last executing test programs: 2.77333737s ago: executing program 1 (id=16820): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000000000007111aa00000000008510000002000000850005002a00000095000000000000009500a5050000123de2a33b428d29b3736aa90c292753fcd6f1eebe06337c1167fbfd3c4485fbe0dde38c79234e868cbb1157fba8c8fc"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) close(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x20, 0x7800, 0x8, 0x14a, {{0x22, 0x4, 0x2, 0x1, 0x88, 0x66, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x71, 0x1, [{0x2, 0xf, "0181a4f231da39944205a0f0d7"}, {0x2, 0xe, "457691831d0e251ac5955d4c"}, {0x0, 0x3, "98"}, {0x5, 0x4, "eb3b"}, {0x7, 0xa, "f18c2da9befe484b"}, {0x6, 0x3, 'X'}, {0x6, 0xf, "ae951563c7bf45d5bcd0895da6"}, {0x0, 0x10, "5a68224750322e110f23f8f677f8"}, {0x1, 0x12, "a3ef60dc9e801a01e75b3898ba5c59ec"}, {0x6, 0x9, "6f9fb4ce87baca"}]}]}}}}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r3}) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x44, 0x4, 0x4f8, 0xffffffff, 0x330, 0x0, 0x330, 0xffffffff, 0xffffffff, 0x428, 0x428, 0x428, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private2, [0xffffffff, 0xffffff00, 0x0, 0xd0f5bcfa7c76e88e], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'bond0\x00', 'wg0\x00', {}, {}, 0x87, 0x6, 0x5, 0x61}, 0x203, 0x210, 0x238, 0x8502, {}, [@common=@rt={{0x138}, {0x7, [0x77], 0x4, 0x1, 0x5, [@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @rand_addr=' \x01\x00', @local, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @remote, @mcast1, @private1], 0x3}}, @common=@unspec=@cluster={{0x30}, {0x800, 0x7, 0x7, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x8, 0x3}, {0x0, 0x24, 0x1}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x3}}}, {{@ipv6={@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0x0, 0xff, 0xffffffff], [0x0, 0xff, 0xffffffff, 0xffffffff], 'bond0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x29, 0xb6, 0x5}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5b2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x34, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x20004084) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x10, 0x700, 0x6, 0xa929, {{0x33, 0x4, 0x2, 0x9, 0xcc, 0x67, 0x0, 0x4, 0x29, 0x0, @remote, @loopback, {[@timestamp_addr={0x44, 0xc, 0xf2, 0x1, 0x2, [{@remote, 0xd1}]}, @timestamp={0x44, 0x10, 0xb7, 0x0, 0x3, [0x7fffffff, 0x8, 0x8]}, @timestamp_addr={0x44, 0x1c, 0x80, 0x1, 0x3, [{@remote, 0x2}, {@empty, 0x4}, {@remote, 0xc}]}, @generic={0x83, 0x3, "8d"}, @generic={0x86, 0xe, "4159e3b0d53aee5cf0b28f2a"}, @rr={0x7, 0x1f, 0x2e, [@empty, @local, @multicast2, @private=0xa010102, @empty, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x89, 0x5, "0e6fe7"}, @ssrr={0x89, 0x7, 0x6d, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x23, 0xee, [@dev={0xac, 0x14, 0x14, 0x15}, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x30}, @multicast2]}, @timestamp={0x44, 0x20, 0x3a, 0x0, 0x8, [0x3, 0x400, 0x9df0, 0x0, 0x81, 0x2, 0x2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x7800, 0x80, 0x8001, 0x6, {{0xb, 0x4, 0x0, 0x9, 0x2c, 0x68, 0x0, 0x81, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0xa9, [@local]}, @ssrr={0x89, 0xb, 0xe, [@dev={0xac, 0x14, 0x14, 0x26}, @empty]}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a090000ecffffff00b2e6b5397f7806b6ff846de37a34c8342bbac5a51eac662f717c429a2ee1d41f67235605e4f8a09cede8676044d4fd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3bd368c188df160da087aafd68dc", 0xa0}], 0x1, 0x0, 0x0, 0x84}, 0x24000081) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x50) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) close(r10) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000007c0)=""/48, &(0x7f0000000800)=0x30) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x0, 0x4, {{0x1c, 0x4, 0x1, 0x9, 0x70, 0x68, 0x0, 0xf9, 0x2f, 0x0, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x14, 0x3a, 0x3, 0x7, [{@loopback, 0x5f3}, {@multicast1, 0xfff}]}, @timestamp_addr={0x44, 0xc, 0xdc, 0x1, 0xe, [{@multicast1}]}, @timestamp_addr={0x44, 0x24, 0x24, 0x1, 0x1, [{@multicast1, 0x3}, {@multicast1, 0x2}, {@remote, 0x3aa}, {@broadcast, 0x1}]}, @lsrr={0x83, 0x13, 0x9e, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}, @noop, @noop]}}}}}) clock_gettime(0x2, &(0x7f0000000840)) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x10c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x800}, 0x801) r14 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$sock(r14, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)="40208f70baae6d9764e4f9dae7a5062def53a292ca64f897709ba5ea4fa01fc4029413540bcea6ee9154c6bd63d13dcd04d0f8644bacacca9ac6ad", 0x3b}, {&(0x7f00000008c0)="b3918e18b70aaa4599f657f6d40b77df397badde4e56c9bf96", 0x19}, {&(0x7f0000000900)="6a7805d9e9be168ba72cb072e0cb92cc7796a2ef74b520f9e7be40a446eca4d16c4c467aa2bf1ae701047e56d97c0152afe42f0b957c08c71010d898c16cd5f23a0b143ab626c931c0199217a36f12f59f8003624cec62a837e038824f8b9c0f30e1f9f06829e6a9c0e39eee93928cfe76251104f8f90342a5cc1f7938f67ba2006c6f28279f60fb4f4003fae0c237b44ae08ed24602761bc049fa29f5307da7039b09483960fc6ba3ad7ad3da74a3", 0xaf}, {&(0x7f00000009c0)="2ba0bdb73eda7553f0d47853c9d706d22f9da232f191e173697199478fe902a44aedc44f7150bc660a564ee9643842a7bc27f0724525547ce1a7ab43d4c813e536810bac326828d46e142579e4fec272c48ed2516b7e67f684d6", 0x5a}, {&(0x7f0000000a40)="f667662f9d81aab0569addb29ba1e6eafd7b104ccb012aeab3825d875f14c7ee7382e25027b0ae66708e0aedeab067c79d790a6d88efaf72dce082753b0599eb91acad14b86bd9302910ff03af303d578852936836adb516fd3b0fa768d00298c4094c572554e436924fd9cc170bbde4055d8975bd771c26d077e928fc64a6ca", 0x80}, {&(0x7f0000000ac0)="05b88051900a4d2c2aa02636906935bf3bd8c005cdfad6982fee421f66a60c743692e540cf39773d607643bc517d316baa07680de5643071aceff56b48bb589893c4e1217799e624abcaa10f75f8ddbc67703d16eb64829c167d8515995d319caf8bdd4bc201222454ffc4ddba52", 0x6e}, {&(0x7f0000001540)="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", 0x1000}], 0x7}, 0x4000000) 2.27236834s ago: executing program 1 (id=16824): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@getchain={0x5c, 0x66, 0x200, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0x5}, {0xfff0, 0x7}, {0xf, 0x6}}, [{0x8, 0xb, 0xd}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xe}, {0x8, 0xb, 0xbe}, {0x8, 0xb, 0xf9}, {0x8, 0xb, 0x1}]}, 0x5c}}, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtfilter={0x50, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x18, 0x2, [@TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0x5}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4, 0x10}}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215e8000) socket(0x2, 0x3, 0xff) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet(0x2, 0x2, 0x1) sendmmsg(r3, &(0x7f0000001000)=[{{&(0x7f0000000540)=@caif=@dbg={0x25, 0x6, 0x68}, 0x80, &(0x7f0000000d00), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x228}}], 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10) r4 = socket$kcm(0x10, 0x400000002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000009200)={0x77359400}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000003c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r6, r7, 0x25, 0x4, @val=@netkit={@void, @value=r6}}, 0x1c) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r8, r9}, 0x5) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/159, 0x9f}], 0x2}, 0x2000) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000200)=0x40) 2.269470922s ago: executing program 0 (id=16825): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x7, 0x4) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x6, 0x3, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x7, 0x7, 0x7, 0x10}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa030101}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000041}, 0x8000) listen(r1, 0x2) listen(r0, 0xd6) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000100)={{0x87, @private=0xa010100, 0x4e22, 0x1, 'lblcr\x00', 0x22, 0x7, 0x6d}, {@broadcast, 0x4e20, 0x10000, 0xd8c, 0x7fff, 0x101}}, 0x44) 2.233346122s ago: executing program 2 (id=16826): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xeb64d656001b2f26) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="0002290800030006000000080002000100000008000300000000000800040099740000080004000e0000000800020006000000050005008000000004000680080003000600000034000680060001000200000008", @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) r2 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001380)={'veth0\x00', &(0x7f0000001340)=@ethtool_cmd={0x18, 0x1ff, 0xffff38ce, 0x5, 0x9, 0x7f, 0x2, 0x3, 0x3, 0x3, 0x9, 0x2, 0x6, 0xb4, 0x3, 0x6, [0x9, 0x1]}}) 2.06748951s ago: executing program 0 (id=16827): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 32) connect$can_bcm(r1, &(0x7f0000000080), 0x10) (async, rerun: 32) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRES8=0x0], 0x48}}, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031412d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', r3, 0x2f, 0x4, 0x8, 0x1, 0xd, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x700, 0x8, 0x0, 0x99d8}}) connect$can_bcm(r1, &(0x7f0000000200)={0x1d, r4}, 0x10) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) r6 = accept4$inet(r5, &(0x7f00000004c0)={0x2, 0x0, @local}, &(0x7f0000000500)=0x10, 0x800) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000640)) (async) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xdf50}}, [0x400, 0x1, 0x848, 0x2, 0x7, 0x3, 0x800, 0x5, 0x2, 0x3, 0x8, 0x4, 0x3, 0x0, 0x7]}, &(0x7f0000000240)=0x100) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x1a, 0x63098bae, 0xa, 0xf41b, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000002c0)={r8, 0x14181646}, &(0x7f0000000440)=0x8) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r7], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964090000000000000008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.774555683s ago: executing program 2 (id=16830): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x100000, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'ipvlan1\x00', &(0x7f0000000180)=@ethtool_eee={0x45, 0x4, 0xfffffff8, 0x3, 0x3, 0x7, 0x1fd, 0x4, [0x9, 0x2]}}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r0, &(0x7f0000000440)={0x2c, 0xa, r5}, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)=""/245, &(0x7f00000003c0)=0xf5) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bdfcffffff00000200000008000300", @ANYRESHEX=r7, @ANYBLOB="080026009a03745452de0b3175720000"], 0x2c}}, 0x24008810) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000240)=@ethtool_eee={0x44, 0x9, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x8000, 0x0, [0x6, 0x3]}}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1000012, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0xa, r10, 0x31}, 0x10) 1.638350127s ago: executing program 0 (id=16833): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x8f, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x8, 0x2, 0x5e54, 0x200, r0, 0x61ef, '\x00', r2, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0xe}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.287659637s ago: executing program 0 (id=16837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pim6reg\x00', 0x100}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket(0x23, 0x5, 0x0) getsockopt$sock_buf(r3, 0x1, 0x3b, 0x0, &(0x7f00000000c0)) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ipvlan1\x00', 0x1000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xffff0f00}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x3, 0x0, 0x6, 0x0, 0x2, [{0x3, 0x3, 0xadc}, {0x3, 0x1, 0x2}, {0xb, 0x1005, 0x46}]}]}}, 0x0, 0x72}, 0x28) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0x2574a35c9e05d665) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040880}, 0x2000c084) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) (async) bind$l2tp(r3, &(0x7f0000000040)={0x2, 0x0, @remote, 0x2}, 0x10) 1.275413418s ago: executing program 2 (id=16838): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x42}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = socket(0x2, 0x3, 0x40) setsockopt(r1, 0xff, 0x1, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f0000000240)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000f9000007", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r3, 0x0, 0x40040) socket$isdn_base(0x22, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0xdd, 0x4, 0x3, 0x21, 0x0, 0xc, 0xe8, 0xa1, 0x5, 0x3, 0x3, 0x3, 0x40, 0xf}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000300)={0x4, 0x200, 0xd18, 0x2, r4}, &(0x7f0000000380)=0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="8fa2608d7a99", @void, {@ipv4={0x88a2, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast}}}}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, 0x0}, 0x240040c0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)={0x620, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x420, 0x84, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x81}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xc3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x40007}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x10000}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="2ea6e460cf49"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffff9}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xb181}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x101}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x12, 0x1, @random="902b6e384cfd0f494dc2165c288b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7446}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x81e79262}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="1ce611d3e9f6"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7}]}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="bf9b6a3c6c5b"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ac16e12fcb46"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="adbe0a5d8b9a"}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="9019b3e8ab1f"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3000}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x33}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x200}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xf}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xbd}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="0fa52b40ba41"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xd}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xce93}, @NL80211_BAND_LC={0x8, 0x5, 0x1e60f8e9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xe8c}, @NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x400}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x12, 0x1, @random="6ed6473109baaf498bea528481ae"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="841f6049ac13"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="494f4c62d2a2"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xe, 0x1, @random="54af9d0ae9ab84d77544"}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x29}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x60000000}, @NL80211_BAND_LC={0x8, 0x5, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffffffff}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x7f}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xa}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfc181b9b}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xde0e}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xe, 0x1, @random="9fd391f3cd0acf8f14be"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x80000001}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x10, 0x1, @random="e04d4b41e969fb6243016e96"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xe}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x8001}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x800}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x80000000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2a1}]}]}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x64, 0x84, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}]}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="c0b4b415d10c"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}]}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x188, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x71, 0x1, "717dcd6060f1b5eb56106287752b5072553b5b87d416209f2ff2947237165681b7fc59970d6869e31e366d51cee5b3895f1b4aba1f05317d85fdc0e7ecf5a1b8a66a067a78d035eb60b32aaa59bdd0e8346c9046059e73da0a963e20b94ce9896f045a55c7dd6bbd29712d7cfa"}, @NL80211_BAND_2GHZ={0x53, 0x0, "7124a6d27e7b0ef65af824b4483aa3193030651d11cd3ffe73c391300d50f756fc2632a38eb514e5a8e6004cbcbdb78b9192dae26c08df563efb29249e7171aae5dbcadc914b0390a43eff6e1bcceb"}, @NL80211_BAND_6GHZ={0xba, 0x3, "46c7374bbc48f3005164a213fd340dbae8bdbdd1dc7fd3892b09564e0a434be46699a1395abb98107d93ea5d320be9e1a23bb83d32cd578e7e495b0fd1f81e9dbd82ddefe4d891f8aa820a92ccd438756c0bae6fcf84eb0e4de61b97f76fb0ba330f187111943a1ca92c7cf9bf21d7b08ee4733e214f0e9278fa30daa4a80fdf5eea0ceea598975fa0c7d7cf4303ba213dfbf68b717bc08322744418fea7516a094b80b2ae2a751a8580d5ac0a67b0fcb0f67bfc0c0f"}]}]}, 0x620}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x33, 0x0, @multicast2, @local}, {{0xfffd, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0xfffc, {[@mptcp=@capable={0x1e, 0xc, 0x4, 0x8, 0x1, 0x4}]}}}}}}}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$igmp6(0xa, 0x3, 0x2) 1.17928571s ago: executing program 1 (id=16839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001a80)=0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000440)="6eec67ce63682c6f9b5d4ac64405957c3ec79edc40af8dd4fa1a09eac2728aa758cf9ee5fe5d337c7b0466054231f50cfd98f42246a02f7b3611625698744bbcce0cbeb9239019de9709a921ea3fe5906e4e24108fc8b8837db4c9cf4b46e61955acc8a6c1275b3e47d981ff270b9beffcacf81253a23b88a581a8ac8cfc838e7e3204358d935c365bb2a757da0cee9ca3dca5582264faab", 0x98}, {&(0x7f0000000500)="976b1891459d7e132943dfa9ff5ac995d002e3d01b14e3573df90b871283099ea5e557bb59d2bb51c397b2cfb3eb2bd5c13b5e1ebac2b103196265844c24362817a6a2f63a44e0e3d23a8e99f7337fbf39cbcb20087b2b8bd025d26b434248903780a708ca0c1f2e8f3afc09419d7f7ddd82c509eca1c8e7c23422d8238cc6b1da4246f17b2f3f65a4a41c11493446cb4915f4f0a7151c5b447e3e558293b3b9528676d1370dfb1859d33a5149aa55f6d5b47fa6777dfa9719a0fea25bd644ad288faac53e8ec98dc45cb28c744b62", 0xcf}, {&(0x7f0000000600)="79349cc750468dd8fb5da807b921b106cc7cfa85da67cfea8f7bd878210dc504b769a7461f2a9c24783b68db6801e5d13bdc6fc7630cf1550ccce2ca0994c32e93bd418e922690cd050582e411848e9fd87f3e7fd3abfa3bfe5b1e2a29882336b0dfae5146e45855e362370e1dc6388723ddf49ba6c9045119f9d0d93ba200ba3316eea8e69616013986d4e9a2ab96c9b939f647e9ef7b0476454888d4f223885db1e6dc544c98f674b85ac29b091d2170db7bd9721d6a688b98e5a9195f7129c32a6c73b6793b3ff78f4dc22e512866cc79525ee4d4878fdf704ad943f89b", 0xdf}, {&(0x7f0000000700)="c3ca986e836cdc45bafd89c99ac8b0171464e5c8fa82cc6d3db9210af22e242704062ca5cd74e987868f544d22ee69208d6c663545eb0c77d9ad6ebe63e2fbd8799279fdad70190ab2eada78a63a4f7337b404d84e2d3e56d372848aec25b7cc4bbeec749cb90d8f499794d8e00a14ac12ee5739e7b729444c5b6511ac993bc77cea78e6fe9d7687019fd3d61420b93f5de0567b71ecb219bee9b674a04576c080d040ffec684bc4a21ba8d30d184b78b36cbc0fd9f5aa38e19d7e72ad7a99d44dd99f26e8878b88c9512679d87a44b784a22d17e44bc627a485985d447b3f2b9d2ddd8b80d0ecd7bc1cd23006141ffd6e", 0xf1}, {&(0x7f0000000800)="b3c9d8efc3cd81671df487d5f57de9b4f95afa23b292697b78438bcafde3f928a980751de33a7b664c60d29cb8dd4ba7fc1d5af0f9036bfc4d381f9f56436cd04aea8533bbcc5a9e6317df1036a9c7aab384408e0b8c66c145d9b433e674aad3d0e8c263b407e0af2d25e1c7f1314b1e784ccf992d181fad1997eaf65a144bb0d14f4582dbacf710b8", 0x89}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000003c0)="e04baa01fa947c2f00b57e802447", 0xe}, {&(0x7f00000018c0)="37717f09f2df3529779b57f37733c77360dccba489c6e7d3a8be08723acccc890c7e99e38f68c87c82b2f29f80efd0c84f5b7ae09d2d74796e9db497fc66d9dc95a1c984e64d57c2b1b74ec4d2e1faad97758b8b89f52f6ca915adcb428e91bfe3772faacfb110ebfea6170e8d5e94bee42017edafcd1eacafe927f39c2f63c6260706c4a79ae2b0be26243b5a89c3174d19d8", 0x93}], 0x8, &(0x7f0000001a00)=[@timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x48}}, {{&(0x7f0000001ac0)=@nfc_llcp={0x27, r5, 0xffffffffffffffff, 0x2, 0x65, 0xfd, "8b8d6b812ebe8fc48b22d56989124bfd1af1df54fcb95c092e4a60bf3b0ce3cd1f065653e49e2fccd0fa26e7474e3830a0113c46084f376afba5b4105d6527", 0x29}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001b40)="132da834efb68e85ccf21f63e90d71adc631a5f6b95b904fc3f99288143b73521258374107d0fe58bcbec25467a8cbc67f710883d2556f0a4009ec353e0d61e403375837bf63a8fd7e7e990de88a5111cd807cc3d90651b8d589a7c9d9b1a9a51b9978cecc948cad605e4e6ff376da84ff520e88d7f2115ee60435d1662ab2a8373b80969c4697a200fd816f8482a608795bc0d4f62ab719147ba3835e3f720a785d2ad0747f95d145e6016631d32a209e0cb9a694eb0650887d64684e4269b44120fd", 0xc3}, {&(0x7f0000001c40)="c4874f7f", 0x4}, {&(0x7f0000001c80)="6fa38f466d4913f64093a66d100153a5cc19565b7d384ab48e8feb70ab117865110274df6583303d30e125462bdd92685858ecfd464061c838052299f376ddac0b67b60d3d1a82588a1eaee6705443077c4289fb5bb2704ece7222860a497aa8fa071661f2a4e24201647a87bc7440d48cef1e8f12a87a03dc", 0x79}], 0x3, &(0x7f0000001d40)=[@mark={{0x14, 0x1, 0x24, 0x1}}], 0x18}}], 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100ba3e0900000000003900000008000300", @ANYRES32=r6, @ANYBLOB="04005a80"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x8) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000f5ffffff14000180322efff83bf16e2bd790ed6dd53e6dc3ef335172dd4592a99250dd0ade52723b78f90a11482d6a6739bc5081fe8a9f44ee15750d868d99c04e80e47bf8"], 0x18}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001a80)) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000440)="6eec67ce63682c6f9b5d4ac64405957c3ec79edc40af8dd4fa1a09eac2728aa758cf9ee5fe5d337c7b0466054231f50cfd98f42246a02f7b3611625698744bbcce0cbeb9239019de9709a921ea3fe5906e4e24108fc8b8837db4c9cf4b46e61955acc8a6c1275b3e47d981ff270b9beffcacf81253a23b88a581a8ac8cfc838e7e3204358d935c365bb2a757da0cee9ca3dca5582264faab", 0x98}, {&(0x7f0000000500)="976b1891459d7e132943dfa9ff5ac995d002e3d01b14e3573df90b871283099ea5e557bb59d2bb51c397b2cfb3eb2bd5c13b5e1ebac2b103196265844c24362817a6a2f63a44e0e3d23a8e99f7337fbf39cbcb20087b2b8bd025d26b434248903780a708ca0c1f2e8f3afc09419d7f7ddd82c509eca1c8e7c23422d8238cc6b1da4246f17b2f3f65a4a41c11493446cb4915f4f0a7151c5b447e3e558293b3b9528676d1370dfb1859d33a5149aa55f6d5b47fa6777dfa9719a0fea25bd644ad288faac53e8ec98dc45cb28c744b62", 0xcf}, {&(0x7f0000000600)="79349cc750468dd8fb5da807b921b106cc7cfa85da67cfea8f7bd878210dc504b769a7461f2a9c24783b68db6801e5d13bdc6fc7630cf1550ccce2ca0994c32e93bd418e922690cd050582e411848e9fd87f3e7fd3abfa3bfe5b1e2a29882336b0dfae5146e45855e362370e1dc6388723ddf49ba6c9045119f9d0d93ba200ba3316eea8e69616013986d4e9a2ab96c9b939f647e9ef7b0476454888d4f223885db1e6dc544c98f674b85ac29b091d2170db7bd9721d6a688b98e5a9195f7129c32a6c73b6793b3ff78f4dc22e512866cc79525ee4d4878fdf704ad943f89b", 0xdf}, {&(0x7f0000000700)="c3ca986e836cdc45bafd89c99ac8b0171464e5c8fa82cc6d3db9210af22e242704062ca5cd74e987868f544d22ee69208d6c663545eb0c77d9ad6ebe63e2fbd8799279fdad70190ab2eada78a63a4f7337b404d84e2d3e56d372848aec25b7cc4bbeec749cb90d8f499794d8e00a14ac12ee5739e7b729444c5b6511ac993bc77cea78e6fe9d7687019fd3d61420b93f5de0567b71ecb219bee9b674a04576c080d040ffec684bc4a21ba8d30d184b78b36cbc0fd9f5aa38e19d7e72ad7a99d44dd99f26e8878b88c9512679d87a44b784a22d17e44bc627a485985d447b3f2b9d2ddd8b80d0ecd7bc1cd23006141ffd6e", 0xf1}, {&(0x7f0000000800)="b3c9d8efc3cd81671df487d5f57de9b4f95afa23b292697b78438bcafde3f928a980751de33a7b664c60d29cb8dd4ba7fc1d5af0f9036bfc4d381f9f56436cd04aea8533bbcc5a9e6317df1036a9c7aab384408e0b8c66c145d9b433e674aad3d0e8c263b407e0af2d25e1c7f1314b1e784ccf992d181fad1997eaf65a144bb0d14f4582dbacf710b8", 0x89}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000003c0)="e04baa01fa947c2f00b57e802447", 0xe}, {&(0x7f00000018c0)="37717f09f2df3529779b57f37733c77360dccba489c6e7d3a8be08723acccc890c7e99e38f68c87c82b2f29f80efd0c84f5b7ae09d2d74796e9db497fc66d9dc95a1c984e64d57c2b1b74ec4d2e1faad97758b8b89f52f6ca915adcb428e91bfe3772faacfb110ebfea6170e8d5e94bee42017edafcd1eacafe927f39c2f63c6260706c4a79ae2b0be26243b5a89c3174d19d8", 0x93}], 0x8, &(0x7f0000001a00)=[@timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x48}}, {{&(0x7f0000001ac0)=@nfc_llcp={0x27, r5, 0xffffffffffffffff, 0x2, 0x65, 0xfd, "8b8d6b812ebe8fc48b22d56989124bfd1af1df54fcb95c092e4a60bf3b0ce3cd1f065653e49e2fccd0fa26e7474e3830a0113c46084f376afba5b4105d6527", 0x29}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001b40)="132da834efb68e85ccf21f63e90d71adc631a5f6b95b904fc3f99288143b73521258374107d0fe58bcbec25467a8cbc67f710883d2556f0a4009ec353e0d61e403375837bf63a8fd7e7e990de88a5111cd807cc3d90651b8d589a7c9d9b1a9a51b9978cecc948cad605e4e6ff376da84ff520e88d7f2115ee60435d1662ab2a8373b80969c4697a200fd816f8482a608795bc0d4f62ab719147ba3835e3f720a785d2ad0747f95d145e6016631d32a209e0cb9a694eb0650887d64684e4269b44120fd", 0xc3}, {&(0x7f0000001c40)="c4874f7f", 0x4}, {&(0x7f0000001c80)="6fa38f466d4913f64093a66d100153a5cc19565b7d384ab48e8feb70ab117865110274df6583303d30e125462bdd92685858ecfd464061c838052299f376ddac0b67b60d3d1a82588a1eaee6705443077c4289fb5bb2704ece7222860a497aa8fa071661f2a4e24201647a87bc7440d48cef1e8f12a87a03dc", 0x79}], 0x3, &(0x7f0000001d40)=[@mark={{0x14, 0x1, 0x24, 0x1}}], 0x18}}], 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100ba3e0900000000003900000008000300", @ANYRES32=r6, @ANYBLOB="04005a80"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x8) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000f5ffffff14000180322efff83bf16e2bd790ed6dd53e6dc3ef335172dd4592a99250dd0ade52723b78f90a11482d6a6739bc5081fe8a9f44ee15750d868d99c04e80e47bf8"], 0x18}}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) 1.07655342s ago: executing program 2 (id=16840): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000004a00010000000000000000000a00", @ANYRES32=0x0, @ANYBLOB="654d98"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x7fff, 0x4c, &(0x7f0000000140)=""/76, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3e6, 0x1, 0x9, 0xf}, 0x10, 0x28e5f, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) 1.076187557s ago: executing program 0 (id=16841): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000004f80)=[{{&(0x7f0000000a00)=@ax25={{0x3, @default}, [@rose, @netrom, @default, @bcast, @default, @default, @rose, @null]}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000005180)=""/4110, 0x100e}, {&(0x7f0000000a80)=""/145, 0x91}, {&(0x7f0000000b40)=""/192, 0xc0}, {&(0x7f0000000c00)=""/214, 0xd6}, {&(0x7f0000000400)=""/32, 0x20}, {&(0x7f0000000d80)=""/104, 0x68}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/101, 0x65}, {&(0x7f0000000ec0)=""/67, 0x43}], 0xa, &(0x7f0000001000)=""/174, 0xae}, 0x10}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/59, 0x3b}, {&(0x7f0000001100)=""/172, 0xac}, {&(0x7f00000011c0)=""/37, 0x25}, {&(0x7f0000001200)=""/199, 0xc7}, {&(0x7f0000001300)=""/232, 0xe8}], 0x5, &(0x7f0000001480)=""/17, 0x11}, 0x5}, {{&(0x7f00000014c0)=@ieee802154, 0x80, &(0x7f0000001580)=[{&(0x7f0000001540)=""/8, 0x8}], 0x1}, 0x5}, {{&(0x7f00000015c0)=@nl, 0x80, &(0x7f00000027c0)=[{&(0x7f0000001640)=""/12, 0xc}, {&(0x7f00000026c0)=""/255, 0xff}], 0x2, &(0x7f0000000200)=""/194, 0xc2}, 0x7f}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000005100)=""/101, 0x65}, {&(0x7f0000002940)=""/217, 0xd9}], 0x2}, 0x2}, {{&(0x7f0000002a80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000300)=[{&(0x7f0000002b00)=""/229, 0xe5}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/89, 0x59}, {&(0x7f0000003c80)=""/156, 0x9c}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/1, 0x1}, {&(0x7f0000004d80)=""/29, 0x1d}, {&(0x7f0000004dc0)=""/124, 0x7c}, {&(0x7f0000004e40)=""/74, 0x4a}, {&(0x7f0000000140)=""/80, 0x50}], 0xa}, 0x7}], 0x6, 0x20, 0x0) write$bt_hci(r0, &(0x7f00000008c0)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6) (async) write$bt_hci(r0, &(0x7f00000008c0)={0x1, @le_read_remote_features={{0x2016, 0x2}, {0xc9}}}, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x8e}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 999.854782ms ago: executing program 1 (id=16842): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x891b, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x6, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 957.026571ms ago: executing program 4 (id=16843): r0 = socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x4c}, {0x80000006}]}, 0x10) 904.389458ms ago: executing program 2 (id=16844): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xfc41}], 0x1}, 0x40000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6d4e9a1d78ad62ceef18843080078bb3fb7dbfcebd1f85fc171f748a7b5373a3126", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f00000005c0)={@any, 0x5, 0x0, 0x1400, 0x5, 0x80, "dea5717ce8ab3431c90f96bc9e57438091e9cddfa05462510a4397c6ea5c31415f0e5497cf4d394b0e74cf2b4a8117e66d0d675fbd4883b2da3cf3c38c4de32b996728a6aa781a64ccd639cc6ff490438a24c52b65742c0f9e9d8b5d82f297e691e7d17e08e9a645cfc4c1efa4299da3f6cb8daf87b3eb7256c81cd63e3bf493"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'veth0_virt_wifi\x00', @broadcast}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0xfffd, 0x2000}, 0x90) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="00f2ef224828", @ANYRES16=0x0, @ANYBLOB="200029bd7100fedbdf2504000000"], 0x38}, 0x1, 0x0, 0x0, 0x200008c0}, 0xcc00) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r3, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="02", 0x1}], 0x1}}], 0x1, 0x20008000) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f00000003c0), &(0x7f0000000400)=0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x618781, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000180)=0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000090605000000000000000000010000050900020073797a30000000000500010007000000080017000000000104000880"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) ioctl$PPPIOCGFLAGS1(r7, 0x8004745a, &(0x7f0000000040)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r9, &(0x7f0000000040)=0xd4d, r6, 0x0, 0x800000000ff, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffe66, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x4008092) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) 852.99804ms ago: executing program 1 (id=16845): syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0xfffffffe}}, 0x10) bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) syz_emit_ethernet(0x2c1, &(0x7f0000000200)=ANY=[], 0x0) 847.740478ms ago: executing program 0 (id=16846): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$NFC_CMD_VENDOR(r2, 0x0, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) (async) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r6, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) clock_gettime(0xaf098b49fff259ae, 0x0) (async) clock_gettime(0xaf098b49fff259ae, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) 727.59209ms ago: executing program 1 (id=16847): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000001c40)=[{{&(0x7f0000000340), 0x80, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/238, 0xee}, {&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000000)=""/40, 0x28}, {&(0x7f00000002c0)=""/48, 0x30}], 0x4, &(0x7f0000000400)=""/2, 0x2}, 0xfffffffd}, {{&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/211, 0xd3}], 0x1}, 0x8}, {{&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000880)=""/96, 0x60}, {&(0x7f0000000900)=""/114, 0x72}], 0x2, &(0x7f00000009c0)=""/116, 0x74}, 0x7}, {{&(0x7f0000000a40)=@generic, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000001b40)=""/235, 0xeb}, 0x9d8}], 0x4, 0x100, &(0x7f0000001d40)={0x77359400}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x1b, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="9b0f2bbd7000ffdbdf2d010000000800028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, 0x107}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r9, 0x25, 0x0, @void}, 0x25) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x880) 727.193821ms ago: executing program 4 (id=16848): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="11efe8a8dc60b4ab4d8605"], 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000002180)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x48) (async) pread64(r0, &(0x7f0000000080)=""/163, 0xa3, 0x2) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x14, 0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800dd8d00000000000001800200000000000000000000000600120002"], 0x24}}, 0x0) (async) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040), 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000380)="031b", 0x2}], 0x1) (async) socket$inet6_udplite(0xa, 0x2, 0x88) 639.395617ms ago: executing program 4 (id=16849): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x30, r2, 0x1, 0x70bd28, 0x8000000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) 494.88394ms ago: executing program 4 (id=16850): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f000000180000005655e1f199fb61366a"], 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0xfffc}, 0x8) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0) r6 = socket(0x10, 0x803, 0x2) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e01400004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01"], 0x3c}}, 0x0) 448.405592ms ago: executing program 3 (id=16851): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 430.403204ms ago: executing program 3 (id=16852): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000665000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200005000f100850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x90) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c60133", 0x7}, {&(0x7f0000000280)="9e91d91a92dc7c8fff658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88) 302.131883ms ago: executing program 3 (id=16853): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="000000000000000073000c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000780), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0xc93accc5ebfd78e7, 0x70bd2a, 0x3, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r8, @ANYRES32=r1, @ANYBLOB='&'], 0x10) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r8, &(0x7f0000000580)="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", &(0x7f00000001c0)=@tcp=r9, 0x4}, 0x20) close(r8) recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x21, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) 212.445976ms ago: executing program 4 (id=16854): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x126, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f0000000280)}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='pids.events\x00', 0x0, 0x0) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000000340)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5475d, 0x4fd2d}, [@IFLA_WEIGHT={0x8, 0xf, 0xe}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x9, 0x68) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x3, 0x4) syz_emit_ethernet(0x658, &(0x7f0000000880)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @val={@val={0x88a8, 0x7}}, {@ipv6={0x86dd, @tcp={0xc, 0x6, "923e14", 0x61a, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, @local, {[@hopopts={0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}, @hopopts={0x2f, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x6, 0x14, 0x4, 0xa, 0x7, 0x40, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @remote, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @rand_addr=' \x01\x00']}, @fragment={0x67, 0x0, 0x3, 0x1, 0x0, 0x5, 0x65}, @hopopts={0x0, 0x24, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x38, {0x1, 0xc, 0x73, 0xa, [0x9, 0x9, 0x7fff, 0xa, 0xffffffffffff8d24, 0xd144000000000000]}}, @generic={0x5, 0xde, "68e7991ef561b3f2b393c6e23421365ebac40153d70aef769b423ca6c9ee1282deaf5ef540fbb20c06bd72b63327d6a617cd12b246d6c4558238019c0b4fe49fbb04be260971f9d9fee05a18257aa92ad367ccbb921c78a146fd41c01dd7f468ceffcb4b91f450eb3702914d1de562fc87ef44d3541b58f6ab87abcadce7ff2a0f4126a14fc98de13a3bf8011006d12893a06a39dacc07395b3f4d8a2ae81eb88273b34b244fb623cf60aeb9e63a838d8772e62121b6ba29a59f6ea74d28f2b870072cfb851a3d2ec0f09ab2c430827f47e07dec5984fa579b0d6409fd0b"}]}, @routing={0x84, 0x6, 0x1, 0x6d, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1]}, @dstopts={0x4, 0x4b, '\x00', [@ra={0x5, 0x2, 0x1000}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x0, 0x12, 0x3, 0xfff9, [0x3, 0x4, 0x3ff, 0x400000000000000, 0x4, 0xf, 0x5, 0x1, 0x4]}}, @generic={0x6, 0xd5, "1cfb5c1306c8a25287b57beb04eec12e9cbf937dfbbd80baabc893256d1f5dc1d84e4d73c49131b9726f25139a11a8851ef5a4f14e47dbb65f6dd02e72f7d73412de938fdae5852a9f20df9cfa80fec7e11a7e489b834491dccbde9657fb6aabb6f3b0e11ede7fd5236b164239c95996d023f2cbd364f82e3a32c897600bfc007ac332b9b917f0516ffe8e6398d003ab79568914126d703fa3a6d3619ab8e2976acedcf72524798e4fe5729cc17f8fd71af07f5f1eb71ae9ea6ee77fc9fd99b457b45787f643b2e52e751cd78c72dac24f896fdedb"}, @pad1, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x54, [0xd, 0x6, 0x10, 0x6]}}, @jumbo={0xc2, 0x4, 0x5}, @generic={0x6, 0xe4, "a440dd1c5a5800141079b0d00acd7c248cdbcd6ebf2e0fd0e1443f956b37f84ea6bd0b0fb30fb80c72f855426e6b409a375a9b63e302294fcc993a6e74b4e2816eaaf37fd1a4989da4d0abc52e3c09570ee0185838b2f618cea2d1a96000310997a3963eb269508b7fd98d1ca5a2029388ad9cc6cb8fbb3205b54a2cd162763ec766859ccebec70fea5b69caa85bbc22962583606ba8605d052d06cb6608340c5b5c37ca45d6cc82fc8df907a11b398eb611d74c1c28fb2f7a5874c127577a27345ad481d9034d25f7829794ccc7b7419de3a4ee7b9760bc7f75b149d2b186375bb5dcda"}]}, @dstopts={0x32, 0xd, '\x00', [@generic={0x6, 0x66, "3d23fa8eec0d7121fc487090c4fe485d9019eb3cf7678c30b1add5c4bf94f957382789890401ec9dbc01b96436b318cc5ad6149f14c34d4e66587128b9fb3e9ea3066381ab6e85171d302d8121669af05a7056ca10cfcef30f8a85bd9e0837edd590a16cd612"}, @jumbo={0xc2, 0x4, 0x5}]}, @srh={0x3a, 0x8, 0x4, 0x4, 0x5, 0x40, 0x7fff, [@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, @remote, @local]}, @hopopts={0x67, 0x7, '\x00', [@ra={0x5, 0x2, 0x1ff}, @jumbo={0xc2, 0x4, 0x80000001}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x28, {0x2, 0x8, 0x6, 0x7, [0x60000, 0xe, 0x2, 0x8]}}]}], {{0x4e23, 0x4e22, r5, r6, 0x1, 0x0, 0x6, 0x40, 0x5, 0x0, 0x8a, {[@eol, @sack_perm={0x4, 0x2}]}}, {"6e09dab8c39bbda8586f3fa4af748a68e528d1343c6897f6186b731eb3c9fd4f3a7d9546ce375628ece48eb1f79e289bae38aaf227244b0012fea2434814092fe8a280e68b8c8ba73cd5"}}}}}}}, 0x0) 208.774512ms ago: executing program 3 (id=16855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r1, 0x2}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa90}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}], @NL80211_ATTR_KEYS={0x54, 0x51, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b36eb847e9270862891dc5065b"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x24040010}, 0x24000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x1a, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x0, 0x9, 0x2, 0x4, 0x2, 0xfffffffffffffff0}, @exit, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x1, 0x1, 0x6, 0x0, 0x4, 0x100, 0x8}, @printk={@u}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 144.414569ms ago: executing program 3 (id=16856): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000007b113400000000008510000002000000850000000000000095003300000000009500a5660e0000009f3be7f40752ed289350a3b5257dfc7e5429619ce459a63169ccb691d1a8f1ab83013d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f00000003c0)) close(r1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r2, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x10122, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001900)) 92.41392ms ago: executing program 4 (id=16857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r3, 0x3a, 0x1, 0x0, &(0x7f0000000080)=0xfffffffffffffdfe) (async) getsockopt$MRT6(r3, 0x3a, 0x1, 0x0, &(0x7f0000000080)=0xfffffffffffffdfe) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x4000) 80.857399ms ago: executing program 3 (id=16858): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r2, 0x0, 0x2, 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@decl_tag={0x10, 0x0, 0x0, 0x11, 0x3, 0x1}, @fwd={0xf}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x2e, 0x30]}}, &(0x7f0000000340)=""/252, 0x44, 0xfc, 0x1, 0x10001, 0x10000, @value=r1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x71}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0xa6, &(0x7f0000000140)=""/166, 0x40f00, 0x10, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000440)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4de}, 0x94) 0s ago: executing program 2 (id=16859): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b9080001400000000a080002400000000a0900010073797a30000000000900020073797a3200"], 0xc0}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffffffffffffff080045000030000000000067907800001307c3dcffffff210090781200022825000024"], 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404c851) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000000) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020901000007000003080003407fffffff08000540000000070800034000000fff0900010073797a31000000000800064000000000080006400000000008000640000000010800064000000000080005400000001400000000000000"], 0x60}, 0x1, 0x0, 0x0, 0xc4}, 0x8041) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "5ac0d96778ae1876", "8795af889c39dbb0f496a95ac650b739", '#T%[', "14c400"}, 0x28) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000100)={@val={0x800e, 0x6005}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2, @empty}, {0x4e23, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x4, 0x100}}}}}}}}, 0x36) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a31000000002c000000030a0102000000000000000001008b3b0900030073797a31000000000900010073797a310000000044000000050a01020000000000000000010020000c0002400000000000000001090001001400030076657468315f6d61637674617000000014000000000a97aefcab003f19e07de1053601721566b0c413385d7d1da6c661b486aaa3b9a788d46154d9ece07fcf9a720335b81b299d7db52b86e834027de9c1e9e9299ef87339ef64d07e3972e26849d2e17db9a91fbd288bcb53349610e7a6f07bd392b904f17110b59f83f9bb9279734b4fe26806ec6d9f1eaaffe4f5930c6436d8cc7d18e55c954bbeb5c2622c6109bfd2dd514945fbed4cfa6f248dbdf37f6c82bfeb40a2854da44948c3df45a0f20000000000000000000000000000a34af11560500fe957540acc0d0f66e72830662284ed27b0a4bb9682c9510186ead256fae2779d16ad8dfe772968ecabe6058aa4aff0611c5296cbd29da8b41f9f2470bb09049178cc0947680dd03da459a40209c142a0a4d0fdb65723933f3be5cf75ca0dd6a4c34de4fc041dfbcddffc93b05e752a8455276ffb07bd8e2e66dd8e058727f8f499f495301b0fea4cf2ed7ba6fef1994559ac4fd2fb4438eda2375edf9da67a74390f66c0b156260e32e6ebd685e3b79f48b3047e0369f6881892c17b802b29fd5eb6b0a033adccb3a68093fc62901b"], 0xb8}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) recvfrom(r0, &(0x7f00000000c0)=""/64, 0x40, 0x2002, 0x0, 0x0) kernel console output (not intermixed with test programs): ing): unset [1, 0] type 2 family 0 port 59935 - 0 [ 1497.400201][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1497.640387][T18831] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.668982][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1497.772945][T31482] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.827941][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1497.838639][T31482] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1497.912003][T31482] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.008918][T24225] Bluetooth: hci3: command tx timeout [ 1498.280455][T29779] netlink: 'syz.1.15148': attribute type 3 has an invalid length. [ 1498.292006][ T4157] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 1498.419969][ T4157] bond4 (unregistering): (slave vti0): Releasing backup interface [ 1498.430835][ T4157] vti0 (unregistering): left promiscuous mode [ 1499.792269][ T4157] bond5 (unregistering): (slave bridge0): Releasing backup interface [ 1499.800886][ T4157] bridge0 (unregistering): left promiscuous mode [ 1500.032802][ T4157] bond11 (unregistering): (slave bridge33): Releasing backup interface [ 1500.042363][ T4157] bridge33 (unregistering): left promiscuous mode [ 1500.087643][T24225] Bluetooth: hci3: command tx timeout [ 1500.109375][ T4157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1500.121835][ T4157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1500.133590][ T4157] bond0 (unregistering): Released all slaves [ 1500.151026][ T4157] bond1 (unregistering): Released all slaves [ 1500.171253][ T4157] bond2 (unregistering): Released all slaves [ 1500.192096][ T4157] bond3 (unregistering): Released all slaves [ 1500.216572][ T4157] bond4 (unregistering): Released all slaves [ 1500.241556][ T4157] bond5 (unregistering): Released all slaves [ 1500.261608][ T4157] bond6 (unregistering): Released all slaves [ 1500.279048][ T4157] bond7 (unregistering): (slave 26±ÿ†Ý'É|d<): Releasing backup interface [ 1500.291274][ T4157] bond7 (unregistering): (slave 26±ÿ†Ý'É|d<): last VLAN challenged slave left bond - VLAN blocking is removed [ 1500.305747][ T4157] bond7 (unregistering): Released all slaves [ 1500.325898][ T4157] bond8 (unregistering): Released all slaves [ 1500.342209][ T4157] bond9 (unregistering): Released all slaves [ 1500.359350][ T4157] bond10 (unregistering): Released all slaves [ 1500.381730][ T4157] bond11 (unregistering): Released all slaves [ 1500.417535][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1500.437901][T29664] chnl_net:caif_netlink_parms(): no params data found [ 1500.667937][T29802] nft_compat: unsupported protocol 0 [ 1500.694128][ T4157] 9: left promiscuous mode [ 1500.883327][ T4157] tipc: Disabling bearer [ 1500.920533][ T4157] tipc: Disabling bearer [ 1500.961939][ T4157] tipc: Left network mode [ 1501.098472][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1501.121394][T29833] __nla_validate_parse: 6 callbacks suppressed [ 1501.121414][T29833] netlink: 104 bytes leftover after parsing attributes in process `syz.0.15156'. [ 1501.127924][T29664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.128031][T29664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.128348][T29664] bridge_slave_0: entered allmulticast mode [ 1501.132171][T29664] bridge_slave_0: entered promiscuous mode [ 1501.241335][T29664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.264228][T29664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.280186][T29833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15156'. [ 1501.293316][T29664] bridge_slave_1: entered allmulticast mode [ 1501.319606][T29664] bridge_slave_1: entered promiscuous mode [ 1501.340664][T29823] syzkaller0: entered promiscuous mode [ 1501.352959][T29823] syzkaller0: entered allmulticast mode [ 1501.773877][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1501.864368][T29664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.880530][T29857] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1501.897407][T29861] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1501.911026][T29859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15163'. [ 1501.931203][T29664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.997968][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1502.042663][T29867] team0: No ports can be present during mode change [ 1502.060910][T29664] team0: Port device team_slave_0 added [ 1502.101384][T29664] team0: Port device team_slave_1 added [ 1502.130287][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1502.170079][T24225] Bluetooth: hci3: command tx timeout [ 1502.943973][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1503.159967][T29664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1503.168114][T29664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1503.203780][T29664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1503.235624][ T4157] hsr_slave_0: left promiscuous mode [ 1503.248664][ T4157] hsr_slave_1: left promiscuous mode [ 1503.271324][ T4157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1503.284409][ T4157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1503.299916][ T4157] veth1_macvtap: left promiscuous mode [ 1503.342864][T29899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15172'. [ 1503.661588][ T4157] team0 (unregistering): Port device team_slave_1 removed [ 1503.696588][ T4157] team0 (unregistering): Port device team_slave_0 removed [ 1503.831185][T29664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1503.847887][T29664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1503.880529][T29664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1503.974165][T29899] hsr_slave_1 (unregistering): left promiscuous mode [ 1504.120481][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1504.261681][T29664] hsr_slave_0: entered promiscuous mode [ 1504.286207][T29664] hsr_slave_1: entered promiscuous mode [ 1504.308255][T29664] debugfs: 'hsr0' already exists in 'hsr' [ 1504.317436][T29664] Cannot create hsr debugfs directory [ 1504.350781][T29925] ip6tnl0: Caught tx_queue_len zero misconfig [ 1504.575972][T29927] netlink: 'syz.4.15180': attribute type 9 has an invalid length. [ 1504.597487][T29925] netlink: 'syz.0.15179': attribute type 13 has an invalid length. [ 1504.713384][T29944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15184'. [ 1504.722803][T29945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15184'. [ 1504.768424][T29946] tipc: Started in network mode [ 1504.773544][T29946] tipc: Node identity , cluster identity 4711 [ 1504.800713][T29946] tipc: Failed to set node id, please configure manually [ 1504.821640][T29951] delete_channel: no stack [ 1504.832069][T29946] tipc: Enabling of bearer rejected, failed to enable media [ 1504.841541][T29955] netlink: 48 bytes leftover after parsing attributes in process `syz.4.15185'. [ 1504.904265][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1505.178486][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1505.208709][T29964] netlink: 'syz.1.15188': attribute type 2 has an invalid length. [ 1505.300382][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1505.373342][T29964] vþ: entered promiscuous mode [ 1505.395447][T29664] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.429698][T29974] netlink: 108 bytes leftover after parsing attributes in process `syz.0.15190'. [ 1505.503029][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1505.592265][T29664] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.619364][T29982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15191'. [ 1505.710413][T29982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1505.729881][T29664] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.777035][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1505.861994][T29664] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.921964][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1505.936287][T24225] block nbd1: Receive control failed (result -32) [ 1506.047121][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1506.217034][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1506.359492][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1506.377228][T29664] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1506.430776][T29664] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1506.487691][T29664] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1506.546456][T29664] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1506.590262][T30034] openvswitch: netlink: IP tunnel dst address not specified [ 1506.714997][T30017] syzkaller0: entered promiscuous mode [ 1506.775835][T30017] syzkaller0: entered allmulticast mode [ 1508.939946][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1509.079352][T30092] netlink: 256 bytes leftover after parsing attributes in process `syz.4.15207'. [ 1509.141924][T30095] tipc: Started in network mode [ 1509.170672][T30095] tipc: Node identity , cluster identity 4711 [ 1509.194111][T30095] tipc: Failed to set node id, please configure manually [ 1509.203275][T30095] tipc: Enabling of bearer rejected, failed to enable media [ 1509.327223][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1509.353680][T29664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.435018][T29664] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.468693][T30113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15211'. [ 1509.477886][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1509.492366][T31480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.499643][T31480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.565991][T18831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.573321][T18831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.636408][T30117] nbd: must specify a size in bytes for the device [ 1509.827286][T30131] netlink: 248 bytes leftover after parsing attributes in process `syz.1.15215'. [ 1510.320468][T30150] syzkaller1: entered promiscuous mode [ 1510.353970][T30150] syzkaller1: entered allmulticast mode [ 1510.374787][T30154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15219'. [ 1510.430917][T30150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15218'. [ 1510.470844][T29664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1510.610731][T30162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15221'. [ 1510.670194][T30165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15221'. [ 1510.688888][T30165] tipc: Invalid UDP bearer configuration [ 1510.688947][T30165] tipc: Enabling of bearer rejected, failed to enable media [ 1510.796895][T18831] net_ratelimit: 9 callbacks suppressed [ 1510.796917][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1510.942181][T30173] netlink: 52 bytes leftover after parsing attributes in process `syz.4.15224'. [ 1510.952924][T29664] veth0_vlan: entered promiscuous mode [ 1510.984869][T29664] veth1_vlan: entered promiscuous mode [ 1511.107688][T30182] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1511.139270][T30182] bond2 (unregistering): Released all slaves [ 1511.187551][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1511.227294][T29664] veth0_macvtap: entered promiscuous mode [ 1511.246360][T29664] veth1_macvtap: entered promiscuous mode [ 1511.258598][T30190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15229'. [ 1511.316373][T29664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1511.347141][T30190] netlink: 'syz.4.15229': attribute type 1 has an invalid length. [ 1511.368687][T30190] netlink: 'syz.4.15229': attribute type 1 has an invalid length. [ 1511.376567][T30190] netlink: 'syz.4.15229': attribute type 2 has an invalid length. [ 1511.394668][T29664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1511.419612][T30196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15232'. [ 1511.510427][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1511.547035][ T150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.666439][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1511.704631][ T150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.733470][ T150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.776960][ T150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.842384][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1511.919000][T31482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.930440][T31482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.028850][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1512.113092][T31479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1512.132994][T30224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.143151][T31479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.217165][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1512.328730][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1512.460977][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1512.596961][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1512.895275][ T9700] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1512.907886][ T9700] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1512.919736][ T9700] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1512.930579][ T9700] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1512.939098][ T9700] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1513.323191][T30280] bond7: option miimon: invalid value (18446744073709551585) [ 1513.391745][T30280] bond7: option miimon: allowed values 0 - 2147483647 [ 1513.465783][T30280] bond7 (unregistering): Released all slaves [ 1513.581573][T30272] hsr0 speed is unknown, defaulting to 1000 [ 1513.636813][T30272] lo speed is unknown, defaulting to 1000 [ 1513.945709][T30314] netlink: 'syz.3.15258': attribute type 1 has an invalid length. [ 1514.628932][T30349] __nla_validate_parse: 5 callbacks suppressed [ 1514.628953][T30349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15267'. [ 1514.682855][T30349] netlink: 'syz.4.15267': attribute type 21 has an invalid length. [ 1514.730504][T30349] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15267'. [ 1514.967899][T24225] Bluetooth: hci1: command tx timeout [ 1515.055995][T30272] chnl_net:caif_netlink_parms(): no params data found [ 1515.168537][T30379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15277'. [ 1515.321179][T30272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.329154][T30272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.336512][T30272] bridge_slave_0: entered allmulticast mode [ 1515.345624][T30272] bridge_slave_0: entered promiscuous mode [ 1515.355891][T30272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.363734][T30272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.372050][T30272] bridge_slave_1: entered allmulticast mode [ 1515.381480][T30272] bridge_slave_1: entered promiscuous mode [ 1515.424711][T30272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.438568][T30272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.512428][T30392] netlink: 'syz.4.15280': attribute type 1 has an invalid length. [ 1515.549870][T30272] team0: Port device team_slave_0 added [ 1515.563126][T30272] team0: Port device team_slave_1 added [ 1515.676323][T30395] syzkaller0: entered promiscuous mode [ 1515.684912][T30395] syzkaller0: entered allmulticast mode [ 1515.695248][T30272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1515.702903][T30272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1515.730944][T30272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1515.878378][T30414] net_ratelimit: 13 callbacks suppressed [ 1515.878399][T30414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1517.051157][T24225] Bluetooth: hci1: command tx timeout [ 1518.071953][T30272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1518.079717][T30272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1518.106411][T30272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1518.130642][T30421] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.15287'. [ 1518.197221][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1518.355125][T30272] hsr_slave_0: entered promiscuous mode [ 1518.409191][T30272] hsr_slave_1: entered promiscuous mode [ 1518.443904][T30272] debugfs: 'hsr0' already exists in 'hsr' [ 1518.464682][T30272] Cannot create hsr debugfs directory [ 1518.501516][T30458] syzkaller0: entered promiscuous mode [ 1518.542243][T30458] syzkaller0: entered allmulticast mode [ 1518.681407][T30450] hsr0 speed is unknown, defaulting to 1000 [ 1518.756710][T30450] lo speed is unknown, defaulting to 1000 [ 1518.857593][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1518.900056][T30465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15295'. [ 1518.993857][T30469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15297'. [ 1519.025188][T30469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15297'. [ 1519.056999][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1519.129460][T24225] Bluetooth: hci1: command tx timeout [ 1519.217786][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1519.617094][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1519.625825][T30490] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1519.642651][T30491] netlink: 'syz.4.15303': attribute type 1 has an invalid length. [ 1519.801980][T30491] bond7: entered promiscuous mode [ 1519.809945][T30491] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1519.855748][T30492] bond7: (slave bridge6): making interface the new active one [ 1519.864235][T30492] bridge6: entered promiscuous mode [ 1519.872055][T30492] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 1519.883494][T30467] hsr0 speed is unknown, defaulting to 1000 [ 1519.920868][T30467] lo speed is unknown, defaulting to 1000 [ 1520.047565][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1520.100832][T30272] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1520.139410][T30272] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1520.155219][T30272] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1520.208214][T30272] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1520.277856][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1520.385011][T30272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1520.423225][T30272] 8021q: adding VLAN 0 to HW filter on device team0 [ 1520.439702][T18831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.446986][T18831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.487614][T18831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.494939][T18831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.545927][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1520.867676][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1520.991131][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1521.137455][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1521.182557][T30272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.218346][T24225] Bluetooth: hci1: command tx timeout [ 1521.247287][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1521.301138][T30272] veth0_vlan: entered promiscuous mode [ 1521.333874][T30272] veth1_vlan: entered promiscuous mode [ 1521.372803][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1521.409747][T30272] veth0_macvtap: entered promiscuous mode [ 1521.424463][T30272] veth1_macvtap: entered promiscuous mode [ 1521.449354][T30272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1521.470947][T30272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1521.491201][ T4157] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.509143][ T4157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.537059][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1521.580931][ T4157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.591135][ T4157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.709298][ T4157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1521.717503][T30509] hsr0 speed is unknown, defaulting to 1000 [ 1521.727068][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1521.741675][T30509] lo speed is unknown, defaulting to 1000 [ 1521.748146][T30506] hsr0 speed is unknown, defaulting to 1000 [ 1521.779921][ T4157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1521.837592][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1521.865673][T18831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1521.893068][T18831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1521.967675][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1522.107425][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1522.125074][T30541] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1522.227406][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1522.353111][T30506] lo speed is unknown, defaulting to 1000 [ 1522.592429][T30550] netlink: 'syz.0.15316': attribute type 1 has an invalid length. [ 1522.851976][T30555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15317'. [ 1523.620893][T30564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.657314][T30565] netlink: 'syz.0.15319': attribute type 16 has an invalid length. [ 1523.665292][T30565] netlink: 'syz.0.15319': attribute type 17 has an invalid length. [ 1523.743993][T30564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.291152][T30579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15322'. [ 1524.382181][T30579] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1524.409526][T30579] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 1524.427729][T30579] team0: Failed to send options change via netlink (err -105) [ 1524.443105][T30579] team0: Port device batadv1 added [ 1524.714638][T30597] netlink: 'syz.0.15328': attribute type 12 has an invalid length. [ 1524.727579][T30598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15327'. [ 1524.821366][T30597] bond1: option primary_reselect: invalid value (255) [ 1524.833873][T30597] bond1 (unregistering): Released all slaves [ 1524.860898][T30595] netlink: 'syz.0.15328': attribute type 1 has an invalid length. [ 1524.925480][T30604] macsec1: entered promiscuous mode [ 1525.105800][T30621] tipc: Started in network mode [ 1525.111255][T30621] tipc: Node identity 4a31d27d1533, cluster identity 4711 [ 1525.121213][T30621] tipc: Enabled bearer , priority 0 [ 1525.263518][T30621] syzkaller0: entered promiscuous mode [ 1525.271130][T30621] syzkaller0: entered allmulticast mode [ 1525.281006][T30621] tipc: Resetting bearer [ 1525.407688][T30619] tipc: Resetting bearer [ 1527.479646][T30619] tipc: Disabling bearer [ 1527.496590][T30644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15339'. [ 1527.506038][T30644] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15339'. [ 1527.648329][T21484] tipc: Node number set to 1594020477 [ 1527.661318][T30650] net_ratelimit: 14 callbacks suppressed [ 1527.661339][T30650] openvswitch: netlink: Invalid VLAN frame [ 1527.698330][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1527.866154][T30661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15343'. [ 1527.907134][T30661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15343'. [ 1527.947513][T30661] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15343'. [ 1528.008453][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1528.129212][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1528.156545][T30681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15349'. [ 1528.258075][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1528.441358][T30697] netlink: 'syz.2.15352': attribute type 16 has an invalid length. [ 1528.487006][T30697] netlink: 'syz.2.15352': attribute type 17 has an invalid length. [ 1528.535367][T30691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.581249][T30691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1528.801480][T30697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1528.880215][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1528.943808][T30722] gretap0: left allmulticast mode [ 1528.952320][T30722] gretap0: left promiscuous mode [ 1528.987764][T30722] bridge0: port 1(gretap0) entered disabled state [ 1529.044454][T30722] syz_tun: left allmulticast mode [ 1529.052349][T30722] syz_tun: left promiscuous mode [ 1529.061011][T30722] bridge0: port 2(syz_tun) entered disabled state [ 1529.081708][T30732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1529.100078][T30722] .`: (slave bond_slave_0): Releasing backup interface [ 1529.109199][T30730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15362'. [ 1529.132162][T30722] bond_slave_0: left allmulticast mode [ 1529.142006][T30722] .`: (slave bond_slave_1): Releasing backup interface [ 1529.152528][T30722] bond_slave_1: left allmulticast mode [ 1529.172867][T30722] team0: Port device team_slave_0 removed [ 1529.188878][T30722] team0: Port device team_slave_1 removed [ 1529.195648][T30722] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1529.215354][ T5487] veth1_macvtap: left promiscuous mode [ 1529.277918][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1529.482296][T30752] siw: device registration error -23 [ 1530.111923][T30795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15374'. [ 1530.224767][T30800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1530.265644][T30800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1530.288456][T30800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1530.688090][T30823] --map-set only usable from mangle table [ 1530.711569][T30823] netlink: 'syz.1.15384': attribute type 1 has an invalid length. [ 1530.734186][T30823] netlink: 'syz.1.15384': attribute type 2 has an invalid length. [ 1530.760444][T30823] netlink: 'syz.1.15384': attribute type 1 has an invalid length. [ 1530.789771][T30823] netlink: 'syz.1.15384': attribute type 3 has an invalid length. [ 1530.811428][T30823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15384'. [ 1530.843492][T30830] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.15385'. [ 1531.178408][T30845] netlink: 72 bytes leftover after parsing attributes in process `syz.3.15388'. [ 1531.197804][T30845] netlink: 72 bytes leftover after parsing attributes in process `syz.3.15388'. [ 1531.871389][T30889] netlink: 'syz.0.15400': attribute type 4 has an invalid length. [ 1532.204591][T30900] netlink: 'syz.4.15403': attribute type 30 has an invalid length. [ 1532.879788][T30915] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1532.928872][T30915] bond1 (unregistering): Released all slaves [ 1532.944683][T30943] netlink: 'syz.2.15414': attribute type 1 has an invalid length. [ 1533.019195][T30948] netlink: 'syz.1.15416': attribute type 21 has an invalid length. [ 1533.029186][T15359] net_ratelimit: 22 callbacks suppressed [ 1533.029207][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1533.058118][T30948] IPv6: NLM_F_CREATE should be specified when creating new route [ 1533.066093][T30948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1533.073428][T30948] IPv6: NLM_F_CREATE should be set when creating new route [ 1533.080739][T30948] IPv6: NLM_F_CREATE should be set when creating new route [ 1533.088204][T30948] IPv6: NLM_F_CREATE should be set when creating new route [ 1533.117332][T30948] netlink: 'syz.1.15416': attribute type 21 has an invalid length. [ 1533.149532][T30942] veth0: entered promiscuous mode [ 1533.158596][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1533.177558][T30948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1533.202095][T30942] __nla_validate_parse: 4 callbacks suppressed [ 1533.202118][T30942] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.15415'. [ 1533.230446][T30941] veth0: left promiscuous mode [ 1533.330190][T30957] netlink: 'syz.0.15418': attribute type 25 has an invalid length. [ 1533.358683][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1533.491354][T30967] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.15422'. [ 1533.505572][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1533.632208][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1533.827213][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1533.925402][T30988] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1533.998669][T30992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15429'. [ 1534.019600][T30988] team0: Mode changed to "loadbalance" [ 1534.077719][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1534.158841][T31005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15430'. [ 1534.318061][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1534.472673][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1534.726278][T31039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15441'. [ 1534.841467][T31047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15441'. [ 1534.965096][T31051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15443'. [ 1535.026362][T31052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15443'. [ 1535.052031][T31057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15447'. [ 1535.061942][T31057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15447'. [ 1535.502802][T31088] xt_NFQUEUE: number of total queues is 0 [ 1535.670197][T31096] xt_hashlimit: size too large, truncated to 1048576 [ 1536.138381][T31109] bond4: option miimon: invalid value (18446744073709551585) [ 1536.145839][T31109] bond4: option miimon: allowed values 0 - 2147483647 [ 1536.210108][T31109] bond4 (unregistering): Released all slaves [ 1537.209473][T31135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1537.240271][T31135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1537.825434][T31137] dvmrp0: entered allmulticast mode [ 1537.894574][T31479] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.914865][T31479] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.938991][T31479] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.982083][T31479] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.111245][ T29] audit: type=1800 audit(1773386661.680:12): pid=31152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.15475" name="memory.events" dev="tmpfs" ino=3014 res=0 errno=0 [ 1538.138477][ T4157] net_ratelimit: 13 callbacks suppressed [ 1538.138501][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1538.270368][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1538.297159][T31160] openvswitch: netlink: IP tunnel dst address not specified [ 1538.404705][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1538.549487][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1538.602346][T31176] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1538.640520][T31176] x_tables: duplicate underflow at hook 1 [ 1538.667715][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1538.788327][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1538.897510][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1539.007566][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1539.303254][T31222] __nla_validate_parse: 3 callbacks suppressed [ 1539.303273][T31222] netlink: 6040 bytes leftover after parsing attributes in process `syz.3.15499'. [ 1539.458292][T31227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15500'. [ 1539.508043][T31228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15500'. [ 1539.775102][T31253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15506'. [ 1539.805103][T17132] IPVS: starting estimator thread 0... [ 1539.857193][T31258] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1539.908400][T31257] IPVS: using max 26 ests per chain, 62400 per kthread [ 1539.951994][T31264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15511'. [ 1539.971103][T31264] bridge_slave_1: left allmulticast mode [ 1539.977219][T31264] bridge_slave_1: left promiscuous mode [ 1539.983052][T31264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.000886][T31264] bridge_slave_0: left allmulticast mode [ 1540.006585][T31264] bridge_slave_0: left promiscuous mode [ 1540.014135][T31266] netlink: 27 bytes leftover after parsing attributes in process `syz.0.15512'. [ 1540.027894][T31267] netlink: 27 bytes leftover after parsing attributes in process `syz.0.15512'. [ 1540.085591][T31264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.135842][T31275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15514'. [ 1540.234764][T31280] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1540.382059][ T9700] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1540.398714][ T9700] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1540.417421][ T9700] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1540.434698][ T9700] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1540.448345][ T9700] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1540.566194][T31293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15518'. [ 1540.624488][T31293] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15518'. [ 1540.690173][T31296] syzkaller0: entered promiscuous mode [ 1540.719782][T31296] syzkaller0: entered allmulticast mode [ 1541.065177][T31283] hsr0 speed is unknown, defaulting to 1000 [ 1541.131675][T31283] lo speed is unknown, defaulting to 1000 [ 1541.207914][T31322] RDS: rds_bind could not find a transport for ::ffff:172.20.20.42, load rds_tcp or rds_rdma? [ 1541.675086][T31348] validate_nla: 6 callbacks suppressed [ 1541.675136][T31348] netlink: 'syz.1.15536': attribute type 4 has an invalid length. [ 1541.780857][T31359] IPv6: sit1: Disabled Multicast RS [ 1541.807918][T31362] delete_channel: no stack [ 1541.831051][T31348] .`: renamed from bond0 (while UP) [ 1541.933901][T31364] macvtap0: entered promiscuous mode [ 1541.944349][T31364] veth0_macvtap: left promiscuous mode [ 1542.025071][T31364] macvtap0 (unregistering): left promiscuous mode [ 1542.387432][T31395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1542.395279][T31395] batadv_slave_0: entered promiscuous mode [ 1542.440030][T31283] chnl_net:caif_netlink_parms(): no params data found [ 1542.487278][T24225] Bluetooth: hci0: command tx timeout [ 1542.547380][T31398] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1542.555493][T31400] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1542.780424][T31283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.788511][T31283] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.798406][T31283] bridge_slave_0: entered allmulticast mode [ 1542.813687][T31283] bridge_slave_0: entered promiscuous mode [ 1542.833171][T31283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.851958][T31283] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.879517][T31283] bridge_slave_1: entered allmulticast mode [ 1542.901777][T31283] bridge_slave_1: entered promiscuous mode [ 1542.998950][T31421] netlink: 'syz.3.15555': attribute type 7 has an invalid length. [ 1543.035617][T31283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1543.062616][T31421] netlink: 'syz.3.15555': attribute type 8 has an invalid length. [ 1543.091725][T31283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1543.153706][T31283] team0: Port device team_slave_0 added [ 1543.172242][T31283] team0: Port device team_slave_1 added [ 1543.291280][T31283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1543.325470][T31283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1543.366537][T31283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1543.462269][T31283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1543.477543][T31283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1543.504542][T31283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1543.691520][T31283] hsr_slave_0: entered promiscuous mode [ 1543.699972][T31283] hsr_slave_1: entered promiscuous mode [ 1543.706617][T31283] debugfs: 'hsr0' already exists in 'hsr' [ 1543.717963][T31283] Cannot create hsr debugfs directory [ 1543.928126][T25623] net_ratelimit: 23 callbacks suppressed [ 1543.928150][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1544.350034][T31483] netlink: set zone limit has 4 unknown bytes [ 1544.379248][T31494] __nla_validate_parse: 21 callbacks suppressed [ 1544.379272][T31494] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15573'. [ 1544.463031][T31493] smc: net device team0 applied user defined pnetid SYZ2 [ 1544.527787][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1544.567118][T24225] Bluetooth: hci0: command tx timeout [ 1544.613252][T31507] netlink: 'syz.2.15577': attribute type 1 has an invalid length. [ 1544.763346][T31507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1544.816373][T31517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15578'. [ 1544.845163][T31513] bond2: (slave geneve2): making interface the new active one [ 1544.855813][T31513] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1544.940041][ T4157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.014462][T31522] openvswitch: netlink: Flow key attr not present in new flow. [ 1545.067637][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1545.085535][ T4157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.133195][ T4157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.158808][ T4157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.179976][T31496] hsr0 speed is unknown, defaulting to 1000 [ 1545.203314][T31525] tipc: Failed to obtain node identity [ 1545.215552][T31525] tipc: Enabling of bearer rejected, failed to enable media [ 1545.261047][T31496] lo speed is unknown, defaulting to 1000 [ 1545.267859][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1545.438188][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1545.570894][T31283] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1545.600322][T31283] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1545.628629][T31283] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1545.701888][T31283] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1545.790952][T31541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15586'. [ 1545.811205][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1545.893214][T31548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15585'. [ 1545.936935][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1545.968632][T31548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15585'. [ 1546.016188][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1546.083173][T31283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1546.177900][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1546.194753][T31283] 8021q: adding VLAN 0 to HW filter on device team0 [ 1546.232457][T18831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.239664][T18831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1546.304288][T25623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.311613][T25623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1546.515720][T31557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15589'. [ 1546.647423][T24225] Bluetooth: hci0: command tx timeout [ 1546.744608][T31568] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1547.107075][T31594] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1547.705865][T31600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.713703][T31600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.222930][T31600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1548.729778][T24225] Bluetooth: hci0: command tx timeout [ 1548.893977][T15359] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.925722][T15359] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.000649][T15359] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.037430][T15359] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.090230][T31615] vlan2: entered allmulticast mode [ 1549.093569][T31619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15601'. [ 1549.111050][T31615] hsr0: entered allmulticast mode [ 1549.122076][T31615] hsr_slave_0: entered allmulticast mode [ 1549.128477][T31615] hsr_slave_1: entered allmulticast mode [ 1549.134527][ T4157] net_ratelimit: 7 callbacks suppressed [ 1549.134543][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1549.191417][T31621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15603'. [ 1549.215811][T31283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1549.319639][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1549.440483][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1549.541417][T31638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15608'. [ 1549.559505][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1549.592149][T31644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15610'. [ 1549.641864][T31649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15611'. [ 1549.694649][T31652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15611'. [ 1549.755637][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1549.936582][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1550.028144][T31669] bridge0: port 3(gretap0) entered blocking state [ 1550.035931][T31669] bridge0: port 3(gretap0) entered disabled state [ 1550.048983][T31669] gretap0: entered allmulticast mode [ 1550.059733][T31669] gretap0: entered promiscuous mode [ 1550.104734][T31283] veth0_vlan: entered promiscuous mode [ 1550.155475][T31283] veth1_vlan: entered promiscuous mode [ 1550.170714][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1550.304337][T31283] veth0_macvtap: entered promiscuous mode [ 1550.314504][T31682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15618'. [ 1550.365729][T31283] veth1_macvtap: entered promiscuous mode [ 1550.446377][T31691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15621'. [ 1550.477619][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1550.937166][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1550.998861][ T4157] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.014782][ T4157] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.026880][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1551.035036][ C1] lec:lec_tx_timeout: lec0 [ 1551.078500][ T4157] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.095435][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1551.112455][T31712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15626'. [ 1551.136197][T31283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1551.150527][T15359] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.195592][T31283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1551.257903][ T150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.278289][T15359] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.324962][T15359] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.336696][T31717] netlink: 277 bytes leftover after parsing attributes in process `syz.1.15628'. [ 1551.358863][T15359] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.616548][T31727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15630'. [ 1551.811412][T31480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.833548][T31480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.959547][T31744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15635'. [ 1551.999368][T31480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.033278][T31480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.036551][T31746] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1552.722115][T31789] x_tables: duplicate underflow at hook 1 [ 1554.018944][T31857] netlink: 'syz.2.15669': attribute type 6 has an invalid length. [ 1554.098628][T31854] syzkaller0: entered promiscuous mode [ 1554.104185][T31854] syzkaller0: entered allmulticast mode [ 1554.279055][T31482] net_ratelimit: 22 callbacks suppressed [ 1554.279077][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1554.419095][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1554.569246][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1554.677661][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1554.797819][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1554.861107][T31900] __nla_validate_parse: 2 callbacks suppressed [ 1554.861128][T31900] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15676'. [ 1554.917976][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1555.037972][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1555.146898][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1555.267250][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1555.309991][T31922] delete_channel: no stack [ 1555.317266][T31922] Bluetooth: MGMT ver 1.23 [ 1555.380202][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1555.395417][T31924] netlink: 'syz.2.15686': attribute type 1 has an invalid length. [ 1555.446386][T31924] bond3: entered promiscuous mode [ 1555.457848][T31924] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1555.578880][T31928] bond3: (slave bridge1): making interface the new active one [ 1555.599172][T31928] bridge1: entered promiscuous mode [ 1555.611254][T31928] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1556.184878][T31958] vlan2: entered allmulticast mode [ 1556.206179][T31958] bond0: entered allmulticast mode [ 1556.218195][T31958] bond_slave_0: entered allmulticast mode [ 1556.224214][T31958] bond_slave_1: entered allmulticast mode [ 1556.232165][T31960] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15693'. [ 1556.262975][T31960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1556.296414][T31960] bond_slave_0: left allmulticast mode [ 1556.320022][T31960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1556.352941][T31960] bond_slave_1: left allmulticast mode [ 1556.369134][T31960] bond0 (unregistering): Released all slaves [ 1556.384659][T31961] netlink: 252 bytes leftover after parsing attributes in process `syz.3.15694'. [ 1556.734407][T31990] syzkaller0: entered promiscuous mode [ 1556.741827][T31990] syzkaller0: entered allmulticast mode [ 1556.761824][T31990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15701'. [ 1556.918476][T31998] .`: (slave bond_slave_0): Releasing backup interface [ 1556.936391][T31998] .`: (slave bond_slave_1): Releasing backup interface [ 1556.952972][T31998] team0: Port device team_slave_0 removed [ 1556.961725][T31998] team0: Port device team_slave_1 removed [ 1557.367664][T24225] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1559.287528][ T150] net_ratelimit: 34 callbacks suppressed [ 1559.287552][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1559.408000][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1559.517025][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1559.627340][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1559.666010][T31987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1559.739931][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1559.868823][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1559.998107][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1560.118194][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1560.147946][T32025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15713'. [ 1560.337798][T32040] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15719'. [ 1560.367079][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1560.477306][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1560.659058][T32062] team0 (unregistering): Port device batadv1 removed [ 1561.161379][T32082] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1561.237084][T32085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15730'. [ 1561.367008][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1561.453296][T32092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15727'. [ 1561.465758][T32092] netlink: 'syz.1.15727': attribute type 8 has an invalid length. [ 1561.536400][T32092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15727'. [ 1561.575177][T32092] netlink: 'syz.1.15727': attribute type 8 has an invalid length. [ 1561.596447][T32092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15727'. [ 1561.667734][T32092] netlink: 'syz.1.15727': attribute type 8 has an invalid length. [ 1561.691058][T32092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15727'. [ 1561.702687][T32092] netlink: 'syz.1.15727': attribute type 8 has an invalid length. [ 1561.756036][T32092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15727'. [ 1561.767808][T32108] netlink: 'syz.3.15738': attribute type 32 has an invalid length. [ 1561.784973][T32108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15738'. [ 1561.818643][T32092] netlink: 'syz.1.15727': attribute type 8 has an invalid length. [ 1561.848802][T32108] bond1: option coupled_control: invalid value (128) [ 1561.860289][T32108] bond1 (unregistering): Released all slaves [ 1561.955267][T32117] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15741'. [ 1562.223478][T32124] netlink: 'syz.3.15743': attribute type 1 has an invalid length. [ 1562.232816][T32124] netlink: 'syz.3.15743': attribute type 1 has an invalid length. [ 1562.597852][T32149] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1562.620205][T32149] bond1 (unregistering): Released all slaves [ 1563.442609][T32184] nbd: must specify a device to reconfigure [ 1565.096471][T32191] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1565.118149][T25623] net_ratelimit: 18 callbacks suppressed [ 1565.118175][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1565.228345][T32197] netlink: 'syz.3.15759': attribute type 29 has an invalid length. [ 1565.236485][T32197] __nla_validate_parse: 1 callbacks suppressed [ 1565.236506][T32197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15759'. [ 1565.307814][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1565.409335][T32202] netlink: 'syz.0.15761': attribute type 12 has an invalid length. [ 1565.881358][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1565.903344][T32240] netlink: 13 bytes leftover after parsing attributes in process `syz.3.15770'. [ 1566.028940][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1566.125158][T32249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15774'. [ 1566.218594][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1566.337783][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1566.425492][T32262] netlink: 224 bytes leftover after parsing attributes in process `syz.3.15776'. [ 1566.447440][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1566.557694][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1566.615923][T32270] validate_nla: 3 callbacks suppressed [ 1566.615945][T32270] netlink: 'syz.3.15780': attribute type 3 has an invalid length. [ 1566.673492][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1566.787532][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1566.868810][T32282] xt_connbytes: Forcing CT accounting to be enabled [ 1566.882986][T32282] netlink: 'syz.4.15783': attribute type 1 has an invalid length. [ 1566.895623][T32282] netlink: 'syz.4.15783': attribute type 11 has an invalid length. [ 1566.904645][T32282] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15783'. [ 1567.003433][T32288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15785'. [ 1567.070588][T32288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15785'. [ 1567.200486][T32291] syzkaller0: entered promiscuous mode [ 1567.206134][T32291] syzkaller0: entered allmulticast mode [ 1567.240270][T32294] ip6t_srh: unknown srh match flags 4000 [ 1567.259529][T32298] netlink: 52 bytes leftover after parsing attributes in process `syz.4.15787'. [ 1567.281831][T32298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.289290][T32298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.306690][T32298] netlink: 76 bytes leftover after parsing attributes in process `syz.4.15787'. [ 1567.321077][T32298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.328389][T32298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1567.335913][T32298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.343187][T32298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1567.355460][T32292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15786'. [ 1567.362210][T32298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.371929][T32298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.486412][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880930e3000: rx timeout, send abort [ 1567.989567][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880930e2000: rx timeout, send abort [ 1567.998652][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880930e3000: abort rx timeout. Force session deactivation [ 1568.499854][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880930e2000: abort rx timeout. Force session deactivation [ 1569.769987][T32303] netlink: 'syz.4.15790': attribute type 3 has an invalid length. [ 1570.181127][T32349] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 1570.227435][T15359] net_ratelimit: 9 callbacks suppressed [ 1570.227457][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1570.271342][T32354] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 1570.285091][T32362] openvswitch: netlink: IP tunnel dst address not specified [ 1570.366942][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1570.471059][T32376] syzkaller0: entered promiscuous mode [ 1570.476607][T32376] syzkaller0: entered allmulticast mode [ 1570.527829][T32378] netlink: 'syz.0.15812': attribute type 10 has an invalid length. [ 1570.562063][T32378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1570.581827][T32378] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1570.617445][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1570.727660][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1570.837220][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1570.948016][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1571.058684][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1571.167960][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1575.237156][T25623] net_ratelimit: 36 callbacks suppressed [ 1575.237181][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1575.357653][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1575.467640][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1575.577269][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1575.687367][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1575.797512][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1575.907447][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1576.017329][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1576.127448][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1576.237744][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1578.807008][ T9700] Bluetooth: hci4: command 0x0406 tx timeout [ 1580.307688][ T150] net_ratelimit: 36 callbacks suppressed [ 1580.307712][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1580.427569][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1580.537684][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1580.648002][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1580.787884][T32391] syz_tun: entered promiscuous mode [ 1580.797764][T32391] macvtap1: entered promiscuous mode [ 1580.816918][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1580.839847][T32398] __nla_validate_parse: 6 callbacks suppressed [ 1580.839869][T32398] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15814'. [ 1580.898624][T32392] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15814'. [ 1580.939755][T32401] netlink: 2 bytes leftover after parsing attributes in process `syz.2.15816'. [ 1580.967974][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1581.080965][T32414] tipc: Started in network mode [ 1581.090911][T32414] tipc: Node identity ac14142f, cluster identity 4711 [ 1581.104624][T32414] tipc: New replicast peer: 0.0.0.0 [ 1581.112120][T32414] tipc: Enabled bearer , priority 10 [ 1581.135260][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1581.143541][T32414] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0001 [ 1581.248704][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1581.403386][T32422] syzkaller0: entered promiscuous mode [ 1581.411776][T32422] syzkaller0: entered allmulticast mode [ 1581.431629][T32435] bridge1: entered promiscuous mode [ 1581.441092][T32435] bridge1: entered allmulticast mode [ 1581.580341][T32442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15831'. [ 1581.599489][T32443] netlink: 'syz.2.15830': attribute type 2 has an invalid length. [ 1581.609154][T32443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15830'. [ 1581.891507][T32454] netlink: 52 bytes leftover after parsing attributes in process `syz.4.15834'. [ 1583.498702][T32440] bridge_slave_0 (unregistering): left allmulticast mode [ 1583.505874][T32440] bridge_slave_0 (unregistering): left promiscuous mode [ 1583.513332][T32440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.561387][T21496] tipc: Node number set to 2886997039 [ 1583.600196][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1583.737256][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1584.226116][T32504] netlink: 'syz.2.15847': attribute type 4 has an invalid length. [ 1584.279115][T32506] netlink: 272 bytes leftover after parsing attributes in process `syz.1.15848'. [ 1584.351107][T32506] netlink: 256 bytes leftover after parsing attributes in process `syz.1.15848'. [ 1584.537449][T32507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15848'. [ 1584.856574][T32527] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.15855'. [ 1585.090926][T32542] syzkaller1: entered promiscuous mode [ 1585.119361][T32542] syzkaller1: entered allmulticast mode [ 1585.214690][T32550] netlink: 'syz.1.15860': attribute type 5 has an invalid length. [ 1585.232675][T32550] geneve2: entered promiscuous mode [ 1585.240424][T32550] geneve2: entered allmulticast mode [ 1585.251848][T15359] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1585.262407][T15359] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1585.278102][T15359] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1585.309880][T15359] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1585.347541][ T150] net_ratelimit: 12 callbacks suppressed [ 1585.347563][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1585.535920][T32562] tipc: MTU too low for tipc bearer [ 1585.549227][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1585.734646][T32576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.744068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.858871][T17132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.061563][T32594] veth1_macvtap: left promiscuous mode [ 1586.078055][T32594] macsec0: entered promiscuous mode [ 1586.090338][T32594] macsec0: entered allmulticast mode [ 1586.107787][T32603] __nla_validate_parse: 3 callbacks suppressed [ 1586.107828][T32603] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15874'. [ 1586.218561][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1586.296613][T32612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15877'. [ 1586.299915][T32611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1586.387469][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1586.416487][T32622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1586.492895][T32624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1586.527461][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1586.604119][T32627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1586.687493][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1586.722167][T32637] syzkaller0: entered promiscuous mode [ 1586.742981][T32637] syzkaller0: entered allmulticast mode [ 1586.797481][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1586.828688][T32645] bond0: entered promiscuous mode [ 1586.833802][T32645] bond_slave_0: entered promiscuous mode [ 1586.840681][T32645] bond_slave_1: entered promiscuous mode [ 1586.846575][T32645] bond0: entered allmulticast mode [ 1586.878490][T32645] bond_slave_0: entered allmulticast mode [ 1586.884313][T32645] bond_slave_1: entered allmulticast mode [ 1586.912159][T32645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1587.128135][T32658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15888'. [ 1587.150535][T32658] netlink: 120 bytes leftover after parsing attributes in process `syz.0.15888'. [ 1587.177804][T32658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15888'. [ 1587.216011][T32663] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1587.348383][T32667] Bluetooth: MGMT ver 1.23 [ 1587.423008][T32670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15893'. [ 1587.432741][T32670] netlink: 'syz.2.15893': attribute type 5 has an invalid length. [ 1587.442726][T32670] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15893'. [ 1587.471798][T32670] geneve3: entered promiscuous mode [ 1587.478729][T32670] geneve3: entered allmulticast mode [ 1587.486060][T25623] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1587.500717][T25623] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1587.510877][T25623] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1587.553069][T25623] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1587.570432][T32679] netlink: 'syz.3.15894': attribute type 4 has an invalid length. [ 1587.622504][T32683] netlink: 'syz.3.15894': attribute type 4 has an invalid length. [ 1587.888889][T32700] syzkaller0: entered promiscuous mode [ 1587.895946][T32700] syzkaller0: entered allmulticast mode [ 1587.924737][T32702] netlink: 'syz.2.15899': attribute type 12 has an invalid length. [ 1587.934252][T32702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15899'. [ 1588.017906][ T150] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1588.028763][ T150] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1588.038235][ T150] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1588.058097][ T150] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1588.259591][T32721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15906'. [ 1588.297039][T32721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15906'. [ 1588.317154][T32721] netlink: 'syz.1.15906': attribute type 15 has an invalid length. [ 1588.405062][T32721] netlink: 'syz.1.15906': attribute type 15 has an invalid length. [ 1589.170718][T32766] atomic_op ffff888056340998 conn xmit_atomic 0000000000000000 [ 1589.319324][ T309] pim6reg527: entered allmulticast mode [ 1589.447547][ T9700] Bluetooth: hci2: command 0x0401 tx timeout [ 1589.447557][T24225] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1589.942962][ T347] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1589.955509][ T347] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1590.176257][ T353] bond4: entered promiscuous mode [ 1590.187767][ T353] netlink: 'syz.2.15937': attribute type 1 has an invalid length. [ 1590.349010][ T365] netlink: 'syz.2.15938': attribute type 3 has an invalid length. [ 1590.364987][ T362] netlink: 'syz.4.15936': attribute type 1 has an invalid length. [ 1590.447641][T25623] net_ratelimit: 33 callbacks suppressed [ 1590.447665][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1590.474822][ T370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1590.577533][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1590.640118][ T374] sctp: [Deprecated]: syz.2.15940 (pid 374) Use of int in maxseg socket option. [ 1590.640118][ T374] Use struct sctp_assoc_value instead [ 1590.701501][ T376] vlan2: entered promiscuous mode [ 1590.736959][ T376] vlan2: entered allmulticast mode [ 1590.742724][ T376] hsr_slave_1: entered allmulticast mode [ 1590.779276][ T379] veth1_macvtap: left promiscuous mode [ 1590.792997][ T376] netlink: 'syz.4.15942': attribute type 1 has an invalid length. [ 1590.868620][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1590.968298][T21479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.977007][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1591.048534][T21500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.086908][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1591.216957][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1591.337322][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1591.439784][ T424] __nla_validate_parse: 12 callbacks suppressed [ 1591.439804][ T424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15954'. [ 1591.553748][ T426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15957'. [ 1591.628984][ T426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15957'. [ 1591.652720][ T433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15957'. [ 1591.676394][ T434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15958'. [ 1591.741044][ T426] xt_cgroup: invalid path, errno=-2 [ 1591.813882][ T441] syzkaller0: entered promiscuous mode [ 1591.832100][ T441] syzkaller0: entered allmulticast mode [ 1592.002178][ T457] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15965'. [ 1592.231954][ T470] 8021q: VLANs not supported on wg2 [ 1592.441923][ T473] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 1592.495519][T21500] IPVS: starting estimator thread 0... [ 1592.591330][ T479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15971'. [ 1592.600904][ T476] IPVS: using max 28 ests per chain, 67200 per kthread [ 1592.711880][ T485] IPv6: sit2: Disabled Multicast RS [ 1592.949740][ T492] validate_nla: 3 callbacks suppressed [ 1592.949761][ T492] netlink: 'syz.3.15976': attribute type 1 has an invalid length. [ 1592.964559][ T492] netlink: 'syz.3.15976': attribute type 1 has an invalid length. [ 1594.839372][ T447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1594.849227][ T451] netlink: 92 bytes leftover after parsing attributes in process `syz.2.15964'. [ 1594.861299][ T451] netlink: 'syz.2.15964': attribute type 1 has an invalid length. [ 1594.917973][ T501] netlink: 'syz.3.15977': attribute type 1 has an invalid length. [ 1594.925863][ T501] netlink: 236 bytes leftover after parsing attributes in process `syz.3.15977'. [ 1595.112453][ T517] netlink: 'syz.2.15982': attribute type 21 has an invalid length. [ 1595.131310][ T517] netlink: 152 bytes leftover after parsing attributes in process `syz.2.15982'. [ 1595.329281][ T531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1595.345780][ T531] batadv_slave_0: entered promiscuous mode [ 1595.539383][ T150] net_ratelimit: 42 callbacks suppressed [ 1595.539408][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1595.677248][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1595.837681][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1595.946857][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1596.068241][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1596.183561][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1596.252614][ T582] netlink: 'syz.3.16000': attribute type 1 has an invalid length. [ 1596.343288][ T582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1596.456892][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1596.575326][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1596.630448][ T609] __nla_validate_parse: 3 callbacks suppressed [ 1596.630469][ T609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16008'. [ 1596.694005][ T609] netlink: 'syz.4.16008': attribute type 1 has an invalid length. [ 1596.698070][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1596.724064][ T609] netlink: 'syz.4.16008': attribute type 1 has an invalid length. [ 1596.755309][ T613] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16008'. [ 1596.816899][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1597.057595][ T628] 8021q: VLANs not supported on ip6tnl0 [ 1597.120271][ T643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16020'. [ 1597.169460][ T647] tipc: Started in network mode [ 1597.174549][ T647] tipc: Node identity ac141441, cluster identity 4711 [ 1597.186585][ T647] tipc: Enabled bearer , priority 10 [ 1597.229750][ T648] tipc: Enabling of bearer rejected, already enabled [ 1597.323819][ T656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16022'. [ 1597.451838][ T150] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 1597.598945][ T670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16028'. [ 1597.615342][ T671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16027'. [ 1597.625777][ T671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16027'. [ 1597.741648][ T676] netlink: 300 bytes leftover after parsing attributes in process `syz.0.16030'. [ 1597.772933][ T150] bond2 (unregistering): (slave bridge0): Releasing backup interface [ 1597.785586][ T150] bridge0 (unregistering): left promiscuous mode [ 1597.972822][ T150] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 1597.981689][ T150] bridge4 (unregistering): left promiscuous mode [ 1598.072062][ T150] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 1598.081211][ T150] bridge6 (unregistering): left promiscuous mode [ 1598.132633][ T150] .` (unregistering): Released all slaves [ 1598.145147][ T150] bond1 (unregistering): (slave veth3): Releasing active interface [ 1598.154964][ T150] bond1 (unregistering): Released all slaves [ 1598.171976][ T150] bond2 (unregistering): Released all slaves [ 1598.191376][ T150] bond3 (unregistering): Released all slaves [ 1598.209437][ T150] bond4 (unregistering): Released all slaves [ 1598.229672][ T150] bond5 (unregistering): Released all slaves [ 1598.254379][ T150] bond0 (unregistering): Released all slaves [ 1598.281010][ T150] bond6 (unregistering): Released all slaves [ 1598.296529][ T150] bond7 (unregistering): Released all slaves [ 1598.314453][ T150] bond8 (unregistering): Released all slaves [ 1598.397984][T17144] tipc: Node number set to 2886997057 [ 1598.561052][ T150] tipc: Disabling bearer [ 1598.575872][ T150] tipc: Disabling bearer [ 1598.635856][ T150] tipc: Left network mode [ 1598.810059][ T150] IPVS: stopping backup sync thread 21829 ... [ 1598.961357][ T709] netlink: 68 bytes leftover after parsing attributes in process `syz.3.16040'. [ 1599.172599][ T723] IPVS: set_ctl: invalid protocol: 4 172.20.20.45:20000 [ 1599.273758][ T719] gre1: entered promiscuous mode [ 1599.279789][ T719] gre1: entered allmulticast mode [ 1600.442355][ T778] syzkaller0: entered promiscuous mode [ 1600.449060][ T778] syzkaller0: entered allmulticast mode [ 1600.743767][ T760] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1601.134896][ T819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16064'. [ 1601.929081][T24225] Bluetooth: hci4: command 0x0406 tx timeout [ 1602.836519][ T808] smc: removing net device team0 with user defined pnetid SYZ2 [ 1602.854372][ T808] team0 (unregistering): Port device team_slave_0 removed [ 1602.864461][ T808] team0 (unregistering): Port device team_slave_1 removed [ 1602.897797][ T150] hsr_slave_0: left promiscuous mode [ 1602.912993][ T150] hsr_slave_1: left promiscuous mode [ 1602.950532][ T821] net_ratelimit: 14 callbacks suppressed [ 1602.950553][ T821] sock: sock_set_timeout: `syz.3.16065' (pid 821) tries to set negative timeout [ 1603.604844][ T833] syzkaller0: entered promiscuous mode [ 1603.636913][ T833] syzkaller0: entered allmulticast mode [ 1603.734292][ T846] __nla_validate_parse: 1 callbacks suppressed [ 1603.734315][ T846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16069'. [ 1603.769209][ T851] xt_hashlimit: size too large, truncated to 1048576 [ 1603.778098][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1603.889111][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1603.984978][ T150] IPVS: stop unused estimator thread 0... [ 1604.016218][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1604.156916][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1604.267710][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1604.379491][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1604.419467][ T879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16078'. [ 1604.489895][ T881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1604.519607][ T881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1604.539862][ T881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1604.637917][ T886] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1604.729909][ T886] bond5: (slave lo): Enslaving as an active interface with an up link [ 1604.760125][ T886] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1604.858160][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1604.868626][ T902] netlink: 'syz.0.16081': attribute type 12 has an invalid length. [ 1605.024039][ T910] netlink: 'syz.1.16085': attribute type 28 has an invalid length. [ 1605.043146][ T902] bond4: option primary_reselect: invalid value (255) [ 1605.061447][ T910] netlink: 'syz.1.16085': attribute type 3 has an invalid length. [ 1605.073178][ T902] bond4 (unregistering): Released all slaves [ 1605.097997][ T910] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16085'. [ 1605.157028][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1605.353780][ T940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16090'. [ 1605.391111][ T933] syzkaller0: entered promiscuous mode [ 1605.398713][ T933] syzkaller0: entered allmulticast mode [ 1605.398753][ T939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16090'. [ 1605.422226][ T942] netlink: 72 bytes leftover after parsing attributes in process `syz.0.16091'. [ 1605.434595][ T943] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16088'. [ 1605.444212][ T942] tipc: Enabling of bearer rejected, failed to enable media [ 1605.533274][ T953] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1605.761676][ T964] netlink: 'syz.4.16097': attribute type 1 has an invalid length. [ 1605.894716][ T958] tunl0: entered promiscuous mode [ 1605.901560][ T958] netlink: 'syz.1.16095': attribute type 3 has an invalid length. [ 1605.912739][ T958] netlink: 9 bytes leftover after parsing attributes in process `syz.1.16095'. [ 1605.923786][ T960] team_slave_0: entered promiscuous mode [ 1605.932929][ T960] team_slave_0: entered allmulticast mode [ 1606.045584][ T964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1606.054036][ T977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16099'. [ 1606.079075][ T981] netlink: 'syz.1.16100': attribute type 10 has an invalid length. [ 1606.102297][ T970] vlan3: entered promiscuous mode [ 1606.107883][ T970] bond1: entered promiscuous mode [ 1606.113187][ T970] vlan3: entered allmulticast mode [ 1606.118935][ T970] bond1: entered allmulticast mode [ 1606.164594][ T971] bond1: (slave bridge2): making interface the new active one [ 1606.183058][ T971] bridge2: entered promiscuous mode [ 1606.193572][ T971] bridge2: entered allmulticast mode [ 1606.201204][ T971] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1606.211290][ T960] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16096'. [ 1606.502963][ T1000] netlink: 'syz.3.16106': attribute type 5 has an invalid length. [ 1606.594642][ T1006] syzkaller0: entered promiscuous mode [ 1606.616300][ T1006] syzkaller0: entered allmulticast mode [ 1606.788674][ T1019] netlink: 'syz.0.16111': attribute type 23 has an invalid length. [ 1606.801669][T31477] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1606.816947][T31477] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1606.838893][T31477] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1606.858284][T31477] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1606.975351][ T1021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1607.216420][ T1043] netlink: 'syz.0.16119': attribute type 5 has an invalid length. [ 1607.308223][ T1051] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1607.334022][ T1051] bond6 (unregistering): Released all slaves [ 1607.460438][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1607.768342][ T1087] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1607.782268][ T1087] gretap1: entered promiscuous mode [ 1607.790763][ T1087] gretap1: entered allmulticast mode [ 1607.854488][ T1086] sit1: entered promiscuous mode [ 1607.875637][ T1086] sit1: entered allmulticast mode [ 1607.889067][ T1094] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 1607.957546][T25623] net_ratelimit: 46 callbacks suppressed [ 1607.957568][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1608.127056][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1608.269148][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1608.378868][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1608.467333][ T1130] syzkaller0: entered promiscuous mode [ 1608.472889][ T1130] syzkaller0: entered allmulticast mode [ 1608.497437][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1608.692229][ T1137] bond2 (unregistering): Released all slaves [ 1608.814482][ T1144] syz_tun: entered promiscuous mode [ 1608.820160][ T1144] macvtap0: entered promiscuous mode [ 1608.844207][ T1144] syz_tun: left promiscuous mode [ 1609.018402][ T1152] veth3: entered allmulticast mode [ 1609.037445][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1609.119362][ T1160] __nla_validate_parse: 16 callbacks suppressed [ 1609.119384][ T1160] netlink: 104 bytes leftover after parsing attributes in process `syz.0.16148'. [ 1609.152154][ T1160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16148'. [ 1609.167578][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1609.288035][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1609.470593][ T1186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1609.487716][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1609.528576][ T9700] Bluetooth: hci2: command 0x0401 tx timeout [ 1609.552402][ T1188] netlink: 'syz.1.16158': attribute type 4 has an invalid length. [ 1609.990026][ T1217] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1610.006518][ T1217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16169'. [ 1610.120012][ T1223] pim6reg1: entered promiscuous mode [ 1610.125599][ T1223] pim6reg1: entered allmulticast mode [ 1610.137020][ T1223] validate_nla: 1 callbacks suppressed [ 1610.137040][ T1223] netlink: 'syz.3.16171': attribute type 4 has an invalid length. [ 1610.191788][ T1224] netlink: 'syz.3.16171': attribute type 4 has an invalid length. [ 1610.379432][ T1235] x_tables: duplicate underflow at hook 1 [ 1610.441424][ T1241] syzkaller0: entered promiscuous mode [ 1610.447272][ T1241] syzkaller0: entered allmulticast mode [ 1610.854867][ T1265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16181'. [ 1611.035173][ T1276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16187'. [ 1611.093519][ T1278] tipc: Enabled bearer , priority 0 [ 1611.274406][ T1287] syzkaller0: entered promiscuous mode [ 1611.280913][ T1287] syzkaller0: entered allmulticast mode [ 1611.287981][ T1287] tipc: Resetting bearer [ 1611.423395][ T4157] tipc: Resetting bearer [ 1611.433073][ T1287] tipc: Resetting bearer [ 1612.890111][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 1612.898226][ C1] lec:lec_tx_timeout: lec0 [ 1613.449248][ T1287] tipc: Disabling bearer [ 1613.460694][ T1298] tipc: Enabling of bearer rejected, already enabled [ 1613.497674][ T4157] net_ratelimit: 15 callbacks suppressed [ 1613.497697][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1613.647218][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1613.734223][ T1336] netlink: 84 bytes leftover after parsing attributes in process `syz.2.16198'. [ 1613.761932][ T1336] netlink: 84 bytes leftover after parsing attributes in process `syz.2.16198'. [ 1613.792985][ T1336] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1613.859655][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1613.980586][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1614.062966][ T1355] netlink: 'syz.1.16206': attribute type 3 has an invalid length. [ 1614.072930][ T1355] netlink: 'syz.1.16206': attribute type 3 has an invalid length. [ 1614.093200][ T1360] Bluetooth: MGMT ver 1.23 [ 1614.147869][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1614.175825][ T1366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16210'. [ 1614.268748][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1614.377039][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1614.492292][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1614.637385][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1615.370822][ T1420] netlink: 208 bytes leftover after parsing attributes in process `syz.3.16223'. [ 1615.440458][ T1423] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16225'. [ 1615.905290][ T1446] tap0: tun_chr_ioctl cmd 1074025672 [ 1615.927434][ T1446] tap0: ignored: set checksum disabled [ 1615.935199][ T1452] xt_cluster: node mask cannot exceed total number of nodes [ 1616.092895][ T1457] batadv_slave_0: entered promiscuous mode [ 1616.222145][ T1471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16243'. [ 1616.652205][ T1500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16249'. [ 1616.794073][ T1507] bond2 (unregistering): Released all slaves [ 1616.844290][ T1513] netlink: 32 bytes leftover after parsing attributes in process `syz.3.16252'. [ 1617.151929][ T1528] netlink: 'syz.2.16256': attribute type 21 has an invalid length. [ 1617.366640][ T1492] lec:lec_atm_close: lec0: Shut down! [ 1618.527615][T31480] net_ratelimit: 32 callbacks suppressed [ 1618.527640][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1618.653079][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1618.767562][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1618.877149][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1618.987006][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1619.097056][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1619.207509][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1619.317178][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1619.427437][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1619.455156][ T1487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1619.558273][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1619.678806][ T1566] netlink: 'syz.3.16264': attribute type 4 has an invalid length. [ 1619.699459][ T1564] atomic_op ffff88807c092998 conn xmit_atomic 0000000000000000 [ 1619.718942][ T1566] netlink: 224 bytes leftover after parsing attributes in process `syz.3.16264'. [ 1619.975960][ T1584] netlink: 'syz.2.16272': attribute type 4 has an invalid length. [ 1620.054755][ T1598] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 1620.268431][ T1604] netlink: 'syz.4.16273': attribute type 1 has an invalid length. [ 1620.372472][ T1604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16273'. [ 1620.385003][ T1604] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1620.460571][ T1604] bond2: (slave dummy0): making interface the new active one [ 1620.513920][ T1609] netlink: 14 bytes leftover after parsing attributes in process `syz.4.16273'. [ 1620.550375][ T1604] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1620.602340][ T1609] bond2: (slave dummy0): Releasing active interface [ 1620.831053][T31477] tipc: Subscription rejected, illegal request [ 1621.018191][ T1650] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16289'. [ 1621.130057][ T1658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16292'. [ 1621.320901][ T1667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16295'. [ 1621.350731][ T1667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16295'. [ 1621.463702][ T1678] netlink: 'syz.1.16299': attribute type 1 has an invalid length. [ 1621.492324][ T1670] syzkaller0: entered promiscuous mode [ 1621.507982][ T1670] syzkaller0: entered allmulticast mode [ 1621.521519][ T1682] xt_HMARK: proto mask must be zero with L3 mode [ 1621.727336][ T1691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16302'. [ 1621.748114][ T1691] netlink: 'syz.0.16302': attribute type 1 has an invalid length. [ 1622.248286][T24225] Bluetooth: hci2: command 0x0401 tx timeout [ 1622.889815][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5530 ms [ 1622.897925][ C1] lec:lec_tx_timeout: lec0 [ 1623.683809][ T1691] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1623.696134][ T1700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16303'. [ 1623.710833][ T4157] net_ratelimit: 15 callbacks suppressed [ 1623.710886][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1623.850944][ T1709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16306'. [ 1623.870793][T18831] bond1: (slave bridge5): failed to get link speed/duplex [ 1624.017534][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1624.126864][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1624.245390][ T1734] macvtap0: entered promiscuous mode [ 1624.281386][ T1734] macvtap0 (unregistering): left promiscuous mode [ 1624.326437][ T1740] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 1624.337296][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1624.373212][ T1740] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1624.467619][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1624.562968][T21496] IPVS: starting estimator thread 0... [ 1624.576932][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1624.591056][ T1753] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 1624.599770][ T1753] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1624.691649][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1624.699774][ T1754] IPVS: using max 27 ests per chain, 64800 per kthread [ 1624.817897][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1624.859962][ T1763] __nla_validate_parse: 3 callbacks suppressed [ 1624.859989][ T1763] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.16324'. [ 1624.938043][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1624.967506][ T1763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16324'. [ 1625.650382][ T1802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16333'. [ 1625.678744][ T1802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16333'. [ 1625.963865][ T1815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16339'. [ 1626.143368][ T1828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16341'. [ 1626.199337][ T1830] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16341'. [ 1626.209765][ T1828] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1626.463699][ T1848] veth0: entered promiscuous mode [ 1626.504203][ T1848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16347'. [ 1626.824664][ T1864] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:0 [ 1626.953879][ T1875] pim6reg527: entered allmulticast mode [ 1626.960087][ T1875] netlink: 'syz.0.16356': attribute type 4 has an invalid length. [ 1626.968841][ T1875] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16356'. [ 1627.061604][ T1882] syzkaller0: entered promiscuous mode [ 1627.067845][ T1882] syzkaller0: entered allmulticast mode [ 1627.253029][ T1899] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16363'. [ 1627.357399][ T1895] syzkaller0: entered promiscuous mode [ 1627.373169][ T1895] syzkaller0: entered allmulticast mode [ 1627.425368][ T1906] netlink: 'syz.3.16365': attribute type 21 has an invalid length. [ 1627.438359][ T1906] netlink: 'syz.3.16365': attribute type 5 has an invalid length. [ 1627.863953][ T1930] netlink: 'syz.3.16372': attribute type 7 has an invalid length. [ 1628.106188][ T1941] netlink: 'syz.3.16375': attribute type 10 has an invalid length. [ 1628.185522][ T1941] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1628.201421][ T1941] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1628.307888][ T1941] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1628.391401][ T1944] syzkaller0: entered promiscuous mode [ 1628.397778][ T1944] syzkaller0: entered allmulticast mode [ 1628.735438][ T1978] netlink: 'syz.2.16385': attribute type 28 has an invalid length. [ 1628.753951][ T1978] netlink: 'syz.2.16385': attribute type 3 has an invalid length. [ 1628.817503][T15359] net_ratelimit: 28 callbacks suppressed [ 1628.817525][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1628.977777][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1629.089447][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1629.209329][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1629.367791][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1629.525928][ T2024] netlink: 'syz.3.16396': attribute type 16 has an invalid length. [ 1629.537095][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1629.647267][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1629.768222][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1629.878372][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1629.987588][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1629.997175][ T2055] __nla_validate_parse: 16 callbacks suppressed [ 1629.997194][ T2055] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.16405'. [ 1630.185033][ T2062] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1630.235020][ T2062] bond3 (unregistering): Released all slaves [ 1630.439061][ T2069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16410'. [ 1630.537964][ T2069] syzkaller0: entered promiscuous mode [ 1630.554237][ T2069] syzkaller0: entered allmulticast mode [ 1630.760487][ T2102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16419'. [ 1631.112081][ T2112] netlink: 'syz.0.16417': attribute type 1 has an invalid length. [ 1631.131535][ T2112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16417'. [ 1633.669986][ T2125] netlink: 88 bytes leftover after parsing attributes in process `syz.3.16421'. [ 1633.838572][ T2137] netlink: 'syz.0.16426': attribute type 9 has an invalid length. [ 1633.846619][ T2137] netlink: 'syz.0.16426': attribute type 11 has an invalid length. [ 1633.856163][ T2137] netlink: 'syz.0.16426': attribute type 12 has an invalid length. [ 1633.868682][ T2138] delete_channel: no stack [ 1633.873470][ T2137] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.16426'. [ 1633.875548][T31480] net_ratelimit: 5 callbacks suppressed [ 1633.875594][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1633.884657][ T2137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16426'. [ 1633.919790][ T2141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16427'. [ 1634.028227][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1634.227162][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1634.395311][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1634.526934][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1634.552330][ T2172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1634.630456][ T2176] netlink: 'syz.3.16441': attribute type 1 has an invalid length. [ 1634.639828][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1634.684515][ T2176] bond3: entered promiscuous mode [ 1634.690613][ T2176] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1634.709978][ T2182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16442'. [ 1634.754394][ T2182] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16442'. [ 1634.805010][ T2176] bond3: (slave bridge4): making interface the new active one [ 1634.830218][ T2176] bridge4: entered promiscuous mode [ 1634.842397][ T2176] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 1634.887901][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1635.007792][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1635.118040][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1635.127109][T28448] Bluetooth: hci3: command 0x0406 tx timeout [ 1635.134374][T28448] Bluetooth: hci1: command 0x0406 tx timeout [ 1635.198374][ T2207] netlink: 'syz.3.16451': attribute type 20 has an invalid length. [ 1635.227902][ T2207] __nla_validate_parse: 1 callbacks suppressed [ 1635.227925][ T2207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16451'. [ 1635.320294][T31477] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1635.330677][ T2205] x_tables: duplicate underflow at hook 1 [ 1635.334469][T31477] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1635.359771][ T2215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16452'. [ 1635.463989][ T2217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16453'. [ 1635.505596][ T2205] bond0: option all_slaves_active: invalid value (9) [ 1635.739937][ T2205] bond0 (unregistering): Released all slaves [ 1635.834770][ T2209] udevd[2209]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1635.890416][T31477] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1635.903491][ T2210] udevd[2210]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1636.067385][ T2246] syzkaller0: entered promiscuous mode [ 1636.078125][ T2246] syzkaller0: entered allmulticast mode [ 1636.134554][ T2255] netlink: 288 bytes leftover after parsing attributes in process `syz.4.16459'. [ 1636.142397][ T2254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16460'. [ 1638.267565][ T2275] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1638.351045][ T2281] netlink: 256 bytes leftover after parsing attributes in process `syz.2.16468'. [ 1638.422645][ T2286] syz_tun: entered allmulticast mode [ 1638.448063][ T2288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16469'. [ 1638.453755][ T2282] syz_tun: left allmulticast mode [ 1638.520082][ T2288] bond3: Invalid ad_actor_system MAC address. [ 1638.526296][ T2288] bond3: option ad_actor_system: invalid value (1) [ 1638.534660][ T2290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16470'. [ 1638.563331][ T2288] bond3 (unregistering): Released all slaves [ 1638.645998][ T2296] netlink: 'syz.2.16472': attribute type 3 has an invalid length. [ 1638.928093][ T150] net_ratelimit: 10 callbacks suppressed [ 1638.928115][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1639.078095][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1639.189031][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1639.219184][ T2325] dvmrp6: entered allmulticast mode [ 1639.297584][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1639.399032][ T2334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16484'. [ 1639.423562][ T2334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16484'. [ 1639.435502][ T2334] netlink: 'syz.1.16484': attribute type 10 has an invalid length. [ 1639.445333][ T2334] Cannot find del_set index 4 as target [ 1639.448285][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1639.587157][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1639.614411][ T2340] bridge5: entered promiscuous mode [ 1639.699233][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1639.817191][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1639.927864][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1640.024927][ T2362] netlink: 'syz.3.16489': attribute type 1 has an invalid length. [ 1640.101926][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1640.321513][ T2380] __nla_validate_parse: 2 callbacks suppressed [ 1640.321533][ T2380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16496'. [ 1640.356584][ T2376] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16494'. [ 1640.596976][ T2394] netlink: 'syz.4.16499': attribute type 39 has an invalid length. [ 1641.222479][ T2442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16508'. [ 1641.280299][ T2449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16508'. [ 1641.910451][ T2466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1641.945373][ T2466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1641.963844][ T2466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1641.997660][ T2466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1642.088667][ T2466] bond0: (slave batadv0): Releasing backup interface [ 1642.221973][ T2472] syzkaller0: entered promiscuous mode [ 1642.239351][ T2472] syzkaller0: entered allmulticast mode [ 1642.360459][ T2494] sock: sock_timestamping_bind_phc: sock not bind to device [ 1642.594687][ T2502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16519'. [ 1644.246993][T31477] net_ratelimit: 10 callbacks suppressed [ 1644.247018][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1644.379779][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1644.502478][ T2530] netlink: 'syz.0.16524': attribute type 1 has an invalid length. [ 1644.519067][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1644.547989][ T2530] netlink: 'syz.0.16524': attribute type 2 has an invalid length. [ 1644.568626][ T2531] netlink: 'syz.4.16523': attribute type 13 has an invalid length. [ 1644.698339][ T2531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.705599][ T2531] bridge0: port 2(bridge_slave_1) entered listening state [ 1644.713108][ T2531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.720338][ T2531] bridge0: port 1(bridge_slave_0) entered listening state [ 1644.730717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.741018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1644.788012][ T2531] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1644.829288][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1644.852475][ T2546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16527'. [ 1644.948029][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1645.066296][ T2567] netlink: 'syz.4.16530': attribute type 39 has an invalid length. [ 1645.132016][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1645.257356][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1645.330767][ T2591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16534'. [ 1645.388200][ T2585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16534'. [ 1645.398294][ T2585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16534'. [ 1645.508794][ T2602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16536'. [ 1645.564311][ T2610] netlink: 'syz.3.16540': attribute type 1 has an invalid length. [ 1645.572638][ T2607] : renamed from hsr0 (while UP) [ 1645.598101][ T2610] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.16540'. [ 1645.788475][ T2622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16544'. [ 1645.968875][ T2633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16546'. [ 1645.990182][ T2633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16546'. [ 1646.145293][ T2645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16548'. [ 1646.155740][ T2645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16548'. [ 1647.046112][ T2709] syzkaller0: entered promiscuous mode [ 1647.058765][ T2709] syzkaller0: entered allmulticast mode [ 1647.068178][ T2711] tipc: Enabling of bearer rejected, failed to enable media [ 1647.098145][ T2709] netlink: 'syz.3.16567': attribute type 1 has an invalid length. [ 1648.048966][ T2786] netlink: 'syz.3.16585': attribute type 1 has an invalid length. [ 1648.065069][ T2788] : entered promiscuous mode [ 1648.532215][ T2821] netlink: 'syz.1.16591': attribute type 6 has an invalid length. [ 1648.540733][ T2821] netlink: 'syz.1.16591': attribute type 5 has an invalid length. [ 1649.261419][ T2805] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1649.297544][T31482] net_ratelimit: 35 callbacks suppressed [ 1649.297569][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1649.436609][ T2840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1649.492317][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1649.675076][ T2854] netlink: 'syz.1.16598': attribute type 12 has an invalid length. [ 1649.707769][T31482] bond1: (slave bridge5): failed to get link speed/duplex [ 1649.757830][ T2862] netlink: 'syz.4.16599': attribute type 8 has an invalid length. [ 1649.827495][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1649.874531][ T2862] bond0: entered promiscuous mode [ 1649.894507][ T2862] bond_slave_0: entered promiscuous mode [ 1649.904895][ T2862] bond_slave_1: entered promiscuous mode [ 1649.931070][ T2862] gretap0: entered promiscuous mode [ 1649.937084][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.939858][ T2879] netlink: 'syz.2.16604': attribute type 83 has an invalid length. [ 1649.949066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1649.968344][ T2862] bond0: left promiscuous mode [ 1649.973241][ T2862] bond_slave_0: left promiscuous mode [ 1649.987012][ T2862] bond_slave_1: left promiscuous mode [ 1650.011819][ T2862] gretap0: left promiscuous mode [ 1650.037311][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1650.167148][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1650.288340][ T2903] netlink: 'syz.4.16607': attribute type 11 has an invalid length. [ 1650.296936][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1650.568568][ T2917] netlink: 'syz.4.16613': attribute type 3 has an invalid length. [ 1651.010204][ T2943] bridge10: entered promiscuous mode [ 1651.015706][ T2943] bridge10: entered allmulticast mode [ 1651.119038][ T2950] __nla_validate_parse: 13 callbacks suppressed [ 1651.119061][ T2950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16620'. [ 1651.485958][ T2968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16625'. [ 1651.551270][ T2968] hsr_slave_0: left promiscuous mode [ 1651.650207][ T2983] netlink: 'syz.0.16627': attribute type 1 has an invalid length. [ 1651.664392][ T2983] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16627'. [ 1651.701231][ T2986] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.16631'. [ 1651.952565][ T2993] syzkaller0: entered promiscuous mode [ 1651.967966][ T2993] syzkaller0: entered allmulticast mode [ 1652.469929][ T2993] hsr0 speed is unknown, defaulting to 1000 [ 1652.480481][ T2993] lo speed is unknown, defaulting to 1000 [ 1652.701344][ T3011] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1652.799128][ T3011] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1652.823447][ T3011] gretap2: entered promiscuous mode [ 1652.829341][ T3011] gretap2: entered allmulticast mode [ 1652.955011][ T3028] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16639'. [ 1653.077614][ T3038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16640'. [ 1653.442346][ T3050] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1653.458971][ T3050] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1653.478368][ T3050] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1653.515052][ T3056] netlink: 220 bytes leftover after parsing attributes in process `syz.3.16643'. [ 1654.215367][ T3090] netlink: 252 bytes leftover after parsing attributes in process `syz.1.16653'. [ 1654.347196][T31477] net_ratelimit: 33 callbacks suppressed [ 1654.347221][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1654.398475][ T3095] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1654.557511][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1654.621076][ T3099] Can't find ip_set type hash:ip,mar [ 1654.683512][ T3109] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1654.784341][ T3110] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1654.821653][ T3114] netlink: 276 bytes leftover after parsing attributes in process `syz.0.16663'. [ 1654.960568][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1654.977885][ T3125] syzkaller1: entered promiscuous mode [ 1654.989371][ T3125] syzkaller1: entered allmulticast mode [ 1655.020806][ T3132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16670'. [ 1655.076915][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1655.127215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.135934][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.228017][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1655.357618][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1655.468082][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1655.839997][ T3188] netlink: 'syz.1.16688': attribute type 2 has an invalid length. [ 1656.291046][ T3197] syzkaller0: entered promiscuous mode [ 1656.296613][ T3197] syzkaller0: entered allmulticast mode [ 1656.496082][ T3207] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1656.547602][ T3209] __nla_validate_parse: 35 callbacks suppressed [ 1656.547624][ T3209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16695'. [ 1656.598792][ T3220] netlink: 'syz.4.16696': attribute type 16 has an invalid length. [ 1656.607931][ T3220] netlink: 'syz.4.16696': attribute type 17 has an invalid length. [ 1656.627157][ T3209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16695'. [ 1656.636455][ T3209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16695'. [ 1656.677077][ T3209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16695'. [ 1656.688448][ T3209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16695'. [ 1656.711216][ T3209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16695'. [ 1656.728468][ T3209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16695'. [ 1656.751563][ T3209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16695'. [ 1656.762074][ T3209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16695'. [ 1656.772207][ T3209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16695'. [ 1658.641551][ T3221] netlink: 'syz.4.16696': attribute type 29 has an invalid length. [ 1659.081611][ T3250] netlink: 'syz.4.16706': attribute type 13 has an invalid length. [ 1659.109461][ T3254] "syz.2.16708" (3254) uses obsolete ecb(arc4) skcipher [ 1659.353643][ T3263] syzkaller1: entered promiscuous mode [ 1659.360551][ T3263] syzkaller1: entered allmulticast mode [ 1659.436079][T31477] net_ratelimit: 19 callbacks suppressed [ 1659.436102][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1659.699575][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1659.820194][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1659.957586][T15359] bond1: (slave bridge5): failed to get link speed/duplex [ 1660.097193][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1660.323627][ T3322] ip6t_REJECT: ECHOREPLY is not supported [ 1660.337210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.353414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.362283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.372710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1661.377195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1662.319124][ T3328] __nla_validate_parse: 25 callbacks suppressed [ 1662.319148][ T3328] netlink: 212 bytes leftover after parsing attributes in process `syz.4.16730'. [ 1662.522852][ T3340] syzkaller0: entered promiscuous mode [ 1662.528931][ T3340] syzkaller0: entered allmulticast mode [ 1662.667731][ T3361] netlink: 76 bytes leftover after parsing attributes in process `syz.2.16738'. [ 1662.711162][ T3361] hsr_slave_0 (unregistering): left promiscuous mode [ 1664.487201][ C1] net_ratelimit: 25 callbacks suppressed [ 1664.487225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.502504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1664.537383][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1664.647757][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1664.757454][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1664.867431][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1664.977453][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1665.087386][T31480] bond1: (slave bridge5): failed to get link speed/duplex [ 1665.197464][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1665.307120][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1668.893253][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1669.530077][T31477] net_ratelimit: 48 callbacks suppressed [ 1669.530107][T31477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.597405][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1669.687548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.696986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.706979][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1669.817410][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1669.927736][T25623] bond1: (slave bridge5): failed to get link speed/duplex [ 1670.037010][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1670.147385][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1670.257435][ T4157] bond1: (slave bridge5): failed to get link speed/duplex [ 1670.934201][ T3374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16744'. [ 1670.981232][ T3380] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16740'. [ 1671.060338][ T3379] netlink: 'syz.2.16742': attribute type 9 has an invalid length. [ 1671.106127][ T3386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1671.136204][ T3386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1671.170615][ T3386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1671.239713][ T3398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16748'. [ 1671.263702][ T3387] syzkaller0: entered promiscuous mode [ 1671.277731][ T3387] syzkaller0: entered allmulticast mode [ 1673.495738][ T3426] netlink: 52 bytes leftover after parsing attributes in process `syz.3.16755'. [ 1673.787856][ T3446] delete_channel: no stack [ 1673.936816][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 1673.944979][ C1] lec:lec_tx_timeout: lec0 [ 1674.033791][ T3451] bond0: entered promiscuous mode [ 1674.039774][ T3451] bond0: entered allmulticast mode [ 1674.045590][ T3451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1674.214908][ T3464] netlink: 'syz.1.16765': attribute type 25 has an invalid length. [ 1674.311019][ T3467] netlink: 'syz.2.16766': attribute type 12 has an invalid length. [ 1674.454341][ T3467] bond8: option primary_reselect: invalid value (255) [ 1674.482525][ T3467] bond8 (unregistering): Released all slaves [ 1674.521397][ T3483] netem: change failed [ 1674.567974][T31477] net_ratelimit: 21 callbacks suppressed [ 1674.567998][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1674.581697][ T3471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16768'. [ 1674.758135][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1674.782996][ T3500] netlink: 'syz.2.16776': attribute type 1 has an invalid length. [ 1674.797855][ T3500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16776'. [ 1674.814638][ T3500] netlink: 658 bytes leftover after parsing attributes in process `syz.2.16776'. [ 1674.828837][ T3500] netlink: 'syz.2.16776': attribute type 1 has an invalid length. [ 1674.887134][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1674.896459][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1674.904110][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.022487][ T3511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.031635][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1675.041007][ T3511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.067289][ T3511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.086539][ T3523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1675.225283][ T3531] netlink: 100 bytes leftover after parsing attributes in process `syz.1.16781'. [ 1675.286955][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1675.294435][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1675.478031][ T3536] syzkaller0: entered promiscuous mode [ 1675.496469][ T3536] syzkaller0: entered allmulticast mode [ 1675.521294][ T3541] netlink: 104 bytes leftover after parsing attributes in process `syz.1.16783'. [ 1675.782994][ T3553] xt_hashlimit: size too large, truncated to 1048576 [ 1677.850718][ T3552] netlink: 'syz.2.16786': attribute type 11 has an invalid length. [ 1677.885190][ T3561] syzkaller1: entered promiscuous mode [ 1677.927759][ T3561] syzkaller1: entered allmulticast mode [ 1677.982060][ T3567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16791'. [ 1678.021813][ T3571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16792'. [ 1678.145362][ T3567] bond8: entered promiscuous mode [ 1678.151907][ T3567] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1678.223004][ T3581] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1678.253891][ T3581] bond8: (slave sit1): The slave device specified does not support setting the MAC address [ 1678.278698][ T3581] bond8: (slave sit1): Error -95 calling set_mac_address [ 1678.334214][ T3594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16797'. [ 1678.428689][ T3593] netlink: 96 bytes leftover after parsing attributes in process `syz.4.16797'. [ 1678.449744][ T3593] 8021q: VLANs not supported on sit0 [ 1678.572188][ T3613] netlink: 'syz.4.16802': attribute type 1 has an invalid length. [ 1678.770959][ T3620] syzkaller0: entered promiscuous mode [ 1678.777005][ T3620] syzkaller0: entered allmulticast mode [ 1678.799126][ T3620] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16805'. [ 1678.812738][ T3620] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16805'. [ 1679.008525][ T3630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16808'. [ 1679.445468][ T3663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16816'. [ 1679.627448][ T150] net_ratelimit: 116 callbacks suppressed [ 1679.627472][ T150] bond1: (slave bridge5): failed to get link speed/duplex [ 1679.653354][ T3675] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1679.733357][ T3678] IPVS: length: 48 != 8 [ 1679.755682][ T3679] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16821'. [ 1679.768486][T31479] bond1: (slave bridge5): failed to get link speed/duplex [ 1679.775991][T21500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.785209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.818238][ T4157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.828693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1679.878777][ T3681] netlink: 'syz.0.16822': attribute type 58 has an invalid length. [ 1679.898161][ T3681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16822'. [ 1679.929728][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1680.010196][ T3685] bridge0: entered allmulticast mode [ 1680.077635][T31477] bond1: (slave bridge5): failed to get link speed/duplex [ 1680.088923][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.097711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1680.514291][ T3708] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1680.760540][ T3722] netlink: 'syz.0.16833': attribute type 39 has an invalid length. [ 1680.835593][ T3713] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1681.386312][ T3755] netlink: 'syz.1.16842': attribute type 13 has an invalid length. [ 1681.398756][ T3755] gretap0: refused to change device tx_queue_len [ 1681.437686][ T3757] netlink: 'syz.2.16844': attribute type 7 has an invalid length. [ 1681.845741][ T3784] netlink: 'syz.4.16850': attribute type 1 has an invalid length. [ 1681.934849][ T3784] bond3: (slave veth7): Enslaving as an active interface with a down link [ 1682.340657][ T3764] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI [ 1682.340841][ T3807] netlink: 'syz.2.16859': attribute type 10 has an invalid length. [ 1682.352632][ T3764] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 1682.352659][ T3764] CPU: 0 UID: 0 PID: 3764 Comm: syz.0.16846 Not tainted syzkaller #0 PREEMPT(full) [ 1682.352682][ T3764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1682.352697][ T3764] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 1682.361072][ T3807] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1682.369034][ T3764] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 69 b1 2f f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 1682.369057][ T3764] RSP: 0018:ffffc900063378e8 EFLAGS: 00010207 [ 1682.369080][ T3764] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff88809ca9bd00 [ 1682.434994][ T3764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88804cd84280 [ 1682.443005][ T3764] RBP: ffff88804cd84280 R08: ffff88809ca9bd00 R09: 0000000000000008 [ 1682.451019][ T3764] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 1682.459107][ T3764] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92000c66f3c [ 1682.467189][ T3764] FS: 00007f9e98ce36c0(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 1682.476139][ T3764] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1682.482745][ T3764] CR2: 000020000000f000 CR3: 000000006ad70000 CR4: 00000000003526f0 [ 1682.491268][ T3764] Call Trace: [ 1682.494577][ T3764] [ 1682.497560][ T3764] ? __alloc_skb+0x4e5/0x7d0 [ 1682.502196][ T3764] ? skb_put+0x11b/0x210 [ 1682.506577][ T3764] rose_write_internal+0x1256/0x1b60 [ 1682.511901][ T3764] ? lockdep_hardirqs_on+0x7a/0x110 [ 1682.517227][ T3764] ? __pfx_rose_write_internal+0x10/0x10 [ 1682.522942][ T3764] ? timer_delete+0x245/0x340 [ 1682.527782][ T3764] rose_release+0x25b/0x510 [ 1682.532328][ T3764] sock_close+0xc3/0x240 [ 1682.536706][ T3764] ? __pfx_sock_close+0x10/0x10 [ 1682.541678][ T3764] __fput+0x44f/0xa70 [ 1682.545701][ T3764] task_work_run+0x1d9/0x270 [ 1682.550318][ T3764] ? __pfx_task_work_run+0x10/0x10 [ 1682.555456][ T3764] ? task_work_add+0x395/0x440 [ 1682.560276][ T3764] ? __pfx_task_work_add+0x10/0x10 [ 1682.565415][ T3764] get_signal+0x11eb/0x1330 [ 1682.570484][ T3764] arch_do_signal_or_restart+0xbc/0x830 [ 1682.576053][ T3764] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1682.582239][ T3764] exit_to_user_mode_loop+0x86/0x480 [ 1682.587550][ T3764] ? rcu_is_watching+0x15/0xb0 [ 1682.592350][ T3764] do_syscall_64+0x32d/0xf80 [ 1682.596964][ T3764] ? trace_irq_disable+0x3b/0x150 [ 1682.602028][ T3764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.608121][ T3764] ? clear_bhb_loop+0x40/0x90 [ 1682.613173][ T3764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.619430][ T3764] RIP: 0033:0x7f9e97d9c799 [ 1682.623869][ T3764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1682.643532][ T3764] RSP: 002b:00007f9e98ce3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1682.651976][ T3764] RAX: 0000000000000000 RBX: 00007f9e98016090 RCX: 00007f9e97d9c799 [ 1682.660058][ T3764] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000000d [ 1682.668140][ T3764] RBP: 00007f9e97e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1682.676130][ T3764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1682.684154][ T3764] R13: 00007f9e98016128 R14: 00007f9e98016090 R15: 00007ffc8ff3ecb8 [ 1682.692244][ T3764] [ 1682.695296][ T3764] Modules linked in: [ 1682.702057][ T3764] ---[ end trace 0000000000000000 ]--- [ 1682.765029][ T3764] RIP: 0010:rose_transmit_link+0x32/0xac0 [ 1682.775693][ T3764] Code: 56 41 55 41 54 53 48 83 ec 40 48 89 f3 48 89 fd 49 bc 00 00 00 00 00 fc ff df e8 69 b1 2f f7 4c 8d 73 36 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 09 00 00 45 0f b6 36 31 ff 44 89 f6 [ 1682.796328][ T3764] RSP: 0018:ffffc900063378e8 EFLAGS: 00010207 [ 1682.803765][ T3764] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff88809ca9bd00 [ 1682.814232][ T3764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88804cd84280 [ 1682.823875][ T3764] RBP: ffff88804cd84280 R08: ffff88809ca9bd00 R09: 0000000000000008 [ 1682.837753][ T3764] R10: 000000000000000f R11: 0000000000000000 R12: dffffc0000000000 [ 1682.845759][ T3764] R13: dffffc0000000000 R14: 0000000000000036 R15: 1ffff92000c66f3c [ 1682.854481][ T3764] FS: 00007f9e98ce36c0(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 1682.864053][ T3764] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1682.871492][ T3764] CR2: 0000001b34d22ff8 CR3: 000000006ad70000 CR4: 00000000003526f0 [ 1682.880243][ T3764] Kernel panic - not syncing: Fatal exception [ 1682.887050][ T3764] Kernel Offset: disabled [ 1682.891383][ T3764] Rebooting in 86400 seconds..