last executing test programs: 2.350984643s ago: executing program 2 (id=1336): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x7, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x400}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040044}, 0x1) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040044}, 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}, @srh={0x2e, 0x4, 0x4, 0x2, 0x2, 0x28, 0xb5, [@local, @private0]}], @echo_reply}}}}}, 0x0) socket(0x2a, 0x2, 0x0) (async) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x8, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast2}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0x375}]}}]}, 0x54}}, 0x24000014) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$kcm(0xa, 0x2, 0x3a) recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40010100) setsockopt$sock_attach_bpf(r5, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x1, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000600)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 2.226540073s ago: executing program 0 (id=1338): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e22, @empty}], 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) listen(r2, 0x1) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3fa, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) r3 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r3, &(0x7f0000000240)={0x1a, 0xf, 0x3, 0xd, 0xfb, 0x7}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x100) connect$packet(r4, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) shutdown(r4, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x6, @remote, 'ip6tnl0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000180)=""/136, 0x88, 0x0, &(0x7f0000000300)=""/128, 0x80}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r6, @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.949105282s ago: executing program 2 (id=1343): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "d2adb7a7c9a7777ffba16df679c341d08ca65a9e64f9c4c077b2f6e007bc1497", "46457e42a66358fde973fb7bc32baf0b79939cc00f7136ccd4e957f3348c6a25", "34d62a0e356e40a0155efc853c2903d21ac5a0466fb55ae6f42be7fede208116", "19a177c49857ca89d17c408b4e1ff7821bc53c82567bfe34b599afc49bd862ea", "82533d56720c5f3658d868b8322b396587f008533f5df67f428c628d1855fe1b", "c18c29abe8d1670a2a8047ad", 0x3, 0x1, 0xaf9, 0xfffffffe, 0x9}}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xf, 0x12, 0xffffffffffffffff, 0x1a047000) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r4, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r5, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x3}]}, 0x14}], 0x1}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) 1.674751138s ago: executing program 2 (id=1346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000740)=""/4096, 0x1000, 0x7) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000600", @ANYRES32, @ANYBLOB="08000300c6f898"], 0x40}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000090a010200000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000340000000300c000b4047"], 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'pimreg\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_newnexthop={0x38, 0x68, 0x400, 0x470bd2b, 0x25dfdbfb, {0xa, 0x0, 0x4, 0x0, 0x18}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@local}, @NHA_OIF={0x8, 0x5, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8c1}, 0x40000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000e00000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f00000003c0)=[@sack_perm, @timestamp, @mss={0x2, 0x2}, @timestamp, @window={0x3, 0xa, 0x6}, @window={0x3, 0x9, 0x3}, @mss, @mss={0x2, 0xfbd0}], 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x300}, 0x90) 1.475927436s ago: executing program 4 (id=1348): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711807000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.466250874s ago: executing program 4 (id=1349): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="d8fbe1214f7d", 0x6}, {&(0x7f0000000140)="fabea346b9bb1cc30d2a42f84c4a55751e3c111e1cd8240827bda0d185691a1e640998e5b79065977d2b4b91b4594b5bb0929d29f2de43fd4cbaa8fe5917a791531d0eb243a5ac92415aa251cf58740aa1df0b9ac366d907447ad4696ce3831c8de51465041f206dab598532dd982ccfc1cb3fc76f8911b17a0a3cc4e2fbebf082be0fa0bdb417af11d25542c7dc5acac85793e7b6969cdea49dd0903feff63b410dc924c0b6780ed066d5ab91a304f7000b4388b4134dfa915befbeeb02d53a067d02210b7e053291505c7b994a7d86cc260e8ce14b5b1bd7257bbafe44cc6502ff2e9c7b9a1b052ba9262a4b5c7b04161bea27", 0xf4}, {&(0x7f0000000240)="58279c66ba57c751f1c07fd3c11aae7d32059fb76b05ecf56b3e109bfd4df589f73670fb182b518a38d31dcb7ee1338ba831ae932b2f3bf472f0938dbdb1a56854b93ccbf3e2923fe918b4feb662d71c84eed0cb3006dc7ec3e680fe88668bb5faa62f8e4641999ea0c7abc696f455d0704d71aee5e0c41b3ca44516b61c33f1", 0x80}, {&(0x7f00000002c0)="63f6d9518442ad21b1beadb6f154ac268ab256bb7330891735a07f1d15", 0x1d}, {&(0x7f0000000300)="420dfbc7ae88189c8df13ff721698f9add870120176edc96f61ae5f588fc07", 0x1f}, {&(0x7f0000000340)="ebd5395e5e9dd430be4e351df378", 0xe}], 0x6}, 0x40000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8040004}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=@gettaction={0x11c, 0x32, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x39d11468ad171b55}, 0x4004004) socket$kcm(0x2, 0x200000000000001, 0x106) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) (async) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="d8fbe1214f7d", 0x6}, {&(0x7f0000000140)="fabea346b9bb1cc30d2a42f84c4a55751e3c111e1cd8240827bda0d185691a1e640998e5b79065977d2b4b91b4594b5bb0929d29f2de43fd4cbaa8fe5917a791531d0eb243a5ac92415aa251cf58740aa1df0b9ac366d907447ad4696ce3831c8de51465041f206dab598532dd982ccfc1cb3fc76f8911b17a0a3cc4e2fbebf082be0fa0bdb417af11d25542c7dc5acac85793e7b6969cdea49dd0903feff63b410dc924c0b6780ed066d5ab91a304f7000b4388b4134dfa915befbeeb02d53a067d02210b7e053291505c7b994a7d86cc260e8ce14b5b1bd7257bbafe44cc6502ff2e9c7b9a1b052ba9262a4b5c7b04161bea27", 0xf4}, {&(0x7f0000000240)="58279c66ba57c751f1c07fd3c11aae7d32059fb76b05ecf56b3e109bfd4df589f73670fb182b518a38d31dcb7ee1338ba831ae932b2f3bf472f0938dbdb1a56854b93ccbf3e2923fe918b4feb662d71c84eed0cb3006dc7ec3e680fe88668bb5faa62f8e4641999ea0c7abc696f455d0704d71aee5e0c41b3ca44516b61c33f1", 0x80}, {&(0x7f00000002c0)="63f6d9518442ad21b1beadb6f154ac268ab256bb7330891735a07f1d15", 0x1d}, {&(0x7f0000000300)="420dfbc7ae88189c8df13ff721698f9add870120176edc96f61ae5f588fc07", 0x1f}, {&(0x7f0000000340)="ebd5395e5e9dd430be4e351df378", 0xe}], 0x6}, 0x40000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8040004}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=@gettaction={0x11c, 0x32, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x39d11468ad171b55}, 0x4004004) (async) 1.27585196s ago: executing program 4 (id=1350): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61157800000000006113700000000000bfa000000000000007000000ee0016055e03010000000000640500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000040600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.275352468s ago: executing program 0 (id=1351): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$can_bcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="082651a5b4940c00"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 883.798731ms ago: executing program 4 (id=1352): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500353100000079102800000000001e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x4b, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffe6, 0x10, &(0x7f0000000000)={0x0, 0x10000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 883.131698ms ago: executing program 4 (id=1353): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x1c4, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xae9}]}, @CTA_NAT_DST={0xb8, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3d}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x511}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x800}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9a}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x11299224}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4040004}, 0x41) socket$kcm(0x2, 0x3, 0x2) (async) r6 = socket$kcm(0x2, 0x3, 0x2) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="100000000000000000000000070000001400000000000000100100000a"], 0x28}, 0x0) (async) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="100000000000000000000000070000001400000000000000100100000a"], 0x28}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = socket(0x1e, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b21, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x10, 0x7800, 0xfb, 0x8001, {{0xe, 0x4, 0x3, 0x5, 0x38, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @loopback, {[@generic={0x88, 0xa, "7d2fe6261dfcc49d"}, @timestamp={0x44, 0x18, 0x4e, 0x0, 0x0, [0x5, 0x3, 0x7fff, 0xb, 0x9]}, @end]}}}}}) r9 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xbc, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, 0x10, 0x0, 0xe7, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xbc, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, 0x10, 0x0, 0xe7, 0x2}}) write$tun(r4, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xdd, 0x66, 0x0, 0xb, 0x2, 0x0, @private=0xa010101, @broadcast, {[@ra={0x94, 0x4}]}}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989ee"}}, 0xeb) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x77}, 0x8) r10 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x25dfdbfd, {0xa}, [@NDA_LINK_NETNSID={0x8, 0xa, 0xff800}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCDARP(r10, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @rand_addr=0x64010100}, {0x0, @random}, 0xffffff7d, {0x2, 0x0, @remote}}) 880.981213ms ago: executing program 0 (id=1354): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) 880.435226ms ago: executing program 1 (id=1355): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) getpeername$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c) sendmmsg$inet6(r0, &(0x7f0000001b00)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x1, @mcast1, 0xcc1}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000003c0)="7d41b0a8d34dd03fada38e07a862a498cb5f96fd61a6ff116f6ee34b1cbd05ffbccf66fa0fbff3ef1d3713b9fde96041bc6b3e7b0906c1d5239e5ce787ddfe64c5384de23dbced4a1da4c08966f00211acdd2d146aa4fa2e851a403795cc797e797b59009fc0df21cb871c470095cc18b4860f", 0x73}, {&(0x7f0000000480)="208f54e326dca96b318d94e95f923a1f5dd78cf9900f5f7dd511c712000e445768f2ba44396815c874344bc11e99a14392763bee9ef70510d7493d1703225f74e507c3c37f86348f3b6aa830d835d364f17b441213253a54dad39bc037a8f7819392475023186407c53fb0c82ac5619725785316c634d99cb8623af46d007bd022cab97057775b03b4", 0x89}, {&(0x7f00000002c0)="7dd83847e5107a84845611b14d", 0xd}, {&(0x7f0000000300)="032a5e9683850d", 0x7}, {0x0}], 0x5, &(0x7f0000001980)}}], 0x3, 0x40440c0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a971f12e3a0000000000000001000000024000007f0000010204"], 0x110) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000340)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 878.974931ms ago: executing program 1 (id=1356): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r2, 0x5, 0xffffffff, 0x1000000c, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac08, 0xfac06, 0xeb3ad754ca48937c]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x880) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x0, 0xa94, 0x9}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newrule={0x30, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_to_team\x00'}]}, 0x30}}, 0x0) connect$vsock_stream(r6, &(0x7f00000007c0)={0x28, 0x0, 0xffffffff}, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), r6) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="240129bd7000ffdbdf250300000014a0090020010000000000000400000000000002"], 0x28}, 0x1, 0x0, 0x0, 0x20044884}, 0xc080) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0x4, 0x4, 0x420, 0xffffffff, 0x0, 0x0, 0x1c8, 0xfeffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x87, 0x6, 0x4, 0xa}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x1, 0x3}, {0x2, 0x4, 0x2}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x2}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xd, 0x8, 0x2}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', [0xff, 0xff000000, 0xff, 0xffffffff], [0xff, 0xffffff00, 0xff, 0xff], 'veth0_vlan\x00', 'bond0\x00', {0xff}, {0xff}, 0x3c, 0x3, 0x1, 0x40}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xae) 878.540813ms ago: executing program 3 (id=1357): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24) setsockopt(0xffffffffffffffff, 0x100, 0x3, &(0x7f00000001c0)="d42d7ccaba091896444d6b5e137ea1f8206ca46036ba7567dc7433bd8fe1d8e422e1620f779f3e2a60643a75654b2348f44b9312f22a044fd72d24af8ea255fa2572c4446ad882fe68d4a9a6b570a998280ce27ffdf11f5682c20b97eeb1233495c2e40eaa4eb2d3b01ca0c7473e7f618a0fae22a64b218661fb6217a4f1071c7d46808ca5b21b2fe43dff7c4109cb4cca80ca65ef82284bd9cc615bb25affe94648df20a7", 0xa5) 862.752371ms ago: executing program 0 (id=1358): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x3c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000003c0)="2000000012005f0214f9f4070000fbe40a000000000085b5ca8d7c10277582b9", 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{}], "00ba00"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'k'}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000400)=""/188, 0x44, 0xbc, 0x1, 0x0, 0x0, @void, @value}, 0x28) recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0)='4', 0x1) tee(r5, r4, 0xffffffffffffffff, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c8"], 0x398}}, 0x0) 747.660422ms ago: executing program 2 (id=1359): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005f00013caf23b8000000000008"], 0x28}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r3, 0x700, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x3}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d4}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r3, 0x200, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT, @ANYRES8=0x0], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x38, 0x10, 0x437, 0x0, 0x10000, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}]}, 0x38}}, 0x0) 746.010302ms ago: executing program 3 (id=1360): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071123a000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/37, 0x25}, {&(0x7f0000000200)=""/149, 0x95}, {&(0x7f00000002c0)=""/246, 0xf6}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/1, 0x1}, {&(0x7f00000013c0)=""/196, 0xc4}, {&(0x7f00000000c0)=""/23, 0x17}], 0x7) 729.324745ms ago: executing program 4 (id=1361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140f5"], 0x98}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x90) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r0}, 0x8) r5 = accept$ax25(r2, &(0x7f0000000880)={{}, [@null, @netrom, @rose, @null, @rose, @null, @default, @netrom]}, &(0x7f0000000900)=0x48) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000940)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000e80)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000f80)=0xe8) r8 = getgid() r9 = socket$netlink(0x10, 0x3, 0x10) r10 = getpid() r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r9) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r11, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000003140)={{{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000003240)=0xe8) r13 = getgid() r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSPGRP(r14, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) ioctl$sock_FIOGETOWN(r14, 0x8903, &(0x7f0000002600)=0x0) syz_open_procfs$namespace(r15, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003280)={0x0, 0x0, 0x0}, &(0x7f00000032c0)=0xc) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = getpid() sendmsg$nl_generic(r17, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000701fcffffff00000000017c000008000200", @ANYRES32=r18], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000003300)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000003400)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003440)={0x0, 0x0, 0x0}, &(0x7f0000003480)=0xc) sendmsg$netlink(r2, &(0x7f00000035c0)={&(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2}, 0xc, &(0x7f0000000480)=[{&(0x7f0000000a00)={0x47c, 0x27, 0x2, 0x70bd2c, 0x25dfdbfd, "", [@nested={0x21f, 0xf4, 0x0, 0x1, [@nested={0x4, 0xe3}, @generic="e445c582b74d9551b42227e3f784ef7652b32eade939785a93536424a0e9572373fb4f74d05b6108a4a62aa48d664f2d47adc8864b41c37776fb69af2c0a893d38b9e05432f7061dca06cd20ce8a94154562c625efd33ddf44d0844aade992d5d2fe75f5a06cf2df66e8f39798cd1eff7153baf3f99a354173c8197f0ce6994cdfb826f8e87c2f91e54df5bb48554d442e6bb2b4cc62", @generic="1b3659b2844eef4f3956dff40fa8f26423a11c86b51613d4f2f4d1894799b4e7069b4b9d2b84ff437301ac8992a6976c1fe3b0c8cab3a4054e2796752581af0613389fa1fb9cdc0df173d4f198e08044cad3ce1da54474cad0ef1410a199d3d62ae337f99fe9d9bd31af32216815381b27967680d0d1c35e82417276936531dca2397ef164942c31f04abd37a8b8a5f78d9ebb04da8afc6bc2d4b8ff21bfb21e95a69c22c07937779afb9fed7aaae73f52fc39a5f3c9dd7b538973f59a91bd7a8c0b060aa697946e1a6a3396dd6e", @generic="c6ee3d40f01c67de8b4b7e9e56888b9bb7c07d975244f2be34fe893a7d5f0f15530cd5248af0679c583b818c99167f15f22529b5ebe57cfcc44e18604856f489014e65880ae0e0f0a26477f1c4198c0535156e5a0e01a8828960e07bca3e7dda88023e7af9924832d80f47383117c6641de17928a14a805151a985b4afff9e114457067e97f9d4ffae4872303cdf43c55ba6d34f8939ac0f54b5cd1b910c7659131e66518db8de964854bcd6407f9312c10b1f"]}, @generic="00bd9d8e18d3bc64ded96843b824d5c49f38215f8c0f2ead3b9fda4f60a29ec46b503f822f3bf275200d6a1f17c74c837f5a4b00b974ce4b3ec84f89ae2240d641c08beb46e0a26f038bfa1dea489cc8546d0e3702ed62d766d795646317b7525ca6e0a7fa2eb5404426cdc59af2bb457f3f4db1f45a78c47f165e61c3aa48f18b3388a9641d4d36c1b0beca31474222b32156408c2679d4ae38f75eddde55e643d06ad12a01809dcde38c5a8054637683fb15bc3e06965995e9d8", @nested={0x105, 0x41, 0x0, 0x1, [@nested={0x4, 0x104}, @typed={0x14, 0x7d, 0x0, 0x0, @ipv6=@loopback}, @generic="581a22a103e5e2e15bea635d2ba1e0defd66d0791212a5b04aeb51d02cdf42d1e6636dad9f76c389d6d2712bfc97f831253f4c952c0b5c06d9754450a998a9b53819a2a456e3fdcae1e34f193092b2d40dea1358591e296fc0f743dc48767ea5e870831be10a44cc0f9913e73164b34dd525bcc7e81a2061681f274eda935a00fc25b42f908c1ddb416291d026ec6f527d6692c590d55262059f043c35ed5a32fae9", @generic="57b26a72e03bdd1633bbe725c44524f1295340674853384cb276b89190f03d3fec6712ef2913c5bc6aa164e227f25cc6b9401a6536d14c3e896100bd7975cc535aa32eba73c92f"]}, @typed={0x1f, 0xb8, 0x0, 0x0, @binary="23ace9cc7a801e7e54f2a1071c23d07fe7344ed7d58f56931c33af"}, @generic="eb0be0b502c05ac7a44e539b14e42b437e9a0304ee8909177b3412bd583db2771df17c4e407de6d53eeaa670636284706e195057e01be674f8e669b189d11a6a1cfb2985477ff09ff689b26d3d90c14db0227291cb3b7b29f0172ea216639a3448824aec6571ea643d"]}, 0x47c}, {&(0x7f00000048c0)={0x1154, 0x27, 0x200, 0x70bd26, 0x25dfdbff, "", [@generic="06f65fcd24b7cc88b86db57dfaa3a9bf93967ab9fb8e5e1eec757b72110b25c6602ddf3b85329bd51406e3c7c992de9f17533fa7548d2b7c0fc647448922211206fe67e82ad0c3078309a04d6f6dd04518d9b98d1c367377672edd35f789aa9662189107e555f42cef2ea274bee1191adbcb5cc7dec412a3bd1860c06547352f4406dedc97ea406e5738fdd61705aae5ad31febcf21cc9092ec57900d42ee0f0322390041e47d424816b4c1a925259bf116640b6f257a145", @nested={0x108c, 0x132, 0x0, 0x1, [@nested={0x4, 0xdc}, @generic="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", @typed={0xc, 0x83, 0x0, 0x0, @u64=0xa}, @generic="37ce68dfe03434d347fb6976da01cb0d86a924cba3b9874f15aae292b5c27968e1796be3d3d6f14155a38222e267e3f085e4fc8dfbb7dd70df0868b0d3f5474d6954ccbc6deb316ebc633e175a7381986da55eb226a07adb8d97c9791c52397e", @typed={0x8, 0xf8, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0xae, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}, @typed={0x8, 0xd, 0x0, 0x0, @uid=r20}]}]}, 0x1154}, {&(0x7f0000003800)={0x1094, 0x40, 0x300, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x129, 0x0, 0x0, @pid}, @nested={0x8, 0x130, 0x0, 0x1, [@nested={0x4, 0x3b}]}, @nested={0x4, 0xbf}, @nested={0x1070, 0x3f, 0x0, 0x1, [@generic="0d9d22bb4d5425ca8335ac73e2d60d499e433c6dd5750e5995bbda72b855410c060e036691265684e426e84186e8e77ae80ed7f6fe459c0e690b795d361e02c7d5a81f60b4e1fe29e4ddcf64db7582df77015caf", @generic="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", @nested={0x4, 0x22}, @typed={0x8, 0x126, 0x0, 0x0, @fd=r0}, @typed={0xc, 0x132, 0x0, 0x0, @u64=0x200}]}]}, 0x1094}], 0x3, &(0x7f00000034c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @rights={{0x20, 0x1, 0x1, [r4, r5, r2, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xee00, r16}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r21}}}], 0xf0, 0x4040004}, 0x20000040) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000100)=0xffff) 708.489462ms ago: executing program 1 (id=1362): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x6, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 640.789383ms ago: executing program 0 (id=1363): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000080}, 0x4080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0xa, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}]}]}, 0x74}}, 0x3cc9b495ec72bf9) (async) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x20048850) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r2, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x54f, 0x6c}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfad4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9e9c66032cb07633}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f00000005c0)={0x29c, r2, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1f}}}}, [@crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac02}, @NL80211_ATTR_AKM_SUITES={0x4}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x10, 0x2, 0x0, 0x0, {0x5, 0x52, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2}, 0x8, 0x3, 0xe3}}, @NL80211_ATTR_IE={0x184, 0x2a, [@tim={0x5, 0xe0, {0x7, 0xb, 0x3, "eb8acdf0534461e1954ee5d1164b413e2239e400c6b70dc907dcccb741a7b770debbd2a21cec23a2add7c8ea5ef893b074be001df47aa0079047e89bf18fa791bc7a8a9d3dada667be680e2b831d911993afd15c220a2cdad84643a7287663829fb16fdf1585589d43ab43b7754a0a748f40ab0d04947d8af12546201f0d5072424b6cf3b44791b28707ef94792a51929a7a6099f4d7235ae5e1233985a2970fcf9143650ad2dfabf4b2bdb5e276bc792a4b5120921836acfc51e4987871ab2e9c80e20f3ce1608caaee76fe8e5bb2a3f8339166891463dbc4c114cfb5"}}, @peer_mgmt={0x75, 0x16, {0x1, 0x7, @void, @val=0x12, @val="f54dbf04121081de36197e5a7fcd994e"}}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @preq={0x82, 0x67, {{0x0, 0x1, 0x1}, 0x3, 0x10, 0x3, @broadcast, 0x3, @void, 0x5bc18c3e, 0x4, 0x7, [{{}, @device_a, 0xa13}, {{0x1, 0x0, 0x1}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_b, 0x9}, {{0x0, 0x0, 0x1}, @device_a, 0x7}, {{0x0, 0x0, 0x1}, @device_b, 0xc40}, {{0x0, 0x0, 0x1}, @device_b, 0x6}, {{}, @broadcast, 0xfff}]}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5}}]}, @NL80211_ATTR_FILS_KEK={0x3a, 0xf2, "a7d8c26976bae4ece65b52114e01ac3e21ce3baaa524fca870161f1c50ab68b7bc30ac6b4c4232fc0b0e38e10f129b048fde81f59a89"}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x4, {0x3, 0x7, 0x7, 0xa}}}, @NL80211_ATTR_IE={0x7f, 0x2a, [@dsss={0x3, 0x1, 0x7}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x8, 0x1}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @channel_switch={0x25, 0x3, {0x1, 0x78, 0x1}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x60}}, @random_vendor={0xdd, 0x4f, "5fd77771e88b258e0aa92692acaaf235a00dab2e452ed6fc4e1c95b54627315c85214f17420bf1ec9475fe7ff2bae53ae3f7347220ae5c5f79893ade21385c5e4ede3ed1c77e8b96f098bc0eb212a0"}, @ssid={0x0, 0x6, @default_ibss_ssid}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000009c0)={&(0x7f0000000900), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x840) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000a00), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x29bcce2f9dceff31}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xf, 0x45}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8004000}, 0x84) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d00)={'syztnl0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x0, 0x6, {{0x21, 0x4, 0x0, 0x4, 0x84, 0x67, 0x0, 0x30, 0x29, 0x0, @multicast2, @rand_addr=0x64010101, {[@generic={0x89, 0xa, "a5f4b08bc3412cfb"}, @cipso={0x86, 0x3a, 0x0, [{0x5, 0xe, "70b3e6b4e36b80abdeecfacc"}, {0x6, 0xd, "5186b836d1dbbdb98f34c5"}, {0x0, 0xb, "a96a401bc8728f90c5"}, {0x7, 0xe, "1a9eb7fdfca279f235eb7f34"}]}, @ssrr={0x89, 0xb, 0x21, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp={0x44, 0x20, 0xf3, 0x0, 0xc, [0x1a, 0xfae2, 0x6, 0x6, 0x7, 0x10001, 0x5]}, @noop]}}}}}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000d40)={@multicast1, @dev, 0x0}, &(0x7f0000000d80)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000dc0)={'wg1\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000e00)=0x0, &(0x7f0000000e40)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000f80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xa8, r4, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000013c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001380)={&(0x7f0000001040)={0x308, r10, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x6e, 0x5b, "dc746b2c59f50b1908db6609ad0088166236c0928fe138827c8c45b9eafa3c28c7c6c61f5a9d3ab96b2e8834443da4da8164aacdc39dd48b979e675f847e2ccbf532ee340bab9c8eae8aba015f8db1fe3ea4dcbd0e441c62b7b161d26b0aa9196b9e4102c57dcb3ca5bb"}, @NL80211_ATTR_FRAME_MATCH={0xd1, 0x5b, "a95385ff563bfba5b7ff840ec67ea04eea358b1be4aa3c5b005383928b4aa13becd926aa26f8830e4890705360318ed7c33c8859c653a7ee4fd42b767e0142af1127d3ed2a69d3cec714b2d5197cd79b749c94fb3192b40682eeec0c1e2fd348050a29b0b3eb8d9f06c5d719015d0e23980ec32f3dc91c60765729f2535f5d0b3f0673766b00e9b815db29a91670f688f741e7a9007587a1fbfe1359883c722f0c5666a118d92a92e19f8adc86a11c866518a34c141ca8ec24c5ef6a929c8bb49e999d57952dd7236b41b2d915"}, @NL80211_ATTR_FRAME_MATCH={0x7d, 0x5b, "d0f3a46e88a8e5b7a0f2934554923e20cca76415ae046aa73562d5cc521147723f2b9e28dcf35ed664880dc02d502795d514685579f8bbc9dbe125061745799473e7305dc48ba989b172edcf4536245ab531242bb443c8cf7d4e69b518c2e786cb34cd055d89fa0f0c9f743eb9a6027670803acfe96864fd76"}, @NL80211_ATTR_FRAME_MATCH={0x61, 0x5b, "160dcd468ec2aeac920109dd8c36dab814863f30627d2816ab7f4a74d578cdcd26372d1b8165dbeef403fdd6df753ca959f887825d48ff8b3d25000556108faad7631dc46485a349fa078203959dfe4c7ecad243b54a925f713818c760"}, @NL80211_ATTR_FRAME_MATCH={0xc2, 0x5b, "04f83b858e213c0cbd3f5e277e81b2d75143ae8e5ee37dece02202f34eb2aa7553bdbcd06bede2b4d55d98071412534d5a675284e7ce3c1525fe22c9fe6b79c2b27d1d896b735436ebeb2f88d1da02206420a5693917c05ec53587f31747f0734e21c1a881ef0d1886ff877cf0475710bbbcf563f3090d2f9fb9c57824596661ceb3da3ffeca2e0bff67f4bc9ea59410502fbc0eebcc7a17498eaa57e8053bed4b7774a4d861e426e685be8bc35d6d48c8eb46c132bb597faa2c776b65d4"}]}, 0x308}, 0x1, 0x0, 0x0, 0x2044}, 0x802) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x7c, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x10}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x81189f1d5543b0b4}, 0x4000) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x64, r2, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x69}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x64}}, 0x8005) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000016c0)=0x4, 0x4) (async, rerun: 64) r12 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r12, 0x84, 0xc, &(0x7f0000001700)=0x7, 0x4) setsockopt$EBT_SO_SET_COUNTERS(r12, 0x0, 0x81, &(0x7f0000001800)={'filter\x00', 0x0, 0x0, 0x0, [0xffffffffffff8001, 0x6, 0x8000, 0x4, 0x9, 0x4], 0x1, &(0x7f0000001740)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r13, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48010}, 0x40000) 523.646073ms ago: executing program 1 (id=1364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf251300000008000300", @ANYRES32=r2, @ANYBLOB="0c0081000500020009000000040013000a000600ffffffffffff000006001200830000000600120009000000050013010100000006001201030000000600b500b00000000600100096020000200011800400020004000600040005000400010004000100040003000400030005001301019ab8e3568858a2c39b9ec1cafb3c81d07d745a24fdacfa5510b47a5cd353381b88830cbdc4e2f27ac39ea7353cadc7e6a604b20ae1d3bfce1ddfeb6f5b43d4f13fd82ffb56298fb49a467d5f0efdf503957df5c87f89593b6fc7b637c0607b465c258fce916cea08cc7a854dab7f121f982654f5e675f95d5c9ac622861abdbb1d5389dcab00"/258], 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) 523.334559ms ago: executing program 3 (id=1365): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000005c0)=[{{&(0x7f0000003080)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000000000001701"], 0x10}}], 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20010020}, 0xc, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="400000001114080029bd7000fddbdf2508000100000008004a000200000008004a0002000000080001000100000008003e000000000000000000000000000000e3c9c8a3b00f885d4534b946a5f3bdf81c7ae56fbd103f68d99de1a9f1850d4300d797a84aa80c9abbf29357b84d11270e9abc6a13f101835d3723b63938cf5b398f2509a6f5a7c3f973566bf15db28f3ea2232990f197daf789ad552ef123acd74967c75d784a8daa44cd9b0a6abf349f3389da4a643576cbb51e8d21aea685fb6fd4d2028f7e0e6e776469a3de17f92155e58345b6fbb1408a71afbd642ce4986d99135ec79ddbcd34a66ca2dc9d"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40001) ioctl$int_in(r0, 0x5421, &(0x7f0000000cc0)=0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, 0xfffffffffffffffd, 0x4000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000c00)={r5, &(0x7f0000000b40)="717f51b0", &(0x7f0000000b80)=""/126}, 0x20) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000c40)=ANY=[@ANYBLOB="388cbd0010806df06af9ce67c50000", @ANYRES16=r4, @ANYRESDEC=r3, @ANYRES64=r5, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500"], 0x138}}, 0x0) 471.15889ms ago: executing program 2 (id=1366): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r1, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="99", 0x1}], 0x1}}], 0x2, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x10001, 0x9, 0x1, r0, 0xb0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r2, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) recvfrom$unix(r0, &(0x7f0000000300)=""/66, 0x42, 0x12042, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) 406.748736ms ago: executing program 1 (id=1367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r1, &(0x7f000000b4c0)=[{{&(0x7f0000000000)=@caif=@dgm={0x25, 0x7, 0xf}, 0x80, &(0x7f0000003440)=[{&(0x7f0000000080)="fe0af462", 0x4}], 0x1}}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140000000002c000580040001007061796c6f6164001c00028008000340000000e1080004400000008b08000240000000050900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) 299.743048ms ago: executing program 3 (id=1368): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00b20100000100697036677265000018000280050008000008000a007f8c63d47c41d580cdd7532628cc8d14d770b18c40eec193761d90db28d89db2d3e44ab638a6fa94f62007b0bf3ab5790e71ef5bf9e9eef0b58ac2a23f3f3fd46fec53ac95d1214d86f578f94cc37cc4e4920f434460a100317cecf1226208ff17", @ANYRES32=r1, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket(0x10, 0x803, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00b20100000100697036677265000018000280050008000008000a007f8c63d47c41d580cdd7532628cc8d14d770b18c40eec193761d90db28d89db2d3e44ab638a6fa94f62007b0bf3ab5790e71ef5bf9e9eef0b58ac2a23f3f3fd46fec53ac95d1214d86f578f94cc37cc4e4920f434460a100317cecf1226208ff17", @ANYRES32=r1, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) 299.100617ms ago: executing program 0 (id=1369): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0xfffffffffffffffc, 0x0, 0x1000, 0x3}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c00018006000600894f"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)={@val={0x1c, 0xf5}, @void, @mpls={[{}], @generic="f5ffb735a01e"}}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000f1401002abd70f0fadbdf2508000100000000000800450073726c04"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_int(r8, 0x1, 0x26, 0x0, &(0x7f0000000080)) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000240), 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="0000839b32bb030000", @ANYRES16=r7, @ANYBLOB="0f0700000000000000006700000008000e00", @ANYRES32, @ANYBLOB="00feed5d17e400000000"], 0x28}}, 0x400c000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0x6}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r5) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r13, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r13, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) 284.803964ms ago: executing program 2 (id=1370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) listen(r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01001b9f911533016f4300000000"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x810) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4012, 0x0, 0x0, 0x0, &(0x7f000001a640)=""/102400, 0x19000, 0x0, 0x0, 0x40020000}, &(0x7f00000008c0)=0x3b) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x83, 0x9a, 0x0, 0xfa9d}]}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYRES8=r3, @ANYRESOCT=r5, @ANYBLOB="0000000062526800000000280015000900010076"], 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x14004) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xaa, 0xa, 0x10, 0x0, 0x1ff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040081}, 0x4000004) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x6, 0xfff1}, {0xe, 0xd}}}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x3f1, 0x148, 0xd0, 0x5, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@uncond, 0xffffe000, 0x70, 0x90, 0x0, {0x0, 0x1c030000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0x0, [0xf, 0x6]}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000001c0012804f7cc25c626f6e64000000000c00028005001d008a"], 0x3c}}, 0x54) r10 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0x400, 0x30, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x7, 0x8}}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300ec00000000000000010000000900010073797a300000000034000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000440000000c0a01020000000000000000010000020900020073797a320000000014000380100000800c00018005000100be0000000900010073797a3000000000140000001000010000000000000000000000000a"], 0xbc}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newtclass={0x8bc, 0x28, 0x200, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0xfffd, 0xfff1}, {0xb, 0x8}, {0xa, 0xb}}, [@tclass_kind_options=@c_htb={{0x8}, {0x890, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x3, 0x2, 0x101, 0x744, 0x8, 0x100, 0x2, 0x9, 0x9, 0x877, 0x0, 0x7, 0x9452, 0x9, 0x4, 0x10000, 0x4f, 0xf, 0x3ff, 0x4, 0x4, 0x9, 0x3, 0x3, 0x200, 0x3ff, 0x7, 0x2, 0x7fffffff, 0x4, 0x0, 0x27fff, 0x1, 0x729, 0xd, 0x8, 0x20000, 0x6, 0x5c2b, 0x3, 0x9, 0x40000000, 0x4, 0x7, 0xf6, 0x6, 0xe9, 0x1d4a, 0x7, 0x157, 0x7, 0x0, 0x7, 0x6, 0xfffffffc, 0x7, 0xf9d, 0xe, 0x9, 0x401, 0x6, 0x7bc, 0x7, 0x7, 0x8, 0x1, 0x7, 0x5, 0x5, 0x1, 0xfffffff8, 0x5, 0x9, 0x9, 0x9, 0x2, 0xffffffff, 0x6d0, 0x7, 0x46, 0x7fffffff, 0x8000, 0x8, 0x8, 0x6, 0x2, 0xffff, 0x1, 0x9, 0x6, 0x0, 0x80000001, 0x5, 0xc000000, 0x4, 0x100, 0x10, 0x7ff, 0x1, 0x6, 0x8f2dc60f, 0x8, 0x9, 0x0, 0xffffffff, 0x1, 0x85a, 0x8, 0x2, 0x8, 0x59050178, 0x8e, 0xb, 0x3, 0x12be, 0xff, 0xffffffff, 0x1, 0x2, 0x7, 0x4, 0x1, 0x2, 0x4, 0x3, 0x401, 0xf, 0x507, 0x4, 0xffff, 0xfff, 0x3ff, 0x7f, 0x1, 0x2, 0x10001, 0x1, 0x9, 0x9, 0x4, 0x9, 0x9, 0xfffffff8, 0x1, 0x2c, 0xe, 0x100, 0x1c98000, 0x1, 0x1000, 0xdc, 0x6, 0x8, 0x5, 0x9, 0xd3000000, 0x0, 0x6000000, 0x7, 0x14, 0x2, 0x3c, 0x7, 0x4, 0x6, 0x58, 0x9, 0x0, 0x0, 0x9, 0xfffffeff, 0x4, 0x4, 0x8b4a, 0xfffffff9, 0x7fffffff, 0xfc, 0xffffffff, 0x5, 0x2, 0x6, 0x6, 0x2, 0x0, 0x1000000, 0xe, 0xb, 0x80000000, 0x1800, 0xc50, 0x8000, 0x7, 0xfffffe00, 0x6, 0xa485, 0x1, 0xd0e, 0xf, 0x200007, 0x40, 0x7, 0x3, 0x1, 0x5, 0x22, 0x5, 0xfffffffb, 0x0, 0x90f, 0x1, 0x8, 0xe6a2, 0x6, 0x2, 0x1000, 0x3, 0x9, 0x6, 0xe, 0xcd, 0x3, 0x6, 0xe5c, 0x6, 0xb5, 0xa, 0x6, 0xf46b9a7d, 0x6, 0x1, 0xbd, 0x200, 0x7, 0x3, 0xfc84, 0x8, 0x7, 0x2, 0x4, 0x6, 0x3, 0x1, 0x9, 0x20ab, 0x6, 0x0, 0xfffffffc, 0x1, 0xe6, 0xff, 0x8, 0x8000, 0x9, 0x0, 0x8, 0xfffffff7]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x5, 0x0, 0x3, 0x0, 0xfffe, 0x10001}, {0x4, 0x2, 0xd, 0x8, 0x10, 0x401}, 0x8000, 0xffff, 0xfffffffb, 0x5, 0x2}}, @TCA_HTB_RATE64={0xc, 0x6, 0xb907}, @TCA_HTB_RTAB={0x404, 0x4, [0x2, 0x6, 0x5cbb, 0xfffffffd, 0x20001fd, 0x1a, 0x4, 0x100, 0x1, 0x2, 0x1, 0x0, 0x24a180, 0x1960, 0xa, 0x5, 0x9, 0x589, 0xc00000, 0xff, 0x4, 0xfffffffc, 0xf, 0xa, 0xd808, 0x5, 0x7, 0x8, 0x8000, 0xa, 0xb1f1d16, 0x4, 0x4127, 0xffffffff, 0x854a, 0x2, 0x9, 0x6, 0x3, 0x80000, 0x1, 0x4, 0x9, 0x9, 0xfd9, 0x5, 0xffff8949, 0xfffffffe, 0x200, 0x6, 0x1, 0xff, 0xfffffff8, 0x10000, 0x2, 0x6, 0x306ee53, 0x4, 0x0, 0x6, 0x0, 0x80000006, 0x1, 0x3, 0x4, 0xb27, 0x7, 0x101, 0xffffff00, 0x400, 0x7, 0x1, 0x6, 0x7fffffff, 0x4, 0x6, 0x8, 0x5, 0x5, 0x3ff, 0x800003, 0x7, 0x1, 0x4, 0xfffffff9, 0x10, 0x200, 0x1, 0x4, 0x4, 0x8001, 0x0, 0x9, 0x57d, 0x82, 0x1, 0xfffffc01, 0xd, 0x8, 0x2, 0x8, 0x4, 0x66e, 0x7ff, 0x200, 0x8, 0x1, 0x40, 0x5, 0xf83, 0x8, 0x4, 0xc, 0x5, 0xff, 0xf2, 0x3, 0x12, 0x8, 0x7, 0x8, 0x8, 0xffffffff, 0x4, 0x6, 0x72f, 0x7, 0x7, 0x0, 0x9, 0xba, 0x8, 0x208, 0xda, 0x0, 0x2, 0x401, 0x5, 0x2, 0x4, 0x97a5, 0x2, 0x3, 0x9, 0x5, 0x8001, 0xe99, 0x6, 0x3, 0x3, 0xfffeffff, 0x3, 0x5, 0x10000, 0x1, 0x101, 0xaf10, 0xefa, 0x3, 0xfff, 0xa, 0x200, 0x3, 0x9, 0x5, 0x0, 0x0, 0x2, 0x6, 0x886, 0x0, 0x3, 0x2, 0x8, 0x200, 0x1, 0x9c, 0x2, 0x7ff, 0x34c, 0x1, 0x80000000, 0xf0e1, 0xc950, 0x7f, 0xffffffff, 0x1000, 0x3, 0x6, 0x8003, 0x4, 0x7, 0x80000001, 0x6, 0xffff0, 0x9, 0x2, 0x401, 0x3, 0x8e7, 0xefa, 0x3, 0xffff, 0xffff, 0x4, 0x2, 0x0, 0x9, 0x3, 0x8, 0xfffffffd, 0x80000001, 0x40, 0x3ff, 0x4, 0xf989, 0x2, 0x9, 0x2, 0x7a, 0x2, 0x8000, 0x0, 0xfffff627, 0x10000, 0x30, 0x3, 0x2, 0x0, 0x40, 0x67, 0xfffffff7, 0x4, 0x3, 0x2, 0x646, 0xc294, 0x8e4e, 0xd8f8, 0x0, 0x7, 0x3ff, 0x0, 0xe0000000, 0x1000, 0xe, 0xf, 0xff, 0x1, 0x0, 0x7, 0x10, 0xd409, 0x7, 0x6, 0x5]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x3, 0x2, 0x734, 0x5, 0x47}, {0xc3, 0x1, 0x3, 0xfff, 0x5, 0x4}, 0x3, 0x10000, 0x800, 0x5, 0x4}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x1}, @TCA_HTB_OFFLOAD={0x4}]}}]}, 0x8bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4009) socket(0x5, 0x6, 0x4) 228.177564ms ago: executing program 1 (id=1371): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "78e1054910d8a0f0efd0d4c0ba321cff5db0aac6"}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d0000000000000000000000010500000020000020"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x39, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r1, 0xb15, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x3, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200048c0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x20004844) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 59.592118ms ago: executing program 3 (id=1372): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0015000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async, rerun: 32) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) sendmmsg$inet6(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000040) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) connect$802154_dgram(r0, &(0x7f0000000280), 0x14) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0xa8, 0xe0, 0x0, {0x0, 0x2000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) (rerun: 64) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async, rerun: 32) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) (rerun: 32) listen(r5, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={0x24, 0x12, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80171404}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000300)) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc240}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) 0s ago: executing program 3 (id=1373): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts. [ 80.899701][ T5823] cgroup: Unknown subsys name 'net' [ 81.011633][ T5823] cgroup: Unknown subsys name 'cpuset' [ 81.021108][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.671471][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.345782][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.356948][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.364750][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.373017][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.380743][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.392509][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.400432][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.408245][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.433216][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.441288][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.453839][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.477019][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.484307][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.512666][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.520235][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.531892][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.533407][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.548055][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.563505][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.573240][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.581271][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.587835][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.592722][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.603505][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.612668][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.133794][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 86.281626][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 86.370870][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 86.531195][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.539179][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.547167][ T5839] bridge_slave_0: entered allmulticast mode [ 86.555523][ T5839] bridge_slave_0: entered promiscuous mode [ 86.565354][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 86.600193][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.609202][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.616455][ T5839] bridge_slave_1: entered allmulticast mode [ 86.625024][ T5839] bridge_slave_1: entered promiscuous mode [ 86.731790][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 86.743752][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.751528][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.761331][ T5842] bridge_slave_0: entered allmulticast mode [ 86.768755][ T5842] bridge_slave_0: entered promiscuous mode [ 86.776984][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.784112][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.791412][ T5842] bridge_slave_1: entered allmulticast mode [ 86.808601][ T5842] bridge_slave_1: entered promiscuous mode [ 86.815461][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.823165][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.833786][ T5833] bridge_slave_0: entered allmulticast mode [ 86.842188][ T5833] bridge_slave_0: entered promiscuous mode [ 86.854907][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.862484][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.873254][ T5833] bridge_slave_1: entered allmulticast mode [ 86.881686][ T5833] bridge_slave_1: entered promiscuous mode [ 86.892704][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.906352][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.090969][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.104826][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.165707][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.210662][ T5839] team0: Port device team_slave_0 added [ 87.224289][ T5839] team0: Port device team_slave_1 added [ 87.251406][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.290267][ T5833] team0: Port device team_slave_0 added [ 87.362213][ T5833] team0: Port device team_slave_1 added [ 87.381913][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.389790][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.415852][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.429392][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.436378][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.463102][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.477093][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.484316][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.491927][ T5838] bridge_slave_0: entered allmulticast mode [ 87.499769][ T5838] bridge_slave_0: entered promiscuous mode [ 87.517345][ T5156] Bluetooth: hci0: command tx timeout [ 87.528576][ T5842] team0: Port device team_slave_0 added [ 87.571444][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.581615][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.589411][ T5838] bridge_slave_1: entered allmulticast mode [ 87.596823][ T5838] bridge_slave_1: entered promiscuous mode [ 87.606662][ T5156] Bluetooth: hci2: command tx timeout [ 87.633657][ T5842] team0: Port device team_slave_1 added [ 87.640288][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.649835][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.676488][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.676704][ T5156] Bluetooth: hci3: command tx timeout [ 87.687772][ T5852] Bluetooth: hci1: command tx timeout [ 87.692779][ T5156] Bluetooth: hci4: command tx timeout [ 87.705846][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.712942][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.739220][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.784508][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.792860][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.800838][ T5837] bridge_slave_0: entered allmulticast mode [ 87.808959][ T5837] bridge_slave_0: entered promiscuous mode [ 87.844965][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.852210][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.878527][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.897451][ T5839] hsr_slave_0: entered promiscuous mode [ 87.903980][ T5839] hsr_slave_1: entered promiscuous mode [ 87.927642][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.937234][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.944412][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.952144][ T5837] bridge_slave_1: entered allmulticast mode [ 87.959621][ T5837] bridge_slave_1: entered promiscuous mode [ 87.982101][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.989198][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.015667][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.058270][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.124493][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.177184][ T5833] hsr_slave_0: entered promiscuous mode [ 88.183813][ T5833] hsr_slave_1: entered promiscuous mode [ 88.191648][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.199499][ T5833] Cannot create hsr debugfs directory [ 88.208967][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.234656][ T5842] hsr_slave_0: entered promiscuous mode [ 88.241338][ T5842] hsr_slave_1: entered promiscuous mode [ 88.248162][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.255750][ T5842] Cannot create hsr debugfs directory [ 88.271191][ T5838] team0: Port device team_slave_0 added [ 88.281120][ T5838] team0: Port device team_slave_1 added [ 88.310580][ T5837] team0: Port device team_slave_0 added [ 88.354822][ T5837] team0: Port device team_slave_1 added [ 88.468821][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.475838][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.502589][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.524148][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.532961][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.559171][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.583195][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.590338][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.616358][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.641582][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.648719][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.675018][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.908256][ T5838] hsr_slave_0: entered promiscuous mode [ 88.914672][ T5838] hsr_slave_1: entered promiscuous mode [ 88.920928][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.928609][ T5838] Cannot create hsr debugfs directory [ 88.952148][ T5837] hsr_slave_0: entered promiscuous mode [ 88.959628][ T5837] hsr_slave_1: entered promiscuous mode [ 88.965745][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.973420][ T5837] Cannot create hsr debugfs directory [ 89.178484][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.192055][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.221456][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.263225][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.388730][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.424228][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.461627][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.493595][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.547327][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.562723][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.595266][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.608052][ T5156] Bluetooth: hci0: command tx timeout [ 89.627793][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.677220][ T5156] Bluetooth: hci2: command tx timeout [ 89.721804][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.733641][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.757271][ T5843] Bluetooth: hci1: command tx timeout [ 89.757281][ T5852] Bluetooth: hci3: command tx timeout [ 89.768397][ T5156] Bluetooth: hci4: command tx timeout [ 89.777257][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.800011][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.816487][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.908277][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.922954][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.942952][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.958225][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.972455][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.010304][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.017592][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.038460][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.045686][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.170562][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.240432][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.275299][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.282626][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.294838][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.319425][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.330518][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.337757][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.389949][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.460615][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.467859][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.498824][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.515398][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.532509][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.558245][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.565427][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.614238][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.621487][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.652348][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.659593][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.721183][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.823585][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.830808][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.860762][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.885320][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.892559][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.962550][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.232488][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.400442][ T5842] veth0_vlan: entered promiscuous mode [ 91.436050][ T5842] veth1_vlan: entered promiscuous mode [ 91.599058][ T5842] veth0_macvtap: entered promiscuous mode [ 91.629354][ T5842] veth1_macvtap: entered promiscuous mode [ 91.677565][ T5843] Bluetooth: hci0: command tx timeout [ 91.691160][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.730020][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.740312][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.757846][ T5843] Bluetooth: hci2: command tx timeout [ 91.770279][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.780844][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.790915][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.800568][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.809913][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.837059][ T5843] Bluetooth: hci3: command tx timeout [ 91.847466][ T5843] Bluetooth: hci1: command tx timeout [ 91.852909][ T5156] Bluetooth: hci4: command tx timeout [ 91.911298][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.921727][ T978] cfg80211: failed to load regulatory.db [ 91.936039][ T5839] veth0_vlan: entered promiscuous mode [ 91.983065][ T5839] veth1_vlan: entered promiscuous mode [ 92.042319][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.075831][ T5837] veth0_vlan: entered promiscuous mode [ 92.085106][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.104333][ T5833] veth0_vlan: entered promiscuous mode [ 92.149220][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.162471][ T5839] veth0_macvtap: entered promiscuous mode [ 92.173360][ T5839] veth1_macvtap: entered promiscuous mode [ 92.179483][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.201278][ T5833] veth1_vlan: entered promiscuous mode [ 92.214576][ T5837] veth1_vlan: entered promiscuous mode [ 92.272756][ T5838] veth0_vlan: entered promiscuous mode [ 92.283879][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.292807][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.304662][ T5838] veth1_vlan: entered promiscuous mode [ 92.357799][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.403424][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.423569][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.438693][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.467136][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.526496][ T5837] veth0_macvtap: entered promiscuous mode [ 92.539337][ T5837] veth1_macvtap: entered promiscuous mode [ 92.556133][ T5833] veth0_macvtap: entered promiscuous mode [ 92.580320][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6'. [ 92.590780][ T5833] veth1_macvtap: entered promiscuous mode [ 92.629790][ T5838] veth0_macvtap: entered promiscuous mode [ 92.641636][ T5838] veth1_macvtap: entered promiscuous mode [ 92.652273][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.679711][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.713791][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.729568][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.738622][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.748864][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.757789][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.784319][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.816323][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.828743][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.836774][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.843059][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.857506][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.866371][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.875473][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.903857][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.962446][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.972345][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.981260][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.991340][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.004907][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.013324][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.178477][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.192032][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.255306][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.281134][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.332481][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.357933][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.506961][ T2948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.514853][ T2948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.534184][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.550678][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.558333][ T5969] xt_hashlimit: size too large, truncated to 1048576 [ 93.617413][ T5970] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.710798][ T197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.715073][ T5970] xt_ipcomp: unknown flags B [ 93.740788][ T197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.758351][ T5156] Bluetooth: hci0: command tx timeout [ 93.767509][ T5974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9'. [ 93.778958][ T5970] syz.3.8 uses old SIOCAX25GETINFO [ 93.795843][ T5970] C: renamed from lo (while UP) [ 93.831623][ T5970] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 93.847056][ T5156] Bluetooth: hci2: command tx timeout [ 93.919086][ T5156] Bluetooth: hci4: command tx timeout [ 93.927021][ T5156] Bluetooth: hci1: command tx timeout [ 93.927294][ T5843] Bluetooth: hci3: command tx timeout [ 94.173243][ T5986] Zero length message leads to an empty skb [ 94.708132][ T5880] IPVS: starting estimator thread 0... [ 94.723170][ T5999] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 94.755449][ T6009] warning: `syz.2.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.851789][ T6010] IPVS: using max 24 ests per chain, 57600 per kthread [ 94.998938][ T6021] netlink: 256 bytes leftover after parsing attributes in process `syz.2.19'. [ 95.210349][ T6030] Bluetooth: MGMT ver 1.23 [ 95.330223][ T6036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.693636][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.701815][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.755641][ T6045] syzkaller0: entered promiscuous mode [ 95.811969][ T6045] syzkaller0: entered allmulticast mode [ 95.880428][ T6061] netlink: 'syz.0.30': attribute type 10 has an invalid length. [ 95.995973][ T6061] bridge0: port 3(team0) entered blocking state [ 96.009584][ T6061] bridge0: port 3(team0) entered disabled state [ 96.025117][ T6069] sctp: [Deprecated]: syz.1.29 (pid 6069) Use of int in maxseg socket option. [ 96.025117][ T6069] Use struct sctp_assoc_value instead [ 96.027502][ T6061] team0: entered allmulticast mode [ 96.096782][ T6061] team_slave_0: entered allmulticast mode [ 96.121757][ T6061] team_slave_1: entered allmulticast mode [ 96.158719][ T6061] team0: entered promiscuous mode [ 96.174449][ T6071] netlink: 256 bytes leftover after parsing attributes in process `syz.3.31'. [ 96.176854][ T6061] team_slave_0: entered promiscuous mode [ 96.223266][ T6061] team_slave_1: entered promiscuous mode [ 96.267880][ T6061] bridge0: port 3(team0) entered blocking state [ 96.274316][ T6061] bridge0: port 3(team0) entered forwarding state [ 96.341840][ T6076] syz.2.33 uses obsolete (PF_INET,SOCK_PACKET) [ 96.476366][ T6073] syzkaller0: entered promiscuous mode [ 96.507398][ T6073] syzkaller0: entered allmulticast mode [ 96.634884][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 97.702663][ T6132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.51'. [ 97.811210][ T6114] netlink: 164 bytes leftover after parsing attributes in process `syz.2.44'. [ 97.864255][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'. [ 97.997373][ T6141] netlink: 168 bytes leftover after parsing attributes in process `syz.4.54'. [ 98.401244][ T6161] 8021q: VLANs not supported on gre0 [ 98.464799][ T6167] netlink: 'syz.1.62': attribute type 3 has an invalid length. [ 98.684265][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 98.733624][ T6176] netlink: 'syz.1.65': attribute type 2 has an invalid length. [ 98.753261][ T6178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.65'. [ 98.773433][ T6179] netlink: 192 bytes leftover after parsing attributes in process `syz.2.66'. [ 99.170763][ T6203] openvswitch: netlink: Flow key attribute not present in set flow. [ 99.196355][ T6199] openvswitch: netlink: Flow key attribute not present in set flow. [ 99.208518][ T6183] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.242016][ T6183] bond0: (slave bond1): Enslaving as an active interface with an up link [ 99.359837][ T6207] netlink: 32 bytes leftover after parsing attributes in process `syz.0.74'. [ 99.491799][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 99.743616][ T6221] netlink: 36 bytes leftover after parsing attributes in process `syz.4.80'. [ 99.779863][ T6227] netlink: 'syz.0.81': attribute type 1 has an invalid length. [ 99.826639][ T6227] netlink: 'syz.0.81': attribute type 3 has an invalid length. [ 99.834285][ T6227] NCSI netlink: No device for ifindex 0 [ 100.205011][ T6242] bridge0: port 3(team0) entered disabled state [ 100.266869][ T6243] netlink: 'syz.0.85': attribute type 16 has an invalid length. [ 100.274592][ T6243] netlink: 'syz.0.85': attribute type 17 has an invalid length. [ 100.342367][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.371040][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.467785][ T6255] netlink: 'syz.4.86': attribute type 21 has an invalid length. [ 100.480937][ T6243] bridge0: port 3(team0) entered blocking state [ 100.487391][ T6243] bridge0: port 3(team0) entered forwarding state [ 100.524138][ T6243] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.531439][ T6243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.569182][ T6243] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.576457][ T6243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.682089][ T6255] netlink: 'syz.4.86': attribute type 1 has an invalid length. [ 101.145186][ T6284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.156835][ T6284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.171602][ T6284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.182042][ T6284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.641029][ T6301] netlink: 'syz.0.102': attribute type 13 has an invalid length. [ 101.642408][ T6303] netlink: 'syz.0.102': attribute type 13 has an invalid length. [ 101.677941][ T6301] netlink: 'syz.0.102': attribute type 17 has an invalid length. [ 101.731290][ T6303] netlink: 'syz.0.102': attribute type 17 has an invalid length. [ 101.906342][ T6301] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.971267][ T6323] netlink: 'syz.3.107': attribute type 10 has an invalid length. [ 101.989987][ T6303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.026021][ T6324] netlink: 'syz.3.107': attribute type 1 has an invalid length. [ 102.028736][ T6323] veth1_vlan: entered allmulticast mode [ 102.035655][ T6325] netlink: 'syz.3.107': attribute type 1 has an invalid length. [ 102.102716][ T6323] team0: Device veth1_vlan failed to register rx_handler [ 102.655227][ T6345] netlink: 'syz.3.113': attribute type 3 has an invalid length. [ 102.933745][ T6364] No such timeout policy "syz0" [ 103.024536][ T6369] netlink: 'syz.3.122': attribute type 1 has an invalid length. [ 103.083442][ T6370] __nla_validate_parse: 7 callbacks suppressed [ 103.083459][ T6370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.122'. [ 103.319755][ T6380] Cannot find add_set index 2 as target [ 103.776998][ T6392] Unsupported ieee802154 address type: 0 [ 103.819797][ T6394] bond0: entered allmulticast mode [ 103.825002][ T6394] bond_slave_0: entered allmulticast mode [ 103.845291][ T6394] bond_slave_1: entered allmulticast mode [ 103.886115][ T6394] bond1: entered allmulticast mode [ 104.059260][ T6403] netlink: 'syz.0.133': attribute type 1 has an invalid length. [ 104.122291][ T6406] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.150690][ T6406] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 104.644589][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.141'. [ 104.861153][ T6429] netlink: 232 bytes leftover after parsing attributes in process `syz.3.141'. [ 104.930159][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 104.974386][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'. [ 105.339522][ T6462] x_tables: duplicate underflow at hook 2 [ 105.631994][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 105.835361][ T6491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.160'. [ 105.976006][ T6499] netlink: 24 bytes leftover after parsing attributes in process `syz.1.163'. [ 106.092862][ T6496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.131906][ T6508] can: request_module (can-proto-0) failed. [ 106.140065][ T6508] netlink: 48 bytes leftover after parsing attributes in process `syz.4.165'. [ 106.259845][ T6496] macvtap1: entered promiscuous mode [ 106.265211][ T6496] macvtap1: entered allmulticast mode [ 106.363450][ T6503] bond2: (slave gretap1): making interface the new active one [ 106.381794][ T6523] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.168'. [ 106.420096][ T6503] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 106.505268][ T6530] sctp: [Deprecated]: syz.0.172 (pid 6530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.505268][ T6530] Use struct sctp_sack_info instead [ 106.523022][ T6530] sctp: [Deprecated]: syz.0.172 (pid 6530) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.523022][ T6530] Use struct sctp_sack_info instead [ 106.689476][ T6503] syz.3.162 (6503) used greatest stack depth: 20040 bytes left [ 107.081386][ T6549] macsec1: entered allmulticast mode [ 107.116807][ T6549] veth1_macvtap: entered allmulticast mode [ 107.125214][ T6549] veth1_macvtap: left allmulticast mode [ 107.327493][ T6561] vlan2: entered promiscuous mode [ 107.342904][ T6561] bridge0: entered promiscuous mode [ 107.420003][ T6557] syz.0.182 (6557) used greatest stack depth: 19576 bytes left [ 107.793941][ T6585] validate_nla: 4 callbacks suppressed [ 107.793960][ T6585] netlink: 'syz.0.189': attribute type 4 has an invalid length. [ 108.198509][ T6609] netlink: 'syz.2.196': attribute type 1 has an invalid length. [ 108.700963][ T6638] __nla_validate_parse: 5 callbacks suppressed [ 108.700982][ T6638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.202'. [ 109.216029][ T6654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.209'. [ 109.229879][ T6661] x_tables: unsorted underflow at hook 1 [ 109.232604][ C0] IPv4: Oversized IP packet from 172.20.20.48 [ 109.239256][ T6661] netlink: 'syz.3.208': attribute type 8 has an invalid length. [ 109.510938][ T6673] netlink: 'syz.4.212': attribute type 1 has an invalid length. [ 109.556027][ T6673] netlink: 56 bytes leftover after parsing attributes in process `syz.4.212'. [ 109.701116][ T6684] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 109.845366][ T6684] Cannot find set identified by id 752 to match [ 109.882444][ T6694] netlink: 'syz.4.217': attribute type 24 has an invalid length. [ 110.239685][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 110.403266][ T6714] x_tables: duplicate underflow at hook 2 [ 110.412303][ T6714] sctp: [Deprecated]: syz.4.224 (pid 6714) Use of int in maxseg socket option. [ 110.412303][ T6714] Use struct sctp_assoc_value instead [ 110.519377][ T6724] x_tables: duplicate underflow at hook 2 [ 111.225282][ T6761] xt_hashlimit: size too large, truncated to 1048576 [ 111.370799][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.237'. [ 111.843485][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 111.911205][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 112.262637][ T6786] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.486347][ T6816] netlink: 32 bytes leftover after parsing attributes in process `syz.1.250'. [ 112.782752][ T6829] bond0: entered promiscuous mode [ 112.790469][ T6829] bond_slave_0: entered promiscuous mode [ 112.796446][ T6829] bond_slave_1: entered promiscuous mode [ 112.839128][ T6829] bond1: entered promiscuous mode [ 112.857834][ T6829] bond0: left allmulticast mode [ 112.865880][ T6829] bond_slave_0: left allmulticast mode [ 112.886679][ T6829] bond_slave_1: left allmulticast mode [ 112.892225][ T6829] bond1: left allmulticast mode [ 113.246405][ T6857] sock: sock_set_timeout: `syz.2.262' (pid 6857) tries to set negative timeout [ 113.425405][ T6867] netlink: 'syz.4.265': attribute type 1 has an invalid length. [ 113.503771][ T6867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.569650][ T6878] x_tables: duplicate underflow at hook 1 [ 113.577048][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.267'. [ 113.858783][ T6888] netlink: 'syz.4.270': attribute type 21 has an invalid length. [ 113.880561][ T6888] netlink: 128 bytes leftover after parsing attributes in process `syz.4.270'. [ 113.932016][ T6899] netlink: 'syz.4.270': attribute type 21 has an invalid length. [ 113.941443][ T6888] netlink: 'syz.4.270': attribute type 4 has an invalid length. [ 113.964182][ T6899] netlink: 128 bytes leftover after parsing attributes in process `syz.4.270'. [ 113.976508][ T6888] netlink: 'syz.4.270': attribute type 5 has an invalid length. [ 114.029112][ T6888] netlink: 3 bytes leftover after parsing attributes in process `syz.4.270'. [ 114.041739][ T6899] netlink: 'syz.4.270': attribute type 4 has an invalid length. [ 114.050953][ T6899] netlink: 'syz.4.270': attribute type 5 has an invalid length. [ 114.058802][ T6899] netlink: 3 bytes leftover after parsing attributes in process `syz.4.270'. [ 114.070099][ T6908] netlink: 20 bytes leftover after parsing attributes in process `syz.3.274'. [ 114.089627][ T6908] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 114.108110][ T6905] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 114.204701][ T6908] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 114.439592][ T6922] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 114.473369][ T6922] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 114.495997][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.276'. [ 114.540170][ T6922] gretap1: entered promiscuous mode [ 114.545461][ T6922] gretap1: entered allmulticast mode [ 114.642365][ T6931] netlink: 32 bytes leftover after parsing attributes in process `syz.2.279'. [ 114.658095][ T6927] sch_tbf: peakrate 3 is lower than or equals to rate 15130787858020989372 ! [ 114.702886][ T6927] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.928434][ T6952] netlink: 'syz.3.285': attribute type 1 has an invalid length. [ 115.005553][ T6952] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.187377][ T6967] netlink: 48 bytes leftover after parsing attributes in process `syz.1.289'. [ 115.206879][ T6965] netlink: 68 bytes leftover after parsing attributes in process `syz.3.288'. [ 115.267838][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 115.647801][ T6987] netlink: 'syz.1.295': attribute type 14 has an invalid length. [ 115.966374][ T7005] sctp: [Deprecated]: syz.1.299 (pid 7005) Use of int in maxseg socket option. [ 115.966374][ T7005] Use struct sctp_assoc_value instead [ 116.046416][ T7009] netlink: 'syz.0.297': attribute type 10 has an invalid length. [ 116.293350][ T7009] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.582672][ T7020] : renamed from bridge_slave_0 (while UP) [ 116.805726][ T7038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.502598][ T7081] tipc: Enabling of bearer rejected, failed to enable media [ 118.534256][ T7139] xt_l2tp: v2 tid > 0xffff: 150994944 [ 120.721240][ T7133] vlan3: entered allmulticast mode [ 120.726436][ T7133] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 120.954596][ T7161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.609092][ T7203] __nla_validate_parse: 10 callbacks suppressed [ 121.609113][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.343'. [ 121.634631][ T7206] sctp: [Deprecated]: syz.4.344 (pid 7206) Use of int in max_burst socket option. [ 121.634631][ T7206] Use struct sctp_assoc_value instead [ 121.881568][ T7213] netlink: 36 bytes leftover after parsing attributes in process `syz.3.349'. [ 121.892975][ T7212] netlink: 36 bytes leftover after parsing attributes in process `syz.3.349'. [ 122.046825][ T7221] trusted_key: syz.3.350 sent an empty control message without MSG_MORE. [ 122.368126][ T7243] batadv0: entered promiscuous mode [ 122.375017][ T7243] team0: entered promiscuous mode [ 122.381072][ T7243] team_slave_0: entered promiscuous mode [ 122.397684][ T7243] team_slave_1: entered promiscuous mode [ 122.429604][ T7243] hsr1: entered promiscuous mode [ 122.440679][ T7243] hsr1: entered allmulticast mode [ 122.450790][ T7243] batadv0: entered allmulticast mode [ 122.460097][ T7243] team0: entered allmulticast mode [ 122.470424][ T7248] delete_channel: no stack [ 122.477589][ T7243] team_slave_0: entered allmulticast mode [ 122.492811][ T7243] team_slave_1: entered allmulticast mode [ 122.501756][ T7248] SET target dimension over the limit! [ 123.255012][ T7282] validate_nla: 2 callbacks suppressed [ 123.255031][ T7282] netlink: 'syz.4.367': attribute type 10 has an invalid length. [ 123.279975][ T5156] Bluetooth: hci4: command 0x0405 tx timeout [ 123.413291][ T7282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.461207][ T7282] bond0: entered promiscuous mode [ 123.466506][ T7282] bond_slave_0: entered promiscuous mode [ 123.483766][ T7282] bond_slave_1: entered promiscuous mode [ 123.522938][ T7282] bond0: entered allmulticast mode [ 123.550375][ T7282] bond_slave_0: entered allmulticast mode [ 123.556287][ T7282] bond_slave_1: entered allmulticast mode [ 123.585851][ T7282] team0: Port device bond0 added [ 123.863920][ T7312] netlink: 24 bytes leftover after parsing attributes in process `syz.1.374'. [ 123.874004][ T7312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.374'. [ 123.989516][ T7321] netlink: 196 bytes leftover after parsing attributes in process `syz.1.379'. [ 124.002290][ T7321] netlink: 196 bytes leftover after parsing attributes in process `syz.1.379'. [ 124.016910][ T7321] netlink: 19 bytes leftover after parsing attributes in process `syz.1.379'. [ 124.390017][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'. [ 124.485413][ T7347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.533188][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'. [ 124.726042][ C0] vcan0: j1939_tp_rxtimer: 0xffff888051667c00: rx timeout, send abort [ 124.934246][ T7374] IPVS: set_ctl: invalid protocol: 2 100.1.1.2:20003 [ 125.092856][ T7387] tipc: Enabling of bearer rejected, failed to enable media [ 125.217952][ T7392] lo speed is unknown, defaulting to 1000 [ 125.226364][ C0] vcan0: j1939_tp_rxtimer: 0xffff888051665800: rx timeout, send abort [ 125.235256][ C0] vcan0: j1939_tp_rxtimer: 0xffff888051667c00: abort rx timeout. Force session deactivation [ 125.244312][ T7392] lo speed is unknown, defaulting to 1000 [ 125.433389][ T7392] lo speed is unknown, defaulting to 1000 [ 125.528234][ T7399] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 125.734668][ C0] vcan0: j1939_tp_rxtimer: 0xffff888051665800: abort rx timeout. Force session deactivation [ 125.793171][ T7380] syz.4.394: vmalloc error: size 809005056, failed to allocated page array size 1580088, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 125.823118][ T7380] CPU: 0 UID: 0 PID: 7380 Comm: syz.4.394 Not tainted 6.15.0-syzkaller-12434-gdc9c67820f81 #0 PREEMPT(full) [ 125.823144][ T7380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.823170][ T7380] Call Trace: [ 125.823177][ T7380] [ 125.823185][ T7380] dump_stack_lvl+0x189/0x250 [ 125.823250][ T7380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.823281][ T7380] ? __pfx__printk+0x10/0x10 [ 125.823302][ T7380] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 125.823325][ T7380] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 125.823349][ T7380] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 125.823373][ T7380] warn_alloc+0x214/0x310 [ 125.823402][ T7380] ? __pfx_warn_alloc+0x10/0x10 [ 125.823454][ T7380] ? __get_vm_area_node+0x28f/0x300 [ 125.823477][ T7380] ? ip_set_sockfn_get+0x13a/0xc30 [ 125.823509][ T7380] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 125.823564][ T7380] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 125.823601][ T7380] ? ip_set_sockfn_get+0x13a/0xc30 [ 125.823628][ T7380] vmalloc_noprof+0xb2/0xf0 [ 125.823650][ T7380] ? ip_set_sockfn_get+0x13a/0xc30 [ 125.823677][ T7380] ip_set_sockfn_get+0x13a/0xc30 [ 125.823711][ T7380] nf_getsockopt+0x26e/0x290 [ 125.823741][ T7380] ip_getsockopt+0x1c4/0x220 [ 125.823779][ T7380] ? __pfx_ip_getsockopt+0x10/0x10 [ 125.823814][ T7380] ? sock_common_getsockopt+0x2d/0xb0 [ 125.823841][ T7380] ? raw_getsockopt+0xce/0x200 [ 125.823868][ T7380] do_sock_getsockopt+0x360/0x650 [ 125.823893][ T7380] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 125.823913][ T7380] ? __pfx_do_syscall_64+0x10/0x10 [ 125.823940][ T7380] ? __fget_files+0x3a0/0x420 [ 125.823962][ T7380] ? __fget_files+0x2a/0x420 [ 125.823992][ T7380] __x64_sys_getsockopt+0x1a5/0x250 [ 125.824013][ T7380] ? __pfx_do_syscall_64+0x10/0x10 [ 125.824041][ T7380] ? __pfx_do_syscall_64+0x10/0x10 [ 125.824071][ T7380] do_syscall_64+0xfa/0x3b0 [ 125.824096][ T7380] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.824129][ T7380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.824154][ T7380] ? clear_bhb_loop+0x60/0xb0 [ 125.824177][ T7380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.824197][ T7380] RIP: 0033:0x7fd7ded8e929 [ 125.824220][ T7380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.824236][ T7380] RSP: 002b:00007fd7dfb11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 125.824256][ T7380] RAX: ffffffffffffffda RBX: 00007fd7defb6160 RCX: 00007fd7ded8e929 [ 125.824270][ T7380] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000003 [ 125.824281][ T7380] RBP: 00007fd7dee10b39 R08: 0000200000000040 R09: 0000000000000000 [ 125.824293][ T7380] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.824305][ T7380] R13: 0000000000000001 R14: 00007fd7defb6160 R15: 00007ffcf3804338 [ 125.824335][ T7380] [ 125.824348][ T7380] Mem-Info: [ 126.147154][ T7380] active_anon:5710 inactive_anon:0 isolated_anon:0 [ 126.147154][ T7380] active_file:1210 inactive_file:39832 isolated_file:0 [ 126.147154][ T7380] unevictable:768 dirty:79 writeback:0 [ 126.147154][ T7380] slab_reclaimable:10106 slab_unreclaimable:113876 [ 126.147154][ T7380] mapped:31699 shmem:1368 pagetables:1242 [ 126.147154][ T7380] sec_pagetables:0 bounce:0 [ 126.147154][ T7380] kernel_misc_reclaimable:0 [ 126.147154][ T7380] free:1293302 free_pcp:13482 free_cma:0 [ 126.229215][ T7380] Node 0 active_anon:22740kB inactive_anon:0kB active_file:4840kB inactive_file:159128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129196kB dirty:316kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12264kB pagetables:4616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 126.347121][ T7380] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 126.378313][ T43] lo speed is unknown, defaulting to 1000 [ 126.394777][ T7392] infiniband syz0: set active [ 126.395669][ T7380] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 126.415222][ T7392] infiniband syz0: added lo [ 126.469534][ T7392] syz0: rxe_create_cq: returned err = -12 [ 126.497792][ T7392] infiniband syz0: Couldn't create ib_mad CQ [ 126.503841][ T7380] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 126.503908][ T7380] Node 0 DMA32 free:1251700kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22692kB inactive_anon:0kB active_file:4840kB inactive_file:157288kB unevictable:1536kB writepending:316kB present:3129332kB managed:2561080kB mlocked:0kB bounce:0kB free_pcp:39772kB local_pcp:20484kB free_cma:0kB [ 126.503988][ T7380] lowmem_reserve[]: 0 0 1 1 1 [ 126.504035][ T7380] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 126.504092][ T7380] lowmem_reserve[]: 0 0 0 0 0 [ 126.504139][ T7380] Node 1 Normal free:3906016kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15328kB local_pcp:7104kB free_cma:0kB [ 126.504198][ T7380] lowmem_reserve[]: 0 0 0 0 0 [ 126.504245][ T7380] Node 0 DMA: [ 126.525194][ T7392] infiniband syz0: Couldn't open port 1 [ 126.619167][ T7380] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 126.653103][ T7429] __nla_validate_parse: 4 callbacks suppressed [ 126.653121][ T7429] netlink: 14 bytes leftover after parsing attributes in process `syz.3.406'. [ 126.659768][ T7380] Node 0 DMA32: 19*4kB (M) 1*8kB (M) 2*16kB (ME) 30*32kB (ME) 22*64kB (ME) 11*128kB (UM) 5*256kB (M) 6*512kB (UM) 6*1024kB (UM) 8*2048kB (ME) 298*4096kB (M) = 1251380kB [ 126.799433][ T7380] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 126.844848][ T7392] RDS/IB: syz0: added [ 126.855949][ T7392] smc: adding ib device syz0 with port count 1 [ 126.862738][ T7380] Node 1 Normal: 192*4kB (UE) 50*8kB (UME) 53*16kB (UME) 60*32kB (UME) 22*64kB (UME) 8*128kB (UME) 3*256kB (ME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 950*4096kB (M) = 3906016kB [ 126.892935][ T7392] smc: ib device syz0 port 1 has pnetid [ 126.923637][ T7380] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.939092][ T7380] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.950404][ T7380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 126.971724][ T7380] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 126.981431][ T7380] 42406 total pagecache pages [ 126.986216][ T7380] 0 pages in swap cache [ 126.994779][ T7380] Free swap = 124996kB [ 126.999449][ T7380] Total swap = 124996kB [ 127.003723][ T7380] 2097051 pages RAM [ 127.016446][ T7380] 0 pages HighMem/MovableOnly [ 127.031224][ T7380] 424675 pages reserved [ 127.041068][ T7380] 0 pages cma reserved [ 127.046025][ T7429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.089820][ T7429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.137629][ T7429] bond0 (unregistering): Released all slaves [ 127.289302][ T5954] lo speed is unknown, defaulting to 1000 [ 127.296461][ T7392] lo speed is unknown, defaulting to 1000 [ 127.629805][ T7451] gretap0: entered promiscuous mode [ 128.010102][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 128.061689][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 128.071487][ T7464] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 128.079326][ T7464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.188470][ T13] syzkaller0: tun_net_xmit 76 [ 128.206824][ T13] syzkaller0: tun_net_xmit 48 [ 128.216921][ T3082] syzkaller0: tun_net_xmit 76 [ 128.233353][ T7461] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 128.246974][ T7461] syzkaller0: Linktype set failed because interface is up [ 128.793855][ T7493] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 129.143100][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'. [ 129.873366][ T7392] lo speed is unknown, defaulting to 1000 [ 130.334160][ T7522] netlink: 27 bytes leftover after parsing attributes in process `syz.3.434'. [ 130.360794][ T7522] netlink: 52 bytes leftover after parsing attributes in process `syz.3.434'. [ 130.390646][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 130.419078][ T7392] lo speed is unknown, defaulting to 1000 [ 130.653687][ T7537] netlink: 'syz.3.436': attribute type 21 has an invalid length. [ 130.666287][ T7537] netlink: 152 bytes leftover after parsing attributes in process `syz.3.436'. [ 130.850147][ T7541] netlink: 'syz.4.438': attribute type 4 has an invalid length. [ 131.029368][ T7392] lo speed is unknown, defaulting to 1000 [ 131.248723][ T7554] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.442'. [ 131.274127][ T7553] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.442'. [ 131.412880][ T7565] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 131.561539][ T7572] netlink: 'syz.4.447': attribute type 14 has an invalid length. [ 131.713559][ T7578] lo: entered promiscuous mode [ 131.722820][ T7578] tunl0: entered promiscuous mode [ 131.740619][ T7578] gre0: entered promiscuous mode [ 131.798342][ T7578] gretap0: entered promiscuous mode [ 131.809674][ T7578] erspan0: entered promiscuous mode [ 131.830290][ T7578] ip_vti0: entered promiscuous mode [ 131.849501][ T7578] ip6_vti0: entered promiscuous mode [ 131.860853][ T7578] sit0: entered promiscuous mode [ 131.870831][ T7578] ip6tnl0: entered promiscuous mode [ 131.880894][ T7578] ip6gre0: entered promiscuous mode [ 131.895138][ T7578] syz_tun: entered promiscuous mode [ 131.902763][ T7597] sock: sock_set_timeout: `syz.3.451' (pid 7597) tries to set negative timeout [ 131.912767][ T7578] ip6gretap0: entered promiscuous mode [ 131.951953][ T7578] bridge0: port 3(team0) entered disabled state [ 131.959419][ T7578] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.967212][ T7578] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.992910][ T7578] bridge0: entered promiscuous mode [ 132.006045][ T5156] Bluetooth: hci4: link tx timeout [ 132.012639][ T5156] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.023827][ T7578] vcan0: entered promiscuous mode [ 132.074936][ T7578] bond0: entered promiscuous mode [ 132.111733][ T7578] bond_slave_0: entered promiscuous mode [ 132.136947][ T7578] bond_slave_1: entered promiscuous mode [ 132.143035][ T7578] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 132.168774][ T7578] dummy0: entered promiscuous mode [ 132.206599][ T7578] nlmon0: entered promiscuous mode [ 132.217097][ T7578] caif0: entered promiscuous mode [ 132.228540][ T7578] vxcan0: entered promiscuous mode [ 132.235389][ T7578] vxcan1: entered promiscuous mode [ 132.242982][ T7578] veth0: entered promiscuous mode [ 132.253776][ T7578] veth1: entered promiscuous mode [ 132.287444][ T7578] wg0: entered promiscuous mode [ 132.323010][ T7578] wg1: entered promiscuous mode [ 132.359462][ T7578] wg2: entered promiscuous mode [ 132.376927][ T7578] veth0_to_bridge: entered promiscuous mode [ 132.406306][ T7578] veth1_to_bridge: entered promiscuous mode [ 132.433980][ T7578] veth0_to_bond: entered promiscuous mode [ 132.469335][ T7578] veth1_to_bond: entered promiscuous mode [ 132.490081][ T7578] veth0_to_team: entered promiscuous mode [ 132.511604][ T7578] veth1_to_team: entered promiscuous mode [ 132.554444][ T7578] veth0_to_batadv: entered promiscuous mode [ 132.566206][ T7578] batadv_slave_0: entered promiscuous mode [ 132.579206][ T7578] veth1_to_batadv: entered promiscuous mode [ 132.589345][ T7578] batadv_slave_1: entered promiscuous mode [ 132.600373][ T7578] xfrm0: entered promiscuous mode [ 132.609891][ T7578] veth0_to_hsr: entered promiscuous mode [ 132.620896][ T7578] veth1_to_hsr: entered promiscuous mode [ 132.633632][ T7578] hsr0: entered promiscuous mode [ 132.649601][ T7578] veth1_virt_wifi: entered promiscuous mode [ 132.673208][ T7578] veth0_virt_wifi: entered promiscuous mode [ 132.687353][ T7578] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 132.735566][ T7578] vlan0: entered promiscuous mode [ 132.745613][ T7578] vlan1: entered promiscuous mode [ 132.752860][ T7578] macvlan0: entered promiscuous mode [ 132.771709][ T7578] macvlan1: entered promiscuous mode [ 132.792189][ T7578] ipvlan0: entered promiscuous mode [ 132.797704][ T7578] ipvlan1: entered promiscuous mode [ 132.829983][ T7578] macvtap0: entered promiscuous mode [ 132.856676][ T7578] macsec0: entered promiscuous mode [ 132.867037][ T7578] geneve0: entered promiscuous mode [ 132.882241][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.888691][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.895115][ T7578] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.904729][ T7578] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.914996][ T7578] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.924366][ T7578] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.933901][ T7578] geneve1: entered promiscuous mode [ 132.955309][ T7578] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 132.979164][ T7578] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 132.990240][ T7578] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 133.005208][ T7578] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 133.026343][ T7578] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 133.042111][ T7578] ip6tnl1: entered promiscuous mode [ 133.048341][ T7578] gre1: entered promiscuous mode [ 133.054739][ T7578] bridge1: entered promiscuous mode [ 133.068520][ T7578] bond1: entered promiscuous mode [ 133.073847][ T7578] bond2: entered promiscuous mode [ 133.082389][ T7578] tun0: entered promiscuous mode [ 133.088745][ T7576] tipc: Started in network mode [ 133.093664][ T7576] tipc: Node identity , cluster identity 4711 [ 133.168833][ T7392] lo speed is unknown, defaulting to 1000 [ 133.230183][ T5156] Bluetooth: hci4: link tx timeout [ 133.235368][ T5156] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.300828][ T7614] __nla_validate_parse: 1 callbacks suppressed [ 133.300849][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'. [ 133.384853][ T7614] netlink: 20 bytes leftover after parsing attributes in process `syz.2.453'. [ 133.706349][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.457'. [ 133.763910][ T7633] Cannot find del_set index 4 as target [ 133.766312][ T7634] Cannot find del_set index 4 as target [ 134.083347][ T5156] Bluetooth: hci4: command 0x0405 tx timeout [ 135.114519][ T7700] tap0: tun_chr_ioctl cmd 1074025678 [ 135.150925][ T7700] tap0: group set to 0 [ 135.169179][ T7705] netlink: 72 bytes leftover after parsing attributes in process `syz.4.477'. [ 135.387401][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 135.416500][ T7719] xt_TPROXY: Can be used only with -p tcp or -p udp [ 135.634883][ T7726] openvswitch: netlink: IP tunnel dst address not specified [ 135.661311][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.482'. [ 135.940272][ T7744] netlink: 'syz.0.486': attribute type 1 has an invalid length. [ 135.967321][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 135.997873][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 136.067088][ T7750] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 136.074439][ T7587] IPVS: starting estimator thread 0... [ 136.135674][ T7757] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 136.177254][ T7755] IPVS: using max 24 ests per chain, 57600 per kthread [ 136.396051][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'. [ 136.732717][ T7782] SET target dimension over the limit! [ 136.901850][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 137.122367][ T7802] dummy0: entered promiscuous mode [ 137.145924][ T7802] gretap0: entered promiscuous mode [ 137.190971][ T7809] xt_TCPMSS: Only works on TCP SYN packets [ 137.425220][ T7819] 0ªX¹¦D: renamed from gretap0 [ 137.478806][ T7826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.495956][ T7819] 0ªX¹¦D: left promiscuous mode [ 137.513241][ T7819] 0ªX¹¦D: entered allmulticast mode [ 137.521443][ T7829] netlink: 'syz.3.508': attribute type 4 has an invalid length. [ 137.535597][ T7819] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 138.380764][ T7863] __nla_validate_parse: 5 callbacks suppressed [ 138.380784][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'. [ 138.431056][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.525'. [ 138.694690][ T7889] netlink: 224 bytes leftover after parsing attributes in process `syz.3.530'. [ 138.727421][ T7879] vlan0: entered promiscuous mode [ 138.771860][ T7879] team0: Port device vlan0 added [ 139.291128][ T7924] netlink: 44 bytes leftover after parsing attributes in process `syz.0.538'. [ 139.312035][ T7925] netlink: 44 bytes leftover after parsing attributes in process `syz.0.538'. [ 139.513479][ T7934] netlink: 'syz.2.541': attribute type 10 has an invalid length. [ 139.520288][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'. [ 139.526025][ T7934] netlink: 40 bytes leftover after parsing attributes in process `syz.2.541'. [ 139.568007][ T7934] dummy0: entered promiscuous mode [ 139.586309][ T7934] bridge0: port 3(dummy0) entered blocking state [ 139.598463][ T7934] bridge0: port 3(dummy0) entered disabled state [ 139.615466][ T7934] dummy0: entered allmulticast mode [ 139.671771][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 140.159844][ T5156] Bluetooth: hci4: command 0x0405 tx timeout [ 140.213737][ T7971] netlink: 71 bytes leftover after parsing attributes in process `syz.4.552'. [ 140.228813][ T7977] netlink: 'syz.1.553': attribute type 23 has an invalid length. [ 140.319696][ T7982] Bluetooth: MGMT ver 1.23 [ 140.335899][ T7984] netlink: 256 bytes leftover after parsing attributes in process `syz.1.555'. [ 140.722209][ T8003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.798888][ T8009] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 140.810871][ T8009] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 140.850959][ T8003] IPVS: Error connecting to the multicast addr [ 141.136742][ T8026] delete_channel: no stack [ 141.241537][ T8034] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 141.536261][ T8040] syzkaller1: entered promiscuous mode [ 141.546928][ T8040] syzkaller1: entered allmulticast mode [ 141.575579][ T8054] xt_limit: Overflow, try lower: 2147483649/128 [ 141.930664][ T8072] Cannot find del_set index 4 as target [ 141.954443][ T8073] dummy0: left allmulticast mode [ 141.979179][ T8073] bridge0: port 3(dummy0) entered disabled state [ 142.014385][ T8073] bridge_slave_1: left allmulticast mode [ 142.048246][ T8073] bridge_slave_1: left promiscuous mode [ 142.064253][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.096330][ T8073] : left allmulticast mode [ 142.101185][ T8073] : left promiscuous mode [ 142.106052][ T8073] bridge0: port 1() entered disabled state [ 142.406359][ T8091] IPVS: Error joining to the multicast group [ 142.526278][ T8095] lo speed is unknown, defaulting to 1000 [ 142.697184][ T8105] netlink: 'syz.4.594': attribute type 2 has an invalid length. [ 142.720044][ T8105] netlink: 'syz.4.594': attribute type 32 has an invalid length. [ 142.729089][ T8105] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 143.288438][ T5843] Bluetooth: hci0: command tx timeout [ 143.402928][ T8138] netlink: 'syz.1.604': attribute type 1 has an invalid length. [ 143.412084][ T8138] __nla_validate_parse: 14 callbacks suppressed [ 143.412100][ T8138] netlink: 224 bytes leftover after parsing attributes in process `syz.1.604'. [ 143.613918][ T8149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.607'. [ 144.177608][ T8170] team0: Cannot enslave team device to itself [ 144.467502][ T8181] netlink: 72 bytes leftover after parsing attributes in process `syz.3.615'. [ 144.656999][ T8187] team0: left allmulticast mode [ 144.673028][ T8187] team_slave_0: left allmulticast mode [ 144.680669][ T8187] team_slave_1: left allmulticast mode [ 144.687204][ T8187] bridge0: port 3(team0) entered disabled state [ 144.703308][ T8192] netlink: 'syz.3.619': attribute type 10 has an invalid length. [ 144.777554][ T8187] bridge_slave_1: left allmulticast mode [ 144.783591][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.804563][ T8187] bridge_slave_0: left allmulticast mode [ 144.811150][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.894412][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.910604][ T8192] bridge_slave_1: left allmulticast mode [ 144.919396][ T8192] bridge_slave_1: left promiscuous mode [ 144.933075][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.263412][ T8215] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 145.292910][ T8220] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 145.319960][ T8221] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 145.356031][ T8227] netlink: 596 bytes leftover after parsing attributes in process `syz.0.629'. [ 145.420319][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.630'. [ 145.433602][ T8221] bond3: (slave gretap1): making interface the new active one [ 145.449076][ T8227] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 145.473109][ T8233] openvswitch: netlink: IPv4 tunnel dst address is zero [ 145.480184][ T8221] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 145.500712][ T8231] netlink: 'syz.0.629': attribute type 11 has an invalid length. [ 145.662053][ T8242] openvswitch: netlink: Actions may not be safe on all matching packets [ 145.675006][ T3012] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 145.814990][ T8248] unsupported nlmsg_type 40 [ 146.058154][ T8254] x_tables: duplicate underflow at hook 1 [ 146.409475][ T8286] netlink: 'syz.3.645': attribute type 1 has an invalid length. [ 146.426842][ T8283] netlink: 40 bytes leftover after parsing attributes in process `syz.2.644'. [ 146.452043][ T8286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.514618][ T8286] ieee802154 phy1 wpan1: encryption failed: -90 [ 146.520049][ T8295] netlink: 36 bytes leftover after parsing attributes in process `syz.0.646'. [ 146.977462][ T8318] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 147.257065][ T8327] netlink: 36 bytes leftover after parsing attributes in process `syz.4.657'. [ 148.051246][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'. [ 148.067244][ T8353] netlink: 50 bytes leftover after parsing attributes in process `syz.0.664'. [ 148.668981][ T8392] __nla_validate_parse: 1 callbacks suppressed [ 148.668999][ T8392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.676'. [ 148.686951][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 148.696063][ T8393] tipc: Started in network mode [ 148.723620][ T8390] netlink: 'syz.0.674': attribute type 7 has an invalid length. [ 148.733536][ T8393] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 148.777708][ T8393] tipc: Enabling of bearer rejected, failed to enable media [ 148.791693][ T8398] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.677'. [ 148.808306][ T8396] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.677'. [ 149.077884][ T8406] netlink: 'syz.4.680': attribute type 1 has an invalid length. [ 149.209201][ T8406] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.227778][ T8419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.681'. [ 149.306437][ T8414] bond4: (slave geneve2): making interface the new active one [ 149.359907][ T8414] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 149.430523][ T8420] veth5: entered promiscuous mode [ 149.449866][ T8420] bond4: (slave veth5): Enslaving as an active interface with a down link [ 149.510291][ T8406] vlan3: entered allmulticast mode [ 149.531205][ T8406] bond4: entered allmulticast mode [ 149.537170][ T8406] geneve2: entered allmulticast mode [ 149.545304][ T8406] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 149.583203][ T8432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.687'. [ 149.704544][ T8437] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.752936][ T8438] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 149.878710][ T8447] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 149.897417][ C1] Illegal XDP return value 16128 on prog (id 135) dev veth0, expect packet loss! [ 150.098654][ T8454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.694'. [ 150.130392][ T8454] openvswitch: netlink: Flow key attr not present in new flow. [ 150.552246][ T8478] lo speed is unknown, defaulting to 1000 [ 151.861871][ T8519] netlink: 'syz.2.717': attribute type 13 has an invalid length. [ 151.878124][ T8519] netlink: 'syz.2.717': attribute type 17 has an invalid length. [ 151.993658][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 152.011210][ T8525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.719'. [ 152.037481][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 152.064792][ T8527] netlink: 'syz.4.720': attribute type 10 has an invalid length. [ 152.130205][ T8519] dummy0: left promiscuous mode [ 152.141114][ T8519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.172611][ T8527] veth1_vlan: entered allmulticast mode [ 152.220086][ T8527] team0: Device veth1_vlan failed to register rx_handler [ 152.739168][ T8561] xt_hashlimit: max too large, truncated to 1048576 [ 152.801473][ T8568] netlink: 'syz.1.731': attribute type 1 has an invalid length. [ 152.938618][ T8569] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.071010][ T8568] veth3: entered promiscuous mode [ 153.080885][ T8568] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 153.233738][ T8595] atomic_op ffff88803102e998 conn xmit_atomic 0000000000000000 [ 154.866906][ T8661] __nla_validate_parse: 36 callbacks suppressed [ 154.866926][ T8661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.757'. [ 154.900776][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 155.059124][ T8667] netlink: 48 bytes leftover after parsing attributes in process `syz.0.760'. [ 155.071702][ T8667] netlink: 48 bytes leftover after parsing attributes in process `syz.0.760'. [ 155.099874][ T8667] netlink: 48 bytes leftover after parsing attributes in process `syz.0.760'. [ 155.273462][ T8675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.761'. [ 155.386201][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'. [ 155.401473][ T8679] vcan1: entered promiscuous mode [ 155.480703][ T8686] netlink: 'syz.0.764': attribute type 10 has an invalid length. [ 155.567001][ T8686] bridge_slave_1: left promiscuous mode [ 155.601405][ T8686] bridge_slave_1: entered promiscuous mode [ 155.620563][ T8686] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 155.856782][ T8700] netlink: 16 bytes leftover after parsing attributes in process `syz.4.771'. [ 156.198017][ T8721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.778'. [ 156.243989][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 156.303940][ T8726] netlink: 'syz.1.780': attribute type 5 has an invalid length. [ 156.438061][ T8733] netlink: 'syz.1.783': attribute type 29 has an invalid length. [ 156.516217][ T8742] syzkaller0: create flow: hash 4069626135 index 1 [ 156.630792][ T8743] netlink: 'syz.1.783': attribute type 29 has an invalid length. [ 156.692509][ T64] syzkaller0: tun_net_xmit 76 [ 156.708526][ T64] syzkaller0: tun_net_xmit 48 [ 156.727749][ T10] syzkaller0: tun_net_xmit 76 [ 156.824499][ T8728] syzkaller0: delete flow: hash 4069626135 index 1 [ 157.770797][ T8769] netlink: 'syz.2.791': attribute type 1 has an invalid length. [ 157.785095][ T8769] netlink: 'syz.2.791': attribute type 4 has an invalid length. [ 158.396866][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 158.697893][ T8756] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 158.976004][ T8787] x_tables: duplicate underflow at hook 1 [ 159.065067][ T8794] oJRå=è: renamed from vlan1 (while UP) [ 159.280461][ T8807] ipvlan0: entered promiscuous mode [ 159.300652][ T8807] ipvlan0: entered allmulticast mode [ 159.306012][ T8807] veth0_vlan: entered allmulticast mode [ 159.332569][ T8812] netlink: 'syz.0.803': attribute type 1 has an invalid length. [ 159.477238][ T8815] netlink: 'syz.2.804': attribute type 10 has an invalid length. [ 159.515516][ T8817] netlink: 'syz.2.804': attribute type 10 has an invalid length. [ 159.542140][ T8820] openvswitch: netlink: Message has -1 unknown bytes. [ 159.562278][ T8815] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 160.020888][ T8847] __nla_validate_parse: 11 callbacks suppressed [ 160.020907][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.813'. [ 160.056891][ T8847] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 160.162841][ T8853] netlink: 172 bytes leftover after parsing attributes in process `syz.3.815'. [ 160.330877][ T8858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.435153][ T8863] netlink: 216 bytes leftover after parsing attributes in process `syz.2.818'. [ 160.564640][ T8866] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 160.599805][ T8866] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 160.967279][ T8884] netlink: 'syz.0.827': attribute type 29 has an invalid length. [ 160.991224][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 161.018614][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'. [ 161.047931][ T8884] netlink: 'syz.0.827': attribute type 29 has an invalid length. [ 161.055728][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 161.101339][ T8890] xt_NFQUEUE: number of total queues is 0 [ 161.215580][ T8894] netlink: 24 bytes leftover after parsing attributes in process `syz.0.830'. [ 161.632653][ T8904] netlink: 128 bytes leftover after parsing attributes in process `syz.0.834'. [ 161.656697][ T8904] netlink: 128 bytes leftover after parsing attributes in process `syz.0.834'. [ 162.143457][ T8917] veth3: entered allmulticast mode [ 162.498874][ T8934] bridge_slave_0: default FDB implementation only supports local addresses [ 162.527090][ T8933] bridge_slave_0: default FDB implementation only supports local addresses [ 162.644331][ T8936] netlink: 'syz.0.843': attribute type 1 has an invalid length. [ 162.695016][ T8936] bond4: (slave gretap0): making interface the new active one [ 162.704457][ T8936] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 162.957396][ T5843] Bluetooth: hci2: command tx timeout [ 163.110833][ T8950] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 163.264431][ T8953] netlink: 536 bytes leftover after parsing attributes in process `syz.2.850'. [ 163.737817][ T8981] ip6t_srh: unknown srh match flags 4001 [ 165.130295][ T9028] __nla_validate_parse: 8 callbacks suppressed [ 165.130316][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.873'. [ 165.223005][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.874'. [ 165.495631][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.876'. [ 165.560733][ T9046] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 165.766823][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 165.946452][ T9060] sctp: [Deprecated]: syz.4.881 (pid 9060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 165.946452][ T9060] Use struct sctp_sack_info instead [ 165.962957][ T9067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.884'. [ 165.973782][ T9067] Bluetooth: MGMT ver 1.23 [ 165.994899][ T9067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.884'. [ 166.035250][ T9067] openvswitch: netlink: Flow actions attr not present in new flow. [ 166.095898][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'. [ 166.180869][ T9082] netlink: 'syz.4.889': attribute type 11 has an invalid length. [ 166.211057][ T9076] mac80211_hwsim hwsim9 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 166.226773][ T9082] netlink: 224 bytes leftover after parsing attributes in process `syz.4.889'. [ 166.252152][ T9085] pim6reg: entered allmulticast mode [ 166.272245][ T9084] x_tables: duplicate underflow at hook 2 [ 166.450325][ T9103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.894'. [ 166.599411][ T9096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.644160][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.896'. [ 167.385975][ T9151] dvmrp0: entered allmulticast mode [ 168.071586][ T9199] netlink: 'syz.0.923': attribute type 1 has an invalid length. [ 168.087217][ T9199] netlink: 'syz.0.923': attribute type 3 has an invalid length. [ 168.107919][ T9200] netlink: 'syz.0.923': attribute type 1 has an invalid length. [ 168.115797][ T9200] netlink: 'syz.0.923': attribute type 3 has an invalid length. [ 168.167248][ T9202] syzkaller0: refused to change device tx_queue_len [ 168.552628][ T9224] delete_channel: no stack [ 168.720413][ T9235] netlink: 'syz.1.935': attribute type 2 has an invalid length. [ 168.729376][ T9235] netlink: 'syz.1.935': attribute type 8 has an invalid length. [ 168.761485][ T9240] netlink: 'syz.0.936': attribute type 4 has an invalid length. [ 168.812837][ T9241] netlink: 'syz.0.936': attribute type 4 has an invalid length. [ 168.880235][ T13] wlan0: Trigger new scan to find an IBSS to join [ 169.085945][ T9252] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 170.130948][ T9260] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 170.161228][ T9260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.235449][ T9271] __nla_validate_parse: 7 callbacks suppressed [ 170.235468][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.945'. [ 170.280302][ T9276] lo speed is unknown, defaulting to 1000 [ 170.298524][ T9273] netlink: 104 bytes leftover after parsing attributes in process `syz.4.945'. [ 170.329658][ T9283] sctp: [Deprecated]: syz.0.946 (pid 9283) Use of int in maxseg socket option. [ 170.329658][ T9283] Use struct sctp_assoc_value instead [ 170.916066][ T9312] netlink: 32 bytes leftover after parsing attributes in process `syz.0.956'. [ 171.236745][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'. [ 171.823695][ T9359] netlink: 'syz.1.967': attribute type 24 has an invalid length. [ 171.917152][ T13] wlan0: Trigger new scan to find an IBSS to join [ 172.042474][ T9368] netlink: 'syz.4.972': attribute type 1 has an invalid length. [ 172.056311][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'. [ 172.135873][ T9368] 8021q: adding VLAN 0 to HW filter on device bond5 [ 172.165990][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'. [ 172.283180][ T9381] lo speed is unknown, defaulting to 1000 [ 172.292719][ T9385] ªªªªªª†³?ÂHº: renamed from lo (while UP) [ 172.351078][ T9386] tap0: tun_chr_ioctl cmd 1074025677 [ 172.359841][ T9388] netlink: 36 bytes leftover after parsing attributes in process `syz.3.975'. [ 172.372191][ T9386] tap0: linktype set to 65534 [ 172.389269][ T9388] netlink: 32 bytes leftover after parsing attributes in process `syz.3.975'. [ 172.610226][ T9402] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.980'. [ 172.643799][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'. [ 172.701003][ T7587] IPVS: starting estimator thread 0... [ 172.817674][ T9409] IPVS: using max 26 ests per chain, 62400 per kthread [ 172.882264][ T9414] Cannot find del_set index 128 as target [ 173.358282][ T9384] geneve2: entered promiscuous mode [ 173.363627][ T9384] geneve2: entered allmulticast mode [ 173.420914][ T9446] netlink: 'syz.4.987': attribute type 3 has an invalid length. [ 174.409819][ T9497] ipvlan0: left promiscuous mode [ 174.414841][ T9497] ipvlan0: left allmulticast mode [ 174.452632][ T9497] veth0_vlan: left allmulticast mode [ 174.877625][ T2971] wlan0: Trigger new scan to find an IBSS to join [ 175.460409][ T9540] __nla_validate_parse: 17 callbacks suppressed [ 175.460428][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1017'. [ 175.561508][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'. [ 175.571280][ T9545] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1019'. [ 175.591564][ T9547] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1018'. [ 175.625950][ T9545] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1019'. [ 175.748406][ T9549] netlink: 'syz.0.1020': attribute type 4 has an invalid length. [ 175.802416][ T3012] wlan0: Creating new IBSS network, BSSID 0a:69:51:c3:e5:44 [ 175.930812][ T9553] syz.4.1022 (9553) used greatest stack depth: 16808 bytes left [ 175.952222][ T9565] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 176.031111][ T9568] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1026'. [ 176.057425][ T9566] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 176.163251][ T9573] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 176.248860][ T9579] netlink: 'syz.0.1026': attribute type 2 has an invalid length. [ 176.394572][ T9585] netlink: 'syz.1.1031': attribute type 83 has an invalid length. [ 176.662135][ T9600] openvswitch: netlink: Missing key (keys=40, expected=80) [ 176.723011][ T9604] openvswitch: netlink: Missing key (keys=40, expected=80) [ 176.837515][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1038'. [ 176.910437][ T9612] team0: Device ipvlan2 is up. Set it down before adding it as a team port [ 177.166384][ T9628] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1044'. [ 177.182978][ T9630] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1044'. [ 177.195452][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'. [ 177.408604][ T9644] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 177.543537][ T9651] pimreg: entered allmulticast mode [ 177.567878][ T9650] pimreg: left allmulticast mode [ 177.672020][ T9660] sctp: [Deprecated]: syz.1.1055 (pid 9660) Use of int in maxseg socket option. [ 177.672020][ T9660] Use struct sctp_assoc_value instead [ 178.163356][ T9692] sctp: [Deprecated]: syz.0.1064 (pid 9692) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.163356][ T9692] Use struct sctp_sack_info instead [ 178.248543][ T5843] Bluetooth: hci0: command tx timeout [ 178.410041][ T9711] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 178.418327][ T9711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.611898][ T9728] netlink: 'syz.2.1076': attribute type 1 has an invalid length. [ 179.444241][ T9739] netlink: 'syz.3.1079': attribute type 1 has an invalid length. [ 179.489587][ T9739] netlink: 'syz.3.1079': attribute type 2 has an invalid length. [ 180.982726][ T9808] __nla_validate_parse: 6 callbacks suppressed [ 180.982761][ T9808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 181.325644][ T9824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1104'. [ 181.380847][ T9819] tipc: Enabling of bearer rejected, failed to enable media [ 181.552674][ T9834] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1106'. [ 181.583637][ T9838] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1106'. [ 181.837810][ T9855] netlink: 'syz.3.1115': attribute type 10 has an invalid length. [ 181.862950][ T9853] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.899497][ T9855] batman_adv: batadv0: Adding interface: team0 [ 181.913146][ T9855] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 181.934861][ T9853] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 182.136267][ T9876] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 182.155496][ T9876] macsec1: entered allmulticast mode [ 182.162445][ T9876] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 182.188271][ T9881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1121'. [ 182.228356][ T9881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1121'. [ 182.270474][ T9876] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 182.293494][ T9876] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 182.876472][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1128'. [ 182.979097][ T9894] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.986862][ T9894] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.018637][ T9894] bond0: left promiscuous mode [ 183.026804][ T9894] bond_slave_0: left promiscuous mode [ 183.036389][ T9894] bond_slave_1: left promiscuous mode [ 183.045513][ T9894] bond1: left promiscuous mode [ 183.443895][ T9894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.474750][ T5156] Bluetooth: hci4: link tx timeout [ 183.480393][ T5156] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 183.503893][ T9894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.745628][ T9894] vlan0: left promiscuous mode [ 183.823096][ T9894] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.834669][ T9894] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.845570][ T9894] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.860882][ T9894] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.954411][ T9894] gretap1: left promiscuous mode [ 183.963526][ T9894] gretap1: left allmulticast mode [ 183.984520][ T9894] veth3: left promiscuous mode [ 184.016030][ T10] lo speed is unknown, defaulting to 1000 [ 184.024885][ T10] syz0: Port: 1 Link DOWN [ 184.045995][ T10] lo speed is unknown, defaulting to 1000 [ 184.204711][ T9920] tipc: Trying to set illegal importance in message [ 184.242879][ T9925] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 184.265546][ T9925] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 184.290966][ T9929] IPVS: length: 197 != 203112270096 [ 184.486758][ T9942] nbd: must specify at least one socket [ 184.542872][ T9944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1142'. [ 184.608515][ T9944] netlink: 'syz.0.1142': attribute type 2 has an invalid length. [ 184.636054][ T9944] netlink: 480 bytes leftover after parsing attributes in process `syz.0.1142'. [ 184.992890][ T9970] xt_ecn: cannot match TCP bits for non-tcp packets [ 185.307858][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'. [ 185.342273][ T9988] netlink: 'syz.2.1155': attribute type 12 has an invalid length. [ 185.521821][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 186.787539][T10078] veth0: entered promiscuous mode [ 186.851682][T10077] veth0: left promiscuous mode [ 187.076474][T10096] __nla_validate_parse: 1 callbacks suppressed [ 187.100708][T10096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1181'. [ 187.139848][T10099] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 187.231745][T10108] netlink: 'syz.4.1186': attribute type 6 has an invalid length. [ 187.243069][T10106] netlink: 'syz.3.1183': attribute type 11 has an invalid length. [ 187.443116][T10117] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1188'. [ 187.484607][T10118] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1188'. [ 187.532705][T10121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1189'. [ 187.542061][T10121] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1189'. [ 187.581344][T10121] gretap2: entered promiscuous mode [ 187.593018][T10121] gretap2: entered allmulticast mode [ 187.610676][T10121] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1189'. [ 187.988999][T10149] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1195'. [ 188.016683][T10149] openvswitch: netlink: Flow key attr not present in new flow. [ 188.292381][T10171] macvlan0: entered promiscuous mode [ 188.309733][T10171] macvlan0: entered allmulticast mode [ 188.315179][T10171] veth1_vlan: entered allmulticast mode [ 188.490056][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'. [ 188.504266][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'. [ 188.513983][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 188.844326][T10200] team0: entered promiscuous mode [ 188.853811][T10200] team_slave_0: entered promiscuous mode [ 188.870544][T10200] team_slave_1: entered promiscuous mode [ 188.883835][T10200] vlan0: entered promiscuous mode [ 188.916123][T10199] team0: left promiscuous mode [ 188.925318][T10199] team_slave_0: left promiscuous mode [ 188.939345][T10199] team_slave_1: left promiscuous mode [ 188.951266][T10199] vlan0: left promiscuous mode [ 189.114054][T10213] openvswitch: netlink: Key type 16144 is out of range max 32 [ 189.771516][T10252] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 189.969150][T10259] lo speed is unknown, defaulting to 1000 [ 190.319947][T10287] netlink: 'syz.0.1243': attribute type 1 has an invalid length. [ 190.693161][T10300] netlink: 'syz.0.1248': attribute type 1 has an invalid length. [ 190.951316][T10314] openvswitch: netlink: IP tunnel dst address not specified [ 190.977964][T10314] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 191.141918][T10321] netlink: 'syz.3.1256': attribute type 1 has an invalid length. [ 191.182146][T10321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.216288][T10321] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 191.383292][T10321] veth3: entered promiscuous mode [ 191.407866][T10321] bond0: (slave veth3): Enslaving as an active interface with a down link [ 191.418006][T10328] gretap0: left promiscuous mode [ 191.432579][T10328] gretap0: entered allmulticast mode [ 191.460769][T10328] bond0: (slave gretap0): making interface the new active one [ 191.473058][T10328] gretap0: entered promiscuous mode [ 191.490400][T10328] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 191.991122][T10360] netlink: 'syz.0.1271': attribute type 1 has an invalid length. [ 192.093660][T10368] __nla_validate_parse: 12 callbacks suppressed [ 192.093682][T10368] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1274'. [ 192.114665][T10360] 8021q: adding VLAN 0 to HW filter on device bond6 [ 192.140671][T10376] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1272'. [ 192.166134][T10377] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20002 [ 192.173570][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1274'. [ 192.190675][T10368] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1274'. [ 192.199890][T10368] netlink: 'syz.3.1274': attribute type 3 has an invalid length. [ 192.208074][T10368] netlink: 'syz.3.1274': attribute type 2 has an invalid length. [ 192.218891][T10368] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1274'. [ 192.293877][T10374] ip6erspan0: entered promiscuous mode [ 192.322440][T10374] bond6: (slave ip6erspan0): making interface the new active one [ 192.355800][T10374] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 192.453798][T10384] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1277'. [ 192.474505][T10384] netlink: 'syz.3.1277': attribute type 7 has an invalid length. [ 192.493164][T10384] netlink: 'syz.3.1277': attribute type 8 has an invalid length. [ 192.509144][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1277'. [ 192.541192][T10391] netlink: 'syz.2.1279': attribute type 1 has an invalid length. [ 192.555290][T10391] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1279'. [ 192.609882][T10394] veth5: entered allmulticast mode [ 192.825467][T10405] nbd: must specify an index to disconnect [ 193.013331][T10418] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 193.146679][T10422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1289'. [ 193.202572][T10427] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 193.225938][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'. [ 193.473258][T10444] vlan3: entered allmulticast mode [ 193.498132][T10444] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 193.775744][T10463] unknown channel width for channel at 909000KHz? [ 193.962207][T10469] netlink: 'syz.3.1302': attribute type 29 has an invalid length. [ 194.796654][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 195.583849][T10566] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 196.025070][T10590] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 196.109576][T10597] xt_CONNSECMARK: invalid mode: 0 [ 196.141648][T10597] geneve3: entered promiscuous mode [ 196.147195][T10597] geneve3: entered allmulticast mode [ 196.181563][T10601] vlan2: entered allmulticast mode [ 196.188533][T10601] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 196.253414][T10605] tap0: tun_chr_ioctl cmd 1074025677 [ 196.271734][T10605] tap0: linktype set to 1 [ 196.413275][T10612] validate_nla: 1 callbacks suppressed [ 196.413296][T10612] netlink: 'syz.2.1346': attribute type 6 has an invalid length. [ 197.028854][T10636] veth0: entered promiscuous mode [ 197.372362][T10650] __nla_validate_parse: 16 callbacks suppressed [ 197.372382][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1358'. [ 197.423385][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 197.554495][T10655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.597633][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1364'. [ 197.744970][T10655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.876074][T10676] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1368'. [ 197.891994][T10678] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 197.940477][T10655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.990861][T10682] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 198.050581][T10655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.073178][T10680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1370'. [ 198.093477][ T5156] Bluetooth: hci4: command 0x0405 tx timeout [ 198.107243][T10678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1369'. [ 198.109386][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1370'. [ 198.159704][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1370'. [ 198.170307][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1370'. [ 198.340457][T10655] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.357337][T10701] netlink: 'syz.3.1375': attribute type 1 has an invalid length. [ 198.422229][T10655] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.509928][T10701] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.567273][T10655] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.588011][T10714] netlink: 'syz.0.1378': attribute type 9 has an invalid length. [ 198.663563][T10655] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.740159][T10721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1381'. [ 202.606964][ T197] gretap0: left promiscuous mode [ 205.860601][ T197] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 205.871099][ T197] ------------[ cut here ]------------ [ 205.876888][ T197] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 205.884640][ T197] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 205.898107][ T197] CPU: 0 UID: 0 PID: 197 Comm: kworker/u8:5 Not tainted 6.15.0-syzkaller-12434-gdc9c67820f81 #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 205.898132][ T197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.898145][ T197] Workqueue: events_unbound cfg80211_wiphy_work [ 205.898201][ T197] Call Trace: [ 205.898210][ T197] [ 205.898219][ T197] dump_stack_lvl+0x189/0x250 [ 205.898265][ T197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.898297][ T197] ? __pfx__printk+0x10/0x10 [ 205.898334][ T197] ubsan_epilogue+0xa/0x40 [ 205.898357][ T197] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 205.898399][ T197] ieee80211_request_ibss_scan+0x600/0x8b0 [ 205.898443][ T197] ieee80211_ibss_work+0xd85/0x1060 [ 205.898469][ T197] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.898498][ T197] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 205.898523][ T197] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 205.898546][ T197] ? kcov_remote_stop+0x17e/0x6d0 [ 205.898574][ T197] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 205.898605][ T197] ? skb_dequeue+0x10e/0x150 [ 205.898632][ T197] ? ieee80211_iface_work+0xcd4/0xfe0 [ 205.898662][ T197] ? ieee80211_iface_work+0xf39/0xfe0 [ 205.898702][ T197] cfg80211_wiphy_work+0x2df/0x460 [ 205.898735][ T197] ? process_scheduled_works+0x9ef/0x17b0 [ 205.898769][ T197] process_scheduled_works+0xae1/0x17b0 [ 205.898834][ T197] ? __pfx_process_scheduled_works+0x10/0x10 [ 205.898886][ T197] worker_thread+0x8a0/0xda0 [ 205.898910][ T197] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 205.898944][ T197] ? __kthread_parkme+0x7b/0x200 [ 205.898976][ T197] kthread+0x70e/0x8a0 [ 205.899005][ T197] ? __pfx_worker_thread+0x10/0x10 [ 205.899024][ T197] ? __pfx_kthread+0x10/0x10 [ 205.899049][ T197] ? _raw_spin_unlock_irq+0x23/0x50 [ 205.899073][ T197] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.899097][ T197] ? __pfx_kthread+0x10/0x10 [ 205.899122][ T197] ret_from_fork+0x3f9/0x770 [ 205.899155][ T197] ? __pfx_ret_from_fork+0x10/0x10 [ 205.899191][ T197] ? __switch_to_asm+0x39/0x70 [ 205.899211][ T197] ? __switch_to_asm+0x33/0x70 [ 205.899237][ T197] ? __pfx_kthread+0x10/0x10 [ 205.899263][ T197] ret_from_fork_asm+0x1a/0x30 [ 205.899303][ T197] [ 205.899311][ T197] ---[ end trace ]--- [ 206.191591][ T197] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 206.198864][ T197] CPU: 0 UID: 0 PID: 197 Comm: kworker/u8:5 Not tainted 6.15.0-syzkaller-12434-gdc9c67820f81 #0 PREEMPT(full) [ 206.210705][ T197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.220800][ T197] Workqueue: events_unbound cfg80211_wiphy_work [ 206.227113][ T197] Call Trace: [ 206.230424][ T197] [ 206.233387][ T197] dump_stack_lvl+0x99/0x250 [ 206.238035][ T197] ? __asan_memcpy+0x40/0x70 [ 206.242671][ T197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.247925][ T197] ? __pfx__printk+0x10/0x10 [ 206.252564][ T197] panic+0x2db/0x790 [ 206.256515][ T197] ? __pfx_panic+0x10/0x10 [ 206.260970][ T197] ? _printk+0xcf/0x120 [ 206.265167][ T197] ? __pfx__printk+0x10/0x10 [ 206.269811][ T197] check_panic_on_warn+0x89/0xb0 [ 206.274795][ T197] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 206.280576][ T197] ieee80211_request_ibss_scan+0x600/0x8b0 [ 206.286441][ T197] ieee80211_ibss_work+0xd85/0x1060 [ 206.291680][ T197] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.296917][ T197] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 206.302850][ T197] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 206.309212][ T197] ? kcov_remote_stop+0x17e/0x6d0 [ 206.314257][ T197] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 206.319913][ T197] ? skb_dequeue+0x10e/0x150 [ 206.324526][ T197] ? ieee80211_iface_work+0xcd4/0xfe0 [ 206.329921][ T197] ? ieee80211_iface_work+0xf39/0xfe0 [ 206.335320][ T197] cfg80211_wiphy_work+0x2df/0x460 [ 206.340475][ T197] ? process_scheduled_works+0x9ef/0x17b0 [ 206.346253][ T197] process_scheduled_works+0xae1/0x17b0 [ 206.351873][ T197] ? __pfx_process_scheduled_works+0x10/0x10 [ 206.357916][ T197] worker_thread+0x8a0/0xda0 [ 206.362545][ T197] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 206.368913][ T197] ? __kthread_parkme+0x7b/0x200 [ 206.373891][ T197] kthread+0x70e/0x8a0 [ 206.377995][ T197] ? __pfx_worker_thread+0x10/0x10 [ 206.383126][ T197] ? __pfx_kthread+0x10/0x10 [ 206.387739][ T197] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.392959][ T197] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.398176][ T197] ? __pfx_kthread+0x10/0x10 [ 206.402788][ T197] ret_from_fork+0x3f9/0x770 [ 206.407403][ T197] ? __pfx_ret_from_fork+0x10/0x10 [ 206.412542][ T197] ? __switch_to_asm+0x39/0x70 [ 206.417319][ T197] ? __switch_to_asm+0x33/0x70 [ 206.422098][ T197] ? __pfx_kthread+0x10/0x10 [ 206.426712][ T197] ret_from_fork_asm+0x1a/0x30 [ 206.431515][ T197] [ 206.434868][ T197] Kernel Offset: disabled [ 206.439262][ T197] Rebooting in 86400 seconds..