last executing test programs: 59.771161805s ago: executing program 2 (id=3114): socket$can_raw(0x1d, 0x3, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)) (async) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x3001}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="7000fbdbdf251800000000000000857798e34bfe1f42d95af4d6"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYBLOB="142337fc1c23762498a1dd5f64a1485b9f54125d1cda9066a801bb54b71bb1961a23feddcf24dd6d23e3aef72469a67df3726aadd444a30e603a7b43b60117b8d02af1c1e61393af2f40258c1951a24d3b39936140b382e7d2d0e1a8851efbace3abef8c14481be5d23203cef451231526006dea57676e3f5f47eee51ba0", @ANYBLOB="8400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0xa0}, 0x1, 0x0, 0x0, 0x2000c451}, 0x44084) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd70000a00000029e8687294a0050000337d031e282c0c78527b0f62c6f43deece341fdcd8914ec3ba71521463b1f23e7dbd830c93890f1447360bcc7ec744ad81cd00299a73729f6f27e9d846cf20e51e1952338efcc8939def60b4373b31d1f1f300"/117, @ANYRES32=r4, @ANYBLOB="0c00238005001f0001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x40810) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="68f6ffe16a6d677f00", @ANYRES32=r5, @ANYBLOB="0c0099007200000054000000080057000900000008009f00010000000800a1001000000008009f00050000000800570023000000080057000f000000"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x11) r6 = socket$packet(0x11, 0x2, 0x300) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0xfffffffffffffd46) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000000414000227bd7000fcdbdf14000008000100003717f328c527e1cd9600000800010001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x40000) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) close(r11) (async) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r8, @ANYBLOB="08001b0000000000fb1fc5e68d1d927e4ab0d63a71f191e5dc48d0860654bac9e25ed9770841ccdde41f724494e344f572c2a636e9547973f5abf2291a71c5609092b465aeab4c585e66dcd03ebb1c4ef545b67e2a01026e5033a0839920f0325acce8ecc665da5813d0f1d6e81cdf05a4ef4a12b61ae72676a7a4167a1e2b3115a81ec04689f7cdfcc763de19cd95f7095c7a1a144b5a38e1f4dcad7647801aa3774d8ea11b265200a8012528fc4faba0"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r12, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) (async) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req={0x3, 0x3, 0x80, 0x5}, 0x10) 59.595263256s ago: executing program 2 (id=3117): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r4], 0x24}}, 0x0) getsockname$netlink(r0, &(0x7f0000000100), &(0x7f0000000180)=0xc) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) accept4(r0, &(0x7f0000000080)=@xdp, &(0x7f0000000000)=0x80, 0x800) sendmmsg$inet_sctp(r7, &(0x7f00000032c0), 0x0, 0x4000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e2a, 0x8001, @mcast1, 0x3}}, 0x0, 0x6}, &(0x7f0000000300)=0x90) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r5, 0x5}, 0x8) 59.47057666s ago: executing program 2 (id=3119): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), r1) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x100, 0x0) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103000000000000000005"], 0x34}}, 0x0) r4 = socket(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000780)=[{{&(0x7f0000000440)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xd, 0x3, 0x1, [{@broadcast, 0x4}, {@broadcast, 0xffffffff}]}]}}}], 0x28}}], 0x1, 0x4000810) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000380)={0x42, {{0xa, 0x4e20, 0xdc2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}}}, 0x88) 6.360059375s ago: executing program 2 (id=3124): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000540)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x61}, 0x1f00) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fb, 0x0, 0x0, 0x9, 0x2, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) socket$packet(0x11, 0x2, 0x300) 2.867350219s ago: executing program 3 (id=3180): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c6f203cb1276bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc2880072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd01008e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d81006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff5d16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c602c4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b1da97c971c8c84a427edc3492b97e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb2b5f59dfead7ac6e7fa84746e2e425769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443c3a64c7803760880af23fb3f430a0311fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630e7fa0c2261bc2d5de32ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79a08002c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574b2a31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca6797590ed13b0bccf71a39e05e877893646d185a77882f866785af6b0149e336c31fb177e3e85f4c60cd4de4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3c067c28e185fe62ce7020f5282cf045b9c790984c6fb65fd3187bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212d000045b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000ee2ea723ea2e1accb97a200609c77e0000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699d61acdc8e36010d76093ddd237df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eeb7a9d17000000000096cd8ecf1c511eea07aefa1c5cae1841efa9329d80eafefe00000000000000009111274a44c722ff9f5151aa7cb99ea3e8b2c51eadbd2d0ba1a25b08cc3e67cd186c12ea62a55ff905388bb30d1a63d42593c9aea3a84f5a6fc470d8aaaafeccb373ca26c3685679e6a048af19fca3fc5315a33687"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0xdf, 0x7d, &(0x7f00000004c0)="708ecd15106a15536d62694dce411009afd2f66e44f2a9674c272c3210e46cd0fa1ac676d2f8b6d350f4e09332175dd96c6d1f23f223c417f97dfc9289a6cefb12d6a6b0b92d8b976a42af89cc90f4870185b16562b00b094823b6f310d7c199919a74d0fe103cabef6d03863fe7462648088edc92e12302b900ee6220ab32ae0add48df4e6c914653de1b003f381149756ccfeecaceb4d874af657e918a3131260d33aa6a2bb7d83f0886b220b35be204a8df125afdd6e7053cac4b83ad13e85cd618490f6ad3cf2090431cbbda1934a3b1068b4b2d7039bc57c6443c3b61", &(0x7f00000005c0)=""/125, 0xfffffffa, 0x0, 0x0, 0x4a, &(0x7f0000000640), &(0x7f00000006c0)="8181c4f4e6a8ef610cdcc388f2a5d9740191f08c7b57da561455e0b0c670917fb5b901f06c6fbbf8990879664bd3edab631c5d67285b92a1b6cad87fa9b947f59743cac31f46827cecc6", 0x3, 0x0, 0x8}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x40}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000640)={{0x2, 0x4e20, @loopback}, {0x306, @multicast}, 0x32, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, 'veth1_to_team\x00'}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x5, 0x1000}, [@RTA_OIF={0x8, 0x4, r9}, @RTA_GATEWAY={0x14, 0x5, @loopback={0xffffffffffff0000}}]}, 0x38}, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 2.726102642s ago: executing program 3 (id=3183): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async) listen(r0, 0x2) (async) unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r1, 0x8942, &(0x7f0000000180)="a6cc04e2d8f1c38afbf14b29a86e3a3858e6151a82f8154feaebaeaaaa86f2d9e2d95f1f1803a6d3c0751f84f109518387ae333d0bfdeae88b8deafa4a1851d5b4edd918a320f8cdcf16e8b53d101858c63d53f41289684142aa353b72f97b253ae0369c29868e9b633401000c3fea6fc4f3e69be3a02b6c9f0204b0402af1babc5dce6cae49eeab29d474b96b72e3442c731b5c519dc0569419716495bc8b6347e60fdb8250915cf469988e5739cf774fd1f7724ceeb73236bc4654c27d7bd351ce5fe0ae6ec3b3471d7e6351819af1a2167eb9") (async) unshare(0x2c020680) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x3, 0x0, &(0x7f0000000040)=0x101) (async) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x11}}], 0x1, 0x4000800) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f00000000c0)=0x40049, 0x4) (async) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000080fbdbdf250a2080"], 0x24}}, 0x20000050) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400cac2d8ed9b09bf6b86795d1a6eccb7923194f77c7188a1d852b2d4798b2b09c3508b0f8a5d53e022791a2c3d830b8f24b9d5e2ac9f3579c9c82a97b586093b3e2f2b34c85034b58378f036f3c457f904a635ef01756881a4e8df9180fac0eb40d6b8dda975abf504e5689023d77e861ff27878f78671724a6f573163536a40442cf323c327781bab6cc69450c74e02639ea10b648c9f815625abcac5ff2336b01e43a00f6d453d0127bcd3a8887745622ae29f75b16707d537000000000000aa6f04f92010c8b08bb535800d8ac433db18c461ea1f88555e1d3e74c90e", @ANYRES16=r6, @ANYBLOB="01000a9bd037de271e8a01743b4b28bd70000000000064000000180001801400020073797a5e74756e0000000000efa2db0d6dce7d517512caf193caeab51fb168da15cd4d00a81aca9efae84b42af439553ce2dd087dbde055408041b3c421a0863838a4c43"], 0x34}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 2.566334503s ago: executing program 4 (id=3185): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 1.833384401s ago: executing program 0 (id=3190): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x101, 0x7, 0x1000, 0x6, 0x400, 0x8, 0x5adf}, 0x1c) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80000) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x19, 0x0, 0x1, 0x1, 0x6, @local}, 0x14) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', r1, 0x4, 0x0, 0xc, 0xffffff19, 0x2a, @local, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x10, 0x40, 0x1, 0x10001}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x30ba04c7618a952) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000380)=0x1c, 0x800) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000003c0), &(0x7f0000000400)=0x4) connect$inet6(r4, &(0x7f0000000440)={0xa, 0x4e21, 0x800, @remote, 0x1}, 0x1c) setsockopt(r0, 0x7fffffff, 0x2, &(0x7f0000000480)="a551d33707cf3e730640cd42f8f564c400d2cbba75cad86f6bd078c7e93d680c247fa645ff7419136812363f0e1a89e9a0e5c6860a6aa04afe5af00638f886a654e790ade984282bab1046f8247828d6b8056eb2a51b7f9ad365b251ca3df4913c115535bbedc8037f4df1dce2c9a67f7c9ca3cf9aa03b0a2adc8ca93b8f6f34903020c725943b0832fb8cfd07aae520aa576234b4e0aad53c95cad479c5e988b8debb24cd6718441e481ed7", 0xac) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x12, &(0x7f0000000540)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0xa, 0x6, 0x0, 0x6b, 0x1}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}], &(0x7f0000000600)='syzkaller\x00', 0x3, 0x4a, &(0x7f0000000640)=""/74, 0x41100, 0x1, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0xc, 0x8, 0x7ff}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000740)=[0x1, 0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000780)=[{0x2, 0x2, 0x5, 0x3}, {0x0, 0x2, 0x5, 0x2}, {0x0, 0x2, 0xe, 0x3}, {0x2, 0x3, 0xe, 0x3}, {0x1, 0x1, 0xb, 0x9}, {0x0, 0x5, 0xd, 0x2}, {0x0, 0x3, 0x5, 0x6}]}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x84, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xda, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r6, r5, 0xc, 0x30, 0x0, @void, @void, @void, @value=r7}, 0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000c40)={0x0, @in6={{0xa, 0x4e21, 0xcc6c, @private0, 0x6}}, 0xfffffffc, 0x9, 0xcdc, 0xfda, 0x20, 0xb4, 0x42}, &(0x7f0000000d00)=0x9c) close(r0) r9 = getpid() syz_open_procfs$namespace(r9, &(0x7f0000000d40)='ns/mnt\x00') r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r10, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x40, r11, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x10}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}]}, 0x40}}, 0x20008000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000f00)={r8, @in6={{0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}}, 0x3, 0x3a6}, &(0x7f0000000fc0)=0x90) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r13, &(0x7f0000001240)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0x84, r14, 0x400, 0x70bd2c, 0x3, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "96049631033482b746ca5f22dc07af7a9cb6485378e01806ddbb106b9b3c9fd4"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, 0x0, 0xd01, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x48081) 1.766295042s ago: executing program 0 (id=3191): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000200)=@newtaction={0x5c, 0x32, 0x12f, 0x0, 0x25dfdbff, {}, [{0x48, 0x1, [@m_police={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "a9972b1cad205dfdcf3b732a9359d8df71"}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4020804}, 0x10040000) 1.669640755s ago: executing program 0 (id=3192): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket(0x27, 0x2, 0x8) pipe(0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x371804, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000af002c0000000e0001006e657464657673696d0000000f0002006e657464657673696d150000"], 0x34}}, 0x8040) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200027bd8b00ffdbdf254c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000007fb362c2b285f0abfca419dee97094aba68a9d53a776ce84b4b545a25a1845a4e0dcc1b345f7f7f251"], 0x34}, 0x1, 0x0, 0x0, 0x20008084}, 0x20004800) 1.612843933s ago: executing program 4 (id=3194): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000e00100"}) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x1ff) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x240000, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0x3) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) 1.522727687s ago: executing program 3 (id=3196): r0 = socket(0x400000000010, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c01000019000100000000000000000000000000000000000000ffff0a010101000000000000000000000000000000000000000300000000020020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000c40008"], 0x17c}}, 0x20044004) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000600)='xprtrdma_createmrs\x00', r1, 0x0, 0x6}, 0x18) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x8000000000, 0x1, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f91e2e00283c00fe880004000000000000000000000001ff020000"], 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r8, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=0x0, @ANYBLOB="0065c7130174a0ac5390b74076eb2e3e000000", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="02032000285b5c0c782a0ad5610ba5600e00000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e2064010100000000000000000002000100000000000000000000000000030005000000000002004e21ffffffff0000000000000000"], 0x70}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c00000008000000020000288cc1fdf438c79d036d9e00000000"], &(0x7f0000000200)=""/188, 0x26, 0xbc, 0x1, 0x3}, 0x28) socket$nl_crypto(0x10, 0x3, 0x15) 1.345655784s ago: executing program 0 (id=3197): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x8, 0x803, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) close(r2) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000010404000000fddbdf2500000000b61731d1305f63b3d6d7086f9df8dba9a333434994feb116bbeb0a2c97c0ee2e5469c12d3df7e8e6a20a3f4d420bfbfa61ed27463cc8621d812ef71e1d744fe7eee3a3a1f7d7ee8855b98a2a893f33f3d8c31d02f5e6bacbe69f0dddb2ff404a6209e44f920719486dd9721e4268ad3da0b9411aa0c8e59691904f5fd67aac80f557362320990c10f8e83fb2dc96f717bc2164d4ebc4d7c43eb5ef5e5bb7bf542f7376b4c4e4a15270402462dfa7e1a11156b0275ba74fdfbf5d3ff123970f3fa52ed6ab9159b7677f6df3f2ee8de5f09170538f0f18021fa7520304019c8c5afc3e365c958bb9580072ac5500411870c870", @ANYRES32=0x0, @ANYBLOB="03050000000000001800128008000100677470000c0002800800040002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f00000010c0)="9c", 0x1}], 0x1, 0xf) r7 = socket$netlink(0x10, 0x3, 0x0) write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="616d205ecd236171"], 0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, r6, 0xec1b3000) splice(r5, 0x0, r7, 0x0, 0x10d00, 0xf) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000140), 0x4) 976.31516ms ago: executing program 2 (id=3133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x1000}, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0xe, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_newrule={0x34, 0x20, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x80, 0x8, 0x16, 0x0, 0x0, 0x4, 0x4}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x401}, @FRA_FLOW={0x8, 0xb, 0x3}, @FRA_DST={0x8, 0x1, @multicast1}]}, 0x34}}, 0x40080) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x9, 0x6, 0xffffff00, 0x6, 0x2, 0x7, 0x39}, &(0x7f0000000280)=0x9c) (async) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f00000003c0)=0xe8) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r7, 0x4, 0x70bd29, 0x80}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000000) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@getqdisc={0x40, 0x26, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x4, 0x3}, {0xc, 0xfff2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000640)) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@delneigh={0x34, 0x1d, 0x200, 0x70bd2a, 0x25dfdbfb, {0x2, 0x0, 0x0, r5, 0x4, 0xc0, 0x6}, [@NDA_PROTOCOL={0x5, 0xc, 0x4}, @NDA_IFINDEX={0x8, 0x8, r5}, @NDA_PORT={0x6, 0x6, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x44810}, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000780), &(0x7f00000007c0)=0x4) (async) r9 = socket(0x18, 0x80805, 0x2c32) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000800)={0x8, 'veth0_to_bond\x00', {'pim6reg0\x00'}, 0x9}) setsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000840)=@int=0x7, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x1411, 0x100, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20008000) (async) recvmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000980)=@alg, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/183, 0xb7}, {&(0x7f0000001ac0)=""/143, 0x8f}], 0x3, &(0x7f0000001bc0)=""/70, 0x46}, 0xfff00000}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001c40)=""/179, 0xb3}, {&(0x7f0000001d00)=""/16, 0x10}], 0x2, &(0x7f0000001d80)=""/94, 0x5e}, 0x7}], 0x2, 0x40002042, &(0x7f0000001e80)={0x0, 0x3938700}) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000001ec0), &(0x7f0000001f00)=0x4) (async) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r10, &(0x7f0000002080)={&(0x7f0000001f40)=@in6={0xa, 0x4e21, 0x80, @empty, 0xfff}, 0x1c, &(0x7f0000001f80), 0x0, &(0x7f0000001fc0)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @sndinfo={0x20, 0x84, 0x2, {0x7ff, 0x6, 0x4, 0x94b, r4}}, @init={0x18, 0x84, 0x0, {0x8, 0x7, 0x5, 0x4}}, @init={0x18, 0x84, 0x0, {0xc, 0xf581, 0xe, 0x2}}], 0x88, 0x10}, 0x20048000) (async) setsockopt$sock_timeval(r9, 0x1, 0x43, &(0x7f00000020c0), 0x10) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$sock_SIOCDELDLCI(r8, 0x8981, &(0x7f0000002100)={'pim6reg0\x00', 0x52dc}) socket$nl_generic(0x10, 0x3, 0x10) 938.683196ms ago: executing program 2 (id=3198): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0xc2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9fd}, 0x94) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r5, @ANYBLOB="049c01000750050008001300", @ANYRES32=r6, @ANYBLOB="140003002e"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000000000020000008001e80"], 0x2c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0xffffffffffffffff, 0x7, 0x6}, 0x3, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) socket$kcm(0x2, 0xa, 0x2) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r9, 0x0, 0x2d, &(0x7f00000003c0)={0x7f, {{0x2, 0x4e23, @remote}}}, 0x88) sendmsg$inet_sctp(r9, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000013580)}], 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r12}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4884) 919.991036ms ago: executing program 0 (id=3199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0xc) connect$x25(r1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x64, 0x14, 0x8, 0x3, 0x0, {0x2, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xf4f}, @TCA_STAB={0xfffffde6, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x6, 0x5, 0x1ff, 0x0, 0x0, 0xff, 0xa}}, {0x18, 0x2, [0x2, 0x192, 0xfc, 0x87a0, 0xfbb0, 0x3, 0xff, 0xc, 0xfff8, 0x8]}}]}]}, 0x64}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdd, &(0x7f0000000000)='/proc/0KgOq\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) 741.608654ms ago: executing program 4 (id=3200): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'wg0\x00'}) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="18943725bbf3317772ec26921fea41863349006d626181835783d82bf6b0ccf4ff75b8e9fb0f2b0fbd9780b559a9c752d085fce4de585ea73c3023173e73db9590f888b12cf3fd56747d10cd568bf68903feb0a48604158e1fc4a09f85b29a9efd6483160ae97e509bf3"], 0x14}, 0x1, 0x0, 0x0, 0x8008885}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r6}, 0x8) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="78000000020201030000000000000000050000050900060073797a3000000000080008400000000140000380060003400001000006000340000200002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000bb08000840000000030800094000000008ce52504cc58056e259"], 0x78}}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x27, 0xe, 0x0, &(0x7f0000000300)="f88197b49bc529fc0800eae986dd", 0x0, 0x2, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) ioctl$SIOCSIFMTU(r6, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000}) 721.104133ms ago: executing program 4 (id=3201): bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="e0cb295737f0e104a5b2979688bc1e12a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) shutdown(r0, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c00028005000100000000000800084000009503040010800800154000000000200004"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x9, 0x10, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}}}}}) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000000000000600002beb86454852c7f7b32601f8000400000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x480140}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)=@report={0xbc, 0x20, 0x100, 0x70bd2c, 0x25dfdbfc, {0x6c, {@in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0x40, 0x4e22, 0x88de, 0x2, 0xa0, 0x3b50281770ca4841, 0x2c, r4, r5}}, [@policy_type={0xa, 0x10, {0x1}}, @lastused={0xc, 0xf, 0xffc}, @address_filter={0x28, 0x1a, {@in6=@remote, @in=@remote, 0xa, 0x3, 0xc4}}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd29, 0x70bd27, 0x70bd2d, 0x70bd28, 0x1, [0x4, 0x8, 0x0, 0x9, 0x6]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\"\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010829bd7000567960a42f2fef00", @ANYRES32=0x0, @ANYBLOB="0001000004200400080004000005000008001b0000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x8844) 670.825896ms ago: executing program 1 (id=3202): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001440)=ANY=[@ANYRESDEC=r1, @ANYBLOB="b65b07089b7388fbf0db50e22651d12f6f8ff8dec7b05781ed8be005dfcb3b25086894ec59bf77c902eed8c4aa5e6bcd8c08f9ca2676d471eaeabb050b46d1054902bf1033fc009a8b60264baa2c750f58fbb953e7bde882c4bce1dd6767e68f620a83db00a6ae9ce2715ea72bc69ff9403e87d5b7acf9f0adbdfa592330209f8ec21430aab3e463c0d001c202916696ccb3e734336f734f6b0102d898c1a6c9c3ef6fc4f59df90750a1fafc07b8c4ca588e8350661ee647a287c08594d92f5142d8", @ANYRES32, @ANYBLOB="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"], 0x4d0}}, 0x20000880) sendmmsg$inet6(r1, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x101}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="14000000000009002eb80000000000008000000000000000"], 0x18}}], 0x1, 0x4000880) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000180)) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000240)=0xb, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="7f28c21f027f1376c8e75a65784af37dc73451aee22500e9aa2bff5e30a7b2ead6d83e28fd4606cb565db8c7d553340cff9158263fd2c2b6e4683ca92dc2645bc223a2eeeef875b8", @ANYRES16=r5, @ANYBLOB="010026bd7000fddbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d300000f2008e00030000000c008f000000009c010000000c0090000400000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, 0x0, &(0x7f0000000100)=0x10) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000001340)=',', 0x1, 0x0, &(0x7f0000001400)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r7, 0x1) unshare(0x20000400) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r9, &(0x7f00000003c0), 0x364, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f00000004c0)={r10, 0x61}, &(0x7f0000000500)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18060000b000df000000e3ff034004009500000000fe0000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={r10, 0x74, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, @in6={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x3}, 0x81}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in6={0xa, 0x4e24, 0x20, @empty}]}, &(0x7f0000000100)=0x10) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r12, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020000200600200012800b0021006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r13, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48880}, 0x0) 541.534853ms ago: executing program 1 (id=3203): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x0, 0xc, 0x6, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0x8, 0x8000, 0x2, 0x8}}) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) pipe(&(0x7f0000000540)={0xffffffffffffffff}) (async, rerun: 32) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) splice(r4, 0x0, r5, 0x0, 0x10500, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0xc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000240)='syzkaller\x00', 0x10001, 0xcf, &(0x7f0000000340)=""/207, 0x41000, 0x2f, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0xc, 0x800, 0xfffffffd}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000640)=[r2, r3, r4, r6], &(0x7f0000000680)=[{0x5, 0x2, 0xc, 0x8}], 0x10, 0x101}, 0x94) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000000000)={0x2, 0x3b, "96cf4a048bdb794d68d799e2f956b03b5e0ac4aeb8cef614948efb1fea8529fc052a78b2038e353e6ee03664176719b892b6661d78c392848eacbd"}) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="84000000000101040000000000000000020000002400018014000180"], 0x84}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007"], 0x38}}, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) 535.52159ms ago: executing program 3 (id=3204): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x1, 0x2531, "40f0cb", 0x80, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000), 0x0) sendto$inet6(r3, &(0x7f0000000500)="a4", 0x1, 0x2000c851, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRES64=r2], 0x0, 0xf7fffffe, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}}, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000140)="a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4b}, {&(0x7f0000000540)="afc59c71c24edce9cbbe3d", 0xb}, {&(0x7f0000000600)="aea2ce188de97a93d0dca013e6018a717ca368f30b25db9f5a42e2de2bc78b2eb893435fdde669e53d28ebd6b662ad4628a4e1fb161e560d47db003d0be3ce17d686ba8479c424c0fb6120e7f60f10aa7523ec9b473fbb5ddbca6ede2d615fd02b599eec6bc0793beaad6419ba6f179c34202f60798ae1f6228878594c009f18", 0x80}, {&(0x7f0000000780)="fe4928326af79a38af814aa90cf1935484cd936daf7bc4", 0x17}, {&(0x7f0000000bc0)="698ccfb873b04dc427b94dac0e27afc518316382886f9b2a175b92ef235762fbfc3a64605b7bef52f9fbf8f570b214851f34ed62fc014d344e23f3478118116431768e6677997e6e325fdee5d815b2a9af7b09b9ca5457e77f1dce28ad3b505358fc5905a7917f66a4e6f4d85975423db81ec6a2da10683642b87bfcac1614d3dae8b2016f70478d4c2d414988c1ebcdbc1ee8accc15642975707af9cca0569857acf488917a", 0xa6}, {&(0x7f0000000c80)="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", 0x10e}], 0x7, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socket$inet6(0xa, 0x5, 0x0) 527.048355ms ago: executing program 1 (id=3205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000700000409000100b794119d07576b5073797a30000000004c000000090a01040000000000000000070000000800b4e9a496b2a3246a020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000184c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002040002800c0005400000003cad3664d651250d001000010000000000"], 0xe0}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e24, 0x5, @local, 0x6}, {0xa, 0x4e21, 0x39b, @mcast2, 0xba}, 0xffffffffffffffff, {[0x9, 0x1, 0xff, 0x3, 0x7, 0x10001, 0x5, 0x4]}}, 0x5c) 405.544036ms ago: executing program 3 (id=3206): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x80}}, 0x4c091) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x0, [0x1, 0x3ff, 0x7]}, &(0x7f0000000340)=0x44) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) (async) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x1, 0x903, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7fff]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x86}, 0x1) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010025bd7000fcdbdf257a00000008000300", @ANYRES32=r7, @ANYBLOB="a6592e827ec259ade1a6e3e838001359946a91b3"], 0x1c}}, 0x400c0) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x20, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) (async, rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020427bd7000ffdbdf253000000006003600080008000600360039efff020600360000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x41) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (rerun: 32) 404.324362ms ago: executing program 1 (id=3207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000000030103c99c748295b11fbcef9b5086"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000090) 373.249027ms ago: executing program 1 (id=3208): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0xfffffffe, 0x0, {0x30, 0x32, 0x2, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x2000000, @in6=@private2={0xfc, 0x2, '\x00', 0x4}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x30, r4, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r4, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x80) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f0000000500)=""/217, &(0x7f00000001c0)=0xd9) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1806541eae00000000000000c22f18", @ANYRESDEC=r4, @ANYBLOB="0000000000000000329ef8ba00000000850000000cac5e56e90000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r8}, 0x20) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 299.219489ms ago: executing program 3 (id=3209): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, 0x0, 0x6e6bbe}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}}, 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r5, 0x0, 0x0, 0x2000, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000012140100000200190000000008004b001300000800030000000000080001000000000000"], 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010100000000000e76fead688ef0200"/35, @ANYRES32=0x0, @ANYBLOB="0000000012000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, 0x0, 0x840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x24000880) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000100), 0x1001) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r4) sendmsg$IPVS_CMD_GET_CONFIG(r11, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0xa0, r12, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x401}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 232.059009ms ago: executing program 1 (id=3210): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000009006000000000000000300000a20000000060a010400000000000000000500000900000580000001400000006c000001400000001d000001400000884c0000024000000002000001400000008800000140000000f90000014000000032000001400000005c0000014000006007000002400000000100000580000002400000000300000240000000000000074077da9fd041ac4b5bdfbae04b1cb8e23ef048fa211083d76f347a893d0af8622e6a64791d0131ca6f69d2432ca4bde6d0c5a8c139ed8365f6beb753593d724f7519e887057077e528929dc2ee6526c7ca5f4f313b23446b32ac7c1921cb4a40116ddc0f1220b835675de8a7ff2a5f8cc9f756ce40b3fcf8bd3c469ce2de1a0742d522df5af42df8e0ee51fa8a118666d1c3759257552a4f94ab59000000000b4000000003140600001100010000000000000000000084000a"], 0xfffffffffffffeef}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) sendmsg$nl_route(r0, 0x0, 0xc800) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x4) (async) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f640094000500", 0x2c}], 0x1) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x8, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x40004, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x0, 0xfff2}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x44c, 0x0, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001940)={'wpan4\x00'}) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4cd1767b0915f7e000000", @ANYRES16=r9, @ANYBLOB="090828bd7000ffdbdf252e000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x3f01) (async) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r13, &(0x7f0000000180)="c5", 0x1, 0x40080, &(0x7f00000000c0)={0xa, 0x4e24, 0x40, @local, 0x13}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r13, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x1000, 0x400, 0x3}, &(0x7f0000000140)=0x10) (async) close(r11) 71.839739ms ago: executing program 4 (id=3211): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'gretap0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x0, 0x1, 0xffff, 0x0, {{0x9, 0x4, 0x3, 0x1, 0x24, 0x68, 0x0, 0x2, 0x29, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xd8, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@ipv4_newroute={0x50, 0x18, 0x200, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x9, 0x2000}, [@RTA_MARK={0x8, 0x10, 0xfffffff6}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_OIF={0x8, 0x4, r1}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x0, 0x2, r1}}]}, 0x50}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) socket$alg(0x26, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb015fd35073709224220018000000000000001000000010000000060000000500000000002011010000000200"], 0x0, 0x2e}, 0x28) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r6}, 0x10) (async) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r9, {0x7, 0x1}, {0xffff}, {0x1}}}, 0x24}}, 0x0) 1.552807ms ago: executing program 0 (id=3212): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6020400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800080}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x1194, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x1094, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "e9b342d615ae2d786b3d42e8c00ccaadd1eb2a79f3"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "de7a1d80687325325fb5502a3fb84cbdda829cd884"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0x1194}, 0x1, 0x0, 0x0, 0x8083}, 0x8040) 0s ago: executing program 4 (id=3213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000003"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x108}}], 0x2, 0xc040) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) kernel console output (not intermixed with test programs): [ 139.297376][T11012] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 139.321461][T11019] pimreg: entered allmulticast mode [ 139.434066][T11020] dvmrp8: entered allmulticast mode [ 139.473890][T11018] pimreg: left allmulticast mode [ 139.495526][T11018] dvmrp8: left allmulticast mode [ 139.529283][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1364'. [ 139.546092][T11034] vlan0: left promiscuous mode [ 139.559427][T11034] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 139.566682][T11034] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 139.577250][T11034] veth3: left promiscuous mode [ 139.589130][T11034] team1: left promiscuous mode [ 139.596246][T11034] team1: left allmulticast mode [ 139.611907][T11034] veth5: left allmulticast mode [ 139.633208][T11034] gretap1: left promiscuous mode [ 139.641729][T11034] bond4: left promiscuous mode [ 139.653599][T11034] xfrm1: left allmulticast mode [ 139.679406][T11034] gretap2: left promiscuous mode [ 139.690703][ T3011] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.738834][ T3011] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.771369][ T3011] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.798615][ T3011] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.861452][T11046] tipc: Enabling of bearer rejected, failed to enable media [ 139.883899][T11050] sctp: [Deprecated]: syz.3.1369 (pid 11050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.883899][T11050] Use struct sctp_sack_info instead [ 140.003284][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1373'. [ 140.040132][ T30] audit: type=1800 audit(1756020292.208:7): pid=11055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1372" name="memory.events" dev="tmpfs" ino=1607 res=0 errno=0 [ 140.059309][T11058] netlink: 'syz.3.1373': attribute type 18 has an invalid length. [ 140.109575][T11067] netlink: 'syz.3.1375': attribute type 6 has an invalid length. [ 140.214072][T11078] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 140.220358][T11077] block nbd0: not configured, cannot reconfigure [ 140.253484][T11078] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 140.262666][T11078] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 140.278194][T11078] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 140.286367][T11078] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 140.296051][T11078] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 140.329237][T11078] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 140.347408][T11078] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 140.357145][T11078] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 140.366748][T11078] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 140.401783][T11089] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 140.526762][T11094] netlink: 'syz.0.1383': attribute type 3 has an invalid length. [ 140.651675][T11120] 8021q: VLANs not supported on ip6tnl0 [ 140.682469][T11113] blkio.reset_stats is deprecated [ 140.970006][T11154] 8021q: VLANs not supported on ip6tnl0 [ 141.041008][T11157] netlink: 'syz.1.1404': attribute type 2 has an invalid length. [ 141.071637][T11157] þ`Ì: entered promiscuous mode [ 141.298224][T11175] netlink: 'syz.2.1409': attribute type 13 has an invalid length. [ 141.331648][T11175] netlink: 'syz.2.1409': attribute type 17 has an invalid length. [ 141.404801][ T30] audit: type=1800 audit(1756020293.588:8): pid=11166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1406" name="cgroup.controllers" dev="tmpfs" ino=1634 res=0 errno=0 [ 141.437811][T11175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.461449][T11175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.746538][T11196] netlink: 'syz.1.1418': attribute type 1 has an invalid length. [ 141.754980][T11194] netlink: 'syz.2.1415': attribute type 1 has an invalid length. [ 141.877101][T11207] openvswitch: netlink: Flow key attr not present in new flow. [ 142.135303][T11231] ip6gre1: left allmulticast mode [ 142.299253][T11245] validate_nla: 1 callbacks suppressed [ 142.299273][T11245] netlink: 'syz.2.1433': attribute type 4 has an invalid length. [ 142.353659][T11245] __nla_validate_parse: 23 callbacks suppressed [ 142.353676][T11245] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1433'. [ 142.459327][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 142.465692][ T5862] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 142.551880][T11268] ip6gretap0: entered promiscuous mode [ 142.558085][T11268] macsec0: entered allmulticast mode [ 142.563623][T11268] ip6gretap0: entered allmulticast mode [ 142.573860][T11268] ip6gretap0: left allmulticast mode [ 142.579654][T11268] ip6gretap0: left promiscuous mode [ 142.600677][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1439'. [ 142.639616][T11280] bond0: (slave batadv0): Releasing backup interface [ 142.656977][T11280] batadv0: left promiscuous mode [ 142.790840][T11293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1446'. [ 142.802607][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1446'. [ 142.989875][T11304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1449'. [ 143.045310][ T5862] Bluetooth: hci4: link tx timeout [ 143.050705][ T5862] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.117581][T11318] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1452'. [ 143.175374][T11324] netlink: 'syz.0.1454': attribute type 21 has an invalid length. [ 143.184644][T11324] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1454'. [ 143.498333][T11343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1460'. [ 143.598907][T11355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1462'. [ 143.672050][T11361] netlink: 'syz.1.1463': attribute type 13 has an invalid length. [ 143.680707][T11361] netlink: 'syz.1.1463': attribute type 17 has an invalid length. [ 143.797378][T11361] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 143.913571][T11374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.977052][T11361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.034747][T11390] netlink: 'syz.2.1472': attribute type 3 has an invalid length. [ 144.095554][T11390] syz_tun: entered allmulticast mode [ 144.125575][T11390] tipc: Enabling of bearer rejected, failed to enable media [ 144.171331][T11390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.216618][T11389] syz_tun: left allmulticast mode [ 144.421958][T11411] tipc: Enabling of bearer rejected, failed to enable media [ 144.511135][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1480'. [ 144.704066][T11452] netlink: 'syz.4.1486': attribute type 4 has an invalid length. [ 144.723888][T11438] netlink: 'syz.4.1486': attribute type 4 has an invalid length. [ 144.737603][T11453] bridge_slave_0: left allmulticast mode [ 144.745657][T11453] bridge_slave_0: left promiscuous mode [ 144.770283][T11453] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.782763][T11453] bridge_slave_1: left allmulticast mode [ 144.788445][T11453] bridge_slave_1: left promiscuous mode [ 144.800412][T11453] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.810631][T11453] bond0: (slave bond_slave_0): Releasing backup interface [ 144.821089][T11453] bond0: (slave bond_slave_1): Releasing backup interface [ 144.834996][T11453] team0: Port device team_slave_0 removed [ 144.842820][T11453] team0: Port device team_slave_1 removed [ 144.849142][T11453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.859895][T11453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.867558][T11453] batman_adv: batadv0: Removing interface: ip6gretap1 [ 144.928440][T11467] netlink: 'syz.4.1494': attribute type 1 has an invalid length. [ 144.942609][T11467] netlink: 'syz.4.1494': attribute type 1 has an invalid length. [ 145.099875][ T5862] Bluetooth: hci4: command 0x0405 tx timeout [ 145.228818][ T5969] ip6_tnl_xmit_ctl: 89 callbacks suppressed [ 145.228836][ T5969] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 145.537062][T11503] ip6tnl0: entered promiscuous mode [ 145.565423][T11503] ip6tnl0: entered allmulticast mode [ 145.704165][T11522] IPv6: NLM_F_REPLACE set, but no existing node found! [ 146.192292][T11548] bond0: (slave team0): Releasing backup interface [ 146.211082][T11548] team0 (unregistering): left promiscuous mode [ 146.218003][T11548] team0 (unregistering): left allmulticast mode [ 146.562012][T11573] tipc: Enabled bearer , priority 0 [ 146.588371][T11573] tipc: Disabling bearer [ 146.780992][T11586] macvlan1: entered promiscuous mode [ 146.801126][T11592] netlink: 'syz.3.1528': attribute type 3 has an invalid length. [ 146.816631][T11586] macvlan1: left promiscuous mode [ 147.054013][ T9119] IPVS: starting estimator thread 0... [ 147.158728][T11604] IPVS: using max 50 ests per chain, 120000 per kthread [ 147.512996][T11638] __nla_validate_parse: 15 callbacks suppressed [ 147.513014][T11638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1538'. [ 147.581549][T11630] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 147.813290][T11657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.441854][T11684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1552'. [ 148.472993][T11684] bond5: entered promiscuous mode [ 148.478431][T11684] 8021q: adding VLAN 0 to HW filter on device bond5 [ 148.489898][T11684] bond5 (unregistering): Released all slaves [ 148.505300][T11691] macsec1: entered promiscuous mode [ 148.510613][T11691] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 148.517756][T11691] macsec1: entered allmulticast mode [ 148.524502][T11691] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 148.535423][T11692] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1552'. [ 148.651717][T11700] netlink: 'syz.4.1557': attribute type 39 has an invalid length. [ 148.844464][T11725] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1567'. [ 148.879004][T11723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'. [ 149.059310][T11742] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1572'. [ 149.068425][T11742] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1572'. [ 149.099404][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1572'. [ 149.121918][T11742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1572'. [ 149.143928][T11742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1572'. [ 149.808254][T11805] IPVS: length: 209 != 24 [ 149.893744][T11816] pimreg: entered allmulticast mode [ 149.906491][T11816] pimreg: left allmulticast mode [ 150.303942][T11847] bridge0: port 1(erspan0) entered blocking state [ 150.311949][T11847] bridge0: port 1(erspan0) entered disabled state [ 150.320834][T11847] erspan0: entered allmulticast mode [ 150.371960][T11847] erspan0: left allmulticast mode [ 150.388409][T11847] bridge0: port 1(erspan0) entered disabled state [ 150.446362][T11863] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 150.505357][T11874] tipc: Enabled bearer , priority 0 [ 150.557371][T11874] syzkaller0: entered promiscuous mode [ 150.567232][T11874] syzkaller0: entered allmulticast mode [ 150.584582][T11874] tipc: Resetting bearer [ 150.599923][T11869] tipc: Resetting bearer [ 150.611741][T11869] tipc: Disabling bearer [ 150.858831][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 150.919903][T11897] netlink: 'syz.0.1616': attribute type 6 has an invalid length. [ 150.946386][T11897] netlink: 'syz.0.1616': attribute type 7 has an invalid length. [ 151.009305][T11897] netlink: 'syz.0.1616': attribute type 8 has an invalid length. [ 151.392107][T11936] pim6reg: entered allmulticast mode [ 151.444488][T11936] pim6reg: left allmulticast mode [ 152.656113][T11994] __nla_validate_parse: 14 callbacks suppressed [ 152.656165][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1643'. [ 152.674445][T11994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1643'. [ 152.746657][ T30] audit: type=1800 audit(1756020304.928:9): pid=12000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1644" name="memory.events" dev="tmpfs" ino=1865 res=0 errno=0 [ 152.763873][T12002] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 152.793826][ T30] audit: type=1804 audit(1756020304.968:10): pid=12000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1644" name="memory.events" dev="tmpfs" ino=1865 res=1 errno=0 [ 153.083357][T12026] tipc: Enabling of bearer rejected, already enabled [ 153.104412][T12026] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 153.125542][T12026] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 153.190548][T12021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1652'. [ 153.200185][T12021] netlink: 'syz.1.1652': attribute type 4 has an invalid length. [ 153.228116][T12036] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.1653'. [ 153.239179][T12026] netlink: 'syz.4.1651': attribute type 1 has an invalid length. [ 153.247029][T12026] NCSI netlink: No device for ifindex 0 [ 153.303536][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1656'. [ 153.533854][T12060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1657'. [ 153.593238][T12067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1662'. [ 153.605324][T12067] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1662'. [ 153.636311][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1662'. [ 153.651915][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1663'. [ 153.689585][T12074] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 153.716641][T12076] syzkaller0: entered promiscuous mode [ 153.726497][T12076] syzkaller0: entered allmulticast mode [ 154.047482][T12104] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 154.142752][T12119] ip6tnl3: entered promiscuous mode [ 154.148258][T12119] ip6tnl3: entered allmulticast mode [ 154.163908][T12116] netlink: 'syz.0.1673': attribute type 10 has an invalid length. [ 154.333146][T12140] pim6reg1: entered promiscuous mode [ 154.341527][T12140] pim6reg1: entered allmulticast mode [ 154.744678][T12179] syzkaller1: entered promiscuous mode [ 154.756207][T12179] syzkaller1: entered allmulticast mode [ 155.074784][T12208] bridge6: entered promiscuous mode [ 155.091818][T12208] bridge6: entered allmulticast mode [ 155.854347][T12250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.931855][T12257] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 155.997150][T12257] 8021q: adding VLAN 0 to HW filter on device bond5 [ 156.067948][T12265] netlink: 'syz.3.1711': attribute type 3 has an invalid length. [ 156.078274][T12265] netlink: 'syz.3.1711': attribute type 3 has an invalid length. [ 156.104550][T12268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.173027][T12279] bpq0: entered promiscuous mode [ 156.290741][T12282] netlink: 'syz.1.1717': attribute type 5 has an invalid length. [ 156.383178][T12293] netlink: 'syz.4.1720': attribute type 1 has an invalid length. [ 156.403477][T12290] IPVS: Scheduler module ip_vs_sip not found [ 156.436194][T12293] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 156.477615][T12293] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 156.501214][T12293] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 157.311554][T12354] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 157.330763][ T5862] block nbd0: Receive control failed (result -32) [ 157.524620][T12379] netlink: 'syz.0.1743': attribute type 10 has an invalid length. [ 157.609892][T12383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.712807][T12387] netlink: 'syz.0.1746': attribute type 1 has an invalid length. [ 157.760374][T12387] bond5: (slave geneve0): making interface the new active one [ 157.768466][T12387] bond5: (slave geneve0): Enslaving as an active interface with an up link [ 157.789831][ T6178] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 157.812946][ T6178] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 157.833825][ T6178] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 157.866993][ T6178] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 158.035716][T12406] __nla_validate_parse: 23 callbacks suppressed [ 158.035733][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1750'. [ 158.106553][T12406] hsr_slave_1 (unregistering): left promiscuous mode [ 158.253932][T12410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1751'. [ 158.341046][T12410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1751'. [ 158.501515][T12437] sctp: [Deprecated]: syz.3.1755 (pid 12437) Use of int in maxseg socket option. [ 158.501515][T12437] Use struct sctp_assoc_value instead [ 158.536328][T12437] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 158.554898][T12442] netlink: 'syz.2.1758': attribute type 1 has an invalid length. [ 158.645718][T12453] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1761'. [ 158.717948][T12446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1760'. [ 158.954056][T12458] syzkaller1: entered allmulticast mode [ 158.990299][T12464] nbd2: detected capacity change from 0 to 549764202496 [ 159.035448][T12464] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1765'. [ 159.071661][ T5862] block nbd2: Receive control failed (result -32) [ 159.175110][T12477] tipc: Enabled bearer , priority 0 [ 159.182656][T12475] netlink: 'syz.1.1768': attribute type 1 has an invalid length. [ 159.186705][T12477] gtp0: entered promiscuous mode [ 159.201829][T12477] netlink: 'syz.3.1769': attribute type 10 has an invalid length. [ 159.211171][T12477] bond0: (slave wlan1): Opening slave failed [ 159.236588][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1768'. [ 159.262431][T12480] syzkaller1: entered promiscuous mode [ 159.267940][T12480] syzkaller1: entered allmulticast mode [ 159.299143][T12475] netlink: 'syz.1.1768': attribute type 1 has an invalid length. [ 159.339612][ T5862] Bluetooth: hci0: command tx timeout [ 159.439881][T12494] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1773'. [ 159.552652][T12501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1774'. [ 159.746252][T12504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1776'. [ 159.922179][ T9140] IPVS: starting estimator thread 0... [ 159.951997][T12519] tipc: Enabling of bearer rejected, already enabled [ 160.035931][T12519] tipc: Enabling of bearer rejected, already enabled [ 160.054046][T12518] IPVS: using max 47 ests per chain, 112800 per kthread [ 160.170069][T12536] netlink: 'syz.1.1784': attribute type 1 has an invalid length. [ 160.271156][T12536] 8021q: adding VLAN 0 to HW filter on device bond6 [ 160.311859][T12546] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 160.336093][T12551] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 161.400524][T12604] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 161.497745][T12608] syzkaller1: entered promiscuous mode [ 161.503653][T12608] syzkaller1: entered allmulticast mode [ 161.701945][T12627] tipc: Enabled bearer , priority 0 [ 161.725373][T12635] gtp1: entered promiscuous mode [ 161.731738][T12635] gtp1: entered allmulticast mode [ 161.915748][T12660] IPv6: sit2: Disabled Multicast RS [ 161.995929][T12668] bridge3: entered allmulticast mode [ 162.023801][T12673] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 162.034585][T12674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.716554][T12705] macsec1: entered promiscuous mode [ 162.735364][T12708] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 162.760630][T12705] team0: entered promiscuous mode [ 163.055090][T12740] pimreg3: entered allmulticast mode [ 163.078697][T12743] vxcan1 speed is unknown, defaulting to 1000 [ 163.083906][T12744] netlink: 'syz.0.1837': attribute type 1 has an invalid length. [ 163.085418][T12743] vxcan1 speed is unknown, defaulting to 1000 [ 163.125785][T12744] bond6: (slave gretap1): making interface the new active one [ 163.134713][T12744] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 163.151077][T12744] vlan2: entered allmulticast mode [ 163.156330][T12744] bond6: entered allmulticast mode [ 163.162278][T12744] gretap1: entered allmulticast mode [ 163.172953][T12750] __nla_validate_parse: 10 callbacks suppressed [ 163.172971][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1838'. [ 163.192480][T12744] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 163.256140][T12743] vxcan1 speed is unknown, defaulting to 1000 [ 163.444377][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1843'. [ 163.493402][T12767] veth0_vlan: left allmulticast mode [ 163.517574][T12743] infiniband syz2: set down [ 163.523387][T12743] infiniband syz2: added vxcan1 [ 163.603488][ T9119] vxcan1 speed is unknown, defaulting to 1000 [ 163.604172][T12743] RDS/IB: syz2: added [ 163.625692][T12743] smc: adding ib device syz2 with port count 1 [ 163.634642][T12743] smc: ib device syz2 port 1 has pnetid [ 163.641221][ T5966] vxcan1 speed is unknown, defaulting to 1000 [ 163.648040][T12743] vxcan1 speed is unknown, defaulting to 1000 [ 163.769898][T12743] vxcan1 speed is unknown, defaulting to 1000 [ 163.923787][T12743] vxcan1 speed is unknown, defaulting to 1000 [ 164.070758][ T5862] Bluetooth: hci1: command 0x080f tx timeout [ 164.094655][T12743] vxcan1 speed is unknown, defaulting to 1000 [ 164.207336][T12743] vxcan1 speed is unknown, defaulting to 1000 [ 164.223190][T12762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.382322][T12800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1852'. [ 164.396996][T12743] vxcan1 speed is unknown, defaulting to 1000 [ 164.530918][T12811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1856'. [ 164.565495][T12811] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1856'. [ 164.601193][T12816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1856'. [ 164.651513][T12743] vxcan1 speed is unknown, defaulting to 1000 [ 164.764584][T12820] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 164.821489][T12825] netlink: 'syz.2.1861': attribute type 10 has an invalid length. [ 164.893644][T12820] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 165.012144][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1864'. [ 165.044425][T12840] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 165.079916][T12820] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 165.129936][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1867'. [ 165.173827][T12820] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 165.282541][ T3011] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 165.312834][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 165.365490][ T6178] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 165.404233][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 165.524866][T12850] vxcan1 speed is unknown, defaulting to 1000 [ 165.845150][T12836] vxcan1 speed is unknown, defaulting to 1000 [ 166.055823][T12871] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.063133][T12871] IPv6: NLM_F_CREATE should be set when creating new route [ 166.070466][T12871] IPv6: NLM_F_CREATE should be set when creating new route [ 166.125909][T12875] batadv_slave_1: entered promiscuous mode [ 166.148453][T12875] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1875'. [ 166.173525][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1875'. [ 166.215930][T12879] netlink: 'syz.1.1876': attribute type 4 has an invalid length. [ 166.243103][T12874] batadv_slave_1: left promiscuous mode [ 166.820222][T12909] nbd: must specify an index to disconnect [ 166.873758][T12905] nbd: must specify an index to disconnect [ 167.055469][T12945] netlink: 'syz.3.1896': attribute type 1 has an invalid length. [ 167.084817][T12945] netlink: 'syz.3.1896': attribute type 1 has an invalid length. [ 167.098454][T12951] vlan2: left promiscuous mode [ 167.125586][T12951] veth3: left promiscuous mode [ 167.133815][T12951] vlan3: left promiscuous mode [ 167.154908][T12951] bond0: left promiscuous mode [ 167.162451][T12951] vlan3: left allmulticast mode [ 167.175606][T12951] bond0: left allmulticast mode [ 167.181776][T12951] macsec1: left promiscuous mode [ 167.186872][T12951] macsec1: left allmulticast mode [ 167.195486][T12951] veth9: left promiscuous mode [ 167.201679][T12951] ip6tnl3: left promiscuous mode [ 167.206729][T12951] ip6tnl3: left allmulticast mode [ 167.284947][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.297699][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.307057][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.333876][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.346467][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.363999][T12974] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 167.375085][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.386484][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.396690][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.409250][T12977] tipc: Cannot configure node identity twice [ 167.416709][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.441617][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.463933][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.474807][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.487795][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.496593][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.507278][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.516220][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.550302][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.560833][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.571247][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.586449][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.595482][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.627155][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.656061][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.689782][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.709435][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.730442][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.756746][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.784620][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.796256][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.808841][T13011] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 167.845688][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.868859][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.880384][T12999] vxcan1 speed is unknown, defaulting to 1000 [ 167.880429][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.914778][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.923880][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.932682][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.947670][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.970636][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.981272][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.989715][T12966] tipc: Enabling of bearer rejected, already enabled [ 167.998179][T12966] tipc: Enabling of bearer rejected, already enabled [ 168.023727][T12966] tipc: Enabling of bearer rejected, already enabled [ 168.032760][T12966] tipc: Enabling of bearer rejected, already enabled [ 168.043748][T12966] tipc: Enabling of bearer rejected, already enabled [ 168.079034][T12966] tipc: Enabling of bearer rejected, already enabled [ 168.098445][T12966] tipc: Enabling of bearer rejected, already enabled [ 168.404531][T13062] __nla_validate_parse: 19 callbacks suppressed [ 168.404550][T13062] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1929'. [ 168.553157][T13064] block nbd3: server does not support multiple connections per device. [ 168.566686][T13064] block nbd3: shutting down sockets [ 168.598445][T13066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1931'. [ 168.604325][T13077] syzkaller1: tun_chr_ioctl cmd 1074025698 [ 168.634555][T13077] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 168.641347][T13077] syzkaller1: linktype set to 6 [ 168.751550][T13086] Bluetooth: MGMT ver 1.23 [ 168.891141][T13095] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1941'. [ 168.934288][T13099] pim6reg1: entered promiscuous mode [ 168.941754][T13099] pim6reg1: entered allmulticast mode [ 169.077897][T13114] netlink: 'syz.4.1946': attribute type 1 has an invalid length. [ 169.160144][T13121] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1948'. [ 169.171415][T13121] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1948'. [ 169.187550][T13121] rdma_rxe: rxe_newlink: failed to add lo [ 169.242931][T13121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.256077][T13121] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.267359][T13121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.292276][T13127] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1950'. [ 169.305094][T13127] tap0: tun_chr_ioctl cmd 1074025675 [ 169.315897][T13127] tap0: persist disabled [ 169.520169][T13152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1960'. [ 169.529751][T13152] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1960'. [ 170.046911][T13211] TC_ACT_REPEAT abuse ? [ 170.314050][T13219] vxcan1 speed is unknown, defaulting to 1000 [ 170.347419][T13231] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1979'. [ 170.393318][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1980'. [ 170.990043][T13267] sctp: [Deprecated]: syz.2.1991 (pid 13267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.990043][T13267] Use struct sctp_sack_info instead [ 171.562726][T13315] netlink: zone id is out of range [ 171.586810][T13315] netlink: zone id is out of range [ 171.757573][T13321] netlink: del zone limit has 4 unknown bytes [ 171.773662][T13323] bond2: entered promiscuous mode [ 171.781339][T13277] vxcan1 speed is unknown, defaulting to 1000 [ 171.788022][T13327] vlan0: entered promiscuous mode [ 171.811395][T13303] TC_ACT_REPEAT abuse ? [ 171.894738][T13315] netlink: set zone limit has 4 unknown bytes [ 171.977797][T13336] bond2: (slave geneve2): Releasing active interface [ 172.027913][T13336] bond3: (slave veth3): Releasing backup interface [ 172.150495][T13346] netlink: 'syz.1.2009': attribute type 1 has an invalid length. [ 172.311353][T13359] bridge0: entered promiscuous mode [ 172.326840][T13359] bridge0: entered allmulticast mode [ 172.342447][T13354] netlink: 'syz.0.2012': attribute type 4 has an invalid length. [ 172.353083][T13359] lo: entered allmulticast mode [ 172.370100][T13359] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 172.378049][T13358] lo: left allmulticast mode [ 172.387850][T13345] vxcan1 speed is unknown, defaulting to 1000 [ 172.444946][T13354] netlink: 'syz.0.2012': attribute type 1 has an invalid length. [ 172.780272][T13390] pimreg: entered allmulticast mode [ 172.787078][T13390] netlink: 'syz.3.2020': attribute type 1 has an invalid length. [ 173.135500][T13403] netlink: 'syz.2.2023': attribute type 11 has an invalid length. [ 173.156341][T13403] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 173.186187][T13405] netlink: 'syz.3.2024': attribute type 10 has an invalid length. [ 173.218751][T13405] bond0: (slave wlan1): Opening slave failed [ 173.501617][T13425] __nla_validate_parse: 16 callbacks suppressed [ 173.501637][T13425] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2033'. [ 173.568307][T13424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2032'. [ 173.834817][T13441] bond0: entered promiscuous mode [ 173.842780][T13441] bond0: entered allmulticast mode [ 173.851470][T13441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.014497][T13451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2037'. [ 174.103733][T13445] vxcan1 speed is unknown, defaulting to 1000 [ 174.165831][T13460] tipc: Enabled bearer , priority 0 [ 174.182194][T13460] tipc: Resetting bearer [ 174.192049][T13459] tipc: Disabling bearer [ 174.307625][T13467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2046'. [ 174.388432][T13474] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2046'. [ 174.504756][T13481] tipc: Enabling of bearer rejected, already enabled [ 174.525603][T13481] syzkaller0: entered promiscuous mode [ 174.544258][T13481] syzkaller0: entered allmulticast mode [ 174.575670][T13484] netlink: 'syz.2.2051': attribute type 3 has an invalid length. [ 174.591857][T13486] netlink: 732 bytes leftover after parsing attributes in process `syz.0.2049'. [ 174.618293][T13486] netlink: 732 bytes leftover after parsing attributes in process `syz.0.2049'. [ 174.680656][T13481] tipc: Resetting bearer [ 174.820673][T13494] nbd: socks must be embedded in a SOCK_ITEM attr [ 174.990480][T13510] tipc: Enabling of bearer rejected, already enabled [ 175.099496][T13519] syzkaller0: entered promiscuous mode [ 175.105107][T13519] syzkaller0: entered allmulticast mode [ 175.115990][T13520] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 175.141726][T13519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2061'. [ 175.166387][T13528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2063'. [ 175.267921][T13538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2066'. [ 175.346903][T13541] bpq0: left promiscuous mode [ 175.489081][T13559] netlink: 'syz.3.2070': attribute type 5 has an invalid length. [ 175.802394][T13586] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:21 [ 175.865948][T13583] vxcan1 speed is unknown, defaulting to 1000 [ 175.932882][T13593] TC_ACT_REPEAT abuse ? [ 176.097616][T13601] IPVS: length: 20 != 8 [ 176.121967][T13601] bridge11: entered allmulticast mode [ 176.132063][T13602] IPVS: length: 20 != 182255695864 [ 176.286826][T13613] 8021q: VLANs not supported on caif0 [ 176.376192][ T49] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.392145][T13617] vlan0: entered promiscuous mode [ 176.415136][ T49] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.432161][ T49] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.454136][ T49] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.468287][T13625] netlink: 'syz.3.2093': attribute type 3 has an invalid length. [ 176.523600][T13625] Set syz0 is full, maxelem 0 reached [ 176.660445][T13645] netlink: 'syz.3.2097': attribute type 5 has an invalid length. [ 176.687807][T13645] geneve2: entered promiscuous mode [ 176.693121][T13645] geneve2: entered allmulticast mode [ 176.704888][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 176.713162][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 176.748327][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 176.756613][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 176.772633][T13651] vlan0: entered promiscuous mode [ 176.833323][T13655] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 176.903846][T13665] syzkaller1: entered promiscuous mode [ 176.912282][T13665] syzkaller1: entered allmulticast mode [ 176.984261][T13673] pim6reg: entered allmulticast mode [ 177.023540][T13673] pim6reg: left allmulticast mode [ 177.066472][T13678] tipc: Enabling of bearer rejected, failed to enable media [ 177.225190][T13674] vxcan1 speed is unknown, defaulting to 1000 [ 177.504333][T13687] vxcan1 speed is unknown, defaulting to 1000 [ 177.742102][T13715] 8021q: adding VLAN 0 to HW filter on device bond7 [ 177.765659][T13715] bridge0: port 1(bond7) entered blocking state [ 177.775788][T13715] bridge0: port 1(bond7) entered disabled state [ 177.783098][T13715] bond7: entered allmulticast mode [ 177.848100][T13715] bond7: entered promiscuous mode [ 177.872259][T13691] vxcan1 speed is unknown, defaulting to 1000 [ 178.517469][T13764] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 178.783880][T13717] vxcan1 speed is unknown, defaulting to 1000 [ 178.941196][T13794] __nla_validate_parse: 30 callbacks suppressed [ 178.941217][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2137'. [ 179.344097][T13826] validate_nla: 2 callbacks suppressed [ 179.344115][T13826] netlink: 'syz.3.2148': attribute type 1 has an invalid length. [ 179.507848][T13836] TC_ACT_REPEAT abuse ? [ 179.550714][T13826] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.584747][T13831] bond3: (slave bridge9): making interface the new active one [ 179.605348][T13831] bond3: (slave bridge9): Enslaving as an active interface with an up link [ 179.630603][T13840] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 179.778018][T13830] vxcan1 speed is unknown, defaulting to 1000 [ 179.897832][T13852] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2152'. [ 180.109851][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2158'. [ 180.307488][T13881] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2163'. [ 180.310374][T13879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2162'. [ 180.325901][T13879] veth0_to_bond: entered allmulticast mode [ 180.721884][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2170'. [ 180.846211][T13916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2173'. [ 180.946028][T13900] vxcan1 speed is unknown, defaulting to 1000 [ 181.052030][T13928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2176'. [ 181.100961][ T5869] Bluetooth: hci2: command 0x0401 tx timeout [ 181.107119][ T5870] Bluetooth: hci3: command 0x0406 tx timeout [ 181.107214][ T5868] Bluetooth: hci1: command 0x080f tx timeout [ 181.153756][T13935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2178'. [ 181.170840][T13935] bridge0: port 2(macvlan0) entered blocking state [ 181.178147][T13935] bridge0: port 2(macvlan0) entered disabled state [ 181.189727][T13935] macvlan0: entered allmulticast mode [ 181.204057][T13935] macvlan0: left allmulticast mode [ 181.443635][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2180'. [ 181.454862][T13943] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 181.785950][T13969] netlink: 'syz.0.2187': attribute type 1 has an invalid length. [ 181.816140][T13948] vxcan1 speed is unknown, defaulting to 1000 [ 181.917211][T13976] netlink: 'syz.0.2189': attribute type 1 has an invalid length. [ 181.937124][T13977] netlink: 'syz.0.2189': attribute type 1 has an invalid length. [ 182.054124][T13976] 8021q: adding VLAN 0 to HW filter on device bond7 [ 182.561317][T14004] tipc: Enabling of bearer rejected, already enabled [ 182.603785][T14012] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 182.669851][T14012] netlink: 'syz.2.2198': attribute type 10 has an invalid length. [ 182.678497][T14012] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 182.702996][T14012] bond0: (slave wlan1): refused to change device type [ 183.663319][T14046] netlink: 'syz.2.2207': attribute type 1 has an invalid length. [ 183.934627][T14078] TC_ACT_REPEAT abuse ? [ 183.982544][T14077] netlink: 'syz.0.2217': attribute type 4 has an invalid length. [ 183.990681][T14077] __nla_validate_parse: 4 callbacks suppressed [ 183.990698][T14077] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2217'. [ 184.011474][T14080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2210'. [ 184.021873][T14077] Ã: renamed from bond0 (while UP) [ 184.091292][T14084] TC_ACT_REPEAT abuse ? [ 184.166939][T14089] netlink: 'syz.1.2218': attribute type 2 has an invalid length. [ 184.792697][T14125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2222'. [ 184.835147][T14133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.866460][T14125] bridge10: port 1(veth15) entered blocking state [ 184.891551][T14125] bridge10: port 1(veth15) entered disabled state [ 184.901035][T14125] veth15: entered allmulticast mode [ 184.926689][T14125] veth15: entered promiscuous mode [ 184.965363][T14126] bridge10: port 2(veth0_to_bond) entered blocking state [ 184.974402][T14126] bridge10: port 2(veth0_to_bond) entered disabled state [ 184.986581][T14126] veth0_to_bond: entered allmulticast mode [ 185.003834][T14126] veth0_to_bond: entered promiscuous mode [ 185.040795][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2228'. [ 185.189825][T14166] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2232'. [ 185.371363][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'. [ 185.382055][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'. [ 185.469649][T14198] netlink: 'syz.4.2243': attribute type 1 has an invalid length. [ 185.513327][T14198] 8021q: adding VLAN 0 to HW filter on device bond7 [ 185.556640][T14198] bond7: (slave gretap3): making interface the new active one [ 185.575524][T14206] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 185.595995][T14198] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 185.661949][T14211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2247'. [ 185.681914][T14209] tipc: Enabling of bearer rejected, already enabled [ 185.724360][T14216] TC_ACT_REPEAT abuse ? [ 185.742396][T14209] tipc: Resetting bearer [ 185.902677][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 185.962578][T14232] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2252'. [ 185.987049][T14232] unsupported nlmsg_type 40 [ 186.024330][T14232] netlink: 'syz.3.2252': attribute type 21 has an invalid length. [ 186.032908][T14232] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2252'. [ 186.102311][T14238] netlink: 'syz.4.2254': attribute type 1 has an invalid length. [ 186.119328][T14238] netlink: 'syz.4.2254': attribute type 1 has an invalid length. [ 186.184460][T14245] netlink: 'syz.4.2254': attribute type 1 has an invalid length. [ 186.243025][T14245] 8021q: adding VLAN 0 to HW filter on device bond8 [ 186.452880][T14274] netlink: 'syz.1.2264': attribute type 1 has an invalid length. [ 186.472192][T14274] netlink: 'syz.1.2264': attribute type 3 has an invalid length. [ 186.487847][T14274] NCSI netlink: No device for ifindex 246 [ 186.721983][T14293] netlink: 'syz.1.2269': attribute type 23 has an invalid length. [ 186.938449][T14307] pim6reg: entered allmulticast mode [ 186.983626][T14309] pim6reg: left allmulticast mode [ 187.393877][T14330] netlink: 'syz.2.2280': attribute type 33 has an invalid length. [ 187.972138][T14380] TC_ACT_REPEAT abuse ? [ 187.978911][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 187.991861][T14380] TC_ACT_REPEAT abuse ? [ 188.473259][T14412] vxcan1 speed is unknown, defaulting to 1000 [ 188.741911][T14434] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 188.794281][T14437] syzkaller1: entered promiscuous mode [ 188.800690][T14437] syzkaller1: entered allmulticast mode [ 188.811840][T14437] netlink: 'syz.4.2311': attribute type 7 has an invalid length. [ 188.919393][T14439] sctp: [Deprecated]: syz.2.2312 (pid 14439) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.919393][T14439] Use struct sctp_sack_info instead [ 189.049469][T14446] __nla_validate_parse: 15 callbacks suppressed [ 189.049490][T14446] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2315'. [ 189.053635][T14443] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 189.077428][T14443] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2314'. [ 189.087690][T14447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2316'. [ 189.088231][T14443] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2314'. [ 189.126564][T14447] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2316'. [ 189.163690][T14453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2318'. [ 189.188399][T14453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2318'. [ 189.223779][T14458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2320'. [ 189.234297][T14453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2318'. [ 189.234761][T14458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2320'. [ 189.352487][T14463] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 189.566818][T14473] TC_ACT_REPEAT abuse ? [ 189.649370][ C0] TC_ACT_REPEAT abuse ? [ 189.689354][ C0] TC_ACT_REPEAT abuse ? [ 189.739299][ C0] TC_ACT_REPEAT abuse ? [ 189.885242][T14494] vxcan1 speed is unknown, defaulting to 1000 [ 190.064208][T14511] 8021q: adding VLAN 0 to HW filter on device bond9 [ 190.079635][T14495] vxcan1 speed is unknown, defaulting to 1000 [ 190.161910][T14511] bond7: (slave gretap3): Releasing active interface [ 190.464681][T14561] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 190.476466][T14561] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 190.896521][T14585] bond0: (slave batadv0): Releasing backup interface [ 190.927801][T14585] team0: Port device vlan0 removed [ 190.949469][T14585] bond3: (slave bridge3): Releasing active interface [ 190.966039][T14585] bond7: left allmulticast mode [ 190.971587][T14585] bond7: left promiscuous mode [ 190.976551][T14585] bridge0: port 1(bond7) entered disabled state [ 191.033354][T14577] team0: Mode changed to "loadbalance" [ 191.171600][T14599] syzkaller1: entered promiscuous mode [ 191.199624][T14599] syzkaller1: entered allmulticast mode [ 191.374674][T14613] validate_nla: 11 callbacks suppressed [ 191.374691][T14613] netlink: 'syz.2.2369': attribute type 1 has an invalid length. [ 191.721539][T14639] lo: entered allmulticast mode [ 191.739644][T14639] lo: left allmulticast mode [ 191.790414][T14642] bridge7: entered promiscuous mode [ 191.796239][T14642] macsec1: entered promiscuous mode [ 191.805080][T14642] macsec1: entered allmulticast mode [ 191.812329][T14642] bridge7: entered allmulticast mode [ 191.819726][T14642] bridge7: port 1(macsec1) entered blocking state [ 191.826408][T14642] bridge7: port 1(macsec1) entered disabled state [ 191.841870][T14642] bridge7: left allmulticast mode [ 191.849826][T14642] bridge7: left promiscuous mode [ 192.057740][T14665] "syz.1.2382" (14665) uses obsolete ecb(arc4) skcipher [ 192.690123][T14700] netlink: 'syz.2.2391': attribute type 2 has an invalid length. [ 192.702512][T14700] þ: entered promiscuous mode [ 193.556184][T14766] ¾x9ÿ: renamed from bridge_slave_0 [ 193.564224][T14766] netlink: 'syz.3.2413': attribute type 5 has an invalid length. [ 193.600185][T14773] tipc: Enabling of bearer rejected, already enabled [ 193.648283][T14767] netlink: 'syz.3.2413': attribute type 12 has an invalid length. [ 193.839517][T14789] vxcan1 speed is unknown, defaulting to 1000 [ 193.969658][T14798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.241432][T14806] vxcan1 speed is unknown, defaulting to 1000 [ 194.271187][T14811] IPVS: Error connecting to the multicast addr [ 194.301590][T14803] TC_ACT_REPEAT abuse ? [ 194.509102][T14821] __nla_validate_parse: 28 callbacks suppressed [ 194.509123][T14821] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2428'. [ 194.557603][T14807] vxcan1 speed is unknown, defaulting to 1000 [ 194.566607][T14829] 8021q: VLANs not supported on tunl0 [ 194.618187][T14829] 8021q: VLANs not supported on tunl0 [ 194.683052][T14829] 8021q: VLANs not supported on tunl0 [ 194.850156][T14851] syzkaller1: entered promiscuous mode [ 194.870906][T14851] syzkaller1: entered allmulticast mode [ 194.895859][T14851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2436'. [ 195.066852][T14862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2440'. [ 195.110201][T14857] netlink: 'syz.0.2437': attribute type 10 has an invalid length. [ 195.486447][T14899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.591209][T14878] vxcan1 speed is unknown, defaulting to 1000 [ 195.946436][T14914] rdma_rxe: rxe_newlink: failed to add macvlan1 [ 196.597870][T14956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2460'. [ 196.660604][T14964] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2463'. [ 196.696780][T14966] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2464'. [ 196.738197][T14968] bridge12: entered promiscuous mode [ 196.747290][T14968] bridge12: entered allmulticast mode [ 196.790874][T14971] netlink: 'syz.4.2466': attribute type 1 has an invalid length. [ 196.824787][T14971] bond10 (unregistering): Released all slaves [ 196.913178][T14955] vxcan1 speed is unknown, defaulting to 1000 [ 196.921972][T14979] netlink: 'syz.0.2467': attribute type 1 has an invalid length. [ 196.938987][T14979] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2467'. [ 197.006481][T14979] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2467'. [ 197.754110][T15005] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2476'. [ 197.776961][T15007] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 197.800326][T15005] openvswitch: netlink: Flow actions attr not present in new flow. [ 198.010869][T14997] vxcan1 speed is unknown, defaulting to 1000 [ 198.036686][T15017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2482'. [ 198.071005][T15021] netlink: 'syz.0.2484': attribute type 3 has an invalid length. [ 198.287965][T15038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.965843][T15070] vxcan1 speed is unknown, defaulting to 1000 [ 199.447570][T15087] netlink: 'syz.4.2501': attribute type 1 has an invalid length. [ 199.523450][T15086] TC_ACT_REPEAT abuse ? [ 199.532103][T15091] __nla_validate_parse: 7 callbacks suppressed [ 199.532122][T15091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2503'. [ 199.563346][T15088] bond10: (slave vti0): The slave device specified does not support setting the MAC address [ 199.598963][T15088] bond10: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 199.662591][T15088] bond10: (slave vti0): making interface the new active one [ 199.687223][T15088] bond10: (slave vti0): Enslaving as an active interface with an up link [ 199.784883][T15101] tipc: Enabling of bearer rejected, already enabled [ 199.815979][T15104] tipc: Resetting bearer [ 199.836049][T15104] syzkaller0: left promiscuous mode [ 199.863128][T15101] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2505'. [ 199.882456][T15101] netlink: 'syz.0.2505': attribute type 29 has an invalid length. [ 199.989609][T15117] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2509'. [ 200.126472][T15132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2511'. [ 200.138082][T15130] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2510'. [ 200.227816][T15141] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2513'. [ 200.311614][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2516'. [ 200.516571][T15160] vxcan1 speed is unknown, defaulting to 1000 [ 200.580964][T15176] netlink: 'syz.4.2523': attribute type 10 has an invalid length. [ 200.769076][T15184] nbd3: detected capacity change from 0 to 63 [ 200.778397][ T5861] block nbd3: Receive control failed (result -32) [ 200.941755][T15189] vxcan1 speed is unknown, defaulting to 1000 [ 201.203951][T15211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2533'. [ 201.407232][T15221] netlink: 'syz.2.2534': attribute type 39 has an invalid length. [ 201.466251][T15207] vxcan1 speed is unknown, defaulting to 1000 [ 201.493771][T15230] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2537'. [ 201.505718][T15231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2537'. [ 201.709593][T15244] tipc: Enabled bearer , priority 0 [ 201.718294][T15244] syzkaller0: entered promiscuous mode [ 201.736586][T15244] syzkaller0: entered allmulticast mode [ 201.807683][T15244] tipc: Resetting bearer [ 201.838018][T15243] tipc: Resetting bearer [ 201.877356][T15243] tipc: Disabling bearer [ 201.940715][T15259] netlink: 'syz.0.2546': attribute type 58 has an invalid length. [ 202.341418][T15287] netlink: 'syz.1.2556': attribute type 13 has an invalid length. [ 202.351767][T15287] netlink: 'syz.1.2556': attribute type 17 has an invalid length. [ 202.394930][T15287] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 202.426825][ T9119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.575750][T15288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.596034][T15284] tunl0: entered allmulticast mode [ 202.802798][T15287] vxcan1 speed is unknown, defaulting to 1000 [ 202.927699][T15304] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 203.013687][ T9119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.186189][T15308] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 203.691603][T15326] tipc: Enabling of bearer rejected, already enabled [ 203.991848][T15308] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 204.031502][T15332] tc_dump_action: action bad kind [ 204.072047][T15308] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 204.141466][T15308] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 204.163405][T15346] tunl0: left allmulticast mode [ 204.203210][T15346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.215777][T15346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.237684][T15348] openvswitch: netlink: IP tunnel attribute has 247 unknown bytes. [ 204.260497][ T6178] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 204.279361][ T6178] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 204.293847][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 204.307912][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 204.505963][T15375] netlink: 'syz.2.2578': attribute type 3 has an invalid length. [ 204.671583][T15385] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 204.694981][T15385] __nla_validate_parse: 14 callbacks suppressed [ 204.695001][T15385] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2584'. [ 204.935613][T15395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.963287][T15404] tipc: Enabling of bearer rejected, already enabled [ 204.978068][T15404] syzkaller0: entered promiscuous mode [ 204.998182][T15407] tipc: Enabling of bearer rejected, already enabled [ 205.008431][T15410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2591'. [ 205.020744][T15410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2591'. [ 205.159717][T15425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2598'. [ 205.242258][T15432] netlink: zone id is out of range [ 205.247557][T15432] netlink: zone id is out of range [ 205.257203][T15432] netlink: zone id is out of range [ 205.264885][T15432] netlink: zone id is out of range [ 205.270646][T15432] netlink: zone id is out of range [ 205.276248][T15432] netlink: zone id is out of range [ 205.286186][T15432] netlink: zone id is out of range [ 205.303319][T15432] netlink: del zone limit has 8 unknown bytes [ 205.361906][T15451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2606'. [ 205.585642][T15469] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2613'. [ 205.642049][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2612'. [ 205.666814][T15475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2612'. [ 205.688143][T15479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2616'. [ 205.709361][T15479] netem: change failed [ 205.912258][T15481] vlan0: entered allmulticast mode [ 205.917422][T15481] bridge0: entered allmulticast mode [ 205.939301][T15481] bridge13: port 1(vlan0) entered blocking state [ 205.946057][T15481] bridge13: port 1(vlan0) entered disabled state [ 205.960206][T15481] vlan0: entered promiscuous mode [ 205.965460][T15481] bridge0: entered promiscuous mode [ 205.978031][T15480] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 206.529893][T15486] kthread_run failed with err -4 [ 206.545172][T15492] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2619'. [ 206.679899][T15510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.868314][T15532] netlink: 'syz.4.2632': attribute type 1 has an invalid length. [ 206.962975][T15540] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 207.437687][T15564] vxcan1 speed is unknown, defaulting to 1000 [ 207.882615][T15608] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 207.946896][T15608] bond7: entered promiscuous mode [ 207.953186][T15608] bond7: entered allmulticast mode [ 207.962054][T15608] 8021q: adding VLAN 0 to HW filter on device bond7 [ 207.974503][T15629] netlink: 'syz.4.2656': attribute type 2 has an invalid length. [ 207.985239][T15614] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 208.028210][T15629] þ: entered promiscuous mode [ 208.127502][T15632] sctp: [Deprecated]: syz.1.2658 (pid 15632) Use of int in max_burst socket option deprecated. [ 208.127502][T15632] Use struct sctp_assoc_value instead [ 208.545733][T15671] geneve2: entered promiscuous mode [ 208.551177][T15671] geneve2: entered allmulticast mode [ 208.594567][T15657] vxcan1 speed is unknown, defaulting to 1000 [ 208.721898][T15682] netlink: 'syz.3.2670': attribute type 11 has an invalid length. [ 208.814934][T15667] vxcan1 speed is unknown, defaulting to 1000 [ 209.041944][T15697] netlink: 'syz.1.2675': attribute type 1 has an invalid length. [ 209.143166][T15707] tipc: Enabling of bearer rejected, already enabled [ 209.755247][T15720] vxcan1 speed is unknown, defaulting to 1000 [ 209.868855][T15749] __nla_validate_parse: 40 callbacks suppressed [ 209.868874][T15749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2689'. [ 209.975811][T15731] vxcan1 speed is unknown, defaulting to 1000 [ 209.989432][T15754] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2691'. [ 210.001456][T15754] net_ratelimit: 2 callbacks suppressed [ 210.001477][T15754] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 210.017435][T15755] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2681'. [ 210.195463][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2694'. [ 210.281169][T15761] macvtap1: entered promiscuous mode [ 210.286586][T15761] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 210.352949][T15766] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2695'. [ 210.479310][T15766] batadv1: entered promiscuous mode [ 210.593773][T15768] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2696'. [ 210.615031][T15773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2697'. [ 211.404001][T15814] TC_ACT_REPEAT abuse ? [ 211.410244][T15814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2709'. [ 211.419810][T15814] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2709'. [ 211.431714][T15814] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2709'. [ 211.464766][T15814] netlink: 'syz.1.2709': attribute type 5 has an invalid length. [ 211.660231][T15814] vxcan1 speed is unknown, defaulting to 1000 [ 211.905238][T15853] netlink: 'syz.3.2720': attribute type 1 has an invalid length. [ 212.021034][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.037789][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.061868][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.100565][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.276154][T15889] netlink: 'syz.2.2729': attribute type 1 has an invalid length. [ 212.385520][T15889] 8021q: adding VLAN 0 to HW filter on device bond8 [ 212.469876][T15882] vxcan1 speed is unknown, defaulting to 1000 [ 212.571811][T15884] veth11: entered promiscuous mode [ 212.604170][T15901] openvswitch: netlink: Duplicate or invalid key (type 0). [ 212.629195][T15901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.858076][T15921] sctp: [Deprecated]: syz.0.2741 (pid 15921) Use of int in maxseg socket option. [ 212.858076][T15921] Use struct sctp_assoc_value instead [ 212.983159][T15935] netlink: 'syz.3.2745': attribute type 2 has an invalid length. [ 213.019934][T15935] þ: entered promiscuous mode [ 213.186048][T15948] netlink: 'syz.1.2750': attribute type 10 has an invalid length. [ 213.217494][T15951] netlink: 'syz.1.2750': attribute type 10 has an invalid length. [ 213.333424][T15970] delete_channel: no stack [ 213.457658][T15980] à (unregistering): Released all slaves [ 213.500814][T15983] netlink: 'syz.4.2760': attribute type 20 has an invalid length. [ 213.783712][T16013] tipc: Enabled bearer , priority 0 [ 213.802860][T16020] tipc: Resetting bearer [ 213.893476][T16012] tipc: Disabling bearer [ 214.475427][T16061] TC_ACT_REPEAT abuse ? [ 214.601627][T16073] tipc: Enabling of bearer rejected, already enabled [ 214.681097][T16084] syz_tun: entered promiscuous mode [ 214.696995][T16084] syz_tun: entered allmulticast mode [ 214.746281][T16050] vxcan1 speed is unknown, defaulting to 1000 [ 215.052278][T16109] netlink: 'syz.4.2795': attribute type 2 has an invalid length. [ 215.081984][T16109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.110754][T16109] __nla_validate_parse: 20 callbacks suppressed [ 215.110773][T16109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2795'. [ 215.129335][T16109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2795'. [ 215.194474][T16119] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2797'. [ 215.226058][T16119] macvlan1: entered promiscuous mode [ 215.241746][T16119] macvlan1: left promiscuous mode [ 215.250437][T16122] netlink: 53 bytes leftover after parsing attributes in process `syz.4.2797'. [ 215.275386][T16121] netlink: 'syz.2.2798': attribute type 4 has an invalid length. [ 215.309584][T16121] netlink: 'syz.2.2798': attribute type 4 has an invalid length. [ 215.398000][T16129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2800'. [ 215.610828][T16132] netlink: 'syz.4.2801': attribute type 2 has an invalid length. [ 215.633349][T16139] tipc: Enabling of bearer rejected, already enabled [ 215.655414][T16132] : entered promiscuous mode [ 215.857932][T16146] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.897913][T16146] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 216.029933][T16146] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.069112][T16146] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 216.111084][T16160] macvtap2: entered allmulticast mode [ 216.123680][T16160] bridge0: port 1(macvtap2) entered blocking state [ 216.125578][T16166] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.2809'. [ 216.138881][T16160] bridge0: port 1(macvtap2) entered disabled state [ 216.235875][T16144] vxcan1 speed is unknown, defaulting to 1000 [ 216.251804][T16146] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.265288][T16146] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 216.330135][T16173] netlink: 'syz.4.2812': attribute type 8 has an invalid length. [ 216.350269][T16173] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2812'. [ 216.365095][T16173] tipc: Enabling of bearer rejected, already enabled [ 216.393876][T16146] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.404944][T16146] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 216.514608][T16181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2815'. [ 216.526700][ T3011] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.535313][ T3011] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 216.555615][ T3011] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.564238][ T3011] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 216.565733][T16181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.574383][ T3011] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.590205][ T3011] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 216.601596][ T3011] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.609997][ T3011] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 216.786697][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2821'. [ 216.826366][T16202] netlink: 452 bytes leftover after parsing attributes in process `syz.3.2818'. [ 216.906904][T16207] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 217.269263][ T9119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.637337][T16250] tipc: Enabling of bearer rejected, already enabled [ 217.667309][T16254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.679012][ T9119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.692473][T16252] tipc: Enabling of bearer rejected, already enabled [ 217.830738][T16274] team0: entered promiscuous mode [ 217.836069][T16274] team0: entered allmulticast mode [ 217.842314][T16274] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.850889][T16251] vxcan1 speed is unknown, defaulting to 1000 [ 218.542377][T16293] netlink: 'syz.4.2843': attribute type 1 has an invalid length. [ 218.627480][T16299] macsec0: entered promiscuous mode [ 218.642652][T16301] nbd: nbd2 already in use [ 218.648001][T16301] block nbd2: NBD_DISCONNECT [ 218.652884][T16301] block nbd2: Send disconnect failed -32 [ 218.659147][T16301] block nbd2: shutting down sockets [ 218.696865][T16305] IPVS: set_ctl: invalid protocol: 111 172.30.0.2:20000 [ 218.736475][T16305] veth0_to_bridge: entered allmulticast mode [ 219.007414][T16325] tipc: Enabling of bearer rejected, already enabled [ 219.080639][T16307] vxcan1 speed is unknown, defaulting to 1000 [ 219.216036][T16341] netlink: 'syz.1.2860': attribute type 10 has an invalid length. [ 219.234429][T16344] netlink: 'syz.0.2861': attribute type 1 has an invalid length. [ 219.258979][T16344] 8021q: adding VLAN 0 to HW filter on device bond8 [ 219.303144][T16344] ip6gretap4: entered promiscuous mode [ 219.314524][T16344] bond8: (slave ip6gretap4): making interface the new active one [ 219.327032][T16344] bond8: (slave ip6gretap4): Enslaving as an active interface with an up link [ 219.371480][T16344] veth3: entered promiscuous mode [ 219.380444][T16344] erspan0: entered allmulticast mode [ 219.482585][T16368] tipc: Enabling of bearer rejected, already enabled [ 219.649928][T16374] nbd: must specify at least one socket [ 219.690918][T16378] netlink: 'syz.0.2873': attribute type 3 has an invalid length. [ 219.710944][T16374] syz_tun: entered promiscuous mode [ 219.717951][T16374] syz_tun: entered allmulticast mode [ 219.805367][T16390] netlink: 'syz.2.2872': attribute type 41 has an invalid length. [ 220.203183][T16405] veth0: entered promiscuous mode [ 220.216418][T16405] __nla_validate_parse: 9 callbacks suppressed [ 220.216438][T16405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2879'. [ 220.243438][T16405] veth0 (unregistering): left promiscuous mode [ 220.257871][T16394] vxcan1 speed is unknown, defaulting to 1000 [ 220.350651][T16412] syzkaller1: entered promiscuous mode [ 220.358465][T16412] syzkaller1: entered allmulticast mode [ 220.423397][T16415] tipc: Enabled bearer , priority 0 [ 220.446722][T16414] tipc: Disabling bearer [ 220.615958][T16425] smc: net device bond0 applied user defined pnetid SYZ2 [ 220.648021][T16421] tipc: Enabled bearer , priority 0 [ 220.692672][T16421] syzkaller0: entered promiscuous mode [ 220.698194][T16421] syzkaller0: entered allmulticast mode [ 220.754610][T16420] tipc: Resetting bearer [ 220.776821][T16420] tipc: Disabling bearer [ 220.989236][T16438] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 221.286955][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.305874][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.313244][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.323115][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.331843][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.365602][T16461] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2896'. [ 221.495284][T16456] vxcan1 speed is unknown, defaulting to 1000 [ 221.601881][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.627350][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.659940][ T3011] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.668234][ T3011] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.750626][T16484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2901'. [ 222.020049][T16484] tipc: Resetting bearer [ 222.299055][ T12] bond10 (unregistering): (slave vti0): Releasing backup interface [ 222.602842][ T12] smc: removing net device bond0 with user defined pnetid SYZ2 [ 222.611397][ T12] bond0 (unregistering): left promiscuous mode [ 222.617948][ T12] bond0 (unregistering): Released all slaves [ 222.628281][ T12] bond1 (unregistering): Released all slaves [ 222.638122][ T12] bond2 (unregistering): Released all slaves [ 222.647567][ T12] bond3 (unregistering): Released all slaves [ 222.658329][ T12] bond4 (unregistering): Released all slaves [ 222.668052][ T12] bond5 (unregistering): Released all slaves [ 222.682908][ T12] bond6 (unregistering): Released all slaves [ 222.693324][ T12] bond7 (unregistering): Released all slaves [ 222.704135][ T12] bond8 (unregistering): Released all slaves [ 222.714135][ T12] bond9 (unregistering): Released all slaves [ 222.726312][ T12] bond10 (unregistering): Released all slaves [ 222.737181][ T12] bond11 (unregistering): Released all slaves [ 222.749209][ T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.757597][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 222.769046][T16472] vxcan1 speed is unknown, defaulting to 1000 [ 222.770410][ T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.787516][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 222.818651][ T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.842162][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 222.858329][T16503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2905'. [ 222.877699][ T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.897675][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 222.918321][T16510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2907'. [ 222.936309][ T12] þ: left promiscuous mode [ 223.023586][T16513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2907'. [ 223.095063][ T12] : left promiscuous mode [ 223.110877][T16515] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2908'. [ 223.142964][ T12] tipc: Disabling bearer [ 223.149945][ T12] tipc: Left network mode [ 223.317097][T16456] chnl_net:caif_netlink_parms(): no params data found [ 223.420497][ T5861] Bluetooth: hci0: command tx timeout [ 223.452217][T16456] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.459628][T16456] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.466991][T16456] bridge_slave_0: entered allmulticast mode [ 223.475921][T16456] bridge_slave_0: entered promiscuous mode [ 223.490794][ T12] mac80211_hwsim hwsim10 wlan0 (unregistering): left allmulticast mode [ 223.501631][ T12] mac80211_hwsim hwsim10 wlan0 (unregistering): left promiscuous mode [ 223.535954][T16456] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.545878][T16456] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.554279][T16456] bridge_slave_1: entered allmulticast mode [ 223.562717][T16456] bridge_slave_1: entered promiscuous mode [ 223.611134][T16456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.637106][T16456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.859857][T16549] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 223.880951][T16549] netlink: 'syz.2.2916': attribute type 4 has an invalid length. [ 223.897749][ T12] batadv_slave_1: left promiscuous mode [ 223.924390][ T12] hsr_slave_0: left promiscuous mode [ 223.949047][ T12] hsr_slave_1: left promiscuous mode [ 224.017031][ T12] pimreg (unregistering): left allmulticast mode [ 224.133544][ T2964] smc: removing ib device syz2 [ 224.167729][T16456] team0: Port device team_slave_0 added [ 224.190089][T16456] team0: Port device team_slave_1 added [ 224.281415][T16456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.292900][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.323643][T16456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.360171][T16456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.376257][T16456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.407085][T16456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.629898][T16456] hsr_slave_0: entered promiscuous mode [ 224.641762][T16456] hsr_slave_1: entered promiscuous mode [ 224.655674][T16456] debugfs: 'hsr0' already exists in 'hsr' [ 224.676369][T16456] Cannot create hsr debugfs directory [ 224.861918][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2930'. [ 224.928766][T16604] atomic_op ffff888027e4c198 conn xmit_atomic 0000000000000000 [ 225.063331][ T12] IPVS: stop unused estimator thread 0... [ 225.077988][T16611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2934'. [ 225.115590][T16611] macvlan1: entered promiscuous mode [ 225.122626][T16611] ipvlan0: entered promiscuous mode [ 225.149184][T16611] ipvlan0: left promiscuous mode [ 225.154455][T16611] macvlan1: left promiscuous mode [ 225.176454][T16616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2936'. [ 225.287160][T16626] __nla_validate_parse: 1 callbacks suppressed [ 225.287180][T16626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2939'. [ 225.305750][T16626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2939'. [ 225.337443][T16626] netlink: 'syz.1.2939': attribute type 13 has an invalid length. [ 225.403052][T16628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2940'. [ 225.458095][T16456] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 225.471181][T16456] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 225.489729][T16456] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 225.507526][ T5861] Bluetooth: hci0: command tx timeout [ 225.522058][T16456] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 225.585829][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2946'. [ 225.647687][T16456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.665528][T16662] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2942'. [ 225.708279][T16456] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.768926][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.776083][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.905567][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.912742][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.059627][T16683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2951'. [ 226.071515][T16683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2951'. [ 226.128362][T16456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.142728][T16687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2952'. [ 226.153211][T16687] netlink: 'syz.3.2952': attribute type 1 has an invalid length. [ 226.163522][T16687] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2952'. [ 226.214501][T16692] Bluetooth: MGMT ver 1.23 [ 226.363465][T16456] veth0_vlan: entered promiscuous mode [ 226.391485][T16456] veth1_vlan: entered promiscuous mode [ 226.432156][T16456] veth0_macvtap: entered promiscuous mode [ 226.444197][T16456] veth1_macvtap: entered promiscuous mode [ 226.483486][T16713] vlan2: entered promiscuous mode [ 226.489030][T16713] bond0: entered promiscuous mode [ 226.503427][T16456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.517359][T16456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.532974][ T3011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.544091][ T3011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.555483][ T3011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.580062][ T3011] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.686371][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.711584][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.746440][T16725] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2965'. [ 226.765679][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.783692][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.879996][T16736] netlink: 'syz.1.2968': attribute type 18 has an invalid length. [ 227.012023][T16743] batadv0: entered promiscuous mode [ 227.018328][T16743] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 227.026886][T16743] batadv0: left promiscuous mode [ 227.578728][ T51] Bluetooth: hci0: command tx timeout [ 227.711579][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 227.720685][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 227.728082][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 227.736829][ T5862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 227.746604][ T5862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 227.855669][T16762] netlink: 'syz.2.2976': attribute type 15 has an invalid length. [ 228.113675][T16786] netlink: 'syz.0.2983': attribute type 137 has an invalid length. [ 228.194051][T16756] chnl_net:caif_netlink_parms(): no params data found [ 228.212825][T16790] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 228.323428][T16756] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.331626][T16756] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.339257][T16756] bridge_slave_0: entered allmulticast mode [ 228.345935][T16756] bridge_slave_0: entered promiscuous mode [ 228.353897][T16756] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.361371][T16756] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.368614][T16756] bridge_slave_1: entered allmulticast mode [ 228.375854][T16756] bridge_slave_1: entered promiscuous mode [ 228.422243][T16756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.443979][T16756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.482740][T16756] team0: Port device team_slave_0 added [ 228.494190][T16756] team0: Port device team_slave_1 added [ 228.543507][T16756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.555422][T16756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.582861][T16756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.604592][T16756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.612471][T16756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.639393][T16756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.681927][T16756] hsr_slave_0: entered promiscuous mode [ 228.688916][T16756] hsr_slave_1: entered promiscuous mode [ 228.695271][T16756] debugfs: 'hsr0' already exists in 'hsr' [ 228.703581][T16756] Cannot create hsr debugfs directory [ 228.811957][ T9141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.849953][ T9141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.875914][T16820] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 228.952393][T16756] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.971180][T16756] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 229.016692][T16834] tipc: Enabling of bearer rejected, already enabled [ 229.036244][T16756] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.057244][T16756] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 229.073329][T16836] netlink: 'syz.4.2993': attribute type 4 has an invalid length. [ 229.125825][T16756] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.163362][T16756] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 229.272986][T16756] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.285210][T16756] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 229.299618][ T9141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.524479][T16756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 229.546766][T16756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 229.602366][T16848] bridge1: entered promiscuous mode [ 229.607862][T16848] bridge1: entered allmulticast mode [ 229.613905][T16756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 229.626259][T16756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 229.658844][ T5862] Bluetooth: hci0: command 0x0419 tx timeout [ 229.842611][ T5862] Bluetooth: hci4: command tx timeout [ 230.952903][ T3011] wlan1: Trigger new scan to find an IBSS to join [ 231.752916][ T5862] Bluetooth: hci0: command 0x0419 tx timeout [ 231.903248][ T5862] Bluetooth: hci4: command tx timeout [ 233.925848][T16756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.982157][ T5862] Bluetooth: hci4: command tx timeout [ 234.063316][T16756] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.141969][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.150189][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.173724][T16891] __nla_validate_parse: 18 callbacks suppressed [ 234.173745][T16891] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3009'. [ 234.194476][T16887] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3008'. [ 234.277700][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.285957][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.475210][T16887] batadv1: entered promiscuous mode [ 234.504371][T16887] batadv1: entered allmulticast mode [ 235.994763][ T2964] wlan1: Trigger new scan to find an IBSS to join [ 236.003656][T16900] tipc: Enabling of bearer rejected, already enabled [ 236.066622][ T5862] Bluetooth: hci4: command tx timeout [ 236.415635][T16756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.794979][T16912] tc_dump_action: action bad kind [ 237.005628][T16912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3014'. [ 237.077756][T16756] veth0_vlan: entered promiscuous mode [ 237.166758][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.204248][T16756] veth1_vlan: entered promiscuous mode [ 237.387391][T16756] veth0_macvtap: entered promiscuous mode [ 237.410362][T16756] veth1_macvtap: entered promiscuous mode [ 237.444724][T16756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.492235][T16756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.520055][ T2964] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.522117][T16930] smc: net device bond0 erased user defined pnetid SYZ2 [ 237.536808][ T6178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.550524][T16930] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 237.559600][ T6178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.579798][ T6178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.636948][T16940] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3022'. [ 237.660059][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.667897][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.719189][T16946] tipc: Started in network mode [ 237.727867][T16946] tipc: Node identity 7e06ee6f1256, cluster identity 4711 [ 237.739591][T16946] tipc: Enabled bearer , priority 0 [ 237.754881][T16946] atomic_op ffff88803149f198 conn xmit_atomic 0000000000000000 [ 237.764296][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.773404][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.784421][T16946] syzkaller0: entered promiscuous mode [ 237.791103][T16946] syzkaller0: entered allmulticast mode [ 237.832450][T16946] tipc: Resetting bearer [ 237.839367][T16946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.847494][T16946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.876862][T16945] tipc: Resetting bearer [ 237.896884][T16945] tipc: Disabling bearer [ 237.945668][T16966] IPv6: NLM_F_CREATE should be specified when creating new route [ 238.357315][T16986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3033'. [ 238.420763][T16986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.473462][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.483788][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.492543][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.502014][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.510698][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.521284][T16993] tipc: Enabled bearer , priority 0 [ 238.529807][T16993] syzkaller0: entered promiscuous mode [ 238.544346][T16993] syzkaller0: entered allmulticast mode [ 238.578080][T16993] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3034'. [ 238.663058][T16993] tipc: Resetting bearer [ 238.916457][T16991] tipc: Resetting bearer [ 238.966670][T16991] tipc: Disabling bearer [ 239.027822][T17023] netlink: 'syz.4.3043': attribute type 10 has an invalid length. [ 239.131791][T16990] chnl_net:caif_netlink_parms(): no params data found [ 239.137483][T17030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3045'. [ 239.189351][T17030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3045'. [ 239.203083][T17031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3045'. [ 239.356329][T17041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3048'. [ 239.397492][T17040] tipc: Started in network mode [ 239.404755][T17040] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 239.422150][T17040] tipc: Enabled bearer , priority 14 [ 239.435638][T17044] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3048'. [ 239.451257][T17044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3048'. [ 239.497307][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3049'. [ 239.641049][T16990] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.677816][T16990] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.702084][T16990] bridge_slave_0: entered allmulticast mode [ 239.717540][T16990] bridge_slave_0: entered promiscuous mode [ 239.764999][T16990] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.788022][T16990] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.813680][T16990] bridge_slave_1: entered allmulticast mode [ 239.832389][T16990] bridge_slave_1: entered promiscuous mode [ 239.961077][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3050'. [ 239.973390][T16990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.010991][T16990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.054563][T17062] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3053'. [ 240.284118][T17073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.314961][T16990] team0: Port device team_slave_0 added [ 240.335703][T17073] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 240.360472][T16990] team0: Port device team_slave_1 added [ 240.475212][T16990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.499276][T16990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.538955][ T5862] Bluetooth: hci3: command tx timeout [ 240.557387][ T9131] tipc: Node number set to 10136234 [ 240.563737][T16990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.590207][T16990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.598833][T16990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.683880][T16990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.773500][T17100] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3058'. [ 240.823423][T16990] hsr_slave_0: entered promiscuous mode [ 240.839318][T16990] hsr_slave_1: entered promiscuous mode [ 240.850034][T16990] debugfs: 'hsr0' already exists in 'hsr' [ 240.862938][T16990] Cannot create hsr debugfs directory [ 240.877329][T17104] netlink: 'syz.3.3058': attribute type 10 has an invalid length. [ 240.892006][T17100] gre1: entered allmulticast mode [ 240.914358][T17104] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 241.013455][T17108] netlink: 'syz.3.3061': attribute type 1 has an invalid length. [ 241.157405][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805966c800: rx timeout, send abort [ 241.165763][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805966c400: rx timeout, send abort [ 241.174236][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805966c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 241.188591][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805966c400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 241.328252][T16990] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.471628][T16990] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.478401][T17130] netlink: 'syz.2.3065': attribute type 1 has an invalid length. [ 241.517726][T17130] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3065'. [ 241.581626][T16990] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.627288][T17137] netlink: 'syz.4.3068': attribute type 29 has an invalid length. [ 241.659511][T17137] netlink: 'syz.4.3068': attribute type 1 has an invalid length. [ 241.668450][T16990] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.690342][T17137] netlink: 'syz.4.3068': attribute type 2 has an invalid length. [ 241.704525][T17137] netlink: 'syz.4.3068': attribute type 1 has an invalid length. [ 241.715206][T17137] netlink: 'syz.4.3068': attribute type 2 has an invalid length. [ 241.727074][T17143] netlink: 'syz.4.3068': attribute type 1 has an invalid length. [ 241.838764][T16990] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.851977][T16990] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.890616][T16990] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.922033][T17154] pimreg: tun_chr_ioctl cmd 2147767506 [ 241.928888][T16990] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.054701][T17161] mac80211_hwsim hwsim6 ªªªªª": renamed from wlan0 [ 242.252109][T16990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.307885][T16990] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.331297][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.338434][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.358507][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.365709][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.470144][T17185] tipc: Enabled bearer , priority 0 [ 242.493363][T17186] tipc: Resetting bearer [ 242.516840][T17183] tipc: Disabling bearer [ 242.618944][ T5862] Bluetooth: hci3: command tx timeout [ 242.635641][T16990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.676952][T16990] veth0_vlan: entered promiscuous mode [ 242.704348][T16990] veth1_vlan: entered promiscuous mode [ 242.737589][T16990] veth0_macvtap: entered promiscuous mode [ 242.757526][T16990] veth1_macvtap: entered promiscuous mode [ 242.774926][T16990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.787918][T16990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.820194][ T3011] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.832230][ T3011] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.844167][ T3011] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.872762][T17207] bond9 (unregistering): Released all slaves [ 242.891081][ T3011] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.974929][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.993043][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.016709][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.026894][T17170] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 243.027532][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.077321][T17219] tipc: Enabled bearer , priority 10 [ 243.319028][T17243] 8021q: adding VLAN 0 to HW filter on device bond10 [ 243.855218][T17278] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.969527][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.977092][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.985045][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.995387][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.002963][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.015667][T17278] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.077022][T17278] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.117888][T17286] TCP: TCP_TX_DELAY enabled [ 244.190931][T17291] mac80211_hwsim hwsim42 wlan1: entered allmulticast mode [ 244.212775][T17293] bridge_slave_0: left allmulticast mode [ 244.239854][T17293] bridge_slave_0: left promiscuous mode [ 244.245701][T17293] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.255499][T17293] bridge_slave_1: left allmulticast mode [ 244.265234][T17293] bridge_slave_1: left promiscuous mode [ 244.272146][T17293] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.282626][T17293] bond0: (slave bond_slave_0): Releasing backup interface [ 244.292002][T17293] bond0: (slave bond_slave_1): Releasing backup interface [ 244.299400][ T5861] Bluetooth: hci2: command 0x0401 tx timeout [ 244.313098][T17293] team0: Port device team_slave_0 removed [ 244.323537][T17293] team0: Port device team_slave_1 removed [ 244.330547][T17293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.338032][T17293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.347069][T17293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.354835][T17293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.412670][T17278] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.519063][ T1806] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.534658][T17303] __nla_validate_parse: 8 callbacks suppressed [ 244.534676][T17303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3110'. [ 244.539536][ T1806] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.587661][ T2964] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.635543][ T2964] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.695915][T17308] vti0: entered promiscuous mode [ 244.701033][ T5861] Bluetooth: hci3: command tx timeout [ 244.708132][T17308] vti0: entered allmulticast mode [ 244.709852][T17319] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3114'. [ 244.787018][T17282] chnl_net:caif_netlink_parms(): no params data found [ 244.872128][T17334] validate_nla: 4 callbacks suppressed [ 244.872146][T17334] netlink: 'syz.3.3118': attribute type 7 has an invalid length. [ 244.889676][T17282] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.896798][T17334] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3118'. [ 244.900993][T17337] sctp: [Deprecated]: syz.2.3117 (pid 17337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.900993][T17337] Use struct sctp_sack_info instead [ 244.907778][T17334] netlink: 'syz.3.3118': attribute type 12 has an invalid length. [ 244.923669][T17282] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.937715][T17338] netlink: 'syz.4.3115': attribute type 4 has an invalid length. [ 244.946030][T17282] bridge_slave_0: entered allmulticast mode [ 244.946106][T17338] netlink: 'syz.4.3115': attribute type 2 has an invalid length. [ 244.962880][T17282] bridge_slave_0: entered promiscuous mode [ 244.975998][T17282] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.987151][T17282] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.994546][T17282] bridge_slave_1: entered allmulticast mode [ 245.001909][T17282] bridge_slave_1: entered promiscuous mode [ 245.064127][T17282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.094117][T17282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.134071][T17347] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3119'. [ 245.146968][T17282] team0: Port device team_slave_0 added [ 245.165969][T17282] team0: Port device team_slave_1 added [ 245.216467][T17282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.226094][T17282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.255656][T17282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.288966][T17282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.296118][T17282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.334373][T17282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.392715][T17350] netlink: 'syz.1.3123': attribute type 6 has an invalid length. [ 245.415855][T17350] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3123'. [ 245.431380][T17282] hsr_slave_0: entered promiscuous mode [ 245.438777][T17282] hsr_slave_1: entered promiscuous mode [ 245.445489][T17282] debugfs: 'hsr0' already exists in 'hsr' [ 245.451358][T17282] Cannot create hsr debugfs directory [ 245.615243][T17362] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3125'. [ 245.642006][T17363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3125'. [ 245.664909][T17362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3125'. [ 245.685847][T17363] openvswitch: netlink: Missing key (keys=40, expected=80) [ 245.693258][T17362] openvswitch: netlink: Missing key (keys=40, expected=80) [ 245.908960][T17376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3128'. [ 245.988022][T17372] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 246.056152][T17282] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 246.062986][ T5861] Bluetooth: hci1: command tx timeout [ 246.075226][T17282] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 246.085206][T17282] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 246.096206][T17282] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 246.164053][T17282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.179304][T17282] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.191093][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.198199][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.212114][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.219243][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.329543][T17282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.360800][T17282] veth0_vlan: entered promiscuous mode [ 246.370372][T17282] veth1_vlan: entered promiscuous mode [ 246.389238][T17282] veth0_macvtap: entered promiscuous mode [ 246.398688][T17282] veth1_macvtap: entered promiscuous mode [ 246.413415][T17282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.425295][T17282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.436678][ T2964] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.445675][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.456868][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.466341][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.507668][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.517823][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.526640][ T1806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.535079][ T1806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.778726][ T5861] Bluetooth: hci3: command tx timeout [ 248.139757][ T5861] Bluetooth: hci1: command tx timeout [ 250.218789][ T5861] Bluetooth: hci1: command tx timeout [ 252.299160][ T5861] Bluetooth: hci1: command tx timeout [ 270.539669][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 298.129329][T17405] netlink: 9408 bytes leftover after parsing attributes in process `syz.0.3131'. [ 298.180581][T17412] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3135'. [ 298.364839][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3138'. [ 298.381916][T17420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3137'. [ 298.433279][T17424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3137'. [ 298.554088][T17431] netlink: 'syz.0.3139': attribute type 21 has an invalid length. [ 298.562161][T17431] netlink: 'syz.0.3139': attribute type 22 has an invalid length. [ 298.570612][T17431] netlink: 'syz.0.3139': attribute type 23 has an invalid length. [ 298.580464][T17431] netlink: 'syz.0.3139': attribute type 25 has an invalid length. [ 298.588892][T17431] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3139'. [ 298.616156][T17436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3141'. [ 298.663618][T17441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3143'. [ 298.676995][T17443] netlink: 676 bytes leftover after parsing attributes in process `syz.0.3144'. [ 298.678011][T17440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3143'. [ 298.686601][T17441] netlink: 'syz.4.3143': attribute type 7 has an invalid length. [ 298.699104][T17440] netlink: 'syz.4.3143': attribute type 7 has an invalid length. [ 298.704221][T17441] netlink: 'syz.4.3143': attribute type 8 has an invalid length. [ 298.715565][T17440] netlink: 'syz.4.3143': attribute type 8 has an invalid length. [ 298.976776][T17411] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.983415][T17411] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 298.996668][T17411] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 299.003265][T17411] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 299.027363][T17411] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 299.034725][T17411] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 299.103927][T17411] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 299.110226][T17411] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 299.133415][T17411] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 299.139774][T17411] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 299.164721][ T5861] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.175144][ T5861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.182989][ T5861] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.193538][ T5861] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.203259][ T5861] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.218770][ T5862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.228993][ T5862] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.236685][ T5862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.244744][ T5862] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.255418][ T5862] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 299.521256][T17477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.528557][T17477] IPv6: NLM_F_CREATE should be set when creating new route [ 299.535793][T17477] IPv6: NLM_F_CREATE should be set when creating new route [ 299.543049][T17477] IPv6: NLM_F_CREATE should be set when creating new route [ 299.557638][T17430] chnl_net:caif_netlink_parms(): no params data found [ 299.691257][T17430] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.717316][T17430] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.734942][T17493] netlink: 'syz.4.3158': attribute type 1 has an invalid length. [ 299.743491][T17430] bridge_slave_0: entered allmulticast mode [ 299.755128][T17430] bridge_slave_0: entered promiscuous mode [ 299.781928][T17430] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.801685][T17430] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.902743][T17430] bridge_slave_1: entered allmulticast mode [ 299.921675][T17430] bridge_slave_1: entered promiscuous mode [ 300.010782][T17497] ip6erspan0: entered promiscuous mode [ 300.097327][T17430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.132717][T17504] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 300.132738][ T6178] bond0: (slave bond_slave_0): interface is now down [ 300.132760][ T6178] bond0: (slave bond_slave_1): interface is now down [ 300.207754][T17430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.216942][ T1806] bond0: (slave bond_slave_0): interface is now down [ 300.216964][ T1806] bond0: (slave bond_slave_1): interface is now down [ 300.238690][ T6178] bond0: (slave bond_slave_0): interface is now down [ 300.245627][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.257617][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.265479][ T6178] bond0: (slave bond_slave_1): interface is now down [ 300.298785][ T12] bond0: (slave bond_slave_0): interface is now down [ 300.306937][T17430] team0: Port device team_slave_0 added [ 300.313016][ T12] bond0: (slave bond_slave_1): interface is now down [ 300.324350][T17430] team0: Port device team_slave_1 added [ 300.349299][ T36] bond0: (slave bond_slave_0): interface is now down [ 300.366311][ T36] bond0: (slave bond_slave_1): interface is now down [ 300.398617][ T2964] bond0: (slave bond_slave_0): interface is now down [ 300.405370][ T2964] bond0: (slave bond_slave_1): interface is now down [ 300.425903][T17430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.437145][T17430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.467063][T17430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.469206][ T2964] bond0: (slave bond_slave_0): interface is now down [ 300.481405][T17430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.492926][T17430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.506197][ T2964] bond0: (slave bond_slave_1): interface is now down [ 300.523124][T17430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.544618][T17519] tc_dump_action: action bad kind [ 300.550959][T17527] tipc: Started in network mode [ 300.555854][T17527] tipc: Node identity f2d44346bc2e, cluster identity 4711 [ 300.570622][ T6178] bond0: (slave bond_slave_0): interface is now down [ 300.582804][ T6178] bond0: (slave bond_slave_1): interface is now down [ 300.596743][T17527] tipc: Enabled bearer , priority 0 [ 300.606582][T17531] bridge: RTM_NEWNEIGH with invalid ether address [ 300.618918][ T6178] bond0: (slave bond_slave_0): interface is now down [ 300.626532][ T6178] bond0: (slave bond_slave_1): interface is now down [ 300.646347][T17517] syzkaller0: entered promiscuous mode [ 300.652224][T17517] syzkaller0: entered allmulticast mode [ 300.658626][ T6178] bond0: (slave bond_slave_0): interface is now down [ 300.667697][ T6178] bond0: (slave bond_slave_1): interface is now down [ 300.691990][ T6178] bond0: (slave bond_slave_0): interface is now down [ 300.726547][ T6178] bond0: (slave bond_slave_1): interface is now down [ 300.743644][T17430] hsr_slave_0: entered promiscuous mode [ 300.749319][ T1806] bond0: (slave bond_slave_0): interface is now down [ 300.749340][ T1806] bond0: (slave bond_slave_1): interface is now down [ 300.769071][ T1806] bond0: (slave bond_slave_0): interface is now down [ 300.779747][ T1806] bond0: (slave bond_slave_1): interface is now down [ 300.780622][T17430] hsr_slave_1: entered promiscuous mode [ 300.798761][ T2964] bond0: (slave bond_slave_0): interface is now down [ 300.809292][T17430] debugfs: 'hsr0' already exists in 'hsr' [ 300.812562][ T2964] bond0: (slave bond_slave_1): interface is now down [ 300.822426][T17430] Cannot create hsr debugfs directory [ 300.829824][T17527] tipc: Resetting bearer [ 300.844729][T17516] tipc: Resetting bearer [ 300.855302][T17516] tipc: Disabling bearer [ 300.868916][ T2964] bond0: (slave bond_slave_0): interface is now down [ 300.876931][ T2964] bond0: (slave bond_slave_1): interface is now down [ 300.886211][T17545] syz_tun: entered allmulticast mode [ 300.896466][T17545] dvmrp8: entered allmulticast mode [ 300.901778][ T6178] bond0: (slave bond_slave_0): interface is now down [ 300.901800][ T6178] bond0: (slave bond_slave_1): interface is now down [ 300.918619][ T2964] bond0: (slave bond_slave_0): interface is now down [ 300.925322][ T2964] bond0: (slave bond_slave_1): interface is now down [ 300.989385][ T2964] bond0: (slave bond_slave_0): interface is now down [ 300.996112][ T2964] bond0: (slave bond_slave_1): interface is now down [ 301.038611][ T6178] bond0: (slave bond_slave_0): interface is now down [ 301.066566][ T6178] bond0: (slave bond_slave_1): interface is now down [ 301.118660][ T6178] bond0: (slave bond_slave_0): interface is now down [ 301.125376][ T6178] bond0: (slave bond_slave_1): interface is now down [ 301.159198][ T12] bond0: (slave bond_slave_0): interface is now down [ 301.187719][ T12] bond0: (slave bond_slave_1): interface is now down [ 301.219896][T17430] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.230019][ T1806] bond0: (slave bond_slave_0): interface is now down [ 301.230041][ T1806] bond0: (slave bond_slave_1): interface is now down [ 301.248868][ T2964] bond0: (slave bond_slave_0): interface is now down [ 301.260376][ T2964] bond0: (slave bond_slave_1): interface is now down [ 301.339249][ T5862] Bluetooth: hci5: command tx timeout [ 301.353493][ T6178] bond0: (slave bond_slave_0): interface is now down [ 301.360598][ T6178] bond0: (slave bond_slave_1): interface is now down [ 301.388913][ T2964] bond0: (slave bond_slave_0): interface is now down [ 301.395898][ T2964] bond0: (slave bond_slave_1): interface is now down [ 301.440548][ T2964] bond0: (slave bond_slave_0): interface is now down [ 301.447278][ T2964] bond0: (slave bond_slave_1): interface is now down [ 301.478763][ T1806] bond0: (slave bond_slave_0): interface is now down [ 301.485523][ T1806] bond0: (slave bond_slave_1): interface is now down [ 301.493642][T17430] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.506794][T17544] syz_tun: left allmulticast mode [ 301.512105][T17544] dvmrp8: left allmulticast mode [ 301.514206][ T12] bond0: (slave bond_slave_0): interface is now down [ 301.530435][ T12] bond0: (slave bond_slave_1): interface is now down [ 301.555846][ T2964] bond0: (slave bond_slave_0): interface is now down [ 301.569768][ T2964] bond0: (slave bond_slave_1): interface is now down [ 301.577124][ T2964] bond0: now running without any active interface! [ 301.611523][T17430] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.725541][T17430] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.753181][T17570] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20002 [ 301.898947][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.977531][T17430] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 302.010194][T17430] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 302.029696][T17430] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 302.050535][T17430] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 302.153205][T17430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.219618][T17430] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.249889][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.257102][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.269743][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.276926][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.311887][T17430] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 302.326925][T17430] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.576338][T17430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.849826][T17430] veth0_vlan: entered promiscuous mode [ 302.863973][T17430] veth1_vlan: entered promiscuous mode [ 302.891267][T17430] veth0_macvtap: entered promiscuous mode [ 302.906190][T17430] veth1_macvtap: entered promiscuous mode [ 302.924395][T17430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.935892][T17430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.990293][ T1806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.007716][ T1806] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.044453][ T1806] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.064427][ T1806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.143404][T17640] __nla_validate_parse: 20 callbacks suppressed [ 303.143424][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3196'. [ 303.144580][T17641] netlink: 'syz.0.3197': attribute type 1 has an invalid length. [ 303.196730][T17642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3197'. [ 303.259153][ T6178] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.270639][ T6178] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.283587][ T6178] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.294497][ T6178] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.348033][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.372312][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.407018][ T6178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.415807][ T6178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.432521][ T5862] Bluetooth: hci5: command tx timeout [ 303.562335][T17652] team0 (unregistering): Port device team_slave_0 removed [ 303.575849][T17652] team0 (unregistering): Port device team_slave_1 removed [ 303.835694][T17663] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3201'. [ 303.864670][T17663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3201'. [ 304.096713][T17681] netlink: 'syz.1.3208': attribute type 2 has an invalid length. [ 304.190370][T17687] netlink: 'syz.3.3209': attribute type 1 has an invalid length. [ 304.216437][T17687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3209'. [ 304.259390][T17691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3210'. [ 304.342030][T17697] tipc: Resetting bearer [ 304.390005][T17699] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 304.394052][T17697] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.410626][T17697] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.447496][T17697] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ac: 0000 [#1] SMP KASAN PTI [ 304.459435][T17697] KASAN: probably user-memory-access in range [0x00000000ffff0d60-0x00000000ffff0d67] [ 304.469001][T17697] CPU: 0 UID: 0 PID: 17697 Comm: syz.3.3209 Not tainted syzkaller #0 PREEMPT(full) [ 304.478556][T17697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.488618][T17697] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 304.494343][T17697] Code: 29 0c bb f7 c6 05 28 c0 88 05 01 48 c7 c7 e0 a2 9e 8c be 97 05 00 00 48 c7 c2 60 a3 9e 8c e8 7a e6 98 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 c4 77 1e f8 4d 8b 2c 24 4d 39 f5 [ 304.513946][T17697] RSP: 0018:ffffc900047de8f8 EFLAGS: 00010206 [ 304.520018][T17697] RAX: ffffffff8a049ed5 RBX: 000000001fffe1ac RCX: 0000000000080000 [ 304.527975][T17697] RDX: ffffc9000f416000 RSI: 000000000007ffff RDI: 0000000000080000 [ 304.535932][T17697] RBP: ffff888055641020 R08: ffffffff8f5382a7 R09: 1ffffffff1ea7054 [ 304.543893][T17697] R10: dffffc0000000000 R11: fffffbfff1ea7055 R12: 00000000ffff0d60 [ 304.551877][T17697] R13: dffffc0000000000 R14: ffff88805903ce00 R15: 1ffff1100aac8204 [ 304.559834][T17697] FS: 00007f07bb5d56c0(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 304.568833][T17697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 304.575404][T17697] CR2: 00007f42e884f5c4 CR3: 0000000031570000 CR4: 00000000003526f0 [ 304.583364][T17697] Call Trace: [ 304.586630][T17697] [ 304.589547][T17697] inetdev_event+0x2a7/0x15b0 [ 304.594306][T17697] ? __pfx_inetdev_event+0x10/0x10 [ 304.599408][T17697] notifier_call_chain+0x1b3/0x3e0 [ 304.604512][T17697] __dev_notify_flags+0x18d/0x2e0 [ 304.609529][T17697] ? __pfx___dev_notify_flags+0x10/0x10 [ 304.615060][T17697] ? __dev_change_flags+0x4cc/0x6d0 [ 304.620254][T17697] ? __pfx___dev_change_flags+0x10/0x10 [ 304.625788][T17697] ? netif_state_change+0x256/0x3a0 [ 304.630976][T17697] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 304.636967][T17697] ? __pfx_netif_state_change+0x10/0x10 [ 304.642525][T17697] ? lock_release+0x4b/0x3e0 [ 304.647120][T17697] netif_change_flags+0xe8/0x1a0 [ 304.652052][T17697] do_setlink+0xc55/0x41c0 [ 304.656466][T17697] ? __kernel_text_address+0xd/0x40 [ 304.661657][T17697] ? arch_stack_walk+0xfc/0x150 [ 304.666504][T17697] ? __pfx_do_setlink+0x10/0x10 [ 304.671365][T17697] ? stack_trace_save+0x9c/0xe0 [ 304.676223][T17697] ? __mutex_trylock_common+0x153/0x260 [ 304.681759][T17697] ? __pfx___mutex_trylock_common+0x10/0x10 [ 304.687639][T17697] ? rcu_is_watching+0x15/0xb0 [ 304.692389][T17697] ? trace_contention_end+0x39/0x120 [ 304.697679][T17697] ? __mutex_lock+0x335/0x1350 [ 304.702455][T17697] ? rtnl_newlink+0x8db/0x1c70 [ 304.707240][T17697] ? __pfx___mutex_lock+0x10/0x10 [ 304.712261][T17697] ? ns_capable+0x8a/0xf0 [ 304.716577][T17697] ? rtnl_link_get_net_capable+0x16a/0x350 [ 304.722371][T17697] rtnl_newlink+0x149f/0x1c70 [ 304.727067][T17697] ? netlink_sendmsg+0x805/0xb30 [ 304.732014][T17697] ? __pfx_rtnl_newlink+0x10/0x10 [ 304.737052][T17697] ? rcu_is_watching+0x15/0xb0 [ 304.741810][T17697] ? nlmon_xmit+0xb0/0x100 [ 304.746216][T17697] ? kmem_cache_free+0x18f/0x400 [ 304.751149][T17697] ? rcu_is_watching+0x15/0xb0 [ 304.755986][T17697] ? __dev_queue_xmit+0x27b/0x3b50 [ 304.761099][T17697] ? __local_bh_enable_ip+0x12d/0x1c0 [ 304.766465][T17697] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 304.772175][T17697] ? __dev_queue_xmit+0x27b/0x3b50 [ 304.777293][T17697] ? lock_release+0x4b/0x3e0 [ 304.781932][T17697] ? __dev_queue_xmit+0x27b/0x3b50 [ 304.787038][T17697] ? __dev_queue_xmit+0x27b/0x3b50 [ 304.792155][T17697] ? __dev_queue_xmit+0x1d79/0x3b50 [ 304.797350][T17697] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 304.802453][T17697] ? rcu_is_watching+0x15/0xb0 [ 304.807201][T17697] ? lock_release+0x4b/0x3e0 [ 304.811778][T17697] ? bpf_lsm_capable+0x9/0x20 [ 304.816461][T17697] ? security_capable+0x7e/0x2e0 [ 304.821392][T17697] ? __pfx_rtnl_newlink+0x10/0x10 [ 304.826523][T17697] rtnetlink_rcv_msg+0x7cf/0xb70 [ 304.831489][T17697] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 304.836619][T17697] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 304.842097][T17697] ? ref_tracker_free+0x63a/0x7d0 [ 304.847162][T17697] ? __asan_memcpy+0x40/0x70 [ 304.851749][T17697] ? __pfx_ref_tracker_free+0x10/0x10 [ 304.857162][T17697] netlink_rcv_skb+0x205/0x470 [ 304.861922][T17697] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 304.867377][T17697] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 304.872665][T17697] netlink_unicast+0x82c/0x9e0 [ 304.877428][T17697] ? __pfx_netlink_unicast+0x10/0x10 [ 304.882704][T17697] ? netlink_sendmsg+0x642/0xb30 [ 304.887632][T17697] ? skb_put+0x11b/0x210 [ 304.891889][T17697] netlink_sendmsg+0x805/0xb30 [ 304.896661][T17697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.901948][T17697] ? futex_unqueue+0x22/0x240 [ 304.906630][T17697] ? aa_sock_msg_perm+0xf1/0x1d0 [ 304.911558][T17697] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.916835][T17697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.922280][T17697] __sock_sendmsg+0x21c/0x270 [ 304.926949][T17697] ____sys_sendmsg+0x505/0x830 [ 304.931725][T17697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.937018][T17697] ? import_iovec+0x74/0xa0 [ 304.941526][T17697] ___sys_sendmsg+0x21f/0x2a0 [ 304.946201][T17697] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.951389][T17697] ? futex_wait+0x285/0x360 [ 304.955892][T17697] ? __fget_files+0x2a/0x420 [ 304.960466][T17697] ? __fget_files+0x3a0/0x420 [ 304.965133][T17697] __x64_sys_sendmsg+0x19b/0x260 [ 304.970060][T17697] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.975520][T17697] ? rcu_is_watching+0x15/0xb0 [ 304.980365][T17697] ? rcu_is_watching+0x15/0xb0 [ 304.985115][T17697] do_syscall_64+0xfa/0x3b0 [ 304.989603][T17697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.995658][T17697] ? clear_bhb_loop+0x60/0xb0 [ 305.000333][T17697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.006215][T17697] RIP: 0033:0x7f07bd38ebe9 [ 305.010623][T17697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.030215][T17697] RSP: 002b:00007f07bb5d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.038618][T17697] RAX: ffffffffffffffda RBX: 00007f07bd5b6090 RCX: 00007f07bd38ebe9 [ 305.046584][T17697] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c [ 305.054540][T17697] RBP: 00007f07bd411e19 R08: 0000000000000000 R09: 0000000000000000 [ 305.062508][T17697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.070465][T17697] R13: 00007f07bd5b6128 R14: 00007f07bd5b6090 R15: 00007ffde5273e18 [ 305.078430][T17697] [ 305.081437][T17697] Modules linked in: [ 305.087393][T17697] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 305.107026][T17697] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 305.135248][T17697] Code: 29 0c bb f7 c6 05 28 c0 88 05 01 48 c7 c7 e0 a2 9e 8c be 97 05 00 00 48 c7 c2 60 a3 9e 8c e8 7a e6 98 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 c4 77 1e f8 4d 8b 2c 24 4d 39 f5 [ 305.160627][T17697] RSP: 0018:ffffc900047de8f8 EFLAGS: 00010206 [ 305.166739][T17697] RAX: ffffffff8a049ed5 RBX: 000000001fffe1ac RCX: 0000000000080000 [ 305.177117][T17697] RDX: ffffc9000f416000 RSI: 000000000007ffff RDI: 0000000000080000 [ 305.240738][T17697] RBP: ffff888055641020 R08: ffffffff8f5382a7 R09: 1ffffffff1ea7054 [ 305.270228][T17697] R10: dffffc0000000000 R11: fffffbfff1ea7055 R12: 00000000ffff0d60 [ 305.304614][T17697] R13: dffffc0000000000 R14: ffff88805903ce00 R15: 1ffff1100aac8204 [ 305.371523][T17697] FS: 00007f07bb5d56c0(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 305.411244][T17697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.417887][T17697] CR2: 00007ffd5af82f3c CR3: 0000000031570000 CR4: 00000000003526f0 [ 305.448588][T17697] Kernel panic - not syncing: Fatal exception [ 305.454986][T17697] Kernel Offset: disabled [ 305.459302][T17697] Rebooting in 86400 seconds..