last executing test programs: 9.235904526s ago: executing program 2 (id=3111): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 8.994893326s ago: executing program 2 (id=3113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000002090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b1800128014000180090001006c61737400000000040002800800034000000130140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000a0a050000000000000000000a0000099b8f98670900010073797a31000900020073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r4, 0x29, 0x16, 0x0, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x84}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r11, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f00000002c0)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4.305537328s ago: executing program 0 (id=3151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e24, 0x9, @mcast2, 0x1000040}}, 0x0, 0x0, 0xd, 0x0, "68ea2b0a67f88fe018e0818b6ad6ec0564558bf4bdde54fea87220b58d4eafadec0bfe7faf83cbb9180891f68da04f4b2f8cfbe96e7385944fb477fdfbf627fba155a53eac0c5100"}, 0x8d) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000540)="ad56b6c5820f8e9d6dcd6bcaca8f663438c05d564c90c2004a50d44ef78ad032a9", 0x21) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) r4 = socket(0xa, 0x3, 0x1) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/96, 0x60}, {0x0}], 0x2}}], 0x2, 0x122, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r5, @ANYRES64=0x0, @ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRES64], 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x20008800) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYRES64=r0], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r9, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003801c000380060001000000000008000200020000a5df148d5a0f4db500080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4815}, 0x0) r10 = socket(0x400000000010, 0x80000, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpid() r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0) recvmmsg(r12, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/211, 0xd3}], 0x1, &(0x7f0000000900)=""/211, 0xd3}, 0x9}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x22, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES64=r9, @ANYBLOB="0000000000000000b7030000000000008500009fc50cc100b700000000000000814e0000030000008520000002000000182c0000", @ANYRES32, @ANYRES64=r6, @ANYRES32, @ANYBLOB="0000000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000bf91000000000000b702000001000000850000008400"], 0x0, 0x6, 0x0, 0x0, 0x40e00, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x83}, 0x94) 3.312674035s ago: executing program 0 (id=3161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r4, &(0x7f00000017c0), &(0x7f0000001480)=""/93}, 0x20) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, r2, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x40048}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x46}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) 3.095606484s ago: executing program 1 (id=3165): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118aa000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}]}, 0xa4}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001e0001002bbd7000fedbdf25ffffffff0000000000000000000070bbe038507355510691e7eecee2f50000000004d30200ff00ff010000000000e9ffffffffffffff01000200000035000008000c0003000000"], 0x48}}, 0x4050) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0x9, 0x8, 0x2, 0xffffffffffffffc0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x47, &(0x7f00000000c0)=""/71, 0x1e00, 0x28, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x1, 0x1, 0x6d}, 0x10, 0x0, r0, 0x9, 0x0, &(0x7f0000000400)=[{0x4, 0x2, 0xd, 0x1}, {0x0, 0x5, 0x10}, {0x1, 0x3, 0x0, 0x4}, {0x4, 0x3, 0x3, 0x1}, {0x5, 0x2, 0x9, 0x6}, {0x0, 0x2, 0xe, 0x2}, {0x0, 0x3, 0x8, 0x9}, {0x4, 0x4, 0xc, 0x4}, {0x3, 0x1, 0x4, 0x1}], 0x10, 0x8}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r3, r4, 0x25, 0x4, @val=@kprobe_multi=@syms={0x0, 0x3, &(0x7f00000005c0)=[&(0x7f0000000340)='({\x00', &(0x7f0000000380)='\'\v)\x00', &(0x7f0000000580)='syzkaller\x00'], 0x0, 0x80}}, 0x30) 2.950146109s ago: executing program 1 (id=3167): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0xe, 0x7, 0x5, 0xa, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x1, 0x2, 0x0, 0x6e6bb1, 0x1, {0x6, 0xff, 0xa0, 0x5, 0x0, 0x2, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, @in=@remote}}]}, 0x50}}, 0x8800) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) write$ppp(0xffffffffffffffff, &(0x7f0000000240)="648b0718b05ad79d79bb81dc9487e44add6b85d61829efa6e9bce39d0887a05ffd478738370778ca3c63120e3bfd3a441c62dcee19a7715dca4abb332d4211296a1890db00da35a3d6bf281a1d1945c89534cb7bad3914b1ac94f5b04ff051663d956b5f774766974d2807921a6f60df01afd447e608f01d5d5e394bf8aec573b58bb146f44e32ce2f892dcd435d68bb40abfef54d1177aa9610609b2c49c0698146d0e444769cb60f96f22b64987ace7df1a4b7121b14c9f26dccf1108a", 0xbe) bind$rose(r0, &(0x7f0000000300)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000380)=0x80, 0x12) close(r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x18040, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000480)={0x3, &(0x7f0000000440)=[{0x0, 0x1, 0x81, 0x6}, {0x9, 0x5d, 0x9, 0x1000}, {0x12, 0x3, 0xc, 0x5}]}) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000004c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x7e, r3}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={r2}) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r7, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x860}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x48001) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x88, r9, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x2]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x567}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5f1}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x58}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5e}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000880)={0x2, 0x205, 0x3, 0x0, 0x0}, &(0x7f00000008c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000900)={r10, @in6={{0xa, 0x4e24, 0xd, @dev={0xfe, 0x80, '\x00', 0x41}, 0x4}}, 0x1, 0x40}, 0x90) r11 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$SIOCAX25DELFWD(r11, 0x89eb, &(0x7f00000009c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000a40)={0x8, 0x40, '\x00', 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r12, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, r13, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40810}, 0x40) 2.866879517s ago: executing program 0 (id=3168): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000100)) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x6, 0x38a00, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x10, 0x7800, 0xb, 0x6}}) r3 = socket(0x2, 0x80805, 0x0) close(0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x3f) getsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, &(0x7f00000003c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x0, 0x2, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x11508, 0x3200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000000100)) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x6, 0x38a00, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0x10, 0x7800, 0xb, 0x6}}) (async) socket(0x2, 0x80805, 0x0) (async) close(0x3) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x3f) (async) getsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, &(0x7f00000003c0)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x0, 0x2, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0x11508, 0x3200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) 2.865125757s ago: executing program 4 (id=3169): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4054) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000240)=""/129, 0x81, 0x2141, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket(0x12, 0x3, 0xfffffffb) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001900010000000000ffdbdf250a01090008000980c32d540400ce8004001280"], 0x20}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, 0x0, 0x300) connect$unix(r2, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, 0x0, 0x300) (async) r5 = socket(0x2b, 0x80801, 0x1) (async, rerun: 32) r6 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800058008000200080000003e"], 0x44}}, 0x0) (async, rerun: 32) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) (async, rerun: 32) setsockopt$inet6_mtu(r5, 0x29, 0x1e, &(0x7f0000000040), 0x4) (async) read(r3, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000440)) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000140)=0x2, 0x4) (async) sendmsg$802154_dgram(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1000}, 0x800) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003500093300000000fcdbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 2.738128391s ago: executing program 1 (id=3170): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="c30000f58703ffd2a0402651cf5dcd9e07c7"], 0xfdef) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000400), 0x2) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000)={r8, 0x8, 0xfffff652, 0x2}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x20, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x3}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000240)={r7, 0xfffffff9, 0x5, 0x5}, &(0x7f0000000280)=0x10) (async, rerun: 32) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000017c0)={0x14, r12, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x200080c0) (async) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r13, 0x84, 0x11, 0x0, &(0x7f0000000140)) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) (rerun: 64) 2.735716905s ago: executing program 3 (id=3171): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000004c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r1, 0x800) syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0001000000000000803afffe"], 0x0) accept4(r1, 0x0, 0x0, 0x80000) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000004c0)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) (async) socket$kcm(0x23, 0x5, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async) listen(r1, 0x800) (async) syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0001000000000000803afffe"], 0x0) (async) accept4(r1, 0x0, 0x0, 0x80000) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) (async) 2.692476795s ago: executing program 4 (id=3172): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x500, 0x29, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)='\x00D', 0x2}], 0x1, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x29}, @local}}}], 0x20}, 0x0) 2.479123608s ago: executing program 4 (id=3173): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000380)={{r1, &(0x7f0000000000)='GPL\x00', 0x4140, &(0x7f0000000040)={@_ha_fsid={[0x0, 0x8]}, {0x5, 0xd, 0x6174, 0x8}}, 0xdb2, &(0x7f00000001c0), &(0x7f0000000200)=0x6}, {[0x7, 0x3, 0x5, 0x8000]}, 0x7ff, 0x1000, &(0x7f0000000900)=""/4096}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r2, 0x0, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r5, 0xcf}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r7}, 0x70) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000808000340000000080800074000000231080006"], 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.3577188s ago: executing program 1 (id=3174): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x3, @private0, 0x80000000}}, 0x0, 0x0, 0x3f, 0x0, "bb02a3c364ca41d6357e5445244748042f9e4e00f943a92866ef086c82ac9b2df3ee818afaacff1f16c54dc46d8b6d2ccd008a008000000000000000a032000700000000000000000000000000004d00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000400)=ANY=[], 0x78) 2.338875991s ago: executing program 3 (id=3175): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r0], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ppoll(&(0x7f00000002c0)=[{r2, 0x3c10}], 0x1, &(0x7f0000000340), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa080007"], 0x38}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@loopback, @loopback, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x700, 0x8, 0x9, 0x7fffffff, {{0x4e, 0x4, 0x1, 0x9, 0x138, 0x66, 0x0, 0x2, 0x4, 0x0, @local, @broadcast, {[@timestamp={0x44, 0x24, 0x17, 0x0, 0x5, [0x9, 0x2, 0xde90, 0x1, 0x7, 0x101, 0x7, 0x7]}, @noop, @end, @end, @timestamp={0x44, 0x2c, 0x91, 0x0, 0x3, [0x5, 0xb, 0x5, 0x2710, 0x9, 0x9, 0x0, 0x2, 0x0, 0x2]}, @cipso={0x86, 0x59, 0x3, [{0x2, 0xf, "cf0e3205fb766e20e0ed2536c7"}, {0x2, 0xc, "8d5eef553608e9380de9"}, {0x1, 0x10, "589428cf6f72a330ffa6d1ce029a"}, {0x0, 0x4, "dde5"}, {0x0, 0x9, "8e008b4fbff84d"}, {0x0, 0x5, "b4b023"}, {0x2, 0x5, "a9a3d2"}, {0x7, 0x11, "50dd631183bd5ce8a92dcb482e3d0b"}]}, @timestamp_addr={0x44, 0x2c, 0xf2, 0x1, 0xb, [{@multicast1, 0x7d8b}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x613}, {@multicast2, 0x40}, {@multicast1, 0x2}]}, @ssrr={0x89, 0x7, 0xbb, [@rand_addr=0x64010102]}, @timestamp={0x44, 0x18, 0x18, 0x0, 0x9, [0x808, 0x8, 0x0, 0x31, 0x7]}, @timestamp_addr={0x44, 0x2c, 0xfc, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x1}, {@multicast1, 0x1}]}]}}}}}) r7 = accept(0xffffffffffffffff, &(0x7f0000000500)=@phonet, &(0x7f0000000580)=0x80) r8 = socket$inet_sctp(0x2, 0x5, 0x84) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0}], 0x2, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x26, 0x200000b, r10}}], 0x20, 0x2400e044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000005c0)={r10, 0x2, 0x38fb}, 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0xcc, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1a}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xcb}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x4) r11 = socket(0x10, 0x3, 0x0) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000020100800c0001"], 0x114}], 0x1}, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.338060577s ago: executing program 0 (id=3176): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r1 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r1, &(0x7f00000018c0)=[{{&(0x7f0000000200)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000000)="4474d893a9aa512b86214f2e211b23", 0xf}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="100000005ba3868433935284e68f0099"], 0x20}}], 0x1, 0x20040004) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600), 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="78010000", @ANYRES16=r5, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r6 = socket(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)={0x18c, r7, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x60}}}}, [@NL80211_ATTR_IE={0x2f, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2, 0x1, 0x8}}, @ht={0x2d, 0x1a, {0x2000, 0x1, 0x5, 0x0, {0x5, 0x80, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xba, 0x3}}, @supported_rates={0x1, 0x4, [{0x3, 0x1}, {0x3, 0x1}, {0x39963e157760ea42}, {0x48, 0x1}]}]}, @NL80211_ATTR_IE={0x14, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xffc1}, @NL80211_ATTR_IE={0xf, 0x2a, [@mesh_chsw={0x76, 0x6, {0x1, 0x4, 0x3a, 0x300}}, @dsss={0x3, 0x1, 0x28}]}, @NL80211_ATTR_IE={0x21, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x99, 0xe}}, @dsss={0x3, 0x1, 0x70}, @random={0x2f, 0x13, "7d250ef379fd2f8705d4dadfc3ff05b72c925a"}]}, @NL80211_ATTR_IE={0xe4, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @supported_rates={0x1, 0x4, [{0x60, 0x1}, {0xb}, {0x4}, {0x2, 0x1}]}, @rann={0x7e, 0x15, {{0x1, 0x8}, 0x0, 0x7, @device_a, 0x6, 0x1, 0x100}}, @rann={0x7e, 0x15, {{0x0, 0x76}, 0xb, 0x6, @device_b, 0x1ff, 0x7f, 0x5}}, @measure_req={0x26, 0xa4, {0xa, 0x1, 0x9, "9fbbebbe9dabf6996b2bb215fe7692a971ee2cb0e4384f75f98ccb0f7bfe2fa5895cea87fa7fa445e7badfda3a63955091dab5d93262a689150ba808cae894ad3d19901b3edcdec27f05a8efcf0650eaa0d3d8ce72935ee1fb98aad1934cb28f842287df3f23cbf0204ba9c7a0bfe87271543de04795a1789c6bc8f8dc4de6b5ac347aeaa6b88e13a25c3c13ecfd50c38186092ca2a586f70c9e8cdf3cbbac9ee1"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3ff}]}}]}, 0x48}}, 0x0) 2.149524035s ago: executing program 1 (id=3177): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0xcf, &(0x7f0000000000), &(0x7f0000000040)=0x4) epoll_create1(0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x4) listen(r1, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000200)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xd, 0xcd, 0x56d}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000300)=[{0x4, 0x3, 0x5, 0x8}, {0x4, 0x4, 0x1, 0xb}, {0x3, 0x3, 0xc}, {0x3, 0x5, 0x2, 0x3}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0x4a, 0xe, &(0x7f0000000400)="e125508d2291b49deb62179514fe86892d2b4b604decd0b7ff3ca649ca9d190f463b420e2a63ff7bdccbfc3cdbc3e1ae01e5c73a419c0a6e70bc2f7c66b5ef17d49395430f9b2d46bb70", &(0x7f0000000480)=""/14, 0x701eca29, 0x0, 0x9f, 0x3, &(0x7f00000004c0)="20504a90310f2511ec98255b9acda64d244cf12d782e9e43f0a8ced1733f1501b750a261c5316e2c0cbbec4a7424c270451aaf43d26b8caa1a696379d1b1b090ad5329f14dd7d59eedf63c74330c972f6f2c47c1d0e1784e2172dfb26d96bab3563c154435d2a6bb614e6da66d1c485f7cdac427e5e0f3884087d0fec2d6d3436a9a219ed75da20e376d7f6820ac1b164c02bb1e3540a03993e1a2f325bd8b", &(0x7f0000000580)="a69efe", 0x3, 0x0, 0x40}, 0x50) r4 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000640), &(0x7f0000000680)=0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f00000006c0)=0xdff7, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000740)={0x0, @private, @empty}, &(0x7f0000000780)=0xc) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x23c, 0x12, 0x400, 0x70bd28, 0x25dfdbfb, {0xa, 0x6e, 0x2, 0xa, {0x4e24, 0x4e20, [0xa, 0x8, 0x8000, 0x3b], [0x5, 0x8, 0x3, 0x7f1a], r6, [0x0, 0x69]}, 0x101, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x6, 0x1, "ff5e"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "81a5aa5b1d98a16daf447bb7a1c69349f2753d9ac0c88d5b3595fc5852be0119147aa69f41999418a88508805fff54a2552b12234243250e52b4f0d5f455efb06cc3b365abb7bc5cf33ec3f4d4ef829a295f16dbd7c20b40884a995d9c146e9836f7a60f4c0205bdddee415507f6725516e0248b6432a0275f78dc17fa9fd6a4ec0ac4c2ef3edb4b266dafe42574d4ac86556244095257"}, @INET_DIAG_REQ_BYTECODE={0x84, 0x1, "e572faea789af462cbb1b9881cabc54f75ace6d84c68ae36d06bf0c64d1c1e5b1c172b0f9fe6dd7e4b776511cc6b1a80b8d7fbb7ff8cfc3f6c6f0b0f4f63a1068019a074341023e825c423cdfbf9c7048f5ac761b16c764eddd2e834977f3555bf681343512cf182abf8bc316f8a8cc28914b8e6a218890d8b2f5c20058090fc"}, @INET_DIAG_REQ_BYTECODE={0xc8, 0x1, "ab402de4d5bab26fc07f389ff5a25502779e0370685b1320291f365cf6b08c99928b63f040249fb6acf429958fea00a45558d1744861d7426992d39c7e15acb8e31fdd72010cf661318ddc27f51e784186ec8e93100635546a6d111c1a3fedd1ef3bdea670027ebbc50be35a715bd933339f5168f2984324821abbdeb9dcd41b48244b5281fa345e9de4eed1887baa3779686b0cb498c68e8d3a1e035ee018504d628d78e58f38fef156e7f9dbb48f81fb54cbf60849f9b5042b4a912b7734ce9db7d457"}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x1411, 0x2, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c010}, 0x20040008) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r3, 0x0, 0x0, 0xb3, &(0x7f0000000b80), &(0x7f0000000bc0)=""/179, 0x1fb, 0x0, 0x25, 0x7f, &(0x7f0000000c80)="f253af1afa93c7350e3fdfea5bad5c315b37f8719c550819f2b0f20a2f8bdbcb9492fbb252", &(0x7f0000000cc0)="21ba837c6e28eaa2d91b9684ad731a3f05a3b47f02b4d75d6b4ff9912d8be5e57851713a30171d76f8dedb78fff71781da78d8f00f73b073c831d4c8d00b3f3441c7b599ea2eef410a2956d62714d07b878cfe44bc1fca4bd127be865587ccbb47d7f32913a6806c487541820d1ab4222911517e280fa916d3c1afbd91d093", 0x2, 0x0, 0x9}, 0x50) ioctl$sock_proto_private(r7, 0x89ec, &(0x7f0000000dc0)="5122701d1259551dbb776c975f29f662f9f2eda8b94c1d694e1d565f290d6d8bbac95f22e2b8fe87a68f82f35a07c9ceec8f849892713cb58790e90150b638d5e9c5b864fedfe49d7723a21198dc9f48d9af897ec8da6498b15fa40f3373c5cacc0e1b6bb4d1d5cfd07c3198d12cc51fd7d947a580c0a8a711107e2e1ff64389a8a0c7b30711f4df922672b75519305adcec9ee6bf19acf1c3a322b0609b7af89657b9d3ec9c229d2442906de5d26615c2995887e96cbb2f20a59fc6b5d0976375d986f4e9cbd4ef8bbca2af") getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000ec0)={0x0, @in6={{0xa, 0x4e21, 0x10000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3349}}, 0x8, 0x10001, 0xe, 0x1, 0x4}, &(0x7f0000000f80)=0x98) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000fc0)={r8, 0xc4, "7c4ebe7fd58c2fea7e68c748f232c385e5c999ef634ddd13417b384c7d7c9bc6be12249d5292f08331ebc257f6f1e99d0fbefc4a807c0925c8a120e0b5aecd16b76a9744c928b84c133dd5a9ac4b5b130d06192527417f1e97aaa9c84b5570b4d4f5fef9964c70ff540c9894ec94ec5fd2c59d8e2dcdaf1d5c0177cd186848a1d7a9a3ef379d498f419fd1671c10e9f3c6fa8d7f54f13f94ff1b524354ab316515b5adaf7d5cd63d93e758fdc5a0832bb96c61c9b7d89986d5e4643d7ef0cc5183b82d00"}, &(0x7f00000010c0)=0xcc) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001100)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001140)={r8, 0xb7b2, 0x3}, &(0x7f0000001180)=0x8) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000011c0)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000014c0)={r10, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0], 0x0, 0x49, &(0x7f00000012c0)=[{}], 0x8, 0x10, &(0x7f0000001300), &(0x7f0000001340), 0x8, 0x92, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f0000001500)=@bpq0, 0x10) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000001540)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000001580)) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000001640)=0xa, 0x4) 1.969804097s ago: executing program 3 (id=3178): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r4 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000304fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0000001000ffff27bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000004400128009000100766c616e000000003400028f0600010004000000280004800c000100ff0000000b0000000c00010007000000080000000c000100010000000900000008000500", @ANYRES32=r3, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x4000881}, 0x8000002) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000240)=0xf57, 0x4) ioctl$PPPIOCGIDLE32(r6, 0x8008743f, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x6}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000006c0)={r8, @in6={{0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x89}}}, &(0x7f0000000300)=0x84) bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x10, r5}, 0x18) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 1.815974617s ago: executing program 1 (id=3179): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000000c0)="ee", 0x1}, {&(0x7f0000000200)="5c9ba004e73eec8d59a1eaa85eeec838fcf2b979df333f1ae5357f3bf480c7914b1d09e6944fd1eabe391ba9b34446d39e0114132171ba6ae715aa483b8513b8e5f70a7c4b6287d2ce80229defd43a8492bf66208c096927cf043f126bce4509437f42e0af05cb7edfaee2f94333b02ec1ae7bf735c4b979d5dfe0000d7d3bd2033b3b8d25171ae650add5442723629a68aa5e42710f8d26345a70cd93b4688e1afccbf7e95c4322a06147454564b8bbd2994f55c696a856", 0xb8}, {&(0x7f0000000140)}, {&(0x7f0000000300)="652258dd2e50d2edac969e6c9803ebd6c2022cc8bcdf367b2ce3c0b2a065d01964e8b2437552af93f29b26945e6f04b66a7a8ae40c6958c69ec570ad6b03b0a04eb0de822f5b04f063b7dd59cba8398d924377db53edb0255f94d474a642fb6c1b3b19616c680f3dc2f5b98e8604e24cfae01b7c7be334ce89657aca4eeaaf751e8df1f63b5e789903b242dba69ea9c6fb0670de3d5ea5aaad4a4788d5c7ee433ea7afcb4a8f7af0057c9a392e3931e0f4b90ea080554d3c57d324b037bd49b88e2be15947a596f234f8e90fd2bd0a4b083f4bdc6a82ea", 0xd7}, {&(0x7f00000005c0)="989e4cf608ebfb5f5f7e6ded1c908f1708504b4c89354ad12aa4cbe410231de46ffa5bb8be9b50bc43fc60df3b461c1deee1ae58f22793f65bc23cd31f9487b58c773754cbfb7cacb5b0f09a673cdedf879d370488475b9a6f8832e6eb24dad3a7b38640b93dba9a58b393f23861ef18035f6ef01b8e78ae66486b5aa0b6b07f021a4091c0439b677796e1ca45a9cd29a123ab0cbe04e391aac3dab280550f49524df55063d42edb61eebabadf8fde6973d258a56d68d2ba2ef6dd7a4a06f2a59cea3a9567", 0xc5}, {&(0x7f00000007c0)="bfeabd719dc090e2c9827d558f808f5bb096609a6064af3f9843ed7380047ef6ce22c1f210b8236c7d6cebbdd1019e85355ea4aa2d68c0b41a87fea6f88fdec8a56b6874eb1128d604aa0a1a3c122e7ba13f2e72b89a6f3dfa02947efcb8f7f94d22da8f9d8af9fdc57007d8f3919e8cf7d02278fa2296caf33208d2ba8c903d559d334b6145c8e226590aebbd5a167878ac9a4cde8add4027cce29cbc4419f4eac44ec88f41d7cd1c3166b29ed8a730c12a265a9a942421c3cb3b08c780b0d08b94983e484d4c4eeb9a1d2b678246c73034761845718d8edc42887b2623ec95d52015894673f035deb1bdf907cd", 0xee}, {&(0x7f0000000480)="6d5813817e544e17dfd60945bc19b03c5e51e26aadbed0ff68937322f9263ac913d76e96fc5464576fc579c1aabba8bd1dfe70d8235a68ce1f47cfbf7ae499724905f6c0991d9d37cc569a32f08f907b70bc1d43311a0290c125a86df3954ea6e2c90e1e995b6f5fd972f95e7ab9de47eccea963be170a76293bc65ff0710599cd7828cbf45e1dadfc2e519181bc80e53f76b86a2f1a80d9c5f0131dc3cbdb1abf1f1da4330a6080735013d7b8b975f7e599b6dd6da2e59173186bd1071644", 0xbf}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="27f1bb9c3d17bfa960c181128f82d4aa15a107627bb0877418866caf6b3456d226049857b13b3c152d5ce7891e3876976242153bf62469ad8061d8309c7daae6bce3773b34cf8d84db1bb2c4d1aafdd5cffb30fb45cd9bc54c41892b8273faa3c950e33deb730c9f2998595255c63779a7d438373f1d8c73bbb65b42426be31d235234fbcf15152a473051fc0c8864cef9a4397ddf5866bf7ba502d86348f0990f2ee79dac52daecef335ea3e6763002075e96d2b1e3aad9dde45948901549a1cc895eeed8ad0d3a55bdad7ae14f104de1759b7a143977d0274259884978d13ca946", 0xe2}, {&(0x7f00000019c0)="a48daf064b72b6a9d4ae2b599ac3337ad058d8762183d3abcc6755b7f37402a206ba0a9f1cf5c8866e3fc23941c0c8380e2e8194ccc6822a70a44db900b779b7f2d1a39c85b3b1c6e48272aa4ea5d5214a1381ab9a19fcffb5fa7cad04ebb60c5ed2ac864218db0892ced31b0a2ff2f8fa08fbc57692416f502087f88861aa71ef0c9b5b11f38ea0508b29d31b8302658950d86e180c22c4d1f5079fce5c8247790ab8c0f23e712863ccb5f01cdc3cccb38a35b79c6a39be80b4d92141b37116094206c2ca8260a831d3a17a2977f6803801502ecd6556e70b7328ce592c2bfc8caa777892d63ae66cde38b95e", 0xed}, {&(0x7f0000001ac0)="641cea009d5e28664c83b21053e5742cd1ba8c1c8ca35567a1be502afc60dcbeb47915b489c2d738f023f930c1538ce42b8e7fa3b2e792f01fe34da6947a4290eb59dedb5303c7bdbe30422680497092039fc973a95121b4f4c21b86de95891c7a46415ac6efd3995bbd3a2b631c26eb", 0x70}], 0xb}}], 0x1, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000006200)=[{{&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/232, 0xe8}], 0x1}}], 0x1, 0x0, 0x0) 1.644974988s ago: executing program 3 (id=3180): r0 = socket(0x8000000010, 0xa, 0x4) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000080)={0x38, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="380000000ec0334de23baffb379171e7c01d47412615a220f6e232f56514077a85d632459f73c55d472a81b864f20a2a27d66b8c84ce23b97b9cafaf0a507198a7fb1d80ba39421864d8463b541b5b6f27ca353b7ac5aea6acb1f61ea7fda9c495b404ed2189c8b909ec1efd093818c08b749c520be30ded245206159ac4b6db02a9c3b699b65b44e68bf3e5f8bca25c24688df25a7d228e180679e6192b31bd54a97c4a3772fa5d7db23789815d57894b1b562d2db2f2e6423d3b9d884a9279facd84226c11f493aaa384116c6d9125e2db362c3f2980f21e6bb0278aca42aa41a708188e4a46db9ee6adb05f1afabbae7ed394", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf25030000002400018008000300ac1e010108000700", @ANYRES64=r0, @ANYBLOB="060005004e2400000600010002000000"], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0xc100) sendmmsg$inet6(r1, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) splice(r5, 0x0, r8, 0x0, 0x80000025a5, 0xd) shutdown(r7, 0x0) r9 = socket$inet(0x2, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000340)={0x1, 0x5}, 0x8) close(0x3) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000400)="a6c68f1b7098bd6d7ca7b8b4a88ab0392855030d5d2d2f8034ae9327ec8f7c6022984aa7a5c846e81f4939f94f74f821e07eb0c2be4108c334f9bc366cd46119232932152ceda30b8464bdb15d357cfc7091d1b5f6ae1946b3643c6d1ff2968f5d44c6a63107fb87c129d745ed3adefd728ff95b174f327a521d948e6047c69eb9c9276bb654c126ef65a16c371c5fe5191948cfc94f8bf8149ab3e976f0a33883d48a5a60508d7532f56516f2d94b06b6f11096d0b6d135b0030457b79f0ca5620f2dfba0", 0xc5}, {&(0x7f0000000500)="a2e58ccb13d06763c3791dd274d055828473fe185a62bd394a12ddc68de919", 0x1f}, {&(0x7f0000000600), 0xc512}, {0x0}], 0x4) write(r0, &(0x7f0000000040)="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", 0xfc) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r11, 0x29, 0xd4, &(0x7f0000000040)=0x4, 0x4) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r10, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8) r12 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000000)={'gre0\x00', 0x1}) 1.465682042s ago: executing program 4 (id=3181): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x800}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x16, 0x0, 0x0, 0xfffffffb}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=@dstopts={0x2f}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x125c, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x27af}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xbda686e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa5c5}]}, @TIPC_NLA_NODE={0x1064, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400000}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "0f2b9277689b671cc363d17ffb79d15779d9c6caae243dea9ea199"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "bc54289e690ff96c1e90b922f407cce29bf7c654"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0x125c}, 0x1, 0x0, 0x0, 0x40080}, 0x800) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 960.621474ms ago: executing program 2 (id=3117): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) (async) sendto$inet(r3, 0x0, 0x0, 0x8045, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb", 0x3f}], 0x1) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x55e1}], 0x1, 0x100, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6}, 0x10) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24004081) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32=r5], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) sendto$packet(r2, &(0x7f0000000680)="bd8ac89baa9b31009fe43872794257f31544c33b378d368b10751258f7629b8606feaceafc17b49b991d402b222634a1cd79f603718a496242b323a7a6327db16c7c2fad732552d8ef36b98695", 0x4d, 0x801, &(0x7f00000001c0)={0x11, 0xf7, r4, 0x1, 0xb5, 0x6, @remote}, 0x14) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000100)) (async) r7 = epoll_create(0x1200000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0x40000001}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) (async) recvmmsg(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000c00)=""/70, 0x46}, {0x0}, {&(0x7f0000000440)=""/67, 0x43}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000600)=""/6, 0x6}], 0x8, &(0x7f00000006c0)=""/111, 0x6f}, 0x1}, {{&(0x7f0000000740)=@l2, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/184, 0xb8}, {&(0x7f0000000880)=""/67, 0x43}], 0x2, &(0x7f0000000280)=""/20, 0x14}, 0x1}, {{&(0x7f0000000980)=@alg, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a00)=""/43, 0x2b}], 0x1, &(0x7f0000000a80)=""/86, 0x56}, 0x8}], 0x3, 0x2103, &(0x7f0000000bc0)={0x0, 0x989680}) (async) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)=ANY=[@ANYBLOB="40000000d445ee2173f79be98fe43ecfdad552178e788292dea11887da895550c326d5bc89c223164040a6488f7bec3a00cc4b6d68b9724ac8346143755098a3abb4f3cc8aaff8259250c01c4b5a4832195cdd485d3909107e41060acea3b5bdfafc2893cb2e3ae1", @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYRES8=r8, @ANYRES32=r8], 0x60}, 0x1, 0x0, 0x0, 0x9ee6b2d5eb4f949d}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 915.664236ms ago: executing program 2 (id=3182): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001d80), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000bf6da01b5f78fa7b0bade20fa0f4410b00ee8a992951e89c74ea62c9f36431d6af1af46f6e520cdd08b81431a6b170c69dbfd163b6f0b58a9c04c007e11d7fc9b07bd49031259e59ad97502f25a1a57ccb809fda7dbd7a3c68fc6d0000000000000000000000000000000000000000a3a5cc9e3fd9ab241c296e67f08f437a0ad9f893fafe4960aaa5a3fd65b794045b386dbba4c1ad82ad0fe1ed38c387c0823c50cdd37f576b92dc54e2d7d5ba0917ba71c21fe969", @ANYRES16=r3, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0xc000) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240400006c718ea6e61e9b31460307ebae3fc69af6e9802f00000024f17384a1b5f2", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf25180000000c000600010000000100000004003080"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x24008090) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000001140)={&(0x7f00000009c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0, 0x0, &(0x7f00000010c0)=[@timestamping={{0x18, 0x1, 0x25, 0x7}}], 0x18}, 0x20004000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160004000000000000000000fe880000000000000000000000000001ff0100000000000000000000000000010000000000000082000000002b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000096cd4c7d212ca3702bb6000000aa000000002b"], 0xf8}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fcdfffff000000000000000085000000360000001800000003000000000000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x40}, 0x8b) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r6 = socket$packet(0x11, 0x2, 0x300) (async) socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendto$unix(r8, &(0x7f00000010c0)="8bc54a87", 0x4, 0x40000, 0x0, 0x0) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x10320) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000040)={0x11, 0x4, r9, 0x1, 0x3, 0x6, @remote}, 0x14) (async) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0x82, &(0x7f0000000200)={0x7939, 0x5, 0x8000, 0x88, 0xe2, 0x0, 0xff, 0xb7}, &(0x7f0000000440)=0x20) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) 775.020982ms ago: executing program 0 (id=3184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x1000) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000880)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003"], 0x50}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) sendto$packet(r3, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r5}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) listen(r2, 0x1000) (async) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000880)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003"], 0x50}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, 0x0) (async) setsockopt$packet_int(r3, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'}) (async) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) (async) sendto$packet(r3, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r5}, 0x14) (async) 713.513632ms ago: executing program 2 (id=3185): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xf, 0xa, 0x2) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f00000006c0)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES32], 0xfffffffffffffe11) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x6299}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="115e81f841171e165fe09f3fbf589f0754091e4a9b368d8439ae56800be03b0954f113f96f222d9de228f777607142f5a3c2070ac51051c97b16db2b74e15b520d259b48ee129685e77fe859db32f1e54ccd8fc139f2e0ee152a4f59b2697414e7bb31618b490e2d501a77d10e1fcf74022dc0016b3b0442691aaa457a02a3d4a52ad71790386c87a4f1dd1643a4da80d4daefbc8acad7441e60", @ANYRES16=r2, @ANYBLOB="73de0ad283a60009f45dd14646526d1c766e431d40b62db18aac220533305c14c9b51863007867588abef8f27dd761f6655ff6bcee11a4043097b7a5c765bb41278e1a50c4d229e7d0de2f4ccc4ef04e5e22d213fa92df735a399b9a40ca6bfcead3ebf425c590fa8b546844d84656cdcaaf80931273cb310ff63cde43fd87e5779d45f8946f4004f7664e1f28c95e3c98e219f36b9409f57aec6129ef13e180e5c5a3949d175a80a257bec74c9231a3cbfb74d691febda1a6f47387ef74e768108ae4f92abeb8f2", @ANYRESDEC=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002320a191900080004000500000008000100020000002400036e065209c3c8a12c667860804e7fe5e4a97f36169b09902872c7387e7ebbf04cec874841117953bc43ebbccea00496cbf23cb69aa117b00dabdc10479f9556c6a65e1d560408ac04dab5c9dcbc8c8a7b2195"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r8, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010725bd7000fddbdf2502000000080005000a01010208000400ac14141b2600070c73797374656d5f753a6f626a6563745f723a646863705f73746174655f743a7330000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES16=r9, @ANYBLOB="fe000000000000001c0012000c000100626f4e648ca256a652f6e8d60800010004", @ANYRESHEX=r9, @ANYRES8=r5, @ANYRESDEC=r6], 0x3c}}, 0x8040015) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r12], 0x54}}, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="50008d3e4813c700fa720000100011f8ffffffffffffff0000000000", @ANYRES32=0x0, @ANYBLOB="04010000000000002800d780090001007665746800000000180002801400010000000000", @ANYRES64=r12, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r14, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 674.553522ms ago: executing program 3 (id=3186): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="243f0351d1e975db27f8ffffff00000007020000f751f006dd38ea200553fa985cf4b694565ed4eaa347e2127a0fc81a236a16c776b4efd8cc44993f736998d43ca0d6db13f483f5d7de00be9b946f6edff14e7896a83b08523e4b64c3fc401934141eb756ece1d8270fbb754764310891c8b607af7f242cbae4312f6d5c2ba1562e436a709100ff910cba1863981b121b57ec829d0f116aae87fd5c86858834c49e1a9a8853446e13eff61741df1000000050cddc117db2b683d647f1085c906601222984ec", @ANYRES32=0x0, @ANYBLOB="0c000d800500030004000000"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @remote, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) (async) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @remote, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x4000000) (async) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) (async) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newae={0x48, 0x1e, 0x1, 0x70bd2b, 0x25dfdbfe, {{@in=@broadcast, 0x4d3, 0x2, 0xff}, @in6=@mcast1, 0x200, 0x3500}, [@etimer_thresh={0x8, 0xc, 0x3}]}, 0x48}}, 0x4050) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newae={0x48, 0x1e, 0x1, 0x70bd2b, 0x25dfdbfe, {{@in=@broadcast, 0x4d3, 0x2, 0xff}, @in6=@mcast1, 0x200, 0x3500}, [@etimer_thresh={0x8, 0xc, 0x3}]}, 0x48}}, 0x4050) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) socket$inet(0x2, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x88}}, 0x20000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 396.477743ms ago: executing program 4 (id=3187): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0x1ff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000840)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x79}, @initr0={0x18, 0x0, 0x0, 0x0, 0x11000000}, @exit, @alu={0x5, 0x0, 0xd, 0xa, 0x0, 0xffff}, @exit, @ldst={0x2, 0x2, 0x3, 0x0, 0x7, 0x100, 0x10}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xfe3b, &(0x7f0000000340)=""/238}, 0x28) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f0000006100)=[{{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000680)=""/204, 0xcc}], 0x1}, 0x6}], 0x1, 0x2000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4855}, 0x80) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000010301040000000000000000010000000c000200"], 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = gettid() sendmmsg$unix(r3, &(0x7f0000006b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="41b0", 0x2}], 0x1, 0x0, 0x0, 0x8060}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20, 0x48004}}], 0x2, 0x20008811) syz_open_procfs$namespace(r4, &(0x7f00000005c0)='ns/time\x00') sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7c6faf42}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="6d971820309b5be498b8ce8df995654323156618d56fd6ba1147748233aa3a0550ce0f7d9fa84c54", 0x28}, {&(0x7f0000000180)="ce1c9d1d7147fbb26deeadcc3c6862480592a2c740c19623354f21db2a9bcd917100ac7779d640bc09814fa23ae92157601cdfba0650409e22cf6e120468201bf00afb1ee1cfcbe43e1ac5645831141d655eb2e01f1d15df63c25f76afdec2a52852a369837bd21b9f2ec5bd304a134c52078960ed52ff421b42cb70707b7cb54aacedb9f032b47743fafdcf728699dfb00e9c10d2c4fc50bd440ae4bf69f7898106fe73ffba19902412c87f225c07153c24cf3c6bc3d830d1b585b642106b1a160f42f570c4d4080876ab63d7f49e987d157841", 0xd4}, {&(0x7f0000000280)="77e75bc764cda17bf3ea9648503a030c3234b594d0d31b41e16617da69531afcec267221e1421708d2a744057098b740f86b9a8e990a603452809357bb42548d991200c5bc82ba12d280dd515733e74e60723dedf3f1a2cfcc7cff3929c63976ff1a83d360b5fa4094b495839a5c00a6835dc3056040c1d1017f27b79169b1bcc42fe394e8", 0x85}], 0x3, &(0x7f00000008c0)=[@dstopts={{0x58, 0x29, 0x37, {0x11, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0xfff}, @calipso={0x7, 0x38, {0x2, 0xc, 0x8, 0x100, [0x7, 0x1, 0x0, 0xf69f, 0xf, 0x1]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1000}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @rthdr={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x0, 0x5, 0x0, [@loopback, @loopback]}}}, @rthdr={{0x28, 0x29, 0x39, {0x1, 0x2, 0x2, 0x1, 0x0, [@local]}}}], 0x100}}], 0x1, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r0, 0x0, 0x0) 392.63056ms ago: executing program 0 (id=3188): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0xa, 0x0, 0x401, @dev={0xfe, 0x80, '\x00', 0x21}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}}], 0x1, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x181341, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x48, 0x10, 0x403, 0x0, 0x8000004, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5, 0x8ca}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}]}, 0x48}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000080", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ef6c2fca06a9bd768d5f1", {"76c19815002000000000000000001000", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x50, 0x28, 0x1, 0x70bd2a, 0xfffd7df8, {0x0, 0x0, 0x0, r10, {0x1}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x97, '\x00', 0x2, 0x7, 0x8, 0x10000}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x240000a0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000100)) r11 = socket$can_raw(0x1d, 0x3, 0x1) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e00010027bd7000fcdbdf250a000000", @ANYRES32=r12, @ANYBLOB="00000800140001"], 0x30}}, 0x20000000) getsockopt$CAN_RAW_RECV_OWN_MSGS(r11, 0x65, 0x4, &(0x7f0000000140), &(0x7f00000000c0)=0x2) 297.210936ms ago: executing program 2 (id=3189): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bond\x00', 0x10) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000300)=""/234, 0xea}) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'team_slave_1\x00', @random="013701369eff"}) getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)="5bbfdc6d", 0x4}], 0x1) 290.408368ms ago: executing program 3 (id=3190): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@random="adea708edf67", @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}}}}}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000500)=0x100000c, 0x4) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1d}}, 0x4000009, 0x5, 0x4, 0x7fffffff, 0x45, 0x6, 0xb}, &(0x7f0000000480)=0x9c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x3, 0x80}, {0x6}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000000000000c00050088001800000000000c0006001100000000000000080001000000000006000a15000a002f6465762f766972747561715f6e636900000000000000000000007bf900000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x9, @loopback, 0x10}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x9, @loopback, 0x10}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000680)=r6, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2}) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newqdisc={0xa0, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0xffff026d, 0x2, 0x92}, 0x1, 0x1, 0x6, 0x4, 0x200, 0x1a, 0x1e, 0x10, 0x2, 0xfffffeff, {0x1000, 0x1, 0x3, 0x5, 0x6, 0x88}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x20000000, 0x0, 0xfffffffd, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newqdisc={0xa0, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0xffff026d, 0x2, 0x92}, 0x1, 0x1, 0x6, 0x4, 0x200, 0x1a, 0x1e, 0x10, 0x2, 0xfffffeff, {0x1000, 0x1, 0x3, 0x5, 0x6, 0x88}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x20000000, 0x0, 0xfffffffd, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 0s ago: executing program 4 (id=3191): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(0x3) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0xf278}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x200000, 0x2, 0x0, 0x0, 0x96, 0xfff8}, 0x20) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) kernel console output (not intermixed with test programs): 242.013382][ C1] lec:lec_tx_timeout: lec0 [ 242.018183][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 243.376320][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1575'. [ 243.417338][T12158] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1573'. [ 243.527002][T12167] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1577'. [ 243.591253][T12168] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1577'. [ 243.601511][T12168] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1577'. [ 243.611226][T12168] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1577'. [ 243.623384][T12168] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1577'. [ 243.632967][T12168] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1577'. [ 243.646648][T12168] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1577'. [ 244.760946][T12213] netlink: 'syz.0.1588': attribute type 29 has an invalid length. [ 244.850333][T12217] bridge_slave_1: default FDB implementation only supports local addresses [ 244.959646][T12220] xt_hashlimit: size too large, truncated to 1048576 [ 245.184562][T12243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.286939][T12240] pim6reg: entered allmulticast mode [ 245.309715][T12240] pim6reg: left allmulticast mode [ 245.773443][T12255] bond8 (unregistering): Released all slaves [ 246.193974][T12293] __nla_validate_parse: 66 callbacks suppressed [ 246.193999][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1609'. [ 246.274602][T12289] vxcan3: entered promiscuous mode [ 246.302676][T12295] syzkaller0: entered promiscuous mode [ 246.308731][T12295] syzkaller0: entered allmulticast mode [ 246.517752][T12305] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1614'. [ 246.527290][T12305] netlink: 175 bytes leftover after parsing attributes in process `syz.4.1614'. [ 246.647517][T12313] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.025192][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 247.033325][ C1] lec:lec_tx_timeout: lec0 [ 247.038004][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 247.052354][T12332] netlink: 'syz.2.1619': attribute type 8 has an invalid length. [ 247.101014][ T13] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.117189][ T13] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.184405][T12335] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1622'. [ 247.186037][T12334] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1622'. [ 247.259422][ T13] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.279239][ T13] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.296634][T12331] netlink: 'syz.3.1621': attribute type 2 has an invalid length. [ 247.692669][T12353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1629'. [ 247.712773][T12355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1630'. [ 247.743377][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1629'. [ 247.743481][T12355] netem: incorrect ge model size [ 247.764950][T12355] netem: change failed [ 247.899459][T12358] can: request_module (can-proto-0) failed. [ 248.218878][T12375] netlink: 'syz.0.1635': attribute type 5 has an invalid length. [ 248.527503][T12386] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1638'. [ 248.913450][T12403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1644'. [ 248.945491][T12403] netlink: 'syz.3.1644': attribute type 20 has an invalid length. [ 248.960215][T12403] netlink: 'syz.3.1644': attribute type 21 has an invalid length. [ 248.999486][T12405] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 249.025831][T12405] syzkaller0: entered promiscuous mode [ 249.042648][T12405] syzkaller0: entered allmulticast mode [ 249.128336][T12412] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.169889][T12412] netlink: 'syz.3.1648': attribute type 1 has an invalid length. [ 250.679485][T12465] syzkaller1: entered promiscuous mode [ 250.692308][T12465] syzkaller1: entered allmulticast mode [ 251.135953][T12483] xt_nat: multiple ranges no longer supported [ 251.403720][T12495] __nla_validate_parse: 4 callbacks suppressed [ 251.403743][T12495] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1675'. [ 251.420675][T12495] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1675'. [ 251.502057][T12497] syzkaller0: entered promiscuous mode [ 251.509044][T12497] syzkaller0: entered allmulticast mode [ 251.519473][T12497] tipc: Enabled bearer , priority 0 [ 251.545625][T12496] tipc: Resetting bearer [ 251.596059][T12496] tipc: Disabling bearer [ 251.629348][T12501] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1678'. [ 251.834695][T12507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1680'. [ 252.045222][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 252.053860][ C1] lec:lec_tx_timeout: lec0 [ 252.059413][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 252.121877][T12516] sctp: [Deprecated]: syz.3.1682 (pid 12516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.121877][T12516] Use struct sctp_sack_info instead [ 252.155584][T12515] sctp: [Deprecated]: syz.3.1682 (pid 12515) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.155584][T12515] Use struct sctp_sack_info instead [ 252.658613][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1688'. [ 252.947717][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1694'. [ 253.011374][T12564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.512972][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 253.549139][T12590] netlink: 'syz.4.1703': attribute type 5 has an invalid length. [ 253.557930][T12590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1703'. [ 253.579074][T12596] netlink: 'syz.1.1704': attribute type 15 has an invalid length. [ 254.034469][T12584] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1700'. [ 254.123071][T12590] geneve3: entered promiscuous mode [ 254.150226][T12590] geneve3: entered allmulticast mode [ 254.164384][T12544] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 254.195358][T12544] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 254.203581][T12544] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 254.278155][T12544] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 254.813705][T12632] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20003 [ 254.832063][T12634] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1714'. [ 255.052740][T12645] syzkaller1: entered promiscuous mode [ 255.083597][T12645] syzkaller1: entered allmulticast mode [ 255.761192][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.783499][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.786349][T12688] netlink: 'syz.2.1726': attribute type 9 has an invalid length. [ 255.882877][T12545] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 255.894340][T12545] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 255.935326][T12545] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 255.954242][T12545] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 256.351622][T12725] xt_hashlimit: invalid rate [ 256.366020][T12717] 8021q: adding VLAN 0 to HW filter on device ` [ 256.394575][T12717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 256.451043][T12723] __nla_validate_parse: 15 callbacks suppressed [ 256.451059][T12716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1736'. [ 256.451065][T12723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1738'. [ 256.505328][T12716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.569597][T12730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.873175][T12752] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1746'. [ 256.911025][T12754] x_tables: duplicate underflow at hook 1 [ 256.936041][T12754] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1747'. [ 256.953249][T12750] tun0: tun_chr_ioctl cmd 1074025672 [ 256.966553][T12750] tun0: ignored: set checksum disabled [ 257.075160][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 257.083257][ C1] lec:lec_tx_timeout: lec0 [ 257.088278][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 257.157232][ T30] audit: type=1107 audit(1773027444.936:7): pid=12766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ðapÑxðøu}·S„—Çl [ 257.157232][ T30] ×,­8º",IŠëÝÚ \ÕóJÃ.ËŽ&ÃÚ. Œn²mBj+­Urøá¼’ÂÁ*-Û€ú`â[fôš&#*î:ûÛÙ—“· BdsöP Æ”¨«ÓGö¢m³üÍL£Qñ?Þí»“˜ÔŽêJ ˆ6¼†;õ:öríXvF“$ä.æl¿ÙÈö¥"gçÔ¸{òÙ¿ý ·Ó oçŽ)ßmw”Ìô?ˆIøßð{@uÛ½1ä?' âR:' [ 257.303128][T12777] netlink: 'syz.3.1753': attribute type 3 has an invalid length. [ 257.314646][T12777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1753'. [ 257.742846][T12799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1759'. [ 257.761242][T12799] vlan0: entered promiscuous mode [ 257.769377][T12799] vlan0: entered allmulticast mode [ 257.791633][T12799] hsr_slave_1: entered allmulticast mode [ 257.809707][T12791] syzkaller0: entered promiscuous mode [ 257.823386][T12791] syzkaller0: entered allmulticast mode [ 257.859353][T12794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1758'. [ 257.869487][T12794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1758'. [ 258.268688][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'. [ 258.307495][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'. [ 258.471432][T12834] netlink: 'syz.1.1767': attribute type 1 has an invalid length. [ 258.510401][T12834] netlink: 'syz.1.1767': attribute type 2 has an invalid length. [ 258.739871][T12843] syzkaller1: entered promiscuous mode [ 258.769372][T12843] syzkaller1: entered allmulticast mode [ 258.866868][T12852] netlink: 'syz.2.1772': attribute type 2 has an invalid length. [ 258.981538][T12855] pimreg: entered allmulticast mode [ 259.558178][T12888] netlink: 'syz.0.1782': attribute type 21 has an invalid length. [ 259.829737][T12906] netlink: 'syz.3.1788': attribute type 1 has an invalid length. [ 259.871284][T12906] netlink: 'syz.3.1788': attribute type 1 has an invalid length. [ 260.029721][T12915] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 260.033369][T12926] netlink: 'syz.2.1791': attribute type 1 has an invalid length. [ 260.041736][T12914] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 260.074398][T12926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.202266][T12935] netlink: 'syz.0.1796': attribute type 18 has an invalid length. [ 262.095376][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 262.103507][ C1] lec:lec_tx_timeout: lec0 [ 262.108351][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 262.981343][T12919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.163242][T12958] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 263.477755][T12981] __nla_validate_parse: 8 callbacks suppressed [ 263.477775][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1805'. [ 263.769835][T12999] batman_adv: batadv0: Adding interface: dummy0 [ 263.777240][T12999] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.803467][T12999] batman_adv: batadv0: Interface activated: dummy0 [ 263.838841][T13001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1810'. [ 263.864433][T12999] netlink: 'syz.3.1809': attribute type 10 has an invalid length. [ 263.874852][T13002] batadv0: mtu less than device minimum [ 263.889083][T13002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 263.901409][T13002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 263.913502][T13002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 263.925079][T13002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 263.937103][T13002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 263.948895][T13002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 263.960864][T13002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 264.037480][T12999] team0: Cannot enslave team device to itself [ 264.056630][T13004] macsec3: entered promiscuous mode [ 264.078683][T13004] bridge0: entered promiscuous mode [ 264.086342][T13004] bridge2: port 1(macsec3) entered blocking state [ 264.096282][T13004] bridge2: port 1(macsec3) entered disabled state [ 264.109790][T13004] macsec3: entered allmulticast mode [ 264.126605][T13004] bridge2: port 1(macsec3) entered blocking state [ 264.133457][T13004] bridge2: port 1(macsec3) entered forwarding state [ 264.167740][T13009] syz_tun: entered allmulticast mode [ 264.488593][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1815'. [ 264.531356][ T6068] bridge2: port 1(macsec3) entered disabled state [ 264.540950][T13034] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1818'. [ 264.591101][T13027] netlink: 'syz.4.1818': attribute type 14 has an invalid length. [ 264.794878][T13033] syzkaller1: entered promiscuous mode [ 264.823284][T13033] syzkaller1: entered allmulticast mode [ 265.000728][T13054] sctp: [Deprecated]: syz.4.1822 (pid 13054) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.000728][T13054] Use struct sctp_sack_info instead [ 265.530032][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1824'. [ 266.022751][T13106] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1829'. [ 266.330375][T13119] netlink: 'syz.0.1832': attribute type 4 has an invalid length. [ 266.363442][T13121] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1833'. [ 266.419694][T13119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1832'. [ 266.572684][ T30] audit: type=1107 audit(1773027454.356:8): pid=13125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 266.663868][T13134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1837'. [ 266.701392][T13134] vlan1: entered allmulticast mode [ 266.707008][T13134] bridge3: entered allmulticast mode [ 266.787739][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 267.567111][T13155] netlink: 'syz.3.1844': attribute type 2 has an invalid length. [ 267.917185][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 267.925313][ C1] lec:lec_tx_timeout: lec0 [ 267.932098][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 268.685050][T13203] __nla_validate_parse: 7 callbacks suppressed [ 268.685071][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1856'. [ 268.717737][T13203] x_tables: duplicate underflow at hook 2 [ 268.845526][T13207] syzkaller0: left promiscuous mode [ 268.850896][T13207] syzkaller0: left allmulticast mode [ 268.885532][T13207] tipc: Resetting bearer [ 269.094254][T13211] netlink: 'syz.2.1860': attribute type 4 has an invalid length. [ 269.106125][T13215] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 269.114055][T13211] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1860'. [ 269.191799][T13211] bridge8: entered promiscuous mode [ 269.225408][T13211] bridge8: entered allmulticast mode [ 269.322359][T13220] hsr0: entered promiscuous mode [ 269.342637][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1863'. [ 269.360117][T13223] hsr_slave_0: left promiscuous mode [ 269.385239][T13223] hsr_slave_1: left promiscuous mode [ 269.430943][T13220] netlink: 'syz.0.1863': attribute type 1 has an invalid length. [ 269.439123][T13220] netlink: 'syz.0.1863': attribute type 11 has an invalid length. [ 269.448693][T13220] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1863'. [ 269.466094][T13230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1866'. [ 269.475384][T13223] hsr0 (unregistering): left promiscuous mode [ 269.515768][T13220] batadv_slave_0: entered promiscuous mode [ 269.608233][T13219] batadv_slave_0: left promiscuous mode [ 269.707857][T13240] xt_hashlimit: size too large, truncated to 1048576 [ 269.777357][T13245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1872'. [ 269.916306][T13250] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1869'. [ 270.097819][T13260] net_ratelimit: 12 callbacks suppressed [ 270.097846][T13260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.171386][T13258] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1873'. [ 270.387177][T13280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1879'. [ 270.408039][ T5833] IPVS: starting estimator thread 0... [ 270.457116][T13286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1874'. [ 270.536053][T13282] IPVS: using max 25 ests per chain, 60000 per kthread [ 270.800596][T13303] rdma_op ffff88803357f9f0 conn xmit_rdma 0000000000000000 [ 271.547932][T13332] netlink: 'syz.2.1888': attribute type 1 has an invalid length. [ 271.596584][T13332] netlink: 'syz.2.1888': attribute type 2 has an invalid length. [ 271.604386][T13332] netlink: 'syz.2.1888': attribute type 1 has an invalid length. [ 272.151672][T13373] syzkaller0: entered promiscuous mode [ 272.165361][T13373] syzkaller0: entered allmulticast mode [ 272.218510][T13373] tipc: Enabled bearer , priority 0 [ 272.264782][T13372] tipc: Resetting bearer [ 272.306489][T13372] tipc: Disabling bearer [ 272.338845][T13381] syzkaller1: entered promiscuous mode [ 272.344530][T13381] syzkaller1: entered allmulticast mode [ 272.413405][T13381] 8021q: adding VLAN 0 to HW filter on device bond7 [ 272.836277][T13419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.945201][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 272.953274][ C1] lec:lec_tx_timeout: lec0 [ 272.958113][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 273.077730][T13435] "syz.4.1910" (13435) uses obsolete ecb(arc4) skcipher [ 273.548283][T13463] netlink: 'syz.1.1915': attribute type 3 has an invalid length. [ 273.572163][T13463] netlink: 'syz.1.1915': attribute type 1 has an invalid length. [ 274.086764][T13483] __nla_validate_parse: 9 callbacks suppressed [ 274.086783][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'. [ 274.129220][T13483] netlink: 16366 bytes leftover after parsing attributes in process `syz.4.1921'. [ 274.519350][T13499] xt_hashlimit: overflow, rate too high: 0 [ 274.826522][T13508] openvswitch: netlink: EtherType 13b is less than min 600 [ 274.843501][T13504] netlink: 6856 bytes leftover after parsing attributes in process `syz.1.1926'. [ 274.866313][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1927'. [ 274.876091][T13504] netlink: 6856 bytes leftover after parsing attributes in process `syz.1.1926'. [ 274.993239][T13511] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1929'. [ 275.021087][T13511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1929'. [ 275.041811][T13511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1929'. [ 275.339179][T13525] netlink: set zone limit has 8 unknown bytes [ 275.492029][T13534] xt_hashlimit: size too large, truncated to 1048576 [ 275.499566][T13531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'. [ 275.562527][T13543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.770296][T13550] syzkaller0: entered promiscuous mode [ 275.777918][T13550] syzkaller0: entered allmulticast mode [ 275.961366][T13565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1942'. [ 276.020792][T13568] sctp: [Deprecated]: syz.0.1943 (pid 13568) Use of int in maxseg socket option. [ 276.020792][T13568] Use struct sctp_assoc_value instead [ 276.485021][T13595] IPVS: ip_vs_edit_dest(): server weight less than zero [ 277.545787][T13597] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.827914][T13597] tipc: Resetting bearer [ 277.889792][T13597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.924936][T13597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.965190][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 277.973319][ C1] lec:lec_tx_timeout: lec0 [ 277.978409][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 278.065779][T13597] batman_adv: batadv0: Interface deactivated: gretap2 [ 278.321339][T12546] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.340885][T12546] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.364740][T12546] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.389577][T12546] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.451897][T12546] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.469482][T12546] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.491405][T12546] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.511763][T12546] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.558502][T13646] tipc: Enabling of bearer rejected, already enabled [ 278.580016][T13655] tipc: Resetting bearer [ 278.707280][T13655] tipc: Resetting bearer [ 278.917570][T13679] macvlan0: entered promiscuous mode [ 279.308792][T12546] tipc: Resetting bearer [ 279.395935][T13699] bridge_slave_1: left allmulticast mode [ 279.452189][T13699] bridge_slave_1: left promiscuous mode [ 279.471093][T13699] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.487229][T13699] bridge_slave_1: entered promiscuous mode [ 279.495064][T13699] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 279.670441][T13710] syzkaller0: entered promiscuous mode [ 279.687543][T13710] syzkaller0: entered allmulticast mode [ 279.710228][T13710] simple: basic_2 [ 279.980521][T13729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.092499][ T30] audit: type=1800 audit(1773027467.876:9): pid=13723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1976" name="memory.events" dev="tmpfs" ino=2071 res=0 errno=0 [ 280.135417][T13713] __nla_validate_parse: 6 callbacks suppressed [ 280.135441][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1975'. [ 280.159245][T13728] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 280.504498][T13751] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 280.528218][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1985'. [ 280.539133][T13751] bond8 (unregistering): Released all slaves [ 280.552574][T13755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1985'. [ 280.662498][T13760] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1988'. [ 281.151261][T13800] netlink: 'syz.3.1997': attribute type 4 has an invalid length. [ 281.175648][T13795] netlink: 'syz.3.1997': attribute type 4 has an invalid length. [ 281.247555][T13795] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 281.401964][T13795] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 281.608886][T13795] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 281.732245][T13795] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 281.891917][T13825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2003'. [ 282.083873][T13831] netlink: 'syz.0.2004': attribute type 1 has an invalid length. [ 282.131047][ T977] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 282.210255][T13838] bond8: entered promiscuous mode [ 282.215716][T13838] bond8: entered allmulticast mode [ 282.221347][T13838] 8021q: adding VLAN 0 to HW filter on device bond8 [ 282.251532][ T977] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 282.262908][T13835] tipc: Resetting bearer [ 282.291602][ T977] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.312800][T13835] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2006'. [ 282.332510][ T977] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.397356][ T977] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.490002][ T977] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.510785][ T977] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 282.534100][ T977] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 282.563023][T13864] tipc: Resetting bearer [ 282.614495][T13863] tipc: Resetting bearer [ 282.624414][T13860] syzkaller0: entered promiscuous mode [ 282.641341][T13860] syzkaller0: entered allmulticast mode [ 282.652202][T13870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2016'. [ 282.685674][T13872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2015'. [ 282.739928][T13870] dummy0: entered promiscuous mode [ 282.761336][T13870] macvtap1: entered promiscuous mode [ 282.785713][T13870] macvtap1: entered allmulticast mode [ 282.796929][T13870] dummy0: entered allmulticast mode [ 282.985327][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 282.993484][ C1] lec:lec_tx_timeout: lec0 [ 282.998403][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 283.265668][T13892] netlink: 'syz.2.2021': attribute type 2 has an invalid length. [ 283.300529][T13892] netlink: 'syz.2.2021': attribute type 2 has an invalid length. [ 283.308710][T13892] netlink: 'syz.2.2021': attribute type 1 has an invalid length. [ 283.318130][T13892] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2021'. [ 283.329463][T13895] Bluetooth: hci1: too big key_count value 49665 [ 283.456907][ T8825] tipc: Resetting bearer [ 283.976891][T13913] bond1: left promiscuous mode [ 283.999164][T13913] bridge1: left promiscuous mode [ 284.031120][T13913] vlan2: left promiscuous mode [ 284.049897][T13913] bridge0: left promiscuous mode [ 284.069455][T13913] vlan3: left promiscuous mode [ 284.087572][T13913] geneve1: left promiscuous mode [ 284.101114][T13913] vlan3: left allmulticast mode [ 284.113297][T13913] geneve1: left allmulticast mode [ 284.138096][T13913] gretap1: left allmulticast mode [ 284.151573][T13913] vlan4: left allmulticast mode [ 284.164996][T13913] team0: left allmulticast mode [ 284.173771][T13913] team_slave_0: left allmulticast mode [ 284.180002][T13913] team_slave_1: left allmulticast mode [ 284.188741][T13913] erspan1: left promiscuous mode [ 284.193941][T13913] erspan1: left allmulticast mode [ 284.211725][T13913] bond8: left promiscuous mode [ 284.217172][T13913] bond8: left allmulticast mode [ 284.293584][T13925] erspan0: entered promiscuous mode [ 284.308274][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2031'. [ 284.462338][T13930] netlink: 'syz.3.2032': attribute type 28 has an invalid length. [ 284.644867][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.655296][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.663563][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.685712][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.972797][T13949] can: request_module (can-proto-3) failed. [ 285.239164][T13981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.645793][T14001] veth7: entered promiscuous mode [ 285.654021][T14000] ip6tnl0: Caught tx_queue_len zero misconfig [ 285.672276][T14000] __nla_validate_parse: 7 callbacks suppressed [ 285.672296][T14000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2052'. [ 285.688641][T14000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2052'. [ 285.700347][T14006] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2053'. [ 285.859828][T14010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2055'. [ 286.074046][T14013] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2054'. [ 286.084151][T14013] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2054'. [ 288.005296][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 288.013344][ C1] lec:lec_tx_timeout: lec0 [ 288.018065][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 293.025250][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 293.033305][ C1] lec:lec_tx_timeout: lec0 [ 293.038182][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 298.045241][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 298.053286][ C1] lec:lec_tx_timeout: lec0 [ 298.058123][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 303.065230][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 303.073265][ C1] lec:lec_tx_timeout: lec0 [ 303.078169][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 308.085285][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 308.093312][ C1] lec:lec_tx_timeout: lec0 [ 308.098047][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 313.915181][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 313.923258][ C1] lec:lec_tx_timeout: lec0 [ 313.928307][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 317.198293][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.204706][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.935249][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 318.943333][ C1] lec:lec_tx_timeout: lec0 [ 318.948028][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 323.955285][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 323.963334][ C1] lec:lec_tx_timeout: lec0 [ 323.968233][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 328.975243][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 328.983306][ C1] lec:lec_tx_timeout: lec0 [ 328.988136][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 333.995355][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 334.003417][ C1] lec:lec_tx_timeout: lec0 [ 334.008258][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 339.015209][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 339.023239][ C1] lec:lec_tx_timeout: lec0 [ 339.028030][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 344.035228][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 344.043363][ C1] lec:lec_tx_timeout: lec0 [ 344.048289][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 349.055290][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 349.063345][ C1] lec:lec_tx_timeout: lec0 [ 349.068028][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 354.075554][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 354.083846][ C1] lec:lec_tx_timeout: lec0 [ 354.089474][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 359.915328][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 359.923587][ C1] lec:lec_tx_timeout: lec0 [ 359.929013][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 364.945254][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 364.953583][ C1] lec:lec_tx_timeout: lec0 [ 364.959581][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 369.975321][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 369.985135][ C1] lec:lec_tx_timeout: lec0 [ 369.990558][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 375.005222][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 375.013371][ C1] lec:lec_tx_timeout: lec0 [ 375.018535][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 377.082827][T14068] team0 (unregistering): Failed to send options change via netlink (err -105) [ 377.099175][T14068] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 377.112777][T14068] team0 (unregistering): Port device team_slave_0 removed [ 377.130601][T14068] team0 (unregistering): Failed to send options change via netlink (err -105) [ 377.140524][T14068] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 377.157443][T14068] team0 (unregistering): Port device team_slave_1 removed [ 377.275680][T14082] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2071'. [ 377.300082][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2071'. [ 377.760880][T14102] netlink: 'syz.1.2078': attribute type 4 has an invalid length. [ 377.771690][T14102] netlink: 'syz.1.2078': attribute type 4 has an invalid length. [ 377.809912][T14102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2078'. [ 377.924942][T14102] bond6: entered promiscuous mode [ 377.931031][T14102] 8021q: adding VLAN 0 to HW filter on device bond6 [ 378.236678][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2086'. [ 378.255977][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2086'. [ 378.642034][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.648820][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.049033][T14152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2088'. [ 379.093525][T14107] dummy0: left allmulticast mode [ 379.106381][T14154] netlink: 'syz.1.2088': attribute type 13 has an invalid length. [ 379.114610][T14154] netlink: 'syz.1.2088': attribute type 17 has an invalid length. [ 379.232866][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.261434][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.320974][T14154] erspan0: left promiscuous mode [ 379.329493][T14162] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2089'. [ 379.377288][T14154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.390054][T14154] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.426714][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.437122][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.625755][T14175] sctp: [Deprecated]: syz.3.2095 (pid 14175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.625755][T14175] Use struct sctp_sack_info instead [ 379.849180][T14180] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2097'. [ 380.025219][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 380.033332][ C1] lec:lec_tx_timeout: lec0 [ 380.038108][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 380.538539][T14198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.672977][T14210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2102'. [ 380.749554][T14212] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2104'. [ 380.941560][T14215] tipc: Enabling of bearer rejected, failed to enable media [ 380.995958][T14222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.527534][T14240] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 381.542343][T14245] netlink: 'syz.4.2111': attribute type 1 has an invalid length. [ 381.553790][T14242] macvtap1: entered promiscuous mode [ 381.559456][T14242] veth1_to_hsr: entered promiscuous mode [ 381.566254][T14242] macvtap1: entered allmulticast mode [ 381.571869][T14242] veth1_to_hsr: entered allmulticast mode [ 382.139284][T14271] tipc: Enabling of bearer rejected, already enabled [ 382.360206][T14287] __nla_validate_parse: 6 callbacks suppressed [ 382.360226][T14287] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2125'. [ 382.738398][T14318] syzkaller1: entered promiscuous mode [ 382.751570][T14318] syzkaller1: entered allmulticast mode [ 383.074864][T14357] openvswitch: netlink: Missing valid actions attribute. [ 383.084822][T14356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'. [ 383.095377][T14357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.111398][T14360] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2138'. [ 383.345652][T14367] tipc: Resetting bearer [ 383.827540][T14380] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2143'. [ 384.117607][T14391] tipc: Resetting bearer [ 384.150930][T14365] tipc: Resetting bearer [ 384.352919][T14373] gretap3: entered promiscuous mode [ 384.411574][T14386] xt_CT: No such helper "pptp" [ 384.495573][T11593] tipc: Resetting bearer [ 384.569615][T14411] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2151'. [ 384.949379][T14427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2154'. [ 385.010831][T14434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2157'. [ 385.014301][T14431] netlink: 'syz.3.2155': attribute type 1 has an invalid length. [ 385.045143][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 385.053379][ C1] lec:lec_tx_timeout: lec0 [ 385.066082][T14431] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2155'. [ 385.076589][T14431] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2155'. [ 385.088078][T14431] netlink: 658 bytes leftover after parsing attributes in process `syz.3.2155'. [ 385.148528][T14434] 8021q: adding VLAN 0 to HW filter on device bond7 [ 385.186813][T14440] bond7: (slave batadv1): Opening slave failed [ 385.364164][T14446] SET target dimension over the limit! [ 385.667075][T14460] sctp: [Deprecated]: syz.4.2162 (pid 14460) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.667075][T14460] Use struct sctp_sack_info instead [ 386.059801][T14469] sctp: [Deprecated]: syz.3.2166 (pid 14469) Use of int in max_burst socket option deprecated. [ 386.059801][T14469] Use struct sctp_assoc_value instead [ 386.638107][T14478] netlink: zone id is out of range [ 386.643549][T14478] netlink: zone id is out of range [ 386.667399][T14478] netlink: zone id is out of range [ 386.685248][T14478] netlink: zone id is out of range [ 386.706210][T14478] netlink: zone id is out of range [ 386.711411][T14478] netlink: zone id is out of range [ 386.824629][T14479] ip6gretap0: entered promiscuous mode [ 387.019517][T14493] netlink: 'syz.1.2173': attribute type 1 has an invalid length. [ 387.027502][T14493] netlink: 'syz.1.2173': attribute type 1 has an invalid length. [ 387.153282][T14495] tipc: Resetting bearer [ 387.169581][T14495] tipc: Enabling of bearer rejected, already enabled [ 387.293388][T14495] bond9: entered promiscuous mode [ 387.312015][T14495] 8021q: adding VLAN 0 to HW filter on device bond9 [ 387.489452][T14519] __nla_validate_parse: 10 callbacks suppressed [ 387.489474][T14519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2182'. [ 387.515937][T14519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2182'. [ 387.577148][T14519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2182'. [ 387.597827][T14523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2183'. [ 387.646364][T14524] bond6: option arp_all_targets: invalid value (129) [ 387.656751][T14524] bond6 (unregistering): Released all slaves [ 387.685246][T14519] vlan0: entered promiscuous mode [ 388.142548][T14539] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 388.170880][T14539] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 388.189663][T14539] tipc: Resetting bearer [ 388.201619][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2188'. [ 388.598886][T14561] netlink: 'syz.2.2194': attribute type 1 has an invalid length. [ 388.638027][T14564] netlink: 'syz.4.2195': attribute type 1 has an invalid length. [ 388.676702][T14561] bond4: entered promiscuous mode [ 388.682722][T14561] 8021q: adding VLAN 0 to HW filter on device bond4 [ 388.699250][T14567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2195'. [ 388.773367][T14564] 8021q: adding VLAN 0 to HW filter on device bond10 [ 388.787810][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2195'. [ 388.823746][T14562] bond0: entered promiscuous mode [ 388.850031][T14562] bond0: left promiscuous mode [ 388.870879][T14572] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2196'. [ 388.901680][T14570] bond4: (slave bridge9): making interface the new active one [ 388.912295][T14570] bridge9: entered promiscuous mode [ 388.919948][T14570] bond4: (slave bridge9): Enslaving as an active interface with an up link [ 388.943489][T14564] bond10 (unregistering): Released all slaves [ 389.966449][T14583] netlink: 'syz.1.2199': attribute type 1 has an invalid length. [ 390.012281][T14583] 8021q: adding VLAN 0 to HW filter on device bond8 [ 390.407831][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2207'. [ 390.869440][T14642] sctp: [Deprecated]: syz.2.2209 (pid 14642) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.869440][T14642] Use struct sctp_sack_info instead [ 390.896656][T14642] sctp: [Deprecated]: syz.2.2209 (pid 14642) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.896656][T14642] Use struct sctp_sack_info instead [ 390.975001][T14647] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2212'. [ 391.181215][T14653] netlink: 'syz.1.2216': attribute type 3 has an invalid length. [ 391.223464][T14656] syzkaller1: entered promiscuous mode [ 391.230964][T14656] syzkaller1: entered allmulticast mode [ 391.254789][T14656] xt_hashlimit: size too large, truncated to 1048576 [ 391.341169][T14660] netlink: 'syz.4.2217': attribute type 2 has an invalid length. [ 391.519660][T14668] IPv6: sit1: Disabled Multicast RS [ 391.647631][T14678] netlink: 'syz.1.2220': attribute type 10 has an invalid length. [ 391.659578][T14677] netlink: 'syz.1.2220': attribute type 10 has an invalid length. [ 391.883017][T14679] veth1_macvtap: renamed from veth0_vlan [ 392.088657][T14690] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 392.531613][T14725] __nla_validate_parse: 4 callbacks suppressed [ 392.531635][T14725] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2231'. [ 392.886697][T14736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2233'. [ 392.952841][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2233'. [ 393.135901][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2239'. [ 393.209930][T14770] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2240'. [ 393.793735][ T5488] veth1_macvtap: left promiscuous mode [ 393.842122][ T5488] veth1_macvtap: entered promiscuous mode [ 393.878840][T14795] netlink: 'syz.0.2243': attribute type 1 has an invalid length. [ 393.972587][T14795] bond9: entered promiscuous mode [ 393.978488][T14795] 8021q: adding VLAN 0 to HW filter on device bond9 [ 394.000393][T14797] bond9: (slave bridge8): making interface the new active one [ 394.009583][T14797] bridge8: entered promiscuous mode [ 394.016812][T14797] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 394.302698][T14820] pim6reg: entered allmulticast mode [ 394.327013][T14820] pim6reg: left allmulticast mode [ 394.333712][T14824] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.864497][T14847] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2251'. [ 395.021382][T12547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.037447][T12547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.392723][T14873] xt_l2tp: v2 doesn't support IP mode [ 395.612957][T14884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2257'. [ 395.635665][T14884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2257'. [ 396.020021][T14901] tipc: Started in network mode [ 396.040815][T14901] tipc: Node identity ac141413, cluster identity 4711 [ 396.096131][T14901] tipc: New replicast peer: 255.255.255.255 [ 396.127177][T14901] tipc: Enabled bearer , priority 10 [ 396.584562][T14940] geneve4: entered promiscuous mode [ 396.631086][T12547] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.665164][T12547] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.735027][T12547] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.781276][T12547] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.451386][ T5967] tipc: Node number set to 2886997011 [ 397.741027][T14990] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2275'. [ 398.683788][T15032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2284'. [ 398.692996][T15034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2285'. [ 398.693028][T15034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2285'. [ 398.693280][T15034] netlink: 540 bytes leftover after parsing attributes in process `syz.1.2285'. [ 398.737131][T15034] netlink: 'syz.1.2285': attribute type 1 has an invalid length. [ 399.114903][T15044] netlink: 'syz.1.2288': attribute type 2 has an invalid length. [ 399.132242][T15044] : entered promiscuous mode [ 399.272059][T15055] bpq0: entered allmulticast mode [ 399.433062][T15063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2294'. [ 399.571489][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2297'. [ 399.774925][T15072] syzkaller1: entered promiscuous mode [ 399.845336][T15072] syzkaller1: entered allmulticast mode [ 400.082069][T15088] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2301'. [ 400.227614][T15085] netlink: 'syz.0.2300': attribute type 4 has an invalid length. [ 400.249116][T15085] netlink: 'syz.0.2300': attribute type 4 has an invalid length. [ 401.274845][T15099] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 401.298975][T15101] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2306'. [ 401.310933][T15101] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2306'. [ 401.326192][T15106] sctp: [Deprecated]: syz.0.2303 (pid 15106) Use of int in max_burst socket option. [ 401.326192][T15106] Use struct sctp_assoc_value instead [ 401.345438][T15101] netlink: 'syz.3.2306': attribute type 6 has an invalid length. [ 401.354535][T15101] netlink: 'syz.3.2306': attribute type 5 has an invalid length. [ 401.411331][T15101] tipc: Enabling of bearer rejected, failed to enable media [ 401.589292][T15104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.598963][T15104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.676609][T15129] syzkaller1: entered promiscuous mode [ 401.722150][T15129] syzkaller1: entered allmulticast mode [ 401.743594][T15138] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 402.011830][T15129] geneve2: left promiscuous mode [ 402.028090][T15129] geneve2: left allmulticast mode [ 402.040620][T15129] veth9: left promiscuous mode [ 402.062884][T15129] tipc: Resetting bearer [ 402.110285][T15129] bond4: left promiscuous mode [ 402.123566][T15129] bond5: left promiscuous mode [ 402.137277][T15129] ip6tnl2: left allmulticast mode [ 402.153738][T15129] hsr1: left promiscuous mode [ 402.168924][T15129] vxcan3: left promiscuous mode [ 402.176473][T15129] geneve3: left promiscuous mode [ 402.182268][T15129] geneve3: left allmulticast mode [ 402.194129][T15129] macvlan0: left promiscuous mode [ 402.210542][T15129] veth1_to_hsr: left allmulticast mode [ 402.216740][T15129] veth1_to_hsr: left promiscuous mode [ 402.222661][T15129] macvtap1: left promiscuous mode [ 402.229584][T15129] macvtap1: left allmulticast mode [ 402.240647][T15129] bond9: left promiscuous mode [ 402.248883][T15129] geneve4: left promiscuous mode [ 402.258089][T15129] syzkaller1: left promiscuous mode [ 402.263910][T15129] syzkaller1: left allmulticast mode [ 402.313971][T15151] bond10: option xmit_hash_policy: invalid value (10) [ 402.327214][T15151] bond10 (unregistering): Released all slaves [ 402.370310][T12547] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.456507][T12547] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.475898][T12547] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.548143][T15170] syzkaller0: entered promiscuous mode [ 402.554307][T15170] syzkaller0: entered allmulticast mode [ 402.562091][T15170] tipc: Resetting bearer [ 402.569400][T12547] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.786319][T15187] __nla_validate_parse: 5 callbacks suppressed [ 402.786341][T15187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2323'. [ 402.861506][T15189] netlink: 'syz.3.2325': attribute type 4 has an invalid length. [ 402.991662][T15198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2325'. [ 403.122401][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2322'. [ 403.172458][T15207] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2327'. [ 403.188504][ T8034] lec:lec_start_xmit: lec0:No lecd attached [ 403.324627][T15204] veth7: entered promiscuous mode [ 404.028229][T15250] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 404.567791][T15290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.839797][T15304] wlan1 speed is unknown, defaulting to 1000 [ 404.846993][T15304] wlan1 speed is unknown, defaulting to 1000 [ 404.856421][T15304] wlan1 speed is unknown, defaulting to 1000 [ 404.931361][T15304] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 405.080828][T15304] wlan1 speed is unknown, defaulting to 1000 [ 405.114159][T15304] wlan1 speed is unknown, defaulting to 1000 [ 405.136930][T15304] wlan1 speed is unknown, defaulting to 1000 [ 405.159827][T15304] wlan1 speed is unknown, defaulting to 1000 [ 405.177961][T15304] wlan1 speed is unknown, defaulting to 1000 [ 405.657996][T15323] x_tables: duplicate underflow at hook 2 [ 406.097587][T15344] wlan1 speed is unknown, defaulting to 1000 [ 406.208057][T15355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2365'. [ 406.627205][T15368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2368'. [ 406.660209][T15372] wlan1 speed is unknown, defaulting to 1000 [ 406.843618][T15381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2368'. [ 407.030600][T15391] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2371'. [ 407.064701][T15391] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2371'. [ 407.230059][T15380] veth1_macvtap: left promiscuous mode [ 407.239909][T15380] hsr1: left promiscuous mode [ 407.247867][T15380] geneve3: left promiscuous mode [ 407.253653][T15380] ipvlan2: left promiscuous mode [ 407.278074][T15380] ipvlan2: left allmulticast mode [ 407.291134][T15380] bond2: left allmulticast mode [ 407.316190][T15380] bond3: left promiscuous mode [ 407.383064][T15380] bridge0: left allmulticast mode [ 407.403670][T15380] vlan1: left allmulticast mode [ 407.411248][T15380] bridge3: left allmulticast mode [ 407.417536][T15380] veth7: left promiscuous mode [ 407.425770][T15380] bond6: left promiscuous mode [ 407.792130][T15412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2378'. [ 407.831919][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2378'. [ 407.863322][T15414] netlink: 'syz.4.2376': attribute type 14 has an invalid length. [ 407.874451][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 407.938209][T15417] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2378'. [ 408.310774][T15430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2383'. [ 408.338266][T15431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2382'. [ 408.444573][T15431] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2382'. [ 408.563037][T15439] gre1: entered allmulticast mode [ 408.594175][T15443] netlink: 'syz.0.2388': attribute type 5 has an invalid length. [ 408.639061][T15445] mac80211_hwsim hwsim6 ªªªªª;: renamed from wlan0 (while UP) [ 408.885232][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5690 ms [ 408.893311][ C1] lec:lec_tx_timeout: lec0 [ 409.152082][T15481] netlink: 'syz.1.2394': attribute type 1 has an invalid length. [ 409.232474][T15488] netlink: 488 bytes leftover after parsing attributes in process `syz.3.2396'. [ 409.259464][T15488] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2396'. [ 409.343838][T15481] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 409.386885][T15482] syzkaller0: entered promiscuous mode [ 409.406094][T15482] syzkaller0: entered allmulticast mode [ 409.608755][T15508] netlink: 'syz.1.2400': attribute type 13 has an invalid length. [ 409.663448][T15508] wlan1 speed is unknown, defaulting to 1000 [ 409.719114][T15512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.957521][T15522] wlan1 speed is unknown, defaulting to 1000 [ 410.546098][T15555] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2409'. [ 410.703323][T15564] xt_TCPMSS: Only works on TCP SYN packets [ 410.812910][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2397'. [ 410.939182][T15574] netlink: 'syz.3.2413': attribute type 32 has an invalid length. [ 411.283981][T15586] sctp: [Deprecated]: syz.3.2417 (pid 15586) Use of int in max_burst socket option deprecated. [ 411.283981][T15586] Use struct sctp_assoc_value instead [ 411.522442][T15603] IPv6: NLM_F_CREATE should be specified when creating new route [ 411.836620][T15625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.020520][T15650] __nla_validate_parse: 4 callbacks suppressed [ 413.020536][T15650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2430'. [ 413.258575][T15652] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2431'. [ 413.269088][T15652] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2431'. [ 414.410059][T15594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.854951][T15688] pim6reg1: entered promiscuous mode [ 414.861846][T15688] pim6reg1: entered allmulticast mode [ 414.959515][T15696] xt_HMARK: proto mask must be zero with L3 mode [ 415.013886][T15698] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2445'. [ 415.149699][T15705] can: request_module (can-proto-0) failed. [ 415.252572][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2449'. [ 415.261768][T15709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2449'. [ 415.363115][T15721] xt_bpf: check failed: parse error [ 415.386321][T15721] lo speed is unknown, defaulting to 1000 [ 415.407841][T15721] lo speed is unknown, defaulting to 1000 [ 415.428903][T15721] lo speed is unknown, defaulting to 1000 [ 415.458266][T15725] tipc: Enabling of bearer rejected, already enabled [ 415.487868][T15721] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 415.560817][T15721] lo speed is unknown, defaulting to 1000 [ 415.569982][T15729] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 415.579226][T15729] tipc: Resetting bearer [ 415.621751][T15721] lo speed is unknown, defaulting to 1000 [ 415.628846][T15725] tipc: Resetting bearer [ 415.639623][T15721] lo speed is unknown, defaulting to 1000 [ 415.669898][T15721] lo speed is unknown, defaulting to 1000 [ 415.707999][T15721] lo speed is unknown, defaulting to 1000 [ 415.942742][T15741] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2457'. [ 416.042222][T15751] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.137888][T15751] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.315188][T15751] batadv0 (unregistering): left promiscuous mode [ 416.378175][T15746] wlan1 speed is unknown, defaulting to 1000 [ 416.388337][T15746] lo speed is unknown, defaulting to 1000 [ 416.506759][T15768] 8021q: VLANs not supported on wg0 [ 416.568097][T15767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2462'. [ 416.856282][T15785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.939629][T15785] veth1: entered promiscuous mode [ 416.955924][T15785] veth1: entered allmulticast mode [ 417.247554][T15800] netlink: 336 bytes leftover after parsing attributes in process `syz.0.2473'. [ 417.258750][T15800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2473'. [ 417.489393][T15809] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 417.522742][T15809] bond10 (unregistering): Released all slaves [ 417.598147][T15815] xt_hashlimit: size too large, truncated to 1048576 [ 417.799226][T15828] sock: sock_set_timeout: `syz.4.2481' (pid 15828) tries to set negative timeout [ 418.039651][T15838] bond10: Removing last ns target with arp_interval on [ 418.166038][T15841] syzkaller0: entered promiscuous mode [ 418.172332][T15841] syzkaller0: entered allmulticast mode [ 418.521224][T15856] __nla_validate_parse: 2 callbacks suppressed [ 418.521247][T15856] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2491'. [ 418.582966][T15862] bridge9: entered allmulticast mode [ 418.849335][T15876] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.2496'. [ 419.177976][T15891] geneve2: entered promiscuous mode [ 419.196062][T15891] geneve2: entered allmulticast mode [ 419.321056][T15906] sit0: entered promiscuous mode [ 419.583140][T15916] wlan1 speed is unknown, defaulting to 1000 [ 419.615909][T15920] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 419.643779][T15916] lo speed is unknown, defaulting to 1000 [ 419.649232][T15924] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2509'. [ 419.662024][T15920] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 419.680859][T15924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2509'. [ 419.712183][T15924] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2509'. [ 420.008895][T15945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2513'. [ 420.018715][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2513'. [ 420.464820][T15980] netlink: 'syz.1.2521': attribute type 16 has an invalid length. [ 420.480196][T15978] netlink: 'syz.3.2522': attribute type 1 has an invalid length. [ 420.495476][T15979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2521'. [ 420.515325][T15980] netlink: 'syz.1.2521': attribute type 17 has an invalid length. [ 420.585663][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2523'. [ 420.588303][T15985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2522'. [ 420.664994][T15980] bridge0: left promiscuous mode [ 420.678340][T15980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.688302][T15980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.762182][T15987] xt_TPROXY: Can be used only with -p tcp or -p udp [ 420.902963][T15999] netlink: 'syz.1.2526': attribute type 4 has an invalid length. [ 421.132083][T16016] sctp: [Deprecated]: syz.1.2531 (pid 16016) Use of int in max_burst socket option deprecated. [ 421.132083][T16016] Use struct sctp_assoc_value instead [ 421.323300][T16032] netlink: 'syz.1.2533': attribute type 1 has an invalid length. [ 421.410166][T16032] 8021q: adding VLAN 0 to HW filter on device bond9 [ 421.511123][T16039] veth13: entered promiscuous mode [ 421.528624][T16039] bond9: (slave veth13): Enslaving as an active interface with an up link [ 421.795455][T16071] netlink: 'syz.2.2543': attribute type 16 has an invalid length. [ 421.814072][T16071] netlink: 'syz.2.2543': attribute type 3 has an invalid length. [ 421.864486][T16075] tipc: Resetting bearer [ 421.879354][T16074] tipc: Resetting bearer [ 422.008534][T16081] 8021q: VLANs not supported on pimreg [ 422.205252][T16085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 422.232390][T16086] openvswitch: netlink: Message has 6 unknown bytes. [ 422.478827][T16106] syzkaller1: entered promiscuous mode [ 422.484385][T16106] syzkaller1: entered allmulticast mode [ 422.640286][T12548] tipc: Resetting bearer [ 422.962763][T16131] xt_ecn: cannot match TCP bits for non-tcp packets [ 423.462173][T16156] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20001 [ 423.470847][T16151] wlan1 speed is unknown, defaulting to 1000 [ 423.479374][T16151] lo speed is unknown, defaulting to 1000 [ 423.803097][T16181] netlink: 'syz.3.2577': attribute type 16 has an invalid length. [ 423.812517][T16181] netlink: 'syz.3.2577': attribute type 3 has an invalid length. [ 423.839240][T16181] __nla_validate_parse: 14 callbacks suppressed [ 423.839260][T16181] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.2577'. [ 423.858734][T16187] syzkaller0: MTU too low for tipc bearer [ 423.869306][T16187] tipc: Enabling of bearer rejected, failed to enable media [ 423.909835][T16186] ÿÿÿÿÿÿ: renamed from dummy0 [ 423.974688][T16195] netlink: 'syz.1.2579': attribute type 1 has an invalid length. [ 423.983015][T16195] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2579'. [ 423.992602][T16195] netlink: 658 bytes leftover after parsing attributes in process `syz.1.2579'. [ 424.016616][T16195] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2579'. [ 424.061596][T16202] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 424.072321][T16202] tipc: Resetting bearer [ 424.093200][T16199] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 424.189756][T16203] wlan1 speed is unknown, defaulting to 1000 [ 424.222969][T16207] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 424.233363][T16203] lo speed is unknown, defaulting to 1000 [ 424.324821][T16206] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 424.348468][T16211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2586'. [ 424.390766][T16213] xt_TCPMSS: Only works on TCP SYN packets [ 424.475435][ T5841] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 424.482526][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 424.573212][T16222] tc_dump_action: action bad kind [ 424.639200][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'. [ 424.993037][T16247] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2599'. [ 425.003596][T16245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2597'. [ 425.070595][T16251] tipc: Resetting bearer [ 425.143850][T11593] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.161689][T11593] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.170169][T16245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2597'. [ 425.225968][T11593] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.234908][T11593] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.404808][T16274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2605'. [ 425.516784][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 425.576074][T16283] validate_nla: 2 callbacks suppressed [ 425.576095][T16283] netlink: 'syz.0.2607': attribute type 4 has an invalid length. [ 425.711373][T16279] netlink: 'syz.2.2608': attribute type 1 has an invalid length. [ 426.511751][T16330] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 426.619824][T16332] vlan0: entered promiscuous mode [ 426.638661][T16332] batadv0: entered promiscuous mode [ 426.695886][T16337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.735302][T16344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.012296][T16363] xt_TCPMSS: Only works on TCP SYN packets [ 427.022968][T16363] netlink: 'syz.0.2635': attribute type 21 has an invalid length. [ 427.048241][T16365] sctp: [Deprecated]: syz.4.2634 (pid 16365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 427.048241][T16365] Use struct sctp_sack_info instead [ 427.085648][T16365] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.204662][T16373] netlink: 'syz.4.2637': attribute type 9 has an invalid length. [ 427.236043][T16373] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 427.253995][T16373] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 427.272374][T16373] tipc: Resetting bearer [ 427.299642][T16370] wlan1 speed is unknown, defaulting to 1000 [ 427.309071][T16370] lo speed is unknown, defaulting to 1000 [ 427.609510][T16387] x_tables: duplicate underflow at hook 2 [ 427.836104][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 427.842444][ T5841] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 428.204621][T16408] sctp: [Deprecated]: syz.4.2646 (pid 16408) Use of int in max_burst socket option. [ 428.204621][T16408] Use struct sctp_assoc_value instead [ 429.017920][T16462] __nla_validate_parse: 15 callbacks suppressed [ 429.017943][T16462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2662'. [ 429.118893][T16473] netlink: 'syz.4.2663': attribute type 3 has an invalid length. [ 429.138175][T16473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.259175][T16477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2666'. [ 429.361805][T16489] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2665'. [ 429.379456][T16489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2665'. [ 429.603081][T16498] wlan1 speed is unknown, defaulting to 1000 [ 429.610107][T16503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2672'. [ 429.644645][T16498] lo speed is unknown, defaulting to 1000 [ 429.666105][T16503] bridge5: entered promiscuous mode [ 429.674048][T16503] macsec4: entered promiscuous mode [ 429.792714][T16514] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2674'. [ 430.309341][T16541] netlink: 'syz.0.2682': attribute type 10 has an invalid length. [ 430.319334][T16541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2682'. [ 430.409488][T16549] syzkaller0: entered promiscuous mode [ 430.421876][T16549] syzkaller0: entered allmulticast mode [ 430.430654][T16549] 0: reclassify loop, rule prio 0, protocol 800 [ 430.810572][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 430.855375][T16526] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 430.960038][T16558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2684'. [ 430.986174][T16558] veth7: entered promiscuous mode [ 431.076390][T16562] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2686'. [ 431.467110][T16585] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 431.647543][T16589] netlink: 'syz.1.2696': attribute type 7 has an invalid length. [ 431.655888][T16589] netlink: 'syz.1.2696': attribute type 5 has an invalid length. [ 431.663643][T16589] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2696'. [ 431.913570][T16596] wlan1 speed is unknown, defaulting to 1000 [ 431.948534][T16596] lo speed is unknown, defaulting to 1000 [ 432.075287][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 433.306974][T16541] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 433.760386][T16636] netlink: 'syz.2.2705': attribute type 11 has an invalid length. [ 433.907851][T16643] tun1: tun_chr_ioctl cmd 46850 [ 434.046857][T16658] __nla_validate_parse: 1 callbacks suppressed [ 434.046879][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2712'. [ 434.157423][T16661] bond11: option lacp_rate: invalid value (128) [ 434.166801][T16661] bond11 (unregistering): Released all slaves [ 434.329231][T16683] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2714'. [ 434.398774][T16671] 8021q: adding VLAN 0 to HW filter on device bond10 [ 434.410919][T16687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2719'. [ 434.463175][T16671] bond10: entered promiscuous mode [ 434.503639][T16671] bond0: (slave bond10): Enslaving as an active interface with an up link [ 434.590820][T16683] bond0 (unregistering): left promiscuous mode [ 434.599071][T16683] bond_slave_0: left promiscuous mode [ 434.606694][T16683] bond_slave_1: left promiscuous mode [ 434.612557][T16683] bond10: left promiscuous mode [ 434.621650][T16683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.637626][T16683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.649595][T16683] bond0 (unregistering): (slave bond10): Releasing backup interface [ 434.666367][T16683] bond0 (unregistering): Released all slaves [ 434.928729][T16702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2720'. [ 434.983329][T16709] netlink: 'syz.2.2726': attribute type 3 has an invalid length. [ 435.147996][T16718] netlink: 'syz.2.2729': attribute type 39 has an invalid length. [ 435.165806][T16719] netlink: 'syz.3.2728': attribute type 4 has an invalid length. [ 435.217817][T16719] netlink: 'syz.3.2728': attribute type 4 has an invalid length. [ 435.229170][T16722] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2729'. [ 435.240686][T13630] lo speed is unknown, defaulting to 1000 [ 435.247707][T13630] syz2: Port: 1 Link ACTIVE [ 435.259376][T16722] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2729'. [ 435.285442][T16722] netlink: 'syz.2.2729': attribute type 5 has an invalid length. [ 435.314564][T16722] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2729'. [ 435.354395][T16723] vlan1: entered allmulticast mode [ 435.469620][T16725] batman_adv: batadv0: Interface deactivated: dummy0 [ 435.504610][T16725] tipc: Resetting bearer [ 435.596557][ T8824] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.605411][ T8824] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.615003][T13643] lo speed is unknown, defaulting to 1000 [ 435.621175][T13643] syz2: Port: 1 Link DOWN [ 435.630239][T16735] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2732'. [ 435.711875][T16732] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 435.751288][T16732] bond10 (unregistering): Released all slaves [ 435.802449][T16745] netlink: 'syz.2.2734': attribute type 33 has an invalid length. [ 435.816770][T16745] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2734'. [ 435.904774][T16749] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2736'. [ 435.946431][ T8824] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.955430][ T8824] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 435.968627][T16738] bond0: Caught tx_queue_len zero misconfig [ 436.026852][ T8824] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.045341][ T8824] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 436.067177][ T8824] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.095636][ T8824] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 436.706564][T16770] wlan1 speed is unknown, defaulting to 1000 [ 436.740187][T16772] 8021q: adding VLAN 0 to HW filter on device bond11 [ 436.748079][T16770] lo speed is unknown, defaulting to 1000 [ 436.755474][T16772] netlink: 'syz.4.2743': attribute type 4 has an invalid length. [ 437.064419][T16784] bond5: option broadcast_neighbor: invalid value (30) [ 437.076019][T16784] bond5 (unregistering): Released all slaves [ 437.186405][T16791] pimreg: left allmulticast mode [ 437.818085][T16836] wlan1 speed is unknown, defaulting to 1000 [ 437.826265][T16836] lo speed is unknown, defaulting to 1000 [ 437.996389][T12548] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.009070][T12548] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.209648][T12548] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.275218][T12548] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.549623][T16862] macvlan2: entered allmulticast mode [ 438.593753][T16863] macvlan2: entered allmulticast mode [ 439.025646][T16894] vlan2: entered promiscuous mode [ 439.280576][T16905] bond5: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 439.293488][T16905] bond5 (unregistering): Released all slaves [ 439.318503][T16913] netlink: 'syz.1.2779': attribute type 1 has an invalid length. [ 439.328339][T16901] __nla_validate_parse: 8 callbacks suppressed [ 439.328361][T16901] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2779'. [ 439.460081][T16919] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2782'. [ 439.570200][T16922] xt_ecn: cannot match TCP bits for non-tcp packets [ 440.088182][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.099418][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 440.190352][T16969] netlink: 'syz.1.2798': attribute type 4 has an invalid length. [ 440.194099][T16965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2799'. [ 440.200804][T16969] netlink: 'syz.1.2798': attribute type 8 has an invalid length. [ 440.216952][T16969] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2798'. [ 440.397891][T16978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2801'. [ 440.407020][T16978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2801'. [ 440.596162][T16997] netlink: 'syz.0.2806': attribute type 2 has an invalid length. [ 440.654933][T17002] netlink: 'syz.4.2808': attribute type 6 has an invalid length. [ 440.664676][T17004] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2807'. [ 440.700055][T17003] netlink: 'syz.4.2808': attribute type 6 has an invalid length. [ 440.837185][T17018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2811'. [ 441.021246][T17030] syzkaller0: entered promiscuous mode [ 441.027369][T17030] syzkaller0: entered allmulticast mode [ 441.118440][T17039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2816'. [ 441.133817][T17038] tipc: Resetting bearer [ 441.277597][T17042] bond9: entered promiscuous mode [ 441.283427][T17042] 8021q: adding VLAN 0 to HW filter on device bond9 [ 441.450702][T17058] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2821'. [ 441.622754][T17061] wlan1 speed is unknown, defaulting to 1000 [ 441.637611][T17061] lo speed is unknown, defaulting to 1000 [ 442.759270][T17107] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.829868][T17107] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.937680][T17107] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.053395][T17107] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.268448][T11593] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.295566][T11593] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.303903][T11593] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.313075][T11593] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.514294][T17124] bond11: option mode: unable to set because the bond device is up [ 443.619464][T17135] netlink: 'syz.3.2842': attribute type 1 has an invalid length. [ 443.935895][T17147] tipc: Resetting bearer [ 443.941954][T17153] sctp: [Deprecated]: syz.2.2848 (pid 17153) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.941954][T17153] Use struct sctp_sack_info instead [ 444.056587][T13630] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 444.109290][T17150] 8021q: adding VLAN 0 to HW filter on device bond11 [ 444.148766][T17154] macvlan1: entered allmulticast mode [ 444.169106][T17154] veth0_to_bond: entered allmulticast mode [ 444.197352][T17154] bond11: (slave macvlan1): Enslaving as an active interface with an up link [ 444.285976][ T1011] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 444.955514][ T24] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 445.360070][ T6621] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 445.455953][ T6621] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 445.612952][T17215] __nla_validate_parse: 6 callbacks suppressed [ 445.612981][T17215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2855'. [ 445.673166][T17215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2855'. [ 445.715270][T17215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2855'. [ 445.730482][T17215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2855'. [ 445.743776][T17215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2855'. [ 445.754858][T17215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2855'. [ 445.766949][T17215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2855'. [ 445.776310][T17215] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2855'. [ 445.790475][T17227] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2861'. [ 445.799760][T17227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2861'. [ 445.915088][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 445.923308][ C1] lec:lec_tx_timeout: lec0 [ 445.935934][T13643] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 445.978200][T17234] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 446.016516][ T6621] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.029825][ T6621] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.059670][ T6621] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.071693][ T6621] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.137356][T17239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.330176][T17250] 8021q: VLANs not supported on ip6_vti0 [ 446.751803][ T5144] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 446.764559][ T5144] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 446.776176][ T5144] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 446.784951][ T5144] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 446.793347][ T5144] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 446.907845][T17269] wlan1 speed is unknown, defaulting to 1000 [ 446.916463][T17269] lo speed is unknown, defaulting to 1000 [ 447.185686][T17269] chnl_net:caif_netlink_parms(): no params data found [ 447.292824][T17280] 8021q: VLANs not supported on ip_vti0 [ 447.405683][ T5824] .`: (slave syz_tun): Releasing backup interface [ 447.698510][T17269] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.725827][T17269] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.743444][T17269] bridge_slave_0: entered allmulticast mode [ 447.757185][T17269] bridge_slave_0: entered promiscuous mode [ 447.773840][T17269] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.783421][T17269] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.791528][T17269] bridge_slave_1: entered allmulticast mode [ 447.800353][T17269] bridge_slave_1: entered promiscuous mode [ 447.926917][T17269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.978567][T17269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.081042][T17269] team0: Port device team_slave_0 added [ 448.094886][T17269] team0: Port device team_slave_1 added [ 448.157224][T17269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.171249][T17269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.198940][T17269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.233642][T17269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.241482][T17269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.268153][T17269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.400060][T17269] hsr_slave_0: entered promiscuous mode [ 448.408093][T17269] hsr_slave_1: entered promiscuous mode [ 448.451856][ T6621] vlan4: left promiscuous mode [ 448.457178][ T6621] bridge_slave_0: left promiscuous mode [ 448.464888][ T6621] bridge0: port 3(vlan4) entered disabled state [ 448.790057][ T6621] bond1 (unregistering): (slave bridge2): Releasing active interface [ 448.875335][ T5144] Bluetooth: hci5: command tx timeout [ 449.041329][ T6621] .` (unregistering): Released all slaves [ 449.051817][ T6621] bond1 (unregistering): Released all slaves [ 449.067044][ T6621] bond2 (unregistering): Released all slaves [ 449.096877][ T6621] bond0 (unregistering): left allmulticast mode [ 449.104199][ T6621] team0: Port device bond0 removed [ 449.110841][ T6621] bond0 (unregistering): Released all slaves [ 449.126453][ T6621] bond3 (unregistering): Released all slaves [ 449.140861][ T6621] bond4 (unregistering): Released all slaves [ 449.159390][ T6621] bond5 (unregistering): Released all slaves [ 449.179771][ T6621] bond6 (unregistering): Released all slaves [ 449.194824][ T6621] bond7 (unregistering): Released all slaves [ 449.216821][ T6621] bond8 (unregistering): Released all slaves [ 449.231690][ T6621] bond9 (unregistering): Released all slaves [ 449.247990][ T6621] bond10 (unregistering): Released all slaves [ 449.268311][ T6621] bond11 (unregistering): (slave macvlan1): Releasing backup interface [ 449.279333][ T6621] veth0_to_bond: left allmulticast mode [ 449.289236][ T6621] bond11 (unregistering): Released all slaves [ 449.473502][ T6621] !: left promiscuous mode [ 449.512996][T17262] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 449.758120][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 449.811866][ T6621] tipc: Disabling bearer [ 449.847693][ T6621] tipc: Left network mode [ 450.108422][T17350] bpq0: left allmulticast mode [ 450.893425][T17381] tipc: Enabling of bearer rejected, already enabled [ 450.955618][ T5144] Bluetooth: hci5: command tx timeout [ 451.141027][T17397] netlink: 'syz.4.2890': attribute type 1 has an invalid length. [ 451.149145][T17397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.268822][T17395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.460421][T17404] syzkaller0: create flow: hash 801473226 index 1 [ 451.490003][ T1011] syzkaller0: tun_net_xmit 76 [ 451.500764][ T1011] syzkaller0: tun_net_xmit 48 [ 451.516985][ T29] syzkaller0: tun_net_xmit 76 [ 451.537278][T17417] __nla_validate_parse: 232 callbacks suppressed [ 451.537301][T17417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2894'. [ 451.607636][T17420] netlink: 'syz.1.2893': attribute type 4 has an invalid length. [ 451.704997][T17423] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2896'. [ 451.763391][T17401] syzkaller0: delete flow: hash 801473226 index 1 [ 451.791816][T17404] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2891'. [ 453.045499][ T5144] Bluetooth: hci5: command tx timeout [ 453.703866][T17269] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 453.783916][T17269] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 453.804485][T17438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2900'. [ 453.827329][T17269] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 453.840339][T17439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2900'. [ 453.883397][ T6621] hsr_slave_0: left promiscuous mode [ 453.898951][ T6621] hsr_slave_1: left promiscuous mode [ 453.918735][ T6621] batman_adv: batadv0: Removing interface: dummy0 [ 454.054788][T17459] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2903'. [ 454.074398][ T6621] veth5 (unregistering): left allmulticast mode [ 454.107155][ T6621] team0 (unregistering): Port device veth5 removed [ 454.159071][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2904'. [ 454.439956][T17468] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2904'. [ 454.700436][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2907'. [ 454.719887][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2907'. [ 454.754298][T17269] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 454.954909][T17492] netlink: 'syz.2.2908': attribute type 1 has an invalid length. [ 455.000324][T17492] vlan0: left promiscuous mode [ 455.015951][T17492] ip6gre2: left promiscuous mode [ 455.038242][T17492] macvtap1: left promiscuous mode [ 455.056285][T17492] bond4: left promiscuous mode [ 455.061419][T17492] bridge9: left promiscuous mode [ 455.095774][T17492] geneve2: left promiscuous mode [ 455.104027][T17492] veth7: left promiscuous mode [ 455.115377][ T5144] Bluetooth: hci5: command tx timeout [ 455.381659][T17269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.458910][T17269] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.500389][ T8824] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.507632][ T8824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.549627][ T8824] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.556909][ T8824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.671269][ T6621] IPVS: stop unused estimator thread 0... [ 456.203136][T17269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.357368][T17269] veth0_vlan: entered promiscuous mode [ 456.412765][T17269] veth1_vlan: entered promiscuous mode [ 456.468662][T17269] veth0_macvtap: entered promiscuous mode [ 456.510719][T17269] veth1_macvtap: entered promiscuous mode [ 456.594985][T17269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.643968][T17269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.688238][ T1011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.706510][ T1011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.803715][ T1011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.818632][ T1011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.127439][ T8824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.144324][ T8824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.158366][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.166604][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.809916][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 457.825329][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 457.834670][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 457.846625][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 457.854773][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 457.956695][T17616] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 457.981398][T17616] bond1: (slave lo): Enslaving as an active interface with an up link [ 457.994117][T17616] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 458.009907][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 458.282535][T17628] __nla_validate_parse: 1 callbacks suppressed [ 458.282557][T17628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2939'. [ 458.549785][T17640] netlink: 199896 bytes leftover after parsing attributes in process `syz.1.2940'. [ 458.755101][T17642] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.850229][ T1011] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.910751][T17653] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1280) ! [ 459.001124][ T1011] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.034507][T17620] chnl_net:caif_netlink_parms(): no params data found [ 459.069235][T17662] netlink: 'syz.2.2946': attribute type 27 has an invalid length. [ 459.091098][ T1011] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.134893][T17662] bridge0: left allmulticast mode [ 459.161259][T17662] gre1: left allmulticast mode [ 459.172818][T17662] macvtap1: left allmulticast mode [ 459.181367][T17662] geneve2: left allmulticast mode [ 459.188196][T17666] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 459.288224][ T1011] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.329904][T17674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2950'. [ 459.528299][T17683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2952'. [ 459.603743][T17620] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.612013][T17620] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.635554][T17620] bridge_slave_0: entered allmulticast mode [ 459.643799][T17620] bridge_slave_0: entered promiscuous mode [ 459.708629][T17620] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.724134][T17620] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.738152][T17695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2954'. [ 459.750940][T17620] bridge_slave_1: entered allmulticast mode [ 459.787824][T17620] bridge_slave_1: entered promiscuous mode [ 459.896530][T17694] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.989221][T17694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.003588][T17694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.007308][ T5841] Bluetooth: hci0: command tx timeout [ 460.202869][T17690] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2954'. [ 460.236139][T12548] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.245920][T12548] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.276510][T17620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.304374][T17620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.378917][T12548] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.409181][T12548] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.596915][T17620] team0: Port device team_slave_0 added [ 460.614429][T17620] team0: Port device team_slave_1 added [ 460.622415][ T1011] bridge_slave_0: left allmulticast mode [ 460.637825][ T1011] bridge_slave_0: left promiscuous mode [ 460.643939][ T1011] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.682111][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2963'. [ 460.744649][T17733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2963'. [ 460.954536][T17741] x_tables: duplicate underflow at hook 3 [ 461.670257][ T1011] bond0 (unregistering): left promiscuous mode [ 461.676819][ T1011] bond2 (unregistering): left promiscuous mode [ 461.683036][ T1011] bridge_slave_1: left promiscuous mode [ 461.695460][ T1011] bond0 (unregistering): (slave bond2): Releasing backup interface [ 461.708268][ T1011] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 461.718321][ T1011] bond0 (unregistering): Released all slaves [ 461.734692][ T1011] bond1 (unregistering): (slave veth7): Releasing active interface [ 461.743661][ T1011] bond1 (unregistering): Released all slaves [ 461.762490][ T1011] bond2 (unregistering): Released all slaves [ 461.780014][ T1011] bond3 (unregistering): Released all slaves [ 461.794546][ T1011] bond4 (unregistering): Released all slaves [ 461.814587][ T1011] bond5 (unregistering): Released all slaves [ 461.829540][ T1011] bond6 (unregistering): Released all slaves [ 461.844302][ T1011] bond7 (unregistering): Released all slaves [ 461.866175][ T1011] bond8 (unregistering): Released all slaves [ 461.880609][ T1011] bond9 (unregistering): Released all slaves [ 461.895285][ T1011] bond10 (unregistering): Released all slaves [ 461.911014][ T1011] bond11 (unregistering): Released all slaves [ 461.953827][T17727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2963'. [ 462.008896][T17734] batman_adv: batadv0: Adding interface: macvlan4 [ 462.024021][T17734] batman_adv: batadv0: The MTU of interface macvlan4 is too small (896) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.065907][T17734] batman_adv: batadv0: Not using interface macvlan4 (retrying later): interface not active [ 462.096175][ T5841] Bluetooth: hci0: command tx timeout [ 462.112075][T17741] macvlan2: entered promiscuous mode [ 462.146515][T17741] macvlan2: entered allmulticast mode [ 462.371248][T17743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.416083][T17743] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.461807][T17743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.587921][T17620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.601366][T17620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.661042][T17620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.685746][ T1011] tipc: Disabling bearer [ 462.697391][ T1011] tipc: Disabling bearer [ 462.712730][ T1011] tipc: Left network mode [ 462.729075][T17620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.767983][T17620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.871358][T17620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.039120][T17778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2971'. [ 463.642375][T17797] sctp: [Deprecated]: syz.3.2975 (pid 17797) Use of int in max_burst socket option deprecated. [ 463.642375][T17797] Use struct sctp_assoc_value instead [ 463.680141][T17799] sctp: [Deprecated]: syz.3.2975 (pid 17799) Use of int in max_burst socket option deprecated. [ 463.680141][T17799] Use struct sctp_assoc_value instead [ 463.723613][T17620] hsr_slave_0: entered promiscuous mode [ 463.742925][T17620] hsr_slave_1: entered promiscuous mode [ 463.751299][T17620] debugfs: 'hsr0' already exists in 'hsr' [ 463.758680][T17620] Cannot create hsr debugfs directory [ 463.883467][T17803] __nla_validate_parse: 1 callbacks suppressed [ 463.883488][T17803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2976'. [ 463.975588][T17802] tipc: Enabling of bearer rejected, failed to enable media [ 464.157237][ T5841] Bluetooth: hci0: command tx timeout [ 464.419141][T17831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2982'. [ 464.458214][ T1011] hsr_slave_0: left promiscuous mode [ 464.568231][T17842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2982'. [ 464.588319][T17844] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2984'. [ 464.961475][ T1011] ` (unregistering): Port device team_slave_1 removed [ 464.981461][ T1011] ` (unregistering): Port device team_slave_0 removed [ 465.139025][T17831] 8021q: adding VLAN 0 to HW filter on device bond10 [ 465.165766][T17837] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 465.177678][T17837] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 465.211601][T17842] bond10 (unregistering): (slave batadv1): Releasing backup interface [ 465.237762][T17842] bond10 (unregistering): Released all slaves [ 465.456232][T17868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2987'. [ 465.556278][T17866] syzkaller0: entered allmulticast mode [ 465.570631][T17866] syzkaller0 (unregistering): left allmulticast mode [ 465.619009][T17870] Bluetooth: MGMT ver 1.23 [ 465.777101][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2989'. [ 465.810556][T17878] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2989'. [ 465.843219][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2989'. [ 465.886294][T17878] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2989'. [ 465.946529][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2989'. [ 466.049464][T17883] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 466.072895][ T1011] IPVS: stop unused estimator thread 0... [ 466.238266][ T5841] Bluetooth: hci0: command tx timeout [ 466.244120][T17902] vlan2: entered allmulticast mode [ 466.266613][T17902] veth0_to_bond: entered allmulticast mode [ 466.574223][T17923] netlink: 'syz.3.2999': attribute type 10 has an invalid length. [ 466.687022][T17923] syzkaller1: entered promiscuous mode [ 466.697355][T17923] syzkaller1: entered allmulticast mode [ 466.979451][T17935] netlink: 'syz.0.3002': attribute type 1 has an invalid length. [ 466.987509][T17935] netlink: 'syz.0.3002': attribute type 4 has an invalid length. [ 466.997919][T17935] netlink: 'syz.0.3002': attribute type 1 has an invalid length. [ 467.006217][T17935] netlink: 'syz.0.3002': attribute type 4 has an invalid length. [ 467.192261][T17620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 467.237395][T17620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 467.278437][T17620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 467.328806][T17620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 467.756767][T17620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.781360][T17991] bridge0: port 3(veth0_to_bridge) entered blocking state [ 467.802391][T17991] bridge0: port 3(veth0_to_bridge) entered disabled state [ 467.814776][T17991] veth0_to_bridge: entered allmulticast mode [ 467.830659][T17991] veth0_to_bridge: entered promiscuous mode [ 467.876428][T17620] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.912732][T12548] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.919960][T12548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.003966][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.011258][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.302085][T18011] syzkaller0: entered promiscuous mode [ 468.316848][T18011] syzkaller0: entered allmulticast mode [ 468.999151][T17620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.038830][T18039] __nla_validate_parse: 11 callbacks suppressed [ 469.038851][T18039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3021'. [ 469.067319][T18043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3022'. [ 469.213890][T18039] ip6gretap0 (unregistering): left promiscuous mode [ 469.261226][T18043] macvtap1: entered promiscuous mode [ 469.269768][T18043] veth1_to_hsr: entered promiscuous mode [ 469.290357][T18043] macvtap1: entered allmulticast mode [ 469.300302][T18043] veth1_to_hsr: entered allmulticast mode [ 469.638215][T18067] netlink: 'syz.3.3027': attribute type 15 has an invalid length. [ 469.743685][T18074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3027'. [ 469.810566][T18074] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3027'. [ 469.848750][T18076] sctp: [Deprecated]: syz.0.3029 (pid 18076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.848750][T18076] Use struct sctp_sack_info instead [ 470.253024][T17620] veth0_vlan: entered promiscuous mode [ 470.306820][T17620] veth1_vlan: entered promiscuous mode [ 470.400555][T17620] veth0_macvtap: entered promiscuous mode [ 470.430297][T17620] veth1_macvtap: entered promiscuous mode [ 470.450858][T18099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3033'. [ 470.503908][T17620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.576929][T17620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.620123][T12548] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.655998][T12548] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.664951][T12548] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.750904][T12548] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.891786][T13642] IPVS: starting estimator thread 0... [ 470.900749][ T8034] lec:lec_start_xmit: lec0:No lecd attached [ 471.035319][T18127] IPVS: using max 27 ests per chain, 64800 per kthread [ 471.132909][T18126] bridge0: entered promiscuous mode [ 471.332235][T18152] netlink: 'syz.1.3040': attribute type 4 has an invalid length. [ 471.397764][T18154] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.405843][T18154] IPv6: NLM_F_CREATE should be set when creating new route [ 471.450183][T18147] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.458259][T12548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.492266][T12548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.638227][T12548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.659319][T18165] nft_compat: unsupported protocol 5 [ 471.679182][T12548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.164243][T18184] xt_CT: You must specify a L4 protocol and not use inversions on it [ 472.204481][T18184] netlink: 'syz.4.3045': attribute type 8 has an invalid length. [ 472.453979][T18196] netlink: 'syz.3.3048': attribute type 5 has an invalid length. [ 472.502868][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3048'. [ 472.673929][T18204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3050'. [ 472.684271][T18205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3050'. [ 472.698453][T18206] netlink: 'syz.4.3049': attribute type 2 has an invalid length. [ 472.805888][T18206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3049'. [ 473.137645][T18230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3056'. [ 473.426682][T18239] netlink: 'syz.4.3057': attribute type 3 has an invalid length. [ 473.436586][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 473.448585][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 473.457259][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 473.475246][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 473.484572][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 473.686807][ T5826] syz_tun (unregistering): left allmulticast mode [ 474.183640][T18238] chnl_net:caif_netlink_parms(): no params data found [ 474.381562][T18238] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.392222][T18238] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.400062][T18238] bridge_slave_0: entered allmulticast mode [ 474.408278][T18238] bridge_slave_0: entered promiscuous mode [ 474.698228][T18238] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.709906][T18238] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.735405][T18238] bridge_slave_1: entered allmulticast mode [ 474.762116][T18238] bridge_slave_1: entered promiscuous mode [ 474.801334][T18285] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3066'. [ 475.338088][T18238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.369144][T18238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.511924][T18238] team0: Port device team_slave_0 added [ 475.519689][ T5144] Bluetooth: hci4: command tx timeout [ 475.553215][T18238] team0: Port device team_slave_1 added [ 475.696496][T18238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.703668][T18238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.730781][T18238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.786062][T18238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.793753][T18238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.828197][T18238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.915470][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 475.923550][ C1] lec:lec_tx_timeout: lec0 [ 475.984414][T18238] hsr_slave_0: entered promiscuous mode [ 475.991837][T18238] hsr_slave_1: entered promiscuous mode [ 475.999312][T18238] debugfs: 'hsr0' already exists in 'hsr' [ 476.005780][T18238] Cannot create hsr debugfs directory [ 476.011598][T18324] tipc: Enabling of bearer rejected, failed to enable media [ 476.183989][T18331] netlink: 'syz.4.3076': attribute type 1 has an invalid length. [ 476.217317][T18333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3077'. [ 476.256655][T18336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3076'. [ 476.492605][T18343] lo speed is unknown, defaulting to 1000 [ 476.503397][T18331] macvlan2: entered promiscuous mode [ 476.511315][T18331] macvlan2: entered allmulticast mode [ 476.559797][T18343] lo speed is unknown, defaulting to 1000 [ 476.582237][T18353] netlink: 'syz.2.3081': attribute type 2 has an invalid length. [ 476.598990][T18343] lo speed is unknown, defaulting to 1000 [ 476.803339][T18353] !: entered promiscuous mode [ 477.115497][T18373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3085'. [ 477.127126][T18343] infiniband syz0: set active [ 477.135765][T18343] infiniband syz0: added lo [ 477.140860][T13630] lo speed is unknown, defaulting to 1000 [ 477.337999][T18343] RDS/IB: syz0: added [ 477.379710][T18343] smc: adding ib device syz0 with port count 1 [ 477.397009][T18343] smc: ib device syz0 port 1 has no pnetid [ 477.536427][ T24] lo speed is unknown, defaulting to 1000 [ 477.550405][T18390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3090'. [ 477.575843][T18343] lo speed is unknown, defaulting to 1000 [ 477.597651][ T5144] Bluetooth: hci4: command tx timeout [ 477.780533][T18393] netlink: 'syz.2.3088': attribute type 10 has an invalid length. [ 477.876957][T18407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3093'. [ 477.889212][T18407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3093'. [ 477.902416][T18238] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 477.912690][T18407] netlink: 'syz.4.3093': attribute type 1 has an invalid length. [ 477.932442][T18238] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 477.982761][T18238] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 478.027908][T18238] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 478.273155][T18343] lo speed is unknown, defaulting to 1000 [ 478.326643][T18424] syzkaller0: entered promiscuous mode [ 478.358946][T18424] syzkaller0: entered allmulticast mode [ 478.366519][T18427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3099'. [ 478.536194][T18238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.583171][T18238] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.610620][T11593] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.617896][T11593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.646744][T18439] netlink: 'syz.2.3102': attribute type 3 has an invalid length. [ 478.660694][T18440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3102'. [ 478.680264][T11593] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.687564][T11593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.698904][T18440] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3102'. [ 478.743414][T18442] unsupported nlmsg_type 40 [ 478.900505][T18343] lo speed is unknown, defaulting to 1000 [ 479.116894][T18451] netlink: 'syz.2.3104': attribute type 10 has an invalid length. [ 479.145520][T18451] dummy0: left promiscuous mode [ 479.162805][T18451] dummy0: entered promiscuous mode [ 479.179643][T18451] bridge0: port 4(dummy0) entered blocking state [ 479.186808][T18451] bridge0: port 4(dummy0) entered disabled state [ 479.193480][T18451] dummy0: entered allmulticast mode [ 479.219545][T18451] dummy0: left allmulticast mode [ 479.233749][T18451] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 479.364571][T18238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.457242][T18343] lo speed is unknown, defaulting to 1000 [ 479.500856][T18238] veth0_vlan: entered promiscuous mode [ 479.548117][T18238] veth1_vlan: entered promiscuous mode [ 479.570619][T18464] vlan2: entered allmulticast mode [ 479.582682][T18464] team0: entered allmulticast mode [ 479.593935][T18464] team_slave_0: entered allmulticast mode [ 479.607780][T18464] team_slave_1: entered allmulticast mode [ 479.675846][ T5144] Bluetooth: hci4: command tx timeout [ 479.696985][T18238] veth0_macvtap: entered promiscuous mode [ 479.717708][T18238] veth1_macvtap: entered promiscuous mode [ 479.749781][T18238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.783477][T18238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.824336][ T6625] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.840530][ T6625] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.892225][ T6625] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.925318][ T6625] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.052445][T18343] lo speed is unknown, defaulting to 1000 [ 480.125864][ T6625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.133750][ T6625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.150504][T18474] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20004 [ 480.189596][T18474] x_tables: duplicate underflow at hook 1 [ 480.255471][T12548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.274695][T12548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.315566][T18476] __nla_validate_parse: 5 callbacks suppressed [ 480.315588][T18476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3113'. [ 480.445747][T18481] macvtap2: entered promiscuous mode [ 480.451128][T18481] macvtap2: entered allmulticast mode [ 480.766188][T18343] lo speed is unknown, defaulting to 1000 [ 480.911010][T18499] syzkaller0: entered promiscuous mode [ 480.953245][T18498] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 481.233383][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 481.244014][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 481.255740][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 481.269740][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 481.278673][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 481.443954][T18509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3120'. [ 481.499985][ T5825] syz_tun (unregistering): left promiscuous mode [ 481.520948][T18343] lo speed is unknown, defaulting to 1000 [ 481.579104][T18512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3121'. [ 481.755239][ T5144] Bluetooth: hci4: command tx timeout [ 481.798866][T18343] lo speed is unknown, defaulting to 1000 [ 481.923401][T18522] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3123'. [ 481.939904][T18522] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3123'. [ 481.949709][T18522] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3123'. [ 482.034623][T18524] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 482.067668][T18343] lo speed is unknown, defaulting to 1000 [ 482.111673][T18524] xt_hashlimit: max too large, truncated to 1048576 [ 482.121876][T18524] xt_bpf: check failed: parse error [ 482.268714][T18527] netlink: 'syz.0.3125': attribute type 8 has an invalid length. [ 482.316081][T18530] netlink: 'syz.0.3125': attribute type 8 has an invalid length. [ 482.506406][T18535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3127'. [ 482.542828][T18535] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3127'. [ 482.557020][T18535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3127'. [ 482.587629][T18537] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3128'. [ 482.793475][T18550] netlink: 'syz.0.3130': attribute type 6 has an invalid length. [ 482.802069][T18550] netlink: 'syz.0.3130': attribute type 5 has an invalid length. [ 482.817665][T11593] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.841910][T11593] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.910752][T18546] syzkaller1: entered promiscuous mode [ 482.926900][T18546] syzkaller1: entered allmulticast mode [ 482.988392][T11593] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.009029][T11593] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.266641][T18562] x_tables: duplicate underflow at hook 1 [ 483.355181][ T5144] Bluetooth: hci2: command tx timeout [ 483.390896][T18504] chnl_net:caif_netlink_parms(): no params data found [ 483.461016][T18568] veth1_vlan: Device is already in use. [ 483.537619][T18573] netlink: 'syz.3.3139': attribute type 1 has an invalid length. [ 483.583814][T18573] Cannot find set identified by id 0 to match [ 483.684025][T18504] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.743379][T18504] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.774147][T18504] bridge_slave_0: entered allmulticast mode [ 483.796812][T18504] bridge_slave_0: entered promiscuous mode [ 483.824039][T18504] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.841380][T18504] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.865988][T18504] bridge_slave_1: entered allmulticast mode [ 483.884283][T18504] bridge_slave_1: entered promiscuous mode [ 483.974606][T18504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.021191][T18504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.151722][T18504] team0: Port device team_slave_0 added [ 484.195465][T18504] team0: Port device team_slave_1 added [ 484.208064][T18599] netlink: 'syz.1.3146': attribute type 1 has an invalid length. [ 484.289320][T18600] gtp0: entered promiscuous mode [ 484.301519][T18600] gtp0: entered allmulticast mode [ 484.368270][T18504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.388017][T18504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.441414][T18504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.566607][T18504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.589029][T18504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.706900][T18504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.893703][T18504] hsr_slave_0: entered promiscuous mode [ 484.911992][T18504] hsr_slave_1: entered promiscuous mode [ 484.926189][T18504] debugfs: 'hsr0' already exists in 'hsr' [ 484.942424][T18504] Cannot create hsr debugfs directory [ 485.354261][T18631] __nla_validate_parse: 14 callbacks suppressed [ 485.354355][T18631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3154'. [ 485.434460][T18631] veth3: entered promiscuous mode [ 485.441615][ T5144] Bluetooth: hci2: command tx timeout [ 485.648297][T18644] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 485.931321][T18659] netlink: 'syz.1.3160': attribute type 10 has an invalid length. [ 486.153546][T18669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3165'. [ 486.213477][T18504] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 486.296646][T18504] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 486.338360][T18504] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 486.433601][T18504] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 486.904552][T18721] gretap0: entered promiscuous mode [ 486.924944][T18504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.960874][T18504] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.980896][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.988247][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.010393][T18721] netlink: 'syz.3.3175': attribute type 1 has an invalid length. [ 487.034676][T18721] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3175'. [ 487.054106][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.061389][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.120622][T18724] lo speed is unknown, defaulting to 1000 [ 487.144805][T18504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.352887][T18736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.516610][ T5144] Bluetooth: hci2: command tx timeout [ 487.591208][T18504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.719682][T18747] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.727683][T18747] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.772072][T18719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.802079][T18504] veth0_vlan: entered promiscuous mode [ 487.820915][T18504] veth1_vlan: entered promiscuous mode [ 487.876170][T18504] veth0_macvtap: entered promiscuous mode [ 487.887340][T18504] veth1_macvtap: entered promiscuous mode [ 487.910890][T18504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.929184][T18504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.944847][ T6621] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.956537][ T6621] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.968815][ T6621] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.978371][ T6621] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.101930][ T6621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.117977][ T6621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.152239][ T8824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.161516][ T8824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.633041][T18772] block nbd3: NBD_DISCONNECT [ 488.648899][T18771] block nbd3: NBD_DISCONNECT [ 488.716335][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 488.732596][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 488.750670][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 488.760181][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 488.768379][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 488.849416][T18774] lo speed is unknown, defaulting to 1000 [ 488.994695][T18782] žÿ: renamed from team_slave_1 (while UP) [ 489.032809][T18782] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 489.069610][T18782] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 489.092775][T18782] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 489.209905][T18785] netlink: 'syz.3.3190': attribute type 16 has an invalid length. [ 489.221322][T18792] ±ÿ: renamed from lo (while UP) [ 489.231354][T18784] netlink: 'syz.3.3190': attribute type 16 has an invalid length. [ 489.240417][T18784] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3190'. [ 489.243644][T18785] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3190'. [ 489.289752][T10654] ================================================================== [ 489.297896][T10654] BUG: KASAN: use-after-free in __mutex_lock+0x812/0x1300 [ 489.305057][T10654] Read of size 8 at addr ffff88807a9740a8 by task khidpd_00065508/10654 [ 489.313429][T10654] [ 489.315810][T10654] CPU: 1 UID: 0 PID: 10654 Comm: khidpd_00065508 Not tainted syzkaller #0 PREEMPT(full) [ 489.315839][T10654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.315864][T10654] Call Trace: [ 489.315872][T10654] [ 489.315882][T10654] dump_stack_lvl+0xe8/0x150 [ 489.315916][T10654] print_report+0xba/0x230 [ 489.315942][T10654] ? __mutex_lock+0x812/0x1300 [ 489.315964][T10654] kasan_report+0x117/0x150 [ 489.315992][T10654] ? __mutex_lock+0x812/0x1300 [ 489.316018][T10654] __mutex_lock+0x812/0x1300 [ 489.316042][T10654] ? __mutex_lock+0x5ac/0x1300 [ 489.316066][T10654] ? l2cap_unregister_user+0x6a/0x1b0 [ 489.316103][T10654] ? __pfx___mutex_lock+0x10/0x10 [ 489.316130][T10654] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 489.316161][T10654] ? lockdep_hardirqs_on+0x7a/0x110 [ 489.316197][T10654] l2cap_unregister_user+0x6a/0x1b0 [ 489.316232][T10654] hidp_session_thread+0x3cb/0x440 [ 489.316258][T10654] ? __pfx_hidp_session_thread+0x10/0x10 [ 489.316281][T10654] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 489.316308][T10654] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 489.316331][T10654] ? __kthread_parkme+0x7a/0x1f0 [ 489.316358][T10654] ? __kthread_parkme+0x19c/0x1f0 [ 489.316389][T10654] kthread+0x388/0x470 [ 489.316408][T10654] ? __pfx_hidp_session_thread+0x10/0x10 [ 489.316428][T10654] ? __pfx_kthread+0x10/0x10 [ 489.316448][T10654] ret_from_fork+0x51e/0xb90 [ 489.316476][T10654] ? __pfx_ret_from_fork+0x10/0x10 [ 489.316503][T10654] ? __switch_to+0xc7d/0x1450 [ 489.316527][T10654] ? __pfx_kthread+0x10/0x10 [ 489.316548][T10654] ret_from_fork_asm+0x1a/0x30 [ 489.316617][T10654] [ 489.316625][T10654] [ 489.479568][T10654] The buggy address belongs to the physical page: [ 489.486031][T10654] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807a975c00 pfn:0x7a974 [ 489.496118][T10654] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 489.503377][T10654] raw: 00fff00000000000 ffffea0000caa908 ffff8880b8640c40 0000000000000000 [ 489.512026][T10654] raw: ffff88807a975c00 0000000000000000 00000000ffffffff 0000000000000000 [ 489.520748][T10654] page dumped because: kasan: bad access detected [ 489.527196][T10654] page_owner tracks the page as freed [ 489.532666][T10654] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 5827, tgid 5827 (syz-executor), ts 85931606190, free_ts 489280401810 [ 489.550941][T10654] post_alloc_hook+0x231/0x280 [ 489.555737][T10654] get_page_from_freelist+0x24dc/0x2580 [ 489.561767][T10654] __alloc_frozen_pages_noprof+0x18d/0x380 [ 489.567889][T10654] alloc_pages_mpol+0x232/0x4a0 [ 489.572803][T10654] ___kmalloc_large_node+0x4e/0x150 [ 489.578655][T10654] __kmalloc_large_node_noprof+0x18/0x90 [ 489.584322][T10654] __kmalloc_noprof+0x3e8/0x760 [ 489.589282][T10654] hci_alloc_dev_priv+0x28/0x2060 [ 489.594349][T10654] vhci_create_device+0x120/0x650 [ 489.599417][T10654] vhci_write+0x3ce/0x4a0 [ 489.603797][T10654] vfs_write+0x61d/0xb90 [ 489.608245][T10654] ksys_write+0x150/0x270 [ 489.612591][T10654] do_syscall_64+0x14d/0xf80 [ 489.617203][T10654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.623123][T10654] page last free pid 5827 tgid 5827 stack trace: [ 489.629478][T10654] __free_frozen_pages+0xc2b/0xdb0 [ 489.634657][T10654] bt_host_release+0x82/0x90 [ 489.639307][T10654] device_release+0x9e/0x1d0 [ 489.644137][T10654] kobject_put+0x228/0x560 [ 489.648574][T10654] vhci_release+0x15a/0x1a0 [ 489.653112][T10654] __fput+0x44f/0xa70 [ 489.657131][T10654] task_work_run+0x1d9/0x270 [ 489.661745][T10654] do_exit+0x70f/0x23c0 [ 489.665917][T10654] do_group_exit+0x21b/0x2d0 [ 489.670526][T10654] get_signal+0x1284/0x1330 [ 489.675062][T10654] arch_do_signal_or_restart+0xbc/0x830 [ 489.680637][T10654] exit_to_user_mode_loop+0x86/0x480 [ 489.685941][T10654] do_syscall_64+0x32d/0xf80 [ 489.690555][T10654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.696475][T10654] [ 489.698840][T10654] Memory state around the buggy address: [ 489.704484][T10654] ffff88807a973f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 489.712584][T10654] ffff88807a974000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 489.720753][T10654] >ffff88807a974080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 489.728941][T10654] ^ [ 489.734331][T10654] ffff88807a974100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 489.742416][T10654] ffff88807a974180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 489.751301][T10654] ================================================================== [ 489.761424][T10654] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 489.768692][T10654] CPU: 1 UID: 0 PID: 10654 Comm: khidpd_00065508 Not tainted syzkaller #0 PREEMPT(full) [ 489.778694][T10654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 489.788949][T10654] Call Trace: [ 489.792247][T10654] [ 489.795193][T10654] vpanic+0x56c/0xa60 [ 489.799207][T10654] ? __pfx_vpanic+0x10/0x10 [ 489.803759][T10654] panic+0xc5/0xd0 [ 489.807533][T10654] ? __pfx_panic+0x10/0x10 [ 489.812016][T10654] ? __mutex_lock+0x812/0x1300 [ 489.816814][T10654] ? __mutex_lock+0x812/0x1300 [ 489.821610][T10654] check_panic_on_warn+0x89/0xb0 [ 489.826694][T10654] ? __mutex_lock+0x812/0x1300 [ 489.831524][T10654] end_report+0x73/0x180 [ 489.835804][T10654] ? __mutex_lock+0x812/0x1300 [ 489.840631][T10654] kasan_report+0x128/0x150 [ 489.845164][T10654] ? __mutex_lock+0x812/0x1300 [ 489.849960][T10654] __mutex_lock+0x812/0x1300 [ 489.854594][T10654] ? __mutex_lock+0x5ac/0x1300 [ 489.859416][T10654] ? l2cap_unregister_user+0x6a/0x1b0 [ 489.865029][T10654] ? __pfx___mutex_lock+0x10/0x10 [ 489.870631][T10654] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 489.876480][T10654] ? lockdep_hardirqs_on+0x7a/0x110 [ 489.882061][T10654] l2cap_unregister_user+0x6a/0x1b0 [ 489.887294][T10654] hidp_session_thread+0x3cb/0x440 [ 489.892466][T10654] ? __pfx_hidp_session_thread+0x10/0x10 [ 489.898217][T10654] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 489.904486][T10654] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 489.910851][T10654] ? __kthread_parkme+0x7a/0x1f0 [ 489.915829][T10654] ? __kthread_parkme+0x19c/0x1f0 [ 489.920918][T10654] kthread+0x388/0x470 [ 489.925030][T10654] ? __pfx_hidp_session_thread+0x10/0x10 [ 489.930699][T10654] ? __pfx_kthread+0x10/0x10 [ 489.935407][T10654] ret_from_fork+0x51e/0xb90 [ 489.940148][T10654] ? __pfx_ret_from_fork+0x10/0x10 [ 489.945324][T10654] ? __switch_to+0xc7d/0x1450 [ 489.950213][T10654] ? __pfx_kthread+0x10/0x10 [ 489.955087][T10654] ret_from_fork_asm+0x1a/0x30 [ 489.959912][T10654] [ 489.963605][T10654] Kernel Offset: disabled [ 489.967945][T10654] Rebooting in 86400 seconds..