last executing test programs: 3.305542763s ago: executing program 0 (id=4268): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000400000002", @ANYRESOCT=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="761435c01de88ad0e7ddf93ca6de28a63c9451e5fddf936c06696719f239e7472b4b9dc0c4af809d1d0a059c598ce6509fda9c79c658a6a54d34315cd6dd3b2f3fc252ec34b31eff351e4a4b850c9cc06d49834bc6c65c99ba8296c501da09aee1ab75ddcce70d8e568e82faa96dc9d357045a0f53d89f65d4070501a545cb00f61a1270f5e9243e0d679c1af8591626509fce942f93c7fccc0f41c31d5fa537868fa730afe8efbe81487ceaf8afec7d96ade31d1ad5e786ae90175d08619e7a961d1d3a24547ed002a0bb60bbc2a27bbe1531fa53666968f29089f80ac402b4e6f5222ae3", @ANYBLOB="adc14a21b858caf45b87936997c19b734d559627470653a8327a4cc4e1dda58c6d83ebb2bdac45d89f58ad6aab22e6de73c65c202e9efaf5"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ffb, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000008c0)='syzkaller\x00', 0x4, 0xff8, &(0x7f0000000dc0)=""/4088}, 0x94) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x110, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x96, 0x4, "55482597ece8af3493143ee7b5466061bae15c8c71d605a484048cfd3f36b22420a88b99bf37cefdac7792855dae33d12e86e0a20c7b1f76fd6e93d56ce1b7ad0f85c5265b57cbed581ab14f172b3c3abd511e5a8abe16bd1a6077e6843e8df5b0cf08f6c2f47d9071375b5a2c5dc3875d5e4e413f2804cf9ff495df4871d538419b27eeeff04f25a9d9afe5fa23f9ea23cf"}, @ETHTOOL_A_BITSET_VALUE={0xf, 0x4, "df02ecd19e73c9a1b9790d"}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x51a}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x110}, 0x1, 0x0, 0x0, 0x44855}, 0x10804) 3.267362909s ago: executing program 0 (id=4270): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, 0x0, &(0x7f0000000080)=0xfe66) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r6 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) bind$qrtr(r5, &(0x7f00000002c0)={0x2a, 0x1, 0x2}, 0xc) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r6, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000140)="41000200010001", 0x7) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, &(0x7f00000008c0), 0x0}, 0x20) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x48, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e24, 0xd, @loopback, 0x9}, @in6={0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x7}, 0x6}]}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="7d1068", 0x3) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r9, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_LINK={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x26}, @GTPA_TID={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x44) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a300000000009000300"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) sendmsg$NL802154_CMD_DEL_SEC_DEV(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4800) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.662425644s ago: executing program 0 (id=4281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\b\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x4}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r2, 0x0, 0x0, 0x48094) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) r4 = socket$kcm(0x29, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, 0x0, 0x30) syz_open_procfs$namespace(0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="000027bd7000faffffff01000000"], 0x14}}, 0x8084) unshare(0x62040200) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000580)={0x0, 0xbf, "088f47ee3f5b629e771be93cb44f3093b9dcabbb423f5d954f1c42318d9d4817df219c29a0151aeab070deb59fbfcc937cbedf15df59fbcc298b6732dac2b5d4151bf958d301f846506db2490422f71bd312cc337681fd23e543ad175aa31a145bc405617bed57031d84754027bed8c2a57d32504a3d13ddf200a25befa665eff609d623d0e8f9e087543ffd3fe97d13d69a4740dd659f726c7e9137c563d09810ff3f922155e960bd99c0ef7c3aa8d0dfc49dd8a1d847bc1a86652b7f240e"}, &(0x7f0000000100)=0xc7) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0x47, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x141341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'vlan1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.075472399s ago: executing program 3 (id=4287): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x118, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1000}}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x3, 0x1ff, 0x3a8c, 0x1, 0x2, 0x7, 0x9}}, {0x16, 0x2, [0x0, 0x2, 0x2, 0xfb, 0x8001, 0x80, 0x3, 0x272, 0x35]}}, {{0x1c, 0x1, {0x4, 0x6, 0x9, 0xfffffff8, 0x0, 0x5, 0x1, 0x8}}, {0x14, 0x2, [0x6, 0x2, 0x8, 0xc0, 0x7, 0x1, 0x2, 0x6b1]}}, {{0x1c, 0x1, {0x7, 0x7, 0x9, 0x7, 0x2, 0x6, 0x6, 0x6}}, {0x10, 0x2, [0x0, 0xd, 0x100, 0x2, 0x5, 0x2]}}, {{0x1c, 0x1, {0xb, 0x8d, 0x0, 0x3, 0x2, 0x9, 0x8, 0x2}}, {0x8, 0x2, [0x9, 0x4]}}, {{0x1c, 0x1, {0x6, 0x65, 0xd8d, 0x6, 0x2, 0x4, 0x9, 0x4}}, {0xc, 0x2, [0x9, 0x6, 0x9d, 0x8]}}]}]}, 0x118}}, 0x4000010) 2.019647883s ago: executing program 1 (id=4288): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid_for_children\x00') r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5a, 0x5a, 0x3, [@datasec={0xc, 0x5, 0x0, 0xf, 0x2, [{0x4, 0xff, 0x3}, {0x5, 0x3, 0x44d}, {0x1, 0x7fff, 0x5dc}, {0x2, 0x1, 0x80000001}, {0x4, 0xfffffff9, 0x101}], 'zk'}, @var={0x6, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x5f]}}, &(0x7f0000000400)=""/182, 0x77, 0xb6, 0x0, 0x9}, 0x28) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x4008, r0}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x10001, 0x7, 0x6, 0x2a903, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e140589a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r12) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./file0\x00', 0x0, 0x4018, r0}, 0x18) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x14, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x50d5, 0x0, 0x0, 0x0, 0x5ae}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x80000001, 0x0, &(0x7f0000000300), 0x41100, 0x4, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000500)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x10, 0xd21, 0x6b54c3e3}, 0x10, 0x1037b, 0xffffffffffffffff, 0x1, &(0x7f0000000800)=[r5, r6, r8, r9, r10, r11, r13, 0xffffffffffffffff, r14, r15], &(0x7f0000000840)=[{0x4, 0x4, 0x0, 0xc}], 0x10, 0x1}, 0x94) 1.956272276s ago: executing program 1 (id=4289): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000500000d000000000a00000005000000060000000200000009000000050000ea06000000010000000c00000001"], &(0x7f0000000100)=""/141, 0x4e, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000feffffff0000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0700008500000006000000b708000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="000001b705000008000600850000006a0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002040)=ANY=[@ANYBLOB="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"], 0x24}}, 0x8000) setsockopt$packet_int(r8, 0x107, 0x7, &(0x7f00000003c0)=0x4, 0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r10 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.89898145s ago: executing program 3 (id=4291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r1, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000841}, 0x40) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r3, &(0x7f0000000300)="5d0d2e50c21ff52dc203e0d7e2cff3868ec19a36f30e5e47311f95faf8343d2f5c0f05bf4ff5c49571bae950b3122ca350e5371715c3cca035f752f6bd5d2fe085ed3e7344d71471444e525fbba4b436a1b14752a19557096b8e73ba6b0553ac8b7f73c170edc81452e43f2b062a2dbe0b4fa45e23fc6cc6ba3879570bb3f05e9f958d629b9ba7e1e62decf5bfddd9674862e54f1be9241e9c9e993e9b", 0x9d, 0x4804, &(0x7f00000003c0)={0xa, 0x4e23, 0x8000, @empty, 0x40}, 0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000400)={0x8, 'batadv_slave_1\x00', {'veth0\x00'}, 0xe636}) close(r3) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20048890}, 0xc840) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000008}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x9c, r5, 0x4, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x6, 0xfffb, 0x9, 0xf8, 0x10, 0x3f52, 0x8}, &(0x7f00000008c0)=0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000900)={0x19f, 0x8000, 0x7, 0x2, r7}, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000d00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000980)={0x310, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3e}}}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="02e6d7bec11267311fb75257734b823f63ac2326fb6794a8f02e649cfca6b54f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "93437f13cea386e0"}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c6b58b6fcb682c4b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="da732196e3046d13187319e1530e71f21d90a3c3aefdf70c1027be8a01a11340"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2e5f95f5ec6ce4e8e96240e9f9de6e7a7a164862207f8b1fa2859ea312d6af6c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b9aab815ec02709d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6ab52931b65e2bfbdffb561de8f2b34b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="defc7911e9447fc797a4d99dcc0eb5f7e893d8ed92ccdd89"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="bcf1c004028662ce9672b5b664d4949e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="782ddc4099902f2d16b8f87104555218"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="31d3b4c323cb7f9c174adb10ab982d44f1d550c0f61d3827"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffff7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6ff7eddbe1cadbb1816a59ea5ab4752d"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3f6c791ee483e89fc160ce5536160a96"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37203dc5472eadf2e01918fb6287d21b"}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="82624e3a0ebde585839c9ece4292b1d2fa6af35641567200"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2c5292d0cb48b45655587dcb7cc970f94bd117eaa6f8d6b45990f2faa2431367"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="17653cd591c57d611c68bdbdba498444"}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="96bd306fefc39d246a76f25f6360732e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="cf7484b6a287fb16586ac3d51bae9f95"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5cc2980b8d53fdccb8f3bb287fb830a059ed0308ceb1fdde"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2a43e75a13c8a22108712865c8c003cca610296ebe57622c77acb8a474532a58"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="20228f2b8f6d0490ba11c65075ca886e20f55746732e7de1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="54b3a54a2180377a6e5e61cc48e62796ddb8d19e3a84022a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="74b768f30cc77a8ce787bd372c9d40b79867c55b37eb736219790a2683f656de"}]}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "86565dcf7b29d701"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5ef}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d369577a19e1b6ee652edd33395236df"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0127f9720d814886"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fffffff}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000040) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)=@newqdisc={0x44, 0x24, 0x20, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xffe6, 0x8}, {0xffff}, {0x6, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xe}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x39}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r10, 0x5411, &(0x7f0000000ec0)) sendmmsg$inet6(r6, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000f00)="2e70360e6b31aba7a3339e07f77efb6a0c4efa45f3219bb520e830bb31b03e0f2f6d486dcdb9626b058adf2d836b517cad404a8cee89a200a516f6442d35481c84437e932b7a87ba0ade35c32938fcb6f9945bacbb1b3ed413bed95773ab7c39516633b6468c605f0cd33c8df68c5f503c0e5e4ab73a6e500fe934f5667bb641ddf498e518845bf722f76f6c73819595c3d4a3ec7ef2ba25eac00ae0e17bb7", 0x9f}, {&(0x7f0000000fc0)="547c975701544a23686845dbe5538439564023f1b0f93c", 0x17}, {&(0x7f0000001000)="4ebb0414668ee90f22545cc0859a3fca2f7e3251158222239051f203b83f528c6a6b7b3a0b28c3a3ac9f9a2215", 0x2d}, {&(0x7f0000001040)="502c84058b9031a0d0b46f5cf50dd687f04bda63fb44b99ae8c1577d8429fd06036d616cccccb0eea6d2f606df8ea70021708921ed03a5d975892e14a7a06817e5b775c49685cb17e8f69163ce5f52fac73332a5bb9d3b1de36841d94d6e69c9ad84af62fd3a31e3c109adc10d40bec9189b6e9658ae9582a52d28bf1d992cd579c33e376b59f71787ec148922d299e92329b55bf0a4398ee166f52cc908a8e3d7ec42c850815c7548691847cd81c1343b36eb1034540c90a68491f4489eabba47c2625925c2af41470c8ca2af1f71a3a739565ba7429d93e3bb0dde05b28d4e4336abf5a47df5708c8f45c9fcf00c", 0xef}, {&(0x7f0000001140)="f06999", 0x3}, {&(0x7f0000001180)="5c8cf8cab485582b2229216a29beff17d85ada941bbf4d61a82c0404b75760f8f80e3a9631469c6fe72a124077e946ec677db685b8bf9e6a73040d1906813c0c89631707db8aaf8b35bfc2f90e485b92ce4c7c0cc61c81353a1efb1fcfa078c7b5a5b11a382b230e6ca23a6bfac011440d6de1a25bc88b4f6ee223ded234499d156db050f4ab47b54813057be5", 0x8d}, {&(0x7f0000001240)="a441e249a84d545d85b7d26da5b4c7c4d1e9581a1301ff1c5575a5629b3b30271883669a42c04dd5181f09c60bce1487f0cf2422260244eb6d38ece5a48f01c7abe459a4b222f51f65c3fcb3c05978f5cda86c9975ebac672f068a926a058d55ce510c1dc73aa8f4caf97788ea3d630ef5e78767c16c5d804fa899b33d3d64a77f17b2e28abf663a", 0x88}], 0x7, &(0x7f0000001380)=[@hopopts_2292={{0xf8, 0x29, 0x36, {0x2e, 0x1b, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @jumbo={0xc2, 0x4, 0x63}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x3a69}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @generic={0x5, 0x89, "cde9a656239c29a4cc5d7b66cf472e171af6b0facd22d2ec0832686f916baf0cd261be2387b00041497b2402a7280eb31359470535b0b45afa0565ea66cb59ce8ebccf4ef0aa8323ef700b748fdf9cac6926d234f37e8a2d6912d2568ae910653a15fb7c69f370ccafba624d267966fbc750871a60ffd7581490595cb409ac8afb59c88106003db2d6"}, @pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0x17, 0x1, [0x3]}}]}}}, @hopopts_2292={{0x1b8, 0x29, 0x36, {0x29, 0x33, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x2, 0x4, [0x7, 0x4, 0x2, 0x1, 0x6, 0x2, 0x5217]}}, @generic={0x5, 0x83, "a3fb7c5d442928cecd93ea27cbdba17b3ef7870d290283b620d6e1e3f6c4d186f9868c3b2c2cc79cd0d90ff09bc5b6015956461a55a0593a43181b238c21eac4620cfc8b51b911b5ff65c3dadf10f93a57b5ba34edc57d9a3e6c877d1ff7a0c178bceaa32569c34193cae95571e78fac5387134f1a8f27e228e9cb433cda1dfbb68edf"}, @jumbo={0xc2, 0x4, 0x3}, @generic={0xe, 0x55, "6c7d85529d7468698af31521111b658171fcb87c94fcf8dd7da6543b4adac74341ee85ddaa9a156f8c57b49988c2b7e9d71d4dc4933c7d26b511a01bd47b42e93afd458f6a2b2a453647fdb668caadf2225dc19672"}, @calipso={0x7, 0x20, {0x2, 0x6, 0xbc, 0xff, [0x0, 0x3, 0x5]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x9, 0xf874, [0xdc]}}, @calipso={0x7, 0x18, {0x1, 0x4, 0xa, 0xa630, [0x5, 0x5]}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x50, 0x0, [0xa, 0xb8a, 0x8, 0x3b]}}, @enc_lim={0x4, 0x1, 0x40}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1ff}}, @flowinfo={{0x14, 0x29, 0xb, 0xffffffff}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x3b, 0x8, 0x0, 0x5, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x338}}], 0x1, 0x50) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, r11, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}}, 0xc840) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a80)={&(0x7f00000018c0)={0x19c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x52f5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff5892}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x317}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x73a7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x79}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40014}, 0x41) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000001b00)={r7}, &(0x7f0000001b40)=0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.811572563s ago: executing program 4 (id=4292): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r1 = socket$inet6(0xa, 0x5, 0x1) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000fee000)=0x40000000, 0x4) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f00000011c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000012c0)={'veth0_virt_wifi\x00'}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="5000000010ee733661d100260404000000fcdbdf24ffee0000", @ANYRES32=0x0, @ANYBLOB="adffa8885306000008002800173600801b0024001d5ed7b34109366980eb3e1151969cf6ef7243dde27113000a0002000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0xc080) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000001240)=0x3fa, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r0, @ANYBLOB="a607a9921b4cd7b56ce3961703cf87f24369054a710b8e8151edd7100d3051a86bf9b5d2b14941ccdbcc5354641477febc5d138dbb172d3fdae9bd0ba7846c6e581b792f71dc4788e3decf26c621fcc51daa4d3ed988064c34c5a99cd414281169ddb4147a48bf0d81be063e165a4d49a0e574b3f560ac16bd131bd18f3646bf12ffa03297d319273f85aeb54258f953b9d9b96caa4f8994108686975b6c6f2de94692007ba7089f96da45dc0dada2ad6801fdb1937216e8878a713808487dd2abd02e66e38b6598bd7c1abe11ff823889b7d2ada7", @ANYRES16=r0], 0x24}}, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240440d1}, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0xf088, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES16=r7, @ANYBLOB="010028bd7000000000000c000040180001801400020068657468305f746f5f626f6e640000000c0003805d"], 0x38}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049002100c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd00000020010680d353"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRESHEX=r9, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="addcb223e72e91e6ef9b63600e4ac1f7e00334070b7bf703e89478ec6a9e1e851cd3533a23b1e3ac86f3d7c4fd6844faeea66a4965a5cb9bcff65fa10947507e01ac64796e9f0b26658092391c6247baa67c2d75c1ef98960c48f3802fcb8763d22856c932c47d605f519d135e38ef9f056910087318e98e59c7adeef61e6a9c843ec663053ef93a63a12cfc05b4b64f4e0e29cc473add4b26d6940ed44f09d40a748e971abcf3c3572128fc84dc638d3c163f41d025380ebb8ba36d67b029817e36351e16031b3efcf80656c98bc2492530cda534854582de53864b99e9d65ad4", @ANYRES64=r6, @ANYRES8, @ANYRES8=r8], 0xe8}, 0x1, 0x0, 0x0, 0x2200c000}, 0x2400c0c0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) accept4(r12, 0x0, 0x0, 0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r13, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) 1.654662928s ago: executing program 3 (id=4294): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x16, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x2c, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='|'}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r5, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x74, r6, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x74}}, 0x8000) 1.494826045s ago: executing program 2 (id=4295): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0) write$6lowpan_control(r1, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) preadv(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/89, 0x59}, {0x0}], 0x2, 0x2, 0x3) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x2004c000) 1.44146316s ago: executing program 0 (id=4296): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000030000000e89000000100000", @ANYRES32, @ANYBLOB="fdffffff000000445bb9ffadfebd7000000000008c4bf845bfb63bc5ad3a03501fd6b9503809c63014cd49c7cd37e7d4d008aefa89ef2536dacca2b69a1d8da2be2bd4d2bbdae4be23127c8e77ea0b68fa54d9789de2bd6d5756909eb2d1c9fe6e308245d09cb9c50aafb23534390859d76b6ca7c56aac8b7e767886a415b0ab9cc5b2eb5d4524c72d6e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000a06700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000162, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000e5ff0000000098110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000180)=[{0x0, 0x0, {0x2, 0xf0, 0x1}, {0x1, 0x1}, 0xfd, 0xfd}], 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000f91a36bc07ef8ef8446e8eae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x804, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r6, 0x0, 0x2d, 0x18, @void}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c1000020000007f00"/28], 0x1c}, 0x1, 0x0, 0x0, 0x40440c0}, 0x240000d4) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f0000003500)=[{&(0x7f0000001440)="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", 0xfdc}, {&(0x7f0000000080)="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", 0x137}, {0x0}, {&(0x7f0000001240)="d35c99d267", 0x5}, {0x0}, {&(0x7f0000000300)}, {0x0}, {0x0}, {0x0}], 0x9) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty, 0x1}, 0x1c) sendmsg$inet6(r10, &(0x7f00000005c0)={&(0x7f0000000080)={0xa, 0x4e20, 0x2, @local, 0x3}, 0x1c, 0x0}, 0x20000890) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x7, 0x7, 0xfffffffd, 0x3ff, {{0x29, 0x4, 0x2, 0x8, 0xa4, 0x68, 0x0, 0x3e, 0x0, 0x0, @remote, @empty, {[@rr={0x7, 0x13, 0xf3, [@loopback, @empty, @loopback, @empty]}, @timestamp_prespec={0x44, 0xc, 0x88, 0x3, 0x8, [{@multicast1, 0xf}]}, @timestamp_prespec={0x44, 0x14, 0x15, 0x3, 0x6, [{@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x96, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x36}}]}, @timestamp_prespec={0x44, 0x4c, 0xd8, 0x3, 0x2, [{@remote, 0x2d8}, {@rand_addr=0x64010102, 0x1}, {@remote, 0x8001}, {@remote, 0x9464}, {@remote, 0x400}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@local, 0xb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) accept$inet6(r0, 0x0, &(0x7f0000000380)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000000227bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500231bde25adae7f26e27b12d82df8997ddd52050024001280080001004d726500180002800531438f65000000050013000100000004001200"], 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x20040040) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.423658788s ago: executing program 1 (id=4297): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) (async) close(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0xfffc, 0xc, 0xd, 0x400}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000600)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000280)={r3, 0x29, "816a1a5e5e36fcf6755b2a65cdbc28e52dd71adc0749c504553011e92cdec25148547cbadff8e23634"}, &(0x7f0000000300)=0x31) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000280)={r3, 0x29, "816a1a5e5e36fcf6755b2a65cdbc28e52dd71adc0749c504553011e92cdec25148547cbadff8e23634"}, &(0x7f0000000300)=0x31) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000240)='scalable', 0x8) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7aa3b272}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000) (async) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7aa3b272}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)="8a", 0x1}, {&(0x7f0000001500)='\x00', 0x1}, {&(0x7f0000000700)="af", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000740)='mO', 0x2}], 0x6}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000004c0)="d8", 0x1}, {&(0x7f0000001600)='\x00', 0x1}, {&(0x7f0000000580)="ff", 0x1}, {&(0x7f00000006c0)='y', 0x1}, {&(0x7f0000000100)="f0", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f00000005c0)="11", 0x1}], 0x2}}], 0x4, 0x4000000) write$cgroup_subtree(r0, &(0x7f0000000140)={[{0x2d, 'hugetlb'}, {0x2b, 'blkio'}]}, 0x10) (async) write$cgroup_subtree(r0, &(0x7f0000000140)={[{0x2d, 'hugetlb'}, {0x2b, 'blkio'}]}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) (async) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 1.371224848s ago: executing program 3 (id=4298): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000940000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001a11b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000007000000000000000000000d0a0000000000000001000006040000000000000e"], &(0x7f0000000f40)=""/4089, 0x8b, 0xff9, 0x8}, 0x28) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x320, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) sendmsg$nl_generic(r6, 0x0, 0xc000) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x140, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb46}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x140}, 0x1, 0x0, 0x0, 0x2000014}, 0x0) 1.301761822s ago: executing program 4 (id=4299): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0x0, 0x18}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/22, 0x7, 0xc9100120, 0x0, 0x0) (async) shutdown(r0, 0x1) 1.13927187s ago: executing program 4 (id=4300): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x803, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) (async) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x4) (async) socketpair(0x28, 0x2, 0x233f, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async) unshare(0x6a040000) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x40) (async) close(r4) (async) tee(r1, r5, 0x0, 0x9) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000008000000000000000000e1ff000000000000000000"], 0x48) 1.065013292s ago: executing program 0 (id=4301): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}]}}, &(0x7f0000000f40)=""/4076, 0x32, 0xfec, 0xa, 0x32e}, 0x28) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipmr_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x11}}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipmr_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x90, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x11}}]}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000440006803e00040063636d2861657329"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000440006803e00040063636d2861657329"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x2000000015, 0x80005, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x5, 0x0, 0x0) sendmsg$inet(r8, 0x0, 0x20008864) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r6, 0x1, 0xfffffffc, 0xffffd, {{}, {}, {0x14, 0x19, {0x2, 0x0, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r6, 0x1, 0xfffffffc, 0xffffd, {{}, {}, {0x14, 0x19, {0x2, 0x0, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x12}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 964.930817ms ago: executing program 4 (id=4302): socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x50003}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x12, 0x80000) sendmmsg(r1, &(0x7f0000000480), 0x0, 0xffe0) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0xb3) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/net\x00') ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) unshare(0x6a040000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='W\x00\x00\x00', @ANYRES16, @ANYBLOB="24042dbd7000fcdbdf250200000008000a01050000002c002580050005000a0000000600040009000000050005000900000005000100ef00000005000500"], 0x48}, 0x1, 0x0, 0x0, 0x8845}, 0x40050) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0) close(r7) 892.675491ms ago: executing program 0 (id=4303): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002200010600000000a1dd3f6e0c000024"], 0x1c}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001f40), &(0x7f0000001f80)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x9, @remote, 0x5}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000002c0)={0x4, [0x6, 0x5d39, 0x1000, 0xfff9]}, 0xc) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000200)={'wlan1\x00', {0x2, 0x0, @loopback}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000080)={0x0, 'netpci0\x00', {}, 0x3}) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0xc000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4004000) 756.916425ms ago: executing program 2 (id=4304): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) unshare(0x22020400) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$pptp(0x18, 0x1, 0x2) 553.066453ms ago: executing program 2 (id=4305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) (async, rerun: 32) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000980)={0x6, @dev={0xac, 0x14, 0x14, 0xf}, 0x4e22, 0x4, 'lblcr\x00', 0x20, 0x7, 0x41}, 0x2c) 443.484854ms ago: executing program 1 (id=4306): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x308, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073112e00000000008510000002002b0e00000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r5) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000040)=0xc) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={@private2, 0x29, r8}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ec0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4affeeaf541d002007000000", @ANYRES32=r11, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r13, @ANYRES32=r13], 0x44}}, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r16, r15, 0x25, 0x0, @void}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xc4, r6, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000000}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x50}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 386.785237ms ago: executing program 2 (id=4307): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x6e34, 0x4, 0x10, 0xffffffa6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0x108) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e27, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e22, @local}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) accept4$unix(r4, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x800) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x11, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e22, 0x6, 'fo\x00', 0x10, 0x80002, 0x2a}, 0x2c) 253.180221ms ago: executing program 2 (id=4308): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0x1}]}, {0x0, [0x2e]}}, &(0x7f00000000c0)=""/48, 0x2b, 0x30, 0x1, 0x6, 0x10000}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x1, 0xbf27, 0x2500, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x0, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x48, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x21) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x24}, 0x50) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) 251.477687ms ago: executing program 1 (id=4309): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000040)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$packet(r1, &(0x7f0000000340)={0x11, 0x1a, r2, 0x1, 0xfb}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r3}, 0x18) 219.157366ms ago: executing program 3 (id=4310): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000107010200000000000001000500000514000783080001400000ec5e080002400000007fec1dda874d70a8b6cdc133279c37f6da8a70dd07bb1f1553d1f1e5c40c3a9089bec0537c8de966d1b6017bf24573a30ec702568430c4d87f2bfd6bbf2eaf8940fa8963f813bd762f5318784b1feec2ce67a8557bc6dd7df18437defbc3e25b00a2b513851b6c7d509c114a7cd9cd3656ba33e031812c800ccfd7a35e507c7705008be2ea2a6f35446182b31f3176d814a3c9f99bfaac6425159dc45b2d239928fb53047a78072c5a"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) (async) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) r2 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000012c0), &(0x7f0000001300)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d00000000009500030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) poll(0x0, 0x0, 0x7) (async) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)=r1}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x0, 0x5}, {0xb, 0x4}, {0x9, 0x2}, {0x8, 0x2}, {0xf, 0x1}, {0xd, 0x4}, {0x1}, {0xb, 0x3}, {0x6, 0x1}]}]}, {0x0, [0x0, 0x2e, 0x61, 0x0, 0x0, 0x2e, 0x5f]}}, &(0x7f0000000ec0)=""/225, 0x75, 0xe1, 0x0, 0x1}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x5, 0x550, 0x2, 0x3, 0x1, 0x1, 0xffff0000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x11, 0xd, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffe}, [@exit, @call={0x85, 0x0, 0x0, 0x6a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000e00)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000002380)=""/4096, 0x41000, 0x40, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001000)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001040)={0x4, 0x3, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001100)=[r6, r3], &(0x7f00000011c0)=[{0x3, 0x2, 0x7, 0x3}, {0xffffffff, 0x3, 0xf, 0x8}], 0x10, 0x1}, 0x94) (async) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="200000000000000029000000360000003c01000000000000010009000502000418000000000000002900360001001600000000000000400000000000000029000000360000003304000000000000000041c9102001000000000000000000000000000200000000cb5c6095c57dd1aaea2edc4abd4291ba4baa1ee2be97ae8a9e043d6ca77312c677716ccf19cec84e0343f68aec00e5fe6389d87a270c5f38c02ec3d3512afc0bab68fb2a212b1262e765f468c139540b36"], 0x78}}], 0x2, 0x4040005) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000010000107000004416f1800000a0000000c0002006e6c383032313100"], 0x20}}, 0x0) (async) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r9, 0x112, 0x13, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) listen(r0, 0x1ad72f7) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000580)={{0x2, 0x4e22, @broadcast}, {0x6, @remote}, 0x18, {0x2, 0x4e24, @remote}, 'macsec0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 182.807468ms ago: executing program 1 (id=4311): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = socket(0x1, 0x80802, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r9) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="00022bbd7000fedbdf25620000000c0099003d00000077000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000c4) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r2, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r11, 0x0, 0xd}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r12, 0x5760, 0x0) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r13, 0x89e0, &(0x7f0000000000)={'ip6gre0\x00', 0x3, 0x200}) 100.900642ms ago: executing program 2 (id=4312): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000006100)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/98, 0x62}], 0x1, &(0x7f0000001640)=""/106, 0x6a}, 0x100}, {{0x0, 0xfffffffffffffffd, &(0x7f0000001f40)=[{&(0x7f0000001900)=""/206, 0xce}], 0x1}, 0x9}], 0x2, 0x22222, 0x0) close(r2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)={0x3, 'tunl0\x00', {0xa}, 0x7f}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_proto_private(r6, 0x89e8, &(0x7f0000000800)="698a2672b79e2fb01cef96fecc7ae067fce2cfd0f3602d862370c6378b5d7fb302824f37b960a950") ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000500)={0x1d, r7}, 0x10) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x40, 0x4, {0x15, 0x4, 0x2, 0x1, 0x4, 0x67, 0x5, 0x5, 0x67, 0x598f, @local, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0xd6, 0x1, 0x3, [{@multicast2, 0xbede}, {@private=0xa010102, 0x2}, {@local, 0xb0e9}, {@loopback, 0x4}, {@private=0xa010100, 0xf}, {@broadcast, 0xfffffffa}]}, @cipso={0x86, 0x6, 0x1}]}}}}}}}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000008c0)={'veth1_to_bridge\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={r12, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000900)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000a00)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000780)={'erspan0\x00', r13, 0x20, 0x8791, 0x1000, 0x2906, {{0x17, 0x4, 0x1, 0x2b, 0x5c, 0x66, 0x0, 0xa, 0x4, 0x0, @loopback, @local, {[@timestamp={0x44, 0x8, 0x9b, 0x0, 0x1, [0x3]}, @noop, @timestamp_addr={0x44, 0x3c, 0xc9, 0x1, 0x6, [{@private=0xa010102}, {@multicast2, 0xbcee}, {@multicast2, 0xa}, {@private=0xa010100}, {@rand_addr=0x64010101, 0x80}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x2}, {@private=0xa010100, 0xef21}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xd8, 0x0, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0xc, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4400c001}, 0x4000000) unshare(0x400) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 99.995698ms ago: executing program 3 (id=4313): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000000000080300000000002e00"], &(0x7f0000000240)=""/220, 0x28, 0xffffffffffffff4f, 0xa}, 0x28) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4845}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf250300000074683a6970366772653000"/34], 0x28}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10f64d0002fefffffffcdbdf250f0000001c00038008000200010000000800010009000000ff000000050000b344df3cb591383de4736f34928a48cf00"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x7e, 0x25, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x0, 0x460c6}, 0x1, 0x0, 0x25a1, 0x40}}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fbdbdf25210000000800", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00@\x00\x00\x00\x00'], 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 41.320961ms ago: executing program 4 (id=4314): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x350, 0xffffffff, 0x1b0, 0x0, 0xe0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'ip6erspan0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x23, 0x3, 0x2}, 0x2f2, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, {0x3, 0x5, 0x6}, 0x10000}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00', [0xff, 0x0, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0x79, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000002b0377b316cf"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bind$ax25(r1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000540), 0x0, 0xc0) 0s ago: executing program 4 (id=4315): setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0xfff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, r1, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x111588dd26354853}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040080}, 0x40090) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000280)={0x9, {{0x2, 0x4e20, @multicast2}}}, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x12c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x56b}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7fff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x2}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x10}, 0x8004) r6 = accept4(r4, 0x0, &(0x7f0000000540), 0x0) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000580)='}\\(/$/@}]\xc7\\', 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) ioctl$int_in(r0, 0x5421, &(0x7f0000000600)=0x8) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xd8, 0x0, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x401}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xf}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4010}, 0xc0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) recvfrom$inet6(r6, &(0x7f0000000800)=""/4096, 0x1000, 0x42, &(0x7f0000001800)={0xa, 0x4e21, 0x7, @private2, 0x5}, 0x1c) recvfrom$inet6(r6, &(0x7f0000001840)=""/34, 0x22, 0x40000000, &(0x7f0000001880)={0xa, 0x4e21, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x22}, 0x4920}, 0x1c) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f00000018c0)=[@timestamp, @mss={0x2, 0x4}], 0x2) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000001900), 0x4) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a80)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001a40)={@cgroup=r8, 0x31, 0x0, 0x7fffffff, &(0x7f0000001940)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001980)=[0x0, 0x0], &(0x7f00000019c0)=[0x0, 0x0], &(0x7f0000001a00)=[0x0]}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x80608400}, 0xc, &(0x7f0000001c80)={&(0x7f0000001b80)={0xf0, r10, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_REKEY_DATA={0xd4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="15a84ac8a8813b3b0d3b2110256ccc470f8e84c457ce60e8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f961d0bde69d9a0a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7d2f218e88b0279a3c499e6091d27c1a6153afbe1014849ea61d0f7650286108"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c28d0f0bec59a16d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="aac08dc499a01ae894ceaf8c0e6e5d1daa8932ed1152b55e65ef1b190a91f09e"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fefb05851e0b29b5be2041d61a6a7e0f6204ba178f4b61d7"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e8720074b8297cc87149cebe5b38b5fb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="cfc2480ef2d2ac0c67c2f1de2c82eb852dd556afa3721f18"}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x40) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001d00)={0x3b, @empty, 0x4e20, 0x2, 'sh\x00', 0x4, 0x10000, 0x4d}, 0x2c) sendto$inet6(r6, &(0x7f0000001d40)="00bef8913714bcb4e9da7d4bc41bb1615f5c8af1a966f55881cc32cf3e970b09f9788866c19a1494a6cbc6fdde5df1b0959158680f978b7c82c3c0c88f16b648cb65424a7474884d2ff458d3f21af1c13c2a4a4402aea21fefb4ff31e40b097780e69086ed186a776f0c468c3c4b6bbcac34cab3d29c2191348efa950d1bc38011c575d732ab33f50d530c4cfacc01a4979aa2c1072bf1809934049fa2133b604964be", 0xa3, 0x1, &(0x7f0000001e00)={0xa, 0x4e22, 0x2f, @empty, 0x9}, 0x1c) bind$netlink(0xffffffffffffffff, &(0x7f0000001e40)={0x10, 0x0, 0x25dfdbff, 0x80000000}, 0xc) kernel console output (not intermixed with test programs): 383.553647][T16427] x_tables: duplicate entry at hook 1 [ 383.889736][T16441] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2719'. [ 383.945597][T16446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2722'. [ 384.075766][T16460] netlink: 'syz.4.2727': attribute type 4 has an invalid length. [ 384.103537][T16462] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2726'. [ 384.139306][T16463] wg1 speed is unknown, defaulting to 1000 [ 384.166791][T16462] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2726'. [ 384.182453][T16463] wg1 speed is unknown, defaulting to 1000 [ 384.948108][T16501] wg1 speed is unknown, defaulting to 1000 [ 384.977659][T16502] wg1 speed is unknown, defaulting to 1000 [ 385.006692][T16501] wg1 speed is unknown, defaulting to 1000 [ 385.015958][T16502] wg1 speed is unknown, defaulting to 1000 [ 386.230464][T16554] xt_cluster: you have exceeded the maximum number of cluster nodes (2597 > 32) [ 386.287220][T16556] tipc: Enabled bearer , priority 0 [ 386.294619][T16556] syzkaller0: entered promiscuous mode [ 386.300109][T16556] syzkaller0: entered allmulticast mode [ 386.383339][T16556] tipc: Resetting bearer [ 386.427463][T16552] tipc: Resetting bearer [ 386.495867][T16552] tipc: Disabling bearer [ 386.804571][T16591] __nla_validate_parse: 9 callbacks suppressed [ 386.804597][T16591] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2759'. [ 387.066133][T16617] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2764'. [ 387.188115][T16609] wg1 speed is unknown, defaulting to 1000 [ 387.216182][T16609] wg1 speed is unknown, defaulting to 1000 [ 387.242644][T16623] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2768'. [ 387.442980][T16640] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2773'. [ 387.563549][T16643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2773'. [ 387.592397][T16643] nbd: device at index 64 is going down [ 387.661423][T16645] can: request_module (can-proto-4) failed. [ 388.034347][T16683] netlink: 'syz.3.2785': attribute type 7 has an invalid length. [ 388.035783][T16679] rdma_op ffff888052b791f0 conn xmit_rdma 0000000000000000 [ 388.054120][T16683] netlink: 'syz.3.2785': attribute type 8 has an invalid length. [ 388.221689][T16697] xt_CT: You must specify a L4 protocol and not use inversions on it [ 388.221948][T16692] netlink: 'syz.4.2789': attribute type 1 has an invalid length. [ 388.222408][T16697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2791'. [ 388.334892][T16706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2793'. [ 388.441086][T16712] syzkaller1: entered promiscuous mode [ 388.452601][T16716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2796'. [ 388.464273][T16712] syzkaller1: entered allmulticast mode [ 388.694863][T16729] syzkaller1: entered promiscuous mode [ 388.708208][T16729] syzkaller1: entered allmulticast mode [ 388.828342][T16733] tipc: Enabling of bearer rejected, failed to enable media [ 389.105138][T16738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2802'. [ 389.114291][T16738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2802'. [ 389.142361][T16741] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 389.149673][T16741] IPv6: NLM_F_CREATE should be set when creating new route [ 389.156907][T16741] IPv6: NLM_F_CREATE should be set when creating new route [ 389.312435][T16749] 8021q: adding VLAN 0 to HW filter on device bond11 [ 389.458358][T16747] bond11 (unregistering): Released all slaves [ 389.739856][T16766] wg1 speed is unknown, defaulting to 1000 [ 389.758425][T16775] netlink: 'syz.3.2813': attribute type 1 has an invalid length. [ 389.759731][T16766] wg1 speed is unknown, defaulting to 1000 [ 389.773435][T16765] wg1 speed is unknown, defaulting to 1000 [ 389.805567][ T1160] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.816374][ T1160] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.824723][ T5888] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.839039][T16765] wg1 speed is unknown, defaulting to 1000 [ 390.095657][ T5888] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 390.224136][T16793] netlink: 'syz.1.2816': attribute type 1 has an invalid length. [ 390.260121][T16794] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 390.311839][T16795] wg1 speed is unknown, defaulting to 1000 [ 390.328398][T16795] wg1 speed is unknown, defaulting to 1000 [ 390.774773][ T5888] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 390.902120][T16818] syzkaller0: entered promiscuous mode [ 390.919475][T16818] syzkaller0: entered allmulticast mode [ 391.140411][T16826] erspan0: entered promiscuous mode [ 391.146327][T16826] erspan0: entered allmulticast mode [ 391.179643][T16828] dvmrp0: entered allmulticast mode [ 391.469427][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 391.483333][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 391.503268][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 391.513630][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 391.523447][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 391.588028][T16851] bond7: entered promiscuous mode [ 391.593487][T16851] 8021q: adding VLAN 0 to HW filter on device bond7 [ 391.731646][T16854] 8021q: adding VLAN 0 to HW filter on device bond7 [ 391.769058][T16854] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 391.784816][T16854] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 391.844769][T16851] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 391.875152][T16851] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 391.940941][T16845] wg1 speed is unknown, defaulting to 1000 [ 392.002893][T16845] wg1 speed is unknown, defaulting to 1000 [ 392.024716][T16877] __nla_validate_parse: 14 callbacks suppressed [ 392.024734][T16877] netlink: 364 bytes leftover after parsing attributes in process `syz.4.2838'. [ 392.092578][ T1160] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.185616][T16877] netlink: 'syz.4.2838': attribute type 2 has an invalid length. [ 392.217154][ T1160] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.237656][T16881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2838'. [ 392.257460][T16877] !: entered promiscuous mode [ 392.329175][ T1160] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.373238][ T1160] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.391694][T16845] chnl_net:caif_netlink_parms(): no params data found [ 392.486411][T16845] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.493663][T16845] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.501273][T16845] bridge_slave_0: entered allmulticast mode [ 392.516625][T16845] bridge_slave_0: entered promiscuous mode [ 392.534079][T16845] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.541602][T16845] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.549727][T16845] bridge_slave_1: entered allmulticast mode [ 392.558723][T16845] bridge_slave_1: entered promiscuous mode [ 392.583026][ T30] audit: type=1107 audit(1766454667.012:13): pid=16898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='XïP_kBë$@Ÿtï*d¿M›0[«¡d<ûÿZàÜÏëè' [ 392.668605][T16845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.692671][T16895] netlink: 'syz.1.2841': attribute type 1 has an invalid length. [ 392.700612][T16895] net_ratelimit: 45 callbacks suppressed [ 392.700627][T16895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.730078][T16845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.903822][T16845] team0: Port device team_slave_0 added [ 392.934170][T16845] team0: Port device team_slave_1 added [ 392.948332][T16901] wg1 speed is unknown, defaulting to 1000 [ 393.050062][T16901] wg1 speed is unknown, defaulting to 1000 [ 393.575682][ T5833] Bluetooth: hci5: command tx timeout [ 393.814653][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 394.432497][ T1160] bond0 (unregistering): Released all slaves [ 394.547589][ T1160] bond1 (unregistering): Released all slaves [ 394.662386][ T1160] bond2 (unregistering): Released all slaves [ 394.776366][ T1160] bond3 (unregistering): Released all slaves [ 394.793811][T16845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.801327][T16845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.827860][T16845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.857787][ T5888] wg1 speed is unknown, defaulting to 1000 [ 394.885679][ T5888] syz: Port: 1 Link DOWN [ 394.906483][T16845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.913462][T16845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.940181][T16845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.010444][ T1160] æÿîÿ: left promiscuous mode [ 395.090681][ T1160] : left promiscuous mode [ 395.139763][ T1160] !: left promiscuous mode [ 395.167172][T16845] hsr_slave_0: entered promiscuous mode [ 395.174366][T16845] hsr_slave_1: entered promiscuous mode [ 395.182973][T16845] debugfs: 'hsr0' already exists in 'hsr' [ 395.203998][T16845] Cannot create hsr debugfs directory [ 395.269169][ T1160] tipc: Disabling bearer [ 395.280067][ T1160] tipc: Disabling bearer [ 395.293016][ T1160] tipc: Left network mode [ 395.377390][ T1160] IPVS: stopping backup sync thread 9059 ... [ 395.560748][T16936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2851'. [ 395.645347][ T5833] Bluetooth: hci5: command tx timeout [ 396.059934][T16950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2857'. [ 396.078603][T16951] netlink: 'syz.3.2856': attribute type 13 has an invalid length. [ 396.189728][T16951] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 396.202832][T16951] syzkaller0: entered promiscuous mode [ 396.212075][T16951] syzkaller0: entered allmulticast mode [ 396.286443][ T1160] veth0_macvtap: left promiscuous mode [ 396.422397][ T1160] pimreg3 (unregistering): left allmulticast mode [ 396.513422][T16941] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 397.140260][ T1160] lo (unregistering): left allmulticast mode [ 397.191437][ T9673] infiniband syz1: ib_query_port failed (-19) [ 397.248736][T16971] tipc: Enabled bearer , priority 0 [ 397.256087][T16949] tipc: Resetting bearer [ 397.256838][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2862'. [ 397.283894][T16949] tipc: Disabling bearer [ 397.483045][T16845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 397.526155][T16845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 397.604888][T16845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 397.622154][T17002] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 397.624320][T16845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 397.678161][ T1160] IPVS: stop unused estimator thread 0... [ 397.706104][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2872'. [ 397.725515][ T5833] Bluetooth: hci5: command tx timeout [ 397.918698][T17023] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2875'. [ 398.009942][T16845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.050013][T16845] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.064812][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.072038][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.095680][T17033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2876'. [ 398.103139][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.111763][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.202557][T17039] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 398.427997][T17049] bond9 (unregistering): Released all slaves [ 398.455749][T16845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.512522][T16845] veth0_vlan: entered promiscuous mode [ 398.531562][T16845] veth1_vlan: entered promiscuous mode [ 398.572593][T16845] veth0_macvtap: entered promiscuous mode [ 398.582320][T16845] veth1_macvtap: entered promiscuous mode [ 398.601927][T16845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.644158][T16845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.671881][ T8495] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.686982][T17058] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2881'. [ 398.687746][ T8495] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.709373][ T8495] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.721229][ T8495] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.952726][T17067] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2885'. [ 398.971649][ T8513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.994473][ T8513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.051135][ T8495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.061222][ T8495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.399368][T17092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2890'. [ 399.434073][T17087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2825'. [ 399.474501][T17087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2825'. [ 399.534120][T17096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2891'. [ 399.594910][T17085] netlink: 'syz.2.2887': attribute type 10 has an invalid length. [ 399.610516][T17085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.621899][T17085] batadv0: entered promiscuous mode [ 399.629279][T17085] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 399.678228][T17099] bond1: entered promiscuous mode [ 399.683725][T17099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.770442][T17102] vlan0: entered promiscuous mode [ 399.780362][T17102] batadv0: entered promiscuous mode [ 399.804581][ T5833] Bluetooth: hci5: command tx timeout [ 399.878396][T17108] netlink: 'syz.0.2896': attribute type 1 has an invalid length. [ 400.054114][T17112] syzkaller0: entered promiscuous mode [ 400.065704][T17112] syzkaller0: entered allmulticast mode [ 400.152062][T17112] tipc: Enabled bearer , priority 0 [ 400.197733][T17111] tipc: Resetting bearer [ 400.216677][T17123] netlink: 'syz.0.2902': attribute type 1 has an invalid length. [ 400.226083][T17111] tipc: Disabling bearer [ 400.789360][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 400.809787][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 400.818405][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 400.826568][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 400.834206][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 400.856362][T17149] netlink: 'syz.4.2907': attribute type 4 has an invalid length. [ 400.903761][T17148] wg1 speed is unknown, defaulting to 1000 [ 401.238625][T17163] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.336463][T17137] wg1 speed is unknown, defaulting to 1000 [ 401.344353][T17163] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.432506][T17148] chnl_net:caif_netlink_parms(): no params data found [ 401.537490][T17163] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.641344][T17163] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.686268][T17148] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.693569][T17148] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.705562][T17148] bridge_slave_0: entered allmulticast mode [ 401.713391][T17148] bridge_slave_0: entered promiscuous mode [ 401.724295][T17148] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.733746][T17148] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.741562][T17148] bridge_slave_1: entered allmulticast mode [ 401.749334][T17148] bridge_slave_1: entered promiscuous mode [ 401.788405][T17148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.803836][ T8509] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.815715][T17148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.853550][ T8509] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.865906][T17148] team0: Port device team_slave_0 added [ 401.882090][T17148] team0: Port device team_slave_1 added [ 401.888323][ T8509] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.923810][ T8509] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.933042][T17148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.941755][T17148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.968595][T17148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.996137][T17148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.003094][T17148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.029605][T17148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.127041][T17148] hsr_slave_0: entered promiscuous mode [ 402.133354][T17148] hsr_slave_1: entered promiscuous mode [ 402.139496][T17148] debugfs: 'hsr0' already exists in 'hsr' [ 402.145956][T17148] Cannot create hsr debugfs directory [ 402.204901][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 402.483684][T17148] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 402.493582][T17148] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 402.503059][T17148] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 402.512990][T17148] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 402.581131][T17148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.601469][T17148] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.613921][T12506] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.621049][T12506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.635806][T12504] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.642891][T12504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.791575][T17148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.827684][T17148] veth0_vlan: entered promiscuous mode [ 402.838405][T17148] veth1_vlan: entered promiscuous mode [ 402.867340][T17148] veth0_macvtap: entered promiscuous mode [ 402.877078][T17148] veth1_macvtap: entered promiscuous mode [ 402.893172][T17148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.907345][T17148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.920077][T12504] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.929622][T12504] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.938438][ T5833] Bluetooth: hci3: command tx timeout [ 402.946460][T12504] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.956142][T12504] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.020522][T12506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.028681][T12506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.056408][T12504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.065468][T12504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.014530][ T5833] Bluetooth: hci3: command tx timeout [ 407.084778][ T5833] Bluetooth: hci3: command tx timeout [ 409.164523][ T5833] Bluetooth: hci3: command tx timeout [ 418.844598][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 439.967116][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 452.124765][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 455.841583][T17205] : entered promiscuous mode [ 455.848454][T17205] netlink: 'syz.4.2921': attribute type 21 has an invalid length. [ 455.873217][T17205] __nla_validate_parse: 8 callbacks suppressed [ 455.873234][T17205] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2921'. [ 455.891859][T17215] x_tables: duplicate underflow at hook 2 [ 455.997319][T17222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2920'. [ 456.026510][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2920'. [ 456.062939][T17222] netlink: 'syz.3.2920': attribute type 13 has an invalid length. [ 456.152038][T17226] bond2: Removing last ns target with arp_interval on [ 456.383111][T17248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2929'. [ 456.432218][T17248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2929'. [ 456.503643][T17248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2929'. [ 456.530674][T17248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2929'. [ 456.818908][T17264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2935'. [ 457.274612][T17279] SET target dimension over the limit! [ 457.315798][T17281] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2940'. [ 457.776565][T17298] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2944'. [ 457.788958][T17300] geneve2: entered promiscuous mode [ 457.796033][ T8509] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 457.819995][ T8509] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 457.839968][ T8509] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 457.849823][ T8509] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 458.725346][T17332] batadv0: entered allmulticast mode [ 459.517655][T17358] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:19999 [ 459.816951][T17365] wireguard0: entered promiscuous mode [ 459.840252][T17365] wireguard0: entered allmulticast mode [ 459.851942][T17365] team0: Device wireguard0 is of different type [ 460.010838][T17381] wg1 speed is unknown, defaulting to 1000 [ 460.706148][T17399] netlink: 'syz.4.2968': attribute type 1 has an invalid length. [ 460.886890][T17405] tipc: Started in network mode [ 460.899641][T17405] tipc: Node identity ba50770e3f03, cluster identity 4711 [ 460.934262][T17405] tipc: Enabled bearer , priority 0 [ 460.942725][T17394] __nla_validate_parse: 8 callbacks suppressed [ 460.942743][T17394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2969'. [ 460.967078][T17408] syzkaller0: entered promiscuous mode [ 460.972759][T17408] syzkaller0: entered allmulticast mode [ 460.992687][T17416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2973'. [ 461.037882][T17416] bond9: option min_links: invalid value (18446744073709551612) [ 461.046340][T17416] bond9: option min_links: allowed values 0 - 2147483647 [ 461.059237][T17416] bond9 (unregistering): Released all slaves [ 461.090100][T17414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2969'. [ 461.176915][T17394] tipc: Resetting bearer [ 461.183179][T17427] netlink: 'syz.3.2974': attribute type 3 has an invalid length. [ 461.195125][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2974'. [ 461.281116][T17393] tipc: Resetting bearer [ 461.336278][T17393] tipc: Disabling bearer [ 461.430426][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2977'. [ 461.657971][T17452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2984'. [ 461.743948][T17452] bond3: Invalid ad_actor_system MAC address. [ 461.750698][T17452] bond3: option ad_actor_system: invalid value (7) [ 461.768793][T17452] bond3 (unregistering): Released all slaves [ 461.877556][T17469] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 461.895730][T17475] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 461.921839][T17475] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2986'. [ 461.949849][T17469] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2986'. [ 462.011584][ T5833] Bluetooth: hci3: link tx timeout [ 462.022176][ T5833] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 462.046982][ T5835] Bluetooth: hci3: link tx timeout [ 462.052513][ T5835] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 462.060465][T17484] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2990'. [ 462.071098][T17484] ip6gretap0: entered promiscuous mode [ 462.078096][T17484] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2990'. [ 462.740230][T17510] xt_TCPMSS: Only works on TCP SYN packets [ 462.957445][T17521] tipc: Enabled bearer , priority 0 [ 463.165526][T17520] tipc: Disabling bearer [ 463.318466][T17539] syzkaller0: entered promiscuous mode [ 463.330919][T17539] syzkaller0: entered allmulticast mode [ 463.706212][T17564] tipc: Resetting bearer [ 464.045116][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 464.543552][T17594] syzkaller0: entered promiscuous mode [ 464.550242][T17594] syzkaller0: entered allmulticast mode [ 464.992529][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 465.006858][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 465.017927][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 465.025996][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 465.033675][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 465.219096][T17622] tipc: Started in network mode [ 465.228959][T17622] tipc: Node identity ea29d930a086, cluster identity 4711 [ 465.238613][T17622] tipc: Enabled bearer , priority 0 [ 465.252543][T17613] wg1 speed is unknown, defaulting to 1000 [ 465.273831][T17626] syzkaller0: entered promiscuous mode [ 465.300912][T17626] syzkaller0: entered allmulticast mode [ 465.388266][T17622] tipc: Resetting bearer [ 465.484042][T17643] netlink: 'syz.1.3038': attribute type 58 has an invalid length. [ 465.502399][T17638] .70·: renamed from hsr0 [ 465.522647][T17638] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 465.549656][T17638] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 465.562619][T17638] .70·: entered allmulticast mode [ 465.573063][T17638] hsr_slave_0: entered allmulticast mode [ 465.578952][T17638] hsr_slave_1: entered allmulticast mode [ 465.586012][T17638] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 465.626862][T17620] tipc: Resetting bearer [ 465.661822][T17620] tipc: Disabling bearer [ 465.728914][T17651] netlink: 'syz.3.3040': attribute type 1 has an invalid length. [ 465.796291][T17651] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 465.975136][T17672] IPVS: set_ctl: invalid protocol: 135 172.20.20.45:20000 [ 465.996741][T17613] chnl_net:caif_netlink_parms(): no params data found [ 466.162899][T17672] batman_adv: batadv0: Interface deactivated: gretap1 [ 466.207169][T17685] __nla_validate_parse: 10 callbacks suppressed [ 466.207187][T17685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3048'. [ 466.297132][T12506] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.306013][T12506] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 466.315324][T12506] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.323791][T12506] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 466.337970][T12506] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.349192][T12506] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 466.369933][T17687] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 466.403775][T12506] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.413765][T12506] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 466.542963][T17613] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.558000][T17613] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.579462][T17613] bridge_slave_0: entered allmulticast mode [ 466.596449][T17613] bridge_slave_0: entered promiscuous mode [ 466.607039][T17613] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.614266][T17613] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.621675][T17613] bridge_slave_1: entered allmulticast mode [ 466.630086][T17613] bridge_slave_1: entered promiscuous mode [ 466.691777][T17613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.708002][T17613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.748724][T17706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3051'. [ 466.901191][T17711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3052'. [ 467.003117][T17613] team0: Port device team_slave_0 added [ 467.030251][T17613] team0: Port device team_slave_1 added [ 467.094530][ T5835] Bluetooth: hci0: command tx timeout [ 467.232579][T17613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.247731][T17613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.499720][T17613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.625717][T17613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.649241][T17613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.690483][T17613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.867004][T17613] hsr_slave_0: entered promiscuous mode [ 467.873752][T17613] hsr_slave_1: entered promiscuous mode [ 467.888173][T17613] debugfs: 'hsr0' already exists in 'hsr' [ 467.893948][T17613] Cannot create hsr debugfs directory [ 467.966916][T17724] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3056'. [ 468.021346][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3058'. [ 468.052970][T17727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3058'. [ 468.087003][T17729] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3059'. [ 468.147164][T17734] netlink: 'syz.1.3061': attribute type 3 has an invalid length. [ 468.158368][T17734] netlink: 'syz.1.3061': attribute type 3 has an invalid length. [ 468.193849][T17729] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3059'. [ 468.229453][T17730] syzkaller0: entered promiscuous mode [ 468.239920][T17730] syzkaller0: entered allmulticast mode [ 468.298714][T17613] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.365924][T17743] Bluetooth: MGMT ver 1.23 [ 468.388376][T17613] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.450033][T17745] syzkaller0: entered promiscuous mode [ 468.463142][T17745] syzkaller0: entered allmulticast mode [ 468.486816][T17613] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.580678][T17613] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.804745][T17769] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3070'. [ 468.815339][T17769] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3070'. [ 468.831382][T17613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 468.852886][T17613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 468.890059][T17613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 468.910700][T17613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 468.951973][T17772] netlink: 'syz.0.3072': attribute type 27 has an invalid length. [ 468.959927][T17780] netlink: 'syz.3.3073': attribute type 1 has an invalid length. [ 469.032425][T17780] 8021q: adding VLAN 0 to HW filter on device bond11 [ 469.042719][T17789] tipc: Enabled bearer , priority 0 [ 469.052078][T17774] syzkaller0: entered promiscuous mode [ 469.066867][T17774] syzkaller0: entered allmulticast mode [ 469.130377][T17774] tipc: Resetting bearer [ 469.156361][T17791] nbd: device at index 3 is going down [ 469.164740][ T5835] Bluetooth: hci0: command tx timeout [ 469.176091][T17773] tipc: Resetting bearer [ 469.229361][T17773] tipc: Disabling bearer [ 469.274805][T17613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.385041][T17613] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.417680][ T8509] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.424887][ T8509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.447176][ T8509] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.454398][ T8509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.515354][T17806] wg1 speed is unknown, defaulting to 1000 [ 469.627922][T17809] wg1 speed is unknown, defaulting to 1000 [ 469.628903][T17800] syzkaller0: entered promiscuous mode [ 469.649758][T17800] syzkaller0: entered allmulticast mode [ 469.681378][T17808] wg1 speed is unknown, defaulting to 1000 [ 470.025605][T17613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.261981][T17848] wg1 speed is unknown, defaulting to 1000 [ 470.339334][T17851] wg1 speed is unknown, defaulting to 1000 [ 470.497482][T17866] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 470.524693][T17866] openvswitch: netlink: Message has 8 unknown bytes. [ 470.619174][T17613] veth0_vlan: entered promiscuous mode [ 470.633581][T17613] veth1_vlan: entered promiscuous mode [ 470.668492][T17877] vlan0: entered promiscuous mode [ 470.869575][T17613] veth0_macvtap: entered promiscuous mode [ 470.908300][T17613] veth1_macvtap: entered promiscuous mode [ 471.085628][T17613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.111721][T17613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.147881][ T3528] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.244580][ T5835] Bluetooth: hci0: command tx timeout [ 471.255127][ T3528] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.280318][ T3528] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.304157][ T3528] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.466247][T17910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.732414][T17918] __nla_validate_parse: 6 callbacks suppressed [ 471.732432][T17918] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3107'. [ 471.754630][ T8513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.800546][ T8513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.016051][T17927] syzkaller0: entered promiscuous mode [ 472.021649][T17927] syzkaller0: entered allmulticast mode [ 472.220990][ T8513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.243246][ T8513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.452721][T17956] @ÿ: renamed from veth0_vlan [ 472.477378][T17950] netlink: 'syz.3.3113': attribute type 83 has an invalid length. [ 472.532786][T17960] pimreg: entered allmulticast mode [ 472.778406][T17965] pimreg: left allmulticast mode [ 473.111176][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 473.121155][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 473.137923][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 473.154983][T17977] x_tables: duplicate underflow at hook 3 [ 473.161435][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 473.182794][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 473.335051][ T5833] Bluetooth: hci0: command tx timeout [ 473.353823][T17983] openvswitch: netlink: IP tunnel dst address not specified [ 473.380003][T17983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3120'. [ 473.556093][T17989] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3122'. [ 474.713136][T17979] wg1 speed is unknown, defaulting to 1000 [ 474.823357][T18009] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3128'. [ 474.994313][T18009] syzkaller0: entered promiscuous mode [ 475.000282][T18009] syzkaller0: entered allmulticast mode [ 475.020384][T17979] chnl_net:caif_netlink_parms(): no params data found [ 475.098315][T18026] netlink: 'syz.1.3131': attribute type 15 has an invalid length. [ 475.249228][ T5833] Bluetooth: hci4: command tx timeout [ 476.597933][T18036] netlink: 280 bytes leftover after parsing attributes in process `syz.0.3133'. [ 476.746525][T18056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3136'. [ 476.774641][T18056] bond_slave_0: entered promiscuous mode [ 476.780691][T18056] bond_slave_1: entered promiscuous mode [ 476.786761][T18056] macvlan2: entered promiscuous mode [ 476.792070][T18056] bond0: entered promiscuous mode [ 476.800464][T18056] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 476.815358][T17979] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.822672][T17979] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.830049][T17979] bridge_slave_0: entered allmulticast mode [ 476.840669][T17979] bridge_slave_0: entered promiscuous mode [ 476.860312][T17979] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.914954][T17979] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.922271][T17979] bridge_slave_1: entered allmulticast mode [ 476.946511][T17979] bridge_slave_1: entered promiscuous mode [ 477.046213][T17979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.079520][T17979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.146686][T18080] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 477.202484][T18080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3143'. [ 477.307185][T18080] bridge_slave_1: left allmulticast mode [ 477.312881][T18080] bridge_slave_1: left promiscuous mode [ 477.336175][ T5833] Bluetooth: hci4: command tx timeout [ 477.348737][T18080] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.366669][T18080] bridge_slave_0: left allmulticast mode [ 477.380020][T18080] bridge_slave_0: left promiscuous mode [ 477.387173][T18080] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.479744][T17979] team0: Port device team_slave_0 added [ 477.500865][T17979] team0: Port device team_slave_1 added [ 477.602663][T17979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.615604][T17979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.674782][T17979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.699585][T18104] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3147'. [ 477.787028][T17979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.804226][T17979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.846199][T17979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.030097][T17979] hsr_slave_0: entered promiscuous mode [ 478.048206][T17979] hsr_slave_1: entered promiscuous mode [ 478.055751][T17979] debugfs: 'hsr0' already exists in 'hsr' [ 478.061579][T17979] Cannot create hsr debugfs directory [ 478.329311][T18131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3153'. [ 478.500714][T18135] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3153'. [ 478.645210][T17979] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.658278][T17979] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.926624][T17979] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.936631][T17979] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.997164][T18148] tipc: Enabled bearer , priority 0 [ 479.037449][T17979] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.057392][T17979] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.076847][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3160'. [ 479.091606][T18148] tipc: Disabling bearer [ 479.130506][T17979] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.140765][T17979] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.239385][T18163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.404571][ T5833] Bluetooth: hci4: command tx timeout [ 479.517177][T17979] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 479.600441][T17979] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 479.632993][T17979] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 479.652866][T17979] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 479.711514][T18194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3169'. [ 479.721162][T18192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3168'. [ 479.840145][T17979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.898841][T17979] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.923342][T12504] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.930579][T12504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.981948][T12504] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.989170][T12504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.096189][T18205] batadv1: entered promiscuous mode [ 480.120896][T18205] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 480.151545][T18199] x_tables: duplicate underflow at hook 3 [ 480.418334][T18216] wg1 speed is unknown, defaulting to 1000 [ 480.535212][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3176'. [ 480.582687][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3176'. [ 480.679224][T18223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.710096][T18223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 481.116466][T17979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.484654][ T5833] Bluetooth: hci4: command tx timeout [ 481.717680][T17979] veth0_vlan: entered promiscuous mode [ 481.770113][T17979] veth1_vlan: entered promiscuous mode [ 481.848672][T17979] veth0_macvtap: entered promiscuous mode [ 481.863355][T17979] veth1_macvtap: entered promiscuous mode [ 482.014164][T17979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.073870][T17979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.102114][ T3528] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.131835][ T3528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.152808][ T3528] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.171083][ T3528] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.261150][ T6142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.273463][ T6142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.328537][T18276] __nla_validate_parse: 13 callbacks suppressed [ 482.328555][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3190'. [ 482.345152][T18276] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3190'. [ 482.356914][T12504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.358047][T18276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3190'. [ 482.370381][T12504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.775539][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 482.784330][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 482.798734][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 482.808027][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 482.818880][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 482.893277][T18289] wg1 speed is unknown, defaulting to 1000 [ 483.398347][ T9681] IPVS: starting estimator thread 0... [ 483.398474][T18311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3200'. [ 483.488107][T18312] IPVS: using max 35 ests per chain, 84000 per kthread [ 483.582461][T18298] wg1 speed is unknown, defaulting to 1000 [ 483.797798][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3203'. [ 483.858570][T18289] chnl_net:caif_netlink_parms(): no params data found [ 483.890466][T18328] netlink: 'syz.1.3204': attribute type 298 has an invalid length. [ 484.218423][T18350] netlink: 'syz.0.3209': attribute type 13 has an invalid length. [ 484.439769][T18289] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.451172][T18289] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.459237][T18289] bridge_slave_0: entered allmulticast mode [ 484.469074][T18289] bridge_slave_0: entered promiscuous mode [ 484.503156][T18289] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.514611][T18289] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.521907][T18289] bridge_slave_1: entered allmulticast mode [ 484.530281][T18289] bridge_slave_1: entered promiscuous mode [ 484.628016][T18289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.663911][T18289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.719531][T18365] netlink: 'syz.1.3213': attribute type 2 has an invalid length. [ 484.737344][T18289] team0: Port device team_slave_0 added [ 484.748890][T18289] team0: Port device team_slave_1 added [ 484.780944][T18365] : entered promiscuous mode [ 484.808752][T18365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3213'. [ 484.844726][ T5833] Bluetooth: hci1: command tx timeout [ 484.907508][T18289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.909140][T18376] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3215'. [ 484.915332][T18289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.978208][T18289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.009861][T18289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.018592][T18289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.067479][T18381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3216'. [ 485.080107][T18289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.379049][T18289] hsr_slave_0: entered promiscuous mode [ 485.409449][T18289] hsr_slave_1: entered promiscuous mode [ 485.424602][T18289] debugfs: 'hsr0' already exists in 'hsr' [ 485.438307][T18289] Cannot create hsr debugfs directory [ 485.479063][T18376] wg1 speed is unknown, defaulting to 1000 [ 485.710306][T18392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3218'. [ 485.741755][T18392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3218'. [ 485.853933][T18390] bond1: option arp_validate: invalid value (18446744073491447809) [ 485.880552][T18390] bond1 (unregistering): Released all slaves [ 485.908184][T18404] netlink: 'syz.3.3221': attribute type 10 has an invalid length. [ 485.951866][T18404] hsr0: entered promiscuous mode [ 485.967584][T18404] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 485.980622][T18404] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 485.994091][T18404] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 486.386208][T18419] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 486.398225][T18419] bond1 (unregistering): Released all slaves [ 486.587660][T18443] batadv2: entered promiscuous mode [ 486.739776][T18453] wg1 speed is unknown, defaulting to 1000 [ 486.935491][ T5835] Bluetooth: hci1: command tx timeout [ 487.188654][T18466] pimreg: tun_chr_ioctl cmd 2147767506 [ 487.306748][T18289] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 487.332999][T18472] netlink: 'syz.4.3238': attribute type 7 has an invalid length. [ 487.375465][T18472] netlink: 'syz.4.3238': attribute type 8 has an invalid length. [ 487.394583][T18472] __nla_validate_parse: 4 callbacks suppressed [ 487.394603][T18472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3238'. [ 487.586055][T18289] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 487.676153][T18481] veth5: entered promiscuous mode [ 487.717916][T18472] dummy0: entered promiscuous mode [ 487.728205][T18472] ip6gretap0: entered promiscuous mode [ 487.828357][T18472] dummy0: left promiscuous mode [ 487.854607][T18472] ip6gretap0: left promiscuous mode [ 487.933758][T18289] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 487.952211][T18491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3244'. [ 487.980755][T18289] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 487.982223][T18492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3244'. [ 488.005047][T18491] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3244'. [ 488.054569][T18491] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3244'. [ 488.090424][T18491] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3244'. [ 488.102035][T18492] bond4: entered promiscuous mode [ 488.114929][T18492] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.129239][T18491] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3244'. [ 488.161887][T18491] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3244'. [ 488.200506][T18491] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3244'. [ 488.259351][T18491] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3244'. [ 488.290696][T18508] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 488.312624][T18512] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 488.357439][T18289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.367684][T18511] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 488.435384][T18516] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 488.465854][T18289] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.489804][T18518] syzkaller0: entered promiscuous mode [ 488.496474][T18518] syzkaller0: entered allmulticast mode [ 488.508632][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.515841][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.533216][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.540426][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.553461][T18524] ip6erspan0: entered allmulticast mode [ 488.871411][T18289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.933807][T18289] veth0_vlan: entered promiscuous mode [ 488.962213][T18289] veth1_vlan: entered promiscuous mode [ 488.997491][T18289] veth0_macvtap: entered promiscuous mode [ 489.007244][ T5835] Bluetooth: hci1: command 0x040f tx timeout [ 489.010523][T18289] veth1_macvtap: entered promiscuous mode [ 489.038137][T18289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.059619][T18289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.079139][ T8509] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.101350][ T8509] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.140210][ T8509] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.183211][ T8509] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.258605][ T8509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.270901][ T8509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.376932][ T8495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.405790][ T8495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.745703][T18566] netlink: 'syz.2.3192': attribute type 12 has an invalid length. [ 489.961000][T18566] netlink: 'syz.2.3192': attribute type 4 has an invalid length. [ 490.042399][T18577] tipc: Started in network mode [ 490.052280][T18577] tipc: Node identity bed9ae6c1e36, cluster identity 4711 [ 490.085550][T18577] tipc: Enabled bearer , priority 0 [ 490.096904][T18576] tipc: Enabling of bearer rejected, already enabled [ 490.111590][T18578] xt_TPROXY: Can be used only with -p tcp or -p udp [ 490.181234][T18579] syzkaller0: entered promiscuous mode [ 490.194515][T18579] syzkaller0: entered allmulticast mode [ 490.292436][T18579] tipc: Resetting bearer [ 490.323190][T18579] tipc: Disabling bearer [ 490.501707][T18585] netlink: 'syz.3.3269': attribute type 3 has an invalid length. [ 490.712841][T18601] No such timeout policy "syz0" [ 490.767512][T18604] xt_cgroup: xt_cgroup: no path or classid specified [ 490.922900][T18614] ip6tnl0: Caught tx_queue_len zero misconfig [ 490.957061][T18609] syzkaller0: entered promiscuous mode [ 490.962827][T18609] syzkaller0: entered allmulticast mode [ 491.086100][ T5835] Bluetooth: hci1: command 0x040f tx timeout [ 491.175447][T18626] netlink: 'syz.3.3281': attribute type 4 has an invalid length. [ 491.208568][T18626] .`: renamed from bond0 (while UP) [ 491.268556][T18631] netlink: 'syz.4.3282': attribute type 1 has an invalid length. [ 491.433224][T18621] wg1 speed is unknown, defaulting to 1000 [ 491.868053][T18652] syzkaller0: entered promiscuous mode [ 491.877436][T18652] syzkaller0: entered allmulticast mode [ 492.000837][T18658] ieee802154 phy0 wpan0: encryption failed: -22 [ 493.177040][ T5835] Bluetooth: hci1: command 0x040f tx timeout [ 493.575552][T18639] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 493.583290][T18662] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 493.859358][T18679] tipc: Enabled bearer , priority 0 [ 493.924821][T18683] __nla_validate_parse: 68 callbacks suppressed [ 493.924839][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3293'. [ 493.990475][T18689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3293'. [ 494.071651][T18679] syzkaller0: entered promiscuous mode [ 494.080732][T18679] syzkaller0: entered allmulticast mode [ 494.120683][T18683] netlink: 'syz.4.3293': attribute type 4 has an invalid length. [ 494.136678][T18679] tipc: Resetting bearer [ 494.476877][T18710] netlink: 'syz.0.3305': attribute type 2 has an invalid length. [ 494.503309][T18710] : entered promiscuous mode [ 494.553658][T18710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3305'. [ 494.567044][T18712] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3306'. [ 494.668804][T18714] netlink: 'syz.1.3308': attribute type 2 has an invalid length. [ 494.726419][T18678] tipc: Resetting bearer [ 494.742350][T18678] tipc: Disabling bearer [ 494.787356][T18716] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 494.800294][T18716] bond5 (unregistering): Released all slaves [ 494.814649][T18714] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 495.366608][T18743] netlink: 272 bytes leftover after parsing attributes in process `syz.2.3314'. [ 495.513382][T18747] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3316'. [ 495.523324][T18731] wg1 speed is unknown, defaulting to 1000 [ 495.632032][T18753] openvswitch: netlink: Tunnel attr 193 out of range max 16 [ 496.087598][T18778] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3324'. [ 496.119857][T18778] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3324'. [ 496.144997][T18778] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3324'. [ 496.167128][T18778] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3324'. [ 496.447348][T18788] sctp: [Deprecated]: syz.2.3328 (pid 18788) Use of int in max_burst socket option deprecated. [ 496.447348][T18788] Use struct sctp_assoc_value instead [ 496.475513][T18778] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.483255][T18778] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.783619][T18778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.821489][T18778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.183299][ T1131] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.218817][ T1131] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.235236][T18780] wg1 speed is unknown, defaulting to 1000 [ 497.252243][ T1131] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.278791][ T1131] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.895910][ T5835] Bluetooth: hci1: command 0x040f tx timeout [ 498.593474][T18831] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 498.858691][T18853] wg1 speed is unknown, defaulting to 1000 [ 498.997474][T18865] __nla_validate_parse: 165 callbacks suppressed [ 498.997486][T18865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3348'. [ 499.263608][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3350'. [ 499.387217][T18875] syz_tun: entered allmulticast mode [ 499.416153][T18875] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3351'. [ 499.721702][T18875] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.725154][T18889] netlink: 'syz.1.3354': attribute type 4 has an invalid length. [ 499.742366][T18875] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.752967][T18875] .` (unregistering): Released all slaves [ 499.813914][T18874] syz_tun: left allmulticast mode [ 499.906046][T18894] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.3356'. [ 499.937912][T18897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3358'. [ 500.017857][T18897] wg1 speed is unknown, defaulting to 1000 [ 500.165705][T18893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3355'. [ 500.175460][T18893] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 500.205557][T18905] wg1 speed is unknown, defaulting to 1000 [ 500.452369][T18924] netlink: 'syz.4.3366': attribute type 3 has an invalid length. [ 500.542740][T18923] netlink: 'syz.3.3364': attribute type 8 has an invalid length. [ 500.550973][T18923] netlink: 'syz.3.3364': attribute type 9 has an invalid length. [ 500.559164][T18923] netlink: 'syz.3.3364': attribute type 10 has an invalid length. [ 500.567408][T18923] netlink: 'syz.3.3364': attribute type 11 has an invalid length. [ 500.575367][T18923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3364'. [ 500.634088][T18918] wg1 speed is unknown, defaulting to 1000 [ 500.634112][T18927] veth1_to_bond: entered allmulticast mode [ 500.677065][T18923] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3364'. [ 500.730496][T18921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3365'. [ 500.747828][T18921] bridge_slave_1: left allmulticast mode [ 500.753688][T18921] bridge_slave_1: left promiscuous mode [ 500.759521][T18921] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.778014][T18921] bridge_slave_0: left allmulticast mode [ 500.783934][T18921] bridge_slave_0: left promiscuous mode [ 500.795779][T18921] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.397622][T18958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3375'. [ 501.411850][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.428247][T18926] veth1_to_bond: left allmulticast mode [ 501.451823][T18958] block nbd1: Unsupported socket: should be TCP or UNIX. [ 501.639746][T18965] syz_tun: entered allmulticast mode [ 501.827483][T18973] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 502.320555][ T8523] batman_adv: batadv0: Removing interface: gretap1 [ 502.532997][T18993] Can't find ip_set type hash:ip$mec [ 502.811928][ T8523] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 502.826867][ T8523] batadv0: left promiscuous mode [ 502.832878][ T8523] bond0 (unregistering): Released all slaves [ 502.946991][ T8523] bond1 (unregistering): Released all slaves [ 503.040157][ T8523] bond2 (unregistering): Released all slaves [ 503.052662][ T8523] bond3 (unregistering): Released all slaves [ 503.147788][ T8523] bond4 (unregistering): Released all slaves [ 503.160404][ T8523] bond5 (unregistering): Released all slaves [ 503.262264][ T8523] bond6 (unregistering): Released all slaves [ 503.358743][ T8523] bond7 (unregistering): Released all slaves [ 503.457940][ T8523] bond8 (unregistering): Released all slaves [ 503.485634][T19009] ipvlan0: entered promiscuous mode [ 503.646493][ T8523] : left promiscuous mode [ 503.810692][ T8523] : left promiscuous mode [ 503.947360][T19030] wg1 speed is unknown, defaulting to 1000 [ 503.977554][ T8523] tipc: Left network mode [ 504.130250][T19040] can: request_module (can-proto-0) failed. [ 504.490950][T19056] __nla_validate_parse: 4 callbacks suppressed [ 504.490968][T19056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3400'. [ 504.588412][ T8509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.600630][ T8509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.644262][T19030] netlink: 'syz.2.3394': attribute type 6 has an invalid length. [ 505.187998][T19077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3405'. [ 505.383649][T19090] x_tables: unsorted entry at hook 2 [ 505.399265][T19085] tipc: Invalid UDP bearer configuration [ 505.399370][T19085] tipc: Enabling of bearer rejected, failed to enable media [ 505.455065][T19092] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3411'. [ 505.704077][T19101] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3413'. [ 505.755685][T19101] netlink: 170 bytes leftover after parsing attributes in process `syz.1.3413'. [ 505.834872][T19107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.980897][T19119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3416'. [ 505.998111][ T8523] hsr_slave_0: left promiscuous mode [ 506.041350][ T8523] hsr_slave_1: left promiscuous mode [ 506.265955][T19134] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3420'. [ 506.823352][T19131] dummy0: entered promiscuous mode [ 506.829994][T19131] macsec1: entered allmulticast mode [ 506.835391][T19131] dummy0: entered allmulticast mode [ 506.842806][T19131] dummy0: left allmulticast mode [ 506.848303][T19131] dummy0: left promiscuous mode [ 506.891280][T19140] macsec2: entered promiscuous mode [ 506.902285][T19140] macsec2: entered allmulticast mode [ 506.933698][T19130] wg1 speed is unknown, defaulting to 1000 [ 507.014102][T19145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3424'. [ 507.022977][T19150] netlink: 'syz.2.3425': attribute type 1 has an invalid length. [ 507.056628][T19149] syzkaller1: entered allmulticast mode [ 507.109568][T19150] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.178326][T19153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.188673][T19153] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 507.200278][T19153] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 507.272652][T19151] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 507.283679][T19151] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 507.672105][ T8523] IPVS: stop unused estimator thread 0... [ 507.681162][T19178] pim6reg1: entered promiscuous mode [ 507.693571][T19178] pim6reg1: entered allmulticast mode [ 507.731034][T19185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.772951][T19181] wg1 speed is unknown, defaulting to 1000 [ 507.808865][T19185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.846346][T19185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.006240][T19199] 8021q: VLANs not supported on vxcan1 [ 508.141167][T19197] syzkaller1: entered promiscuous mode [ 508.148492][T19197] syzkaller1: entered allmulticast mode [ 508.158886][T19193] netlink: 'syz.1.3435': attribute type 7 has an invalid length. [ 508.169142][T19193] netlink: 'syz.1.3435': attribute type 8 has an invalid length. [ 508.256686][ T981] hid-generic 0005:0C45:1013.0003: ignoring exceeding usage max [ 508.266087][ T981] hid-generic 0005:0C45:1013.0003: unknown main item tag 0x4 [ 508.273503][ T981] hid-generic 0005:0C45:1013.0003: unknown main item tag 0x5 [ 508.281294][ T981] hid-generic 0005:0C45:1013.0003: unknown main item tag 0x0 [ 508.290304][ T981] hid-generic 0005:0C45:1013.0003: unknown main item tag 0x0 [ 508.297949][ T981] hid-generic 0005:0C45:1013.0003: unknown main item tag 0x0 [ 508.305416][ T981] hid-generic 0005:0C45:1013.0003: unknown main item tag 0x0 [ 508.312898][ T981] hid-generic 0005:0C45:1013.0003: unknown main item tag 0x0 [ 508.321602][ T981] hid-generic 0005:0C45:1013.0003: unknown main item tag 0x0 [ 508.329584][ T981] hid-generic 0005:0C45:1013.0003: unknown main item tag 0x0 [ 508.338780][ T981] hid-generic 0005:0C45:1013.0003: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 508.368839][T19212] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3439'. [ 508.521183][T19217] netlink: 616 bytes leftover after parsing attributes in process `syz.4.3440'. [ 508.782781][T19232] wg1 speed is unknown, defaulting to 1000 [ 508.948467][T19241] netlink: 'syz.4.3448': attribute type 2 has an invalid length. [ 509.112572][T19241] @„;: entered promiscuous mode [ 509.489095][T19275] tipc: Started in network mode [ 509.498581][T19275] tipc: Node identity 32550ef271ef, cluster identity 4711 [ 509.513747][T19275] tipc: Enabled bearer , priority 0 [ 509.550071][T19275] syzkaller0: entered promiscuous mode [ 509.574737][T19275] syzkaller0: entered allmulticast mode [ 509.732951][T19275] tipc: Resetting bearer [ 509.742095][T19275] __nla_validate_parse: 6 callbacks suppressed [ 509.742112][T19275] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3459'. [ 509.745070][T19303] netlink: 'syz.3.3467': attribute type 1 has an invalid length. [ 509.852528][T19303] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 509.854904][T19273] tipc: Resetting bearer [ 509.925252][T19273] tipc: Disabling bearer [ 510.122924][T19333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3476'. [ 510.157909][T19335] netlink: 'syz.4.3475': attribute type 4 has an invalid length. [ 510.175061][T19335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3475'. [ 510.182756][T19328] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.200778][T19328] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.314308][T19327] syzkaller0: entered promiscuous mode [ 510.320629][T19343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3479'. [ 510.330065][T19327] syzkaller0: entered allmulticast mode [ 510.663846][T19354] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3481'. [ 512.711731][T19360] netlink: 'syz.4.3481': attribute type 29 has an invalid length. [ 512.719858][T19354] netlink: 'syz.4.3481': attribute type 12 has an invalid length. [ 512.770740][T19369] veth5: entered promiscuous mode [ 512.790491][T19356] wg1 speed is unknown, defaulting to 1000 [ 512.990158][T19385] netlink: 'syz.0.3488': attribute type 58 has an invalid length. [ 513.058433][T19380] wg1 speed is unknown, defaulting to 1000 [ 513.060363][T19385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3488'. [ 513.347890][T19403] syzkaller0: entered promiscuous mode [ 513.375461][T19403] syzkaller0: entered allmulticast mode [ 513.464996][T19407] tipc: Enabling of bearer rejected, failed to enable media [ 513.477282][T19409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3494'. [ 513.504781][T19412] netlink: 'syz.0.3496': attribute type 10 has an invalid length. [ 513.516591][T19407] syzkaller0: entered promiscuous mode [ 513.532351][T19407] syzkaller0: entered allmulticast mode [ 513.672243][T19425] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3497'. [ 513.726196][T19407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3493'. [ 513.727121][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 513.841967][T19431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3500'. [ 514.215830][T19466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.574027][T19492] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 514.787832][T19501] __nla_validate_parse: 4 callbacks suppressed [ 514.787851][T19501] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3519'. [ 514.804254][T19495] netlink: 996 bytes leftover after parsing attributes in process `syz.4.3516'. [ 514.899575][T19498] wg1 speed is unknown, defaulting to 1000 [ 514.936054][T19502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3518'. [ 515.296343][T19517] netlink: 344 bytes leftover after parsing attributes in process `syz.3.3521'. [ 515.307456][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3521'. [ 515.854874][T19535] netlink: 'syz.3.3526': attribute type 1 has an invalid length. [ 515.874948][T19535] netlink: 'syz.3.3526': attribute type 4 has an invalid length. [ 515.891362][T19535] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3526'. [ 515.911165][T19534] netlink: 'syz.3.3526': attribute type 1 has an invalid length. [ 515.931401][T19534] netlink: 'syz.3.3526': attribute type 4 has an invalid length. [ 515.944439][T19534] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3526'. [ 516.148333][T19544] wg1 speed is unknown, defaulting to 1000 [ 516.459527][T19567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3532'. [ 516.506597][T19562] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 516.541196][T19567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3532'. [ 516.557493][T19562] bond0 (unregistering): Released all slaves [ 516.618749][T19563] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 516.800312][T19571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3534'. [ 517.128195][T19578] tipc: Enabled bearer , priority 0 [ 517.148563][T19578] syzkaller0: entered promiscuous mode [ 517.154076][T19578] syzkaller0: entered allmulticast mode [ 517.209645][T19578] tipc: Resetting bearer [ 517.251433][T19578] sit0: entered promiscuous mode [ 517.304734][T19577] tipc: Resetting bearer [ 517.387027][T19577] tipc: Disabling bearer [ 517.422384][T19587] bridge_slave_1: left allmulticast mode [ 517.433094][T19587] bridge_slave_1: left promiscuous mode [ 517.446629][T19587] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.477886][T19587] bridge_slave_0: left allmulticast mode [ 517.487005][T19587] bridge_slave_0: left promiscuous mode [ 517.499620][T19587] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.069741][T19623] bond0: entered promiscuous mode [ 518.095044][T19623] bond_slave_0: entered promiscuous mode [ 518.101031][T19623] bond_slave_1: entered promiscuous mode [ 518.130647][T19623] bond0: left promiscuous mode [ 518.135808][T19623] bond_slave_0: left promiscuous mode [ 518.141414][T19623] bond_slave_1: left promiscuous mode [ 518.183054][T19632] bond0: entered promiscuous mode [ 518.208616][T19632] bond_slave_0: entered promiscuous mode [ 518.228334][T19632] bond_slave_1: entered promiscuous mode [ 518.238004][T19632] bond0: left promiscuous mode [ 518.248993][T19632] bond_slave_0: left promiscuous mode [ 518.255855][T19632] bond_slave_1: left promiscuous mode [ 518.266390][T19644] lo: Caught tx_queue_len zero misconfig [ 518.671745][T19667] bond0: (slave bond_slave_0): Releasing backup interface [ 518.733418][T19677] netlink: 'syz.3.3563': attribute type 13 has an invalid length. [ 518.741649][T19677] netlink: 'syz.3.3563': attribute type 17 has an invalid length. [ 518.848223][T19667] bond0: (slave bond_slave_1): Releasing backup interface [ 518.883519][T19667] team0: Port device team_slave_0 removed [ 518.895187][T19667] team0: Port device team_slave_1 removed [ 518.901741][T19667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.910011][T19667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.920477][T19667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.929155][T19667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.939325][T19667] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 518.956521][T19673] syzkaller0: entered promiscuous mode [ 518.962407][T19673] syzkaller0: entered allmulticast mode [ 519.032104][T19677] sit0: left promiscuous mode [ 519.061554][T19677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 519.310001][T19679] wg1 speed is unknown, defaulting to 1000 [ 519.365812][T19704] Cannot find set identified by id 2 to match [ 519.453968][T19690] wg1 speed is unknown, defaulting to 1000 [ 519.470553][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.616823][T19718] ieee802154 phy0 wpan0: encryption failed: -22 [ 519.627440][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.653989][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.677369][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.853047][T19734] __nla_validate_parse: 9 callbacks suppressed [ 519.853060][T19734] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3578'. [ 519.869030][T19734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3578'. [ 520.228954][T19752] wg1: entered promiscuous mode [ 520.244522][T19752] wg1: entered allmulticast mode [ 520.395569][T19762] batadv_slave_1: entered promiscuous mode [ 520.418129][T19761] batadv_slave_1: left promiscuous mode [ 520.466143][T19770] netlink: 'syz.1.3584': attribute type 3 has an invalid length. [ 520.481736][T19773] gtp0: entered promiscuous mode [ 520.488444][T19773] gtp0: entered allmulticast mode [ 520.512533][T19756] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3584'. [ 520.532217][T19771] wg1 speed is unknown, defaulting to 1000 [ 520.601259][T19772] veth0: entered promiscuous mode [ 520.619848][T19772] veth0: left promiscuous mode [ 520.663525][T19786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3590'. [ 520.674053][T19786] IPv6: Can't replace route, no match found [ 520.769013][T19786] wg1 speed is unknown, defaulting to 1000 [ 520.793659][T19787] wg1 speed is unknown, defaulting to 1000 [ 520.908103][T19798] netlink: 'syz.1.3592': attribute type 1 has an invalid length. [ 521.058848][T19804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3594'. [ 521.451796][T19831] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 3, id = 0 [ 521.886209][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 521.903574][T19862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3604'. [ 522.122807][T19870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3612'. [ 522.247067][T19870] bridge3: port 1(veth7) entered blocking state [ 522.253836][T19870] bridge3: port 1(veth7) entered disabled state [ 522.278145][T19870] veth7: entered allmulticast mode [ 522.311523][T19870] veth7: entered promiscuous mode [ 522.338712][T19873] bridge3: port 2(veth0_to_bond) entered blocking state [ 522.352736][T19873] bridge3: port 2(veth0_to_bond) entered disabled state [ 522.362817][T19873] veth0_to_bond: entered allmulticast mode [ 522.386179][T19873] veth0_to_bond: entered promiscuous mode [ 522.426936][T19874] bridge3: port 3(veth9) entered blocking state [ 522.433376][T19874] bridge3: port 3(veth9) entered disabled state [ 522.454742][T19874] veth9: entered allmulticast mode [ 522.462489][T19874] veth9: entered promiscuous mode [ 522.712357][T19890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3618'. [ 522.923498][T19893] wg1 speed is unknown, defaulting to 1000 [ 522.960390][T19908] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3621'. [ 522.989500][T19908] netlink: 'syz.3.3621': attribute type 11 has an invalid length. [ 523.291427][T19916] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3623'. [ 523.330890][T19917] bond0: (slave gre0): Error: Device type is different from other slaves [ 523.361793][T19916] bridge2: port 1(veth0_to_bond) entered blocking state [ 523.373750][T19916] bridge2: port 1(veth0_to_bond) entered disabled state [ 523.392344][T19916] veth0_to_bond: entered allmulticast mode [ 523.403009][T19916] veth0_to_bond: entered promiscuous mode [ 523.426645][T19921] netlink: 'syz.4.3624': attribute type 29 has an invalid length. [ 523.855125][T19947] pim6reg: entered allmulticast mode [ 523.898306][T19947] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 523.910547][T19947] pim6reg: left allmulticast mode [ 523.989069][T19949] pim6reg: entered allmulticast mode [ 524.510079][T19969] 8021q: adding VLAN 0 to HW filter on device bond5 [ 524.586189][T19977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.637038][T19977] bond5: (slave bond0): Enslaving as an active interface with an up link [ 524.720718][T19985] wg1 speed is unknown, defaulting to 1000 [ 524.909135][T19990] wg1 speed is unknown, defaulting to 1000 [ 525.259763][T19998] __nla_validate_parse: 3 callbacks suppressed [ 525.259783][T19998] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3642'. [ 525.290377][T19997] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3641'. [ 525.393164][T19997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3641'. [ 525.407306][T19997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3641'. [ 525.435106][T19997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3641'. [ 525.492461][T20012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3645'. [ 525.710679][T20014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3644'. [ 525.794617][T20015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3644'. [ 525.803586][T20018] wg1 speed is unknown, defaulting to 1000 [ 525.809910][T20015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3644'. [ 525.810603][T20015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3644'. [ 526.379077][T20036] syzkaller0: entered promiscuous mode [ 526.397954][T20036] syzkaller0: entered allmulticast mode [ 526.552929][T20048] dvmrp0: entered allmulticast mode [ 526.830017][T20065] netlink: 'syz.0.3656': attribute type 83 has an invalid length. [ 527.210873][T20072] netlink: 'syz.4.3658': attribute type 1 has an invalid length. [ 528.819575][T20093] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.932235][T20093] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.993984][T20109] wg1 speed is unknown, defaulting to 1000 [ 529.015370][ T30] audit: type=1804 audit(1766454803.452:14): pid=20114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3669" name="/newroot/161/cgroup.controllers" dev="tmpfs" ino=846 res=1 errno=0 [ 529.069636][T20093] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.084762][ T30] audit: type=1800 audit(1766454803.452:15): pid=20114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3669" name="cgroup.controllers" dev="tmpfs" ino=846 res=0 errno=0 [ 529.249402][T20093] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.329794][T20124] xt_TCPMSS: Only works on TCP SYN packets [ 529.337043][T20124] netlink: 'syz.0.3672': attribute type 13 has an invalid length. [ 529.533216][ T1131] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.571703][ T1131] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.609282][ T1131] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.783214][ T8513] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.215344][T20171] netlink: 'syz.3.3682': attribute type 13 has an invalid length. [ 530.223826][T20171] netlink: 'syz.3.3682': attribute type 12 has an invalid length. [ 530.390061][T20180] wg1 speed is unknown, defaulting to 1000 [ 530.438622][T20186] tipc: Enabled bearer , priority 1 [ 530.559162][T20191] __nla_validate_parse: 16 callbacks suppressed [ 530.559181][T20191] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3689'. [ 530.694284][T20200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3691'. [ 530.781866][T20205] syz_tun: entered allmulticast mode [ 530.800125][T20205] siw: device registration error -23 [ 530.852235][T20205] syz_tun: left allmulticast mode [ 531.083268][T20222] can: request_module (can-proto-5) failed. [ 531.298368][ T9681] IPVS: starting estimator thread 0... [ 531.304764][T20243] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 531.322115][T20244] wg1 speed is unknown, defaulting to 1000 [ 531.342034][T20247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3704'. [ 531.448146][T20250] IPVS: using max 26 ests per chain, 62400 per kthread [ 531.554654][ T9681] tipc: Node number set to 2700062316 [ 531.763952][T20260] netlink: 'syz.0.3707': attribute type 32 has an invalid length. [ 532.018550][T20277] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3711'. [ 532.084589][T20277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3711'. [ 532.161599][T20283] syzkaller0: entered promiscuous mode [ 532.167438][T20283] syzkaller0: entered allmulticast mode [ 532.666643][T20268] netlink: 'syz.0.3707': attribute type 4 has an invalid length. [ 532.973924][T20324] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3719'. [ 533.129507][T20323] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3723'. [ 533.138816][T20323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3723'. [ 533.256908][T20336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3726'. [ 533.266315][T20335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3726'. [ 533.414858][T20339] netlink: 'syz.1.3727': attribute type 1 has an invalid length. [ 533.823002][T20353] wg1 speed is unknown, defaulting to 1000 [ 533.831497][T20357] nbd: nbd4 already in use [ 533.837564][T20357] block nbd4: NBD_DISCONNECT [ 533.858748][T20357] block nbd4: Send disconnect failed -32 [ 533.868691][T20357] block nbd4: shutting down sockets [ 533.904110][T20355] macvlan1: entered allmulticast mode [ 534.230173][T20368] tipc: Started in network mode [ 534.258949][T20368] tipc: Node identity d6a75b1bbb8, cluster identity 4711 [ 534.267490][T20368] tipc: Enabled bearer , priority 0 [ 534.310274][T20367] syzkaller0: entered promiscuous mode [ 534.321025][T20367] syzkaller0: entered allmulticast mode [ 534.381302][T20368] tipc: Resetting bearer [ 534.438364][T20368] tipc: Disabling bearer [ 535.078961][T20409] wg1 speed is unknown, defaulting to 1000 [ 535.513407][T20419] wg1 speed is unknown, defaulting to 1000 [ 535.617988][T20445] syz.1.3751: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 535.687671][T20449] __nla_validate_parse: 4 callbacks suppressed [ 535.687690][T20449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3756'. [ 535.687712][T20445] CPU: 0 UID: 0 PID: 20445 Comm: syz.1.3751 Not tainted syzkaller #0 PREEMPT(full) [ 535.687740][T20445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 535.687749][T20445] Call Trace: [ 535.687757][T20445] [ 535.687765][T20445] dump_stack_lvl+0x189/0x250 [ 535.687794][T20445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.687815][T20445] ? __pfx__printk+0x10/0x10 [ 535.687839][T20445] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 535.687859][T20445] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 535.687879][T20445] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 535.687901][T20445] warn_alloc+0x214/0x310 [ 535.687919][T20445] ? stack_trace_save+0x9c/0xe0 [ 535.687947][T20445] ? __pfx_warn_alloc+0x10/0x10 [ 535.687971][T20445] ? kasan_save_track+0x4f/0x80 [ 535.687986][T20445] ? kasan_save_track+0x3e/0x80 [ 535.688001][T20445] ? __kasan_kmalloc+0x93/0xb0 [ 535.688017][T20445] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 535.688032][T20445] ? xskq_create+0x56/0x170 [ 535.688055][T20445] ? xsk_setsockopt+0x4dc/0x8d0 [ 535.688075][T20445] ? do_sock_setsockopt+0x17c/0x1b0 [ 535.688093][T20445] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 535.688110][T20445] ? do_syscall_64+0xfa/0xf80 [ 535.688131][T20445] __vmalloc_node_range_noprof+0x134/0x16a0 [ 535.688181][T20445] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 535.688204][T20445] ? __kasan_kmalloc+0x93/0xb0 [ 535.688228][T20445] vmalloc_user_noprof+0xad/0xf0 [ 535.688245][T20445] ? xskq_create+0xbf/0x170 [ 535.688269][T20445] xskq_create+0xbf/0x170 [ 535.688295][T20445] xsk_init_queue+0xb0/0x110 [ 535.688321][T20445] xsk_setsockopt+0x4dc/0x8d0 [ 535.688346][T20445] ? __pfx_xsk_setsockopt+0x10/0x10 [ 535.688372][T20445] ? __pfx_aa_sk_perm+0x10/0x10 [ 535.688394][T20445] ? aa_sock_opt_perm+0xff/0x1a0 [ 535.688418][T20445] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 535.688434][T20445] ? __pfx_xsk_setsockopt+0x10/0x10 [ 535.688458][T20445] do_sock_setsockopt+0x17c/0x1b0 [ 535.688483][T20445] __x64_sys_setsockopt+0x13f/0x1b0 [ 535.688507][T20445] do_syscall_64+0xfa/0xf80 [ 535.688526][T20445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.688543][T20445] ? clear_bhb_loop+0x60/0xb0 [ 535.688564][T20445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.688581][T20445] RIP: 0033:0x7f736d58f749 [ 535.688596][T20445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.688610][T20445] RSP: 002b:00007f736e36e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 535.688628][T20445] RAX: ffffffffffffffda RBX: 00007f736d7e6090 RCX: 00007f736d58f749 [ 535.688640][T20445] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 535.688650][T20445] RBP: 00007f736d613f91 R08: 0000000000000004 R09: 0000000000000000 [ 535.688661][T20445] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.688672][T20445] R13: 00007f736d7e6128 R14: 00007f736d7e6090 R15: 00007ffcaaa6b488 [ 535.688702][T20445] [ 535.688724][T20445] Mem-Info: [ 535.702437][T20449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3756'. [ 535.726089][T20445] active_anon:3986 inactive_anon:0 isolated_anon:0 [ 535.726089][T20445] active_file:3276 inactive_file:40050 isolated_file:0 [ 535.726089][T20445] unevictable:790 dirty:96 writeback:0 [ 535.726089][T20445] slab_reclaimable:12336 slab_unreclaimable:149441 [ 535.726089][T20445] mapped:31207 shmem:1373 pagetables:1055 [ 535.726089][T20445] sec_pagetables:0 bounce:0 [ 535.726089][T20445] kernel_misc_reclaimable:0 [ 535.726089][T20445] free:1251865 free_pcp:35112 free_cma:0 [ 535.732117][T20449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3756'. [ 535.745807][T20445] Node 0 active_anon:15944kB inactive_anon:0kB active_file:13104kB inactive_file:159996kB unevictable:1624kB isolated(anon):0kB isolated(file):0kB mapped:124828kB dirty:384kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14832kB pagetables:4088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 535.969407][T20458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3756'. [ 535.980579][T20445] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 535.980635][T20445] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 535.980691][T20445] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 535.980741][T20445] Node 0 DMA32 free:1121584kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16004kB inactive_anon:0kB active_file:13104kB inactive_file:159996kB unevictable:1536kB writepending:420kB zspages:0kB present:3129332kB managed:2559356kB mlocked:0kB bounce:0kB free_pcp:108556kB local_pcp:83128kB free_cma:0kB [ 535.980797][T20445] lowmem_reserve[]: 0 0 1 1 1 [ 535.980839][T20445] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 535.980893][T20445] lowmem_reserve[]: 0 0 0 0 0 [ 535.980933][T20445] Node 1 Normal free:3881144kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20960kB local_pcp:12880kB free_cma:0kB [ 535.980987][T20445] lowmem_reserve[]: 0 0 0 0 0 [ 535.981025][T20445] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 535.981165][T20445] Node 0 DMA32: 7320*4kB (UME) 4390*8kB (UME) 2493*16kB (UME) 540*32kB (UME) 177*64kB (UME) 83*128kB (UME) 125*256kB (UME) 206*512kB (UME) 139*1024kB (UE) 81*2048kB (UME) 130*4096kB (UME) = 1121696kB [ 535.981348][T20445] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 536.363368][T20445] Node 1 Normal: 200*4kB (U) 69*8kB (UME) 45*16kB (UME) 99*32kB (UME) 35*64kB (UME) 9*128kB (UME) 3*256kB (ME) 4*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 943*4096kB (M) = 3881144kB [ 536.414387][T20445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 536.428471][T20445] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 536.438576][T20445] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 536.448239][T20445] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 536.459544][T20445] 44684 total pagecache pages [ 536.464229][T20445] 0 pages in swap cache [ 536.468667][T20445] Free swap = 124996kB [ 536.479767][T20445] Total swap = 124996kB [ 536.483962][T20445] 2097051 pages RAM [ 536.487943][T20445] 0 pages HighMem/MovableOnly [ 536.492712][T20445] 425122 pages reserved [ 536.507109][T20445] 0 pages cma reserved [ 536.698674][T20472] netlink: 'syz.4.3759': attribute type 1 has an invalid length. [ 536.701718][T20476] netlink: 'syz.3.3761': attribute type 1 has an invalid length. [ 536.721019][T20476] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3761'. [ 537.105690][T20496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3766'. [ 537.198701][T20504] netlink: 'syz.2.3766': attribute type 3 has an invalid length. [ 537.212104][T20503] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3770'. [ 537.227750][T20501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.347454][T20514] Bluetooth: MGMT ver 1.23 [ 537.353179][T20514] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3773'. [ 537.500436][T20526] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3777'. [ 537.503626][T20521] batadv: option xmit_hash_policy: invalid value (9) [ 537.510247][T20526] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 537.530884][T20521] batadv (unregistering): Released all slaves [ 537.563638][T20526] netlink: zone id is out of range [ 537.572865][T20526] netlink: zone id is out of range [ 537.578295][T20526] netlink: get zone limit has 4 unknown bytes [ 537.737396][T20532] wg1 speed is unknown, defaulting to 1000 [ 537.841106][T20535] wg1 speed is unknown, defaulting to 1000 [ 538.857751][T20594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3793'. [ 538.878698][T20594] geneve2: entered promiscuous mode [ 538.883934][T20594] geneve2: entered allmulticast mode [ 538.909631][ T1131] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 45876 - 0 [ 539.058968][ T1131] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 45876 - 0 [ 539.068366][ T1131] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 45876 - 0 [ 539.078437][ T1131] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 45876 - 0 [ 539.241395][T20603] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 539.298892][ T9671] IPVS: starting estimator thread 0... [ 539.415903][T20614] IPVS: using max 36 ests per chain, 86400 per kthread [ 539.472296][T20624] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 539.684221][T20636] netlink: 'syz.0.3803': attribute type 1 has an invalid length. [ 539.852047][T20642] netlink: 'syz.0.3806': attribute type 2 has an invalid length. [ 539.878577][T20642] !: entered promiscuous mode [ 539.885946][T20640] syzkaller1: entered promiscuous mode [ 539.896252][T20640] syzkaller1: entered allmulticast mode [ 540.025166][T20652] netlink: 'syz.4.3805': attribute type 83 has an invalid length. [ 540.127777][T20645] hsr_slave_1 (unregistering): left promiscuous mode [ 540.144603][T20654] tipc: Cannot configure node identity twice [ 540.367590][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.428766][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.496608][T20660] wg1 speed is unknown, defaulting to 1000 [ 541.115636][T20701] netlink: 'syz.1.3821': attribute type 2 has an invalid length. [ 541.135663][T20699] __nla_validate_parse: 4 callbacks suppressed [ 541.135681][T20699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3820'. [ 541.301482][T20706] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3823'. [ 541.316969][T20706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3823'. [ 541.819936][T20726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3829'. [ 543.202613][T20755] netlink: 'syz.0.3836': attribute type 1 has an invalid length. [ 543.210877][T20755] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3836'. [ 543.518236][T20752] lo speed is unknown, defaulting to 1000 [ 543.536351][T20755] vxcan2: entered allmulticast mode [ 543.593818][T20752] lo speed is unknown, defaulting to 1000 [ 543.606385][T20752] lo speed is unknown, defaulting to 1000 [ 543.636217][T20752] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 543.667974][T20752] lo speed is unknown, defaulting to 1000 [ 543.675905][T20752] lo speed is unknown, defaulting to 1000 [ 543.684803][T20752] lo speed is unknown, defaulting to 1000 [ 543.693820][T20752] lo speed is unknown, defaulting to 1000 [ 543.706381][T20752] lo speed is unknown, defaulting to 1000 [ 543.773347][T20752] lo speed is unknown, defaulting to 1000 [ 543.781929][T20752] lo speed is unknown, defaulting to 1000 [ 543.809501][T20752] lo speed is unknown, defaulting to 1000 [ 543.850974][T20775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3840'. [ 543.882858][T20776] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3838'. [ 543.914484][T20776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3838'. [ 543.931203][T20776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3838'. [ 543.972013][T20762] syzkaller0: entered promiscuous mode [ 543.997411][T20762] syzkaller0: entered allmulticast mode [ 544.027575][T20762] tipc: Enabled bearer , priority 0 [ 544.118460][T20761] tipc: Resetting bearer [ 544.184206][T20761] tipc: Disabling bearer [ 544.225816][T20798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3846'. [ 544.231064][T20794] openvswitch: netlink: Flow key attr not present in new flow. [ 545.114821][T20845] wg1 speed is unknown, defaulting to 1000 [ 545.122493][T20845] lo speed is unknown, defaulting to 1000 [ 545.249084][T20831] syzkaller1: entered promiscuous mode [ 545.277346][T20831] syzkaller1: entered allmulticast mode [ 545.337909][T20857] syzkaller1: entered promiscuous mode [ 545.349461][T20857] syzkaller1: entered allmulticast mode [ 545.456500][T20849] netlink: 'syz.1.3859': attribute type 16 has an invalid length. [ 545.474540][T20849] netlink: 'syz.1.3859': attribute type 17 has an invalid length. [ 545.645452][T20849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.653906][T20849] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.744957][T20877] netlink: 'syz.0.3865': attribute type 2 has an invalid length. [ 546.114483][T20849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.158063][T20877] : entered promiscuous mode [ 546.500050][T20891] __nla_validate_parse: 8 callbacks suppressed [ 546.500068][T20891] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3868'. [ 546.547536][T20900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3870'. [ 546.670951][T20903] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3871'. [ 546.765382][T20909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3874'. [ 546.809871][T20910] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 546.952632][T20918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3875'. [ 547.017777][T20921] netlink: 'syz.2.3876': attribute type 1 has an invalid length. [ 547.069638][T20921] 8021q: adding VLAN 0 to HW filter on device bond2 [ 547.151252][T20926] bond2: (slave ip6gretap1): making interface the new active one [ 547.161438][T20926] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 547.187468][T20921] veth5: entered promiscuous mode [ 547.201051][T20921] bond2: (slave veth5): Enslaving as an active interface with a down link [ 547.214067][T20926] erspan0: entered allmulticast mode [ 547.280665][T20921] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 547.301041][T20936] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3881'. [ 547.490151][T20949] netlink: 'syz.3.3884': attribute type 1 has an invalid length. [ 547.578433][T20949] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 547.708075][T20962] vcan0: tx drop: invalid sa for name 0x8000000000000000 [ 547.757469][T20962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3886'. [ 548.089085][T20980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3890'. [ 548.653210][T20999] openvswitch: netlink: Tunnel attr 253 out of range max 16 [ 548.769569][T21006] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 548.847738][T21006] vlan2: entered promiscuous mode [ 548.852995][T21006] vlan2: entered allmulticast mode [ 548.861175][T21006] hsr_slave_1: entered allmulticast mode [ 549.000173][T21022] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3902'. [ 549.402818][T21035] team0: No ports can be present during mode change [ 549.435220][T21038] netlink: 'syz.2.3905': attribute type 33 has an invalid length. [ 549.469023][T21038] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3905'. [ 549.555115][T21040] netlink: 'syz.0.3906': attribute type 32 has an invalid length. [ 549.626721][T21040] syzkaller0: entered promiscuous mode [ 549.632237][T21040] syzkaller0: entered allmulticast mode [ 550.282951][T21090] netlink: 'syz.3.3921': attribute type 4 has an invalid length. [ 550.557175][T21107] netlink: 'syz.3.3924': attribute type 3 has an invalid length. [ 551.352280][T21131] wg1 speed is unknown, defaulting to 1000 [ 551.360529][T21131] lo speed is unknown, defaulting to 1000 [ 551.525006][T21134] __nla_validate_parse: 5 callbacks suppressed [ 551.525026][T21134] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3934'. [ 551.581443][T21139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3935'. [ 551.588885][T21142] netlink: 'syz.2.3936': attribute type 10 has an invalid length. [ 551.598859][T21142] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3936'. [ 551.610521][T21142] batman_adv: batadv0: Adding interface: virt_wifi0 [ 551.617571][T21142] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.618545][T21140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3935'. [ 551.643689][T21142] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 551.896126][T21152] tipc: Enabling of bearer rejected, failed to enable media [ 551.931978][ T5888] IPVS: starting estimator thread 0... [ 551.936256][T21153] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 552.046684][T21155] IPVS: using max 32 ests per chain, 76800 per kthread [ 552.101414][T21165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3941'. [ 552.102167][T21161] ip6tnl0: Caught tx_queue_len zero misconfig [ 552.121338][T21161] netlink: 280 bytes leftover after parsing attributes in process `syz.0.3940'. [ 552.144717][T21165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3941'. [ 552.198788][T21165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3941'. [ 552.217513][T21165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3941'. [ 552.227735][T21173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3942'. [ 552.265049][T21166] tipc: Enabled bearer , priority 0 [ 552.272598][T21166] syzkaller0: entered promiscuous mode [ 552.278460][T21166] syzkaller0: entered allmulticast mode [ 552.409595][T21178] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.450618][T21172] syzkaller0: mtu greater than device maximum [ 552.457938][T21166] syzkaller0: mtu greater than device maximum [ 552.503550][T21178] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.569813][T21166] tipc: Resetting bearer [ 552.622150][T21166] tipc: Disabling bearer [ 552.667799][T21178] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.747727][T21178] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.781973][T21203] netlink: 'syz.0.3952': attribute type 39 has an invalid length. [ 553.108423][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.195673][T21222] netlink: 'syz.1.3956': attribute type 1 has an invalid length. [ 553.422901][T21222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 553.457184][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.574961][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.678810][ T8524] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.018262][T21247] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 554.028992][T21247] openvswitch: netlink: Message has 75 unknown bytes. [ 554.130527][T21252] bridge0: entered promiscuous mode [ 554.159152][T21252] bridge0: left promiscuous mode [ 554.355451][T21266] batadv1: entered promiscuous mode [ 555.567912][T21323] syzkaller1: entered promiscuous mode [ 555.573446][T21323] syzkaller1: entered allmulticast mode [ 555.793632][T21349] netlink: 'syz.4.3991': attribute type 8 has an invalid length. [ 555.818353][T21346] wg1 speed is unknown, defaulting to 1000 [ 555.844761][T21346] lo speed is unknown, defaulting to 1000 [ 555.922040][T21349] wg1 speed is unknown, defaulting to 1000 [ 555.938625][T21356] hsr_slave_0: left promiscuous mode [ 555.947194][T21356] hsr_slave_1: left promiscuous mode [ 556.031914][T21349] lo speed is unknown, defaulting to 1000 [ 556.594628][T21380] netlink: 'syz.1.3997': attribute type 5 has an invalid length. [ 556.636221][T21380] __nla_validate_parse: 14 callbacks suppressed [ 556.636241][T21380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3997'. [ 556.648229][T21386] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3997'. [ 556.669864][T21380] netlink: 'syz.1.3997': attribute type 2 has an invalid length. [ 556.679250][T21380] netlink: 'syz.1.3997': attribute type 1 has an invalid length. [ 556.939238][T21397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4001'. [ 557.021059][T21400] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4002'. [ 557.159413][T21408] netlink: 'syz.3.4004': attribute type 10 has an invalid length. [ 557.203488][T21408] team0: Port device syz_tun added [ 557.214652][T21410] 8021q: VLANs not supported on lo [ 557.265757][T21415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4003'. [ 557.288340][T21414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4006'. [ 557.540725][ T981] IPVS: starting estimator thread 0... [ 557.553197][T21431] team0: No ports can be present during mode change [ 557.634430][T21430] IPVS: using max 28 ests per chain, 67200 per kthread [ 557.894698][T21436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.502680][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4016'. [ 558.742061][T21453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4017'. [ 558.772764][ T3528] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.795063][ T3528] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.806733][ T3528] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.822056][ T3528] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.880589][T21460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4019'. [ 558.918132][T21461] netlink: 'syz.0.4019': attribute type 1 has an invalid length. [ 558.935914][T21464] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4020'. [ 559.781384][T21515] wg1 speed is unknown, defaulting to 1000 [ 559.807227][T21515] lo speed is unknown, defaulting to 1000 [ 560.289489][T21544] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 560.598349][T21567] netlink: 'syz.2.4047': attribute type 1 has an invalid length. [ 560.612145][T21566] xt_connbytes: Forcing CT accounting to be enabled [ 560.618343][T21567] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 560.713249][T21570] bridge0: entered allmulticast mode [ 561.021632][T21591] veth0: entered promiscuous mode [ 561.036736][T21591] veth0 (unregistering): left promiscuous mode [ 561.497675][T21622] netlink: 'syz.3.4063': attribute type 4 has an invalid length. [ 561.665006][T21629] __nla_validate_parse: 6 callbacks suppressed [ 561.665023][T21629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4066'. [ 561.713899][T21623] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 561.730072][T21623] bond2 (unregistering): Released all slaves [ 561.760083][T21626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.109300][T21648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4069'. [ 562.157913][T21648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4069'. [ 562.237010][T21656] block nbd1: Unsupported socket: should be TCP or UNIX. [ 562.259690][T21650] wg1 speed is unknown, defaulting to 1000 [ 562.338768][T21650] lo speed is unknown, defaulting to 1000 [ 562.390470][T21664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4073'. [ 562.458816][T21666] syzkaller1: entered promiscuous mode [ 562.478830][T21666] syzkaller1: entered allmulticast mode [ 563.011540][T21687] Unsupported ieee802154 address type: 0 [ 563.203812][T21697] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4079'. [ 563.275969][T21702] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4081'. [ 563.285624][T21702] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4081'. [ 563.308903][T21702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4081'. [ 563.465230][T21711] netlink: 'syz.1.4083': attribute type 1 has an invalid length. [ 563.672552][T21700] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 563.751233][T21711] 8021q: adding VLAN 0 to HW filter on device bond3 [ 563.811057][T21712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 563.818681][T21712] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 563.830318][T21712] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 563.866879][T21721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4086'. [ 563.953812][T21721] wg1: left promiscuous mode [ 564.039974][T21721] bond1: left promiscuous mode [ 564.098643][T21721] bond4: left promiscuous mode [ 564.138279][T21721] veth5: left promiscuous mode [ 564.209886][T21732] IPv6: sit1: Disabled Multicast RS [ 564.452028][T21752] netem: change failed [ 564.743024][T21768] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4095'. [ 564.754971][T21769] netlink: 'syz.1.4093': attribute type 1 has an invalid length. [ 564.835923][T21775] netlink: 'syz.4.4098': attribute type 1 has an invalid length. [ 564.902044][T21776] netlink: 'syz.2.4099': attribute type 9 has an invalid length. [ 565.123250][T21803] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 565.304530][T21815] netlink: 'syz.3.4109': attribute type 9 has an invalid length. [ 565.430914][T21825] x_tables: duplicate underflow at hook 3 [ 565.626931][T21823] wg1 speed is unknown, defaulting to 1000 [ 565.682579][T21823] lo speed is unknown, defaulting to 1000 [ 566.139100][T21849] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 566.630109][T21873] netlink: 'syz.2.4127': attribute type 1 has an invalid length. [ 566.964004][T21896] netlink: 'syz.2.4135': attribute type 6 has an invalid length. [ 566.993250][T21902] __nla_validate_parse: 9 callbacks suppressed [ 566.993269][T21902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4137'. [ 567.987350][T21940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4147'. [ 568.024806][T21940] 8021q: adding VLAN 0 to HW filter on device bond3 [ 568.100519][T21946] netlink: 'syz.3.4149': attribute type 8 has an invalid length. [ 568.163488][T21949] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4149'. [ 568.380561][T21960] netlink: 'syz.2.4152': attribute type 33 has an invalid length. [ 568.403465][T21965] netlink: 'syz.4.4153': attribute type 1 has an invalid length. [ 568.419751][T21960] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4152'. [ 568.444678][T21965] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4153'. [ 568.535097][T21971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 568.572607][ T981] lo speed is unknown, defaulting to 1000 [ 568.802884][T21990] netlink: 'syz.2.4161': attribute type 1 has an invalid length. [ 568.838619][T21985] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4160'. [ 568.849660][T21990] netlink: 'syz.2.4161': attribute type 1 has an invalid length. [ 568.988679][T22003] netlink: 'syz.2.4164': attribute type 1 has an invalid length. [ 569.006160][T22003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 569.017600][T22002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4165'. [ 569.286249][T22016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.647778][T22046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4178'. [ 569.747854][T22053] Cannot find add_set index 0 as target [ 569.935735][ T9671] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 569.987383][T22060] syzkaller0: entered promiscuous mode [ 569.992906][T22060] syzkaller0: entered allmulticast mode [ 570.025896][ T9671] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 570.113125][T22076] veth1_to_hsr: entered promiscuous mode [ 570.128545][T22076] macvtap1: entered promiscuous mode [ 570.137598][T22076] macvtap1: entered allmulticast mode [ 570.143159][T22076] veth1_to_hsr: entered allmulticast mode [ 570.229790][T22077] syzkaller0: entered promiscuous mode [ 570.246828][T22077] syzkaller0: entered allmulticast mode [ 570.275980][T22088] x_tables: duplicate underflow at hook 2 [ 570.425226][T22094] tipc: Enabled bearer , priority 0 [ 570.432750][T22094] syzkaller0: entered promiscuous mode [ 570.462452][T22094] syzkaller0: entered allmulticast mode [ 570.580842][T22094] tipc: Resetting bearer [ 570.615131][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 570.635906][T22111] netlink: 'syz.3.4192': attribute type 1 has an invalid length. [ 570.755352][T22114] bond0: (slave xfrm1): The slave device specified does not support setting the MAC address [ 570.809359][T22114] bond0: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 570.830780][T22114] bond0: (slave xfrm1): making interface the new active one [ 570.839238][T22114] bond0: (slave xfrm1): Enslaving as an active interface with an up link [ 570.855706][T22098] wg1 speed is unknown, defaulting to 1000 [ 570.869445][T22098] lo speed is unknown, defaulting to 1000 [ 571.268350][T22143] netlink: 'syz.2.4198': attribute type 4 has an invalid length. [ 571.288259][T22145] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4199'. [ 571.405903][T22150] wg1 speed is unknown, defaulting to 1000 [ 571.426661][T22150] lo speed is unknown, defaulting to 1000 [ 571.506841][ T981] tipc: Node number set to 1831295771 [ 571.602457][T22098] tipc: Resetting bearer [ 571.664062][T22098] tipc: Disabling bearer [ 571.749919][T12506] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 571.783538][T12506] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 571.819419][T22173] atomic_op ffff88804da42998 conn xmit_atomic 0000000000000000 [ 571.886579][T22177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4209'. [ 572.172879][T22184] __nla_validate_parse: 1 callbacks suppressed [ 572.172898][T22184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4211'. [ 572.445001][ T981] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 572.794221][T22214] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4216'. [ 572.987521][T22226] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4220'. [ 572.997432][T22226] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 573.166714][T22237] sctp: [Deprecated]: syz.2.4223 (pid 22237) Use of int in max_burst socket option deprecated. [ 573.166714][T22237] Use struct sctp_assoc_value instead [ 573.283256][T22243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4223'. [ 573.415957][T22243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4223'. [ 573.577433][T22256] tipc: Enabled bearer , priority 0 [ 573.595738][T22256] syzkaller0: entered promiscuous mode [ 573.606547][T22259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4230'. [ 573.612113][T22256] syzkaller0: entered allmulticast mode [ 573.639817][T22260] sctp: [Deprecated]: syz.1.4229 (pid 22260) Use of int in maxseg socket option. [ 573.639817][T22260] Use struct sctp_assoc_value instead [ 573.695882][T22260] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4229'. [ 573.713803][T22259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4230'. [ 573.770485][T22249] tipc: Resetting bearer [ 573.822237][T22264] netlink: zone id is out of range [ 573.844728][T22249] tipc: Disabling bearer [ 573.904019][T22266] netlink: 'syz.1.4231': attribute type 11 has an invalid length. [ 573.944498][T22266] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.4231'. [ 574.119940][T22281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4236'. [ 574.753800][T22308] netlink: 'syz.0.4240': attribute type 1 has an invalid length. [ 575.015291][T22325] netlink: 'syz.0.4247': attribute type 11 has an invalid length. [ 575.367892][T22333] syzkaller0: entered promiscuous mode [ 575.395076][T22333] syzkaller0: entered allmulticast mode [ 575.432466][T22333] IPVS: stopping backup sync thread 19831 ... [ 575.724631][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 575.734627][T22348] nbd: illegal input index 65508 [ 575.939244][T22356] wg1 speed is unknown, defaulting to 1000 [ 575.962158][T22356] lo speed is unknown, defaulting to 1000 [ 577.285208][T22413] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 577.405176][T22415] wg1 speed is unknown, defaulting to 1000 [ 577.412740][T22415] lo speed is unknown, defaulting to 1000 [ 577.483668][T22432] siw: device registration error -23 [ 577.595567][T22437] ipvlan2: entered promiscuous mode [ 578.156132][T22458] __nla_validate_parse: 9 callbacks suppressed [ 578.156149][T22458] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4283'. [ 578.192659][T22453] wg1 speed is unknown, defaulting to 1000 [ 578.202708][T22453] lo speed is unknown, defaulting to 1000 [ 578.331784][T22465] Cannot find del_set index 4 as target [ 579.009718][T22500] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4292'. [ 579.554884][T22528] siw: device registration error -23 [ 579.622456][T22513] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.751498][T22513] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.773755][T22531] wg1 speed is unknown, defaulting to 1000 [ 579.788064][T22531] lo speed is unknown, defaulting to 1000 [ 579.882040][T22513] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.009665][T22513] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.213001][T12505] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.225903][T22551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4306'. [ 580.251418][ T8509] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.282029][ T8509] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.321919][T12505] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.458984][T22566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4311'. [ 580.551638][T22571] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.4314'. [ 580.590872][T22575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4313'. [ 580.611409][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.622551][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.637430][T22575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4313'. [ 580.661995][T22575] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4313'. [ 580.683240][T22575] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4313'. [ 580.725318][ C0] ------------[ cut here ]------------ [ 580.730850][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 580.740759][ C0] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#0: syz-executor/17979 [ 580.751695][ C0] Modules linked in: [ 580.755652][ C0] CPU: 0 UID: 0 PID: 17979 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 580.765251][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.775359][ C0] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 580.781635][ C0] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 580.801302][ C0] RSP: 0018:ffffc90000007758 EFLAGS: 00010246 [ 580.807420][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 580.815434][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff8f92de90 [ 580.823409][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 580.831437][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88805827dca8 [ 580.839460][ C0] R13: 0000000000000000 R14: ffffffff8f92de90 R15: ffff88806789b138 [ 580.847486][ C0] FS: 0000555568782500(0000) GS:ffff888125e35000(0000) knlGS:0000000000000000 [ 580.856466][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 580.863065][ C0] CR2: 0000000000000010 CR3: 0000000094374000 CR4: 00000000003526f0 [ 580.871089][ C0] Call Trace: [ 580.874400][ C0] [ 580.877269][ C0] rate_control_send_low+0x1a7/0x7b0 [ 580.882581][ C0] rate_control_get_rate+0x20b/0x5d0 [ 580.887924][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 580.893756][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 580.900142][ C0] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 580.905731][ C0] ? __ieee80211_beacon_get+0xce1/0x1880 [ 580.911382][ C0] __ieee80211_beacon_get+0xd3d/0x1880 [ 580.916892][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 580.922478][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 580.927997][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 580.934098][ C0] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 580.939717][ C0] __iterate_interfaces+0x2ab/0x590 [ 580.944965][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 580.951051][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 580.958292][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 580.964403][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 580.971444][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 580.976701][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 580.982529][ C0] __hrtimer_run_queues+0x51c/0xc30 [ 580.987785][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 580.993813][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 580.999577][ C0] ? read_tsc+0x9/0x20 [ 581.003660][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 581.009521][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 581.014683][ C0] handle_softirqs+0x27d/0x850 [ 581.019462][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 581.024244][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 581.029588][ C0] __irq_exit_rcu+0xca/0x1f0 [ 581.034191][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 581.039454][ C0] irq_exit_rcu+0x9/0x30 [ 581.043710][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 581.049387][ C0] [ 581.052324][ C0] [ 581.055289][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 581.061282][ C0] RIP: 0010:deref_stack_reg+0x194/0x230 [ 581.066876][ C0] Code: 39 c3 0f 96 c1 4d 39 c6 0f 97 c2 20 c2 20 ca 80 fa 01 75 46 49 8d 40 08 48 39 d8 0f 97 c1 4c 39 f0 0f 96 c0 20 c8 3c 01 75 30 <4c> 89 c7 49 89 f7 e8 11 08 00 00 49 89 c6 48 8b 5c 24 18 48 89 d8 [ 581.086539][ C0] RSP: 0018:ffffc90005206de0 EFLAGS: 00000202 [ 581.092629][ C0] RAX: ffffc90005207701 RBX: ffffc90005200000 RCX: 0000000000000001 [ 581.100657][ C0] RDX: ffffc90005206f48 RSI: dffffc0000000000 RDI: ffffc90005206f08 [ 581.108683][ C0] RBP: 1ffff92000a40de1 R08: ffffc900052077b8 R09: 0000000000000000 [ 581.116719][ C0] R10: ffffc90005206f58 R11: fffff52000a40ded R12: 1ffff92000a40de2 [ 581.124759][ C0] R13: 1ffff92000a40de3 R14: ffffc90005208000 R15: ffffc90005206f08 [ 581.132780][ C0] unwind_next_frame+0x18cc/0x23d0 [ 581.137971][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 581.143114][ C0] ? d_invalidate+0x11d/0x260 [ 581.147867][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 581.154057][ C0] arch_stack_walk+0x11c/0x150 [ 581.158893][ C0] ? proc_invalidate_siblings_dcache+0x3d3/0x6c0 [ 581.165291][ C0] stack_trace_save+0x9c/0xe0 [ 581.170008][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 581.175450][ C0] kasan_save_stack+0x3e/0x60 [ 581.180147][ C0] ? kasan_save_stack+0x3e/0x60 [ 581.185047][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 581.190438][ C0] ? call_rcu+0x157/0x9c0 [ 581.194811][ C0] ? __destroy_inode+0x2da/0x670 [ 581.199767][ C0] ? evict+0x87d/0xae0 [ 581.203852][ C0] ? __dentry_kill+0x209/0x660 [ 581.208674][ C0] ? shrink_kill+0xa9/0x2c0 [ 581.213192][ C0] ? shrink_dentry_list+0x2e0/0x5e0 [ 581.218445][ C0] ? shrink_dcache_tree+0xca/0x2e0 [ 581.223576][ C0] ? d_invalidate+0x11d/0x260 [ 581.228362][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 581.233576][ C0] ? __pfx_inode_free_by_rcu+0x10/0x10 [ 581.239086][ C0] call_rcu+0x157/0x9c0 [ 581.243282][ C0] ? __pfx_call_rcu+0x10/0x10 [ 581.248019][ C0] ? bpf_inode_storage_free+0x150/0x5b0 [ 581.253582][ C0] ? preempt_count_add+0x91/0x190 [ 581.258669][ C0] __destroy_inode+0x2da/0x670 [ 581.263454][ C0] evict+0x87d/0xae0 [ 581.267416][ C0] ? __pfx_evict+0x10/0x10 [ 581.271856][ C0] ? _raw_spin_unlock+0x28/0x50 [ 581.276777][ C0] ? iput+0xcc6/0x1030 [ 581.280883][ C0] __dentry_kill+0x209/0x660 [ 581.285528][ C0] ? shrink_kill+0x8d/0x2c0 [ 581.290052][ C0] shrink_kill+0xa9/0x2c0 [ 581.294439][ C0] shrink_dentry_list+0x2e0/0x5e0 [ 581.299495][ C0] ? __pfx_select_collect+0x10/0x10 [ 581.304742][ C0] shrink_dcache_tree+0xca/0x2e0 [ 581.309702][ C0] ? __pfx_select_collect+0x10/0x10 [ 581.314958][ C0] ? __pfx_shrink_dcache_tree+0x10/0x10 [ 581.320533][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 581.325783][ C0] d_invalidate+0x11d/0x260 [ 581.330304][ C0] ? __pfx_d_invalidate+0x10/0x10 [ 581.335379][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 581.340610][ C0] proc_invalidate_siblings_dcache+0x3d3/0x6c0 [ 581.346929][ C0] ? proc_invalidate_siblings_dcache+0x2b/0x6c0 [ 581.353198][ C0] release_task+0x11d1/0x16c0 [ 581.357948][ C0] ? wait_consider_task+0x1944/0x2e10 [ 581.363359][ C0] ? __pfx_release_task+0x10/0x10 [ 581.368457][ C0] ? __do_wait+0x153/0x740 [ 581.372905][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.378172][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 581.383396][ C0] wait_consider_task+0x1944/0x2e10 [ 581.388685][ C0] ? __do_wait+0x153/0x740 [ 581.393126][ C0] ? __pfx_wait_consider_task+0x10/0x10 [ 581.398727][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 581.403945][ C0] __do_wait+0x153/0x740 [ 581.408269][ C0] do_wait+0x1e8/0x4f0 [ 581.412362][ C0] ? do_wait+0x17e/0x4f0 [ 581.416663][ C0] kernel_wait4+0x1af/0x280 [ 581.421193][ C0] ? __pfx_kernel_wait4+0x10/0x10 [ 581.426280][ C0] ? __pfx_child_wait_callback+0x10/0x10 [ 581.431943][ C0] __x64_sys_wait4+0x133/0x1e0 [ 581.436859][ C0] ? __pfx___x64_sys_wait4+0x10/0x10 [ 581.442191][ C0] ? do_syscall_64+0xbe/0xf80 [ 581.446918][ C0] do_syscall_64+0xfa/0xf80 [ 581.451443][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.457556][ C0] ? clear_bhb_loop+0x60/0xb0 [ 581.462253][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.468199][ C0] RIP: 0033:0x7f44e8985897 [ 581.472630][ C0] Code: 89 7c 24 10 48 89 4c 24 18 e8 65 1c 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 b5 1c 03 00 8b 44 [ 581.492280][ C0] RSP: 002b:00007ffeb27ad100 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 581.500760][ C0] RAX: ffffffffffffffda RBX: 000000000000032a RCX: 00007f44e8985897 [ 581.508785][ C0] RDX: 0000000040000001 RSI: 00007ffeb27ad16c RDI: 00000000ffffffff [ 581.516824][ C0] RBP: 00007ffeb27ad16c R08: 0000000000000000 R09: 0000000000000000 [ 581.524873][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 581.532870][ C0] R13: 00000000000927c0 R14: 000000000008dc3d R15: 00007ffeb27ad1c0 [ 581.537790][T22598] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4321'. [ 581.540910][ C0] [ 581.551116][T22598] netlink: 'syz.1.4321': attribute type 5 has an invalid length. [ 581.552858][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 581.552877][ C0] CPU: 0 UID: 0 PID: 17979 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 581.552898][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 581.552910][ C0] Call Trace: [ 581.552918][ C0] [ 581.552927][ C0] dump_stack_lvl+0x99/0x250 [ 581.552956][ C0] ? __asan_memcpy+0x40/0x70 [ 581.552974][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.552997][ C0] ? __pfx__printk+0x10/0x10 [ 581.553036][ C0] vpanic+0x237/0x6d0 [ 581.553059][ C0] ? __pfx_vpanic+0x10/0x10 [ 581.553079][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 581.553106][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 581.553143][ C0] panic+0xb9/0xc0 [ 581.553164][ C0] ? __pfx_panic+0x10/0x10 [ 581.553203][ C0] __warn+0x317/0x4b0 [ 581.553224][ C0] ? __rate_control_send_low+0x524/0x800 [ 581.553249][ C0] ? __rate_control_send_low+0x524/0x800 [ 581.553267][ C0] __report_bug+0x288/0x500 [ 581.553286][ C0] ? stack_depot_save_flags+0x40/0x850 [ 581.553314][ C0] ? __rate_control_send_low+0x524/0x800 [ 581.553340][ C0] ? __pfx___report_bug+0x10/0x10 [ 581.553356][ C0] ? kasan_save_track+0x4f/0x80 [ 581.553380][ C0] ? __iterate_interfaces+0x2ab/0x590 [ 581.553399][ C0] ? ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 581.553420][ C0] ? mac80211_hwsim_beacon+0xbb/0x180 [ 581.553441][ C0] ? __hrtimer_run_queues+0x51c/0xc30 [ 581.553464][ C0] ? hrtimer_run_softirq+0x187/0x2b0 [ 581.553487][ C0] ? handle_softirqs+0x27d/0x850 [ 581.553506][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 581.553525][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 581.553543][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 581.553563][ C0] ? deref_stack_reg+0x194/0x230 [ 581.553588][ C0] report_bug_entry+0x19a/0x290 [ 581.553608][ C0] ? __rate_control_send_low+0x5bb/0x800 [ 581.553625][ C0] ? __rate_control_send_low+0x5c0/0x800 [ 581.553643][ C0] handle_bug+0xca/0x200 [ 581.553667][ C0] exc_invalid_op+0x1a/0x50 [ 581.553689][ C0] asm_exc_invalid_op+0x1a/0x20 [ 581.553706][ C0] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 581.553727][ C0] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 581.553743][ C0] RSP: 0018:ffffc90000007758 EFLAGS: 00010246 [ 581.553762][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 581.553774][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff8f92de90 [ 581.553787][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.553799][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88805827dca8 [ 581.553812][ C0] R13: 0000000000000000 R14: ffffffff8f92de90 R15: ffff88806789b138 [ 581.553852][ C0] ? __rate_control_send_low+0x58d/0x800 [ 581.553885][ C0] rate_control_send_low+0x1a7/0x7b0 [ 581.553910][ C0] rate_control_get_rate+0x20b/0x5d0 [ 581.553938][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 581.553971][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 581.554004][ C0] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 581.554029][ C0] ? __ieee80211_beacon_get+0xce1/0x1880 [ 581.554054][ C0] __ieee80211_beacon_get+0xd3d/0x1880 [ 581.554078][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 581.554110][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 581.554136][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 581.554171][ C0] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 581.554206][ C0] __iterate_interfaces+0x2ab/0x590 [ 581.554228][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 581.554254][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 581.554277][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 581.554307][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 581.554333][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 581.554356][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 581.554378][ C0] __hrtimer_run_queues+0x51c/0xc30 [ 581.554400][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 581.554438][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 581.554461][ C0] ? read_tsc+0x9/0x20 [ 581.554486][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 581.554514][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 581.554544][ C0] handle_softirqs+0x27d/0x850 [ 581.554568][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 581.554593][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 581.554624][ C0] __irq_exit_rcu+0xca/0x1f0 [ 581.554644][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 581.554673][ C0] irq_exit_rcu+0x9/0x30 [ 581.554690][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 581.554710][ C0] [ 581.554717][ C0] [ 581.554726][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 581.554746][ C0] RIP: 0010:deref_stack_reg+0x194/0x230 [ 581.554768][ C0] Code: 39 c3 0f 96 c1 4d 39 c6 0f 97 c2 20 c2 20 ca 80 fa 01 75 46 49 8d 40 08 48 39 d8 0f 97 c1 4c 39 f0 0f 96 c0 20 c8 3c 01 75 30 <4c> 89 c7 49 89 f7 e8 11 08 00 00 49 89 c6 48 8b 5c 24 18 48 89 d8 [ 581.554783][ C0] RSP: 0018:ffffc90005206de0 EFLAGS: 00000202 [ 581.554799][ C0] RAX: ffffc90005207701 RBX: ffffc90005200000 RCX: 0000000000000001 [ 581.554812][ C0] RDX: ffffc90005206f48 RSI: dffffc0000000000 RDI: ffffc90005206f08 [ 581.554827][ C0] RBP: 1ffff92000a40de1 R08: ffffc900052077b8 R09: 0000000000000000 [ 581.554846][ C0] R10: ffffc90005206f58 R11: fffff52000a40ded R12: 1ffff92000a40de2 [ 581.554861][ C0] R13: 1ffff92000a40de3 R14: ffffc90005208000 R15: ffffc90005206f08 [ 581.554899][ C0] unwind_next_frame+0x18cc/0x23d0 [ 581.554929][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 581.554952][ C0] ? d_invalidate+0x11d/0x260 [ 581.554981][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 581.555010][ C0] arch_stack_walk+0x11c/0x150 [ 581.555037][ C0] ? proc_invalidate_siblings_dcache+0x3d3/0x6c0 [ 581.555065][ C0] stack_trace_save+0x9c/0xe0 [ 581.555092][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 581.555130][ C0] kasan_save_stack+0x3e/0x60 [ 581.555148][ C0] ? kasan_save_stack+0x3e/0x60 [ 581.555166][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 581.555190][ C0] ? call_rcu+0x157/0x9c0 [ 581.555211][ C0] ? __destroy_inode+0x2da/0x670 [ 581.555231][ C0] ? evict+0x87d/0xae0 [ 581.555247][ C0] ? __dentry_kill+0x209/0x660 [ 581.555264][ C0] ? shrink_kill+0xa9/0x2c0 [ 581.555286][ C0] ? shrink_dentry_list+0x2e0/0x5e0 [ 581.555308][ C0] ? shrink_dcache_tree+0xca/0x2e0 [ 581.555331][ C0] ? d_invalidate+0x11d/0x260 [ 581.555400][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 581.555426][ C0] ? __pfx_inode_free_by_rcu+0x10/0x10 [ 581.555449][ C0] call_rcu+0x157/0x9c0 [ 581.555485][ C0] ? __pfx_call_rcu+0x10/0x10 [ 581.555506][ C0] ? bpf_inode_storage_free+0x150/0x5b0 [ 581.555528][ C0] ? preempt_count_add+0x91/0x190 [ 581.555556][ C0] __destroy_inode+0x2da/0x670 [ 581.555582][ C0] evict+0x87d/0xae0 [ 581.555609][ C0] ? __pfx_evict+0x10/0x10 [ 581.555627][ C0] ? _raw_spin_unlock+0x28/0x50 [ 581.555654][ C0] ? iput+0xcc6/0x1030 [ 581.555687][ C0] __dentry_kill+0x209/0x660 [ 581.555708][ C0] ? shrink_kill+0x8d/0x2c0 [ 581.555732][ C0] shrink_kill+0xa9/0x2c0 [ 581.555756][ C0] shrink_dentry_list+0x2e0/0x5e0 [ 581.555786][ C0] ? __pfx_select_collect+0x10/0x10 [ 581.555805][ C0] shrink_dcache_tree+0xca/0x2e0 [ 581.555829][ C0] ? __pfx_select_collect+0x10/0x10 [ 581.555855][ C0] ? __pfx_shrink_dcache_tree+0x10/0x10 [ 581.555887][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 581.555917][ C0] d_invalidate+0x11d/0x260 [ 581.555945][ C0] ? __pfx_d_invalidate+0x10/0x10 [ 581.555971][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 581.556003][ C0] proc_invalidate_siblings_dcache+0x3d3/0x6c0 [ 581.556026][ C0] ? proc_invalidate_siblings_dcache+0x2b/0x6c0 [ 581.556054][ C0] release_task+0x11d1/0x16c0 [ 581.556087][ C0] ? wait_consider_task+0x1944/0x2e10 [ 581.556122][ C0] ? __pfx_release_task+0x10/0x10 [ 581.556146][ C0] ? __do_wait+0x153/0x740 [ 581.556180][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.556207][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 581.556230][ C0] wait_consider_task+0x1944/0x2e10 [ 581.556275][ C0] ? __do_wait+0x153/0x740 [ 581.556302][ C0] ? __pfx_wait_consider_task+0x10/0x10 [ 581.556333][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 581.556359][ C0] __do_wait+0x153/0x740 [ 581.556391][ C0] do_wait+0x1e8/0x4f0 [ 581.556416][ C0] ? do_wait+0x17e/0x4f0 [ 581.556447][ C0] kernel_wait4+0x1af/0x280 [ 581.556476][ C0] ? __pfx_kernel_wait4+0x10/0x10 [ 581.556506][ C0] ? __pfx_child_wait_callback+0x10/0x10 [ 581.556536][ C0] __x64_sys_wait4+0x133/0x1e0 [ 581.556566][ C0] ? __pfx___x64_sys_wait4+0x10/0x10 [ 581.556617][ C0] ? do_syscall_64+0xbe/0xf80 [ 581.556640][ C0] do_syscall_64+0xfa/0xf80 [ 581.556661][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.556679][ C0] ? clear_bhb_loop+0x60/0xb0 [ 581.556702][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.556720][ C0] RIP: 0033:0x7f44e8985897 [ 581.556738][ C0] Code: 89 7c 24 10 48 89 4c 24 18 e8 65 1c 03 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 b5 1c 03 00 8b 44 [ 581.556754][ C0] RSP: 002b:00007ffeb27ad100 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 581.556772][ C0] RAX: ffffffffffffffda RBX: 000000000000032a RCX: 00007f44e8985897 [ 581.556786][ C0] RDX: 0000000040000001 RSI: 00007ffeb27ad16c RDI: 00000000ffffffff [ 581.556799][ C0] RBP: 00007ffeb27ad16c R08: 0000000000000000 R09: 0000000000000000 [ 581.556811][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 581.556823][ C0] R13: 00000000000927c0 R14: 000000000008dc3d R15: 00007ffeb27ad1c0 [ 581.556859][ C0] [ 581.560955][ C0] Kernel Offset: disabled