syz.1.3450 (pid 18020) Use of int in maxseg socket option. [ 410.971201][T18020] Use struct sctp_assoc_value instead [ 410.995296][T17845] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.024036][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.031264][ T6821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.104251][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.111541][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.285700][T17845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.699751][T18068] netlink: 'syz.4.3459': attribute type 1 has an invalid length. [ 411.783514][T17845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.917739][T17845] veth0_vlan: entered promiscuous mode [ 411.964269][T17845] veth1_vlan: entered promiscuous mode [ 412.051634][T17845] veth0_macvtap: entered promiscuous mode [ 412.062435][T17845] veth1_macvtap: entered promiscuous mode [ 412.101228][T17845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.138127][T18105] team0: No ports can be present during mode change [ 412.156087][T18106] team0: No ports can be present during mode change [ 412.187023][T17845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.213870][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.237512][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.250470][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.268282][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.455082][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.475349][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.544726][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.562945][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.581995][T18117] tipc: Enabling of bearer rejected, failed to enable media [ 412.789966][ T5847] Bluetooth: hci4: command tx timeout [ 413.321404][T18169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3483'. [ 413.355495][T18164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 413.663490][T18192] netlink: 'syz.3.3491': attribute type 7 has an invalid length. [ 413.684482][T18192] netlink: 'syz.3.3491': attribute type 8 has an invalid length. [ 413.825563][T18200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.848490][ T7871] IPVS: starting estimator thread 0... [ 413.970014][T18203] IPVS: using max 22 ests per chain, 52800 per kthread [ 414.224450][T18221] netlink: 'syz.4.3501': attribute type 5 has an invalid length. [ 414.242385][T18220] batadv_slave_1: entered promiscuous mode [ 414.266304][T18221] geneve2: entered promiscuous mode [ 414.272998][T18221] geneve2: entered allmulticast mode [ 414.282254][T18225] pim6reg1: entered promiscuous mode [ 414.287978][T18225] pim6reg1: entered allmulticast mode [ 414.296804][T18217] batadv_slave_1: left promiscuous mode [ 414.319445][T18099] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 414.432870][T18099] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 414.443294][T18099] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 414.459720][T18099] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 414.477314][T18235] netlink: 'syz.3.3505': attribute type 11 has an invalid length. [ 414.711753][T18250] __nla_validate_parse: 10 callbacks suppressed [ 414.711776][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3507'. [ 414.747847][T18252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3512'. [ 414.818115][T18246] syzkaller0: entered promiscuous mode [ 414.829824][T18246] syzkaller0: entered allmulticast mode [ 414.853221][T18242] pim6reg: entered allmulticast mode [ 414.857973][T18258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3514'. [ 414.869778][ T5847] Bluetooth: hci4: command tx timeout [ 414.888282][T18254] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3513'. [ 414.947056][T18259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3513'. [ 415.578220][T18274] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3516'. [ 416.654988][T18296] tipc: Enabled bearer , priority 0 [ 416.662531][T18295] tipc: Enabling of bearer rejected, already enabled [ 416.673715][T18296] syzkaller0: entered promiscuous mode [ 416.681256][T18296] syzkaller0: entered allmulticast mode [ 416.708933][T18296] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 416.753051][T18295] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 416.781165][T18295] tipc: Resetting bearer [ 416.791681][T18294] tipc: Resetting bearer [ 416.838832][T18294] tipc: Disabling bearer [ 416.908961][T18307] veth3: entered allmulticast mode [ 417.208406][T18322] tipc: Enabled bearer , priority 0 [ 417.227080][T18322] syzkaller0: entered promiscuous mode [ 417.236566][T18322] syzkaller0: entered allmulticast mode [ 417.270994][T18322] netlink: 'syz.4.3532': attribute type 11 has an invalid length. [ 417.294117][T18322] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3532'. [ 417.369841][T18322] tipc: Resetting bearer [ 417.421040][T18321] tipc: Resetting bearer [ 417.481189][T18321] tipc: Disabling bearer [ 417.541725][T18334] gtp0: entered promiscuous mode [ 417.557182][T18334] gtp0: entered allmulticast mode [ 417.865070][T18364] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3542'. [ 418.135644][T18379] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3548'. [ 418.166178][T18379] tipc: Enabled bearer , priority 0 [ 418.183878][T18379] syzkaller0: entered promiscuous mode [ 418.215108][T18379] syzkaller0: entered allmulticast mode [ 418.254542][T18379] tipc: Resetting bearer [ 418.281536][T18376] tipc: Resetting bearer [ 418.323365][T18376] tipc: Disabling bearer [ 418.347635][T18397] netlink: 'syz.3.3554': attribute type 83 has an invalid length. [ 418.371849][ T9291] IPVS: starting estimator thread 0... [ 418.371953][T18393] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 418.387072][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3554'. [ 418.397146][T18399] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 [ 418.485399][T18400] IPVS: using max 23 ests per chain, 55200 per kthread [ 418.604637][T18415] netlink: 'syz.2.3560': attribute type 18 has an invalid length. [ 418.624627][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.629659][T18415] netlink: 'syz.2.3560': attribute type 18 has an invalid length. [ 418.634109][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.657489][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.670849][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.302858][T18452] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 420.468781][T18523] __nla_validate_parse: 5 callbacks suppressed [ 420.468804][T18523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3593'. [ 420.496865][T18523] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3593'. [ 420.525155][T18527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.555098][T18527] geneve2: entered promiscuous mode [ 420.562629][T18527] geneve2: entered allmulticast mode [ 420.573261][T18097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 420.590029][ T6850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 420.609601][ T6850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 420.634856][ T6850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 420.647403][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3593'. [ 420.840276][T18537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3598'. [ 420.859945][T18536] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3599'. [ 420.899098][T18538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3599'. [ 421.244910][T18561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3608'. [ 421.415473][T18571] netlink: 'syz.3.3611': attribute type 8 has an invalid length. [ 421.467588][T18575] bridge0: port 3(ipvlan2) entered blocking state [ 421.475031][T18575] bridge0: port 3(ipvlan2) entered disabled state [ 421.483715][T18575] ipvlan2: entered allmulticast mode [ 421.489508][T18575] bridge0: entered allmulticast mode [ 421.497560][T18575] ipvlan2: left allmulticast mode [ 421.503058][T18575] bridge0: left allmulticast mode [ 421.678277][T18586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3615'. [ 421.747165][T18588] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3616'. [ 421.903757][T18600] bridge1: entered allmulticast mode [ 421.931293][T18600] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 421.940298][T18600] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 422.146307][T18617] netlink: 'syz.2.3626': attribute type 1 has an invalid length. [ 422.158577][T18617] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3626'. [ 422.168594][T18617] netlink: 'syz.2.3626': attribute type 2 has an invalid length. [ 422.178686][T18617] netlink: 'syz.2.3626': attribute type 1 has an invalid length. [ 423.387712][T18673] bond1 (unregistering): Released all slaves [ 423.443068][T18669] tipc: Enabled bearer , priority 0 [ 423.495892][T18669] syzkaller0: entered promiscuous mode [ 423.502317][T18669] syzkaller0: entered allmulticast mode [ 423.575038][T18680] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 423.605020][T18680] bond2 (unregistering): Released all slaves [ 423.654598][T18665] tipc: Resetting bearer [ 423.691853][T18665] tipc: Disabling bearer [ 423.771828][T18700] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 423.893784][T18706] netlink: 'syz.0.3654': attribute type 10 has an invalid length. [ 423.915528][T18706] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 423.952244][T18712] Unsupported ieee802154 address type: 0 [ 424.092712][T18722] netlink: 'syz.0.3658': attribute type 1 has an invalid length. [ 424.179866][T18728] netlink: 'syz.0.3658': attribute type 2 has an invalid length. [ 424.597132][T18756] netlink: 'syz.4.3669': attribute type 1 has an invalid length. [ 424.805466][T18768] xt_l2tp: missing protocol rule (udp|l2tpip) [ 425.036110][T18783] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.335273][T18755] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 425.525111][T18811] __nla_validate_parse: 10 callbacks suppressed [ 425.525137][T18811] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3687'. [ 425.553353][T18813] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3687'. [ 425.744505][T18821] netlink: zone id is out of range [ 425.818938][T18821] netlink: set zone limit has 8 unknown bytes [ 425.906063][T18831] netlink: 'syz.3.3692': attribute type 8 has an invalid length. [ 425.934851][T18831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3692'. [ 426.017482][T18831] bond0: entered promiscuous mode [ 426.047413][T18831] bond_slave_0: entered promiscuous mode [ 426.061945][T18831] bond_slave_1: entered promiscuous mode [ 426.092210][T18831] bond0: left promiscuous mode [ 426.099668][T18831] bond_slave_0: left promiscuous mode [ 426.116508][T18831] bond_slave_1: left promiscuous mode [ 426.238857][T18851] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3696'. [ 426.411536][T18862] batadv_slave_0: entered allmulticast mode [ 426.430383][T18862] batadv_slave_0: left allmulticast mode [ 426.444375][T18864] dvmrp1: entered allmulticast mode [ 426.450014][T18865] netlink: 'syz.3.3702': attribute type 1 has an invalid length. [ 426.450039][T18865] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3702'. [ 426.450492][T18866] netlink: 'syz.3.3702': attribute type 1 has an invalid length. [ 426.450511][T18866] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3702'. [ 426.627520][T18875] netlink: 'syz.4.3706': attribute type 1 has an invalid length. [ 426.635922][ T5847] Bluetooth: hci0: command 0x0401 tx timeout [ 426.718347][T18881] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 427.381040][T18919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3717'. [ 427.426501][T18919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3717'. [ 427.510905][T18893] syzkaller0: entered promiscuous mode [ 427.516432][T18893] syzkaller0: entered allmulticast mode [ 429.095628][T18929] vlan2: entered promiscuous mode [ 429.100946][T18929] bridge0: entered promiscuous mode [ 429.347249][T18970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3731'. [ 429.360581][T18952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 429.377201][T18970] netlink: 50 bytes leftover after parsing attributes in process `syz.0.3731'. [ 429.393389][T18951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 430.015675][T18976] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.174407][T18976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.193660][T18976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.513413][T18976] veth3: left allmulticast mode [ 430.576113][T18097] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.595459][T18097] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.627845][T18097] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.660119][T18097] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.980923][T19028] Bluetooth: MGMT ver 1.23 [ 431.411672][T19024] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyڇv[Dwz [ 431.563282][T19042] __nla_validate_parse: 2 callbacks suppressed [ 431.563304][T19042] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3749'. [ 431.580474][T19042] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3749'. [ 431.753722][T19059] sctp: [Deprecated]: syz.1.3751 (pid 19059) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.753722][T19059] Use struct sctp_sack_info instead [ 431.942984][T19070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3754'. [ 432.184673][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3758'. [ 432.204801][T19083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3758'. [ 432.449591][T19100] netlink: 'syz.1.3763': attribute type 23 has an invalid length. [ 432.477568][T19102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3764'. [ 432.498541][T19102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3764'. [ 432.658548][T19109] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 432.954898][T19134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3777'. [ 433.098598][T19144] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.3779'. [ 433.122683][T19144] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.3779'. [ 433.182309][T19144] geneve2: entered promiscuous mode [ 433.208908][T19154] sock: sock_timestamping_bind_phc: sock not bind to device [ 433.293288][T19157] netlink: 'syz.3.3783': attribute type 1 has an invalid length. [ 433.316246][T19157] netlink: 'syz.3.3783': attribute type 1 has an invalid length. [ 433.418085][T19164] syzkaller0: entered promiscuous mode [ 433.437970][T19164] syzkaller0: entered allmulticast mode [ 433.792593][T19187] lo speed is unknown, defaulting to 1000 [ 433.802373][T19187] lo speed is unknown, defaulting to 1000 [ 433.831236][T19187] lo speed is unknown, defaulting to 1000 [ 434.005752][T19198] lo: entered promiscuous mode [ 434.043675][T19198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.070384][T19202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.083632][T19203] netlink: 'syz.2.3798': attribute type 11 has an invalid length. [ 434.452335][T19221] netlink: 'syz.2.3810': attribute type 1 has an invalid length. [ 434.490140][T19187] infiniband syz0: set down [ 434.495848][T19187] infiniband syz0: added lo [ 434.566085][T19187] RDS/IB: syz0: added [ 434.567956][T19221] 8021q: adding VLAN 0 to HW filter on device bond4 [ 434.578743][ T5895] lo speed is unknown, defaulting to 1000 [ 434.588114][T19187] lo speed is unknown, defaulting to 1000 [ 435.176509][T19261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.232387][T19262] netlink: 'syz.2.3818': attribute type 21 has an invalid length. [ 435.240424][T19262] netlink: 'syz.2.3818': attribute type 22 has an invalid length. [ 435.248267][T19262] netlink: 'syz.2.3818': attribute type 23 has an invalid length. [ 435.257860][T19187] lo speed is unknown, defaulting to 1000 [ 435.258137][T19262] netlink: 'syz.2.3818': attribute type 25 has an invalid length. [ 435.273767][T19262] netlink: 'syz.2.3818': attribute type 26 has an invalid length. [ 435.283212][T19257] tipc: Started in network mode [ 435.288874][T19257] tipc: Node identity 36f03dc05b3f, cluster identity 4711 [ 435.342265][T19257] tipc: Enabled bearer , priority 0 [ 435.361312][T19264] syzkaller0: entered promiscuous mode [ 435.367612][T19264] syzkaller0: entered allmulticast mode [ 435.542847][T19264] tipc: Resetting bearer [ 435.692684][T19187] lo speed is unknown, defaulting to 1000 [ 435.752192][ T49] wlan1: Trigger new scan to find an IBSS to join [ 435.757345][T19281] netlink: 'syz.1.3824': attribute type 10 has an invalid length. [ 435.834799][T19281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.013229][T19294] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 436.051586][T19294] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 436.174121][T19256] tipc: Resetting bearer [ 436.235613][T19256] tipc: Disabling bearer [ 436.266371][T19187] lo speed is unknown, defaulting to 1000 [ 436.525953][T19321] pim6reg1: entered promiscuous mode [ 436.537150][T19321] pim6reg1: entered allmulticast mode [ 436.737354][T19328] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 436.742695][T19187] lo speed is unknown, defaulting to 1000 [ 437.416769][T19362] __nla_validate_parse: 10 callbacks suppressed [ 437.416790][T19362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3844'. [ 437.445205][T19187] lo speed is unknown, defaulting to 1000 [ 437.975348][T19187] lo speed is unknown, defaulting to 1000 [ 438.274576][T19401] validate_nla: 3 callbacks suppressed [ 438.274599][T19401] netlink: 'syz.2.3857': attribute type 24 has an invalid length. [ 438.486383][T19187] lo speed is unknown, defaulting to 1000 [ 438.540471][T19407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3859'. [ 438.790245][T18091] wlan1: Trigger new scan to find an IBSS to join [ 439.035045][T19187] lo speed is unknown, defaulting to 1000 [ 439.157737][T19436] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3869'. [ 439.280120][T19440] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3871'. [ 439.289926][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3870'. [ 439.394020][T19444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3872'. [ 439.492272][T19444] bridge3: port 1(veth7) entered blocking state [ 439.504558][T19444] bridge3: port 1(veth7) entered disabled state [ 439.512925][T19444] veth7: entered allmulticast mode [ 439.521532][T19444] veth7: entered promiscuous mode [ 439.531299][T19447] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3874'. [ 439.617101][T19450] bridge3: port 2(veth9) entered blocking state [ 439.626610][T19450] bridge3: port 2(veth9) entered disabled state [ 439.634944][T19450] veth9: entered allmulticast mode [ 439.656661][T19450] veth9: entered promiscuous mode [ 439.671510][T19460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3877'. [ 439.693709][T19450] netlink: 'syz.3.3872': attribute type 1 has an invalid length. [ 439.717496][T19450] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3872'. [ 439.729078][T19460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3877'. [ 439.729647][T19450] netlink: 'syz.3.3872': attribute type 1 has an invalid length. [ 439.934746][T19473] IPv6: NLM_F_CREATE should be specified when creating new route [ 439.998379][T19475] wg2: entered promiscuous mode [ 440.006898][T19475] wg2: entered allmulticast mode [ 440.092990][T19482] netlink: 'syz.1.3883': attribute type 1 has an invalid length. [ 440.401808][T19493] sit1: entered promiscuous mode [ 440.406824][T19493] sit1: entered allmulticast mode [ 440.952339][T19541] netlink: 'syz.0.3897': attribute type 1 has an invalid length. [ 440.956501][T19542] netlink: 'syz.4.3898': attribute type 12 has an invalid length. [ 440.997852][T19542] netlink: 'syz.4.3898': attribute type 11 has an invalid length. [ 441.019357][T19541] netlink: 'syz.0.3897': attribute type 2 has an invalid length. [ 441.195814][T19554] netlink: 'syz.3.3899': attribute type 2 has an invalid length. [ 441.206093][T19554] nbd: must specify at least one socket [ 441.464130][T19552] bridge_slave_1: left allmulticast mode [ 441.479312][T19552] bridge_slave_1: left promiscuous mode [ 441.511412][T19552] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.545291][T19552] bridge_slave_0: left allmulticast mode [ 441.579266][T19552] bridge_slave_0: left promiscuous mode [ 441.585184][T19552] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.728134][T19563] syzkaller0: entered promiscuous mode [ 441.735258][T19563] syzkaller0: entered allmulticast mode [ 441.749348][ T6833] wlan1: Trigger new scan to find an IBSS to join [ 441.907631][T19587] sctp: [Deprecated]: syz.0.3908 (pid 19587) Use of int in maxseg socket option. [ 441.907631][T19587] Use struct sctp_assoc_value instead [ 441.964202][T19593] openvswitch: netlink: Key type 48 is out of range max 32 [ 442.653257][ T1323] wlan1: Creating new IBSS network, BSSID f2:b9:0f:11:59:62 [ 443.402146][T19607] netlink: 'syz.0.3913': attribute type 21 has an invalid length. [ 443.437577][T19607] __nla_validate_parse: 9 callbacks suppressed [ 443.437597][T19607] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3913'. [ 443.456773][T19611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3915'. [ 443.672273][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.692400][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.763153][T19631] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 443.793377][T19631] bond6 (unregistering): Released all slaves [ 443.857288][T19625] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3918'. [ 443.930501][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.942401][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.248021][T19670] sctp: [Deprecated]: syz.2.3928 (pid 19670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.248021][T19670] Use struct sctp_sack_info instead [ 444.315922][T19679] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3931'. [ 444.343752][T19680] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3928'. [ 444.353822][T19678] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3927'. [ 444.613126][T19692] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3934'. [ 444.648061][T19689] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3933'. [ 444.776298][T19705] netlink: 'syz.2.3939': attribute type 11 has an invalid length. [ 444.785777][T19705] netlink: 'syz.2.3939': attribute type 11 has an invalid length. [ 444.802342][T19705] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3939'. [ 445.061065][T19715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3941'. [ 445.215683][T19720] can: request_module (can-proto-0) failed. [ 445.281592][T19709] bond0: entered promiscuous mode [ 445.296929][T19709] bond_slave_0: entered promiscuous mode [ 445.319683][T19709] bond_slave_1: entered promiscuous mode [ 445.351778][T19712] netlink: 'syz.2.3941': attribute type 3 has an invalid length. [ 445.379216][T19718] netlink: 'syz.4.3944': attribute type 5 has an invalid length. [ 445.860689][T19749] netlink: 'syz.4.3953': attribute type 1 has an invalid length. [ 446.686543][T19792] netlink: 'syz.1.3966': attribute type 1 has an invalid length. [ 446.699694][T19794] netlink: 'syz.1.3966': attribute type 1 has an invalid length. [ 446.719402][T19787] pim6reg1: entered promiscuous mode [ 446.733845][T19787] pim6reg1: entered allmulticast mode [ 447.984738][T19879] netlink: 'syz.3.3991': attribute type 1 has an invalid length. [ 448.525105][T19915] __nla_validate_parse: 17 callbacks suppressed [ 448.525126][T19915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3998'. [ 448.602717][T19912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3998'. [ 449.006627][T19932] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4005'. [ 449.056832][T19932] openvswitch: netlink: Unexpected mask (mask=400, allowed=10048) [ 449.397866][T19959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'. [ 449.417467][T19959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'. [ 449.435187][T19959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'. [ 449.446523][T19959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'. [ 449.458195][T19959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'. [ 449.468266][T19959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'. [ 449.499743][T19959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'. [ 450.030118][T20003] sctp: [Deprecated]: syz.1.4022 (pid 20003) Use of int in max_burst socket option. [ 450.030118][T20003] Use struct sctp_assoc_value instead [ 450.114712][ T7874] IPVS: starting estimator thread 0... [ 450.209665][T20010] IPVS: using max 25 ests per chain, 60000 per kthread [ 450.333832][T20026] tipc: Enabled bearer , priority 0 [ 450.355365][T20026] tipc: Resetting bearer [ 450.445572][T20030] netlink: 'syz.3.4030': attribute type 1 has an invalid length. [ 451.090679][T20018] tipc: Disabling bearer [ 451.121307][T20055] netlink: 'syz.2.4040': attribute type 1 has an invalid length. [ 451.227807][T20055] bond6: entered promiscuous mode [ 451.244164][T20057] netlink: 'syz.0.4041': attribute type 1 has an invalid length. [ 451.256820][T20055] 8021q: adding VLAN 0 to HW filter on device bond6 [ 451.268216][T20065] netlink: 'syz.1.4043': attribute type 1 has an invalid length. [ 451.307369][T20063] 8021q: adding VLAN 0 to HW filter on device bond6 [ 451.322769][T20063] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 451.333872][T20063] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 451.353883][T20063] bond6: (slave wireguard0): making interface the new active one [ 451.362037][T20063] wireguard0: entered promiscuous mode [ 451.370514][T20063] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 451.453226][T20065] 8021q: adding VLAN 0 to HW filter on device bond4 [ 451.477192][T20069] vlan2: entered promiscuous mode [ 451.484696][T20069] bond4: entered promiscuous mode [ 451.490126][T20069] vlan2: entered allmulticast mode [ 451.495488][T20069] bond4: entered allmulticast mode [ 451.800726][T20094] netlink: 'syz.3.4050': attribute type 3 has an invalid length. [ 452.248106][T20129] netlink: 'syz.4.4059': attribute type 4 has an invalid length. [ 453.307400][T20198] netlink: 'syz.1.4080': attribute type 1 has an invalid length. [ 453.787751][T20217] sctp: [Deprecated]: syz.3.4083 (pid 20217) Use of struct sctp_assoc_value in delayed_ack socket option. [ 453.787751][T20217] Use struct sctp_sack_info instead [ 453.871566][T20221] netlink: 'syz.3.4083': attribute type 13 has an invalid length. [ 453.985314][T20224] __nla_validate_parse: 76 callbacks suppressed [ 453.985336][T20224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4084'. [ 454.941888][T20234] gre2: entered promiscuous mode [ 454.947063][T20234] gre2: entered allmulticast mode [ 455.032091][T20238] hsr0 speed is unknown, defaulting to 1000 [ 455.040101][T20238] hsr0 speed is unknown, defaulting to 1000 [ 455.048003][T20238] hsr0 speed is unknown, defaulting to 1000 [ 455.067784][T20240] xfrm1: entered allmulticast mode [ 455.081094][T20244] netlink: 'syz.0.4090': attribute type 8 has an invalid length. [ 455.125920][T20238] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 455.175954][T20247] netlink: 'syz.2.4089': attribute type 1 has an invalid length. [ 455.195360][T20238] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 455.203332][T20247] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4089'. [ 455.203347][T20249] netlink: zone id is out of range [ 455.203361][T20249] netlink: zone id is out of range [ 455.228505][T20249] netlink: zone id is out of range [ 455.244404][T20249] netlink: zone id is out of range [ 455.253209][T20249] netlink: zone id is out of range [ 455.303480][T20249] netlink: zone id is out of range [ 455.308684][T20249] netlink: zone id is out of range [ 455.322698][T20249] netlink: zone id is out of range [ 455.331904][T20238] hsr0 speed is unknown, defaulting to 1000 [ 455.354665][T20256] netlink: zone id is out of range [ 455.361150][T20238] hsr0 speed is unknown, defaulting to 1000 [ 455.363432][T20256] netlink: zone id is out of range [ 455.369889][T20238] hsr0 speed is unknown, defaulting to 1000 [ 455.380765][T20238] hsr0 speed is unknown, defaulting to 1000 [ 455.388905][T20238] hsr0 speed is unknown, defaulting to 1000 [ 455.397218][T20238] hsr0 speed is unknown, defaulting to 1000 [ 455.405728][T20238] hsr0 speed is unknown, defaulting to 1000 [ 455.413935][T20238] hsr0 speed is unknown, defaulting to 1000 [ 455.421349][T20260] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4094'. [ 455.423474][T20238] hsr0 speed is unknown, defaulting to 1000 [ 455.444664][T20260] IPVS: length: 239 != 24 [ 455.541750][T20262] team0: Device macvtap1 is already an upper device of the team interface [ 455.570766][T20264] netlink: 'syz.1.4096': attribute type 1 has an invalid length. [ 455.676244][T20267] team0: Device macvtap1 is already an upper device of the team interface [ 455.724748][T20271] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 455.780497][T20278] netlink: 'syz.1.4100': attribute type 1 has an invalid length. [ 455.835988][T20284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4101'. [ 455.931846][T20278] 8021q: adding VLAN 0 to HW filter on device bond5 [ 456.112603][T20286] veth3: entered promiscuous mode [ 456.151195][T20286] bond5: (slave veth3): Enslaving as an active interface with a down link [ 456.268833][T20283] bond5: (slave veth5): Enslaving as an active interface with a down link [ 456.316662][T20278] vlan3: entered allmulticast mode [ 456.322876][T20278] bond5: entered allmulticast mode [ 456.330303][T20278] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 457.208873][T20329] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4115'. [ 457.518087][T20355] netlink: 808 bytes leftover after parsing attributes in process `syz.2.4124'. [ 457.622130][T20361] netlink: 'syz.0.4126': attribute type 6 has an invalid length. [ 457.731279][T20364] netlink: 'syz.3.4128': attribute type 1 has an invalid length. [ 457.794329][T20364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 457.798383][T20367] netlink: 'syz.2.4127': attribute type 1 has an invalid length. [ 457.805831][T20364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4128'. [ 457.818630][T20364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4128'. [ 457.828779][T20367] netlink: 'syz.2.4127': attribute type 3 has an invalid length. [ 457.837557][T20367] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4127'. [ 457.862811][T20377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4128'. [ 457.951870][T20364] veth11: entered promiscuous mode [ 457.969990][T20364] bond1: (slave veth11): Enslaving as an active interface with a down link [ 458.008460][T20377] vlan2: entered allmulticast mode [ 458.022891][T20377] bond1: entered allmulticast mode [ 458.036626][T20377] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 458.363911][T20395] syzkaller1: entered promiscuous mode [ 458.379283][T20395] syzkaller1: entered allmulticast mode [ 458.572128][T20412] sctp: [Deprecated]: syz.0.4142 (pid 20412) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.572128][T20412] Use struct sctp_sack_info instead [ 458.642253][T20419] IPv6: NLM_F_CREATE should be specified when creating new route [ 458.817482][ T5895] IPVS: starting estimator thread 0... [ 458.922269][T20437] IPVS: using max 24 ests per chain, 57600 per kthread [ 459.121492][T20451] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 459.132827][T20451] bond7 (unregistering): Released all slaves [ 459.166877][T20453] __nla_validate_parse: 8 callbacks suppressed [ 459.166900][T20453] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4155'. [ 459.195040][T20453] netlink: 'syz.2.4155': attribute type 1 has an invalid length. [ 459.206110][T20453] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4155'. [ 459.219949][T20453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4155'. [ 459.313794][T20456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4156'. [ 459.398831][T20456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4156'. [ 459.877983][T20484] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4166'. [ 459.917923][T20484] x_tables: ip_tables: udp match: only valid for protocol 17 [ 460.442760][T20517] syzkaller1: entered promiscuous mode [ 460.459971][T20517] syzkaller1: entered allmulticast mode [ 460.563340][T20527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4177'. [ 460.762908][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4183'. [ 460.822265][T20543] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 460.842212][T20543] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 461.005421][T20553] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4188'. [ 461.232166][T20565] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4191'. [ 461.560907][T20586] netlink: 'syz.3.4200': attribute type 1 has an invalid length. [ 461.607262][T20583] tipc: Enabled bearer , priority 0 [ 461.615138][T20583] syzkaller0: entered promiscuous mode [ 461.634522][T20583] syzkaller0: entered allmulticast mode [ 461.682693][T20574] tipc: Resetting bearer [ 461.721796][T20574] tipc: Disabling bearer [ 461.828778][T20595] bond7: Removing last ns target with arp_interval on [ 461.884127][T20598] vlan0: entered allmulticast mode [ 461.889856][T20598] bond0: entered allmulticast mode [ 461.895015][T20598] bond_slave_0: entered allmulticast mode [ 461.929259][T20598] bond_slave_1: entered allmulticast mode [ 461.935155][T20598] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 462.004461][T20603] bond1: Removing last ns target with arp_interval on [ 462.257908][T20614] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 462.315463][T20617] netlink: 'syz.4.4209': attribute type 1 has an invalid length. [ 462.473663][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 463.068029][T20663] netlink: 'syz.0.4223': attribute type 1 has an invalid length. [ 463.080031][T20665] vxlan0: entered promiscuous mode [ 463.085323][T20665] vxlan0: entered allmulticast mode [ 463.135099][T20663] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.154103][T18093] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.165318][T18093] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.195184][T18093] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.212372][T18093] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.343077][T20682] netlink: 'syz.1.4227': attribute type 12 has an invalid length. [ 463.353714][T20682] netlink: 'syz.1.4227': attribute type 12 has an invalid length. [ 463.826130][T20715] tipc: Enabled bearer , priority 0 [ 463.911837][T20716] syzkaller0: entered promiscuous mode [ 463.949498][T20716] syzkaller0: entered allmulticast mode [ 463.982273][T20712] tipc: Resetting bearer [ 464.577384][T20698] tipc: Resetting bearer [ 464.879403][ T10] tipc: Node number set to 1842298304 [ 464.957015][T20698] tipc: Disabling bearer [ 465.277034][T20742] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 465.621323][T20752] sctp: [Deprecated]: syz.3.4249 (pid 20752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 465.621323][T20752] Use struct sctp_sack_info instead [ 465.654048][T20755] net_ratelimit: 37 callbacks suppressed [ 465.654070][T20755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.745722][T20755] __nla_validate_parse: 16 callbacks suppressed [ 465.745752][T20755] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4246'. [ 465.849974][T20772] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4250'. [ 465.970508][T20777] netlink: 'syz.0.4252': attribute type 1 has an invalid length. [ 465.981675][T20777] nbd: error processing sock list [ 466.004417][T20777] block nbd0: shutting down sockets [ 466.515523][T20796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4254'. [ 466.588060][T20796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4254'. [ 466.766615][T20813] netlink: 'syz.1.4256': attribute type 1 has an invalid length. [ 467.266357][T20848] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4269'. [ 467.363935][T20848] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 467.381163][T20848] bond2 (unregistering): Released all slaves [ 467.548659][T20862] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4272'. [ 467.567350][T20865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.608500][T20862] openvswitch: netlink: Flow key attr not present in new flow. [ 467.625164][T20867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4276'. [ 467.635432][T20863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4272'. [ 467.754264][T20863] hsr_slave_1 (unregistering): left promiscuous mode [ 468.208595][T20898] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.4284'. [ 468.222188][T20898] sch_tbf: burst 0 is lower than device lo mtu (76) ! [ 468.306263][T20903] veth5: entered promiscuous mode [ 468.315423][T20903] veth5: entered allmulticast mode [ 468.428547][T20911] netlink: 'syz.4.4289': attribute type 83 has an invalid length. [ 468.549850][T20917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4292'. [ 468.694852][T20919] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 468.725425][T20927] netlink: 'syz.3.4295': attribute type 7 has an invalid length. [ 468.847450][T20933] sctp: [Deprecated]: syz.3.4298 (pid 20933) Use of int in max_burst socket option. [ 468.847450][T20933] Use struct sctp_assoc_value instead [ 468.947953][T20935] netlink: 'syz.2.4300': attribute type 83 has an invalid length. [ 469.186974][T20957] veth0: entered promiscuous mode [ 469.221355][T20948] veth0 (unregistering): left promiscuous mode [ 469.751102][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 470.063735][T21009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.095008][T21009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.388058][T21030] netlink: 'syz.1.4327': attribute type 1 has an invalid length. [ 470.462557][T21030] 8021q: adding VLAN 0 to HW filter on device bond6 [ 470.543669][T21030] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 470.662935][T21042] netlink: 'syz.1.4331': attribute type 11 has an invalid length. [ 470.675723][T21042] netlink: 'syz.1.4331': attribute type 11 has an invalid length. [ 470.806584][T21054] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 470.815341][T21047] __nla_validate_parse: 12 callbacks suppressed [ 470.815363][T21047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4333'. [ 471.119049][T21064] lo speed is unknown, defaulting to 1000 [ 471.341757][T21081] netlink: 'syz.2.4340': attribute type 11 has an invalid length. [ 471.367154][T21081] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4340'. [ 471.681645][T21097] openvswitch: netlink: Message has 2 unknown bytes. [ 471.842367][T21108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4350'. [ 471.912757][T21111] netlink: 'syz.0.4351': attribute type 1 has an invalid length. [ 471.920830][T21111] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4351'. [ 471.939328][T21111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4351'. [ 472.027441][T21114] netlink: 'syz.2.4353': attribute type 15 has an invalid length. [ 472.045362][T21114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4353'. [ 472.085749][T21064] hsr0 speed is unknown, defaulting to 1000 [ 472.092656][T21114] netlink: 'syz.2.4353': attribute type 15 has an invalid length. [ 472.118106][T21114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4353'. [ 472.301893][T21126] netlink: 22 bytes leftover after parsing attributes in process `syz.0.4359'. [ 472.359834][T21130] bridge7: entered promiscuous mode [ 472.365299][T21130] bridge7: entered allmulticast mode [ 472.378450][T21135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4357'. [ 472.388356][T21134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4360'. [ 472.734393][T18092] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 472.814066][T21156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.829998][T21156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.147918][T21164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.293908][T21169] netlink: 'syz.1.4371': attribute type 24 has an invalid length. [ 473.426540][T21169] syzkaller1: entered promiscuous mode [ 473.436369][T21169] syzkaller1: entered allmulticast mode [ 473.476203][T21181] tipc: Enabled bearer , priority 0 [ 473.486896][T21181] syzkaller0: entered promiscuous mode [ 473.493178][T21181] syzkaller0: entered allmulticast mode [ 473.519547][T21181] tipc: Resetting bearer [ 473.533857][T21180] tipc: Resetting bearer [ 473.560614][T21180] tipc: Disabling bearer [ 473.720126][T21193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.734605][T21193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 474.559627][T21242] syzkaller0: refused to change device tx_queue_len [ 474.951775][T21264] netlink: 'syz.2.4403': attribute type 25 has an invalid length. [ 476.069026][T21297] __nla_validate_parse: 9 callbacks suppressed [ 476.069055][T21297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4417'. [ 476.138096][T21303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4419'. [ 476.154044][T21303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4419'. [ 476.317126][T21316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4422'. [ 476.362644][T21314] syzkaller0: entered promiscuous mode [ 476.368407][T21314] syzkaller0: entered allmulticast mode [ 477.083373][T21335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4426'. [ 477.868365][T21322] kthread_run failed with err -4 [ 478.053294][T21345] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 478.102419][T21350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4428'. [ 478.233008][T21356] netlink: 'syz.1.4434': attribute type 1 has an invalid length. [ 478.259445][T21356] netlink: 'syz.1.4434': attribute type 2 has an invalid length. [ 478.307819][T21366] netlink: 'syz.0.4437': attribute type 1 has an invalid length. [ 478.339385][T21366] netlink: 'syz.0.4437': attribute type 4 has an invalid length. [ 478.366186][T21366] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4437'. [ 478.534419][T21381] netlink: 'syz.0.4443': attribute type 1 has an invalid length. [ 478.602693][T21382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4442'. [ 479.044747][T21424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4452'. [ 479.062936][T21425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.088659][T21422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.126492][T21430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.136993][T21428] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4454'. [ 479.358101][T21447] netlink: 'syz.4.4462': attribute type 10 has an invalid length. [ 479.410413][ T24] hsr0 speed is unknown, defaulting to 1000 [ 479.432619][ T24] syz1: Port: 1 Link DOWN [ 479.611632][T21459] openvswitch: netlink: Geneve opt len 6 is not a multiple of 4. [ 480.536186][T21515] netlink: 'syz.3.4484': attribute type 15 has an invalid length. [ 480.596287][T21515] netlink: 'syz.3.4484': attribute type 15 has an invalid length. [ 480.606933][T21519] openvswitch: netlink: Message has 5368 unknown bytes. [ 480.619507][ T1323] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 480.633378][T21519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.643696][ T1323] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 480.654834][ T1323] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 480.696596][ T1323] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 481.106844][T21549] __nla_validate_parse: 8 callbacks suppressed [ 481.106865][T21549] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4495'. [ 481.246306][T21550] netlink: 'syz.3.4496': attribute type 1 has an invalid length. [ 481.271103][T21550] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4496'. [ 481.312792][T21550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.370450][T21560] netlink: 'syz.0.4500': attribute type 58 has an invalid length. [ 481.378494][T21560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4500'. [ 481.608355][T21577] rdma_rxe: rxe_newlink: failed to add bond0 [ 481.783022][T21582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4503'. [ 481.822434][T21584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.913611][T21589] bond2: option mode: invalid value (133) [ 481.951439][T21589] bond2 (unregistering): Released all slaves [ 482.147496][T21613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4510'. [ 482.379210][T21631] openvswitch: netlink: Actions may not be safe on all matching packets [ 483.048701][T21654] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4521'. [ 483.120147][T21659] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4523'. [ 483.277321][T21668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4527'. [ 483.387213][T21673] netlink: 5380 bytes leftover after parsing attributes in process `syz.4.4531'. [ 483.398274][T21670] batadv_slave_0: entered allmulticast mode [ 483.407471][T21673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.448108][T21678] validate_nla: 1 callbacks suppressed [ 483.448127][T21678] netlink: 'syz.3.4529': attribute type 1 has an invalid length. [ 483.477640][T21682] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4533'. [ 483.511108][T21682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.685025][T21678] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 483.924517][T21713] bond0: entered promiscuous mode [ 483.984510][T21713] bond0: left promiscuous mode [ 484.204683][T21729] sctp: [Deprecated]: syz.4.4547 (pid 21729) Use of int in max_burst socket option deprecated. [ 484.204683][T21729] Use struct sctp_assoc_value instead [ 484.224172][T21730] netlink: 'syz.2.4546': attribute type 2 has an invalid length. [ 484.253338][T21733] tipc: Enabled bearer , priority 0 [ 484.270929][T21733] syzkaller0: entered promiscuous mode [ 484.276453][T21733] syzkaller0: entered allmulticast mode [ 484.313537][T21733] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 484.352597][T21735] tipc: Resetting bearer [ 484.371431][T21725] tipc: Resetting bearer [ 484.402740][T21725] tipc: Disabling bearer [ 484.412907][T21743] netlink: 'syz.2.4550': attribute type 3 has an invalid length. [ 484.564022][T21755] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 484.686170][T21761] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 484.910677][T21773] batadv_slave_1: entered promiscuous mode [ 484.918026][T21773] batadv_slave_1: entered allmulticast mode [ 485.191155][T21789] block nbd0: server does not support multiple connections per device. [ 485.240257][T21789] block nbd0: shutting down sockets [ 485.302451][T21803] netlink: 'syz.2.4569': attribute type 2 has an invalid length. [ 486.029686][T21850] veth1_to_bridge: entered promiscuous mode [ 486.036706][T21850] hsr1: entered promiscuous mode [ 486.367132][T21865] __nla_validate_parse: 8 callbacks suppressed [ 486.367156][T21865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4586'. [ 486.436010][T21874] netlink: 'syz.3.4589': attribute type 27 has an invalid length. [ 486.687410][T21892] netlink: 'syz.2.4596': attribute type 4 has an invalid length. [ 486.702247][T21887] syzkaller1: entered promiscuous mode [ 486.707922][T21887] syzkaller1: entered allmulticast mode [ 486.949789][T21909] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4600'. [ 487.022659][T21915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4602'. [ 487.051033][T21915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4602'. [ 493.189330][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 503.659863][ T6833] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 506.479588][T18092] dummy0: left allmulticast mode [ 506.488964][T18092] bridge0: port 3(dummy0) entered disabled state [ 506.501264][T18092] bridge_slave_0: left allmulticast mode [ 506.507143][T18092] bridge_slave_0: left promiscuous mode [ 506.513883][T18092] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.786731][T18092] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 506.888925][T18092] bond11 (unregistering): (slave geneve2): Releasing active interface [ 507.612213][T18092] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.623926][T18092] bond_slave_0: left promiscuous mode [ 507.633601][T18092] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.644553][T18092] bond_slave_1: left promiscuous mode [ 507.652798][T18092] ` (unregistering): Released all slaves [ 507.681926][T18092] bond0 (unregistering): (slave bond1): Releasing backup interface [ 507.691068][T18092] bond1 (unregistering): left promiscuous mode [ 507.698375][T18092] bond0 (unregistering): Released all slaves [ 507.867471][T18092] bond1 (unregistering): Released all slaves [ 507.884421][T18092] bond2 (unregistering): Released all slaves [ 507.902481][T18092] bond3 (unregistering): (slave bond4): Releasing backup interface [ 507.912237][T18092] bond3 (unregistering): Released all slaves [ 508.065365][T18092] bond4 (unregistering): Released all slaves [ 508.084496][T18092] bond5 (unregistering): Released all slaves [ 508.106398][T18092] bond6 (unregistering): Released all slaves [ 508.128350][T18092] bond7 (unregistering): Released all slaves [ 508.147105][T18092] bond8 (unregistering): Released all slaves [ 508.168355][T18092] bond9 (unregistering): Released all slaves [ 508.186449][T18092] bond10 (unregistering): Released all slaves [ 508.206041][T18092] bond11 (unregistering): Released all slaves [ 508.398273][T18092] tipc: Disabling bearer [ 508.416795][T18092] tipc: Disabling bearer [ 508.436600][T18092] tipc: Left network mode [ 508.684753][T18092] hsr_slave_0: left promiscuous mode [ 509.223899][T18092] team0 (unregistering): Port device team_slave_1 removed [ 509.267376][T18092] team0 (unregistering): Port device team_slave_0 removed [ 509.877959][T18092] IPVS: stop unused estimator thread 0... [ 511.152585][T21931] bond2 (unregistering): Released all slaves [ 511.215839][T21944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4613'. [ 511.586261][T21952] tipc: Enabling of bearer rejected, failed to enable media [ 511.612318][T21953] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4614'. [ 511.620878][T21955] tipc: Enabling of bearer rejected, failed to enable media [ 511.642603][T21953] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4614'. [ 511.735433][T21961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4617'. [ 512.213908][T21987] netlink: 'syz.3.4622': attribute type 2 has an invalid length. [ 512.342323][T22002] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 512.393916][T22002] netlink: 'syz.4.4625': attribute type 10 has an invalid length. [ 512.424796][T22004] netlink: 'syz.4.4625': attribute type 10 has an invalid length. [ 512.457367][T22002] team0: Device ipvlan1 failed to register rx_handler [ 512.552325][T22004] team0: Device ipvlan1 failed to register rx_handler [ 512.848721][T22033] "syz.0.4635" (22033) uses obsolete ecb(arc4) skcipher [ 512.994876][T22042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4638'. [ 513.015002][T22042] netlink: 'syz.3.4638': attribute type 1 has an invalid length. [ 513.158208][T22042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4638'. [ 513.227569][T22048] bond2: (slave gretap1): making interface the new active one [ 513.248166][T22048] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 513.335464][T22042] 8021q: adding VLAN 0 to HW filter on device bond2 [ 514.745007][T22119] veth0_to_bond: entered allmulticast mode [ 514.772716][T22126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4661'. [ 514.945356][T22132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4663'. [ 514.994202][T22132] 8021q: adding VLAN 0 to HW filter on device bond3 [ 515.036913][T22136] 8021q: adding VLAN 0 to HW filter on device bond3 [ 515.046726][T22136] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 515.061362][T22136] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 515.655392][T22165] netlink: 'syz.3.4672': attribute type 1 has an invalid length. [ 515.663925][T22165] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4672'. [ 515.676819][T22167] : renamed from hsr0 (while UP) [ 515.753995][T22168] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4671'. [ 515.897724][T22178] netlink: 'syz.4.4676': attribute type 21 has an invalid length. [ 516.012959][T22184] syzkaller0: entered promiscuous mode [ 516.018759][T22184] syzkaller0: entered allmulticast mode [ 516.036781][T22185] lo speed is unknown, defaulting to 1000 [ 516.326300][T22198] __nla_validate_parse: 2 callbacks suppressed [ 516.326323][T22198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4683'. [ 516.436102][T22200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4683'. [ 516.577514][T22206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4686'. [ 516.608092][T22207] netlink: 'syz.2.4685': attribute type 10 has an invalid length. [ 518.705936][T22185]  speed is unknown, defaulting to 1000 [ 518.758982][T22207] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode [ 518.773363][T22207] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 518.791766][ T5847] Bluetooth: hci0: command 0x0401 tx timeout [ 518.953726][T22218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4689'. [ 518.963608][T22218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4689'. [ 519.107081][T22226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4693'. [ 519.134405][T22226] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4693'. [ 519.152133][T22227] tipc: Enabled bearer , priority 0 [ 519.175720][T22227] veth0: entered allmulticast mode [ 519.189611][T22232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4694'. [ 519.222426][T22227] tipc: Resetting bearer [ 519.285515][T22237] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4691'. [ 519.775014][T22225] tipc: Disabling bearer [ 520.120161][T22266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4702'. [ 520.496368][T22286] delete_channel: no stack [ 520.529054][T22291] netlink: 'syz.2.4709': attribute type 1 has an invalid length. [ 520.623591][T22291] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 520.652706][T18093] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 520.671423][T22291] 8021q: adding VLAN 0 to HW filter on device bond9 [ 520.717292][T22291] veth5: entered promiscuous mode [ 520.730237][T22291] bond9: (slave veth5): Enslaving as a backup interface with a down link [ 520.800266][ T6836] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 521.135677][T22317] bond4: option xmit_hash_policy: invalid value (64) [ 521.147432][T22317] bond4 (unregistering): Released all slaves [ 521.244550][T22317] openvswitch: netlink: Message has 8 unknown bytes. [ 521.307364][T22324] bond4: option xmit_hash_policy: invalid value (64) [ 521.319957][T22324] bond4 (unregistering): Released all slaves [ 521.542481][T22351] netlink: 'syz.3.4722': attribute type 10 has an invalid length. [ 521.554502][T22350] netlink: 'syz.1.4724': attribute type 32 has an invalid length. [ 521.563463][T22346] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 521.584089][T22350] __nla_validate_parse: 3 callbacks suppressed [ 521.584108][T22350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4724'. [ 521.603526][T22357] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4725'. [ 521.621191][T22351] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 521.636709][T22350] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 521.712644][T22345] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.734990][T22345] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 521.851074][T22346] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 521.957863][T22345] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.973657][T22345] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 522.030235][T22346] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 522.077316][T22373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4729'. [ 522.112861][T22345] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.123725][T22345] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 522.175844][T22346] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 522.284904][T22345] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.332644][T22345] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 522.486261][T18100] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 522.538723][ T6820] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 522.596609][ T6820] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 522.658132][T18100] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 522.718037][T22343] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 522.761361][T22401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4737'. [ 522.810111][T22403] netlink: 'syz.2.4739': attribute type 1 has an invalid length. [ 522.828267][T22403] sctp: [Deprecated]: syz.2.4739 (pid 22403) Use of int in max_burst socket option. [ 522.828267][T22403] Use struct sctp_assoc_value instead [ 522.847581][T22343] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 522.887665][ T6820] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.902970][ T6820] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 522.947922][ T6820] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.982703][ T6820] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 523.003996][T22343] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 523.071279][ T6842] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.080856][ T6842] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 523.121814][T22343] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 523.212368][T18100] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.221918][T18100] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 523.567843][T22435] veth7: entered allmulticast mode [ 523.807942][T18098] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 523.867086][T18098] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 523.909424][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 523.954556][T18098] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 524.044544][T18100] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 524.148570][T22469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4758'. [ 524.226091][T22469] syzkaller0: entered promiscuous mode [ 524.259864][T22469] syzkaller0: entered allmulticast mode [ 524.332139][T22480] netlink: 'syz.1.4763': attribute type 2 has an invalid length. [ 524.351488][T22482] netlink: 'syz.1.4763': attribute type 2 has an invalid length. [ 524.468333][T22491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4768'. [ 524.526174][T22491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4768'. [ 524.630579][T22503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4770'. [ 524.659950][T22503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4770'. [ 524.841331][T22513] netlink: 'syz.1.4773': attribute type 1 has an invalid length. [ 524.961042][T22522] netlink: 404 bytes leftover after parsing attributes in process `syz.4.4775'. [ 525.124140][T22526] netlink: zone id is out of range [ 525.130251][T22528] netlink: 'syz.2.4778': attribute type 10 has an invalid length. [ 525.131413][T22526] netlink: del zone limit has 8 unknown bytes [ 525.162826][T22528] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 525.571341][T22551] vlan0: entered promiscuous mode [ 525.577809][T22551] vlan0: entered allmulticast mode [ 525.585989][T22551] hsr_slave_1: entered allmulticast mode [ 525.637956][T22546] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 525.654559][T18098] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 525.707597][T18098] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 525.764512][T18098] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 525.789353][T18098] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 525.901581][T22572] team0: Device ip6gre3 is of different type [ 526.200522][T22587] netlink: 'syz.0.4794': attribute type 1 has an invalid length. [ 526.491201][T22605] openvswitch: netlink: Flow actions attr not present in new flow. [ 526.552289][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 526.745378][T22622] netlink: 'syz.4.4806': attribute type 2 has an invalid length. [ 526.757204][T22622] __nla_validate_parse: 14 callbacks suppressed [ 526.757227][T22622] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4806'. [ 526.775838][T22622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4806'. [ 526.823087][T22622] tc_dump_action: action bad kind [ 527.082617][T22634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4810'. [ 527.114450][T22642] netlink: 'syz.3.4813': attribute type 2 has an invalid length. [ 527.134803][T22641] netlink: 'syz.0.4812': attribute type 83 has an invalid length. [ 527.149434][T22642] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4813'. [ 527.198114][T22641] netlink: 'syz.0.4812': attribute type 4 has an invalid length. [ 528.062048][T22693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.609198][T22711] netlink: 'syz.1.4833': attribute type 1 has an invalid length. [ 528.766246][T22691] netlink: 'syz.3.4828': attribute type 1 has an invalid length. [ 528.779193][T22691] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4828'. [ 528.799961][T22691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4828'. [ 528.996384][T22722] netlink: 277 bytes leftover after parsing attributes in process `syz.3.4836'. [ 529.605781][T22758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4842'. [ 529.634543][T22757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.396868][T22805] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4856'. [ 530.595884][T22818] netlink: 'syz.1.4859': attribute type 1 has an invalid length. [ 530.595930][T22815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4860'. [ 530.867849][T22831] delete_channel: no stack [ 530.903405][T22834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.995032][T22838] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 531.082877][T22841] macvtap1: entered promiscuous mode [ 531.088806][T22841] vlan0: entered promiscuous mode [ 531.102132][T22841] macvtap1: entered allmulticast mode [ 531.113277][T22841] vlan0: entered allmulticast mode [ 531.126794][T22841] veth0_vlan: entered allmulticast mode [ 531.156919][T22845] macvtap2: entered promiscuous mode [ 531.163870][T22845] macvtap2: entered allmulticast mode [ 531.288430][T22856] sctp: [Deprecated]: syz.3.4872 (pid 22856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 531.288430][T22856] Use struct sctp_sack_info instead [ 531.322197][T22855] sctp: [Deprecated]: syz.3.4872 (pid 22855) Use of struct sctp_assoc_value in delayed_ack socket option. [ 531.322197][T22855] Use struct sctp_sack_info instead [ 532.244847][T22902] __nla_validate_parse: 5 callbacks suppressed [ 532.244870][T22902] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4883'. [ 532.378148][T22906] netlink: 'syz.2.4886': attribute type 12 has an invalid length. [ 532.387054][T22906] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4886'. [ 532.438120][T22908] netlink: 'syz.4.4887': attribute type 11 has an invalid length. [ 532.467973][T22908] netlink: 'syz.4.4887': attribute type 4 has an invalid length. [ 532.494632][T22908] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4887'. [ 532.567997][T22915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4890'. [ 532.630913][T22924] netlink: 'syz.1.4890': attribute type 1 has an invalid length. [ 532.783490][T22915] bond8: (slave geneve3): making interface the new active one [ 532.792209][T22915] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 532.961775][ T6820] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 533.001447][ T6820] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 533.050456][ T6820] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 533.077413][T22948] netlink: 'syz.0.4895': attribute type 1 has an invalid length. [ 533.130771][T22948] netlink: 'syz.0.4895': attribute type 1 has an invalid length. [ 533.172337][ T6820] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 533.297509][T22960] netlink: 'syz.3.4898': attribute type 1 has an invalid length. [ 533.305640][T22960] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4898'. [ 534.229454][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 534.583520][T18088] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 542.526482][T18100] tipc: Disabling bearer [ 542.532899][T18100] gretap0 (unregistering): left promiscuous mode [ 542.569505][T18100] bond4 (unregistering): (slave gretap1): Releasing active interface [ 542.591019][T18100] bond11 (unregistering): (slave gretap2): Releasing active interface [ 542.662111][T18100] bond14 (unregistering): (slave geneve5): Releasing active interface [ 542.702723][T18100] bond10 (unregistering): (slave geneve2): Releasing active interface [ 543.231744][T18100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.242550][T18100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.252545][T18100] bond0 (unregistering): Released all slaves [ 543.267742][T18100] bond1 (unregistering): Released all slaves [ 543.383515][T18100] bond2 (unregistering): Released all slaves [ 543.501648][T18100] bond3 (unregistering): (slave veth3): Releasing active interface [ 543.512181][T18100] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 543.521967][T18100] bond3 (unregistering): Released all slaves [ 543.644314][T18100] bond4 (unregistering): Released all slaves [ 543.760333][T18100] bond5 (unregistering): Released all slaves [ 543.871489][T18100] bond6 (unregistering): Released all slaves [ 543.885774][T18100] bond7 (unregistering): Released all slaves [ 543.900649][T18100] bond8 (unregistering): Released all slaves [ 544.016568][T18100] bond9 (unregistering): Released all slaves [ 544.129997][T18100] bond10 (unregistering): Released all slaves [ 544.146551][T18100] bond11 (unregistering): Released all slaves [ 544.261023][T18100] bond12 (unregistering): Released all slaves [ 544.275651][T18100] bond13 (unregistering): Released all slaves [ 544.290732][T18100] bond14 (unregistering): Released all slaves [ 544.502108][T18100] tipc: Disabling bearer [ 544.520925][T18100] tipc: Left network mode [ 544.806476][T18100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.815051][T18100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.008494][T18100] vlan1 (unregistering): left allmulticast mode [ 545.016190][T18100] veth0_vlan (unregistering): left allmulticast mode [ 545.771096][T18100] IPVS: stop unused estimator thread 0... [ 557.744606][T22969] netlink: 'syz.4.4903': attribute type 21 has an invalid length. [ 557.825297][T22971] netlink: 'syz.0.4899': attribute type 83 has an invalid length. [ 557.842041][T22982] netlink: 'syz.4.4903': attribute type 7 has an invalid length. [ 557.867072][T22974] netlink: 'syz.0.4899': attribute type 83 has an invalid length. [ 557.868308][T22982] netlink: 'syz.4.4903': attribute type 7 has an invalid length. [ 557.887345][T18100] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.897074][T22970] netlink: 'syz.0.4899': attribute type 13 has an invalid length. [ 558.203483][T22970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.212192][T22970] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.223313][T22970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 558.242911][T18100] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.251953][ T24] lo speed is unknown, defaulting to 1000 [ 558.253155][T22987] : renamed from veth1_vlan [ 558.262727][ T24] syz0: Port: 1 Link ACTIVE [ 558.304095][T18088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.320479][T18100] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.339522][T18088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.366758][T18100] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.397333][T23002] netlink: 'syz.4.4910': attribute type 1 has an invalid length. [ 558.422090][T23002] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 558.441001][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 558.543637][T23010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4913'. [ 558.722494][T18088] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 558.810659][T23032] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4920'. [ 558.859342][T23032] gretap0: entered promiscuous mode [ 559.089542][T23046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.199884][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 559.210507][T23046] syzkaller0: entered promiscuous mode [ 559.223789][T23046] syzkaller0: entered allmulticast mode [ 559.238296][T23061] netlink: 'syz.4.4929': attribute type 1 has an invalid length. [ 559.331537][T23070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.674850][T18100] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 560.688770][T18100] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 560.891245][T23083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4936'. [ 560.900786][T23079] tipc: Enabled bearer , priority 0 [ 560.911044][T23079] syzkaller0: entered promiscuous mode [ 560.916561][T23079] syzkaller0: entered allmulticast mode [ 561.037267][T23079] tipc: Resetting bearer [ 561.064553][T23079] netlink: 'syz.4.4934': attribute type 1 has an invalid length. [ 561.072603][T23079] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4934'. [ 561.082312][T23079] netlink: 'syz.4.4934': attribute type 2 has an invalid length. [ 561.114584][T23078] tipc: Resetting bearer [ 561.205985][T23078] tipc: Disabling bearer [ 561.221956][T23109] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4944'. [ 561.438332][T23118] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 561.451560][T23118] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 561.589639][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 561.617953][T23134] bond9: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 561.666294][T23132] sctp: [Deprecated]: syz.0.4950 (pid 23132) Use of int in max_burst socket option. [ 561.666294][T23132] Use struct sctp_assoc_value instead [ 561.744518][T23134] bond9 (unregistering): Released all slaves [ 561.888479][T23152] macvlan2: entered promiscuous mode [ 561.896740][T23152] team0: entered promiscuous mode [ 561.904417][T23152] team_slave_0: entered promiscuous mode [ 561.911190][T23152] team_slave_1: entered promiscuous mode [ 561.918972][T23152] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 561.964392][T23152] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 562.005209][T23154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4958'. [ 562.152461][T23168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4963'. [ 562.243396][T23168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4963'. [ 562.287015][T23176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4967'. [ 562.336861][T23180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4968'. [ 562.387417][T23177] bond5: (slave geneve2): making interface the new active one [ 562.397158][T23177] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 562.413793][T18100] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 562.425558][T18100] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 562.440667][T18100] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 562.449021][T18100] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 562.583651][T23188] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 562.584987][ T5895] IPVS: starting estimator thread 0... [ 562.705239][T23189] bond9: option coupled_control: invalid value (17) [ 562.725483][T23191] IPVS: using max 26 ests per chain, 62400 per kthread [ 562.751004][T23189] bond9 (unregistering): Released all slaves [ 563.087938][T23218] lo: left promiscuous mode [ 563.563677][T23249] __nla_validate_parse: 3 callbacks suppressed [ 563.563698][T23249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4987'. [ 563.609358][T23261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4989'. [ 563.670817][T23260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4989'. [ 563.852518][T23265] validate_nla: 6 callbacks suppressed [ 563.852540][T23265] netlink: 'syz.2.4992': attribute type 4 has an invalid length. [ 563.852620][T23268] netlink: 'syz.2.4992': attribute type 4 has an invalid length. [ 563.858051][T23265] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4992'. [ 563.876114][T23265] wlan1: mtu less than device minimum [ 563.939416][T23268] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4992'. [ 563.945950][T23276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4993'. [ 563.960261][T23276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4993'. [ 564.016123][T23268] wlan1: mtu less than device minimum [ 564.046524][T23279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4997'. [ 564.060205][T23279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4997'. [ 564.572952][T23310] sctp: [Deprecated]: syz.1.5005 (pid 23310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 564.572952][T23310] Use struct sctp_sack_info instead [ 564.748032][T23327] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5007'. [ 565.029402][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 565.930427][T23395] bond3: option resend_igmp: invalid value (32767) [ 565.937117][T23395] bond3: option resend_igmp: allowed values 0 - 255 [ 565.946147][T23395] bond3 (unregistering): Released all slaves [ 565.981946][T23396] netlink: 'syz.2.5029': attribute type 2 has an invalid length. [ 566.170122][T23413] netlink: 'syz.4.5032': attribute type 11 has an invalid length. [ 567.049454][T23428] netlink: 'syz.0.5035': attribute type 7 has an invalid length. [ 567.396742][T23456] netlink: 'syz.3.5039': attribute type 1 has an invalid length. [ 567.630444][T23472] sock: sock_set_timeout: `syz.4.5045' (pid 23472) tries to set negative timeout [ 567.691403][T23474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.710222][ T5895] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 567.754247][T23477] 8021q: adding VLAN 0 to HW filter on device bond9 [ 567.776304][T23486] syzkaller0: entered promiscuous mode [ 567.782952][T23486] syzkaller0: entered allmulticast mode [ 567.864250][T23480] 8021q: adding VLAN 0 to HW filter on device bond9 [ 567.886624][T23480] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 567.911328][T23480] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 568.146118][ T5895] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 568.524953][ T7873] hid-generic 0005:0B57:0009.0001: unknown main item tag 0x0 [ 568.548919][T23529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.594636][ T7873] hid-generic 0005:0B57:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 568.963082][T23562] : entered promiscuous mode [ 569.184401][T23574] __nla_validate_parse: 8 callbacks suppressed [ 569.184425][T23574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5076'. [ 569.201999][T23574] netlink: 50 bytes leftover after parsing attributes in process `syz.0.5076'. [ 569.211874][T23574] netlink: 50 bytes leftover after parsing attributes in process `syz.0.5076'. [ 569.222159][T23576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5077'. [ 569.300261][T23580] netlink: 146840 bytes leftover after parsing attributes in process `syz.1.5077'. [ 569.314102][T23580] netlink: zone id is out of range [ 569.319524][T23580] netlink: zone id is out of range [ 569.324762][T23580] netlink: zone id is out of range [ 569.331331][T23580] netlink: zone id is out of range [ 569.336509][T23580] netlink: zone id is out of range [ 569.341900][T23580] netlink: zone id is out of range [ 569.347042][T23580] netlink: zone id is out of range [ 569.356871][T23580] netlink: zone id is out of range [ 569.364252][T23580] netlink: zone id is out of range [ 569.369736][T23580] netlink: zone id is out of range [ 569.491191][T23585] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5079'. [ 569.553547][T23588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5080'. [ 569.831998][T23601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5086'. [ 569.983607][T23610] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5090'. [ 570.112613][T23620] netlink: 'syz.2.5092': attribute type 32 has an invalid length. [ 570.149706][T23620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5092'. [ 570.282162][T23620] bond11: Setting coupled_control to off (0) [ 570.715668][T23650] netlink: 'syz.4.5101': attribute type 21 has an invalid length. [ 570.723749][T23650] netlink: 'syz.4.5101': attribute type 22 has an invalid length. [ 570.732462][T23650] netlink: 'syz.4.5101': attribute type 23 has an invalid length. [ 570.745413][T23650] netlink: 'syz.4.5101': attribute type 25 has an invalid length. [ 571.050553][T23675] dvmrp0: entered allmulticast mode [ 571.181869][T23687] unsupported nla_type 52263 [ 571.276892][T23695] bond0: entered promiscuous mode [ 571.286871][T23695] bond_slave_0: entered promiscuous mode [ 571.294806][T23695] bond_slave_1: entered promiscuous mode [ 571.319270][T23695] bond0: left promiscuous mode [ 571.329991][T23695] bond_slave_0: left promiscuous mode [ 571.335720][T23695] bond_slave_1: left promiscuous mode [ 571.744518][T23725] IPVS: set_ctl: invalid protocol: 11612 172.20.20.3:21 [ 571.836596][T23734] netlink: 'syz.4.5125': attribute type 10 has an invalid length. [ 571.847052][T23734] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.854644][T23734] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.901226][T23734] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.908524][T23734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.917107][T23734] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.924316][T23734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.950282][T23734] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 572.023905][T23740] xt_l2tp: missing protocol rule (udp|l2tpip) [ 572.583808][T23767] delete_channel: no stack [ 572.588482][T23767] delete_channel: no stack [ 572.619764][T23767] delete_channel: no stack [ 572.624502][T23767] delete_channel: no stack [ 572.630613][T23767] delete_channel: no stack [ 572.635241][T23767] delete_channel: no stack [ 572.661663][T23767] delete_channel: no stack [ 572.669021][T23767] delete_channel: no stack [ 572.685399][T23767] delete_channel: no stack [ 572.705240][T23767] delete_channel: no stack [ 572.723844][T23767] delete_channel: no stack [ 572.730931][T23767] delete_channel: no stack [ 572.735678][T23767] delete_channel: no stack [ 572.759415][T23767] delete_channel: no stack [ 572.780094][T23767] delete_channel: no stack [ 572.796176][T23767] delete_channel: no stack [ 572.843623][T23767] delete_channel: no stack [ 572.856694][T23767] delete_channel: no stack [ 572.883772][T23767] delete_channel: no stack [ 572.888491][T23767] delete_channel: no stack [ 572.902469][T23767] delete_channel: no stack [ 572.943412][T23767] delete_channel: no stack [ 572.948048][T23767] delete_channel: no stack [ 572.954076][T23767] delete_channel: no stack [ 572.971919][T23767] delete_channel: no stack [ 572.976801][T23767] delete_channel: no stack [ 573.010267][T23776] delete_channel: no stack [ 573.015176][T23776] delete_channel: no stack [ 573.027644][T23776] delete_channel: no stack [ 573.047091][T23776] delete_channel: no stack [ 573.059359][T23776] delete_channel: no stack [ 573.064042][T23776] delete_channel: no stack [ 573.072916][T23776] delete_channel: no stack [ 573.105927][T23795] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 573.257062][T23801] netlink: 'syz.1.5149': attribute type 1 has an invalid length. [ 573.404657][T23803] lo speed is unknown, defaulting to 1000 [ 573.575699][T23818] netlink: 'syz.2.5157': attribute type 2 has an invalid length. [ 573.612389][T23818] netlink: 'syz.2.5157': attribute type 8 has an invalid length. [ 573.865578][T23833] netlink: 'syz.1.5160': attribute type 2 has an invalid length. [ 574.035157][T23803]  speed is unknown, defaulting to 1000 [ 574.121280][T23839] IPv6: sit2: Disabled Multicast RS [ 574.127457][T23839] sit2: entered allmulticast mode [ 574.268540][T23848] syzkaller0: entered promiscuous mode [ 574.277563][T23848] syzkaller0: entered allmulticast mode [ 574.305520][T23848] __nla_validate_parse: 20 callbacks suppressed [ 574.305543][T23848] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5167'. [ 574.309357][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 574.315790][T23848] 0{X: renamed from gretap0 (while UP) [ 574.342677][T23848] 0{X: entered allmulticast mode [ 574.356003][T23848] net_ratelimit: 8 callbacks suppressed [ 574.356024][T23848] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 575.204708][T23906] validate_nla: 1 callbacks suppressed [ 575.204729][T23906] netlink: 'syz.0.5181': attribute type 1 has an invalid length. [ 575.305639][T23907] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 575.322551][T23907] bond6 (unregistering): Released all slaves [ 575.404136][T23906] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 575.417058][T23906] bond6 (unregistering): Released all slaves [ 575.466258][T23929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5188'. [ 575.502103][T23929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5188'. [ 575.516557][T23910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5184'. [ 575.682262][T23943] netlink: 'syz.3.5191': attribute type 1 has an invalid length. [ 575.725867][T23943] 8021q: adding VLAN 0 to HW filter on device bond6 [ 575.763212][T23943] veth1: entered promiscuous mode [ 575.774426][T23950] netlink: 'syz.0.5193': attribute type 9 has an invalid length. [ 575.896039][T23954] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5194'. [ 576.253504][T23977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5202'. [ 576.254229][T23978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5201'. [ 576.854340][T24007] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5212'. [ 577.047323][T24013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5214'. [ 577.391838][T24035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5220'. [ 577.461553][T24035] team_slave_0: entered promiscuous mode [ 577.467577][T24035] team_slave_1: entered promiscuous mode [ 577.484988][T24035] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 577.493622][T24035] team0: Device macvtap0 is already an upper device of the team interface [ 577.518636][T24035] team_slave_0: left promiscuous mode [ 577.524203][T24035] team_slave_1: left promiscuous mode [ 577.823960][T24056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.828826][T24057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.097813][T24072] netlink: 'syz.4.5231': attribute type 32 has an invalid length. [ 578.730252][T24097] pim6reg1: entered promiscuous mode [ 578.739682][T24097] pim6reg1: entered allmulticast mode [ 579.093422][T24125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.119802][T24130] netlink: 'syz.4.5245': attribute type 4 has an invalid length. [ 579.326220][T24141] __nla_validate_parse: 3 callbacks suppressed [ 579.326243][T24141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5252'. [ 579.383491][T24141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5252'. [ 579.411045][T24141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5252'. [ 579.433699][T24141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5252'. [ 579.821394][T24169] netlink: 'syz.1.5256': attribute type 1 has an invalid length. [ 579.829384][T24169] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5256'. [ 580.078839][T24187] netlink: 'syz.2.5265': attribute type 1 has an invalid length. [ 580.107290][T24187] netlink: 528 bytes leftover after parsing attributes in process `syz.2.5265'. [ 580.154176][T24193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5267'. [ 580.170527][T24197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5266'. [ 580.785506][T24233] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5276'. [ 581.389807][T24269] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5288'. [ 582.032953][T24298] veth0_to_team: entered promiscuous mode [ 582.044131][T24298] veth0_to_team: entered allmulticast mode [ 582.103535][T24307] netlink: 'syz.3.5297': attribute type 4 has an invalid length. [ 582.212651][T24309] netlink: 'syz.4.5298': attribute type 24 has an invalid length. [ 582.315729][T24309] netlink: 'syz.4.5298': attribute type 16 has an invalid length. [ 582.329590][T24309] netlink: 'syz.4.5298': attribute type 17 has an invalid length. [ 582.340346][T24314] netlink: 'syz.2.5299': attribute type 7 has an invalid length. [ 582.393982][T24309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 582.638740][T24335] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 582.754130][T24339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.778014][T24339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.803593][T24337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.814291][T24337] bond_slave_0: left promiscuous mode [ 582.828985][T24337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.838805][T24337] bond_slave_1: left promiscuous mode [ 582.847824][T24337] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 582.858406][T24337] mac80211_hwsim hwsim22 wlan1: left promiscuous mode [ 582.874763][T24337] bond0 (unregistering): Released all slaves [ 582.978044][T24348] netlink: 'syz.0.5311': attribute type 21 has an invalid length. [ 582.988129][T24348] net veth1_virt_wifi .: renamed from virt_wifi0 [ 583.167814][T24355] bridge0: port 1(ipvlan0) entered blocking state [ 583.174703][T24355] bridge0: port 1(ipvlan0) entered disabled state [ 583.182049][T24355] ipvlan0: entered allmulticast mode [ 583.187489][T24355] bridge0: entered allmulticast mode [ 583.195883][T24355] ipvlan0: left allmulticast mode [ 583.201217][T24355] bridge0: left allmulticast mode [ 583.640682][T24378] wg2: entered promiscuous mode [ 583.655682][T24378] wg2: entered allmulticast mode [ 583.702568][T24382] netlink: 'syz.2.5324': attribute type 1 has an invalid length. [ 584.170522][T24417] netlink: 'syz.3.5336': attribute type 21 has an invalid length. [ 584.189188][T24418] netlink: 'syz.3.5336': attribute type 21 has an invalid length. [ 584.311999][T24427] netlink: 'syz.1.5339': attribute type 1 has an invalid length. [ 584.384397][T24427] veth11: entered promiscuous mode [ 585.026120][T24465] __nla_validate_parse: 23 callbacks suppressed [ 585.026142][T24465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5349'. [ 585.334828][T24483] veth1_macvtap: left promiscuous mode [ 585.467959][T24483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5353'. [ 585.881612][T24509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5362'. [ 585.916260][T24513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5363'. [ 585.925375][T24513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5363'. [ 586.008842][T24520] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5365'. [ 586.268238][T24539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.290646][T24539] batadv_slave_0: entered promiscuous mode [ 586.307882][T24539] batadv_slave_0: entered allmulticast mode [ 586.402239][T24543] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5372'. [ 586.575360][T24553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5375'. [ 586.575386][T24552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5375'. [ 586.610041][T24552] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 586.805221][T24567] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5376'. [ 587.146023][T24588] validate_nla: 2 callbacks suppressed [ 587.146044][T24588] netlink: 'syz.1.5384': attribute type 22 has an invalid length. [ 587.166627][T24589] sctp: [Deprecated]: syz.4.5385 (pid 24589) Use of int in max_burst socket option. [ 587.166627][T24589] Use struct sctp_assoc_value instead [ 587.231331][T24588] netlink: 'syz.1.5384': attribute type 22 has an invalid length. [ 587.598754][T24614] netlink: 'syz.3.5393': attribute type 4 has an invalid length. [ 587.686258][T24622] veth0_to_bond: entered promiscuous mode [ 587.708453][T24622] veth0_to_bond: left allmulticast mode [ 587.797847][T24623] veth3: entered promiscuous mode [ 587.813912][T24623] veth3: entered allmulticast mode [ 587.905308][T24633] netlink: 'syz.3.5397': attribute type 15 has an invalid length. [ 587.913891][T24634] netlink: 'syz.3.5397': attribute type 15 has an invalid length. [ 588.071990][T24647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 588.253628][ T1323] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.264454][ T1323] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.283306][ T1323] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.304847][T18083] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.435119][T24666] dvmrp1: entered allmulticast mode [ 588.777277][T24681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.789145][T24681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.800797][T24681] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 588.810227][T24681] team0: left promiscuous mode [ 588.815098][T24681] team_slave_0: left promiscuous mode [ 588.822450][T24681] team_slave_1: left promiscuous mode [ 588.830778][T24681] bond0 (unregistering): Released all slaves [ 588.982485][T24693] macvlan2: entered promiscuous mode [ 588.987855][T24693] macvlan2: entered allmulticast mode [ 589.001286][T24693] bond3: (slave macvlan2): Opening slave failed [ 589.032316][ T6837] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 589.767381][T24746] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyڇv[DwzR' [ 589.799280][T24746] CPU: 0 UID: 0 PID: 24746 Comm: syz.3.5433 Not tainted syzkaller #0 PREEMPT(full) [ 589.799311][T24746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 589.799333][T24746] Call Trace: [ 589.799344][T24746] [ 589.799355][T24746] dump_stack_lvl+0x189/0x250 [ 589.799395][T24746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.799423][T24746] ? __pfx__printk+0x10/0x10 [ 589.799464][T24746] ? kernfs_path_from_node+0x2f/0x290 [ 589.799488][T24746] ? kernfs_path_from_node+0x250/0x290 [ 589.799509][T24746] ? kernfs_path_from_node+0x2f/0x290 [ 589.799538][T24746] sysfs_warn_dup+0x8e/0xa0 [ 589.799575][T24746] sysfs_do_create_link_sd+0xc0/0x110 [ 589.799608][T24746] device_add_class_symlinks+0x1cf/0x240 [ 589.799648][T24746] device_add+0x475/0xb50 [ 589.799685][T24746] wiphy_register+0x1c81/0x2aa0 [ 589.799734][T24746] ? __pfx_wiphy_register+0x10/0x10 [ 589.799761][T24746] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 589.799805][T24746] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 589.799844][T24746] ieee80211_register_hw+0x3473/0x40d0 [ 589.799897][T24746] ? ieee80211_register_hw+0x1421/0x40d0 [ 589.799944][T24746] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 589.799977][T24746] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 589.800017][T24746] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 589.800051][T24746] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 589.800095][T24746] ? __hrtimer_setup+0x187/0x210 [ 589.800118][T24746] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 589.800151][T24746] mac80211_hwsim_new_radio+0x2f7a/0x5210 [ 589.800212][T24746] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 589.800236][T24746] ? trace_kmalloc+0x1f/0xd0 [ 589.800260][T24746] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 589.800288][T24746] ? kstrndup+0xbf/0x160 [ 589.800335][T24746] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 589.800367][T24746] ? __pfx___nla_validate_parse+0x10/0x10 [ 589.800406][T24746] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 589.800444][T24746] ? __nla_parse+0x40/0x60 [ 589.800470][T24746] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 589.800513][T24746] genl_family_rcv_msg_doit+0x212/0x300 [ 589.800554][T24746] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 589.800618][T24746] ? bpf_lsm_capable+0x9/0x20 [ 589.800644][T24746] ? security_capable+0x7e/0x2e0 [ 589.800683][T24746] genl_rcv_msg+0x60e/0x790 [ 589.800722][T24746] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.800752][T24746] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 589.800796][T24746] netlink_rcv_skb+0x205/0x470 [ 589.800817][T24746] ? __lock_acquire+0xab9/0xd20 [ 589.800839][T24746] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.800872][T24746] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 589.800920][T24746] ? down_read+0x1ad/0x2e0 [ 589.800948][T24746] genl_rcv+0x28/0x40 [ 589.800976][T24746] netlink_unicast+0x82c/0x9e0 [ 589.801022][T24746] ? __pfx_netlink_unicast+0x10/0x10 [ 589.801059][T24746] ? netlink_sendmsg+0x642/0xb30 [ 589.801080][T24746] ? skb_put+0x11b/0x210 [ 589.801110][T24746] netlink_sendmsg+0x805/0xb30 [ 589.801146][T24746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.801175][T24746] ? aa_sock_msg_perm+0xf1/0x1d0 [ 589.801210][T24746] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 589.801244][T24746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.801269][T24746] __sock_sendmsg+0x219/0x270 [ 589.801308][T24746] ____sys_sendmsg+0x505/0x830 [ 589.801342][T24746] ? __pfx_____sys_sendmsg+0x10/0x10 [ 589.801382][T24746] ? import_iovec+0x74/0xa0 [ 589.801413][T24746] ___sys_sendmsg+0x21f/0x2a0 [ 589.801444][T24746] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.801519][T24746] ? __fget_files+0x2a/0x420 [ 589.801549][T24746] ? __fget_files+0x3a0/0x420 [ 589.801594][T24746] __x64_sys_sendmsg+0x19b/0x260 [ 589.801632][T24746] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 589.801674][T24746] ? rcu_is_watching+0x15/0xb0 [ 589.801707][T24746] ? do_syscall_64+0xbe/0x3b0 [ 589.801736][T24746] do_syscall_64+0xfa/0x3b0 [ 589.801758][T24746] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.801793][T24746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.801817][T24746] ? clear_bhb_loop+0x60/0xb0 [ 589.801845][T24746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.801867][T24746] RIP: 0033:0x7f4b5338eec9 [ 589.801889][T24746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.801910][T24746] RSP: 002b:00007f4b542ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.801935][T24746] RAX: ffffffffffffffda RBX: 00007f4b535e5fa0 RCX: 00007f4b5338eec9 [ 589.801953][T24746] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 589.801968][T24746] RBP: 00007f4b53411f91 R08: 0000000000000000 R09: 0000000000000000 [ 589.801982][T24746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.801996][T24746] R13: 00007f4b535e6038 R14: 00007f4b535e5fa0 R15: 00007ffcae1014f8 [ 589.802034][T24746] [ 590.310361][T24749] __nla_validate_parse: 16 callbacks suppressed [ 590.310384][T24749] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5436'. [ 590.548571][T24769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5440'. [ 590.559279][T24769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5440'. [ 590.574717][T24760] netlink: 'syz.3.5438': attribute type 1 has an invalid length. [ 590.598737][T24760] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.5438'. [ 590.695594][T24773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5441'. [ 590.747049][T24782] netlink: 'syz.4.5442': attribute type 9 has an invalid length. [ 590.778327][T24781] netlink: 'syz.1.5443': attribute type 11 has an invalid length. [ 590.788643][T24782] netlink: 'syz.4.5442': attribute type 6 has an invalid length. [ 590.824910][T24782] netlink: 'syz.4.5442': attribute type 7 has an invalid length. [ 590.859842][T24788] netlink: 'syz.1.5443': attribute type 1 has an invalid length. [ 591.136734][T24807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5451'. [ 591.162171][T24805] : entered promiscuous mode [ 591.176454][T24810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5450'. [ 591.207055][T24806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5451'. [ 591.236989][T24812] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5450'. [ 591.266539][T24817] 8021q: VLANs not supported on lo [ 591.387727][T24821] IPv6: Can't replace route, no match found [ 591.527494][T24830] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5454'. [ 591.589288][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 591.665881][T24842] ip6gretap0: entered promiscuous mode [ 592.264900][T24871] bond12: (slave gre0): Device is not bonding slave [ 592.279254][T24871] bond12: option active_slave: invalid value (gre0) [ 592.300095][T24871] bond12 (unregistering): Released all slaves [ 592.454492][T24880] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 592.473875][T24892] 0{X: renamed from gretap0 (while UP) [ 592.515287][T24892] 0{X: entered allmulticast mode [ 592.527430][T24892] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 592.963974][T24926] validate_nla: 3 callbacks suppressed [ 592.964008][T24926] netlink: 'syz.3.5480': attribute type 13 has an invalid length. [ 593.203396][T24939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 593.317833][T24949] bond0: entered promiscuous mode [ 593.324220][T24949] bond_slave_0: entered promiscuous mode [ 593.330947][T24949] bond_slave_1: entered promiscuous mode [ 593.343614][T24949] bond0: left promiscuous mode [ 593.352543][T24949] bond_slave_0: left promiscuous mode [ 593.378570][T24949] bond_slave_1: left promiscuous mode [ 593.674842][T24969] bond12: (slave gre0): Device is not bonding slave [ 593.682019][T24969] bond12: option active_slave: invalid value (gre0) [ 593.698459][T24969] bond12 (unregistering): Released all slaves [ 594.144675][T25010] netlink: 'syz.0.5501': attribute type 1 has an invalid length. [ 594.183220][T25010] netlink: 'syz.0.5501': attribute type 3 has an invalid length. [ 594.216271][T25010] netlink: 'syz.0.5501': attribute type 235 has an invalid length. [ 594.894096][T25057] pim6reg: entered allmulticast mode [ 594.916662][T25057] pim6reg: left allmulticast mode [ 595.409014][T25097] syz.0.5530 uses old SIOCAX25GETINFO [ 595.414865][T25098] __nla_validate_parse: 88 callbacks suppressed [ 595.414887][T25098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5529'. [ 595.444252][T25098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5529'. [ 595.463941][T25098] gretap0: entered promiscuous mode [ 595.476328][T25098] gretap0: left promiscuous mode [ 595.554562][T25101] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 595.571407][T25101] bond6 (unregistering): Released all slaves [ 595.690715][T25109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5534'. [ 595.701663][T25109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5534'. [ 595.771593][T25117] tipc: New replicast peer: 255.255.255.255 [ 595.779559][T25117] tipc: Enabled bearer , priority 10 [ 595.967401][T25125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5538'. [ 596.073913][T25125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5538'. [ 596.080585][T25129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5541'. [ 596.310179][T25143] netlink: 'syz.3.5545': attribute type 4 has an invalid length. [ 596.317977][T25143] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5545'. [ 596.393295][T25145] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 596.452575][T25145] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 596.533936][T25155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5550'. [ 596.572482][T25160] Bluetooth: MGMT ver 1.23 [ 596.737019][T25173] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5555'. [ 596.784385][T25175] netlink: 'syz.4.5553': attribute type 1 has an invalid length. [ 596.871174][T25175] 8021q: adding VLAN 0 to HW filter on device bond4 [ 596.889262][ T24] tipc: Node number set to 2171306917 [ 597.169543][T25194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.370987][T25218] netlink: 'syz.0.5564': attribute type 1 has an invalid length. [ 597.382412][T25215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.533443][T25228] bond0 (unregistering): Released all slaves [ 598.134867][T25265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.140278][T25255] nbd1: detected capacity change from 0 to 127 [ 598.190972][T25264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 598.269871][ T5847] block nbd1: Receive control failed (result -32) [ 598.632054][ T5848] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 598.640714][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 598.887227][T25317] : renamed from vlan0 [ 599.099606][T25335] netlink: 'syz.3.5602': attribute type 5 has an invalid length. [ 599.405225][T25350] veth7: entered promiscuous mode [ 599.412829][T25350] veth7: entered allmulticast mode [ 599.451847][T25346] lo speed is unknown, defaulting to 1000 [ 599.695918][T25346]  speed is unknown, defaulting to 1000 [ 600.434592][T25402] x_tables: ip_tables: udp match: only valid for protocol 17 [ 600.475373][T25405] __nla_validate_parse: 13 callbacks suppressed [ 600.475393][T25405] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5624'. [ 600.492189][T25407] netlink: 'syz.4.5623': attribute type 1 has an invalid length. [ 600.785442][T25416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5626'. [ 600.801368][T24335] IPVS: ip_vs_send_async error -101 [ 600.880663][T25420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5628'. [ 600.944434][T25431] netlink: 'syz.1.5630': attribute type 1 has an invalid length. [ 600.995524][T25429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5630'. [ 601.253275][T25450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5637'. [ 601.315487][T25451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5635'. [ 601.580640][T25475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5643'. [ 601.611833][T25475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5643'. [ 601.641121][T25475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5643'. [ 601.682638][T25475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5643'. [ 601.779929][T25486] netlink: 'syz.1.5647': attribute type 1 has an invalid length. [ 603.806298][T25543] lo speed is unknown, defaulting to 1000 [ 603.970494][T25557] netlink: 'syz.4.5661': attribute type 1 has an invalid length. [ 604.275765][T25570] syzkaller1: entered promiscuous mode [ 604.282783][T25573] netlink: 'syz.1.5667': attribute type 1 has an invalid length. [ 604.291760][T25570] syzkaller1: entered allmulticast mode [ 604.465251][T25543]  speed is unknown, defaulting to 1000 [ 604.651084][T25583] veth1_to_bond: entered allmulticast mode [ 604.807530][T25585] veth1_to_bond (unregistering): left allmulticast mode [ 604.832026][T25589] netlink: 'syz.0.5672': attribute type 21 has an invalid length. [ 604.849226][T25589] IPv6: NLM_F_CREATE should be specified when creating new route [ 604.870096][T25589] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 604.877342][T25589] IPv6: NLM_F_CREATE should be set when creating new route [ 604.884916][T25589] IPv6: NLM_F_CREATE should be set when creating new route [ 604.892214][T25589] IPv6: NLM_F_CREATE should be set when creating new route [ 605.027319][T25603] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.077120][T25603] bridge_slave_1 (unregistering): left allmulticast mode [ 605.086435][T25603] bridge_slave_1 (unregistering): left promiscuous mode [ 605.102693][T25603] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.197044][T25603] veth1_to_bridge (unregistering): left promiscuous mode [ 605.494805][T25625] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 605.500412][T25624] __nla_validate_parse: 7 callbacks suppressed [ 605.500434][T25624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5679'. [ 605.505591][T25619] bond12: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 605.512802][T25624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5679'. [ 605.556336][T25619] bond12 (unregistering): Released all slaves [ 605.655790][T25638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5679'. [ 605.743216][ T3527] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 605.759404][ T3527] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 605.770381][T18999] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 605.796076][T25644] netlink: 'syz.0.5686': attribute type 4 has an invalid length. [ 605.833164][T25644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5686'. [ 605.982395][T25649] bond13: option arp_all_targets: invalid value (18446744073709551613) [ 606.015920][T25649] bond13 (unregistering): Released all slaves [ 606.029329][T18999] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 606.210038][ T24] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 606.451500][T25674] netlink: 'syz.2.5695': attribute type 10 has an invalid length. [ 606.494733][T25683] team0: Mode changed to "activebackup" [ 606.679901][T25694] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5698'. [ 606.984323][T25716] netlink: 'syz.4.5704': attribute type 1 has an invalid length. [ 606.996141][T25716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5704'. [ 607.079969][T25720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5706'. [ 607.104217][T25720] netlink: 'syz.4.5706': attribute type 11 has an invalid length. [ 607.115749][T25720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5706'. [ 607.125820][T25720] netlink: 'syz.4.5706': attribute type 11 has an invalid length. [ 607.138574][T25720] rdma_rxe: rxe_newlink: failed to add lo [ 607.425754][T25743] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5712'. [ 608.365257][T25802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5733'. [ 609.682151][T25871] netlink: 'syz.3.5751': attribute type 1 has an invalid length. [ 609.889875][T25877] [ 609.892269][T25877] ====================================================== [ 609.899308][T25877] WARNING: possible circular locking dependency detected [ 609.906358][T25877] syzkaller #0 Not tainted [ 609.910795][T25877] ------------------------------------------------------ [ 609.917832][T25877] syz.2.5754/25877 is trying to acquire lock: [ 609.923917][T25877] ffffffff8f21a2f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 609.933421][T25877] [ 609.933421][T25877] but task is already holding lock: [ 609.940790][T25877] ffffffff8f21a298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 609.950370][T25877] [ 609.950370][T25877] which lock already depends on the new lock. [ 609.950370][T25877] [ 609.963465][T25877] [ 609.963465][T25877] the existing dependency chain (in reverse order) is: [ 609.972486][T25877] [ 609.972486][T25877] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 609.980403][T25877] lock_acquire+0x120/0x360 [ 609.985440][T25877] _raw_spin_lock_bh+0x36/0x50 [ 609.990737][T25877] nr_rt_ioctl+0x390/0xd50 [ 609.995681][T25877] sock_do_ioctl+0xdc/0x300 [ 610.000721][T25877] sock_ioctl+0x576/0x790 [ 610.005582][T25877] __se_sys_ioctl+0xfc/0x170 [ 610.010698][T25877] do_syscall_64+0xfa/0x3b0 [ 610.015728][T25877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.022164][T25877] [ 610.022164][T25877] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 610.030167][T25877] lock_acquire+0x120/0x360 [ 610.035198][T25877] _raw_spin_lock_bh+0x36/0x50 [ 610.040499][T25877] nr_rt_ioctl+0x193/0xd50 [ 610.045446][T25877] sock_do_ioctl+0xdc/0x300 [ 610.050478][T25877] sock_ioctl+0x576/0x790 [ 610.055338][T25877] __se_sys_ioctl+0xfc/0x170 [ 610.060544][T25877] do_syscall_64+0xfa/0x3b0 [ 610.065577][T25877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.071998][T25877] [ 610.071998][T25877] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 610.079831][T25877] validate_chain+0xb9b/0x2140 [ 610.085132][T25877] __lock_acquire+0xab9/0xd20 [ 610.090333][T25877] lock_acquire+0x120/0x360 [ 610.095358][T25877] _raw_spin_lock_bh+0x36/0x50 [ 610.100656][T25877] nr_rt_device_down+0xa9/0x720 [ 610.106043][T25877] nr_device_event+0x137/0x150 [ 610.111340][T25877] notifier_call_chain+0x1b6/0x3e0 [ 610.116991][T25877] __dev_notify_flags+0x18d/0x2e0 [ 610.122541][T25877] netif_change_flags+0xe8/0x1a0 [ 610.128004][T25877] dev_change_flags+0x130/0x260 [ 610.133386][T25877] dev_ioctl+0x7b4/0x1150 [ 610.138244][T25877] sock_do_ioctl+0x22c/0x300 [ 610.143367][T25877] sock_ioctl+0x576/0x790 [ 610.148229][T25877] __se_sys_ioctl+0xfc/0x170 [ 610.153348][T25877] do_syscall_64+0xfa/0x3b0 [ 610.158378][T25877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.164802][T25877] [ 610.164802][T25877] other info that might help us debug this: [ 610.164802][T25877] [ 610.175028][T25877] Chain exists of: [ 610.175028][T25877] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 610.175028][T25877] [ 610.188861][T25877] Possible unsafe locking scenario: [ 610.188861][T25877] [ 610.196314][T25877] CPU0 CPU1 [ 610.201683][T25877] ---- ---- [ 610.207048][T25877] lock(nr_neigh_list_lock); [ 610.211745][T25877] lock(&nr_node->node_lock); [ 610.219040][T25877] lock(nr_neigh_list_lock); [ 610.226249][T25877] lock(nr_node_list_lock); [ 610.230846][T25877] [ 610.230846][T25877] *** DEADLOCK *** [ 610.230846][T25877] [ 610.239077][T25877] 2 locks held by syz.2.5754/25877: [ 610.244283][T25877] #0: ffffffff8f0c4a88 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 610.253091][T25877] #1: ffffffff8f21a298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 610.263115][T25877] [ 610.263115][T25877] stack backtrace: [ 610.269007][T25877] CPU: 0 UID: 0 PID: 25877 Comm: syz.2.5754 Not tainted syzkaller #0 PREEMPT(full) [ 610.269029][T25877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 610.269043][T25877] Call Trace: [ 610.269052][T25877] [ 610.269062][T25877] dump_stack_lvl+0x189/0x250 [ 610.269089][T25877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.269111][T25877] ? __pfx__printk+0x10/0x10 [ 610.269139][T25877] ? print_lock_name+0xde/0x100 [ 610.269167][T25877] print_circular_bug+0x2ee/0x310 [ 610.269191][T25877] check_noncircular+0x134/0x160 [ 610.269214][T25877] validate_chain+0xb9b/0x2140 [ 610.269237][T25877] ? rt6_disable_ip+0x6b3/0x720 [ 610.269258][T25877] ? __lock_acquire+0xab9/0xd20 [ 610.269276][T25877] __lock_acquire+0xab9/0xd20 [ 610.269294][T25877] ? nr_rt_device_down+0xa9/0x720 [ 610.269309][T25877] lock_acquire+0x120/0x360 [ 610.269324][T25877] ? nr_rt_device_down+0xa9/0x720 [ 610.269345][T25877] ? nr_rt_device_down+0xa9/0x720 [ 610.269360][T25877] _raw_spin_lock_bh+0x36/0x50 [ 610.269384][T25877] ? nr_rt_device_down+0xa9/0x720 [ 610.269401][T25877] nr_rt_device_down+0xa9/0x720 [ 610.269417][T25877] ? do_raw_spin_unlock+0x122/0x240 [ 610.269443][T25877] nr_device_event+0x137/0x150 [ 610.269469][T25877] notifier_call_chain+0x1b6/0x3e0 [ 610.269493][T25877] __dev_notify_flags+0x18d/0x2e0 [ 610.269514][T25877] ? __pfx___dev_notify_flags+0x10/0x10 [ 610.269532][T25877] ? __dev_change_flags+0x4cc/0x6d0 [ 610.269553][T25877] ? __pfx___dev_change_flags+0x10/0x10 [ 610.269572][T25877] ? full_name_hash+0x92/0xe0 [ 610.269602][T25877] netif_change_flags+0xe8/0x1a0 [ 610.269624][T25877] dev_change_flags+0x130/0x260 [ 610.269650][T25877] dev_ioctl+0x7b4/0x1150 [ 610.269668][T25877] sock_do_ioctl+0x22c/0x300 [ 610.269695][T25877] ? __pfx_sock_do_ioctl+0x10/0x10 [ 610.269718][T25877] ? __lock_acquire+0xab9/0xd20 [ 610.269741][T25877] sock_ioctl+0x576/0x790 [ 610.269765][T25877] ? __pfx_sock_ioctl+0x10/0x10 [ 610.269788][T25877] ? __fget_files+0x2a/0x420 [ 610.269812][T25877] ? __fget_files+0x3a0/0x420 [ 610.269835][T25877] ? __fget_files+0x2a/0x420 [ 610.269858][T25877] ? bpf_lsm_file_ioctl+0x9/0x20 [ 610.269876][T25877] ? __pfx_sock_ioctl+0x10/0x10 [ 610.269899][T25877] __se_sys_ioctl+0xfc/0x170 [ 610.269918][T25877] do_syscall_64+0xfa/0x3b0 [ 610.269934][T25877] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.269961][T25877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.269978][T25877] ? clear_bhb_loop+0x60/0xb0 [ 610.269998][T25877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.270014][T25877] RIP: 0033:0x7fc06438eec9 [ 610.270031][T25877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.270047][T25877] RSP: 002b:00007fc0651b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.270065][T25877] RAX: ffffffffffffffda RBX: 00007fc0645e5fa0 RCX: 00007fc06438eec9 [ 610.270078][T25877] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 610.270090][T25877] RBP: 00007fc064411f91 R08: 0000000000000000 R09: 0000000000000000 [ 610.270101][T25877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.270112][T25877] R13: 00007fc0645e6038 R14: 00007fc0645e5fa0 R15: 00007ffcfab9eea8 [ 610.270133][T25877] [ 610.587156][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 610.642821][T25880] openvswitch: netlink: Message has 5380 unknown bytes. [ 610.651843][T25880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.110132][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!