last executing test programs: 31.824748133s ago: executing program 3 (id=2003): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x17, 0x4, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x8f}, @window={0x3, 0x3, 0xac}, @timestamp={0x8, 0xa, 0x200, 0xd}, @fastopen={0x22, 0x5, "54df94"}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x80000000, 0x6}, @mss={0x2, 0x0, 0x7}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}]}}}}}}}, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfffa, 0xfff3}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xffffffff, 0xffffffff, 0x0, 0xffffffff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000000c000580040001"], 0x44}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000000)={0xd833, 0x200, 0x0, 0x7, r9}, &(0x7f0000000040)=0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r10, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x1dc, 0x17, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x194, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'bond0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x810}, 0x4004000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x13}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x10) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x13}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x10) r11 = socket$inet6_sctp(0xa, 0x6, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000580)={r9, 0x7, 0x4}, &(0x7f00000005c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000580)={r9, 0x7, 0x4}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000680)={r12, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x3, 0x3ff, 0x43, 0x4, 0x2, 0x40, 0x9}, 0x9c) 31.511751381s ago: executing program 3 (id=2008): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4800) 31.449843881s ago: executing program 3 (id=2009): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xca, &(0x7f0000000640)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @local, {[@end, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback}, {}, {@local}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0xb0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendto$inet6(r3, 0x0, 0x0, 0x10, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000905000000000000000008004300ff030000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce28715f2d28"], 0xe0}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x60, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "a9cbf3007a3b2495aed6638e9a176fba071a0c68"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x4) 31.192265428s ago: executing program 3 (id=2012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0xc050) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0xf9, 0xfe, 0x200, 0x44, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8098, 0x40, 0x9, 0x5}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x128, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r10, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x40040) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r11, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r12, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x80001}, 0x20000001) getpeername$packet(r8, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000940)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000a00)={'ip6gre0\x00', &(0x7f0000000980)={'ip6tnl0\x00', r14, 0x2f, 0x8, 0x7f, 0x9, 0x47, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x17}, 0x40, 0x37, 0x4, 0x2}}) r15 = socket(0x1e, 0x800, 0x80000000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r15, 0x84, 0x8, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) sendmsg$NLBL_MGMT_C_LISTDEF(r9, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200048c4}, 0x4) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r9, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x50, r12, 0x302, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x76}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004000}, 0x4008000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r15, 0x8982, &(0x7f0000000d00)) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r15) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r16, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r17, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r18}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c001}, 0x48804) 18.887161095s ago: executing program 3 (id=2012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0xc050) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0xf9, 0xfe, 0x200, 0x44, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8098, 0x40, 0x9, 0x5}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x128, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r10, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x40040) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r11, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r12, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x80001}, 0x20000001) getpeername$packet(r8, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000940)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000a00)={'ip6gre0\x00', &(0x7f0000000980)={'ip6tnl0\x00', r14, 0x2f, 0x8, 0x7f, 0x9, 0x47, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x17}, 0x40, 0x37, 0x4, 0x2}}) r15 = socket(0x1e, 0x800, 0x80000000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r15, 0x84, 0x8, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) sendmsg$NLBL_MGMT_C_LISTDEF(r9, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200048c4}, 0x4) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r9, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x50, r12, 0x302, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x76}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004000}, 0x4008000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r15, 0x8982, &(0x7f0000000d00)) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r15) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r16, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r17, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r18}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c001}, 0x48804) 8.777684589s ago: executing program 3 (id=2012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0xc050) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0xf9, 0xfe, 0x200, 0x44, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8098, 0x40, 0x9, 0x5}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x128, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r10, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x40040) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r11, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r12, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x24}, 0x1, 0x0, 0x0, 0x80001}, 0x20000001) getpeername$packet(r8, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000940)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000a00)={'ip6gre0\x00', &(0x7f0000000980)={'ip6tnl0\x00', r14, 0x2f, 0x8, 0x7f, 0x9, 0x47, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x17}, 0x40, 0x37, 0x4, 0x2}}) r15 = socket(0x1e, 0x800, 0x80000000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r15, 0x84, 0x8, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) sendmsg$NLBL_MGMT_C_LISTDEF(r9, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200048c4}, 0x4) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r9, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x50, r12, 0x302, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x76}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004000}, 0x4008000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r15, 0x8982, &(0x7f0000000d00)) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r15) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r16, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r17, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r18}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c001}, 0x48804) 3.185949959s ago: executing program 1 (id=2278): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, &(0x7f0000000040), 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_coalesce={0x2e}}) 3.091621373s ago: executing program 1 (id=2279): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (async) r1 = socket(0x2, 0x80805, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'wg1\x00', {0x2, 0x4e23, @loopback=0x7f000000}}) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async, rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000140)={r3, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_delneigh={0x5c, 0x1d, 0x1, 0x70bd25, 0x25dfdbfe, {0x16, 0x0, 0x0, r4, 0x2575fc7a816dfd55, 0x20, 0x5}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_PROBES={0x8, 0x4, 0xfffffb5a}, @NDA_PROTOCOL={0x5, 0xc, 0x9}, @NDA_DST_IPV6={0x14, 0x1, @private2}, @NDA_SRC_VNI={0x8, 0xb, 0x8}]}, 0x5c}}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.980624207s ago: executing program 4 (id=2281): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x11, 0x80a, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) (async) setsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f00000000c0)=0xc9, 0x4) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800070003"], 0x3c}}, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) (async) syz_emit_ethernet(0x2a, 0x0, 0x0) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02010003080000000000000000000000030006000000000002000000ac1414aa000000000000000003000500000000000200"/64], 0x40}, 0x1, 0x7}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) (async, rerun: 32) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 32) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) (async) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000100)={'pim6reg1\x00', {0x2, 0x0, @multicast1}}) (async) bind$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) (async) getsockopt$bt_hci(r8, 0x0, 0x1, &(0x7f0000001780)=""/93, &(0x7f0000001800)=0x5d) (async) r10 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2, @mcast2, {[@routing={0x29}]}}}}}, 0x0) 2.432141624s ago: executing program 1 (id=2284): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100ec0001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x20000835) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c000280080004003c120000140003006e61637666300000000000000000000003d0b6882b0769572ff087cf12d32d83030af32e4163f36195ffc36b2959035b74a833d0020f4ea986337a932acfa49bbc6f109eb6d9d39b1236761b53a2851d7c1c4f205563d3d86d677a41ad5558755a884a16c767a0c12a0775c953a2634aeddb95379666b7e1f7baf5ed74ed891060ebdf3bc64280a19629109336972901ab5b48f34d13c4bc73d19f4dfc77fc"], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) recvmsg(r8, &(0x7f00000007c0)={&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)=""/215, 0xd7}, {&(0x7f0000000240)=""/8, 0x8}, {&(0x7f0000000280)=""/27, 0x1b}, {&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/27, 0x1b}, {&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000440)=""/219, 0xdb}, {&(0x7f0000000540)=""/51, 0x33}, {&(0x7f0000000580)=""/14, 0xe}, {&(0x7f0000000600)=""/202, 0xca}], 0xa}, 0x40000000) socket$nl_netfilter(0x10, 0x3, 0xc) 2.210913507s ago: executing program 4 (id=2286): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x0, 0xffffff3f, 0x0, r1}, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0xc040ff0b, 0x0) (async) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x48}}, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.685766075s ago: executing program 0 (id=2290): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa3}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000100fdffffff00000000ff00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n\x00'], 0x28}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000001", @ANYRES16=0x0, @ANYBLOB="010029bd7000fbdbdf25750000000c0099000500000054000000"], 0x20}}, 0x20000044) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@loopback}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {0x0, 0xfffffffc}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x1a0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='ext4_evict_inode\x00', r2, 0x0, 0x7}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xc040}, 0x20000000) 1.460166827s ago: executing program 1 (id=2291): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/108, 0x6c, 0x0, &(0x7f0000000580)=""/33, 0x21}, &(0x7f0000000700)=0x40) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x82, 0x0, 0x4}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="c6a9a0b5e3dd41a0d3e0ad83cbbbe45852d1d026454f983635b464338316e5764feafb004ad0b5f485bd947590490eb42994ba2dbb57498c955cd07446571f5fc7fe000a0858c4bf46", 0x49}, {&(0x7f0000000080)="c36e49a9e669180946c6052aaf84897ddd734cced0327783224f85973236", 0x1e}], 0x2, &(0x7f00000001c0)="e9fda0f8fe9dfa50c0c0e5aede1963a673bc55154d670a3f13e6ed8732bd9fcd38d7006f8797c0a2819b60c40e0adf1a937aaa0f3c5083afd30c994bc6058d74ebd9db2d5fae95ed207469fcf7c87cf032d9bc85d4775286742ec5c6ae3e581acea38256c97411535467cd3b1ac3c666137f8df13e1b2baed416911d867da22e7b976cf0d7fdc5da4a", 0x89, 0x44}, 0x15) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, 0x0, 0x43059294f10fa146) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000015b40)={0x0, 0x0, &(0x7f0000015b00)={&(0x7f0000015a40)={0x38, 0x13, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x38}}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x28}}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x100010, r6, 0x836a0000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r8, 0x84, 0x78, &(0x7f0000000100)=r10, 0x4) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r12 = socket$can_raw(0x1d, 0x3, 0x1) r13 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r13, 0x1, 0x3, &(0x7f0000000080)=0x7, 0x4) setsockopt(r12, 0x8, 0x5, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x23c, r11, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffff3e7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf4eb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x85, 0x3, "f517096c0904f40dbe71605ca69a780eabc2db33011432311cc9c3b956125575425bd87bcec55e4e9cb4577d3cfa14bf1be3cf2ec4a016fc68e789d6de179541642242736f26a08dd578a9a6e7877bf35a8e20ee5ce61b2c450e7d9a8d3438720da9b8e8ed9a8a238dc33c7c40f5de00817f2764583dbd072fbf0a5fd44050217a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x8001}, 0x4) 1.346418145s ago: executing program 0 (id=2292): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa270005d70000fe08060006040002aaaaaabba3aaac1414bbffffffffffffac1414bb"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008800}, 0x200040c0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getnetconf={0x14, 0x6a, 0x7}, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x28, r1, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x0, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0x36, 0x1, 'wpan4\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20048000) 1.34464481s ago: executing program 2 (id=2293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x100, 0x3, 0xfffffff6, 0x4}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000014000100a8fb00000000000000000a0000ab2e9e9bb985c7f85cc27a40aa07", @ANYRES32=0x0], 0x18}}, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x2, 0x0, 0xa, 0x9, 0x32}, 0x20) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="7f0700b95569274a3740df00", @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf256c000000eb80020046504f3fba59d293f29fd74e7e4f3eceabec4889f043d94aad4aa9b7803d73df10f4bf788f7e9b3e6761e4a4ec666773bc23691d9dbbe8ea216cddabc9935338b7489ebc50f22ca3aa26c341", @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) (async) writev(r0, &(0x7f0000000780)=[{&(0x7f00000001c0)="2e0048b556addf44b93cb53750e9bc1c5820fd2507965595e7221fb6595a798d2e83c4c8dd64b8ca8c7b20189891c58b72b928fc86f2237ed0f14b3df5cb65001b7432411188cb6e5662d4747bd8ab50de9b4bc0e06f915f00d42be3d67f6992fad1f8e1c5177d585f80c94d9d497096159e8c8441fae6a79ab1367509b41403b0abf728db96f0ec55cf", 0x8a}, {&(0x7f00000002c0)="e537e42db116c37601dc5dfa2254a46dfddda3c6fb203227f26e4de34a9fb6fbc77543932d662cc5e6eed29197346c80f7404ed384b49e012219d28a0a", 0x3d}, {&(0x7f00000003c0)="7f93070ad6320bda233a3bad93b1ddc4f04dde10beee99bd12b4992e99ac60610feefad024d4bd43f152ad9e0125667d8d41bb6bc588c08891aace03c724e60e6d45e11041c25d3db4a7ecf4b3ec3e31db167f9f39d908", 0x57}, {&(0x7f0000000340)="23b26d87756daa15f26d7f8aaaa178034437a90aaa30adda68da53dce053bb638b9122d9797d60f64ee06071723d4b728f02ddfd7fcadc11", 0x38}, {&(0x7f0000000840)="41551c68ecb649ad848f51c0b2ce2db6e17e6df799e3a8a485f975cae5302a6136b9a3e98a23d30637249ef3adbabff90f332883ba24553ab4b073aeed30db49010c84cf994ea124c921dd48627bc00af3b0b698f59d2d71a737cada3c6f4d8828f15bc02513a17c04e7bf79b25f5b898fdb9ddaca9b5a2dcd0e0fd858ec89f455ee4a6a75d0b72bac49207e978cc3afef88469866d36dd5f8f05ae0730f7bbef2035cf4cf541a095561663f7ff180957a5f63a87273b48592e64b9c803a05a349fa91079fa7cf8adb8f8d2dfa7d04c07c0d", 0xd2}, {&(0x7f0000000500)="2b925ea48925591898e7a09690c9fc45a962e7a13b31d05d25d529a3c33147eb243e29872a26881ea22fb96cbc49cefab3623ca7c6d172463fcf9a07da7762cf463920b0977ca60546859867c14e260c3c6607d76dad2a9135094e13752f5206d326cc94f68c1005c35f818d05da7601c202eb254f2915c81f1c902bcbb8144d6887f96a52d5ac49ec71fed4d86863deeaca4ee051f27fbfe325c2255ec8bc1e8b3b5557ea535ebdabc7685b141e442cef03f4c92ef23a20bcf3f210872aae30881ffecccc270ae27c162e9a22cd079fa147da5c4cb8ecb8c834f1551df7bf", 0xdf}, {&(0x7f0000000440)="70010000006aec4168bfc4d7fa0d9bd466620b52b16b728ec7206bb0d40af347bc869e9fb7ccef26c76ff30c03dfdd093624a0a957810a07358494691b22c57a4ec9b55167f2ccb4d1e6ca3d5e930ea7734fd62abff0825c85b88f01513c00cc911e436b3f92f5bc233e0baffee674fd855ba4", 0x73}, {&(0x7f0000000640)="f80c1fa57acfa15e954413a8ba3bf89dc7e3648dfd0cdec48940bc0144774de8257a4769467df9dd4c6a7a0a489b8b5426c09317316f86166318fb1ec7006daf871b2b60d7fc426b6d8388b6ec149b95d09315e137597f4d99966e2e855429c1846f08e3fb671287537dc60884dfb7f646287f0699a32cddda372495b14160", 0x7f}, {&(0x7f00000006c0)="ffbdbb60db9c2038e769f9cf6973eccc66a42fabc633b2780f52f97eee98c28ce652d52aa064776c2f82f4ee84a9790d9a51d6540e7c264a68cc7847a75c5960531508132e3759b0611899faa3f0350f656b9bb44493af5477643bc6fbfb9001498e3c5b1a86d9ef2cb31c5a1f6147b9e17798cfa0ac3c9b89756894bc2de1273f84f72e945a0e19", 0x88}], 0x9) (async) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100039042cbd7000eaffffff000003e4", @ANYRES32=r7, @ANYBLOB="83000400cb1507002800128008000100736974001c000280080014000400000008000300ac"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000b00)={'syztnl2\x00', r7, 0x7800, 0x0, 0x2, 0x7000, {{0xa, 0x4, 0x1, 0x7, 0x28, 0x66, 0x0, 0x6, 0x4, 0x0, @broadcast, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x97, 0x3, 0x4, [{@multicast1, 0x2}, {@broadcast, 0x5}]}]}}}}}) 1.195670748s ago: executing program 4 (id=2294): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x5c, r1, 0x5, 0x0, 0x0, {0x6, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x2, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2={0xff, 0x7, '\x00', 0xa}}]}, 0x5c}, 0x1, 0xffffffff00000003}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x14c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0xfb, 0x7, 0x1, 0x0, "9b8661c5f30298f2dbc989e5ad542f03a49c7edb8dd84c503053667bd36447ddb001c10576e38f7bcad4c205f3e197ebab254f4ee501aa112d79908e96d21d60d07ffc2ee341e299b08071db0b371720a2dcd31d7c5fdc7ecbf439319a5d6132f2a1a2cedab49abdf97282266651254c3e05e45d54844fc4d1e4fde41f4ccdea85f1adf929eac9e0fa9d57087fbfd6b8fbdfa14a1ae7ede0e1e2e0ad2b8430678f5b533d65b52f0953df2478293646b3bffe2eb7d85dd77bab194324af25e0c808dd47af1fad3367e048514972f797a0325d5a81a39fd9b655e09292656114023fba5338c3585a5419eda804aa0f3c9f97b967ab9a2f17"}]}], {0x14}}, 0x174}}, 0x0) 1.164302436s ago: executing program 2 (id=2295): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0x24, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) socket(0x15, 0x5, 0x0) (async) r4 = socket(0x15, 0x5, 0x0) connect$l2tp6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xfffffffd, 0x3}, 0x20) (async) connect$l2tp6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xfffffffd, 0x3}, 0x20) getsockname$llc(r4, 0x0, &(0x7f00000002c0)) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r3, 0x1, {0x1, 0x1, 0x4}, 0xfe}, 0x18) r5 = socket(0x15, 0x5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) getsockopt$MRT6(r1, 0x29, 0xce, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) getsockopt$MRT6(r1, 0x29, 0xce, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 1.04090445s ago: executing program 0 (id=2296): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x11, 0x0, 0x8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x1c, 0x0, 0x0, 0x0, 0x21, 0x0, @multicast2, @multicast1}, @info_reply={0x10, 0x0, 0x0, 0x56c, 0x1}}}}}, 0x0) 935.498791ms ago: executing program 1 (id=2297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, r3, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffffffff, 0x45}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x2004811) socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x154, r8, 0x8, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000004}, 0x84001) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xd120, 0x50100}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88000}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xd120, 0x50100}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0x20, r3, 0x4, 0x70bd29, 0x25df9bfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7b}}}}, ["", "", "", ""]}, 0x1b}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r9, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r9, 0x1) (async) shutdown(r9, 0x1) socket$inet(0x2, 0x3, 0x4) (async) r10 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r10, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) r11 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x4e25, 0x8, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xa}, 0x1c) (async) connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x4e25, 0x8, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xa}, 0x1c) sendto$inet6(r11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r10, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r10, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r12, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) shutdown(r9, 0x1) getsockopt$bt_hci(r9, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) 934.366116ms ago: executing program 4 (id=2298): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, r1, 0x4}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000000000000000021000000080003"], 0x2c}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0xfffffffffffffffe, 0xfefffffffffffffc, 0x0, 0x0, 0x3, 0x200000000084], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r0]}, 0x80) socket$inet_sctp(0x2, 0x1, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000540)="4647b4f310d036b398bd576db787e7b4202ee16a0af1563bf3b021ec13c349eb6c1ed386de2085218c1cc9fb2decdb2a5f89154999df0aeebf9b9c41add84afb988eeb8fee205f4c5ead67ebd46eae9f240d566809645d0b34a2bf92443c795b58407a0800000059a90e2286b970c7ff2a6d5f07a62cbee592eb53ee3075fc8985", 0x81}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socket$inet_sctp(0x2, 0x5, 0x84) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, r1, 0x4}, 0x38) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000000000000000021000000080003"], 0x2c}}, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0xfffffffffffffffe, 0xfefffffffffffffc, 0x0, 0x0, 0x3, 0x200000000084], 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRES64=r0]}, 0x80) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000540)="4647b4f310d036b398bd576db787e7b4202ee16a0af1563bf3b021ec13c349eb6c1ed386de2085218c1cc9fb2decdb2a5f89154999df0aeebf9b9c41add84afb988eeb8fee205f4c5ead67ebd46eae9f240d566809645d0b34a2bf92443c795b58407a0800000059a90e2286b970c7ff2a6d5f07a62cbee592eb53ee3075fc8985", 0x81}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) (async) 904.496954ms ago: executing program 2 (id=2299): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000007a0198000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x1, 0x74, @vifc_lcl_addr=@multicast2, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000007a0198000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socket(0x10, 0x80002, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x1, 0x74, @vifc_lcl_addr=@multicast2, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) (async) 823.113233ms ago: executing program 0 (id=2300): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000190061104f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 618.593854ms ago: executing program 2 (id=2301): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, 0xfffffffffffffe31}, 0x24008080) (async) r1 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000a00)={{r1}, "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"}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012000000000015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a96460014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50719600a7780f001697a13cc8bdcd634d4a83e9f1bd22d53a0452f0710ee6ce0a54d950b61c43edf6"], 0x0) (async) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 64) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 64) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r4, r4, 0xc, 0x1, &(0x7f0000000340)='\x00', 0x9, 0x1, 0x457, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'}) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (async) unshare(0x20000400) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) (async, rerun: 32) r8 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x10) (rerun: 32) bind$phonet(r8, &(0x7f0000000100)={0x23, 0xe4, 0x6, 0x2}, 0x10) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000340)={0x43}, 0x10) shutdown(r3, 0x1) 606.194684ms ago: executing program 0 (id=2302): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) socket(0x6, 0x1, 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) writev(r0, &(0x7f0000002580)=[{&(0x7f0000000380)="a25f00a5809a6b745f644f42e0c2411314cd48665a9092beb70f71542d10182dacda9cb6c92bc3ad3332706318d7c7c119a594c2013eb7a8468ff8129560ede5523d36fdb2c50223b70d8a843033484a45e8a5594e3c0cfadd6acd98f81fc5e82d120dd1b4497cec190670ef2fc7880cb221848be9c902865a17bf9fcd6ee9df5243b2fa3634af15b851e7806b9ac061fb9d08000000000000000000", 0x9c}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f00000014c0)="fefdcb30e99cc9f54783a910b445b96a67ba3e8bd77abde61416c02c2b6c278acf046b339816249cb7d07445", 0x2c}, {&(0x7f0000001500)="afeb6547f56d94e844e3aaeb36fe33cd12c4edd0dc134e7ee039b541300c1fb1573db4f37489e4e51a590df6bdc7178d6603feaabb656409ea6523089135bbbc5c6161181d62912f22add1e98173ad", 0x4f}, {&(0x7f0000001580)="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", 0x1000}], 0x5) r4 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r5, 0x29, 0xc8, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xfffffe86, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}, 'p'}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x54}}, 0x40808c4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000140)=0x9, &(0x7f0000000180)=0x2) setsockopt$MRT6_TABLE(r4, 0x29, 0xcf, &(0x7f0000000080)=0xfc, 0x4) 522.536607ms ago: executing program 1 (id=2303): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x4, @local, 'team_slave_1\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a0071"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) syz_emit_ethernet(0xae, &(0x7f0000000840)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60122d9200783afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000fe8000000000000000000000000000bbfc010000000000000000000000000000020a4efd30cc4fd5778d2eddbb50dcd9592d82d0f4824d00292bde7a4c3cbb9c8830e44d8bbf5cff62cb5652b1896b224ca8865ab250c2ec2c252e258b84b7dd7c3df974dd93dc0c51e30171cab29c79"], 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'macvlan1\x00'}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000300)="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", 0xfd1}], 0x1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)={0xe0, 0x0, 0x212, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xfb}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x40}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000580)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, 0x6550, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "bc6f89a6a39e3672dcafc19e9072e4f410507a88b3e371f40f36f63ccc0aa560", "c456c47595e1f916fb5669e3a44215fc742b518e59382fa592698aa8fc7ddeb3e331c3668c0d7ed0afaed5cd3c7cbb68", "4943901d4afd8ebd09890613faf12ef7ee94150e5671f8613f83bb65", {"955eaee9e84bb48ab0e75083bfd7b9d3", "1905104ab364b638e60400b84886d24c"}}}}}}}}, 0xc2) 463.72225ms ago: executing program 4 (id=2304): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r3, 0x100) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x6c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_DATA={0x58, 0x4, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x22}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000004) listen(r2, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000080)=0x80000000, 0x4) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r8, 0x8921, &(0x7f0000000000)={'ipvlan1\x00'}) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000180)={'team0\x00', 0x44}) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 311.874326ms ago: executing program 2 (id=2305): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="090b29bd7000fddbdf2505000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="80c821314d02edd671c5296ce7d3ab3e60371ed080c4777d9a1b037911773a1ad6", 0x21}], 0x1, 0x0, 0x0, 0x4040000}], 0x1, 0x15) recvmmsg(r2, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) ioctl(r3, 0x135, &(0x7f00000001c0)="341958bcd5631bafe3de09e53ec791a4a74c62ff5b2678a4aed47536eceb96749ebd5a448abdfb1e4b484e1d8e5d0bec4e0c60ae0a5cf4e8916d51f66382276d167f73ed45ba672eec7c82eb005be4878374aaf3b1b370a34a9c8246bc4143f75c375e4806c9d4d4fdc737e5bb605dde7a5b9d010a6955677fc86433279ce4565973313a7736028253b8378837a89d06fc9c8784e716e56d8683e0e5a89971cdf485fc142537746a21909c244ec32bd4c0abd7a1f4e30f4fc9c36193a12635e67ed1dc4468fb769921e09ef24054dc05a5fcf82936ad690b8f7f0fa407a70e89eb8d4c1f5eab7c1e39d74150c9fc626a3984a1c4ddf8") 93.149832ms ago: executing program 2 (id=2306): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x207) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r1, 0x0, 0x24009007) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d010000000100bf000000003bbd424c6e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b000024b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e460a000517ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f000000000000000055211c6f864f983d745f5865aad41d29158ae7602a2d6cd415e8351ebc283df54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb372713255012e028cb2654d493a0b4b35faae176f99b745eda2967199cc93685bb537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5ae2c51944da8d7391d5b6b97419a3b76600cd1aa0afe5f8f46df4c5124ca425d374b419a6248029d33d61dd5c844024ba757371867a79b31c6617fc3327191fbf514573f1e30d1fd2d763f3ee9218b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc97def5f07f2980005a4f81a9cf8110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87d42647489b39601be5c27696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c534187a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74f1ffdaccf0ea5f02e03a9ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01efada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82bf1cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b00110635376413c29f7c6f7b7e29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000bc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5b98e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22adef9546abb7a2d9c085b189b5fd1f30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b41ff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b08be600000020a8a711d193bae0ab2db9ed9c6cb3c3de42ab89524414cae922141f7baf17ebb790ad60bd03870c39d1ad12c750837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a103ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf181e099605a644ecade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de08bacecfff2d58437f422df4252c018795310c25e8fce18ed366ac2caade564ca869727a7d63c26271e17d7aba48971835530311545273d3caadeb5d2017dcddab8f38f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f73606fd95bbe0f10521862b6262f0259da51ff7517ace7361460a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94993157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d703dd29ad77f54836779600bb0db3ecfbd36fa8164999898e4aaa56324e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d30edfca386be16b1c549aec52e31e1405f86c7760282901750b732ec06b0db735222a730000000000000000001ed58cd2c684667178576dbb57345b63c313e4a8fcfefe511e084c24b31a2e693946748bb73511695bc0eec1553b0f67d50678fb29ad13d2104fdd7a992574d475d3e51652fb3fda6a9fc0458f10b6d121bd48664858b51a9054d7c1d310af6a043e4b99472fbff86fea83924059419d54f07da0b6b7d6e6d61e680f151b0e"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000001c0)={r5, r4}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x4c, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000060a0b04000000000000000002000000140004801000018008000100636d010000000000000000000000000a00"/80], 0x50}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800001cb9c600feffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="070d000041c0000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b0000000c00018008000700716d65edab2ba4d43336aea4cd1d7d", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) (async, rerun: 64) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001e000504000000000000000004"], 0x114}], 0x1}, 0x10) (async, rerun: 64) socket$unix(0x1, 0x1, 0x0) (rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x0, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @multicast2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="1506000000000000000001000000"], 0x14}, 0x5}, 0x0) r8 = socket(0x840000000002, 0x800, 0x124) connect$inet(r8, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) (async) sendmmsg$inet(r8, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) (async) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) (async) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000600000000000000a06eecf758bb076ef61049f02f1e0ffab000fbdbdf"], 0x20}}, 0x0) 7.626668ms ago: executing program 4 (id=2307): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) close(r3) socket$inet6_udplite(0xa, 0x2, 0x88) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd70000000000002000018"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x80c3, 0x4) bind$inet6(r6, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async) socket$xdp(0x2c, 0x3, 0x0) (async) close(r3) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd70000000000002000018"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x80c3, 0x4) (async) bind$inet6(r6, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async) 0s ago: executing program 0 (id=2308): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0)=0xfffffffc, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000380)=0x1, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) syz_emit_ethernet(0x103e, &(0x7f0000000c40)={@local, @multicast, @void, {@ipv4={0x800, @igmp={{0xa, 0x4, 0x1, 0x7, 0x1030, 0x65, 0x0, 0x9, 0x2, 0x0, @private=0xa010101, @empty, {[@generic={0x7, 0x8, "36ea5eb076e9"}, @generic={0x82, 0xc, "5cd23582ebdf66246e4e"}]}}, {0x1f, 0x7, 0x0, @multicast2, "1680ab31c1a1d9f709fae40185c499017e82485c00f9793b0aaf23ca65533a2d48f7f099d9ad77674523b0b958659c5faa6b6dc55ff5c42d938685ffb43d51a6a06b7fc0a0855ca9101908217a42423cc529b34a378974fe2b519aa963762d4fee074bcb1285a9a9c66399e3d14611947b7725bae0e7ef048b0273202a17de7cab9c24c385779ad2f1491e8b8efc47f449fb8da6dc334bac9f3da8ac047305f0e1ef87a4de0e4a8944a40ce09efdd3c9cda33b60645ca8676ae084dead1029ba05e5c3b6219283c4e71b870e5cbdc8d88c4d3a8548c25b0b13348e1ffa1a8f7dc48ed99d22834b4e6db306c277462725e00eba0a186461fc56f28e9730b5f2c2803bd81769619af37087e08040d8e146ccd540ac1bd441c07006a4794159d3761d4a7c0d6e342e618141539afe4071d6d8cac59150f4fd826d956729eef52fe70c325520ae32b1b62a3ba5fd2a08bafac4d93c095ac6f01f4c64eee10a9ee1662b2e960a46921fa28764490609befb3504450d3f67acd0ee67b7033d4f3740abc34b5d5d72fdc0584bf7978e528baf2340247e3fc54704d5084a7bea47c05d3432673ebf7e22bc6ba689201b932d7a236e43df953a2cc13da2a8e6f26a0b276551bd6945d45b37700b2e089f06cd4942afba5830344d74fd2cd2788e8b1e5610acde5bae403031dc46d31f9e1e2489d50bd269fdf7344585ed2cee83080380b48737b41f888edbcf129376bf8626a882d364d63e7ef26119ed6fa793ec3ec8443b39a1724361d6ae3281ceaaba5e0431f74aaef8f9f5caa6fb61783df8afb65a5c297169764d18bbdf40cbe915cd5b53565b2fea39402465daec41b125970cd17a700bfdab34bef919306674a6a39f60e9748b9603c0cd2952ab2eaf5943eb442df4dee7edde13161217705ba3eb96eb163110bc52372a53dfd1f74ccba3324f8fc0e51fc521f114ef106cf52c89fd225de6b17649f321e8bd41338391c17c682ab90ff21be4d587a03b8bb8397ca0a3dc76784a2cc360c3727f4f32b7e44af5ded47ddea7cf1f65474b5d068ad3139f0c3a8437e18cddd119ef80241124146bc49276480b42be8929f90c8d81dccc4d58c298187b30f645af977124cfb0e0ad67971bf8d001b64834757e0351b417549275beea359f6deae3c0a0c8c549dcc8c0d1e8d07b4544375a0123f08420d49669163389ced84a6eae6dd7fb9f0890dc8e2e73994bd43394edba6c818907ddd8a6bb1c27d2ecf42fffbea9a7ce791abdab6581f9cb32224f6aa5462defcb1ac40ef2862edcea6181ab79415e50d2d3a31d6c51beef03ed558e85ce2154869ef629cbca3fe6b5403d79ddf276930ef02951f4f0f8086896a84c06473c428df680ae38f9769febd23c3fa479dbef792763ee39d3ea48ec1cacba0a0da2be66088a195d144226aca528b0c235a5c7e80746064afa025a9df8835a3a0b14518b4783aea428b074cd7f603210ec7798a8411e0ac2086d74b3a00273b73677f119f39068c0c7504544ffe31bad030922a7c5c432ed23ff1a677cb3bd025ebfec4e1ee79a29cedf05c1ca316349852cf304d45cce1e36bb18a9a75d01252c5e21478a6340656cf18baced2104944e59c0524c1811482e6088a89b27b0cd686306d2ab1207595d7aef95d81db0e3e33edca62577ed805cfc7cf4a641c17662562cac2529ff4d568bff1369c741d037f4b86057186635c97574a4ae596edf529919336fda9ddc8af4b9d591e8547bb5a17f2ed123758c20e655b302e454afff1cc786653e94fef626217240fc7db156d845f0b6974bfe7cd96317c094391cb7622fc50a652cb8c043f67b85b5c58dbd9dd5cef4723cbd97439449551f9cbec825f3394b1d94820d3430d4761381c3eaee5c3b0ed165e59e6e1f65a9462e79b48edd3547d1feb624058cf83895a33e2770e301b9e37a1171da21c44bf42b70d60608c0522d1f6637b1ec0fee57f47349fc0e02f5f1fa5c5e3df341f5229682989f0ed8a6de8ed0336300f5937fe751962eace29b6ce3f02ad9bf34cd331fd3d3675fb13d8f8d21092ad4c76255ae9972025ebd88b45873e6a16033a75682ae52c0fc9639fed4835c9b6269d4ae171786201333f01a3f1fd65626db24fc8e9aa8a56c9af2e016fbbbfcd1b734ad5d960e50ef9a2a83aae6bde5290ec8cf814cd3aa5ee3e7e063153e638ea45539712b924b7120ee5b591db1c8ab8c24d2bc0dc9ff2acc4fa2ab3634362f678694c31699b79f1b9c3956686d55214d81301e8e65a85565c6282f7928c51ac48d5909631e7c76e57c4e1cf8b97fa2847c92d0ae5279fc2b846887a2c1e6a8a1257d0417e76fae4ade5cef27d3ab658d11620f2bea3a1601935eb2c2aca381f32510cf9a8cba47d39cd8cbb1d04dca7ca950824610827ccbca3695b2d02f9b8a66317da4ffc66c340d0badc4dd22d47c24647adaf79349e921c91ac564724e4e55acebd007121248ae4b4702e4e544fe90857c807b8df2bf45f8739c9ac6ebfff8d4df71d9844b9211e06073f838f078f8f624c0ed3bfd15c329d10172bcf893d6099fb8418c0ab6fc4d152c8bb3073dfdc319c3c5ab7ee0fa8b38e4126a9e3d74794d72ae492efcefc52fcb1d8ae9314bdb43c333603e045a31374d8e8ec86149fee27467ab990bfd1127ac538cdcdb58c775c1c64e41804aa806dd3caffa283a41208d4b2848f19dc1261ee55630fdc0c23ccd3cdba8f96873dffc5b0480dba19326fa19477625d3f8445131cc092a39538a842869f08ea59b8ef0b65c4503124d8fa9b6f38436ae4447078cf2f4e67e91a154ab0887be612c72e575c932c2d319d7c3d705963fdb1b26780258b44470eb2e837015ebb9263d1b7a66e5dbd77d77d612ae286f8e2b28e89d765afab93318a8b3d9383689229e016a9eccff52cda68f96c24bf886c91b9cb8a3d2efa0e958b8f1793d2243b4d0d172c8ee1cdcec15da9fe4d8df6efa39ab0e3b3846c33a0214f6171be320dd06c1ebc7ef411edfa971521422fa68870518f432b79d9030ca4ab61ec68f80eb6027660fe1303215caf2080c376e2fdca4c6b7a6e73b1ffaf64eea8d76f4979448f85a5515bdb69184d8d685dbf74532bfdb4c517d52010cbf218ba36ead3c4d03726c164b91978443b7a8009e4e6cdcc294486f59e1c195e2fce222b31e099f36e609ed3493196483a889c45a53651b50534690db574325e244c2feed072a9d8dded31c834bd9554086bb3db7e98891f1eeebc73161852800bee7952bf339c4c0dab8cd11e460eab0bca879456d4395d063de8d724824b74781862a0c351950e3e1012af121444cd429bf048c85d18efbd3b6570decad616896562cd79725676ed645d527373e981a74ed7b63aef4003d79b923b7673a1504695e8d1137be9158068ab12b4b739acf838b42297c8cce018cb219171f2ef52e8eb7b48b1869bb1489d8224425b0984868fd34bb73e45dc31415e53f470992d5480b37c3e051776a0c69db19de9c00ef3389373c7aaa4e75afc5f9f327ea5efa047ef7411f9914e29fd0f76a821b03b670470a6aa4bccac555cc5f1e3153dba050e5646d53bbd8fa4daf4b11b6f8d64bdd5e0a7412db22e2de0f9f25ae852ddfc4ae242d458f2320e2a5480d3474d2b8a975db1962a27d0bc867aac1f763f18c0468b10003ce6f08b5d8a8bf351c3d8f0b598cc14c1035765be359de3691307b5899d5ef45ac0eaa75399b33e56a25377b447e9c65c24d4f0b4d9fcfe06a5741cd4d26b1ecd09302a81785230a34e1a49a2caa869800da2e10a95da0cb34cc52c0fcc9656c305da07355a036f30b44d0ce729093fa12a36623c411680860b3ac3e801817dc50eb1eafdb04265d26b203275c2d322b67568f5f3e2179aa0f674aa5524fc7bc660a76dbbea72a253db4510310b56571fc3ddb9a45b833897c1151a0fdbeff023805c220aae11dd4c3d8b377d5c15bb2867bb4479e2c9e13c3b8f8d780cdb7b160de954ef55b31bd32c8e488c54d73992251b76851ff29cfca56ce9acc28fa2301d86414b69c3dda5ce79a15c8c204661e1fc34f45b4ff035afe8251094694ebea9d13497866a5b78bd2b6369550bf77d79efd963d6afdb80d6ae31f107071d629832808d85e842fca1b13e9479293f482a0f6e03689ce47c27c622bc539df9fe8e4bb303a9b7ee51809f512c5884e37fb2c3056cb628de35473da26fb4a28b8618179acf8eb48a7a07a279abae3c70cdd8e64d7d2936b61722b1c62b46e65f0bdc05d1a10696ced44deead6e87bcc538b679729f5d5c6591a6c4309b79bcdcf2c11c7b4bd8adde321c57a4ed4b931e45ffc19d806ea2827669820bfae98a1ad2af1871d23b80a3a13b3ec820ebc476100d58e5a48e8821b1c2dcc627f076d0cae04f08760bc8144d280c616a537ccb6edc72e3074d4ce91b6fd387f793616c03f196c739a576bf8daa5dce05b7e596f0ecc7c22e99e142ae56b97655bc3964e9bf780a3de4b9e718bc61358fa2ad21454344b90b39a56e82156207c9a489662648a55cf88f5bfea855187bcb78685efd55e409e8919d1101594618fe7b4cefb46a6a169f1ff47f7088cef1fa498afea06b18cc74cc8ccb3fee14874c16bd098a0df377c5df59ea04217c5490d3a0666caecd00777b135a1b9979fe79f4de8fdb02bdbecc92cc9d19deb3bb6994b95e07293348bc526923d96ce04fa67ec9582d07dabf5dc2c474fda6abf7cede0c40804ba50c63e9c621aa15d583ed2d579ae6c76b14c01720ec0cf6d30dd18e57869498a9f36409345fe562421c4d5a43905bcb0e8d91292a991696a740d41d5e89c3bf3610b9f396a2eb0d27c5cae1330b94ea31b717d1a5b47f3c9f35cb3ce5db8a05260d2a2081a68c75a60e080f44dd4edb849022cf075b2d0bc6ce93e9faeb58128d99b8388f819e907a390024c726f8de9a8b8052fd15de2cccaf7e0a72ca599433cdfd4eeb75561ecabff8f166ed86e2fb96525d1f896cf12cb8f075560533896c06d062b3d601ca5438b82ecdaee4a861c0ba2f5964dabafa9646fee84e429e181a74e570f1d4578113600c103f761ec3f2d770ece33b8be68bede2ef8731134557e88488eba7af7cd74eb52d081c961d4612fab89a7f98c3440ba9e290415049fa622c8cc292d1376e778e6b4a57a113e5dc01d7767c3d072f57d07899902d589eec33bb9102a8a2922a6e282138ec21084c3aa737de19d548b18f674308edcfd635a00357775bf2c726321da0bbd91dac18e234cede88e7105174daa3b9b1be9bdd6fa822bb0083be61f545fedcfed9b74f3ee80d2bfc5e8fe0e5bbb803b090b91561a59b6c87a3226ba76f5c79d19e61b2a725f431b7544a52a612ac20db9c06c007cba19edef8e66d79db7c5dd8e664962c515c2b1a361fb1207dcb04c8b25a5257406abe10c3e91193de9ca8acb4b73a6954e18aa3497b5cfafac0aa8eeb38bf644c1cc1500322a2aafc6985348b1b27427e8d0d24040daaff1b89b6d9a684b12654c433e9873d38ea39cda2ff1f069d2eb9a691468ca10330ec72638af9d0383525b0e36c8cad9e213895917aeca651b0a8b947ae90716036beb87cdde884f2026c415db3adb266192a4e1a74029ffd668c105e5a59c4558dc8a24965dc71a55d422a211095346aa505366ec84f4fc4f808cec9524167cbb08f19ae130f83bad5d1d31a53c2196113f140a23567b89acb2624c80bbd6e5f4172f961afdec892345db279d7b55c49a7836177b56bcec5d752f8ad55ad8cd05865238edb72a"}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) kernel console output (not intermixed with test programs): fter parsing attributes in process `syz.4.621'. [ 147.055633][ T8155] Cannot find add_set index 65534 as target [ 147.093197][ T8150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.625'. [ 147.201900][ T8161] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 147.402680][ T8161] syzkaller0: entered promiscuous mode [ 147.448203][ T8179] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 147.456655][ T8161] syzkaller0: entered allmulticast mode [ 149.147520][ T8181] syz_tun: entered promiscuous mode [ 149.153042][ T8181] macsec2: entered promiscuous mode [ 149.161827][ T8181] syz_tun: left promiscuous mode [ 149.526130][ T8219] netlink: 60 bytes leftover after parsing attributes in process `syz.2.643'. [ 149.572594][ T5912] IPVS: starting estimator thread 0... [ 149.597454][ T8223] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 149.617097][ T8228] IPVS: set_ctl: invalid protocol: 1 172.20.20.26:20001 [ 149.625600][ T8223] tipc: Enabled bearer , priority 10 [ 149.675056][ T8225] IPVS: using max 25 ests per chain, 60000 per kthread [ 149.734726][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 149.858597][ T8245] netlink: 84 bytes leftover after parsing attributes in process `syz.1.651'. [ 150.004662][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 150.188784][ T8259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.656'. [ 150.279061][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'. [ 150.317633][ T8268] xt_hashlimit: max too large, truncated to 1048576 [ 150.534560][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 150.775304][ T8291] tipc: Started in network mode [ 150.780243][ T8291] tipc: Node identity 080211000001, cluster identity 4711 [ 150.800493][ T8291] tipc: Enabled bearer , priority 0 [ 150.813391][ T8291] veth0_vlan: entered allmulticast mode [ 150.987830][ T8310] __nla_validate_parse: 3 callbacks suppressed [ 150.987852][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.671'. [ 151.328998][ T8328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.676'. [ 151.381291][ T8328] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 151.564542][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 151.873892][ T8355] veth1_macvtap: left promiscuous mode [ 151.906563][ T8358] netlink: 668 bytes leftover after parsing attributes in process `syz.3.685'. [ 151.925478][ T5483] tipc: Node number set to 134418688 [ 151.932528][ T8358] netlink: 668 bytes leftover after parsing attributes in process `syz.3.685'. [ 152.085619][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.688'. [ 152.106989][ T8367] netlink: 188 bytes leftover after parsing attributes in process `syz.1.689'. [ 152.123783][ T8367] netlink: 188 bytes leftover after parsing attributes in process `syz.1.689'. [ 152.147104][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.688'. [ 152.373796][ T8383] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 152.497391][ T8393] netlink: 'syz.3.696': attribute type 39 has an invalid length. [ 152.541779][ T8393] veth0_macvtap: left promiscuous mode [ 152.605654][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 153.045270][ T8426] syz_tun: entered promiscuous mode [ 153.053176][ T8426] syz_tun: left promiscuous mode [ 153.066018][ T8429] xt_ecn: cannot match TCP bits for non-tcp packets [ 153.094991][ T8435] netlink: 'syz.1.705': attribute type 12 has an invalid length. [ 153.115754][ T8435] netlink: 'syz.1.705': attribute type 29 has an invalid length. [ 153.128857][ T8435] netlink: 148 bytes leftover after parsing attributes in process `syz.1.705'. [ 153.196078][ T8441] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 153.222311][ T5483] IPVS: starting estimator thread 0... [ 153.264635][ T8435] netlink: 'syz.1.705': attribute type 2 has an invalid length. [ 153.285327][ T8435] netlink: 43 bytes leftover after parsing attributes in process `syz.1.705'. [ 153.338949][ T8443] IPVS: using max 28 ests per chain, 67200 per kthread [ 153.644762][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 153.660578][ T8469] bridge_slave_1: left allmulticast mode [ 153.666726][ T8469] bridge_slave_1: left promiscuous mode [ 153.673241][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.720855][ T8469] bridge_slave_0: left allmulticast mode [ 153.742586][ T8469] bridge_slave_0: left promiscuous mode [ 153.754257][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.082735][ T8485] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 154.172518][ T30] audit: type=1800 audit(1744404523.358:3): pid=8499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.724" name="memory.events" dev="tmpfs" ino=832 res=0 errno=0 [ 154.216800][ T8501] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 154.253221][ T30] audit: type=1804 audit(1744404523.388:4): pid=8500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.724" name="/newroot/161/memory.events" dev="tmpfs" ino=832 res=1 errno=0 [ 154.303364][ T8504] netlink: 'syz.0.727': attribute type 4 has an invalid length. [ 154.365697][ T8504] netlink: 'syz.0.727': attribute type 4 has an invalid length. [ 154.373934][ T8506] smc: net device bond0 applied user defined pnetid SYZ2 [ 154.445712][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 154.684689][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 155.511225][ T8569] netlink: 'syz.2.750': attribute type 14 has an invalid length. [ 155.544166][ T8574] ipt_REJECT: TCP_RESET invalid for non-tcp [ 155.724619][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 155.799074][ T8583] xt_recent: Unsupported userspace flags (00000042) [ 156.764619][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 156.766378][ T8617] netlink: 'syz.0.764': attribute type 10 has an invalid length. [ 156.779600][ T8617] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 156.790491][ T8617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.058491][ T8633] netlink: 'syz.0.773': attribute type 19 has an invalid length. [ 157.289804][ T8646] __nla_validate_parse: 12 callbacks suppressed [ 157.289824][ T8646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.776'. [ 157.395966][ T8653] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 157.627173][ T8667] netlink: 40 bytes leftover after parsing attributes in process `syz.3.783'. [ 157.804901][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 157.971522][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'. [ 158.011609][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'. [ 158.065674][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'. [ 158.072122][ T8693] xt_l2tp: v2 doesn't support IP mode [ 158.109593][ T8693] xt_l2tp: v2 doesn't support IP mode [ 158.121333][ T8686] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 158.202241][ T8700] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 158.337797][ T8705] netlink: 32 bytes leftover after parsing attributes in process `syz.4.791'. [ 158.534345][ T8716] netlink: 72 bytes leftover after parsing attributes in process `syz.4.795'. [ 158.551174][ T8709] dccp_close: ABORT with 100 bytes unread [ 158.733328][ T8717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.741065][ T8717] IPv6: NLM_F_CREATE should be set when creating new route [ 158.854638][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 158.882489][ T8725] Cannot find del_set index 3 as target [ 158.922412][ T8727] dccp_invalid_packet: P.Data Offset(0) too small [ 159.003377][ T8733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.802'. [ 159.052191][ T8734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.803'. [ 159.052251][ T8735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.803'. [ 159.884766][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 160.330241][ T8739] netlink: 'syz.4.804': attribute type 3 has an invalid length. [ 160.547992][ T8752] netlink: 'syz.1.808': attribute type 1 has an invalid length. [ 160.579620][ T8752] nbd: error processing sock list [ 160.926886][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 161.927092][ T8833] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 161.964539][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 162.446913][ T8860] __nla_validate_parse: 9 callbacks suppressed [ 162.446945][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.837'. [ 162.593857][ T8876] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 162.819897][ T8892] netlink: 'syz.0.849': attribute type 2 has an invalid length. [ 162.828412][ T8887] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.846'. [ 162.873696][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.848'. [ 163.004547][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 163.088250][ T8904] SET target dimension over the limit! [ 163.213360][ T8897] "syz.1.852" (8897) uses obsolete ecb(arc4) skcipher [ 163.257792][ T8909] set match dimension is over the limit! [ 163.390655][ T8917] netlink: 'syz.1.860': attribute type 2 has an invalid length. [ 163.405043][ T8917] netlink: 'syz.1.860': attribute type 6 has an invalid length. [ 163.572370][ T8927] delete_channel: no stack [ 163.591646][ T8930] netlink: 'syz.2.864': attribute type 1 has an invalid length. [ 163.750760][ T8944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.867'. [ 163.795833][ T8939] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 163.813901][ T1155] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 163.840083][ T8941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.878216][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'. [ 163.923787][ T8952] netlink: 'syz.3.869': attribute type 33 has an invalid length. [ 163.932540][ T8951] netlink: 'syz.3.869': attribute type 33 has an invalid length. [ 163.945350][ T8952] netlink: 152 bytes leftover after parsing attributes in process `syz.3.869'. [ 163.974187][ T8951] netlink: 152 bytes leftover after parsing attributes in process `syz.3.869'. [ 163.985579][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.869'. [ 163.985798][ T82] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 164.044537][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 164.152424][ T8952] : (slave dummy0): Releasing backup interface [ 164.162407][ T8968] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 164.205540][ T8952] dummy0 (unregistering): left promiscuous mode [ 164.233934][ T8966] netlink: 132 bytes leftover after parsing attributes in process `syz.2.872'. [ 164.419497][ T8981] x_tables: duplicate underflow at hook 2 [ 164.597947][ T8992] [H: renamed from veth0_vlan (while UP) [ 164.631389][ T8993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.883'. [ 164.850642][ T9006] netlink: 'syz.4.889': attribute type 16 has an invalid length. [ 164.882350][ T9006] netlink: 'syz.4.889': attribute type 17 has an invalid length. [ 165.084542][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 165.371377][ T9034] bridge_slave_0: left allmulticast mode [ 165.393450][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.445425][ T9034] bridge_slave_1: left allmulticast mode [ 165.460138][ T9034] bridge_slave_1: left promiscuous mode [ 165.469738][ T9034] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.492398][ T9034] bond0: (slave 00ªÃøÂFNð¡): Releasing backup interface [ 165.512614][ T9034] bond0: (slave bond_slave_1): Releasing backup interface [ 165.570943][ T9034] team0: Failed to send options change via netlink (err -105) [ 165.579965][ T9034] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 165.592628][ T9034] team0: Port device team_slave_0 removed [ 165.607220][ T9034] team0: Failed to send options change via netlink (err -105) [ 165.617689][ T9034] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 165.632127][ T9034] team0: Port device team_slave_1 removed [ 165.639414][ T9034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.648166][ T9034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.666467][ T9034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.674349][ T9034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.708618][ T9034] bond1: (slave ip6gretap1): Removing an active aggregator [ 165.717292][ T9034] bond1: (slave ip6gretap1): Releasing backup interface [ 165.751038][ T9054] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 165.843260][ T9054] bond0: entered promiscuous mode [ 165.865736][ T9054] bond0: entered allmulticast mode [ 165.883431][ T9054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.060870][ T9068] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 166.090222][ T9071] validate_nla: 1 callbacks suppressed [ 166.090242][ T9071] netlink: 'syz.3.908': attribute type 20 has an invalid length. [ 166.124557][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 166.510208][ T9091] delete_channel: no stack [ 166.692393][ T9110] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 166.749400][ T9113] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 167.164540][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 167.790109][ T9176] netlink: 'syz.1.942': attribute type 10 has an invalid length. [ 167.829489][ T9176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.866510][ T9176] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 168.204640][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 168.220719][ T9188] __nla_validate_parse: 9 callbacks suppressed [ 168.220736][ T9188] netlink: 192 bytes leftover after parsing attributes in process `syz.2.947'. [ 168.346956][ T5842] Bluetooth: hci4: link tx timeout [ 168.353221][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.378060][ T5842] Bluetooth: hci4: link tx timeout [ 168.383502][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.394591][ T5842] Bluetooth: hci4: link tx timeout [ 168.399751][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.411569][ T5842] Bluetooth: hci4: link tx timeout [ 168.417676][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.425633][ T5842] Bluetooth: hci4: link tx timeout [ 168.430778][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.438684][ T5842] Bluetooth: hci4: link tx timeout [ 168.443825][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.452593][ T5842] Bluetooth: hci4: link tx timeout [ 168.458305][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 168.575745][ T9213] bond0: entered allmulticast mode [ 168.580929][ T9213] bond_slave_0: entered allmulticast mode [ 168.588129][ T9213] bond_slave_1: entered allmulticast mode [ 169.232574][ T9257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.966'. [ 169.245014][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 169.287252][ T9260] netlink: 165 bytes leftover after parsing attributes in process `syz.1.966'. [ 169.845488][ T9282] netlink: 'syz.4.976': attribute type 1 has an invalid length. [ 169.853200][ T9282] netlink: 224 bytes leftover after parsing attributes in process `syz.4.976'. [ 169.910266][ T9284] xt_hashlimit: size too large, truncated to 1048576 [ 169.919906][ T9282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.269187][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 170.284597][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 170.446265][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 170.630865][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 171.004237][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'. [ 171.013775][ T9335] unsupported nla_type 52263 [ 171.029341][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.995'. [ 171.059836][ T9339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.994'. [ 171.112861][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'. [ 171.324524][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 171.509509][ T977] hid (null): unknown global tag 0xe [ 171.549159][ T9368] syzkaller0: entered promiscuous mode [ 171.577897][ T9368] syzkaller0: entered allmulticast mode [ 171.593723][ T9382] xt_limit: Overflow, try lower: 2147483649/128 [ 172.139120][ T5852] Bluetooth: hci2: command tx timeout [ 172.363598][ T977] hid-generic 0005:046D:0A0F.0001: unknown global tag 0xe [ 172.364693][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 172.371123][ T977] hid-generic 0005:046D:0A0F.0001: item 0 2 1 14 parsing failed [ 172.392784][ T977] hid-generic 0005:046D:0A0F.0001: probe with driver hid-generic failed with error -22 [ 172.605265][ T9401] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 172.612335][ T9401] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 173.184977][ T9396] ipvlan0: entered promiscuous mode [ 173.195270][ T9396] ipvlan0: entered allmulticast mode [ 173.214800][ T9400] hsr0: entered promiscuous mode [ 173.230074][ T9401] hsr_slave_0: left promiscuous mode [ 173.245300][ T9401] hsr_slave_1: left promiscuous mode [ 173.286840][ T9401] hsr0 (unregistering): left promiscuous mode [ 173.311052][ T9403] __nla_validate_parse: 1 callbacks suppressed [ 173.311070][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 173.404585][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 173.601615][ T9425] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1015'. [ 174.051007][ T9425]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.072663][ T9425] bond_slave_0: left promiscuous mode [ 174.107779][ T9425]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.127005][ T9425] bond_slave_1: left promiscuous mode [ 174.142837][ T9425]  (unregistering): Released all slaves [ 174.444604][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 174.588436][ T9475] 8021q: VLANs not supported on syzkaller1 [ 174.761762][ T9484] IPVS: length: 109 != 8 [ 174.992226][ T9502] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1038'. [ 175.232659][ T9517] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1044'. [ 175.484629][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 175.506065][ T9529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1046'. [ 175.521652][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'. [ 175.549350][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'. [ 175.949808][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1054'. [ 176.076956][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1058'. [ 176.145342][ T9562] netem: incorrect gi model size [ 176.156997][ T9562] netlink: 'syz.4.1056': attribute type 1 has an invalid length. [ 176.165212][ T9562] netlink: 'syz.4.1056': attribute type 2 has an invalid length. [ 176.259980][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 176.524614][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 176.960799][ T9621] netlink: 'syz.2.1073': attribute type 10 has an invalid length. [ 177.000014][ T9621] team0: Cannot enslave team device to itself [ 177.145456][ T9631] x_tables: duplicate underflow at hook 2 [ 177.560849][ T9658] pim6reg1: entered promiscuous mode [ 177.564614][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 177.573664][ T9658] pim6reg1: entered allmulticast mode [ 177.811060][ T9669] geneve2: entered promiscuous mode [ 177.829246][ T9669] geneve2: entered allmulticast mode [ 177.972272][ T9686] netlink: 'syz.0.1087': attribute type 1 has an invalid length. [ 178.214723][ T9689] bond0 (unregistering): Released all slaves [ 178.324241][ T9704] x_tables: duplicate underflow at hook 2 [ 178.604609][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 178.674347][ T9720] team0: entered promiscuous mode [ 178.698885][ T9720] batadv_slave_1: entered promiscuous mode [ 178.710768][ T9720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.722727][ T9720] Cannot create hsr debugfs directory [ 178.791408][ T9728] __nla_validate_parse: 7 callbacks suppressed [ 178.791428][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1094'. [ 178.809071][ T9728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.950384][ T9728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.027927][ T9725] pim6reg1: entered promiscuous mode [ 179.033788][ T9725] pim6reg1: entered allmulticast mode [ 179.198936][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1101'. [ 179.217512][ T9746] xt_limit: Overflow, try lower: 2147483649/128 [ 179.347817][ T9750] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1104'. [ 179.377909][ T9750] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1104'. [ 179.644643][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 180.000612][ T5890] IPVS: starting estimator thread 0... [ 180.114580][ T9791] IPVS: using max 30 ests per chain, 72000 per kthread [ 180.143349][ T9797] syzkaller1: entered promiscuous mode [ 180.167510][ T9797] syzkaller1: entered allmulticast mode [ 180.190847][ T9797] netlink: 'syz.2.1119': attribute type 10 has an invalid length. [ 180.217685][ T9797] macvlan0: entered promiscuous mode [ 180.223141][ T9797] macvlan0: entered allmulticast mode [ 180.263283][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'. [ 180.462528][ T9814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1125'. [ 180.485479][ T9814] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1125'. [ 180.663322][ T9823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1129'. [ 180.672612][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1129'. [ 180.684523][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 180.744128][ T9834] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.759746][ T9834] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.770029][ T9834] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.780747][ T9834] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.815292][ T9834] geneve2: entered promiscuous mode [ 180.820558][ T9834] geneve2: entered allmulticast mode [ 180.904726][ T9834] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.913928][ T9834] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.940041][ T9834] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.950724][ T9834] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 181.001254][ T9840] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1130'. [ 181.022426][ T9847] veth0: entered promiscuous mode [ 181.109327][ T9847] veth0: left promiscuous mode [ 181.358954][ T30] audit: type=1804 audit(1744404550.528:5): pid=9866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1141" name="/newroot/239/cgroup.controllers" dev="tmpfs" ino=1234 res=1 errno=0 [ 181.384852][ T30] audit: type=1800 audit(1744404550.528:6): pid=9866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1141" name="cgroup.controllers" dev="tmpfs" ino=1234 res=0 errno=0 [ 181.443112][ T30] audit: type=1804 audit(1744404550.528:7): pid=9866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1141" name="/newroot/239/cgroup.controllers" dev="tmpfs" ino=1234 res=1 errno=0 [ 181.471056][ T30] audit: type=1800 audit(1744404550.528:8): pid=9866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1141" name="cgroup.controllers" dev="tmpfs" ino=1234 res=0 errno=0 [ 181.724638][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 181.770182][ T9876] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 182.767175][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 182.999319][ T9960] ip6t_REJECT: ECHOREPLY is not supported [ 183.004069][ T9959] netlink: 'syz.2.1169': attribute type 25 has an invalid length. [ 183.164065][ T9970] netlink: 'syz.2.1171': attribute type 11 has an invalid length. [ 183.229265][ T9973] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20003 [ 183.423756][ T9985] netlink: 'syz.2.1179': attribute type 1 has an invalid length. [ 183.577728][ T9997] IPv6: NLM_F_CREATE should be specified when creating new route [ 183.733654][T10006] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 3, id = 0 [ 183.738289][T10003] IPVS: stopping backup sync thread 10006 ... [ 183.804760][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 183.837627][T10001] __nla_validate_parse: 13 callbacks suppressed [ 183.837648][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 183.945855][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1189'. [ 183.963693][T10011] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1189'. [ 184.038648][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1191'. [ 184.087310][T10016] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1190'. [ 184.139518][T10016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1190'. [ 184.163657][T10016] veth0_to_hsr: entered promiscuous mode [ 184.195193][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 184.356132][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 184.377460][T10030] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 184.452996][T10034] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1196'. [ 184.494700][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1196'. [ 184.696656][T10048] x_tables: duplicate underflow at hook 1 [ 184.844528][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 185.437325][T10080] netlink: 'syz.4.1206': attribute type 6 has an invalid length. [ 185.581238][T10086] ip6tnl2: entered promiscuous mode [ 185.606989][T10086] ip6tnl2: entered allmulticast mode [ 185.732649][T10097] xt_l2tp: missing protocol rule (udp|l2tpip) [ 185.741555][ T30] audit: type=1107 audit(1744404554.928:9): pid=10096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 185.779062][T10093] ip6tnl0: entered allmulticast mode [ 185.884619][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 186.197327][T10124] tipc: Started in network mode [ 186.202467][T10124] tipc: Node identity e6599e9dacf, cluster identity 4711 [ 186.234822][T10124] tipc: Enabled bearer , priority 10 [ 186.263593][T10119] vlan2: entered allmulticast mode [ 186.328338][T10119] batadv0: entered allmulticast mode [ 186.460472][T10127] syzkaller1: entered promiscuous mode [ 186.473927][T10127] syzkaller1: entered allmulticast mode [ 186.712730][T10152] netlink: 'syz.3.1223': attribute type 1 has an invalid length. [ 186.783226][T10156] xt_socket: unknown flags 0x4 [ 186.924617][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 187.344865][ T5483] tipc: Node number set to 1252630173 [ 187.378614][T10183] pim6reg1: entered promiscuous mode [ 187.383977][T10183] pim6reg1: entered allmulticast mode [ 187.394388][T10183] FAULT_INJECTION: forcing a failure. [ 187.394388][T10183] name failslab, interval 1, probability 0, space 0, times 0 [ 187.407142][T10183] CPU: 0 UID: 0 PID: 10183 Comm: syz.2.1232 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 187.407167][T10183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 187.407182][T10183] Call Trace: [ 187.407189][T10183] [ 187.407197][T10183] dump_stack_lvl+0x241/0x360 [ 187.407242][T10183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.407270][T10183] ? __pfx__printk+0x10/0x10 [ 187.407308][T10183] should_fail_ex+0x424/0x570 [ 187.407334][T10183] should_failslab+0xac/0x100 [ 187.407361][T10183] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 187.407389][T10183] ? __alloc_skb+0x1c2/0x480 [ 187.407405][T10183] ? fib6_nh_init+0xe15/0x20e0 [ 187.407433][T10183] __alloc_skb+0x1c2/0x480 [ 187.407451][T10183] ? rt6_nlmsg_size+0x410/0x5c0 [ 187.407480][T10183] ? __pfx___alloc_skb+0x10/0x10 [ 187.407500][T10183] ? fib6_add_1+0x783/0x13d0 [ 187.407529][T10183] inet6_rt_notify+0xba/0x240 [ 187.407561][T10183] fib6_add+0x1e3c/0x4420 [ 187.407614][T10183] ? __pfx_fib6_add+0x10/0x10 [ 187.407637][T10183] ? do_raw_spin_lock+0x151/0x370 [ 187.407670][T10183] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 187.407700][T10183] ? ip6_route_add+0x76/0x160 [ 187.407730][T10183] ip6_route_add+0x8b/0x160 [ 187.407757][T10183] addrconf_add_dev+0x371/0x530 [ 187.407784][T10183] ? __pfx_addrconf_add_dev+0x10/0x10 [ 187.407827][T10183] ? __local_bh_enable_ip+0x168/0x200 [ 187.407845][T10183] ? lockdep_hardirqs_on+0x9d/0x150 [ 187.407868][T10183] ? __local_bh_enable_ip+0x168/0x200 [ 187.407894][T10183] addrconf_init_auto_addrs+0x8f1/0xfe0 [ 187.407926][T10183] ? __pfx_addrconf_init_auto_addrs+0x10/0x10 [ 187.407955][T10183] ? addrconf_permanent_addr+0xb9a/0xc50 [ 187.407995][T10183] ? tee_netdev_event+0x43f/0x460 [ 187.408017][T10183] ? __pfx_addrconf_permanent_addr+0x10/0x10 [ 187.408045][T10183] ? __mutex_unlock_slowpath+0x229/0x800 [ 187.408079][T10183] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 187.408101][T10183] ? tls_dev_event+0x8f8/0x10c0 [ 187.408134][T10183] ? addrconf_link_ready+0xda/0x1b0 [ 187.408163][T10183] addrconf_notify+0xaff/0x1020 [ 187.408195][T10183] notifier_call_chain+0x1a5/0x3f0 [ 187.408252][T10183] __dev_notify_flags+0x209/0x410 [ 187.408278][T10183] ? __pfx___dev_notify_flags+0x10/0x10 [ 187.408295][T10183] ? __dev_change_flags+0x57b/0x700 [ 187.408320][T10183] ? __pfx___dev_change_flags+0x10/0x10 [ 187.408343][T10183] ? dev_ioctl+0x806/0x1380 [ 187.408369][T10183] ? full_name_hash+0xb1/0xe0 [ 187.408391][T10183] netif_change_flags+0xf0/0x1a0 [ 187.408416][T10183] dev_change_flags+0x146/0x270 [ 187.408446][T10183] ? dev_load+0x21/0x1f0 [ 187.408474][T10183] dev_ioctl+0x819/0x1380 [ 187.408506][T10183] sock_do_ioctl+0x233/0x490 [ 187.408538][T10183] ? __pfx_sock_do_ioctl+0x10/0x10 [ 187.408569][T10183] ? __lock_acquire+0xad5/0xd80 [ 187.408604][T10183] sock_ioctl+0x644/0x900 [ 187.408631][T10183] ? __pfx_sock_ioctl+0x10/0x10 [ 187.408652][T10183] ? __fget_files+0x2a/0x420 [ 187.408670][T10183] ? __fget_files+0x2a/0x420 [ 187.408691][T10183] ? __fget_files+0x2a/0x420 [ 187.408714][T10183] ? __pfx_sock_ioctl+0x10/0x10 [ 187.408741][T10183] __se_sys_ioctl+0xf1/0x160 [ 187.408767][T10183] do_syscall_64+0xf3/0x230 [ 187.408792][T10183] ? clear_bhb_loop+0x45/0xa0 [ 187.408816][T10183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.408839][T10183] RIP: 0033:0x7f9f1ef8d169 [ 187.408857][T10183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.408873][T10183] RSP: 002b:00007f9f1fddc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.408901][T10183] RAX: ffffffffffffffda RBX: 00007f9f1f1a5fa0 RCX: 00007f9f1ef8d169 [ 187.408915][T10183] RDX: 0000200000000140 RSI: 0000000000008914 RDI: 000000000000000a [ 187.408927][T10183] RBP: 00007f9f1fddc090 R08: 0000000000000000 R09: 0000000000000000 [ 187.408939][T10183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.408950][T10183] R13: 0000000000000000 R14: 00007f9f1f1a5fa0 R15: 00007ffe772b6b48 [ 187.408982][T10183] [ 187.964511][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 187.965454][T10197] netlink: 'syz.1.1234': attribute type 1 has an invalid length. [ 188.033040][T10201] netlink: 'syz.3.1236': attribute type 11 has an invalid length. [ 189.004662][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 189.403794][T10230] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 190.044637][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 190.067408][T10297] __nla_validate_parse: 15 callbacks suppressed [ 190.067430][T10297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1258'. [ 190.149069][T10300] netlink: 'syz.3.1259': attribute type 11 has an invalid length. [ 190.183976][T10300] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1259'. [ 190.609906][T10333] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1266'. [ 190.658718][T10331] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1266'. [ 190.986848][T10357] netlink: 'syz.4.1270': attribute type 10 has an invalid length. [ 191.049551][T10345] netlink: 'syz.4.1270': attribute type 1 has an invalid length. [ 191.061654][T10357] syz_tun: entered promiscuous mode [ 191.084938][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 191.098488][T10357] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 191.193456][T10345] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1270'. [ 191.256612][T10354] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.281858][T10354] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.300285][T10354] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.310721][T10354] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.323394][T10354] bond2: (slave geneve2): making interface the new active one [ 191.338117][T10354] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 191.402156][T10369] pim6reg: entered allmulticast mode [ 191.410990][ T5852] Bluetooth: hci0: command tx timeout [ 191.470343][T10369] pim6reg: left allmulticast mode [ 191.780139][T10398] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1282'. [ 191.827128][T10398] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1282'. [ 191.861750][T10398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.124508][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 192.174686][T10421] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1289'. [ 192.263089][T10421] tipc: New replicast peer: 255.255.255.255 [ 192.286568][T10421] tipc: Enabled bearer , priority 10 [ 192.424242][T10438] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1293'. [ 192.490752][T10439] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 192.533403][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1294'. [ 192.581076][T10446] ipvlan2: entered allmulticast mode [ 192.640513][T10446] veth0_vlan: entered allmulticast mode [ 193.005261][ C0] Illegal XDP return value 16128 on prog (id 238) dev gre0, expect packet loss! [ 193.106858][ T1138] tipc: Subscription rejected, illegal request [ 193.164643][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 193.209152][T10485] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 193.326890][T10482] virt_wifi0 speed is unknown, defaulting to 1000 [ 194.178802][T10527] syz_tun: entered allmulticast mode [ 194.209904][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 194.216680][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.287918][T10536] pim6reg1: entered promiscuous mode [ 194.321698][T10536] pim6reg1: entered allmulticast mode [ 194.344387][T10527] syz_tun: left allmulticast mode [ 194.588719][T10561] netlink: 'syz.1.1320': attribute type 4 has an invalid length. [ 194.669757][T10571] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 194.863907][T10580] vlan2: entered allmulticast mode [ 194.878398][T10580] batadv0: entered allmulticast mode [ 194.904748][T10582] netlink: 'syz.0.1325': attribute type 10 has an invalid length. [ 195.010665][T10582] team0: Device veth0_vlan is already a lower device of the team interface [ 195.103230][T10589] __nla_validate_parse: 3 callbacks suppressed [ 195.103251][T10589] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1328'. [ 195.244631][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 195.252064][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1328'. [ 195.309711][T10603] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1332'. [ 195.518470][T10610] pim6reg1: entered promiscuous mode [ 195.548098][T10610] pim6reg1: entered allmulticast mode [ 195.572514][T10610] FAULT_INJECTION: forcing a failure. [ 195.572514][T10610] name failslab, interval 1, probability 0, space 0, times 0 [ 195.601236][T10610] CPU: 0 UID: 0 PID: 10610 Comm: syz.1.1334 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 195.601265][T10610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.601277][T10610] Call Trace: [ 195.601285][T10610] [ 195.601293][T10610] dump_stack_lvl+0x241/0x360 [ 195.601331][T10610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.601360][T10610] ? __pfx__printk+0x10/0x10 [ 195.601384][T10610] ? __lock_acquire+0xad5/0xd80 [ 195.601410][T10610] ? do_raw_spin_lock+0x151/0x370 [ 195.601448][T10610] should_fail_ex+0x424/0x570 [ 195.601474][T10610] should_failslab+0xac/0x100 [ 195.601505][T10610] __kmalloc_cache_noprof+0x73/0x370 [ 195.601533][T10610] ? addr_event+0xd5/0x460 [ 195.601567][T10610] addr_event+0xd5/0x460 [ 195.601591][T10610] inet6addr_event+0xfd/0x160 [ 195.601612][T10610] ? __pfx_inet6addr_event+0x10/0x10 [ 195.601647][T10610] notifier_call_chain+0x1a5/0x3f0 [ 195.601679][T10610] ? atomic_notifier_call_chain+0x26/0x180 [ 195.601705][T10610] atomic_notifier_call_chain+0xdb/0x180 [ 195.601733][T10610] ipv6_add_addr+0xe1d/0x10d0 [ 195.601762][T10610] ? __pfx_ipv6_add_addr+0x10/0x10 [ 195.601798][T10610] addrconf_add_linklocal+0x36e/0xa30 [ 195.601830][T10610] ? __pfx_addrconf_add_linklocal+0x10/0x10 [ 195.601855][T10610] ? fib6_add+0x3218/0x4420 [ 195.601906][T10610] ? __asan_memcpy+0x40/0x70 [ 195.601928][T10610] ? ipv6_generate_eui64+0x680/0x990 [ 195.601955][T10610] addrconf_addr_gen+0x508/0xb90 [ 195.601988][T10610] ? __pfx_addrconf_addr_gen+0x10/0x10 [ 195.602017][T10610] ? do_raw_spin_unlock+0x13c/0x8b0 [ 195.602056][T10610] ? ip6_route_add+0x12e/0x160 [ 195.602086][T10610] ? addrconf_add_dev+0x371/0x530 [ 195.602115][T10610] ? __pfx_addrconf_add_dev+0x10/0x10 [ 195.602161][T10610] ? __local_bh_enable_ip+0x168/0x200 [ 195.602181][T10610] ? lockdep_hardirqs_on+0x9d/0x150 [ 195.602206][T10610] ? __local_bh_enable_ip+0x168/0x200 [ 195.602238][T10610] addrconf_init_auto_addrs+0xa38/0xfe0 [ 195.602272][T10610] ? __pfx_addrconf_init_auto_addrs+0x10/0x10 [ 195.602303][T10610] ? addrconf_permanent_addr+0xb9a/0xc50 [ 195.602346][T10610] ? tee_netdev_event+0x43f/0x460 [ 195.602371][T10610] ? __pfx_addrconf_permanent_addr+0x10/0x10 [ 195.602402][T10610] ? __mutex_unlock_slowpath+0x229/0x800 [ 195.602439][T10610] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.602463][T10610] ? tls_dev_event+0x8f8/0x10c0 [ 195.602499][T10610] ? addrconf_link_ready+0xda/0x1b0 [ 195.602531][T10610] addrconf_notify+0xaff/0x1020 [ 195.602574][T10610] notifier_call_chain+0x1a5/0x3f0 [ 195.602608][T10610] __dev_notify_flags+0x209/0x410 [ 195.602635][T10610] ? __pfx___dev_notify_flags+0x10/0x10 [ 195.602653][T10610] ? __dev_change_flags+0x57b/0x700 [ 195.602678][T10610] ? __pfx___dev_change_flags+0x10/0x10 [ 195.602702][T10610] ? dev_ioctl+0x806/0x1380 [ 195.602730][T10610] ? full_name_hash+0xb1/0xe0 [ 195.602753][T10610] netif_change_flags+0xf0/0x1a0 [ 195.602779][T10610] dev_change_flags+0x146/0x270 [ 195.602810][T10610] ? dev_load+0x21/0x1f0 [ 195.602839][T10610] dev_ioctl+0x819/0x1380 [ 195.602870][T10610] sock_do_ioctl+0x233/0x490 [ 195.602903][T10610] ? __pfx_sock_do_ioctl+0x10/0x10 [ 195.602933][T10610] ? __lock_acquire+0xad5/0xd80 [ 195.602969][T10610] sock_ioctl+0x644/0x900 [ 195.602997][T10610] ? __pfx_sock_ioctl+0x10/0x10 [ 195.603020][T10610] ? __fget_files+0x2a/0x420 [ 195.603037][T10610] ? __fget_files+0x2a/0x420 [ 195.603059][T10610] ? __fget_files+0x2a/0x420 [ 195.603083][T10610] ? __pfx_sock_ioctl+0x10/0x10 [ 195.603110][T10610] __se_sys_ioctl+0xf1/0x160 [ 195.603137][T10610] do_syscall_64+0xf3/0x230 [ 195.603163][T10610] ? clear_bhb_loop+0x45/0xa0 [ 195.603188][T10610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.603207][T10610] RIP: 0033:0x7fc7ba58d169 [ 195.603225][T10610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.603240][T10610] RSP: 002b:00007fc7bb3b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.603260][T10610] RAX: ffffffffffffffda RBX: 00007fc7ba7a5fa0 RCX: 00007fc7ba58d169 [ 195.603274][T10610] RDX: 0000200000000140 RSI: 0000000000008914 RDI: 000000000000000a [ 195.603286][T10610] RBP: 00007fc7bb3b0090 R08: 0000000000000000 R09: 0000000000000000 [ 195.603298][T10610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 195.603309][T10610] R13: 0000000000000000 R14: 00007fc7ba7a5fa0 R15: 00007fff1b5f7b58 [ 195.603340][T10610] [ 196.284717][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 196.315334][T10636] netlink: 'syz.4.1341': attribute type 2 has an invalid length. [ 196.325653][T10636] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1341'. [ 196.335129][T10637] netlink: 'syz.4.1341': attribute type 2 has an invalid length. [ 196.342883][T10637] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1341'. [ 196.420725][T10635] virt_wifi0 speed is unknown, defaulting to 1000 [ 196.477280][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 196.633818][T10654] sctp: [Deprecated]: syz.0.1344 (pid 10654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.633818][T10654] Use struct sctp_sack_info instead [ 197.038011][T10665] pim6reg1: entered promiscuous mode [ 197.046293][T10665] pim6reg1: entered allmulticast mode [ 197.224153][T10671] tipc: Enabling not permitted [ 197.254933][T10671] tipc: Enabling of bearer rejected, failed to enable media [ 197.324578][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 197.364666][ T24] IPVS: starting estimator thread 0... [ 197.370489][T10680] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 197.484544][T10684] IPVS: using max 26 ests per chain, 62400 per kthread [ 197.549007][T10689] pim6reg1: entered promiscuous mode [ 197.554357][T10689] pim6reg1: entered allmulticast mode [ 197.593112][T10689] FAULT_INJECTION: forcing a failure. [ 197.593112][T10689] name failslab, interval 1, probability 0, space 0, times 0 [ 197.662226][T10689] CPU: 0 UID: 0 PID: 10689 Comm: syz.4.1353 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 197.662255][T10689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 197.662266][T10689] Call Trace: [ 197.662274][T10689] [ 197.662282][T10689] dump_stack_lvl+0x241/0x360 [ 197.662318][T10689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.662346][T10689] ? __pfx__printk+0x10/0x10 [ 197.662375][T10689] ? queue_work_on+0x261/0x380 [ 197.662407][T10689] should_fail_ex+0x424/0x570 [ 197.662432][T10689] should_failslab+0xac/0x100 [ 197.662461][T10689] __kmalloc_cache_noprof+0x73/0x370 [ 197.662493][T10689] ? sctp_inet6addr_event+0x36e/0x730 [ 197.662522][T10689] ? __asan_memset+0x23/0x50 [ 197.662544][T10689] sctp_inet6addr_event+0x36e/0x730 [ 197.662573][T10689] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 197.662597][T10689] ? notifier_call_chain+0x148/0x3f0 [ 197.662626][T10689] notifier_call_chain+0x1a5/0x3f0 [ 197.662655][T10689] ? atomic_notifier_call_chain+0x26/0x180 [ 197.662696][T10689] atomic_notifier_call_chain+0xdb/0x180 [ 197.662724][T10689] ipv6_add_addr+0xe1d/0x10d0 [ 197.662759][T10689] ? __pfx_ipv6_add_addr+0x10/0x10 [ 197.662795][T10689] addrconf_add_linklocal+0x36e/0xa30 [ 197.662826][T10689] ? __pfx_addrconf_add_linklocal+0x10/0x10 [ 197.662851][T10689] ? fib6_add+0x3218/0x4420 [ 197.662903][T10689] ? __asan_memcpy+0x40/0x70 [ 197.662925][T10689] ? ipv6_generate_eui64+0x680/0x990 [ 197.662952][T10689] addrconf_addr_gen+0x508/0xb90 [ 197.662985][T10689] ? __pfx_addrconf_addr_gen+0x10/0x10 [ 197.663014][T10689] ? do_raw_spin_unlock+0x13c/0x8b0 [ 197.663054][T10689] ? ip6_route_add+0x12e/0x160 [ 197.663083][T10689] ? addrconf_add_dev+0x371/0x530 [ 197.663111][T10689] ? __pfx_addrconf_add_dev+0x10/0x10 [ 197.663158][T10689] ? __local_bh_enable_ip+0x168/0x200 [ 197.663177][T10689] ? lockdep_hardirqs_on+0x9d/0x150 [ 197.663204][T10689] ? __local_bh_enable_ip+0x168/0x200 [ 197.663232][T10689] addrconf_init_auto_addrs+0xa38/0xfe0 [ 197.663266][T10689] ? __pfx_addrconf_init_auto_addrs+0x10/0x10 [ 197.663298][T10689] ? addrconf_permanent_addr+0xb9a/0xc50 [ 197.663342][T10689] ? tee_netdev_event+0x43f/0x460 [ 197.663367][T10689] ? __pfx_addrconf_permanent_addr+0x10/0x10 [ 197.663397][T10689] ? __mutex_unlock_slowpath+0x229/0x800 [ 197.663433][T10689] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.663457][T10689] ? tls_dev_event+0x8f8/0x10c0 [ 197.663493][T10689] ? addrconf_link_ready+0xda/0x1b0 [ 197.663524][T10689] addrconf_notify+0xaff/0x1020 [ 197.663558][T10689] notifier_call_chain+0x1a5/0x3f0 [ 197.663591][T10689] __dev_notify_flags+0x209/0x410 [ 197.663618][T10689] ? __pfx___dev_notify_flags+0x10/0x10 [ 197.663635][T10689] ? __dev_change_flags+0x57b/0x700 [ 197.663672][T10689] ? __pfx___dev_change_flags+0x10/0x10 [ 197.663694][T10689] ? dev_ioctl+0x806/0x1380 [ 197.663719][T10689] ? full_name_hash+0xb1/0xe0 [ 197.663748][T10689] netif_change_flags+0xf0/0x1a0 [ 197.663772][T10689] dev_change_flags+0x146/0x270 [ 197.663800][T10689] ? dev_load+0x21/0x1f0 [ 197.663826][T10689] dev_ioctl+0x819/0x1380 [ 197.663854][T10689] sock_do_ioctl+0x233/0x490 [ 197.663886][T10689] ? __pfx_sock_do_ioctl+0x10/0x10 [ 197.663933][T10689] ? __lock_acquire+0xad5/0xd80 [ 197.663967][T10689] sock_ioctl+0x644/0x900 [ 197.663994][T10689] ? __pfx_sock_ioctl+0x10/0x10 [ 197.664017][T10689] ? __fget_files+0x2a/0x420 [ 197.664035][T10689] ? __fget_files+0x2a/0x420 [ 197.664056][T10689] ? __fget_files+0x2a/0x420 [ 197.664079][T10689] ? __pfx_sock_ioctl+0x10/0x10 [ 197.664106][T10689] __se_sys_ioctl+0xf1/0x160 [ 197.664133][T10689] do_syscall_64+0xf3/0x230 [ 197.664170][T10689] ? clear_bhb_loop+0x45/0xa0 [ 197.664192][T10689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.664210][T10689] RIP: 0033:0x7f750b58d169 [ 197.664226][T10689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.664241][T10689] RSP: 002b:00007f750c476038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.664261][T10689] RAX: ffffffffffffffda RBX: 00007f750b7a5fa0 RCX: 00007f750b58d169 [ 197.664275][T10689] RDX: 0000200000000140 RSI: 0000000000008914 RDI: 0000000000000009 [ 197.664287][T10689] RBP: 00007f750c476090 R08: 0000000000000000 R09: 0000000000000000 [ 197.664299][T10689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.664310][T10689] R13: 0000000000000000 R14: 00007f750b7a5fa0 R15: 00007ffeec041058 [ 197.664339][T10689] [ 198.365155][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 198.446095][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1362'. [ 198.523763][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1361'. [ 198.641549][T10734] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1361'. [ 198.717744][T10728] bond2: entered promiscuous mode [ 198.723121][T10728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.082583][T10750] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 199.115770][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1369'. [ 199.253243][T10760] netlink: 'syz.2.1371': attribute type 1 has an invalid length. [ 199.341403][T10767] netlink: 'syz.4.1370': attribute type 10 has an invalid length. [ 199.384802][T10760] netlink: 'syz.2.1371': attribute type 3 has an invalid length. [ 199.404617][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 199.437589][T10767] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 199.492615][T10769] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 199.661169][T10786] netlink: 'syz.2.1375': attribute type 4 has an invalid length. [ 200.149940][T10813] netlink: 'syz.0.1379': attribute type 39 has an invalid length. [ 200.444530][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 201.484615][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 201.838148][T10852] __nla_validate_parse: 2 callbacks suppressed [ 201.838170][T10852] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1386'. [ 201.905265][T10857] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1391'. [ 202.179897][T10874] netlink: 'syz.2.1395': attribute type 11 has an invalid length. [ 202.209938][T10874] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1395'. [ 202.273436][T10874] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1395'. [ 202.304023][T10874] netlink: 'syz.2.1395': attribute type 2 has an invalid length. [ 202.327708][T10874] netlink: 'syz.2.1395': attribute type 8 has an invalid length. [ 202.351116][T10874] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1395'. [ 202.451398][T10889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1399'. [ 202.524699][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 202.716523][T10906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1401'. [ 202.718743][T10905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1401'. [ 202.860095][T10911] IPv6: sit2: Disabled Multicast RS [ 203.079909][T10921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1407'. [ 203.352815][T10941] netlink: 'syz.3.1411': attribute type 11 has an invalid length. [ 203.503452][T10948] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1413'. [ 203.564762][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 204.199909][T10983] netlink: 'syz.3.1423': attribute type 16 has an invalid length. [ 204.208226][T10983] netlink: 'syz.3.1423': attribute type 17 has an invalid length. [ 204.604619][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 204.759137][T11007] netlink: 'syz.3.1428': attribute type 23 has an invalid length. [ 205.428996][T11042] netlink: 'syz.3.1437': attribute type 1 has an invalid length. [ 205.509387][T11048] netlink: 'syz.0.1435': attribute type 1 has an invalid length. [ 205.644714][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 206.148661][T11078] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 206.435032][T11091] tipc: Enabling of bearer rejected, already enabled [ 206.652851][T11103] netlink: 'syz.2.1451': attribute type 16 has an invalid length. [ 206.676136][T11103] netlink: 'syz.2.1451': attribute type 17 has an invalid length. [ 206.684640][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 207.384163][T11136] veth0: entered promiscuous mode [ 207.536184][T11135] veth0: left promiscuous mode [ 207.724503][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 208.001193][T11173] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 208.340092][T11191] x_tables: duplicate underflow at hook 1 [ 208.361310][T11189] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.385205][T11189] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 208.658281][T11203] __nla_validate_parse: 7 callbacks suppressed [ 208.658301][T11203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1476'. [ 208.699000][T11203] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1476'. [ 208.759192][T11203] gretap3: entered promiscuous mode [ 208.764571][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 208.781591][T11203] gretap3: entered allmulticast mode [ 208.990334][T11213] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1481'. [ 209.000812][T11214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1480'. [ 209.010425][T11213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1481'. [ 209.020405][T11214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1480'. [ 209.031472][T11213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1481'. [ 209.098195][T11214] bond0: left allmulticast mode [ 209.103197][T11214] bond_slave_0: left allmulticast mode [ 209.123427][T11214] bond_slave_1: left allmulticast mode [ 209.161611][T11214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.202849][T11214] team0: Device bond0 failed to register rx_handler [ 209.252798][T11220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1482'. [ 209.284603][T11227] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1484'. [ 209.334591][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 209.804578][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 209.834628][T11255] netlink: 'syz.1.1491': attribute type 4 has an invalid length. [ 209.843995][T11256] xt_hashlimit: invalid rate [ 210.300779][T11271] netlink: 'syz.0.1497': attribute type 1 has an invalid length. [ 210.394731][T11271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.445803][T11275] unknown channel width for channel at 909000KHz? [ 210.844717][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 210.919541][T11300] netlink: 'syz.3.1506': attribute type 11 has an invalid length. [ 210.958732][T11300] netlink: 'syz.3.1506': attribute type 11 has an invalid length. [ 211.004709][T11300] netlink: 'syz.3.1506': attribute type 11 has an invalid length. [ 211.012667][T11300] netlink: 'syz.3.1506': attribute type 11 has an invalid length. [ 211.067869][T11300] netlink: 'syz.3.1506': attribute type 11 has an invalid length. [ 211.114634][T11300] netlink: 'syz.3.1506': attribute type 11 has an invalid length. [ 211.122857][T11300] netlink: 'syz.3.1506': attribute type 11 has an invalid length. [ 211.184901][T11300] netlink: 'syz.3.1506': attribute type 11 has an invalid length. [ 211.213584][T11300] netlink: 'syz.3.1506': attribute type 11 has an invalid length. [ 211.239582][T11300] netlink: 'syz.3.1506': attribute type 11 has an invalid length. [ 211.645446][T11336] erspan0: entered allmulticast mode [ 211.650907][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 211.650919][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 211.684783][T11336] batman_adv: batadv0: Adding interface: erspan0 [ 211.691177][T11336] batman_adv: batadv0: The MTU of interface erspan0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.776376][T11336] batman_adv: batadv0: Not using interface erspan0 (retrying later): interface not active [ 211.884636][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 212.197743][T11373] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 212.215746][T11374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.260894][T11375] netlink: 'syz.2.1526': attribute type 4 has an invalid length. [ 212.296322][T11376] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 212.924532][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 213.498451][T11427] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 213.964641][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 213.974981][T11456] __nla_validate_parse: 78 callbacks suppressed [ 213.974999][T11456] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1542'. [ 214.037080][T11454] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1541'. [ 214.360308][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1546'. [ 214.394888][T11473] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1546'. [ 214.419495][T11473] netlink: 'syz.3.1546': attribute type 5 has an invalid length. [ 214.606678][T11493] xt_hashlimit: size too large, truncated to 1048576 [ 214.669032][T11496] xt_hashlimit: size too large, truncated to 1048576 [ 214.699709][T11491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1550'. [ 214.741917][T11496] syz.3.1551: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 214.774141][T11491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1550'. [ 214.830677][T11496] CPU: 1 UID: 0 PID: 11496 Comm: syz.3.1551 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 214.830711][T11496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 214.830732][T11496] Call Trace: [ 214.830740][T11496] [ 214.830750][T11496] dump_stack_lvl+0x241/0x360 [ 214.830793][T11496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.830825][T11496] ? __pfx__printk+0x10/0x10 [ 214.830854][T11496] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 214.830889][T11496] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 214.830920][T11496] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 214.830955][T11496] warn_alloc+0x27c/0x410 [ 214.830989][T11496] ? __pfx_warn_alloc+0x10/0x10 [ 214.831019][T11496] ? htable_create+0x10c/0x890 [ 214.831038][T11496] ? __get_vm_area_node+0x1c8/0x2d0 [ 214.831068][T11496] ? __get_vm_area_node+0x25c/0x2d0 [ 214.831107][T11496] __vmalloc_node_range_noprof+0x634/0x1390 [ 214.831169][T11496] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 214.831192][T11496] ? __kasan_kmalloc_large+0x1a/0xa0 [ 214.831226][T11496] ? htable_create+0x10c/0x890 [ 214.831247][T11496] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 214.831279][T11496] ? htable_create+0x10c/0x890 [ 214.831298][T11496] ? htable_create+0x10c/0x890 [ 214.831316][T11496] ? hashlimit_pernet+0x23/0x240 [ 214.831349][T11496] htable_create+0x10c/0x890 [ 214.831379][T11496] hashlimit_mt_check_common+0x763/0xa50 [ 214.831421][T11496] hashlimit_mt_check_v1+0x2ec/0x550 [ 214.831465][T11496] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 214.831502][T11496] ? xt_find_match+0x1e5/0x240 [ 214.831536][T11496] ? __mutex_unlock_slowpath+0x229/0x800 [ 214.831569][T11496] xt_check_match+0x36a/0xa40 [ 214.831604][T11496] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 214.831633][T11496] ? __pfx_xt_check_match+0x10/0x10 [ 214.831682][T11496] ? xt_find_match+0x1e5/0x240 [ 214.831722][T11496] translate_table+0x1721/0x24b0 [ 214.831750][T11496] ? __x64_sys_setsockopt+0x1ee/0x280 [ 214.831770][T11496] ? do_syscall_64+0xf3/0x230 [ 214.831795][T11496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.831848][T11496] ? __pfx_translate_table+0x10/0x10 [ 214.831907][T11496] ? copy_from_sockptr_offset+0x60/0xb0 [ 214.831941][T11496] do_ip6t_set_ctl+0xe53/0x1270 [ 214.831977][T11496] ? __pfx___mutex_trylock_common+0x10/0x10 [ 214.832007][T11496] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 214.832063][T11496] ? __mutex_unlock_slowpath+0x229/0x800 [ 214.832106][T11496] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 214.832142][T11496] ? futex_wait+0x287/0x370 [ 214.832173][T11496] nf_setsockopt+0x295/0x2c0 [ 214.832212][T11496] rawv6_setsockopt+0x2b3/0x6d0 [ 214.832248][T11496] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 214.832281][T11496] ? aa_sock_opt_perm+0x79/0x120 [ 214.832311][T11496] ? sock_common_setsockopt+0x37/0xc0 [ 214.832345][T11496] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 214.832374][T11496] do_sock_setsockopt+0x3b1/0x710 [ 214.832403][T11496] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 214.832422][T11496] ? __fget_files+0x2a/0x420 [ 214.832446][T11496] ? __fget_files+0x39d/0x420 [ 214.832471][T11496] ? __fget_files+0x2a/0x420 [ 214.832506][T11496] __x64_sys_setsockopt+0x1ee/0x280 [ 214.832536][T11496] do_syscall_64+0xf3/0x230 [ 214.832562][T11496] ? clear_bhb_loop+0x45/0xa0 [ 214.832593][T11496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.832613][T11496] RIP: 0033:0x7f3e0a78d169 [ 214.832631][T11496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.832648][T11496] RSP: 002b:00007f3e085d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 214.832671][T11496] RAX: ffffffffffffffda RBX: 00007f3e0a9a6080 RCX: 00007f3e0a78d169 [ 214.832686][T11496] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 214.832699][T11496] RBP: 00007f3e0a80e990 R08: 00000000000004c0 R09: 0000000000000000 [ 214.832711][T11496] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 214.832730][T11496] R13: 0000000000000000 R14: 00007f3e0a9a6080 R15: 00007fffa0583a98 [ 214.832764][T11496] [ 214.842214][T11494] virt_wifi0 speed is unknown, defaulting to 1000 [ 214.867417][T11496] Mem-Info: [ 215.004522][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 215.065163][T11496] active_anon:4742 inactive_anon:0 isolated_anon:0 [ 215.065163][T11496] active_file:1402 inactive_file:38353 isolated_file:0 [ 215.065163][T11496] unevictable:768 dirty:95 writeback:0 [ 215.065163][T11496] slab_reclaimable:10333 slab_unreclaimable:103212 [ 215.065163][T11496] mapped:28427 shmem:1435 pagetables:838 [ 215.065163][T11496] sec_pagetables:0 bounce:0 [ 215.065163][T11496] kernel_misc_reclaimable:0 [ 215.065163][T11496] free:1334695 free_pcp:521 free_cma:0 [ 215.307604][T11496] Node 0 active_anon:18868kB inactive_anon:0kB active_file:5608kB inactive_file:153340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113708kB dirty:380kB writeback:0kB shmem:4204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11252kB pagetables:3452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 215.383837][T11496] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 215.416917][T11496] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.451215][T11520] netlink: 'syz.1.1555': attribute type 10 has an invalid length. [ 215.459605][T11520] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1555'. [ 215.469853][T11496] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 215.488573][T11496] Node 0 DMA32 free:1418980kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:18960kB inactive_anon:0kB active_file:5608kB inactive_file:153248kB unevictable:1536kB writepending:380kB present:3129332kB managed:2547232kB mlocked:0kB bounce:0kB free_pcp:2036kB local_pcp:1080kB free_cma:0kB [ 215.535417][T11496] lowmem_reserve[]: 0 0 0 0 0 [ 215.540311][T11496] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 215.580520][T11496] lowmem_reserve[]: 0 0 0 0 0 [ 215.587234][T11496] Node 1 Normal free:3909972kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.616557][T11496] lowmem_reserve[]: 0 0 0 0 0 [ 215.622312][T11496] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 215.645839][T11496] Node 0 DMA32: 129*4kB (UM) 119*8kB (UME) 107*16kB (ME) 427*32kB (UME) 820*64kB (UME) 148*128kB (UME) 45*256kB (UM) 11*512kB (UME) 5*1024kB (UM) 5*2048kB (UME) 317*4096kB (M) = 1419212kB [ 215.666272][T11496] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 215.680698][T11496] Node 1 Normal: 225*4kB (UE) 58*8kB (UME) 40*16kB (UME) 188*32kB (UME) 82*64kB (UME) 29*128kB (UME) 11*256kB (UM) 6*512kB (UME) 6*1024kB (UME) 3*2048kB (UE) 946*4096kB (M) = 3909972kB [ 215.745689][T11496] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.774573][T11496] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.830273][T11496] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 215.857060][T11496] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 215.883443][T11496] 41526 total pagecache pages [ 215.899227][T11496] 0 pages in swap cache [ 215.921141][T11496] Free swap = 124996kB [ 215.943737][T11496] Total swap = 124996kB [ 215.981176][T11496] 2097051 pages RAM [ 216.002568][T11496] 0 pages HighMem/MovableOnly [ 216.020284][T11496] 428585 pages reserved [ 216.037496][T11496] 0 pages cma reserved [ 216.044622][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 216.271202][T11547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1562'. [ 216.292855][T11547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1562'. [ 216.594033][T11572] netlink: 'syz.0.1569': attribute type 1 has an invalid length. [ 216.598189][T11570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1568'. [ 216.774746][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 216.852034][T11582] xt_CT: No such helper "pptp" [ 217.084532][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 217.106588][T11605] bond0: (slave syz_tun): Releasing backup interface [ 217.232824][T11605] bridge_slave_0: left allmulticast mode [ 217.238826][T11605] bridge_slave_0: left promiscuous mode [ 217.252617][T11605] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.307373][T11605] bridge_slave_1: left allmulticast mode [ 217.313252][T11605] bridge_slave_1: left promiscuous mode [ 217.320876][T11605] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.352307][T11605] bond0: (slave bond_slave_0): Releasing backup interface [ 217.373589][T11605] bond0: (slave bond_slave_1): Releasing backup interface [ 217.404030][T11620] netlink: 'syz.2.1584': attribute type 10 has an invalid length. [ 217.406953][T11605] team0: Port device team_slave_0 removed [ 217.424342][T11605] team0: Port device team_slave_1 removed [ 217.431372][T11605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.439162][T11605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.460992][T11605] bond0: (slave wlan1): Releasing backup interface [ 217.483896][T11605] bond2: (slave geneve2): Releasing active interface [ 217.493783][T11605] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 217.503006][T11605] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 217.516830][T11605] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 217.525914][T11605] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 217.752026][T11631] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.761640][T11631] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.770454][T11631] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.779851][T11631] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.086540][T11660] netlink: 'syz.0.1596': attribute type 1 has an invalid length. [ 218.124723][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 218.214802][T11660] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.253390][T11667] bond3: (slave ip6gretap1): making interface the new active one [ 218.269030][T11667] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 218.278936][T11667] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 218.288092][T11667] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 218.384786][ T977] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 218.404221][ T7623] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 218.447409][ T7623] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 218.746180][T11702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.093869][ T977] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 219.164899][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 219.256587][T11731] __nla_validate_parse: 9 callbacks suppressed [ 219.256608][T11731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1613'. [ 219.283520][T11727] netlink: 'syz.2.1612': attribute type 15 has an invalid length. [ 219.319765][T11734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1614'. [ 219.345185][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 219.496086][ T1138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 219.529886][ T1138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 219.825034][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1618'. [ 220.063082][T11771] tipc: New replicast peer: 255.255.255.255 [ 220.084113][T11771] tipc: Enabled bearer , priority 10 [ 220.166400][ T5889] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 220.184254][T11780] netlink: 'syz.4.1624': attribute type 10 has an invalid length. [ 220.204597][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 220.233542][T11776] virt_wifi0 speed is unknown, defaulting to 1000 [ 220.294701][T11782] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1626'. [ 220.300585][T11786] x_tables: unsorted underflow at hook 1 [ 220.332650][T11780] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 220.360675][T11788] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1626'. [ 221.179119][T11828] bond0: option mode: unable to set because the bond device has slaves [ 221.244513][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 221.267353][T11838] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1639'. [ 221.406182][T11851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1644'. [ 221.433512][T11851] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1644'. [ 221.485625][T11856] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1644'. [ 221.523359][T11852] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1644'. [ 221.535487][T11858] netlink: 'syz.0.1645': attribute type 4 has an invalid length. [ 221.586599][T11859] netlink: 'syz.0.1645': attribute type 4 has an invalid length. [ 221.856967][T11873] xt_policy: too many policy elements [ 221.871182][T11873] xt_policy: too many policy elements [ 222.284615][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 223.001022][T11937] netlink: 'syz.1.1664': attribute type 1 has an invalid length. [ 223.048666][T11937] netlink: 'syz.1.1664': attribute type 10 has an invalid length. [ 223.072226][T11937] netlink: 'syz.1.1664': attribute type 4 has an invalid length. [ 223.115617][T11942] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 223.324510][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 223.626937][T11972] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 223.814647][ C1] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 223.814667][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 223.959042][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 224.364493][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 225.114626][ T7623] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 225.407001][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 226.211713][T12059] __nla_validate_parse: 6 callbacks suppressed [ 226.211735][T12059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1690'. [ 226.288921][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 226.405964][T12074] nbd: couldn't find a device at index 8960 [ 226.444654][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 226.546927][T12080] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1696'. [ 226.602718][T12083] bridge0: entered promiscuous mode [ 226.614690][T12083] macvlan2: entered promiscuous mode [ 226.642850][T12083] macvlan3: entered promiscuous mode [ 227.173242][T12097] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 227.326875][T12101] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1702'. [ 227.446618][ T1149] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 227.484621][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 227.721120][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1708'. [ 227.730223][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1708'. [ 227.895432][T12141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1712'. [ 227.991896][T12148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1712'. [ 228.041642][T12148] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1712'. [ 228.267065][T12163] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1718'. [ 228.322276][T12167] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1720'. [ 228.524496][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 228.666090][ T7623] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 228.819993][T12202] bridge0: port 1(syz_tun) entered blocking state [ 228.827316][T12202] bridge0: port 1(syz_tun) entered disabled state [ 228.835577][T12202] syz_tun: entered allmulticast mode [ 228.869067][T12202] syz_tun: entered promiscuous mode [ 228.880247][T12202] bridge0: port 1(syz_tun) entered blocking state [ 228.887284][T12202] bridge0: port 1(syz_tun) entered forwarding state [ 228.933388][T12203] bridge0: port 2(vlan2) entered blocking state [ 228.958871][T12203] bridge0: port 2(vlan2) entered disabled state [ 228.981207][T12203] vlan2: entered allmulticast mode [ 228.987549][T12203] bridge0: entered allmulticast mode [ 229.009333][T12203] vlan2: left allmulticast mode [ 229.019922][T12203] bridge0: left allmulticast mode [ 229.092432][T12205] bridge0: port 2(vlan2) entered blocking state [ 229.113837][T12205] bridge0: port 2(vlan2) entered disabled state [ 229.123244][T12205] vlan2: entered allmulticast mode [ 229.133185][T12205] bridge0: entered allmulticast mode [ 229.151634][T12205] vlan2: left allmulticast mode [ 229.169600][T12205] bridge0: left allmulticast mode [ 229.421809][T12228] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.538122][T12238] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.564603][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 229.579013][T12238] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 229.599681][T12247] openvswitch: netlink: Missing key (keys=40, expected=80) [ 229.602668][T12238] bond2: (slave vcan0): Error -95 calling set_mac_address [ 229.728057][T12254] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 229.808706][ T7623] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 229.848011][T12258] netdevsim netdevsim3: Direct firmware load for . [ 229.848011][T12258] failed with error -2 [ 229.870506][T12258] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 229.870506][T12258] [ 229.969732][T12266] syzkaller0: entered promiscuous mode [ 229.984607][T12266] syzkaller0: entered allmulticast mode [ 230.148589][T12281] x_tables: duplicate entry at hook 3 [ 230.430064][T12295] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 230.469987][T12295] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 230.604598][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 230.914322][T12324] netlink: zone id is out of range [ 230.927435][T12328] xt_hashlimit: size too large, truncated to 1048576 [ 230.932023][T12324] netlink: del zone limit has 4 unknown bytes [ 230.971671][T12321] openvswitch: netlink: Duplicate key (type 0). [ 230.988626][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 231.391142][T12333] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 231.414834][T12333] bond0 (unregistering): Released all slaves [ 231.451681][T12358] __nla_validate_parse: 10 callbacks suppressed [ 231.451696][T12358] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1776'. [ 231.573539][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1777'. [ 231.591840][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1777'. [ 231.637540][T12370] ipt_REJECT: TCP_RESET invalid for non-tcp [ 231.644621][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 231.746862][T12374] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1781'. [ 231.792884][T12374] xt_CT: No such helper "pptp" [ 232.117511][ T7622] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 232.296314][T12400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1785'. [ 232.405909][T12407] tipc: Enabling of bearer rejected, already enabled [ 232.604851][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 232.684491][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 232.938122][T12439] netlink: 'syz.1.1798': attribute type 21 has an invalid length. [ 233.234997][ T1149] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 233.407702][T12472] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1810'. [ 233.471118][T12477] tipc: Bearer : already 2 bearers with priority 10 [ 233.480709][T12477] tipc: Bearer : trying with adjusted priority [ 233.492675][T12477] tipc: Enabling of bearer rejected, failed to enable media [ 233.724496][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 234.386978][ T7623] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 234.767312][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 235.525792][ T1149] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 235.804557][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 236.415735][T12579] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 236.693507][ T1138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 236.751658][T12599] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 236.775270][T12602] xt_l2tp: missing protocol rule (udp|l2tpip) [ 236.844657][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 236.886327][T12605] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 237.053682][T12610] netlink: 'syz.1.1845': attribute type 12 has an invalid length. [ 237.068112][T12607] netlink: 'syz.1.1845': attribute type 12 has an invalid length. [ 237.884502][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 237.913181][T12645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1853'. [ 238.085090][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 238.841970][T12667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1856'. [ 238.924506][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 239.077239][T12671] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.124962][ T5483] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.197565][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.265199][ T1138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 239.285622][ T5483] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.352619][T12687] netlink: 'syz.0.1862': attribute type 3 has an invalid length. [ 239.370201][ T5483] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.386892][T12687] netlink: 'syz.0.1862': attribute type 3 has an invalid length. [ 239.423320][T12687] netlink: 'syz.0.1862': attribute type 3 has an invalid length. [ 239.435446][T12687] netlink: 'syz.0.1862': attribute type 3 has an invalid length. [ 239.453497][T12687] netlink: 'syz.0.1862': attribute type 3 has an invalid length. [ 239.473229][T12687] netlink: 'syz.0.1862': attribute type 3 has an invalid length. [ 239.496293][T12687] netlink: 'syz.0.1862': attribute type 3 has an invalid length. [ 239.505057][T12687] netlink: 'syz.0.1862': attribute type 3 has an invalid length. [ 239.512986][T12687] netlink: 'syz.0.1862': attribute type 3 has an invalid length. [ 239.523339][T12687] netlink: 'syz.0.1862': attribute type 3 has an invalid length. [ 239.553680][T12701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1864'. [ 239.574844][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.645547][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.770008][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1868'. [ 239.885986][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1868'. [ 239.928377][T12719] bond3: entered promiscuous mode [ 239.933720][T12719] bond3: entered allmulticast mode [ 239.942121][T12719] 8021q: adding VLAN 0 to HW filter on device bond3 [ 239.964593][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 240.325248][T12719] bond3 (unregistering): Released all slaves [ 240.512146][T12740] team0: Device vti0 is of different type [ 240.604808][ T5483] ip6_tnl_xmit_ctl: 5 callbacks suppressed [ 240.604829][ T5483] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.988685][T12775] veth1_macvtap: left promiscuous mode [ 241.004509][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 241.151006][T12788] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (226) [ 241.522393][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 241.553955][T12812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1894'. [ 241.601728][T12812] Cannot find del_set index 17 as target [ 241.647449][ T5483] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 241.770246][T12826] xt_connbytes: Forcing CT accounting to be enabled [ 241.812136][T12826] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 242.044496][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 242.145550][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 242.468501][T12861] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 242.543470][T12856] xt_CT: No such helper "pptp" [ 242.675720][ T1149] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 242.719081][T12875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1908'. [ 243.084487][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 243.144316][T12901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1918'. [ 243.180617][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1918'. [ 243.231208][T12902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1917'. [ 243.810800][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 243.947734][T12956] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 244.001870][T12956] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 244.124631][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 244.224287][T12970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1932'. [ 244.568736][T12995] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 244.901990][T13013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1940'. [ 244.996470][T13022] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1940'. [ 245.019914][ T1149] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 245.075979][T13021] validate_nla: 32 callbacks suppressed [ 245.076000][T13021] netlink: 'syz.1.1941': attribute type 23 has an invalid length. [ 245.150124][T13028] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1944'. [ 245.193523][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 245.387055][T13043] netlink: 'syz.1.1945': attribute type 10 has an invalid length. [ 245.415194][T13043] bridge0: port 3(team0) entered blocking state [ 245.443789][T13043] bridge0: port 3(team0) entered disabled state [ 245.461366][T13043] team0: entered allmulticast mode [ 245.485610][T13043] team_slave_0: entered allmulticast mode [ 245.491817][T13043] team_slave_1: entered allmulticast mode [ 245.519931][T13047] netlink: 'syz.2.1947': attribute type 11 has an invalid length. [ 245.538452][T13043] geneve0: entered allmulticast mode [ 245.550684][T13043] team0: entered promiscuous mode [ 245.556017][T13043] team_slave_0: entered promiscuous mode [ 245.562222][T13043] team_slave_1: entered promiscuous mode [ 245.582462][T13043] geneve0: entered promiscuous mode [ 245.597110][T13049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1947'. [ 245.613152][T13043] bridge0: port 3(team0) entered blocking state [ 245.619691][T13043] bridge0: port 3(team0) entered forwarding state [ 245.765606][T13056] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1950'. [ 245.870994][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1952'. [ 246.204582][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 246.236664][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 246.636658][T13111] netlink: 'syz.3.1965': attribute type 10 has an invalid length. [ 246.647948][T13111] x_tables: duplicate underflow at hook 3 [ 247.244536][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 247.395103][ T1138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 247.399969][T13161] netlink: 'syz.3.1978': attribute type 8 has an invalid length. [ 247.808087][T13181] syzkaller0: entered promiscuous mode [ 247.816796][T13181] syzkaller0: entered allmulticast mode [ 248.294605][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 248.506672][ T1138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 249.246598][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 249.329021][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 249.467100][T13219] __nla_validate_parse: 40 callbacks suppressed [ 249.467124][T13219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1991'. [ 249.635562][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 249.796834][T13244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1999'. [ 249.808149][T13246] netlink: 'syz.3.2001': attribute type 1 has an invalid length. [ 249.824221][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2001'. [ 249.967026][T13264] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 250.019919][T13264] syz.2.2005 (13264) used greatest stack depth: 17976 bytes left [ 250.252672][T13280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.364800][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 250.396970][T13285] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2011'. [ 250.408541][T13285] tipc: Invalid UDP bearer configuration [ 250.408595][T13285] tipc: Enabling of bearer rejected, failed to enable media [ 250.477816][T13286] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 250.497634][T13285] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 250.640838][ T1149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.660648][ T1149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.729785][T13297] netem: change failed [ 250.766473][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 250.781887][ T1149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.792556][ T1149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.883237][ T1149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.913873][ T1149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.936689][T13300] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2014'. [ 251.003050][T13302] netlink: 'syz.2.2015': attribute type 2 has an invalid length. [ 251.039225][ T1149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.056493][ T1149] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.404670][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 251.416379][ T1149] batadv1: left allmulticast mode [ 251.425441][ T1149] batadv1: left promiscuous mode [ 251.431951][ T1149] bridge0: port 3(batadv1) entered disabled state [ 251.567623][ T1149] bridge_slave_1: left allmulticast mode [ 251.574645][ T1149] bridge_slave_1: left promiscuous mode [ 251.580461][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.683774][ T1149] bridge_slave_0: left allmulticast mode [ 251.690182][ T1149] bridge_slave_0: left promiscuous mode [ 251.708461][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.793948][ T1149] tipc: Resetting bearer [ 251.809307][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.823385][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.827162][T13340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2023'. [ 251.851238][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.862033][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.871291][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.901409][T13340] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2023'. [ 251.946982][ T7622] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 252.126891][ T1149] tipc: Disabling bearer [ 252.316655][T13356] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2024'. [ 252.444682][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 252.627116][ T1149] bond0 (unregistering): Released all slaves [ 252.653692][T13340] gretap1: entered promiscuous mode [ 252.665907][T13340] gretap1: entered allmulticast mode [ 252.812475][ T1149] tipc: Disabling bearer [ 252.839391][ T1149] tipc: Left network mode [ 252.847856][T13335] virt_wifi0 speed is unknown, defaulting to 1000 [ 253.088303][ T1155] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 253.122580][T13377] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2030'. [ 253.183132][T13377] ipt_REJECT: TCP_RESET invalid for non-tcp [ 253.241633][T13381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2032'. [ 253.484551][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 253.762456][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.789597][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.826924][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.846850][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.893143][ T1149] veth1_macvtap: left promiscuous mode [ 253.919815][ T1149] veth1_vlan: left promiscuous mode [ 253.929995][ T1149] veth0_vlan: left promiscuous mode [ 253.970473][ T5852] Bluetooth: hci2: command tx timeout [ 254.224958][ T1138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 254.468495][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 254.503665][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 254.534664][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 254.847311][T13422] macvlan3: entered promiscuous mode [ 254.948504][T13335] chnl_net:caif_netlink_parms(): no params data found [ 255.126204][T13444] xt_ecn: cannot match TCP bits for non-tcp packets [ 255.223813][T13453] netlink: 'syz.2.2044': attribute type 2 has an invalid length. [ 255.254254][T13453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2044'. [ 255.345900][ T1155] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.460426][T13335] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.478575][T13466] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 255.493773][T13335] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.523902][T13335] bridge_slave_0: entered allmulticast mode [ 255.564510][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 255.572315][T13335] bridge_slave_0: entered promiscuous mode [ 255.596653][T13335] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.626764][T13335] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.644780][T13335] bridge_slave_1: entered allmulticast mode [ 255.668380][T13335] bridge_slave_1: entered promiscuous mode [ 255.801533][T13480] tipc: Enabling of bearer rejected, failed to enable media [ 255.826678][T13480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2050'. [ 255.835240][T13335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.869568][T13335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.022920][T13492] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2052'. [ 256.053215][ T5852] Bluetooth: hci2: command tx timeout [ 256.163418][T13335] team0: Port device team_slave_0 added [ 256.174129][T13335] team0: Port device team_slave_1 added [ 256.248974][T13488] netlink: zone id is out of range [ 256.254155][T13488] netlink: zone id is out of range [ 256.274576][T13488] netlink: zone id is out of range [ 256.291898][T13488] netlink: zone id is out of range [ 256.301324][T13488] netlink: zone id is out of range [ 256.311187][T13488] netlink: zone id is out of range [ 256.319847][T13488] netlink: zone id is out of range [ 256.339355][T13335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.368110][T13335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.411879][T13335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.465298][ T7622] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 256.481263][T13335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.489896][T13335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.517047][T13335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.705740][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2059'. [ 256.741085][T13335] hsr_slave_0: entered promiscuous mode [ 256.765785][T13335] hsr_slave_1: entered promiscuous mode [ 256.772210][T13335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.793152][T13335] Cannot create hsr debugfs directory [ 257.013608][T13533] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 257.034366][T13533] team0: Device ipvlan2 is already an upper device of the team interface [ 257.127578][T13551] x_tables: duplicate underflow at hook 2 [ 257.343740][T13557] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2068'. [ 257.361717][T13556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2069'. [ 257.474894][T13556] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2069'. [ 257.604663][ T1155] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 258.136131][ T5852] Bluetooth: hci2: command tx timeout [ 258.671594][T13634] netem: change failed [ 258.694471][ C0] net_ratelimit: 13 callbacks suppressed [ 258.694491][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 258.726362][ T1138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 258.750502][T13638] Bluetooth: MGMT ver 1.23 [ 259.047016][T13335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 259.077516][T13649] Unsupported ieee802154 address type: 0 [ 259.099354][T13335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 259.158286][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2091'. [ 259.166416][T13335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 259.188786][T13654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2092'. [ 259.219599][T13652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2091'. [ 259.229136][T13335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 259.358977][T13652] sctp: [Deprecated]: syz.2.2091 (pid 13652) Use of int in maxseg socket option. [ 259.358977][T13652] Use struct sctp_assoc_value instead [ 259.603868][T13335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.679410][T13335] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.724525][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 259.744376][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.751605][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.835176][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.842466][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.887040][ T7622] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 260.069523][T13698] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 260.204834][ T5852] Bluetooth: hci2: command tx timeout [ 260.468300][T13715] __nla_validate_parse: 1 callbacks suppressed [ 260.468324][T13715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2106'. [ 260.548318][T13715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2106'. [ 260.614007][T13335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.764633][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 260.856606][T13335] veth0_vlan: entered promiscuous mode [ 260.908912][T13335] veth1_vlan: entered promiscuous mode [ 261.027351][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 261.043287][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2110'. [ 261.061304][T13335] veth0_macvtap: entered promiscuous mode [ 261.092848][T13335] veth1_macvtap: entered promiscuous mode [ 261.149663][T13335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.181177][T13335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.201489][T13335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.223347][T13335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.262046][T13335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.308054][T13335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.339898][T13335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.368256][T13335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.380458][T13756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2113'. [ 261.395865][T13335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.414375][T13335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.429659][T13335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.440768][T13335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.460771][T13756] hsr_slave_0: left promiscuous mode [ 261.499952][T13756] hsr_slave_1: left promiscuous mode [ 261.804545][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 261.815793][T13774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2119'. [ 261.867647][T13776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2120'. [ 261.998408][T13774] xt_CT: No such helper "pptp" [ 262.056288][ T7622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.064184][ T7622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.186219][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.197785][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 262.221173][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.459461][T13802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2126'. [ 262.844602][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 263.352146][ T7622] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 263.619394][T13854] nbd: couldn't find a device at index 8960 [ 263.665895][T13859] nbd: must specify an index to disconnect [ 263.699020][T13863] nbd: must specify an index to disconnect [ 263.882370][T13873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2139'. [ 263.894533][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 264.252998][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.264056][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.273399][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.283317][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.291271][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.355304][T13894] virt_wifi0 speed is unknown, defaulting to 1000 [ 264.528457][ T7622] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.771310][T13894] chnl_net:caif_netlink_parms(): no params data found [ 264.924536][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 265.024181][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2148'. [ 265.069558][T13915] netlink: 'syz.2.2145': attribute type 8 has an invalid length. [ 265.439187][T13894] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.458798][T13894] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.477463][T13947] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2153'. [ 265.494904][T13894] bridge_slave_0: entered allmulticast mode [ 265.508999][T13894] bridge_slave_0: entered promiscuous mode [ 265.529444][T13894] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.558194][T13894] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.573563][T13948] netlink: 'syz.4.2152': attribute type 10 has an invalid length. [ 265.595324][T13894] bridge_slave_1: entered allmulticast mode [ 265.621136][T13894] bridge_slave_1: entered promiscuous mode [ 265.665402][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 265.742127][T13894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.753526][T13956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2155'. [ 265.780159][T13956] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2155'. [ 265.790407][T13960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2156'. [ 265.803868][T13894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.836421][T13960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2156'. [ 265.939279][T13894] team0: Port device team_slave_0 added [ 265.967091][T13894] team0: Port device team_slave_1 added [ 265.974474][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 266.048780][T13972] netlink: 'syz.1.2158': attribute type 3 has an invalid length. [ 266.060760][T13973] x_tables: unsorted entry at hook 3 [ 266.119008][T13975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2160'. [ 266.149031][T13894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.174609][T13894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.211577][T13979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2161'. [ 266.242528][T13894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.295059][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2162'. [ 266.364586][ T55] Bluetooth: hci2: command tx timeout [ 266.405333][T13894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.412345][T13894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.524047][T13894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.748002][T13894] hsr_slave_0: entered promiscuous mode [ 266.786367][T13894] hsr_slave_1: entered promiscuous mode [ 266.801942][T13894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.816554][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.842340][T13894] Cannot create hsr debugfs directory [ 266.868032][T14015] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2166'. [ 267.004493][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 267.303044][T14033] [H: renamed from veth0_vlan (while UP) [ 267.366514][T14038] tipc: Enabled bearer , priority 10 [ 267.561207][T13894] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.785192][T13894] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.951624][T13894] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.015622][ T7622] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 268.034098][T14066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2178'. [ 268.044521][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 268.063761][T14066] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 268.174879][T13894] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.225474][T14078] netlink: 'syz.1.2182': attribute type 10 has an invalid length. [ 268.295036][T14078] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 268.299249][T14082] netlink: 'syz.4.2181': attribute type 39 has an invalid length. [ 268.342259][T14084] hsr0: entered allmulticast mode [ 268.347485][T14084] team0: entered allmulticast mode [ 268.353762][T14084] batadv_slave_1: entered allmulticast mode [ 268.399479][T14086] netlink: 'syz.0.2184': attribute type 3 has an invalid length. [ 268.447701][ T55] Bluetooth: hci2: command tx timeout [ 268.539888][T14097] netlink: 'syz.2.2186': attribute type 1 has an invalid length. [ 268.550119][T14098] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 268.818331][T13894] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 268.857391][T13894] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 268.998003][T13894] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 269.063806][T13894] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 269.084823][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 269.131437][ T82] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 269.489278][T13894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.608618][T13894] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.628504][T14146] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 269.661382][T14146] 0ªX¹¦Dö»: entered allmulticast mode [ 269.720942][T14146] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 269.760748][T14146] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 269.795413][T14146] gretap0: entered promiscuous mode [ 269.800681][T14146] gretap0: entered allmulticast mode [ 269.880603][ T7622] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.887922][ T7622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.909196][T14167] delete_channel: no stack [ 269.945918][ T7622] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.953109][ T7622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.124637][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 270.139238][T13894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.277426][ T7622] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 270.515620][T14207] __nla_validate_parse: 4 callbacks suppressed [ 270.515642][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2205'. [ 270.534473][ T55] Bluetooth: hci2: command tx timeout [ 270.699140][T14218] ksmbd: Unknown IPC event: 3, ignore. [ 270.822116][T13894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.899546][T14227] netlink: 'syz.4.2214': attribute type 21 has an invalid length. [ 270.908947][T14227] netlink: 'syz.4.2214': attribute type 11 has an invalid length. [ 270.982721][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2213'. [ 270.994241][T13894] veth0_vlan: entered promiscuous mode [ 271.011755][T13894] veth1_vlan: entered promiscuous mode [ 271.164633][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 271.168273][T13894] veth0_macvtap: entered promiscuous mode [ 271.175833][T14234] syz.4.2216 (14234) used obsolete PPPIOCDETACH ioctl [ 271.242785][T13894] veth1_macvtap: entered promiscuous mode [ 271.370639][T13894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.386828][T13894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.397383][T13894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.417460][ T7622] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 271.428851][T13894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.443656][T13894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.460074][T13894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.490700][T13894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.522020][T13894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.527592][T14250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2219'. [ 271.567515][T13894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.574547][T14251] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 271.597403][T13894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.605136][T14250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2219'. [ 271.629717][T13894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.634713][T14250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2219'. [ 271.667152][T13894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.669822][T14250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2219'. [ 271.680529][T13894] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.693497][T14250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2219'. [ 271.703555][T14250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2219'. [ 271.723702][T13894] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.734093][T13894] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.749887][T13894] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.761188][T14250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2219'. [ 271.788387][T14250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2219'. [ 272.043796][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.053630][T14264] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:6 [ 272.070247][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.153922][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.170096][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.204527][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 272.219532][T14271] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 272.609298][ T55] Bluetooth: hci2: command tx timeout [ 272.612474][ T7623] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 272.742908][T14294] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 272.758108][T14294] 0ªX¹¦Dö»: entered allmulticast mode [ 272.801769][T14294] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 272.816968][T14294] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 272.852076][T14294] gretap0: entered promiscuous mode [ 272.868447][T14294] gretap0: entered allmulticast mode [ 273.254645][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 273.558002][T14327] netlink: 'syz.1.2238': attribute type 178 has an invalid length. [ 273.764897][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 274.063669][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.072496][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.089068][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.114319][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.122762][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.287787][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 274.903175][ T7623] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 275.334576][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 275.593588][T14347] virt_wifi0 speed is unknown, defaulting to 1000 [ 275.941977][T14366] can: request_module (can-proto-0) failed. [ 275.962447][T14372] __nla_validate_parse: 64 callbacks suppressed [ 275.962469][T14372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2252'. [ 276.026755][ T7622] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 276.108520][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2254'. [ 276.152595][T14380] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 276.212017][ T5852] Bluetooth: hci2: command tx timeout [ 276.223457][T14380] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2253'. [ 276.279930][T14380] netlink: zone id is out of range [ 276.285469][T14380] netlink: zone id is out of range [ 276.290622][T14380] netlink: get zone limit has 8 unknown bytes [ 276.338834][T14347] chnl_net:caif_netlink_parms(): no params data found [ 276.364620][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 276.801179][T14421] netem: change failed [ 276.829530][T14347] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.842365][T14347] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.853234][T14347] bridge_slave_0: entered allmulticast mode [ 276.861213][T14347] bridge_slave_0: entered promiscuous mode [ 276.871424][T14347] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.879423][T14347] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.887671][T14347] bridge_slave_1: entered allmulticast mode [ 276.897273][T14347] bridge_slave_1: entered promiscuous mode [ 276.955201][T14347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.988976][T14347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.102026][T14347] team0: Port device team_slave_0 added [ 277.133730][T14347] team0: Port device team_slave_1 added [ 277.205756][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 277.233954][T14347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.257095][T14347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.286862][T14347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.300259][T14347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.319761][T14347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.350657][T14347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.404818][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 277.495121][T14347] hsr_slave_0: entered promiscuous mode [ 277.507939][T14347] hsr_slave_1: entered promiscuous mode [ 277.518307][T14347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.531771][T14347] Cannot create hsr debugfs directory [ 277.923515][T14465] netlink: 'syz.1.2275': attribute type 3 has an invalid length. [ 277.939989][T14465] netlink: 'syz.1.2275': attribute type 1 has an invalid length. [ 278.285386][ T5852] Bluetooth: hci2: command tx timeout [ 278.344651][ T1138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 278.444475][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.829616][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2282'. [ 279.225159][T14497] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.233984][T14497] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.243650][T14497] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.253504][T14497] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.276852][T14497] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.285951][T14497] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.295495][T14497] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.304462][T14497] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.315049][T14503] netlink: 'syz.0.2283': attribute type 1 has an invalid length. [ 279.410593][T14503] bond4: entered promiscuous mode [ 279.417766][T14503] 8021q: adding VLAN 0 to HW filter on device bond4 [ 279.461296][T14506] 8021q: adding VLAN 0 to HW filter on device bond4 [ 279.475945][T14506] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 279.488514][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 279.493131][T14506] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 279.496453][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 279.513715][T14506] bond4: (slave ip6gre2): making interface the new active one [ 279.521780][T14506] ip6gre2: entered promiscuous mode [ 279.529332][T14506] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 279.670895][T14515] macvlan2: entered promiscuous mode [ 279.689872][T14515] bridge0: entered promiscuous mode [ 279.696914][T14520] netlink: 'syz.0.2287': attribute type 1 has an invalid length. [ 279.713755][T14512] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 279.720063][T14518] macvlan3: entered promiscuous mode [ 279.746385][T14520] mac80211_hwsim hwsim6 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 279.850699][T14347] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.985656][T14347] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.119395][T14347] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.154624][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2289'. [ 280.183891][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2289'. [ 280.282138][T14347] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.364821][ T5852] Bluetooth: hci2: command tx timeout [ 280.534620][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 280.645246][ T1138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 280.739721][T14347] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 280.806976][T14347] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.831867][T14570] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2298'. [ 280.872203][T14347] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 280.899681][T14568] raw_sendmsg: syz.1.2297 forgot to set AF_INET. Fix it! [ 280.922000][T14347] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.980676][T14571] vlan0: entered promiscuous mode [ 281.232276][T14589] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2302'. [ 281.303049][T14597] geneve2: entered promiscuous mode [ 281.315062][T14597] geneve2: entered allmulticast mode [ 281.337166][T14597] pimreg1: port 1(geneve2) entered blocking state [ 281.359659][T14597] pimreg1: port 1(geneve2) entered disabled state [ 281.574622][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 281.614712][T14347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.716375][T14347] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.772967][ T7622] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.780177][ T7622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.795103][ T1138] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 281.805914][ T7622] wlan0: Trigger new scan to find an IBSS to join [ 281.806634][T14619] tipc: Trying to set illegal importance in message [ 281.823453][ T7622] ------------[ cut here ]------------ [ 281.829106][ T7622] WARNING: CPU: 1 PID: 7622 at net/mac80211/scan.c:1213 ieee80211_request_ibss_scan+0x735/0x7c0 [ 281.839033][T14619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2308'. [ 281.840057][ T7622] Modules linked in: [ 281.854631][ T7622] CPU: 1 UID: 0 PID: 7622 Comm: kworker/u8:8 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 281.867738][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 281.878237][ T7622] Workqueue: events_unbound cfg80211_wiphy_work [ 281.886764][ T7622] RIP: 0010:ieee80211_request_ibss_scan+0x735/0x7c0 [ 281.893402][ T7622] Code: e8 00 ff 2a f6 eb 05 e8 f9 fe 2a f6 b8 ea ff ff ff e9 f0 f9 ff ff e8 ea fe 2a f6 90 0f 0b 90 e9 b0 f9 ff ff e8 dc fe 2a f6 90 <0f> 0b 90 eb dd 48 c7 c1 60 0f 60 90 80 e1 07 80 c1 03 38 c1 0f 8c [ 281.913591][ T7622] RSP: 0018:ffffc9001a877880 EFLAGS: 00010293 [ 281.921489][ T7622] RAX: ffffffff8b986694 RBX: 0000000000000000 RCX: ffff88807f033c00 [ 281.930620][ T7622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.938973][ T7622] RBP: ffffc9001a877ac0 R08: ffffffff8b9864ae R09: 1ffffffff20bfc0e [ 281.947640][ T7622] R10: dffffc0000000000 R11: fffffbfff20bfc0f R12: 0000000000000006 [ 281.955697][ T7622] R13: 0000000000000c80 R14: dffffc0000000000 R15: ffff88807b9b8e80 [ 281.963705][ T7622] FS: 0000000000000000(0000) GS:ffff888125096000(0000) knlGS:0000000000000000 [ 281.972799][ T7622] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.980033][ T7622] CR2: 00007fb9817d1378 CR3: 0000000061256000 CR4: 00000000003526f0 [ 281.983743][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2307'. [ 281.988056][ T7622] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 281.988075][ T7622] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 281.988091][ T7622] Call Trace: [ 281.988101][ T7622] [ 281.988129][ T7622] ieee80211_ibss_work+0xe2b/0x14e0 [ 281.988157][ T7622] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 281.988180][ T7622] ? lockdep_hardirqs_on+0x9d/0x150 [ 281.988219][ T7622] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 281.988259][ T7622] ? ieee80211_iface_work+0x1050/0x1100 [ 281.988291][ T7622] ? rcu_is_watching+0x15/0xb0 [ 281.988325][ T7622] cfg80211_wiphy_work+0x2f0/0x490 [ 281.988362][ T7622] ? process_scheduled_works+0x9cb/0x18e0 [ 281.988387][ T7622] process_scheduled_works+0xac3/0x18e0 [ 281.988454][ T7622] ? __pfx_process_scheduled_works+0x10/0x10 [ 281.988491][ T7622] ? assign_work+0x367/0x3d0 [ 281.988522][ T7622] worker_thread+0x870/0xd50 [ 282.036785][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2307'. [ 282.038874][ T7622] ? __kthread_parkme+0x1a8/0x200 [ 282.101221][ T7622] ? __pfx_worker_thread+0x10/0x10 [ 282.106461][ T7622] kthread+0x7b7/0x940 [ 282.110578][ T7622] ? __pfx_worker_thread+0x10/0x10 [ 282.115761][ T7622] ? __pfx_kthread+0x10/0x10 [ 282.121177][ T7622] ? __pfx_kthread+0x10/0x10 [ 282.127134][ T7622] ? __pfx_kthread+0x10/0x10 [ 282.131782][ T7622] ? __pfx_kthread+0x10/0x10 [ 282.136455][ T7622] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.141686][ T7622] ? lockdep_hardirqs_on+0x9d/0x150 [ 282.147299][ T7622] ? __pfx_kthread+0x10/0x10 [ 282.151938][ T7622] ret_from_fork+0x4b/0x80 [ 282.157072][ T7622] ? __pfx_kthread+0x10/0x10 [ 282.161705][ T7622] ret_from_fork_asm+0x1a/0x30 [ 282.166612][ T7622] [ 282.169683][ T7622] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 282.177004][ T7622] CPU: 1 UID: 0 PID: 7622 Comm: kworker/u8:8 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 282.189180][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 282.199259][ T7622] Workqueue: events_unbound cfg80211_wiphy_work [ 282.205546][ T7622] Call Trace: [ 282.208846][ T7622] [ 282.211802][ T7622] dump_stack_lvl+0x241/0x360 [ 282.216524][ T7622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.221942][ T7622] ? __pfx__printk+0x10/0x10 [ 282.226586][ T7622] ? vscnprintf+0x5d/0x90 [ 282.230941][ T7622] panic+0x349/0x880 [ 282.234855][ T7622] ? __warn+0x174/0x4d0 [ 282.239027][ T7622] ? __pfx_panic+0x10/0x10 [ 282.243472][ T7622] ? ret_from_fork_asm+0x1a/0x30 [ 282.248427][ T7622] __warn+0x344/0x4d0 [ 282.252425][ T7622] ? ieee80211_request_ibss_scan+0x735/0x7c0 [ 282.258422][ T7622] report_bug+0x2b3/0x500 [ 282.262761][ T7622] ? ieee80211_request_ibss_scan+0x735/0x7c0 [ 282.268755][ T7622] ? ieee80211_request_ibss_scan+0x735/0x7c0 [ 282.274752][ T7622] ? ieee80211_request_ibss_scan+0x737/0x7c0 [ 282.280767][ T7622] handle_bug+0x89/0x170 [ 282.285045][ T7622] exc_invalid_op+0x1a/0x50 [ 282.289562][ T7622] asm_exc_invalid_op+0x1a/0x20 [ 282.294418][ T7622] RIP: 0010:ieee80211_request_ibss_scan+0x735/0x7c0 [ 282.301019][ T7622] Code: e8 00 ff 2a f6 eb 05 e8 f9 fe 2a f6 b8 ea ff ff ff e9 f0 f9 ff ff e8 ea fe 2a f6 90 0f 0b 90 e9 b0 f9 ff ff e8 dc fe 2a f6 90 <0f> 0b 90 eb dd 48 c7 c1 60 0f 60 90 80 e1 07 80 c1 03 38 c1 0f 8c [ 282.320633][ T7622] RSP: 0018:ffffc9001a877880 EFLAGS: 00010293 [ 282.326798][ T7622] RAX: ffffffff8b986694 RBX: 0000000000000000 RCX: ffff88807f033c00 [ 282.334778][ T7622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.342806][ T7622] RBP: ffffc9001a877ac0 R08: ffffffff8b9864ae R09: 1ffffffff20bfc0e [ 282.350785][ T7622] R10: dffffc0000000000 R11: fffffbfff20bfc0f R12: 0000000000000006 [ 282.358773][ T7622] R13: 0000000000000c80 R14: dffffc0000000000 R15: ffff88807b9b8e80 [ 282.366758][ T7622] ? ieee80211_request_ibss_scan+0x54e/0x7c0 [ 282.372750][ T7622] ? ieee80211_request_ibss_scan+0x734/0x7c0 [ 282.378759][ T7622] ieee80211_ibss_work+0xe2b/0x14e0 [ 282.383964][ T7622] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 282.389861][ T7622] ? lockdep_hardirqs_on+0x9d/0x150 [ 282.395073][ T7622] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 282.400723][ T7622] ? ieee80211_iface_work+0x1050/0x1100 [ 282.406280][ T7622] ? rcu_is_watching+0x15/0xb0 [ 282.411060][ T7622] cfg80211_wiphy_work+0x2f0/0x490 [ 282.416208][ T7622] ? process_scheduled_works+0x9cb/0x18e0 [ 282.421936][ T7622] process_scheduled_works+0xac3/0x18e0 [ 282.427517][ T7622] ? __pfx_process_scheduled_works+0x10/0x10 [ 282.433512][ T7622] ? assign_work+0x367/0x3d0 [ 282.438115][ T7622] worker_thread+0x870/0xd50 [ 282.442730][ T7622] ? __kthread_parkme+0x1a8/0x200 [ 282.447769][ T7622] ? __pfx_worker_thread+0x10/0x10 [ 282.452886][ T7622] kthread+0x7b7/0x940 [ 282.456981][ T7622] ? __pfx_worker_thread+0x10/0x10 [ 282.462098][ T7622] ? __pfx_kthread+0x10/0x10 [ 282.466699][ T7622] ? __pfx_kthread+0x10/0x10 [ 282.471301][ T7622] ? __pfx_kthread+0x10/0x10 [ 282.475907][ T7622] ? __pfx_kthread+0x10/0x10 [ 282.480511][ T7622] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.485714][ T7622] ? lockdep_hardirqs_on+0x9d/0x150 [ 282.490916][ T7622] ? __pfx_kthread+0x10/0x10 [ 282.495516][ T7622] ret_from_fork+0x4b/0x80 [ 282.499938][ T7622] ? __pfx_kthread+0x10/0x10 [ 282.504541][ T7622] ret_from_fork_asm+0x1a/0x30 [ 282.509323][ T7622] [ 282.512732][ T7622] Kernel Offset: disabled [ 282.517064][ T7622] Rebooting in 86400 seconds..