last executing test programs: 5.013134419s ago: executing program 4 (id=7694): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r3, @ANYBLOB="83000400000000004800128008000100736974003c0002800500090029000000190010"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f0000000240)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="bc010000100000042bbd7000fbdbdf25ffffffff0000000000000000000000000a0101020000000000000000000000004e2480014e240007000020002c000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="fc010000000000000000000000000001000004d233000000640101010001000000000000000000000900000000000000ffffffffffffffff070000000000000004000000000000000100008000000000f8ffffffffffffff00000000000000000f0000000000000009000000000000000000000001000000000000000000000010dc00000000000009000000080000000300000007000000000000000200020e02000000000000000800160006000000c4000500fe880000000000000000000000000101000004d53200000002000000ac1414bb0000000000000000000000000035000000000500f9ffffffff01000009000000fe800000000000000000000000000024000004d53c0000000a000000ac1414bb000000000000000000000000053500000400570007000000020000000000000064010101000000000000000000000000000004d300000000020000007f00000100000000000000000000000001350000030200000101000007000000fdffffff"], 0x1bc}, 0x1, 0x0, 0x0, 0x20064804}, 0x4800) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r7, r9, 0x25, 0x4, @void}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000a80)="683f0057950d7678de7263988b02ec9bdcc8", 0x12}], 0x3) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 4.642863637s ago: executing program 4 (id=7697): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={r3, 0x44e9}, &(0x7f0000000040)=0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000000)={0x7, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @local}}}, 0x108) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/147, 0x93}], 0x1}, 0x80000001}], 0x1, 0x102, 0x0) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000080)=""/47, 0x2f}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/198, 0xc6}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/51, 0x33}, {&(0x7f00000015c0)=""/179, 0xb3}, {&(0x7f0000001680)=""/173, 0xad}], 0x8, 0xf, 0x3) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x3, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f00000018c0)=0x1) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r8, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x103}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000001880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x68, r8, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfc00}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x46}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) shutdown(r0, 0x0) 4.43264224s ago: executing program 0 (id=7698): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r0 = socket(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="75016a009cdc58"], 0xdd12}], 0x1, 0x0, 0x0, 0x200488c7}, 0x4048820) 4.374437443s ago: executing program 0 (id=7699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="390979fd459c"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, "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"}}, 0xfce) 4.215610635s ago: executing program 0 (id=7700): socket$inet6(0x10, 0x2, 0x0) (async) r0 = socket$inet6(0x10, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000005280), 0x1, 0x0) (async) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000005280), 0x1, 0x0) poll(&(0x7f00000052c0)=[{r1, 0x24}], 0x1, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xfdef) ioctl$OCFS2_IOC_GROUP_ADD64(r2, 0x40186f03, &(0x7f0000000280)={0x93a, 0x88, 0xa, 0x3}) (async) ioctl$OCFS2_IOC_GROUP_ADD64(r2, 0x40186f03, &(0x7f0000000280)={0x93a, 0x88, 0xa, 0x3}) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="1c00000020007fafb72d13b2a4a2719302000000030b43026c262369", 0x1c}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000740)=[{}, {}], 0x10, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r9, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0xfffffffe}, {{&(0x7f0000000ac0)=@qipcrtr, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000b40)=""/78, 0x4e}, {&(0x7f0000000bc0)=""/171, 0xab}, {&(0x7f0000000c80)=""/187, 0xbb}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/114, 0x72}, {&(0x7f0000001dc0)=""/177, 0xb1}, {&(0x7f0000001e80)=""/221, 0xdd}], 0x7}, 0xed}, {{&(0x7f0000002000)=@caif, 0x80, &(0x7f00000021c0)=[{&(0x7f0000002080)=""/28, 0x1c}, {&(0x7f0000002880)=""/190, 0xbe}, {&(0x7f0000002180)}], 0x3, &(0x7f0000002200)=""/252, 0xfc}, 0x4}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002300)=""/129, 0x81}, {&(0x7f00000023c0)=""/95, 0x5f}, {&(0x7f0000002440)=""/218, 0xda}, {&(0x7f0000002540)=""/113, 0x71}, {&(0x7f00000025c0)=""/120, 0x78}, {&(0x7f0000002640)=""/50, 0x32}], 0x6, &(0x7f0000002700)=""/73, 0x49}, 0xfffffffd}], 0x4, 0x20, 0x0) splice(r7, 0x0, r8, &(0x7f0000000040), 0x8f5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0x6, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xf}]}, &(0x7f0000000580)='syzkaller\x00', 0x2, 0x3e, &(0x7f00000005c0)=""/62, 0x41100, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x6, 0x697, 0x6}, 0x10, r6, r7, 0x8, 0x0, &(0x7f0000000980)=[{0x1, 0x2, 0x5, 0x1}, {0x1, 0x4, 0x1, 0x2}, {0x1, 0x4, 0xf, 0xc}, {0x4, 0x3, 0x5, 0x3}, {0x5, 0x5, 0x7, 0x2}, {0x2, 0x2, 0x10, 0x5}, {0x0, 0x2, 0xe}, {0x2, 0x3, 0x4, 0x8}], 0x10, 0xfffffff8}, 0x94) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="18005e800800060000000000040009"], 0x34}}, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="18005e800800060000000000040009"], 0x34}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)='{]\x00', 0x420402, &(0x7f00000000c0)={@align=0x3, {0x6, 0x800, 0x9, 0x9}}, 0xdf99, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x9}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r10, 0x58, &(0x7f0000000380)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r10, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r11, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffa}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008881) 1.858236475s ago: executing program 2 (id=7703): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000b80)=""/4084, 0xff4}, {&(0x7f0000000140)=""/104, 0x68}, {&(0x7f0000000a80)=""/237, 0xed}, {&(0x7f0000000000)=""/24, 0xf}, {&(0x7f00000001c0)=""/34}, {&(0x7f00000003c0)=""/52, 0x34}], 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000001b80)={0x0, 0xe, @status={[0x10, 0x0, 0xfffffffffffffff8, 0x4, 0x200, 0x19cef176]}, [0x4d6b3845, 0x8, 0x9, 0x9, 0x6, 0x3, 0x1, 0x9, 0x2, 0x4, 0x4, 0x80, 0x7, 0x7a, 0x4, 0x3961, 0x8, 0x2, 0x1, 0x8, 0xb74, 0x9, 0x8, 0x8000000000000001, 0xca21, 0x6, 0x8000000000000000, 0x51d, 0xff, 0x9, 0xffffffffffffffff, 0x8000000000000001, 0x6, 0xfffffffffffffffc, 0xb, 0xc, 0x6, 0xfffffffffffffff8, 0x7fffffff, 0xffffffffffffffff, 0x5, 0x7b1, 0x400, 0x8, 0x1, 0xe, 0x4, 0x9bc8, 0x9, 0xe626, 0x7, 0xb, 0x8, 0x5, 0x5, 0x200, 0x1, 0x1, 0x8020, 0x4, 0x32d, 0x100000000, 0x293a]}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x80, 0x10, 0xfffffffffffff4fb, 0x70bd25, 0x25de59f7, {0x0, 0x0, 0x0, 0x0, 0x2813, 0x2c21}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x11db, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9dde, 0x8}}]}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) 1.741412771s ago: executing program 0 (id=7705): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0xac, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_INDEX}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x56, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xac}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x40, 0x8, 0x800, 0x1e61, {{0x36, 0x4, 0x1, 0xa, 0xd8, 0x64, 0x0, 0x1c, 0x2b, 0x0, @broadcast, @multicast2, {[@generic={0x94, 0x11, "b8cdf1b3669ce314f952d13142b55a"}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x23, 0x91, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x44, 0xe5, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0xd}, {@loopback, 0x5}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@multicast1, 0x7}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x7}, {@multicast1, 0x10001}, {@broadcast, 0x10000}]}, @timestamp_prespec={0x44, 0x24, 0xa1, 0x3, 0xd, [{@local, 0x400}, {@private=0xa010100, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x8}, {@multicast1, 0x7}]}, @lsrr={0x83, 0x17, 0xe5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @ssrr={0x89, 0xb, 0xa1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa0, r4, 0x310, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xa7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5e}]}, 0xa0}}, 0x5) 1.740932374s ago: executing program 4 (id=7706): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00\r'], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2f6869647b202d696f20cb9218f3333ffe7aaf3ba704c06b34621cd7a47e3f749db5629fb6afb65f92b856d49a41c9a8288afba3d5a88fac8b97"], 0xa) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001c0016801800018014000a00ff03acb172310000000008e7ffffffff08001b"], 0x44}}, 0x0) socketpair(0x0, 0x3, 0x80, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r5, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000007c0)=@flushpolicy={0x3c0, 0x1d, 0x8, 0x70bd29, 0x25dfdbff, "", [@replay_esn_val={0x30, 0x17, {0x5, 0x70bd2a, 0x70bd27, 0x70bd2d, 0x70bd28, 0x100, [0x200, 0x400, 0x393, 0x7fff, 0x0]}}, @etimer_thresh={0x8, 0xc, 0x9f8}, @algo_comp={0x119, 0x3, {{'deflate\x00'}, 0x688, "a47b8ff1a1223487900d6808945feabe176f08d2291af4ff7a5588fdc9b348cc65d59a6e848301728935c231cedcf642eb5c004dc40053d3a50b9150d16596c43c798ef1324ada343541248372688c174c09281b3fbbdd901ecfbb082925a71a2d1f8ddb4437de12efa11d438a09ce4e5d5e0e41e7be8c1dee0fe3ea912e39e46ae1469fe204e369676af05ccde3bc3708d8422da7ef5d10d6d8eccd458f224408fcbad20c4603498a1aa9be0d0da547ecb5cb6df3039d1fd795b4ae489ed25fbea72cc1bfda47fa6fd22ea55e2193e479"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xbb77}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9}, @algo_auth_trunc={0xff, 0x14, {{'sha256-mb\x00'}, 0x598, 0x100, "22fcd7e52c5c31ab5f4cbc87c71e871a827e7a7541ee8942bcb08aefcc677aaff3634145ac3272f92537dcf799cfb07c6e0aa14ff291dfd220dad62cd3f6a7a016c712dd070c1f4224221f81bbaffad2918bb435d1b0c060b948f24ebbc324c1d4c2fa06d259dae7dbe154758bc8c883350d6cdb4b3fc323447b3a637206f4d90d124083aeacfc6ed33ed51f1ce685d54bf02df2264839e605d471469c077d8b9a7c0785086d75a6412d0c0ee64c3a897cf699"}}, @algo_comp={0x140, 0x3, {{'deflate\x00'}, 0x7c0, "cfd5de90423b7cfe14ed032bdc3c75183a3a03423fb5cb67be097aefef4ca2da2a6430d3294ff4504e85a5fed5de64092094df497c968754c1b97fb107703f1418142c750c3279d49974ae8a5c99eb441ac298eef4355988526d2f01b0139cbadd3c1dafb97bd8b22fdef3f05c8f27d3f875b8d0a9e223fa39e7aeb69e1794dd1822777334d671a451ee5d0b903ec1ab3e15558b6220cbef72597d0bff46fccf0c7bbaaf25aa108561e61f4cf0da0dac82e720603fb4b276e52e8e626742ef6f403e33a238d1555e2761dbc5944c200e2f8230d7db8f48919641f538e2bfa0a21acc62074386220ff080c6cc53cb37d639080bd8810b7dcd"}}, @lastused={0xc, 0xf, 0x8}]}, 0x3c0}}, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5e, &(0x7f00000015c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "ffc000", 0x28, 0x3a, 0x0, @private0, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r7}, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000080000000000000000018230000", @ANYRES32=r7, @ANYBLOB="000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000010000f8ff00000000bfa200000000000007020000f8fffff852c00984a4ffb703000008000000b704000000008500000082000000bf91000000000000b7020000010000008500000084000000b70000000000005589f43e85a43b593572c605851b9c009500"/125], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000480)=""/200, 0xc8, 0x0, &(0x7f0000000580)=""/156, 0x9c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085000000090000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd0, &(0x7f00000006c0)=""/208, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000200), 0x10, r9}, 0x94) socket(0x2a, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 1.612135854s ago: executing program 1 (id=7707): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c000018003780130003007172283414f6bba919736d"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='gre0\x00', 0x10) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0xffbf, {0x5, 0x6, "54d03a", 0x400, 0x88, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00'}}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000030c0)={{0xffffffffffffffff, &(0x7f0000000400)=']\x00', 0x216300, &(0x7f0000000440)={@_ha_fsid={[0x3ff, 0x2]}, {0xfffa, 0x5, 0x100, 0x4}}, 0x7f, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x4}, 0x9, &(0x7f0000002f80)=[{0x2, 0x766, &(0x7f0000000500)='GPL\x00', &(0x7f0000000540)="e9fcd7649b357220851b727fc003fbe79bb7fd3e802f77d0407f3f8f470aaa8670306f6e3ef096", 0x27, 0x10}, {0x2, 0x9, &(0x7f0000000580)=']\x00', &(0x7f00000005c0)="735451cae037df148d21d589d9356901300a12bf4162fded13cd0e10da75aae93088b9e0442dfe1352fccb78c344b5aef35e8cc6b227ab4525e4840047d55ae40e19cdca1d5b21d8200ffcc160b5c9e9bc91537fc022ad43469ad3edaf680858ecac4b13229b42a55eedb1fb775a5e26f4141eed5acd5ecde9ae9a85e7f2274ac16cecc1e63b356b1e5b3b70a490e98c9f86a25df86c92", 0x97, 0x68}, {0x2, 0x4, &(0x7f0000000680)='\xff\xff', &(0x7f0000000b40)="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", 0x1000, 0xa}, {0x3, 0x2, &(0x7f0000001b40)='GPL\x00', &(0x7f0000001b80)="876b603ff03bd38887351bbc8b8de51869f32d9485221e4465cf68c6c67ea90ef1456791024272cdd38c0412106f8105bb20955811b2e634b5cbebbe0ae2226b084f4f55883a2659605382ecf67ae3a3c0694b7be99910f35294905a2b2ff710d23edb8d518cbc5bbd2cba4d1ec0a24cec2ca8339c9383b018054769ebf4a2d05c40994db57ffb0b76d11fa82421eded5deec350378e181d43983a27f99125d36154512fa715a940", 0xa8}, {0x2, 0xfffffffb, &(0x7f0000001c40)='(-&\x00', &(0x7f0000001c80)="7e39e8b57fe0c16c3c70d3591e401ce220f7ffb55f95d8f0a1477f30820a8a2134114a791ed4", 0x26, 0x2}, {0x3, 0x1, &(0x7f0000001cc0)=' \x01\x00', &(0x7f0000001d00)="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", 0x1000, 0x1a}, {0x1, 0x2, &(0x7f0000002d00)='gre0\x00', &(0x7f0000002d40)="1bb426859372e03ca7397a613b5782ee3e2c2fa13cf601a5bd", 0x19, 0x60}, {0x3, 0x2, &(0x7f0000002d80)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000002dc0)="dc72054966ab61deec4b4dd05b9c8651f94dec0ee5bdb8677dbd64a01a719aa0ba776d53799027ee69dffba0611837feed72b645dbcca85eadd9876e12dfa9b10e69b23178a446b6e576e09bfcb1a3c4458fa2ddc2c84d794fe98176bc19a9d3a73c248773109e9668ef51dc392f6305ce4b80de590ede31f3b3b76e32f51f97b8d67558373048c413af260dc4683a8d3445cc2a0ec0b13478da81c25ca1d727061216c7230d6f", 0xa7, 0x18}, {0x1, 0x2, &(0x7f0000002e80)=':#\xbd:-]$\x00', &(0x7f0000002ec0)="cfecd5a242409f6286b4c92949dc7d0728721a7d709133568d27f26b0ff33c0e998b71747ee50068191988a56be02881e66d152887561e2258174b2dfd99e26595f2ffd7095b68dcebbc912b990b29d14327448f29de890834017da24197c0d6cd4d278b9555e25aef015807a026503d3182ba301f69011ffb3e38bc737dddd652b7877654aef2bb4d2f57fc3fbaa7a1c392808b063fde6ebdbdd09c855ee79e68dd01", 0xa3, 0x2a}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003140)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) 1.54573119s ago: executing program 3 (id=7708): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001000)=ANY=[@ANYBLOB="8001000010000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000005dadffff000000000000000033000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000480001007467723136302d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003006465666c61746500"/310], 0x180}}, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001000)=ANY=[@ANYBLOB="8001000010000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/310], 0x180}}, 0x0) r9 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) (async) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfa, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.508496714s ago: executing program 1 (id=7709): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', r6, 0x0, 0x5, 0xff, 0x0, 0x1, @private2, @empty, 0x8, 0x80, 0x1, 0x10000}}) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x25, 0x2, 0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0xfd, 0x8a, 0x4, 0x4b, @dev={0xfe, 0x80, '\x00', 0x18}, @private0, 0x80, 0x8000, 0x200, 0xff}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x700, 0x20, 0x6, 0x0, {{0x8, 0x4, 0x3, 0x1f, 0x20, 0x64, 0x0, 0x2, 0x999f45d20c8ca153, 0x0, @multicast2, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0xc, 0x86, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x7}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r14, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x400, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x7, 0xb}, {0xffff, 0xc}, {0xfff3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) getpeername$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x7, 0x7, 0x3ff, 0x2, {{0x1c, 0x4, 0x3, 0x2f, 0x70, 0x68, 0x0, 0xc, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x3a}, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xd1, 0x3, 0x0, [{@broadcast, 0x7}, {@loopback}, {@local, 0x788}, {@remote, 0xe}, {@private=0xa010102, 0xfffffff8}]}, @rr={0x7, 0x13, 0xb3, [@loopback, @private=0xa010101, @private=0xa010102, @private=0xa010101]}, @timestamp={0x44, 0xc, 0x72, 0x0, 0xc, [0x5, 0x4]}, @generic={0x44, 0x8, "ccfec6613550"}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f00000014c0)=ANY=[@ANYBLOB='X\a\x00\x00', @ANYRES16=r3, @ANYBLOB="00022dbd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="54000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002400040000040009feff00000004010105000000030083f8f49400000100fc070080000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=r9, @ANYBLOB="b000028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000008000008000100", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r16, @ANYBLOB="7039cc962600010024d474d5200e660782e28ed30001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000040000100340001006c625f74785f686173685f746f5f706f72745f6d617070696e6700000000000005", @ANYRES32=r13, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004006f1ba105400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r6, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000040000000000000000000500030003000000080004000600000008000600", @ANYRESHEX=r17, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="c400028084000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000054000400020003000900000001004b46860a000006001a01fffffffff901020c0500000002000d4004000000ff01000606000000030002770900000000800c0605000000ffff067f0e000000090005df000001003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES8=r13, @ANYBLOB], 0x758}, 0x1, 0x0, 0x0, 0x4000c880}, 0x40000010) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000596a98efb07ad2", @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf25190000001800018014000200776c616e3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4030015}, 0x10004800) setsockopt$sock_linger(r15, 0x1, 0xd, &(0x7f0000000d00)={0x0, 0x1}, 0x8) 1.424821714s ago: executing program 2 (id=7710): recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000000)=""/156, 0x9c, 0x160, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r0 = socket(0x1e, 0x5, 0x40) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000140)) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x6, 0x9, 0x8e, 0x3, 0x55, @mcast2, @rand_addr=' \x01\x00', 0x7800, 0x1, 0xae}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x401, 0x9, 0x8001, 0x220b1, r1, 0x9, '\x00', r2, 0xffffffffffffffff, 0xfbf, 0x1, 0x4, 0xf}, 0x50) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000540)={r1, 0x101, 0xb99, 0x200}) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r4}, 0x8) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa5}, [@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001}, @ldst={0x3, 0x0, 0x2, 0x1, 0x0, 0xffffffffffffffc0, 0x4}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0xd5, &(0x7f0000000440)=""/213, 0x41100, 0x23caa939dad34ee6, '\x00', r2, 0x25, r5, 0x8, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)=[{0x4, 0x3, 0xa, 0x4}, {0xffff, 0x1, 0xb, 0x1}, {0x5, 0x5, 0xd, 0x8}, {0x1, 0x1, 0x9, 0x8}], 0x10, 0x6, @value=r6}, 0x94) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x5, 0x3}]}, @float={0x8001, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000840)=""/179, 0x42, 0xb3, 0x0, 0xbadd}, 0x28) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000009c0)={0x7fffffff, 0x0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r0, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xa, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c000}, [@call={0x85, 0x0, 0x0, 0x9d}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0xa}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000740)='syzkaller\x00', 0xc3ce, 0x3d, &(0x7f0000000780)=""/61, 0x41000, 0x0, '\x00', r2, @fallback=0xd, r8, 0x8, &(0x7f0000000940)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0xd, 0xe, 0x2}, 0x10, r9, 0xffffffffffffffff, 0x0, &(0x7f0000000ac0)=[r5, r5, r1, r5, r10, r3, r1], 0x0, 0x10, 0x401}, 0x94) (async) r11 = accept$packet(r4, 0x0, &(0x7f0000000bc0)) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000c00)={0x2, 0x6}, 0x4) (async) ioctl$int_in(r3, 0x5421, &(0x7f0000000c40)=0xffffffff) (async) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r12) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001000)={r7, 0x0, 0xbf, 0xf9, &(0x7f0000000c80)="02be14f250d4b89efcbd477526f3a6e011f3cf135793a22235df3c1191cabe2cbd004082a86e16cf7ce264038cdf4a1fd34f5e6100afdbcf47ea7417de2766ea807836014a51a54da350a191d5d6b530802aa9afd883723169ab81ed5d56fcc1ba4a425ef951117fc0194c78a201dfff7ded3d2390cb308df64cd1bb5e5d4c5a089bfed411f6683bad21557f40876672a473f7de1f1eddb5c64a64d0dd6f209c7f49cf56999708772d038338df059f1a8fd98714e08b7cdf132310dd29367a", &(0x7f0000000d40)=""/249, 0x8, 0x0, 0x84, 0xf0, &(0x7f0000000e40)="42558b45a26b2d9d7f60fa27e22b1e800a744aa04ff10baef95342d8c94aeb7594782aaea5c23ec04c5b2297588bcae0ac183a6bfd105011c27c15eb79ecf7d7b6bfdde62fb909a2fca1df03d1e9e6d54b13a9b1735f5ad3218f9fea88affa06e48f37ee0ed1a7320e1dd6dfc5ca2d983d75e0d423315d99428a5705b56b5db265b6bac6", &(0x7f0000000f00)="7f9fff44213ef86cd4a0b77a090099592a11564296edec25c9cb23fabfc3afd0d15534ebdc29eb28c467fddf40852d6fd785c3478c1bc1de190a6a3c2caa3216c963190a0ae1ad85ea6b83d26bb908371424112d19d780939557fc57809e513385634073ac3c4ded18ea1a4cd7383711b3ba174314269511f572c096b16ddd0fc51d8751951e8593a932501ba321826f1ceb1f5cfc50a9525064ae8f859de39c0af0368168e79eb048fa8bf507ab80ff1f83885a78ffeace38fa3b6dda1c923d9475ff1ecde1d19fe6b02b5e83b734133cfc6fee6e5a531ffc1d7542cadba99b07a0f1d385864e23778bc890c95284d2", 0x2}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)={0x1b, 0x0, 0x0, 0xc6f, 0x0, 0x1, 0x0, '\x00', r2, r5, 0x5, 0x3, 0x5}, 0x50) epoll_create1(0x0) (async) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000001100), &(0x7f0000001140)=0x4) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001180)=@int=0x31c, 0x4) (async) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f00000011c0)=r5) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001200)={0x0, 0x8000}, &(0x7f0000001240)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000001280)={r13, 0x7c, 0x30, 0xfffffffffffffff7, 0x5}, &(0x7f00000012c0)=0x18) setsockopt(0xffffffffffffffff, 0x2, 0x5, &(0x7f0000001340)="1607943dcac39726217beee9b7a2242091a480093fadf0e93e44498eec7962c49d6f7f48e84d628314528e4586a1541d03f1", 0x32) 1.293127839s ago: executing program 2 (id=7711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480040002400000170008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000c0004800800024044066fa500000000060a01010000000000000000070000040000048000000180000001006e756d67656e000000000180001873ada975657565000000000004800000018000000100726564697200000000000180000201006374000000000280000004400000000100000300010000000000034000000000000000020000f03f0000000100000580140000001100010000000000000000000000000a"], 0xc0}}, 0x800) (async) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42, @random="2263e3984e45"}, 0x10) (async) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) (async) shutdown(r1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100030a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f00000000c0)) (async) listen(r1, 0x2) (async) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000800000000000000ffff0800040000000000000000", 0x39}], 0x1) accept4(r1, 0x0, 0x0, 0x80800) 1.242263536s ago: executing program 0 (id=7712): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x36}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x110}}, 0x20000800) 1.184273378s ago: executing program 3 (id=7713): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'team_slave_1\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x32, 0x11, 0x4, {0x8, @tcp_ip4_spec={@remote, @empty, 0x4e21, 0x4e22, 0x4}, {0x0, @remote, 0xa7, 0x0, [0x40, 0x132]}, @ether_spec={@remote, @random="787ac0791d6b", 0x3}, {0x0, @empty, 0x0, 0x2, [0x1c00]}, 0x6, 0x7}}}) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '{!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="4d7e29bd7000000000002a00000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e3100ea0000"], 0x28}, 0x4, 0x700000000000000}, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000e, 0x4010, r0, 0xbf473000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe000001000000f904001a", @ANYRES32=r0], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'team_slave_1\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x32, 0x11, 0x4, {0x8, @tcp_ip4_spec={@remote, @empty, 0x4e21, 0x4e22, 0x4}, {0x0, @remote, 0xa7, 0x0, [0x40, 0x132]}, @ether_spec={@remote, @random="787ac0791d6b", 0x3}, {0x0, @empty, 0x0, 0x2, [0x1c00]}, 0x6, 0x7}}}) (async) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '{!\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="4d7e29bd7000000000002a00000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e3100ea0000"], 0x28}, 0x4, 0x700000000000000}, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000e, 0x4010, r0, 0xbf473000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe000001000000f904001a", @ANYRES32=r0], 0x24}}, 0x0) (async) 1.009630752s ago: executing program 2 (id=7714): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r1, 0x1, 0x0, 0x25dfdbfb, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffecd}, {0x8, 0x87}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 888.373611ms ago: executing program 3 (id=7715): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0xffffff1f, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x20, 0x3f00}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 724.343714ms ago: executing program 0 (id=7716): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$alg(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000880)="9991ebcf25a3893cb367ba89edca2652", 0x10}], 0x1, 0x0, 0x0, 0x8890}, 0x4048001) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x409, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) 699.163071ms ago: executing program 4 (id=7717): socket$inet6(0xa, 0x3, 0x8000000003c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x201, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x4040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 617.475149ms ago: executing program 1 (id=7718): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_emit_ethernet(0xffffffffffffff20, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket(0x1e, 0x4, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:setrans_exec_t:s0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x8, 0x700, 0x1, 0x7, {{0x12, 0x4, 0x2, 0x6, 0x48, 0x68, 0x0, 0x7, 0x29, 0x0, @remote, @remote, {[@timestamp={0x44, 0x1c, 0xbc, 0x0, 0x0, [0xfffffffa, 0x2e1, 0x3, 0xfffffff9, 0x2, 0x0]}, @end, @lsrr={0x83, 0x17, 0x26, [@empty, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010100, @remote, @private=0xa010100]}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1a, r5}) 499.814641ms ago: executing program 2 (id=7719): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0xf, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x3) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getroute={0x14, 0x1a, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) 472.213662ms ago: executing program 1 (id=7720): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000002060100003d00000000bcda0000000005000400000000000900020073797a30000000000c00078008001240090001000500010006000000050005000a00000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000002c0)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @local, 0x8}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x40, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fcdbdf252400000008000200", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x810) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 416.578185ms ago: executing program 3 (id=7721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x200000000180, 0x2000000002c6, 0x2000000004dc], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x108) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x1, 0x1}, {0x2, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x1}}], 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010180000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400338008000900", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 344.607845ms ago: executing program 2 (id=7722): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x8, 0x1, 0x1, 0x6, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x98, 0x80, 0x401}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x109, 0x109, 0xc, [@decl_tag={0xc, 0x0, 0x0, 0x11, 0x5, 0x2}, @typedef={0x9, 0x0, 0x0, 0x8, 0x3}, @restrict={0x3, 0x0, 0x0, 0xb, 0x1}, @union={0xb, 0x5, 0x0, 0x5, 0x0, 0xfffffffd, [{0xe}, {0xc, 0x4, 0x8}, {0xc, 0x3, 0x5}, {0x9, 0x4}, {0xc, 0x3, 0xe05}]}, @struct={0x5, 0x1, 0x0, 0x4, 0x0, 0x1, [{0x9, 0x1, 0xaa47}]}, @datasec={0x7, 0x5, 0x0, 0xf, 0x1, [{0x5, 0x2, 0x7}, {0x4, 0xfffffffa, 0x4}, {0x2, 0xc, 0x2}, {0x4, 0x6, 0xbee3206f}, {0x3, 0x8001, 0x7fff}], "1c"}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xb, 0x2}, {0x2, 0x1}, {0xa, 0x5}, {0xb}]}, @func={0xe, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x61, 0x2e, 0x0, 0x0, 0x0, 0x30, 0x5f, 0x30, 0x0, 0x0]}}, &(0x7f0000000240)=""/135, 0x130, 0x87, 0x1, 0x7}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x7f, 0x4010000, 0x5, 0x4310, r0, 0x8, '\x00', r1, r2, 0x3, 0x1, 0x2}, 0x50) socketpair(0x2b, 0xa, 0x80, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'gre0\x00', 0x0}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x3b, '\x00', r6, r2, 0x4, 0x0, 0x4}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', r6, 0xffffffffffffffff, 0x3, 0x5}, 0x50) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$nci(r9, &(0x7f00000005c0)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x1, 0x3, 0x7, 0xf, 0x1}, 0x4) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00'}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x1, 0x8, 0x5, 0x40b, r7, 0x800, '\x00', r1, r2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r3, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x22dd, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @alu={0x7, 0x0, 0x1, 0x5, 0xa, 0x100, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffff6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0xef, 0x0, 0x0, 0x41100, 0x30, '\x00', r1, 0x17, r2, 0x8, &(0x7f0000000740)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xe, 0x9, 0x6}, 0x10, 0x1a0f3, r10, 0xa, &(0x7f0000000980)=[r7, r3, r11, r12, r8, r7, r8, r7], &(0x7f00000009c0)=[{0x3, 0x4, 0xe, 0x2}, {0x0, 0x2, 0xd, 0x7}, {0x1, 0x2, 0x10, 0x2}, {0x4, 0x4, 0x3, 0x4}, {0xf, 0x4, 0x5, 0xc}, {0x2, 0x4, 0xc}, {0x0, 0x4, 0xa, 0x5}, {0x5, 0x1, 0x4, 0xc}, {0x4, 0x1, 0x10}, {0x2, 0x3, 0xc, 0x3}], 0x10, 0x10000}, 0x94) r13 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000b40)={'ip6erspan0\x00', 0x0}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000d00)={r12, &(0x7f0000000b80)="b9221202bf0509d6d62056facc9f350e14c18ef1f58bb37f7979a0d59c17c6c03a42c9e08f1da8ad12201911db9adf13f27d0431a9e35bdaf7a47242ede0e28c021dfef3b469feb8cab9a0c3c28ed8fc0051be9951386a3e90b74329c66fa726bfc054538f6c7b970e16f779138d05e33c65a83ce6624e85ace392afe789e626ea6ed48ba4ba9e934348ef5f51a6bd3b315c771469d3b9427c4c1fca729cd2c2cdb505ca9457c37fe8942e823b6497493075fdaaf91ae853fb51eda55c92201a9086ad648329dfb4", &(0x7f0000000c80)=""/121}, 0x20) clock_gettime(0x4, &(0x7f0000000d40)) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000d80)) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)=@gettfilter={0x44, 0x2e, 0x10, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0xfff7}, {0xfff2, 0x1}, {0xd, 0x9}}, [{0x8, 0xb, 0x7}, {0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x110}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x4000001) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) r16 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r16, 0x89f1, &(0x7f0000000fc0)={'gre0\x00', &(0x7f0000000f00)={'gretap0\x00', r14, 0x700, 0x80, 0xb29, 0x3, {{0x1e, 0x4, 0x2, 0x9, 0x78, 0x64, 0x0, 0x9, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xbf, 0x3, 0x3, [{@multicast2, 0x4}, {@multicast1, 0x7}]}, @timestamp={0x44, 0x2c, 0x66, 0x0, 0x9, [0x6, 0x6, 0x9, 0x8, 0x9, 0x0, 0x6, 0x8001, 0xab, 0x4]}, @ssrr={0x89, 0x1f, 0xd7, [@empty, @private=0xa010102, @local, @remote, @empty, @local, @multicast1]}]}}}}}) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0xb8, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_NAT_SRC={0x30, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_DST={0x40, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_STATUS={0x8}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x480c4) r17 = openat$nci(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) read$nci(r17, &(0x7f00000011c0)=""/207, 0xcf) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x4, 0x5, 0x6, 0xfffffff7, 0x100, r3, 0x0, '\x00', 0x0, r2, 0x2, 0x1, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001340)={r8}, 0x4) 339.568965ms ago: executing program 4 (id=7723): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x104, r2, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6ce, 0x51}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}], @NL80211_ATTR_MAC={0xa, 0x6, @random="4311d99df5af"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SSID={0x1d, 0x34, @random="db9c273b54c9446bb82ab57baa60058a51c02e0f255926d723"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x120}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x63}]]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x8, 0x0, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20004000) 281.15793ms ago: executing program 3 (id=7724): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x239, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff0001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x26f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5c}]}]}]}, 0x70}}, 0x40008000) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x40}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x38, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x400}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x6}, @IFLA_PROTO_DOWN={0x5}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="6c0000000001010400000002141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000000000008000200ac1e00010c000280050001000000000006170340000100000800074000000001af6462143df45081c8d8c6e390274cc5ec3498361b6ed9db073a77af7af5e1997e40c86ddc2807fa028783bc2e46a56a"], 0x6c}}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x4e21, @broadcast}, 0xd1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x9, 0x6}) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000002c0)={@empty}, 0xd956e98d0df4f8e9) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000700)=0x1, 0xffc7) connect$l2tp6(r7, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20004004) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f0000000b40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)={0x254, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xe, 0x2c}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x1c7, 0x2a, [@peer_mgmt={0x75, 0x16, {0x1, 0x6, @val=0x28ef, @void, @val="8ad3cbcc368094490d8c9e78ea8dfa87"}}, @random={0xfb, 0xfd, "ff5c2b5b9c38c696ab076f3998797ab96b371b54714c2c6ddab42d9175ee1058950180bcb820ee33b69f22072caebe8a47ab4b1a6353aed352ea5139335d9bf6a6ac36be33f4a0da86833c9fa007037462b26b35081296df9fef5c3720c95cc020e43574cd2b83e25367c5c176aee41a9303311ead2ad34d1440e12cea8ba267dde2a99f590229bd0582c90a714cffc80f904f992b4296a3ef99e78cef98948a4b1930621c31e0572e8c8a4d700e0fddafc7e3eed6429f2e4827daf2a351453b47662f8d65a1b1c515fc06eefea90a2c7eee19dfee72bebff87ca09de3fef1610000ac4f815c2a72542800"/253}, @ssid={0x0, 0xc, @random="88b3a431710501716f200e57"}, @mic={0x8c, 0x18, {0x4e7, "3d4e8110909b", @long="b19a4a2b31617b8e5ca6e2fb2233c5d1"}}, @ht={0x2d, 0x1a, {0x410, 0x2, 0x1, 0x0, {0xb, 0x40, 0x0, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1}, 0xbc3ab3cdc1d3946e, 0xfffffff9, 0x4}}, @fast_bss_trans={0x37, 0x66, {0x8, 0x2, "77462801385b400f7c6c38354354b2a3", "0885f018fe0d396525e9b58c56c70aeadd29a0ca504201125a15b40e693fa90e", "f95206c5954986aee6e0fb30947592005ad04c0160d473a2da377c6a9058263a", [{0x4, 0x4, "227e2381"}, {0x4, 0xc, "8ed659cc70305b3a9395d425"}]}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x12}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x1e, 0x2a, [@chsw_timing={0x68, 0x4, {0x0, 0x4}}, @mesh_chsw={0x76, 0x6, {0xbc, 0x6, 0x28, 0x8}}, @supported_rates={0x1, 0x2, [{}, {0x12}]}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff8}]}, 0x254}, 0x1, 0x0, 0x0, 0x44050}, 0x48010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x808) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071120a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x94) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1a0000004a00010000010000000000000a"], 0x1c}}, 0x0) 217.048483ms ago: executing program 1 (id=7725): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x0, 0x731, 0x10, 0x20, {0x38}}, 0x14}, 0x1, 0x2}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000580)={r3}, &(0x7f00000015c0)=0x8) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000fda43c7865b9f6e46bcf00"/30, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 120.644469ms ago: executing program 4 (id=7726): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)=@newnexthop={0x4c, 0x68, 0x300, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x2, 0x0, 0x2}, [@NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xefd}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x817}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8b77}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x1) r3 = socket$packet(0x11, 0x2, 0x300) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x8a3, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$packet(r3, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r2, 0x1, 0xd8}, 0x14) sendto$packet(r0, &(0x7f0000000240)="00008000040800800078627cf8beee6d01f8a2654a53fc0000001d7b187806e825623e8f3646ee2e910000aff96e1f5dc423dc277c609718b8aeab093730887352d0a38c87c09b55774728d864a60adb86f75f9b779b43a99d1bf7bbbb42c54d241403edaa86ca29317d397053391da838476b85a4fc6048d9840fc616dfb06bcb1fe9d93429e5545df78f7b4d92c1918b09955eca416a181745fd57c93e47796ef1dc3f47af7841a547825b2edcdfdcdb062e720d73d2e73e00720babcc0b61e0712cf2b7e05d54021c0a1bee8b04a0d2c4e8f084041c4700f63609815373f2dcac795a298798dfbd6c79156b9982d18ee45b88d8e6b4da6fb42f49cb99a050dd6f5bd43b8d5f15d38c361e959891a36897c5919549fce3c9b3c5a9fe63daa0ab2c7a643bb1818e9da97daf0fbe0de23520fac6a9f5d2e5891858136b09", 0x13e, 0x24048081, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 48.87306ms ago: executing program 1 (id=7727): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x80, 0xd, 0x5, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7800, 0x20, 0x8, 0x3}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x36}, 0x48, r1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf4, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xf97}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6ae4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff00000000}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffbff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc4}, @TIPC_NLA_PUBL_LOWER={0x8}]}]}, 0xf4}}, 0xc1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x13c, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x1, 0x1}, {0x1, 0x7}, {0xb7, 0x3}, {0x7, 0x1}, {0x2, 0x3}, {0x8, 0x5}, {0xf5, 0x1}, {0x44, 0x7}, {0x4, 0x3}, {0xc, 0x3}, {0x12, 0x4}, {0xfd, 0x2}, {0x8}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x1}, {0x4, 0x3}, {0x1}, {0x8, 0x5}, {0xa, 0x2}], "47f1cb7e18d9ecd4"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x3, 0x4}, {0x7f}, {0x0, 0x5}, {0x5}, {0x8, 0x5}, {0x5, 0x1}, {0x3, 0x6}, {0x8, 0x2}, {0x0, 0x3}, {0x4, 0x6}, {0x0, 0x2}, {0xc, 0x6}, {0x3, 0x4}, {0xb, 0x5}, {0x37}, {0x9, 0x1}, {0x3, 0x2}], "1ee93201da453dc9"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0xe, 0x4}, {0x8, 0x1}, {0x5, 0x7}], "ab9e0e50a6799063"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x3}, {0x1, 0x6}, {0x2, 0x6}], "3ef47c1ed0ce6dc9"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x3, 0x7}, {0x3}, {0x5, 0x3}, {0x8, 0x6}, {0xdf, 0x1}, {0x4, 0x2}, {0x6, 0x6}, {0x5, 0x7}], "5c4cf2136ae4d83d"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x7, 0x1}, {0x3, 0x6}, {0x3, 0x1}, {0xf8, 0x3}, {0x81, 0x3}], "54f7ed324a6e3683"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x0, 0x1}, {0x2, 0x5}, {0x52}, {0xc, 0x2}, {0x8, 0x5}, {0xf, 0x4}, {0xff, 0x1}, {0x4, 0x6}, {0xfa, 0x6}, {0x3, 0x1}, {0x3, 0x5}, {0x10, 0x6}, {0xa, 0x6}, {0xe, 0x1}, {0x5, 0x2}, {0x1, 0x1}, {0x4, 0x3}, {0x0, 0x4}, {0x2, 0x2}, {0x5f, 0x4}, {0x4e, 0x5}], "3fae3c5e2221b485"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0xf8, 0x1}, {0xf6}, {0xc}, {0x7, 0x4}, {0x40, 0x5}, {0x70, 0x2}, {}, {0x2, 0x7}, {0x1}, {0x0, 0x1}, {0x9, 0x1}, {0x9}, {0x7f, 0x4}, {0x5, 0x4}, {0x2, 0x2}, {0x10}, {0xe, 0x3}, {0xf7, 0x7}], "d0d7bcd46596e4ab"}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc040}, 0x4000) recvmsg(r2, &(0x7f0000001880)={&(0x7f0000000580)=@caif=@dbg, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000600)=""/236, 0xec}, {&(0x7f0000000700)=""/80, 0x50}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/6, 0x6}], 0x4, &(0x7f0000001800)=""/102, 0x66}, 0x20) sendto$inet6(r0, &(0x7f00000018c0)='<', 0x1, 0x4000000, &(0x7f0000001900)={0xa, 0x4e24, 0x7fffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c) r5 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000001940)="fb8fc64d4c8c825fbef3ae2e98b406b22355ed1e652c6e41da481972416463bc6a3c781ecbac32e356f9669e55488b73ce7948d9dce56996d21d79480f2dfe35e38954e7dceb32293100fac76b1c614c1f9a7128157416889e", 0x59}, {&(0x7f00000019c0)="57a0a28723f238f1f80dc83a786fe714a851a7489738842243c4c4c2693ef407b03dbc009b67220c67785636a761716ddfe738924f7e018b8c2530d10c3dd05cca5d89135bfe4475a72a1ae009feee3fcca8763af3ef9de9936bfff5f58546fac424c10332ef87336427510c3dd6c11721a174fbdb736dacb3f02d64b542d54a7c4b65c84be5ab1bc1d387da82996cd134f1efd08fb9", 0x96}, {&(0x7f0000001a80)="d14265cc65319f832e502c34fe4dcb299513fed8", 0x14}, {&(0x7f0000001ac0)="90f0719d4201baa6fbfca6e93c910a12f9df2120dff0d18b60b155d71cef8dad9a992b147ca4071db42447231a2f0ec509abaf8e84becb7f4ab1c742f9c352e6baeb19f291d7b55a6f14b7c94bbbf4183d337a29479ac3c5d5f6ca7db49aac604428e7b610e502642293", 0x6a}, {&(0x7f0000001b40)="51338d0a7af946a8a1e29293a7293d315a39c504f8a96ecee54393e7639c82e3c672f969fb54b0654423d99dbd64113d70862d57762b12cc027ed84e012a5b25abd1b3410e794df7c85534cd3f56f4485b7788082b529936d1ddb13b919739ffff6f9356bbeabe81abe294fee49b24733e08c24a719ccdce7b5ca622658ec8403eed7ffc11dfcac946ac901e8da2a441cda135e69fb366f5440e42dc59933b83918a3129055b7760af2b60b8a0d5b9b153d4c2832bc78211e4", 0xb9}, {&(0x7f0000001c00)="48851796cca419fafe8bfe94c2e6a390256499a60b40b8bba82b8067c18e1d50e916a86b910f21c1cc451582572501e7f27375bdfaea8ccc44e59d7f34b928f24437a4c5cd0dedc5a7e551f28904cd115477d0de20f088d595eec8c0f17abf77fc3dfb5aaaa349f2022e8df823cd1f7e1a8dce83dd8ddd15ca47744bd66d384eb44503b27106ddcef9fe4f0405f377e5173ba3ca0dc07a04e85611867bea98f99202bf32", 0xa4}, {&(0x7f0000001cc0)="c5c52bed0058de442a91c83e9a706c4f7a8e4e3a3c82366eb92eb6a861449bd320d484f7cc12f0", 0x27}, {&(0x7f0000001d00)="4697c72e7eb927724bd3ba673040fb1e82982988c8665aa7a3e5567d77726a2d66d11244a9abd39e0137eacd5cdf51e6058afc869e500ee9f31268bc", 0x3c}, {&(0x7f0000001d40)="2c2207b1039ed80beace1bb728ccfa74d38b30fed7", 0x15}, {&(0x7f0000001d80)="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", 0x1000}], 0xa, &(0x7f0000002e40)=[{0xf8, 0x101, 0xc, "c2f0e628664e920cb9c37f0b6835c6e5623d03e12ab5ed3df5b15ab0901396f6559bc926ed1897e611f841bd24454c417e3a927abfe72cf98cf5169a9f4166c5dcf867b08004eb7fb2c5e10df5415a1f635d5634936c3189f848f873c0e9c6ca399e11182755f643babff151be7a63f9d1e0aa57b2e3d4e3a8e516468d5b28e9b2703c7b4db888b11597c776b78cbf97eb6cda72c6dc029ce8ba6e3f7b1141940ada4ba3b6ea8eef054a40145574e8998340663a0febc7e76edca4cbe9bfb9a765ee7e0d96f0fe7180cfebbc24802461d278ca153f795ccfcbabab076a7a5187faa811"}], 0xf8}, 0x5) syz_genetlink_get_family_id$tipc2(&(0x7f0000002f80), r3) setsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f0000002fc0)=0x5, 0x4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003040)={0x0}, &(0x7f0000003080)=0xc) r8 = gettid() r9 = getpid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004440)={0x0, 0x0}, &(0x7f0000004480)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000044c0)={0x0, 0x0, 0x0}, &(0x7f0000004500)=0xc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000004540)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004580)={0x0, 0x0, 0x0}, &(0x7f00000045c0)=0xc) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000004600)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000004640)={{{@in=@private, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@local}}, &(0x7f0000004740)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004780)={0x0, 0x0, 0x0}, &(0x7f00000047c0)=0xc) r17 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000004800)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000004900)=0xe8) r19 = getgid() sendmsg$netlink(r6, &(0x7f00000049c0)={&(0x7f0000003000)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004400)=[{&(0x7f00000030c0)={0x30, 0x11, 0x738, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x8, 0x106, 0x0, 0x1, [@nested={0x4, 0x122}]}, @nested={0x10, 0xd1, 0x0, 0x1, [@nested={0x4, 0xdf}, @nested={0x4, 0xf0}, @nested={0x4, 0xdf}]}, @typed={0x8, 0x129, 0x0, 0x0, @pid=r7}]}, 0x30}, {&(0x7f0000003100)={0x12f8, 0x11, 0x8, 0x70bd26, 0x25dfdbff, "", [@generic="3bc483e2ad24aa8f0b73feb5ef3702ba034befdf085797eccec2619ea951cf026aa18cbe9e4bca8646a8f9a27cce4400f8deb12662f8b802b1ada6592e33d6faa4bcecea43ce86aaee782b05970e0b2ba9b47de4d373a259aaba4770bf8757f1d725f73446e8bb71cfcd1d3ccf84f208ebebad4cab25a8f613e4a025c84bde6ecb903d797d191f081ebf25078066f6bfb58f5f6ebc1213a2d18f35a1a373b76b661a9f7a820acad4ff8a9ef85117b4cdc0b887", @nested={0x101c, 0xa8, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@local}, @typed={0x5, 0x151, 0x0, 0x0, @str='\x00'}, @generic="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", @nested={0x4, 0xd9}, @nested={0x4, 0x46}]}, @generic="524578828530d2e16a28cea8a117a44845af433edd3c530ed3b193fc2142321e2f6e1521984534340648395de2d38ae2d03a9b185b9bf978c54cf025777e0a2e944557bb4b3716999fcfc0a2c6d660a95d6d387b8df74c907c55f099aa2b855f05bc310c495496f2", @typed={0x8, 0x123, 0x0, 0x0, @pid=r8}, @generic="a84093263288c15eb5540962da63569ee1f6f6ffc5df4de00347d525c91f678b8efa1d1df4caf9adfb22837ab3963acc659b962b5b933de2b9785ac5dab8dd5783a32537d05377c73781bee21d7c1d376d2c17a38db6643bcaf65e6e26ad4dd3f4d60ec4d3998e812231a030760ed5a3ca211d49ada2e12d0a14cc2c47542389e3fd6056574a618a6444f009978b9fdf287cfda52a964b61d7f7e0c8a553ab5bbf5fe09a9851200be9ef78cc92e0e8f9ab64f7005d66cb31d14635e3a728aabe4513d2d38a95dcfbafa5dcfe03c68099a85080b7cc94e8fcb10c91476b1d39b99bd791b74d42b9348c955a531c31f66f2c4781", @generic="9d66c518415720a568f86c8b0c38a540dd6722c79092c580f11308e7680ce2b0409e7b61f730ac2ddf79e64c9cb153040ded5128d37d79367b2bb7019bb7fb18cfb8911eb86005cfe8f3dd0247791d4098dc9773708e1fe4b7ef521064f8cbda9e5e4f7825d8ee11b7e2dad1c8a12d691ea7c56a314babe8f7014f74dcf29b658cdb4ea851ddd1587d0b72cb4d8e18e01e314581a47f165fa9709c2dde53f412983b0b901b658aa1821a8e66add7", @typed={0x8, 0x10d, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x12f8}], 0x2, &(0x7f0000004940)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}], 0x80, 0x50}, 0x40010) 0s ago: executing program 3 (id=7728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x0, 0x2, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0xc, 0x1, 0x2}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) r5 = socket(0x19, 0x4, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) (async) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002040)={0x28, r4, 0x47918d5eb2b4e5e9, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x4, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) kernel console output (not intermixed with test programs): port 1(bridge_slave_0) entered disabled state [ 693.179993][T28422] netlink: 'syz.4.6153': attribute type 21 has an invalid length. [ 693.192303][T28332] bridge_slave_0: entered allmulticast mode [ 693.231791][T28332] bridge_slave_0: entered promiscuous mode [ 693.241213][T28422] IPv6: NLM_F_CREATE should be specified when creating new route [ 693.260279][T28332] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.269593][T28422] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 693.276940][T28422] IPv6: NLM_F_CREATE should be set when creating new route [ 693.284320][T28422] IPv6: NLM_F_CREATE should be set when creating new route [ 693.291615][T28422] IPv6: NLM_F_CREATE should be set when creating new route [ 693.311340][T28332] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.332533][T28332] bridge_slave_1: entered allmulticast mode [ 693.365419][T28332] bridge_slave_1: entered promiscuous mode [ 693.502440][ T126] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.514293][ T126] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 693.537123][ T5832] block nbd0: Receive control failed (result -32) [ 693.811111][ T126] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.824499][ T126] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 693.954850][T28332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.985664][T28332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.057475][ T126] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.074558][ T126] netdevsim netdevsim2  (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 694.158544][T28450] __nla_validate_parse: 1 callbacks suppressed [ 694.158563][T28450] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6162'. [ 694.267334][T28332] team0: Port device team_slave_0 added [ 694.344459][ T5832] Bluetooth: hci1: command tx timeout [ 694.367019][T28332] team0: Port device team_slave_1 added [ 694.488229][T28463] xt_hashlimit: size too large, truncated to 1048576 [ 694.724154][T28473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.771902][T28332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.794420][T28332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.872620][T28332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.918337][T28332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.948497][T28332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.022152][T28332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.042254][T28466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6166'. [ 695.147289][T28479] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.668287][T28503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6175'. [ 695.729478][T28332] hsr_slave_0: entered promiscuous mode [ 695.737144][T28332] hsr_slave_1: entered promiscuous mode [ 695.743770][T28332] debugfs: 'hsr0' already exists in 'hsr' [ 695.749746][T28332] Cannot create hsr debugfs directory [ 696.126749][ T126] dummy0: left allmulticast mode [ 696.153577][ T126] bridge0: port 4(dummy0) entered disabled state [ 696.184347][ T126] team0: left allmulticast mode [ 696.195937][ T126] team_slave_0: left allmulticast mode [ 696.208693][ T126] team_slave_1: left allmulticast mode [ 696.226302][ T126] team0: left promiscuous mode [ 696.233859][ T126] team_slave_0: left promiscuous mode [ 696.239729][ T126] team_slave_1: left promiscuous mode [ 696.247791][ T126] bridge0: port 3(team0) entered disabled state [ 696.260407][ T126] bridge_slave_1: left allmulticast mode [ 696.267600][ T126] bridge_slave_1: left promiscuous mode [ 696.275511][ T126] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.288624][ T126] bridge_slave_0: left promiscuous mode [ 696.303685][ T126] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.423169][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 696.426622][ T5832] Bluetooth: hci1: command tx timeout [ 696.431443][ C1] lec:lec_tx_timeout: lec0 [ 696.590030][ T126] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 696.640674][ T126] bond0 (unregistering): (slave ip6tnl2): Releasing backup interface [ 696.648909][ T126] ip6tnl2 (unregistering): left promiscuous mode [ 696.655935][ T126] ip6tnl2 (unregistering): left allmulticast mode [ 696.961498][ T126] team0: Port device bridge4 removed [ 697.068688][ T126] team0: Port device bridge6 removed [ 697.162198][T28547] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 697.183039][ T126] bond5 (unregistering): (slave bridge8): Releasing backup interface [ 697.192251][ T126] bridge8 (unregistering): left promiscuous mode [ 697.270952][ T126] .`¹ (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.280360][ T126] bond_slave_0: left allmulticast mode [ 697.292886][ T126] .`¹ (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.302530][ T126] bond_slave_1: left allmulticast mode [ 697.311302][ T126] .`¹ (unregistering): Released all slaves [ 697.324521][ T126] bond1 (unregistering): Released all slaves [ 697.341859][ T126] bond2 (unregistering): Released all slaves [ 697.361185][ T126] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 697.372432][ T126] veth0_to_bond: left promiscuous mode [ 697.380134][ T126] veth0_to_bond: left allmulticast mode [ 697.392570][ T126] bond3 (unregistering): Released all slaves [ 697.412184][ T126] bond0 (unregistering): Released all slaves [ 697.430380][ T126] bond4 (unregistering): Released all slaves [ 697.451574][ T126] bond5 (unregistering): Released all slaves [ 697.473030][T28517] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 697.585455][T28549] netlink: 'syz.1.6187': attribute type 12 has an invalid length. [ 697.633905][T28549] netlink: 'syz.1.6187': attribute type 29 has an invalid length. [ 697.685174][T28549] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6187'. [ 697.712415][T28549] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6187'. [ 697.866601][ T126] tipc: Disabling bearer [ 697.889242][ T126] tipc: Left network mode [ 698.506101][ T5832] Bluetooth: hci1: command tx timeout [ 698.570106][T28574] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6193'. [ 698.679225][T28580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6195'. [ 698.711664][T28582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6196'. [ 698.796072][T28586] openvswitch: netlink: Flow actions attr not present in new flow. [ 699.730523][T28616] syzkaller0: entered promiscuous mode [ 699.751402][T28616] syzkaller0: entered allmulticast mode [ 699.844849][T28632] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 700.238594][T28643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6210'. [ 700.867171][T28332] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 700.902991][T28332] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 700.999242][ T126] hsr_slave_0: left promiscuous mode [ 701.019928][ T126] hsr_slave_1: left promiscuous mode [ 701.030452][T28675] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6218'. [ 701.049617][ T126] veth1_macvtap: left promiscuous mode [ 701.056336][ T126] veth0_macvtap: left promiscuous mode [ 701.062266][ T126] veth1_vlan: left promiscuous mode [ 701.404180][ T126] team0 (unregistering): Port device team_slave_1 removed [ 701.426999][ T126] team0 (unregistering): Port device team_slave_0 removed [ 701.571699][T28670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6216'. [ 701.581267][T28670] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6216'. [ 701.591903][T28332] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 701.608705][T28332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 701.645396][T28678] bridge_slave_1: entered allmulticast mode [ 701.682819][T28332] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 701.814650][T28332] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 701.849945][T28332] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 701.910176][T28332] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 701.929192][T28686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6220'. [ 702.201595][T28703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6224'. [ 702.230633][T28707] netlink: 'syz.4.6225': attribute type 5 has an invalid length. [ 702.574525][T28332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.720101][T28332] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.832685][ T7005] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.839965][ T7005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.936987][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.944254][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.305486][T28751] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6238'. [ 703.331306][T28751] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6238'. [ 704.195659][T28332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.353895][T28332] veth0_vlan: entered promiscuous mode [ 704.369038][T28332] veth1_vlan: entered promiscuous mode [ 704.456347][T28332] veth0_macvtap: entered promiscuous mode [ 704.510415][T28332] veth1_macvtap: entered promiscuous mode [ 704.650883][T28332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.714080][T28819] netlink: 'syz.3.6253': attribute type 1 has an invalid length. [ 704.728765][T28332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.860033][T28819] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 704.880221][ T7008] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.951652][ T7008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.058998][ T7008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.092107][ T7008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.242283][T28849] netlink: 'syz.4.6260': attribute type 2 has an invalid length. [ 705.582823][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.620397][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.722040][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.751946][T28866] sock: sock_set_timeout: `syz.0.6264' (pid 28866) tries to set negative timeout [ 705.775838][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.888728][T28868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6264'. [ 705.939251][T28868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6264'. [ 706.416903][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 706.436053][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 706.459420][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 706.494666][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 706.504872][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 707.025227][T28897] vxcan1 speed is unknown, defaulting to 1000 [ 707.137589][T28901] netlink: 'syz.0.6271': attribute type 21 has an invalid length. [ 707.175329][T28901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6271'. [ 707.412976][T28912] netem: change failed [ 707.729579][T28925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6279'. [ 708.005559][T28897] chnl_net:caif_netlink_parms(): no params data found [ 708.164888][T28941] netlink: 212 bytes leftover after parsing attributes in process `syz.2.6283'. [ 708.211035][T28897] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.234791][T28897] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.254404][T28897] bridge_slave_0: entered allmulticast mode [ 708.274688][T28897] bridge_slave_0: entered promiscuous mode [ 708.302568][T28897] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.331085][T28897] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.357944][T28897] bridge_slave_1: entered allmulticast mode [ 708.369678][T28897] bridge_slave_1: entered promiscuous mode [ 708.437387][T28897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.461417][T28897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.584880][ T5839] Bluetooth: hci2: command tx timeout [ 708.632700][T28897] team0: Port device team_slave_0 added [ 708.662206][T28897] team0: Port device team_slave_1 added [ 708.791324][T28897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.809292][T28897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.872555][T28897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.905709][T28897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.919743][T28897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 708.966619][T28966] sctp: [Deprecated]: syz.2.6289 (pid 28966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 708.966619][T28966] Use struct sctp_sack_info instead [ 708.986073][T28966] sctp: [Deprecated]: syz.2.6289 (pid 28966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 708.986073][T28966] Use struct sctp_sack_info instead [ 709.006301][T28897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.218182][T28897] hsr_slave_0: entered promiscuous mode [ 709.236597][T28897] hsr_slave_1: entered promiscuous mode [ 709.252053][T28897] debugfs: 'hsr0' already exists in 'hsr' [ 709.261023][T28897] Cannot create hsr debugfs directory [ 709.287977][T28945] netlink: 'syz.1.6285': attribute type 4 has an invalid length. [ 709.306998][T28945] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6285'. [ 709.337045][T28945] .`¹: renamed from bond0 (while UP) [ 709.888805][T28992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6293'. [ 709.992895][T28897] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.054072][T28897] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.067439][T28897] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 55469 - 0 [ 710.292023][T28897] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.303724][T28897] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.317085][T28897] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 55469 - 0 [ 710.439187][T28897] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.452719][T28897] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.464263][T28897] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 55469 - 0 [ 710.505022][T29018] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6301'. [ 710.540620][T29018] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6301'. [ 710.589268][T28897] batman_adv: batadv0: Removing interface: netdevsim0 [ 710.608157][T28897] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.619796][T28897] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.632214][T28897] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 55469 - 0 [ 710.666268][ T5839] Bluetooth: hci2: command tx timeout [ 710.795314][T29023] bond0: entered promiscuous mode [ 710.818634][T29023] bond0: entered allmulticast mode [ 710.830305][T29023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.885945][T29033] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.6305'. [ 711.132792][T29043] netlink: 'syz.2.6307': attribute type 1 has an invalid length. [ 711.187067][T29049] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6307'. [ 711.267378][T29051] x_tables: ip_tables: osf match: only valid for protocol 6 [ 711.405077][T29043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 711.416219][T29062] netlink: 'syz.3.6313': attribute type 8 has an invalid length. [ 711.499515][ T7005] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.509802][ T7005] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.527825][ T7005] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.541150][T29064] netlink: 'syz.1.6315': attribute type 4 has an invalid length. [ 711.565366][T29066] netlink: 'syz.1.6315': attribute type 4 has an invalid length. [ 711.623528][ T7005] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.650145][T29052] vxcan1 speed is unknown, defaulting to 1000 [ 711.758103][T28897] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 711.816329][T28897] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 711.857973][T28897] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 711.900994][T28897] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 711.937062][T28897] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 711.979147][T28897] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 711.998231][T28897] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 712.044399][T28897] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 712.057314][T29079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6318'. [ 712.091088][T29079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6318'. [ 712.169420][T29088] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6319'. [ 712.293854][T29090] gretap1: entered promiscuous mode [ 712.316699][T29090] batman_adv: batadv0: Adding interface: gretap1 [ 712.331866][T29090] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 712.358936][T29090] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 712.437600][T29096] tipc: Enabled bearer , priority 10 [ 712.470423][T29098] tipc: Enabling of bearer rejected, already enabled [ 712.713918][T29104] netlink: 'syz.1.6326': attribute type 39 has an invalid length. [ 712.754396][ T5839] Bluetooth: hci2: command tx timeout [ 712.775870][T28897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.812106][T28897] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.835747][ T7008] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.843043][ T7008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.864989][ T7008] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.872261][ T7008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.286538][T29129] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 713.446625][T29134] netlink: 'syz.0.6332': attribute type 1 has an invalid length. [ 713.468045][T29134] netlink: 'syz.0.6332': attribute type 1 has an invalid length. [ 713.778693][T29148] 8021q: VLANs not supported on nr0 [ 713.836255][T28897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.438816][T29176] gre2: entered promiscuous mode [ 714.495376][T29172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6343'. [ 714.510238][T29179] gre2: entered promiscuous mode [ 714.605990][T28897] veth0_vlan: entered promiscuous mode [ 714.637071][T28897] veth1_vlan: entered promiscuous mode [ 714.770028][T28897] veth0_macvtap: entered promiscuous mode [ 714.814230][T28897] veth1_macvtap: entered promiscuous mode [ 714.823630][ T5839] Bluetooth: hci2: command tx timeout [ 714.936735][T28897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.948778][T29199] netlink: 'syz.3.6349': attribute type 21 has an invalid length. [ 714.986879][T28897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.062853][ T7014] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.099692][ T7014] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.167227][T29206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6352'. [ 715.192607][ T7014] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.238618][ T7014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.514328][T29219] netlink: 'syz.0.6356': attribute type 1 has an invalid length. [ 715.555943][T29219] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 715.601569][ T7009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.683674][ T7009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.798123][T29231] netlink: 'syz.3.6359': attribute type 39 has an invalid length. [ 715.802035][ T7008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.817075][ T7008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.864549][T29231] bridge0: port 2(syz_tun) entered disabled state [ 715.899626][T29235] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 716.006770][T29231] syz_tun (unregistering): left allmulticast mode [ 716.030419][T29231] syz_tun (unregistering): left promiscuous mode [ 716.064043][T29231] bridge0: port 2(syz_tun) entered disabled state [ 716.834482][T21889] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 716.849769][T21889] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 716.862106][T21889] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 716.881782][T21889] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 716.898965][T21889] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 717.148425][T29279] vxcan1 speed is unknown, defaulting to 1000 [ 717.242277][T29291] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6373'. [ 717.371640][T29291] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6373'. [ 717.873269][ T5839] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 718.272674][ T7009] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.289178][ T7009] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.307215][ T7009] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 718.307564][T29334] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6380'. [ 718.425600][T29330] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6380'. [ 718.514042][ T7009] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.547020][ T7009] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.587919][ T7009] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 718.826040][ T7009] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.878380][ T7009] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.917531][ T7009] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 718.985185][ T5839] Bluetooth: hci5: command tx timeout [ 719.017077][T29342] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 719.059616][ T7009] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.083178][ T7009] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.100950][ T7009] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 719.121430][T29342] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 719.182977][T29362] xt_hashlimit: size too large, truncated to 1048576 [ 719.200419][T29363] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6386'. [ 719.275644][T29363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6386'. [ 719.351037][T29279] chnl_net:caif_netlink_parms(): no params data found [ 719.670706][T29381] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6390'. [ 719.862674][T29386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 720.003658][T29279] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.044592][T29279] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.055898][T29279] bridge_slave_0: entered allmulticast mode [ 720.066233][T29279] bridge_slave_0: entered promiscuous mode [ 720.090052][T29279] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.098200][T29279] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.122311][T29279] bridge_slave_1: entered allmulticast mode [ 720.139466][T29279] bridge_slave_1: entered promiscuous mode [ 720.158095][T29404] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6391'. [ 720.256308][T29399] netlink: 'syz.4.6392': attribute type 29 has an invalid length. [ 720.267932][T29399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6392'. [ 720.305880][ T7009] bridge_slave_1: left allmulticast mode [ 720.311743][ T7009] bridge_slave_1: left promiscuous mode [ 720.319014][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.326514][T29391] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6392'. [ 720.337734][ T7009] bridge_slave_0: left promiscuous mode [ 720.346658][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.533427][ T7009] bond9 (unregistering): (slave ip6gre3): Releasing backup interface [ 720.541741][ T7009] ip6gre3 (unregistering): left promiscuous mode [ 720.601586][ T7009] tipc: Disabling bearer [ 720.727732][ T7009] bond11 (unregistering): (slave geneve2): Releasing active interface [ 721.063346][ T5839] Bluetooth: hci5: command tx timeout [ 721.089329][ T7009] .`¹ (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.100300][ T7009] .`¹ (unregistering): Released all slaves [ 721.112408][ T7009] bond1 (unregistering): Released all slaves [ 721.128828][ T7009] bond2 (unregistering): Released all slaves [ 721.149558][ T7009] bond3 (unregistering): Released all slaves [ 721.168495][ T7009] bond4 (unregistering): Released all slaves [ 721.186416][ T7009] bond5 (unregistering): Released all slaves [ 721.207575][ T7009] bond6 (unregistering): Released all slaves [ 721.224304][ T7009] bond7 (unregistering): Released all slaves [ 721.242075][ T7009] bond8 (unregistering): Released all slaves [ 721.261578][ T7009] bond9 (unregistering): Released all slaves [ 721.280602][ T7009] bond10 (unregistering): Released all slaves [ 721.302197][ T7009] bond11 (unregistering): Released all slaves [ 721.321395][ T7009] bond12 (unregistering): (slave vxcan5): Releasing backup interface [ 721.331417][ T7009] bond12 (unregistering): Released all slaves [ 721.367221][ T7009] bond0 (unregistering): Released all slaves [ 721.438270][T29401] netlink: 'syz.4.6392': attribute type 29 has an invalid length. [ 721.469126][T29279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.500129][T29279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.719728][ T7009] tipc: Disabling bearer [ 721.744307][ T7009] tipc: Left network mode [ 721.753238][T29279] team0: Port device team_slave_0 added [ 721.814582][T29279] team0: Port device team_slave_1 added [ 721.999351][T29279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.016734][T29279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.107795][T29279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.252429][T29279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.310866][T29279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.432081][T29442] ip6t_srh: unknown srh invflags 4000 [ 722.467285][T29279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.863587][T29455] netlink: 'syz.0.6402': attribute type 1 has an invalid length. [ 722.901154][T29279] hsr_slave_0: entered promiscuous mode [ 722.961113][T29279] hsr_slave_1: entered promiscuous mode [ 722.977348][T29279] debugfs: 'hsr0' already exists in 'hsr' [ 722.985569][T29464] FAULT_INJECTION: forcing a failure. [ 722.985569][T29464] name failslab, interval 1, probability 0, space 0, times 0 [ 723.013674][T29279] Cannot create hsr debugfs directory [ 723.041015][T29464] CPU: 0 UID: 0 PID: 29464 Comm: syz.3.6404 Not tainted syzkaller #0 PREEMPT(full) [ 723.041046][T29464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 723.041061][T29464] Call Trace: [ 723.041069][T29464] [ 723.041079][T29464] dump_stack_lvl+0xe8/0x150 [ 723.041117][T29464] should_fail_ex+0x412/0x560 [ 723.041152][T29464] should_failslab+0xa8/0x100 [ 723.041174][T29464] ? skb_clone+0x212/0x3a0 [ 723.041195][T29464] kmem_cache_alloc_noprof+0x87/0x650 [ 723.041232][T29464] skb_clone+0x212/0x3a0 [ 723.041257][T29464] __netlink_deliver_tap+0x404/0x850 [ 723.041302][T29464] ? netlink_deliver_tap+0x2e/0x1b0 [ 723.041341][T29464] netlink_deliver_tap+0x19c/0x1b0 [ 723.041374][T29464] netlink_sendskb+0x68/0x140 [ 723.041406][T29464] netlink_rcv_skb+0x2b6/0x4b0 [ 723.041438][T29464] ? __pfx_genl_rcv_msg+0x10/0x10 [ 723.041466][T29464] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 723.041524][T29464] ? down_read+0x270/0x2e0 [ 723.041553][T29464] ? genl_rcv+0xd/0x40 [ 723.041579][T29464] genl_rcv+0x28/0x40 [ 723.041602][T29464] netlink_unicast+0x75c/0x8e0 [ 723.041643][T29464] netlink_sendmsg+0x813/0xb40 [ 723.041687][T29464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 723.041724][T29464] ? aa_sock_msg_perm+0xf1/0x1b0 [ 723.041757][T29464] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 723.041795][T29464] ____sys_sendmsg+0x972/0x9f0 [ 723.041840][T29464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 723.041885][T29464] ? import_iovec+0x73/0xa0 [ 723.041911][T29464] ___sys_sendmsg+0x2a5/0x360 [ 723.041943][T29464] ? __lock_acquire+0x6b5/0x2cf0 [ 723.041977][T29464] ? __pfx____sys_sendmsg+0x10/0x10 [ 723.042049][T29464] ? __fget_files+0x2a/0x420 [ 723.042076][T29464] ? __fget_files+0x3a0/0x420 [ 723.042114][T29464] __x64_sys_sendmsg+0x1bd/0x2a0 [ 723.042152][T29464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 723.042195][T29464] ? __pfx_ksys_write+0x10/0x10 [ 723.042234][T29464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.042257][T29464] do_syscall_64+0x15f/0xf80 [ 723.042284][T29464] ? trace_irq_disable+0x3b/0x140 [ 723.042308][T29464] ? clear_bhb_loop+0x40/0x90 [ 723.042335][T29464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.042356][T29464] RIP: 0033:0x7ff6eb39cdd9 [ 723.042377][T29464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.042395][T29464] RSP: 002b:00007ff6ec2d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.042418][T29464] RAX: ffffffffffffffda RBX: 00007ff6eb616090 RCX: 00007ff6eb39cdd9 [ 723.042434][T29464] RDX: 0000000020000844 RSI: 00002000000015c0 RDI: 0000000000000005 [ 723.042447][T29464] RBP: 00007ff6ec2d1090 R08: 0000000000000000 R09: 0000000000000000 [ 723.042459][T29464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.042471][T29464] R13: 00007ff6eb616128 R14: 00007ff6eb616090 R15: 00007fffdea248d8 [ 723.042514][T29464] [ 723.405905][T29469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.415199][ T5839] Bluetooth: hci5: command tx timeout [ 723.678981][T29483] __nla_validate_parse: 1 callbacks suppressed [ 723.679002][T29483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6408'. [ 723.695571][T29483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6408'. [ 724.379350][T29484] 8021q: VLANs not supported on ip6_vti0 [ 724.498752][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 724.570375][T29513] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 724.871618][T29528] FAULT_INJECTION: forcing a failure. [ 724.871618][T29528] name failslab, interval 1, probability 0, space 0, times 0 [ 724.898037][T29528] CPU: 0 UID: 0 PID: 29528 Comm: syz.2.6416 Not tainted syzkaller #0 PREEMPT(full) [ 724.898069][T29528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 724.898083][T29528] Call Trace: [ 724.898092][T29528] [ 724.898101][T29528] dump_stack_lvl+0xe8/0x150 [ 724.898139][T29528] should_fail_ex+0x412/0x560 [ 724.898177][T29528] should_failslab+0xa8/0x100 [ 724.898200][T29528] ? skb_clone+0x212/0x3a0 [ 724.898221][T29528] kmem_cache_alloc_noprof+0x87/0x650 [ 724.898262][T29528] skb_clone+0x212/0x3a0 [ 724.898288][T29528] __netlink_deliver_tap+0x404/0x850 [ 724.898335][T29528] ? netlink_deliver_tap+0x2e/0x1b0 [ 724.898378][T29528] netlink_deliver_tap+0x19c/0x1b0 [ 724.898412][T29528] netlink_sendskb+0x68/0x140 [ 724.898443][T29528] netlink_rcv_skb+0x2b6/0x4b0 [ 724.898477][T29528] ? __pfx_genl_rcv_msg+0x10/0x10 [ 724.898504][T29528] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 724.898555][T29528] ? down_read+0x270/0x2e0 [ 724.898585][T29528] ? genl_rcv+0xd/0x40 [ 724.898611][T29528] genl_rcv+0x28/0x40 [ 724.898634][T29528] netlink_unicast+0x75c/0x8e0 [ 724.898676][T29528] netlink_sendmsg+0x813/0xb40 [ 724.898720][T29528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 724.898756][T29528] ? aa_sock_msg_perm+0xf1/0x1b0 [ 724.898789][T29528] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 724.898826][T29528] ____sys_sendmsg+0x972/0x9f0 [ 724.898870][T29528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 724.898915][T29528] ? import_iovec+0x73/0xa0 [ 724.898941][T29528] ___sys_sendmsg+0x2a5/0x360 [ 724.898974][T29528] ? __lock_acquire+0x6b5/0x2cf0 [ 724.899007][T29528] ? __pfx____sys_sendmsg+0x10/0x10 [ 724.899087][T29528] ? __fget_files+0x2a/0x420 [ 724.899113][T29528] ? __fget_files+0x3a0/0x420 [ 724.899154][T29528] __x64_sys_sendmsg+0x1bd/0x2a0 [ 724.899191][T29528] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 724.899237][T29528] ? __pfx_ksys_write+0x10/0x10 [ 724.899279][T29528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.899303][T29528] do_syscall_64+0x15f/0xf80 [ 724.899331][T29528] ? trace_irq_disable+0x3b/0x140 [ 724.899354][T29528] ? clear_bhb_loop+0x40/0x90 [ 724.899389][T29528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.899410][T29528] RIP: 0033:0x7f543f99cdd9 [ 724.899432][T29528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.899450][T29528] RSP: 002b:00007f54408ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 724.899474][T29528] RAX: ffffffffffffffda RBX: 00007f543fc15fa0 RCX: 00007f543f99cdd9 [ 724.899490][T29528] RDX: 0000000020000844 RSI: 00002000000015c0 RDI: 0000000000000005 [ 724.899505][T29528] RBP: 00007f54408ab090 R08: 0000000000000000 R09: 0000000000000000 [ 724.899519][T29528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 724.899531][T29528] R13: 00007f543fc16038 R14: 00007f543fc15fa0 R15: 00007ffeb7b65128 [ 724.899566][T29528] [ 725.260045][T29532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6418'. [ 725.283707][T29532] netlink: 'syz.4.6418': attribute type 5 has an invalid length. [ 725.335539][T29532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6418'. [ 725.463900][ T5839] Bluetooth: hci5: command tx timeout [ 725.489210][T29539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6419'. [ 725.540933][T29544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6419'. [ 725.564263][T29532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6418'. [ 725.589347][T29532] netlink: 'syz.4.6418': attribute type 5 has an invalid length. [ 725.617982][T29532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6418'. [ 725.771230][ T126] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.792457][ T126] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.805395][ T126] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.938129][T29556] netlink: 'syz.3.6424': attribute type 24 has an invalid length. [ 725.996455][ T126] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 726.046995][T29562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6425'. [ 726.079636][T29564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6426'. [ 726.191017][ T7009] hsr_slave_0: left promiscuous mode [ 726.211667][ T7009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.254112][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.274404][ T7009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.282062][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 726.362508][ T7009] dummy0: left allmulticast mode [ 726.374196][ T7009] veth1_macvtap: left promiscuous mode [ 726.380652][ T7009] veth0_macvtap: left promiscuous mode [ 726.387303][ T7009] veth1_vlan: left promiscuous mode [ 726.554385][ T7009] team0 (unregistering): Port device batadv1 removed [ 726.789613][ T7009] team0 (unregistering): Port device 26±ÿ removed [ 726.829702][ T7009] team0 (unregistering): Port device team_slave_0 removed [ 726.982046][T29570] FAULT_INJECTION: forcing a failure. [ 726.982046][T29570] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 727.003379][T29570] CPU: 1 UID: 0 PID: 29570 Comm: syz.3.6428 Not tainted syzkaller #0 PREEMPT(full) [ 727.003412][T29570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 727.003425][T29570] Call Trace: [ 727.003434][T29570] [ 727.003444][T29570] dump_stack_lvl+0xe8/0x150 [ 727.003482][T29570] should_fail_ex+0x412/0x560 [ 727.003518][T29570] _copy_to_user+0x31/0xb0 [ 727.003543][T29570] simple_read_from_buffer+0xe1/0x170 [ 727.003587][T29570] proc_fail_nth_read+0x1bb/0x230 [ 727.003621][T29570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 727.003654][T29570] ? rw_verify_area+0x2a6/0x4d0 [ 727.003685][T29570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 727.003716][T29570] vfs_read+0x20c/0xa70 [ 727.003754][T29570] ? __pfx___mutex_lock+0x10/0x10 [ 727.003786][T29570] ? __pfx_vfs_read+0x10/0x10 [ 727.003819][T29570] ? __fget_files+0x2a/0x420 [ 727.003852][T29570] ? __fget_files+0x3a0/0x420 [ 727.003877][T29570] ? __fget_files+0x2a/0x420 [ 727.003915][T29570] ksys_read+0x150/0x270 [ 727.003950][T29570] ? __pfx_ksys_read+0x10/0x10 [ 727.003991][T29570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.004015][T29570] do_syscall_64+0x15f/0xf80 [ 727.004042][T29570] ? trace_irq_disable+0x3b/0x140 [ 727.004066][T29570] ? clear_bhb_loop+0x40/0x90 [ 727.004094][T29570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.004115][T29570] RIP: 0033:0x7ff6eb35d60e [ 727.004136][T29570] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 727.004169][T29570] RSP: 002b:00007ff6ec2f1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 727.004192][T29570] RAX: ffffffffffffffda RBX: 00007ff6ec2f26c0 RCX: 00007ff6eb35d60e [ 727.004208][T29570] RDX: 000000000000000f RSI: 00007ff6ec2f20a0 RDI: 0000000000000006 [ 727.004221][T29570] RBP: 00007ff6ec2f2090 R08: 0000000000000000 R09: 0000000000000000 [ 727.004234][T29570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 727.004246][T29570] R13: 00007ff6eb616038 R14: 00007ff6eb615fa0 R15: 00007fffdea248d8 [ 727.004282][T29570] [ 727.324726][T29279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 727.402446][T29279] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 727.412216][T29279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 727.477803][T29279] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 727.523157][T29279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 727.639483][T29279] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 727.690911][T29279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 727.737588][T29279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 728.227298][ T7009] IPVS: stop unused estimator thread 0... [ 728.337628][T29279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.470066][T29279] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.502986][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.510399][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.562732][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.570028][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.445890][T29671] netlink: 'syz.2.6451': attribute type 1 has an invalid length. [ 729.606141][T29679] __nla_validate_parse: 6 callbacks suppressed [ 729.606160][T29679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6453'. [ 729.635577][T29675] bond1 (unregistering): Released all slaves [ 729.678147][T29671] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 729.689644][T29671] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 729.707820][T29671] bond2: (slave vxcan3): making interface the new active one [ 729.727650][T29671] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 729.762346][T29680] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 729.777223][T29680] bond2: (slave vxcan5): Enslaving as a backup interface with an up link [ 729.826604][T29279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.912405][T29682] netlink: 'syz.3.6454': attribute type 23 has an invalid length. [ 729.959999][T29682] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6454'. [ 730.005284][T29682] netlink: 35 bytes leftover after parsing attributes in process `syz.3.6454'. [ 730.039631][T29694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6457'. [ 730.053842][T29682] netlink: 'syz.3.6454': attribute type 5 has an invalid length. [ 730.076770][T29279] veth0_vlan: entered promiscuous mode [ 730.082561][T29682] netlink: 'syz.3.6454': attribute type 6 has an invalid length. [ 730.092695][T29695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6457'. [ 730.110549][T29279] veth1_vlan: entered promiscuous mode [ 730.122107][T29682] netlink: 35 bytes leftover after parsing attributes in process `syz.3.6454'. [ 730.194022][T29699] netlink: 'syz.0.6458': attribute type 3 has an invalid length. [ 730.207080][T29699] netlink: 766 bytes leftover after parsing attributes in process `syz.0.6458'. [ 730.245474][T29279] veth0_macvtap: entered promiscuous mode [ 730.282867][T29279] veth1_macvtap: entered promiscuous mode [ 730.325942][T29699] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6458'. [ 730.371601][T29699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6458'. [ 730.400461][T29279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.451316][T29279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.496818][ T7016] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.537964][T29711] x_tables: duplicate underflow at hook 1 [ 730.548329][ T7016] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.560280][T29711] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000 [ 730.580024][T29711] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20002 [ 730.593883][ T7016] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.623017][ T7016] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.726352][T29713] openvswitch: netlink: EtherType 50a is less than min 600 [ 730.755648][T29720] netlink: 'syz.3.6464': attribute type 14 has an invalid length. [ 730.782357][T29720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6464'. [ 730.839669][T29720] netlink: 'syz.3.6464': attribute type 14 has an invalid length. [ 731.291651][ T126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.309101][ T126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.458681][ T7014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.471199][ T7014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.730953][T29756] team0: Device gtp0 is up. Set it down before adding it as a team port [ 731.839364][T29764] xt_CT: You must specify a L4 protocol and not use inversions on it [ 731.911730][T29762] syzkaller0: entered promiscuous mode [ 731.938104][T29762] syzkaller0: entered allmulticast mode [ 732.326250][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 732.347089][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 732.360337][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 732.374476][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 732.394026][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 732.609027][T29780] vxcan1 speed is unknown, defaulting to 1000 [ 733.006298][T29807] openvswitch: netlink: Missing valid actions attribute. [ 733.015211][T29807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.298317][T29780] chnl_net:caif_netlink_parms(): no params data found [ 733.395770][T29780] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.403568][T29780] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.410842][T29780] bridge_slave_0: entered allmulticast mode [ 733.419471][T29780] bridge_slave_0: entered promiscuous mode [ 733.428569][T29780] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.436403][T29780] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.444776][T29780] bridge_slave_1: entered allmulticast mode [ 733.452478][T29780] bridge_slave_1: entered promiscuous mode [ 733.528735][T29780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.591250][T29780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.632474][T29780] team0: Port device team_slave_0 added [ 733.640898][T29780] team0: Port device team_slave_1 added [ 733.673519][T29780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.680648][T29780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.710806][T29780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.725643][T29780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.732676][T29780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.760969][T29780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.798602][T29820] bridge0: entered allmulticast mode [ 733.854216][T29780] hsr_slave_0: entered promiscuous mode [ 733.861396][T29780] hsr_slave_1: entered promiscuous mode [ 733.872384][T29780] debugfs: 'hsr0' already exists in 'hsr' [ 733.878522][T29780] Cannot create hsr debugfs directory [ 734.056690][T29780] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.161845][T29780] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.251327][T29780] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.329805][T29780] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.503470][ T5839] Bluetooth: hci0: command tx timeout [ 735.552153][T29789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 735.570786][T29780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 735.612985][T29780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 735.661863][T29780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 735.700466][T29780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 735.726197][T29780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 735.760246][T29780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 735.768760][T29825] __nla_validate_parse: 7 callbacks suppressed [ 735.768784][T29825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6494'. [ 735.794163][T29780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 735.821582][T29780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 735.839657][T29828] netlink: 'syz.2.6495': attribute type 7 has an invalid length. [ 735.890242][T29829] mac80211_hwsim hwsim43 syzkaller0: entered allmulticast mode [ 735.927189][T29829] tipc: Resetting bearer [ 736.140558][T29851] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 736.157592][ T7005] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xca [ 736.204733][T29780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.224829][T29844] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 736.236916][T29780] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.272354][ T7009] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.279700][ T7009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.335222][ T7009] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.342597][ T7009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.584010][ T5839] Bluetooth: hci0: command tx timeout [ 736.725132][T29876] netlink: 'syz.2.6505': attribute type 2 has an invalid length. [ 736.737566][T29876] netlink: 'syz.2.6505': attribute type 2 has an invalid length. [ 736.909021][T29882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6506'. [ 736.928741][T29882] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 736.957557][T29882] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 736.982716][T29882] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 737.009065][T29882] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 737.020027][T29882] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 737.031301][T29882] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 737.046089][T29882] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 737.056806][T29882] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 737.071777][T29882] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 737.085143][T29882] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 737.096073][T29780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.251969][T29780] veth0_vlan: entered promiscuous mode [ 737.274697][T29780] veth1_vlan: entered promiscuous mode [ 737.329609][T29780] veth0_macvtap: entered promiscuous mode [ 737.347159][T29780] veth1_macvtap: entered promiscuous mode [ 737.384666][T29780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.409946][T29780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.438509][ T7009] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.456211][ T7009] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.479220][ T7009] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.490449][ T7009] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.068968][T29916] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.6516'. [ 738.070142][T29911] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 738.133532][T29913] syzkaller1: entered promiscuous mode [ 738.146460][T29913] syzkaller1: entered allmulticast mode [ 738.216430][T29920] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6517'. [ 738.274567][ T7016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.301935][ T7016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.355591][ T7016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.373626][ T7016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.663662][ T5839] Bluetooth: hci0: command tx timeout [ 739.128900][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 739.158495][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 739.169086][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 739.187028][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 739.198029][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 739.295778][T29958] tipc: Resetting bearer [ 739.351550][T29958] tipc: Resetting bearer [ 739.487639][T29958] vxcan1 speed is unknown, defaulting to 1000 [ 739.505134][T29967] netlink: 'syz.3.6530': attribute type 29 has an invalid length. [ 739.537985][T29967] netlink: 'syz.3.6530': attribute type 29 has an invalid length. [ 739.577824][T29967] netlink: 'syz.3.6530': attribute type 32 has an invalid length. [ 739.611564][T29967] netlink: 500 bytes leftover after parsing attributes in process `syz.3.6530'. [ 739.656893][T29970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6530'. [ 739.735858][T29965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6530'. [ 740.181016][ T7009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.214838][ T7009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.331059][T29993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6539'. [ 740.346992][T29993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6539'. [ 740.362026][T27086] IPVS: starting estimator thread 0... [ 740.457413][T29995] IPVS: using max 34 ests per chain, 81600 per kthread [ 740.509451][T29989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.522781][T29989] batadv_slave_0: entered promiscuous mode [ 740.553399][T29996] tipc: Started in network mode [ 740.562065][T30001] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 740.571244][T29996] tipc: Node identity e2509f8573ec, cluster identity 4711 [ 740.581846][T29996] tipc: Enabled bearer , priority 0 [ 740.635111][ T7009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.648351][ T7009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.747379][T29990] +: renamed from syzkaller0 [ 740.754258][ T5839] Bluetooth: hci0: command tx timeout [ 740.764914][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c8a0400: rx timeout, send abort [ 740.775726][T29990] tipc: Disabling bearer [ 740.911884][T30006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6543'. [ 740.936868][ T7009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.948464][ T7009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.077950][T30013] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 741.255343][ T7009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.266232][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806bd68000: rx timeout, send abort [ 741.275208][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c8a0400: abort rx timeout. Force session deactivation [ 741.299060][ T7009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.316389][ T5839] Bluetooth: hci3: command tx timeout [ 741.551905][T30024] batadv1: entered allmulticast mode [ 741.766329][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806bd68000: abort rx timeout. Force session deactivation [ 741.814430][T30039] syzkaller0: entered promiscuous mode [ 741.825225][T30039] syzkaller0: entered allmulticast mode [ 742.075638][T30043] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 742.096502][T29958] chnl_net:caif_netlink_parms(): no params data found [ 742.189563][T30055] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 742.398727][T30065] x_tables: duplicate underflow at hook 3 [ 742.916940][ T7009] batman_adv: batadv0: Removing interface: gretap1 [ 743.028322][ T7009] bridge0 (unregistering): left allmulticast mode [ 743.383668][ T5839] Bluetooth: hci3: command tx timeout [ 744.814900][ T7009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.838340][ T7009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.857389][ T7009] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 744.871791][ T7009] bond0 (unregistering): Released all slaves [ 744.889623][ T7009] bond1 (unregistering): Released all slaves [ 744.929219][ T7009] bond2 (unregistering): Released all slaves [ 744.962053][ T7009] bond3 (unregistering): Released all slaves [ 744.978206][ T7009] bond4 (unregistering): Released all slaves [ 745.262213][ T7009] tipc: Disabling bearer [ 745.310993][ T7009] tipc: Disabling bearer [ 745.357859][ T7009] tipc: Left network mode [ 745.466632][ T5839] Bluetooth: hci3: command tx timeout [ 745.588498][T29958] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.626920][T29958] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.668311][T29958] bridge_slave_0: entered allmulticast mode [ 745.705290][T29958] bridge_slave_0: entered promiscuous mode [ 745.736700][T29958] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.763352][T30107] sctp: [Deprecated]: syz.1.6566 (pid 30107) Use of int in max_burst socket option deprecated. [ 745.763352][T30107] Use struct sctp_assoc_value instead [ 745.798407][T29958] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.814722][T29958] bridge_slave_1: entered allmulticast mode [ 745.829502][T29958] bridge_slave_1: entered promiscuous mode [ 746.055059][T30117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6568'. [ 746.073775][T29958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.128904][T29958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.541172][T29958] team0: Port device team_slave_0 added [ 746.622511][T29958] team0: Port device team_slave_1 added [ 746.736062][T30144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6571'. [ 746.791282][T30133] syzkaller0: entered promiscuous mode [ 746.820043][T30144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6571'. [ 746.851234][T30133] syzkaller0: entered allmulticast mode [ 746.893803][T30129] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6571'. [ 747.037990][T29958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.062542][T29958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.133182][T29958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.204272][T29958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.221939][T29958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.261306][T29958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.379740][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 747.543810][ T5839] Bluetooth: hci3: command tx timeout [ 747.654943][T30179] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.730709][T30179] netdevsim netdevsim1 veth1_macvtap: renamed from netdevsim0 [ 747.779698][T29958] hsr_slave_0: entered promiscuous mode [ 747.788551][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.799240][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 747.845067][T29958] hsr_slave_1: entered promiscuous mode [ 747.867133][T29958] debugfs: 'hsr0' already exists in 'hsr' [ 747.878172][T29958] Cannot create hsr debugfs directory [ 747.976018][T27098] IPVS: starting estimator thread 0... [ 748.076803][T30197] tipc: Enabled bearer , priority 10 [ 748.094259][T30199] IPVS: using max 31 ests per chain, 74400 per kthread [ 748.372863][T30184] syzkaller0: entered promiscuous mode [ 748.382604][T30184] syzkaller0: entered allmulticast mode [ 748.508411][T30222] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 752.526164][T30217] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6591'. [ 752.554516][T30215] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6591'. [ 752.580801][ T5491] 8021q: adding VLAN 0 to HW filter on device eth2 [ 752.648762][T27086] tipc: Node number set to 2445057925 [ 753.383235][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms [ 753.391372][ C1] lec:lec_tx_timeout: lec0 [ 753.396670][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 753.640632][T30273] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 753.675962][T30273] bond1 (unregistering): Released all slaves [ 753.732768][ T7009] hsr_slave_0: left promiscuous mode [ 753.772910][ T7009] hsr_slave_1: left promiscuous mode [ 753.787170][ T7009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.806380][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.846377][ T7009] veth1_macvtap: left promiscuous mode [ 753.861837][ T7009] veth0_macvtap: left promiscuous mode [ 753.885258][ T7009] veth1_vlan: left promiscuous mode [ 753.899608][ T7009] veth0_vlan: left promiscuous mode [ 754.066228][ T7009] pim6reg527 (unregistering): left allmulticast mode [ 754.341508][ T7009] team0 (unregistering): Port device team_slave_1 removed [ 754.360499][ T7009] team0 (unregistering): Port device team_slave_0 removed [ 754.661766][ T5491] 8021q: adding VLAN 0 to HW filter on device eth3 [ 754.925162][T30309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6608'. [ 754.953513][T30310] ipt_REJECT: ECHOREPLY no longer supported. [ 755.206216][T30324] netlink: 'syz.3.6611': attribute type 11 has an invalid length. [ 755.232687][T30324] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6611'. [ 755.352046][T30329] net_ratelimit: 3052 callbacks suppressed [ 755.352069][T30329] openvswitch: netlink: IP tunnel dst address not specified [ 755.436051][T30327] syzkaller0: entered promiscuous mode [ 755.441835][T30327] syzkaller0: entered allmulticast mode [ 755.529026][T30333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6615'. [ 755.733906][ T7009] IPVS: stop unused estimator thread 0... [ 755.927613][T30342] syzkaller0: entered promiscuous mode [ 755.955660][T30342] syzkaller0: entered allmulticast mode [ 756.212005][T30354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6619'. [ 756.439847][T29958] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 756.470214][T29958] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 756.491324][T29958] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 756.519996][T29958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 756.537809][T29958] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 756.608566][T29958] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 756.627032][T29958] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 756.679822][T29958] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 756.896460][T29958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.939111][T29958] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.992146][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.999455][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.076664][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.083942][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.124060][ T5491] 8021q: adding VLAN 0 to HW filter on device veth1_macvtap [ 757.181317][T30393] vcan1: entered promiscuous mode [ 757.186838][T30393] vcan1: entered allmulticast mode [ 757.288042][T30397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 757.541445][T30413] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 757.989720][T29958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.162756][T29958] veth0_vlan: entered promiscuous mode [ 758.230680][T29958] veth1_vlan: entered promiscuous mode [ 758.373880][T29958] veth0_macvtap: entered promiscuous mode [ 758.423250][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 758.431354][ C1] lec:lec_tx_timeout: lec0 [ 758.445038][T29958] veth1_macvtap: entered promiscuous mode [ 758.532675][T29958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.596214][T29958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.606354][T30445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6636'. [ 758.658944][T30445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6636'. [ 758.673305][T30449] netlink: 'syz.4.6636': attribute type 21 has an invalid length. [ 758.708278][T30445] netlink: 'syz.4.6636': attribute type 14 has an invalid length. [ 758.752102][ T126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.788479][T30449] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6636'. [ 758.805607][ T126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.832491][T30445] netlink: 'syz.4.6636': attribute type 13 has an invalid length. [ 758.859145][T30452] netlink: 15 bytes leftover after parsing attributes in process `syz.2.6638'. [ 758.893262][ T126] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.922425][ T126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.952721][T30449] netlink: 'syz.4.6636': attribute type 5 has an invalid length. [ 759.006228][T30449] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6636'. [ 759.340181][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.380537][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.493915][ T7008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.533975][ T7008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.460228][T30501] syz_tun: entered allmulticast mode [ 760.477562][T30501] syz_tun: left allmulticast mode [ 760.759817][T30506] ip6gre1: entered allmulticast mode [ 761.069907][T30515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6652'. [ 761.147189][T30515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6652'. [ 761.202863][T30519] blkio.reset_stats is deprecated [ 761.245402][T30515] geneve2: entered promiscuous mode [ 761.274797][T30515] geneve2: entered allmulticast mode [ 761.366513][T30525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 761.429873][T30525] netlink: 'syz.4.6655': attribute type 39 has an invalid length. [ 761.576326][T30534] tipc: Enabling of bearer rejected, already enabled [ 761.682776][T30543] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 761.951210][T30558] netlink: 'syz.1.6665': attribute type 13 has an invalid length. [ 762.032807][T30558] veth0_macvtap: left promiscuous mode [ 762.085865][T30558] macvtap0: entered allmulticast mode [ 762.138705][T30558] macvtap0: refused to change device tx_queue_len [ 762.151330][T30567] Bluetooth: MGMT ver 1.23 [ 762.691880][T30593] syzkaller1: entered promiscuous mode [ 762.707812][T30593] syzkaller1: entered allmulticast mode [ 762.731271][T30593] Cannot find set identified by id 0 to match [ 762.758639][T30593] netlink: 'syz.0.6673': attribute type 10 has an invalid length. [ 762.842625][T30598] netlink: 788 bytes leftover after parsing attributes in process `syz.2.6675'. [ 763.032915][T30610] bridge1: entered promiscuous mode [ 763.046077][T30610] bridge1: entered allmulticast mode [ 763.089076][T30616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6678'. [ 763.114925][T30612] bridge2: entered promiscuous mode [ 763.135280][T30612] bridge2: entered allmulticast mode [ 763.226360][T30622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6679'. [ 763.441906][T30628] netlink: 'syz.1.6680': attribute type 5 has an invalid length. [ 763.550837][T30628] geneve2: entered promiscuous mode [ 763.632373][T30628] geneve2: entered allmulticast mode [ 763.695675][ T7011] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 763.748154][ T7011] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 763.775530][T30644] __nla_validate_parse: 4 callbacks suppressed [ 763.775552][T30644] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6683'. [ 763.898845][ T7011] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 764.355491][T30666] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 764.391225][T30669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6692'. [ 764.440658][T30669] netlink: 'syz.3.6692': attribute type 33 has an invalid length. [ 764.536401][T30681] netlink: 'syz.4.6695': attribute type 11 has an invalid length. [ 764.563426][T30681] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6695'. [ 764.582950][T30669] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 764.609661][T30669] bond1 (unregistering): Released all slaves [ 764.778411][T30693] netlink: 'syz.1.6698': attribute type 1 has an invalid length. [ 764.791536][T30693] netlink: 'syz.1.6698': attribute type 4 has an invalid length. [ 764.800563][T30693] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.6698'. [ 765.000401][T30701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6702'. [ 765.082923][T30704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6703'. [ 765.088490][T30705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6701'. [ 765.311790][T30715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6701'. [ 768.927322][T30735] Bluetooth: MGMT ver 1.23 [ 769.098782][T30747] ip6erspan0: entered allmulticast mode [ 769.248089][T30739] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 769.524712][T30771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6718'. [ 769.787945][T30785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6720'. [ 769.797923][T30780] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6721'. [ 770.297687][T30800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6727'. [ 770.324587][T30801] sctp: [Deprecated]: syz.0.6727 (pid 30801) Use of int in max_burst socket option deprecated. [ 770.324587][T30801] Use struct sctp_assoc_value instead [ 770.342764][T30800] sctp: [Deprecated]: syz.0.6727 (pid 30800) Use of int in max_burst socket option deprecated. [ 770.342764][T30800] Use struct sctp_assoc_value instead [ 770.595711][T30812] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6730'. [ 770.721414][T30820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6733'. [ 770.845999][T30825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6735'. [ 770.917304][T30829] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 770.945559][T30826] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6733'. [ 770.973885][T30821] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6733'. [ 770.986623][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 770.997094][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 771.044061][T30821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6733'. [ 771.195644][T30842] tipc: Enabling of bearer rejected, failed to enable media [ 771.847659][T30872] bond0: entered promiscuous mode [ 771.865548][T30872] bond_slave_0: entered promiscuous mode [ 771.873773][T30872] bond_slave_1: entered promiscuous mode [ 771.894525][T30872] batadv0: entered promiscuous mode [ 771.906864][T30872] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 771.939518][T30872] bond0: left promiscuous mode [ 771.952880][T30872] bond_slave_0: left promiscuous mode [ 771.970026][T30872] bond_slave_1: left promiscuous mode [ 771.989982][T30872] batadv0: left promiscuous mode [ 772.219095][T30893] netlink: 'syz.0.6749': attribute type 1 has an invalid length. [ 772.242079][T30893] wg1: Master is either lo or non-ether device [ 772.536883][T30908] tc_dump_action: action bad kind [ 772.665983][T30914] openvswitch: netlink: IPv4 tun info is not correct [ 772.844620][T30922] bond1 (unregistering): Released all slaves [ 773.145896][T30929] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 773.153951][T30929] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 773.161934][T30929] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 773.169996][T30929] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 773.178024][T30929] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 773.186258][T30929] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 773.194259][T30929] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 773.202468][T30929] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 773.210622][T30929] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 773.596090][T30942] syzkaller1: entered promiscuous mode [ 773.603718][T30942] syzkaller1: entered allmulticast mode [ 773.628475][T30944] syzkaller0: entered promiscuous mode [ 773.636074][T30944] syzkaller0: entered allmulticast mode [ 773.778997][T30947] netlink: 'syz.2.6768': attribute type 1 has an invalid length. [ 773.930100][T30947] syzkaller0: entered promiscuous mode [ 773.936251][T30947] syzkaller0: entered allmulticast mode [ 778.241328][T31002] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 778.258619][T31003] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 778.387556][T31016] __nla_validate_parse: 14 callbacks suppressed [ 778.387577][T31016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6787'. [ 778.419712][T31016] IPVS: set_ctl: invalid protocol: 103 10.1.1.0:20005 [ 778.448218][T31019] xt_socket: unknown flags 0xe4 [ 778.458973][T31022] xt_hashlimit: invalid rate [ 778.528204][T31024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6786'. [ 778.619200][T31028] pimreg: entered allmulticast mode [ 779.206229][T31059] netlink: 'syz.0.6797': attribute type 3 has an invalid length. [ 779.257655][T31059] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6797'. [ 779.282864][T31059] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6797'. [ 779.420436][T31074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6801'. [ 779.560774][T31087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6801'. [ 779.620166][T31074] 8021q: adding VLAN 0 to HW filter on device bond2 [ 779.669935][T31087] macvtap0: entered promiscuous mode [ 779.869461][T31094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6805'. [ 780.103514][T31102] xt_TCPMSS: Only works on TCP SYN packets [ 780.192331][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 780.348248][T31110] net_ratelimit: 45 callbacks suppressed [ 780.348270][T31110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.452880][T31110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6810'. [ 780.462995][T31110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6810'. [ 780.900393][T31135] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6815'. [ 781.246627][T31145] netlink: 'syz.0.6819': attribute type 1 has an invalid length. [ 781.295582][T31145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 781.779572][T31173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 781.841079][T31173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 781.860931][T31173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 781.887590][T31173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 781.904216][T31173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 781.930183][T31173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 781.950963][T31179] syzkaller0: entered promiscuous mode [ 781.974134][T31179] syzkaller0: entered allmulticast mode [ 781.989902][T31173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.090200][T31173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.119463][T31173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.239702][T31186] mac80211_hwsim hwsim72 wlan0: entered promiscuous mode [ 782.263561][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 782.328058][T31193] dvmrp0: entered allmulticast mode [ 782.566888][T31206] netlink: 'syz.3.6839': attribute type 1 has an invalid length. [ 782.587503][T31204] xt_hashlimit: size too large, truncated to 1048576 [ 782.680682][T31208] bond1: (slave gretap1): making interface the new active one [ 782.691566][T31208] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 783.089727][ T5839] block nbd1: Receive control failed (result -32) [ 783.104402][T31232] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.112070][T31232] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.486779][T31250] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 783.534911][T31253] __nla_validate_parse: 6 callbacks suppressed [ 783.534932][T31253] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6854'. [ 783.605844][T31254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6855'. [ 783.828372][T31267] netlink: 'syz.0.6859': attribute type 11 has an invalid length. [ 783.843015][T31267] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6859'. [ 784.099553][T31277] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6863'. [ 784.331771][T31289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6868'. [ 784.392968][T31294] sctp: [Deprecated]: syz.1.6869 (pid 31294) Use of struct sctp_assoc_value in delayed_ack socket option. [ 784.392968][T31294] Use struct sctp_sack_info instead [ 784.411014][T31293] sctp: [Deprecated]: syz.1.6869 (pid 31293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 784.411014][T31293] Use struct sctp_sack_info instead [ 784.880778][T31318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6878'. [ 784.910997][T31320] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6876'. [ 785.029632][T31329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6881'. [ 785.228069][T31337] syzkaller1: entered promiscuous mode [ 785.249451][T31337] syzkaller1: entered allmulticast mode [ 785.269653][T31342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6885'. [ 785.287369][T31343] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 4, id = 0 [ 785.304039][T31331] tipc: Started in network mode [ 785.311286][T31331] tipc: Node identity e0000001, cluster identity 4711 [ 785.320439][T31331] tipc: Enabling of bearer rejected, failed to enable media [ 785.747937][T31369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6893'. [ 785.803775][T31367] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.838988][T31375] netlink: 'syz.2.6893': attribute type 1 has an invalid length. [ 785.848743][T31374] x_tables: duplicate underflow at hook 1 [ 785.858715][T31375] netlink: 'syz.2.6893': attribute type 1 has an invalid length. [ 785.879555][T31367] bridge_slave_0 (unregistering): left allmulticast mode [ 785.886831][T31375] netlink: 'syz.2.6893': attribute type 1 has an invalid length. [ 785.893338][T31367] bridge_slave_0 (unregistering): left promiscuous mode [ 785.896803][T31375] netlink: 'syz.2.6893': attribute type 1 has an invalid length. [ 785.910569][T31367] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.085877][T31383] netlink: 'syz.2.6897': attribute type 10 has an invalid length. [ 786.357829][T31396] : renamed from veth1_vlan (while UP) [ 786.531161][T31407] vlan2: entered allmulticast mode [ 786.551616][T31407] mac80211_hwsim hwsim72 wlan0: entered allmulticast mode [ 787.114290][T31422] syzkaller0: entered promiscuous mode [ 787.187654][T31416] macsec1: entered promiscuous mode [ 787.262710][T31427] tipc: Started in network mode [ 787.281518][T31427] tipc: Node identity , cluster identity 4711 [ 787.301728][T31427] tipc: Failed to obtain node identity [ 787.312725][T31427] tipc: Enabling of bearer rejected, failed to enable media [ 787.496818][T31437] net_ratelimit: 26 callbacks suppressed [ 787.496840][T31437] openvswitch: netlink: Message has 4 unknown bytes. [ 787.812128][T31455] xt_hashlimit: size too large, truncated to 1048576 [ 791.834817][T31459] __nla_validate_parse: 15 callbacks suppressed [ 791.834845][T31459] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6918'. [ 791.952326][T31484] nbd: socks must be embedded in a SOCK_ITEM attr [ 792.027990][T31486] netlink: 'syz.1.6921': attribute type 1 has an invalid length. [ 792.065443][T31489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6922'. [ 792.155406][T31486] 8021q: adding VLAN 0 to HW filter on device bond3 [ 792.195697][T31502] netlink: zone id is out of range [ 792.202580][T31502] netlink: zone id is out of range [ 792.209470][T31502] netlink: zone id is out of range [ 792.216499][T31502] netlink: zone id is out of range [ 792.221878][T31496] bond3: (slave veth0_to_bond): making interface the new active one [ 792.226333][T31502] netlink: del zone limit has 4 unknown bytes [ 792.253979][T31496] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 792.302106][T31509] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6926'. [ 792.394503][T31508] syzkaller0: entered promiscuous mode [ 792.400328][T31508] syzkaller0: entered allmulticast mode [ 792.410615][T31509] 0·: renamed from hsr_slave_1 (while UP) [ 792.422306][T31509] 0·: entered allmulticast mode [ 792.428529][T31509] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 792.471879][T31501] 8021q: adding VLAN 0 to HW filter on device bond4 [ 792.483253][T31501] bond3: (slave bond4): Enslaving as an active interface with a down link [ 792.734348][T31512] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 792.980848][T31538] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6933'. [ 793.057910][T31538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6933'. [ 793.091447][T31549] netlink: 'syz.4.6934': attribute type 1 has an invalid length. [ 793.126549][T31549] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6934'. [ 793.182506][T31549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6934'. [ 793.533438][T31568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6937'. [ 793.627776][T31576] delete_channel: no stack [ 793.635157][T31572] vcan0: entered allmulticast mode [ 793.880573][T31590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6944'. [ 794.077545][T31595] bond3 (unregistering): Released all slaves [ 794.090256][T31613] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6947'. [ 794.345619][T31625] netlink: 'syz.3.6952': attribute type 1 has an invalid length. [ 794.670628][T31643] sctp: [Deprecated]: syz.3.6959 (pid 31643) Use of int in maxseg socket option. [ 794.670628][T31643] Use struct sctp_assoc_value instead [ 795.088678][T31670] –: renamed from vxcan1 (while UP) [ 795.148131][T31671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 795.573529][T31692] tipc: Started in network mode [ 795.594983][T31692] tipc: Node identity d6669c9807d3, cluster identity 4711 [ 795.618517][T31692] tipc: Enabled bearer , priority 0 [ 795.619118][T31696] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 795.756240][T31694] syzkaller0: entered promiscuous mode [ 795.771652][T31694] syzkaller0: entered allmulticast mode [ 795.787624][T31694] tipc: Resetting bearer [ 795.810541][T31691] tipc: Resetting bearer [ 798.983562][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 799.863977][T31691] tipc: Disabling bearer [ 799.937631][T27086] tipc: Node number set to 3518340248 [ 800.044505][T31719] netlink: 'syz.3.6985': attribute type 1 has an invalid length. [ 800.176655][T31733] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20000 [ 800.191736][T31729] bond0: entered promiscuous mode [ 800.203984][T31729] bond_slave_0: entered promiscuous mode [ 800.237310][T31729] bond_slave_1: entered promiscuous mode [ 800.292527][T31729] batadv0: entered promiscuous mode [ 800.318330][T31729] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 800.337969][T31729] bond0: left promiscuous mode [ 800.347422][T31729] bond_slave_0: left promiscuous mode [ 800.355051][T31729] bond_slave_1: left promiscuous mode [ 800.368737][T31729] batadv0: left promiscuous mode [ 800.385668][T31739] netlink: 'syz.2.6990': attribute type 1 has an invalid length. [ 800.441556][T31744] netlink: 'syz.0.6991': attribute type 1 has an invalid length. [ 800.492497][T31748] netlink: 'syz.1.6992': attribute type 1 has an invalid length. [ 800.545832][T31739] bond3: entered promiscuous mode [ 800.551517][T31739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 800.579296][T31745] bond3: (slave bridge2): making interface the new active one [ 800.587242][T31745] bridge2: entered promiscuous mode [ 800.596658][T31745] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 800.819913][T31764] netlink: 'syz.2.6995': attribute type 21 has an invalid length. [ 800.843733][T31764] netlink: 'syz.2.6995': attribute type 1 has an invalid length. [ 800.987607][T31770] netlink: 'syz.4.6996': attribute type 10 has an invalid length. [ 801.016678][T31772] __nla_validate_parse: 12 callbacks suppressed [ 801.016700][T31772] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6999'. [ 801.060508][T31774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7000'. [ 801.116107][T31770] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 801.458283][T31800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7005'. [ 801.573579][T31806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7007'. [ 801.785864][T31814] netlink: 'syz.0.7009': attribute type 24 has an invalid length. [ 801.872416][T31820] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 801.966342][T31828] tipc: Resetting bearer [ 802.029610][T31829] netlink: 'syz.0.7015': attribute type 3 has an invalid length. [ 802.107753][T31829] netlink: 'syz.0.7015': attribute type 3 has an invalid length. [ 802.498790][T31857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7025'. [ 803.042882][T31889] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 803.059822][T31889] tipc: Started in network mode [ 803.083764][T31889] tipc: Node identity a6f48c955119, cluster identity 4711 [ 803.105730][T31889] tipc: Enabled bearer , priority 0 [ 803.124762][T31889] syzkaller0: entered promiscuous mode [ 803.136881][T31889] syzkaller0: entered allmulticast mode [ 803.200613][T31887] tipc: Resetting bearer [ 803.228355][T31885] tipc: Resetting bearer [ 803.279611][T31885] tipc: Disabling bearer [ 803.338816][T31906] syzkaller1: entered promiscuous mode [ 803.346399][T31906] syzkaller1: entered allmulticast mode [ 803.464860][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.637945][T27099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.777510][T31927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7044'. [ 803.910615][T31930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7045'. [ 803.950411][T31930] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 803.965506][T31930] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7045'. [ 804.226805][T31949] xt_hashlimit: size too large, truncated to 1048576 [ 804.232562][T31947] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7049'. [ 804.279818][T31945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.309496][T31945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.367665][T27083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.388409][T31945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.459107][T31945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.681158][T27099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.745542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.756862][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.909309][T31981] tipc: New replicast peer: 172.20.20.187 [ 804.929392][T31981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.940200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.963777][T31981] tipc: Enabled bearer , priority 10 [ 805.064126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.163676][T31985] syzkaller0: entered promiscuous mode [ 805.283362][T32002] validate_nla: 36 callbacks suppressed [ 805.283386][T32002] netlink: 'syz.4.7063': attribute type 83 has an invalid length. [ 805.318313][T31997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7061'. [ 805.485164][T32008] delete_channel: no stack [ 805.546192][T32015] delete_channel: no stack [ 805.564856][T32015] netlink: 'syz.4.7068': attribute type 21 has an invalid length. [ 807.396864][ T796] net_ratelimit: 16 callbacks suppressed [ 807.396883][ T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.784719][T27099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.838563][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.238005][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.246874][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 809.359187][T27096] tipc: Node number set to 3758096385 [ 809.483760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.493618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.550386][T32054] dvmrp0: entered allmulticast mode [ 809.753173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.762139][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.855329][T32071] __nla_validate_parse: 2 callbacks suppressed [ 809.855353][T32071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7083'. [ 809.880825][T27096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.920872][T32076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7083'. [ 809.927765][T32071] openvswitch: netlink: Unknown nsh attribute 0 [ 809.968803][T32076] openvswitch: netlink: Unknown nsh attribute 0 [ 810.185821][T32087] netlink: 'syz.4.7088': attribute type 1 has an invalid length. [ 810.220255][T32087] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7088'. [ 810.243486][T32080] syzkaller0: entered promiscuous mode [ 810.254686][T32087] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7088'. [ 810.268990][T32080] syzkaller0: entered allmulticast mode [ 810.288333][T32087] netlink: 'syz.4.7088': attribute type 1 has an invalid length. [ 810.317583][T32087] netlink: 618 bytes leftover after parsing attributes in process `syz.4.7088'. [ 812.994859][ T5916] net_ratelimit: 9 callbacks suppressed [ 812.994882][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.069739][T27086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.383233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.392862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.464998][T27086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.742025][T32097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7090'. [ 814.029488][ T5916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.049820][T32124] netlink: 'syz.3.7097': attribute type 4 has an invalid length. [ 814.269408][T32140] netlink: 'syz.2.7102': attribute type 29 has an invalid length. [ 814.282820][T32140] netlink: 'syz.2.7102': attribute type 29 has an invalid length. [ 814.423106][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 814.429304][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.431270][ C1] lec:lec_tx_timeout: lec0 [ 814.445311][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.926396][T32180] openvswitch: netlink: IPv4 tunnel dst address is zero [ 815.086194][T27096] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.164386][T32192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7117'. [ 815.321245][T32196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7118'. [ 815.385773][T32201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7120'. [ 815.408188][T32199] netlink: 'syz.4.7119': attribute type 4 has an invalid length. [ 815.429500][T32201] netlink: 'syz.0.7120': attribute type 1 has an invalid length. [ 815.457495][T32201] netlink: 'syz.0.7120': attribute type 1 has an invalid length. [ 815.659719][T32210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7123'. [ 815.870359][T32220] xt_hl: Unknown Hop Limit match mode: 206 [ 815.902115][T32220] netlink: 'syz.3.7129': attribute type 1 has an invalid length. [ 815.924454][T32220] netlink: 216 bytes leftover after parsing attributes in process `syz.3.7129'. [ 816.014098][T32225] sctp: [Deprecated]: syz.0.7128 (pid 32225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 816.014098][T32225] Use struct sctp_sack_info instead [ 816.040972][T32222] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7127'. [ 816.080042][T32228] : entered promiscuous mode [ 816.229649][T32239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7133'. [ 816.310384][T32242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7133'. [ 816.419706][T32251] IPVS: set_ctl: invalid protocol: 103 100.1.1.0:20002 [ 816.645661][T32262] xt_hashlimit: overflow, rate too high: 0 [ 816.695608][T32267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7143'. [ 816.745715][ T6494] lec:lec_start_xmit: lec0:No lecd attached [ 816.891374][T32274] netlink: 'syz.1.7145': attribute type 13 has an invalid length. [ 816.917165][T32274] macvtap0: left promiscuous mode [ 816.922812][T32274] macvtap0: refused to change device tx_queue_len [ 816.961556][T32277] Cannot find del_set index 4 as target [ 817.141834][T32287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7148'. [ 817.280633][T32289] nbd: must specify a size in bytes for the device [ 817.718553][T32319] syzkaller0: entered promiscuous mode [ 817.727448][T32319] syzkaller0: entered allmulticast mode [ 818.478218][T32347] vlan1: entered allmulticast mode [ 818.503778][T32347] veth0_vlan: entered allmulticast mode [ 819.009425][T32383] nbd: must specify an index to disconnect [ 819.244787][T32393] ip6gre1: entered allmulticast mode [ 819.264261][T32112] udevd[32112]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 819.397936][T32391] macvtap1: entered promiscuous mode [ 819.416960][T32391] vlan0: entered promiscuous mode [ 819.426870][T32391] macvtap1: entered allmulticast mode [ 819.434609][T32391] vlan0: entered allmulticast mode [ 819.440022][T32391] veth0_vlan: entered allmulticast mode [ 819.958362][T32425] netlink: 'syz.3.7191': attribute type 8 has an invalid length. [ 820.095537][ T7016] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 820.115140][ T7016] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 820.123780][T27083] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 820.311229][T32445] __nla_validate_parse: 12 callbacks suppressed [ 820.311249][T32445] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7197'. [ 820.577360][T32461] bridge_slave_0: left allmulticast mode [ 820.590407][T32461] bridge_slave_0: left promiscuous mode [ 820.598490][T32461] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.617920][T32461] bridge_slave_1: left allmulticast mode [ 820.624252][T32461] bridge_slave_1: left promiscuous mode [ 820.630348][T32461] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.648354][T32461] bond0: (slave bond_slave_0): Releasing backup interface [ 820.676855][T32461] bond0: (slave bond_slave_1): Releasing backup interface [ 820.706195][T32461] team0: Port device team_slave_0 removed [ 820.739087][T32461] team0: Port device team_slave_1 removed [ 820.764361][T32461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.772868][T32461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.785013][T32472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7205'. [ 820.785925][T32461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.802518][T32461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.816202][T32461] net_ratelimit: 3 callbacks suppressed [ 820.816253][T32461] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 820.888364][T32460] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 820.953440][T32471] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7204'. [ 820.973376][T32471] netlink: 11 bytes leftover after parsing attributes in process `syz.1.7204'. [ 820.983421][T27086] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 820.997503][T27086] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 821.074182][T32472] delete_channel: no stack [ 821.120719][T32479] netlink: 196 bytes leftover after parsing attributes in process `syz.0.7206'. [ 821.149171][T32484] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7208'. [ 821.170500][T32479] netlink: 196 bytes leftover after parsing attributes in process `syz.0.7206'. [ 821.184871][T32479] netlink: 19 bytes leftover after parsing attributes in process `syz.0.7206'. [ 821.357347][T32495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7211'. [ 821.451091][T32500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7213'. [ 822.050279][T32534] netlink: 'syz.4.7222': attribute type 1 has an invalid length. [ 822.423123][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5680 ms [ 822.431272][ C1] lec:lec_tx_timeout: lec0 [ 822.668779][T32534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 822.705660][T32534] netlink: 'syz.4.7222': attribute type 1 has an invalid length. [ 822.792048][T32535] bond1: (slave geneve2): making interface the new active one [ 822.804001][T32535] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 823.309129][T32585] xt_bpf: check failed: parse error [ 823.783311][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 826.218793][T32579] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 826.499713][T32616] netlink: 'syz.4.7245': attribute type 1 has an invalid length. [ 826.540353][T32616] netlink: 'syz.4.7245': attribute type 1 has an invalid length. [ 826.702496][T32621] 8021q: VLANs not supported on wg2 [ 826.709183][T32622] __nla_validate_parse: 2 callbacks suppressed [ 826.709206][T32622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7248'. [ 826.762064][T32621] netlink: 'syz.3.7247': attribute type 3 has an invalid length. [ 826.851751][T32630] ip6_vti0: entered promiscuous mode [ 826.874012][T32630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7249'. [ 826.956587][T32643] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7253'. [ 827.294989][T32663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 827.356851][T32663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 827.449036][T32673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7263'. [ 827.786947][T32689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7270'. [ 827.799630][T32689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7270'. [ 827.853851][T32692] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7271'. [ 827.889194][T32692] openvswitch: netlink: IP tunnel dst address not specified [ 827.927311][T32692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7271'. [ 828.162642][T32710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7275'. [ 828.556909][T32729] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7278'. [ 830.416494][ T360] netlink: 'syz.0.7309': attribute type 2 has an invalid length. [ 830.711990][ T377] xt_hashlimit: size too large, truncated to 1048576 [ 830.723740][ T371] tipc: Enabling of bearer rejected, already enabled [ 830.983357][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 831.020072][ T390] veth0_macvtap: left promiscuous mode [ 831.294871][ T402] netlink: 'syz.0.7322': attribute type 11 has an invalid length. [ 831.401499][ T405] delete_channel: no stack [ 831.654194][ T432] netlink: 'syz.3.7331': attribute type 10 has an invalid length. [ 831.755994][ T432] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 831.790898][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 831.860382][ T442] __nla_validate_parse: 16 callbacks suppressed [ 831.860405][ T442] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7334'. [ 831.919986][ T446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7337'. [ 832.015287][ T453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7336'. [ 832.052131][ T446] 8021q: adding VLAN 0 to HW filter on device bond2 [ 832.081034][ T448] macvlan2: entered promiscuous mode [ 832.099201][ T448] macvlan2: entered allmulticast mode [ 832.168067][ T451] macvtap0: entered promiscuous mode [ 832.176995][ T451] macvtap0: entered allmulticast mode [ 832.191815][ T451] : entered allmulticast mode [ 832.272579][ T452] macvtap1: entered promiscuous mode [ 832.298172][ T452] macvtap1: entered allmulticast mode [ 832.391715][ T459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7334'. [ 832.489542][ T482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7341'. [ 832.532443][ T482] netlink: 'syz.0.7341': attribute type 7 has an invalid length. [ 832.553857][ T482] netlink: 'syz.0.7341': attribute type 8 has an invalid length. [ 832.568206][ T482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7341'. [ 832.705841][ T491] ieee802154 phy0 wpan0: encryption failed: -22 [ 832.858322][ T498] netlink: 252 bytes leftover after parsing attributes in process `syz.3.7347'. [ 833.216585][ T534] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7354'. [ 833.392433][ T544] syz_tun: entered allmulticast mode [ 833.436976][ T500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 833.800310][ T564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7361'. [ 833.894216][ T567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7362'. [ 834.229798][ T587] netlink: 'syz.2.7369': attribute type 12 has an invalid length. [ 834.504212][ T601] team0: Cannot enslave team device to itself [ 834.572738][ T601] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 834.620340][ T605] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 834.633484][ T608] veth0: entered promiscuous mode [ 834.646147][ T607] veth0: left promiscuous mode [ 834.864383][ T614] netlink: 'syz.1.7377': attribute type 1 has an invalid length. [ 836.047365][ T690] netlink: 'syz.4.7399': attribute type 1 has an invalid length. [ 836.176368][ T690] macvlan3: entered promiscuous mode [ 836.187632][ T690] macvlan3: entered allmulticast mode [ 836.202680][ T690] bond3: entered promiscuous mode [ 836.210743][ T690] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 836.240915][ T690] bond3: left promiscuous mode [ 837.200668][ T758] __nla_validate_parse: 10 callbacks suppressed [ 837.200692][ T758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7417'. [ 837.239271][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 837.268075][ T758] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7417'. [ 837.500354][ T770] netlink: 284 bytes leftover after parsing attributes in process `syz.2.7423'. [ 837.555313][ T775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7425'. [ 837.917774][ T803] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7434'. [ 837.930975][ T807] xt_hashlimit: overflow, rate too high: 0 [ 837.961868][ T807] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7433'. [ 838.788048][ T853] netlink: 'syz.3.7447': attribute type 21 has an invalid length. [ 838.806528][ T852] xt_hashlimit: size too large, truncated to 1048576 [ 838.814598][ T853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7447'. [ 838.862447][ T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.873564][ T853] netlink: 'syz.3.7447': attribute type 21 has an invalid length. [ 838.898700][ T48] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.908840][ T853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7447'. [ 838.930291][ T7008] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 838.966259][ T7008] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.282355][ T867] netlink: 'syz.3.7449': attribute type 1 has an invalid length. [ 839.330468][ T867] 8021q: adding VLAN 0 to HW filter on device bond2 [ 839.386717][ T867] bond2: (slave veth3): Enslaving as an active interface with a down link [ 839.411789][ T867] bond2: (slave dummy0): making interface the new active one [ 839.421475][ T867] dummy0: entered promiscuous mode [ 839.428042][ T867] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 839.442878][ T867] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7449'. [ 839.447374][ T843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 839.499944][ T867] bond2: (slave dummy0): Releasing active interface [ 839.520154][ T867] dummy0 (unregistering): left promiscuous mode [ 839.789196][ T877] netlink: 'syz.0.7451': attribute type 1 has an invalid length. [ 839.851386][ T885] xt_hashlimit: size too large, truncated to 1048576 [ 839.881231][ T877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 840.091938][ T877] bond2: (slave veth5): Enslaving as an active interface with a down link [ 840.116072][ T877] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7451'. [ 840.183694][ T887] bond2: (slave dummy0): making interface the new active one [ 840.205590][ T887] dummy0: entered promiscuous mode [ 840.214201][ T887] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 840.249230][ T877] bond2: (slave dummy0): Releasing active interface [ 840.259506][ T877] dummy0 (unregistering): left promiscuous mode [ 840.512890][ T902] vxcan1 speed is unknown, defaulting to 1000 [ 840.559272][ T907] xt_TPROXY: Can be used only with -p tcp or -p udp [ 840.861735][ T922] netlink: 'syz.3.7460': attribute type 44 has an invalid length. [ 841.150812][ T925] syzkaller0: entered promiscuous mode [ 841.170920][ T925] syzkaller0: entered allmulticast mode [ 841.306390][ T940] netlink: 'syz.3.7466': attribute type 1 has an invalid length. [ 841.474130][ T940] 8021q: adding VLAN 0 to HW filter on device bond3 [ 841.588417][ T945] bond3: (slave veth0_to_bond): making interface the new active one [ 841.607606][ T945] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 841.622166][ T956] ieee802154 phy0 wpan0: encryption failed: -90 [ 841.667084][ T952] 8021q: adding VLAN 0 to HW filter on device bond4 [ 841.677131][ T952] bond3: (slave bond4): Enslaving as an active interface with a down link [ 842.034809][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 842.231181][ T972] __nla_validate_parse: 7 callbacks suppressed [ 842.231202][ T972] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7473'. [ 842.651374][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075baf400: rx timeout, send abort [ 842.839232][ T987] netlink: 'syz.0.7476': attribute type 15 has an invalid length. [ 842.936450][ T993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7480'. [ 843.192456][ T1005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7482'. [ 843.226056][ T1005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7482'. [ 843.301712][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075bac800: rx timeout, send abort [ 843.310064][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075baf400: abort rx timeout. Force session deactivation [ 843.439805][ T1011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 843.616681][ T1026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7489'. [ 843.628704][ T1023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7487'. [ 843.688169][ T1026] bond7: option xmit_hash_policy: invalid value (64) [ 843.701746][ T1026] bond7 (unregistering): Released all slaves [ 843.810083][ C1] vcan0: j1939_tp_rxtimer: 0xffff888075bac800: abort rx timeout. Force session deactivation [ 843.926087][ T1023] team0 (unregistering): Port device team_slave_0 removed [ 843.968659][ T1023] team0 (unregistering): Port device team_slave_1 removed [ 844.015984][ T1050] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7492'. [ 844.080261][ T1052] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 844.113844][ T1052] syzkaller1: Refused to change device type [ 844.157696][ T1055] xt_hashlimit: size too large, truncated to 1048576 [ 844.205536][ T1057] netlink: 'syz.1.7493': attribute type 1 has an invalid length. [ 844.260787][ T1065] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7493'. [ 844.607033][ T1073] syzkaller1: entered promiscuous mode [ 844.619944][ T1073] syzkaller1: entered allmulticast mode [ 844.740814][ T1084] netlink: 'syz.4.7500': attribute type 1 has an invalid length. [ 844.797352][ T1084] 8021q: adding VLAN 0 to HW filter on device bond4 [ 844.818173][ T1091] sctp: [Deprecated]: syz.1.7503 (pid 1091) Use of int in maxseg socket option. [ 844.818173][ T1091] Use struct sctp_assoc_value instead [ 844.861803][ T1089] bond4: (slave gretap1): making interface the new active one [ 844.881470][ T1089] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 845.066010][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 845.466007][ T1127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7513'. [ 845.812772][ T1134] syzkaller1: entered promiscuous mode [ 845.832369][ T1134] syzkaller1: entered allmulticast mode [ 845.975401][ T1147] IPVS: set_ctl: invalid protocol: 11609 255.255.255.255:20003 [ 845.989950][ T1148] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20000 [ 845.992523][ T1147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7519'. [ 846.667595][ T1191] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 846.928209][ T1210] netlink: 'syz.4.7540': attribute type 4 has an invalid length. [ 846.944083][ T1210] netlink: 'syz.4.7540': attribute type 2 has an invalid length. [ 846.966705][ T1215] netlink: 'syz.4.7540': attribute type 4 has an invalid length. [ 846.975799][ T1210] netlink: 'syz.4.7540': attribute type 2 has an invalid length. [ 847.334902][ T1241] syzkaller1: entered promiscuous mode [ 847.342397][ T1241] syzkaller1: entered allmulticast mode [ 847.351008][ T1246] IPv6: NLM_F_CREATE should be specified when creating new route [ 847.363792][ T1246] netlink: 'syz.1.7547': attribute type 1 has an invalid length. [ 847.378038][ T1241] netlink: 'syz.3.7549': attribute type 10 has an invalid length. [ 847.391452][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.417373][ T1241] bridge_slave_1: left allmulticast mode [ 847.424072][ T1241] bridge_slave_1: left promiscuous mode [ 847.430443][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.455988][ T1241] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 847.557032][ T1247] bridge_slave_0: left allmulticast mode [ 847.579643][ T1247] bridge_slave_0: left promiscuous mode [ 847.591065][ T1247] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.605547][ T1247] bridge_slave_1: left allmulticast mode [ 847.611474][ T1247] bridge_slave_1: left promiscuous mode [ 847.617681][ T1247] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.647589][ T1247] bond0: (slave bond_slave_0): Releasing backup interface [ 847.672784][ T1247] bond0: (slave bond_slave_1): Releasing backup interface [ 847.702135][ T1247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.711364][ T1247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.722149][ T1247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.730776][ T1247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.741691][ T1247] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 847.928781][ T1252] netlink: 'syz.2.7550': attribute type 1 has an invalid length. [ 848.292377][ T1292] gre1: entered promiscuous mode [ 848.340678][ T1300] __nla_validate_parse: 1 callbacks suppressed [ 848.340700][ T1300] netlink: 288 bytes leftover after parsing attributes in process `syz.4.7556'. [ 848.477772][ T1306] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7562'. [ 848.484126][ T1303] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7561'. [ 848.761892][ T1322] netlink: 'syz.1.7567': attribute type 1 has an invalid length. [ 848.773804][ T5916] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 848.907835][ T1322] 8021q: adding VLAN 0 to HW filter on device bond8 [ 848.978650][ T1331] vlan2: entered allmulticast mode [ 848.988681][ T1331] bond8: entered allmulticast mode [ 848.995176][ T1333] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 849.025718][ T1322] bond8: (slave geneve3): making interface the new active one [ 849.036492][ T1322] geneve3: entered allmulticast mode [ 849.050314][ T1322] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 849.074155][ T1337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7571'. [ 849.359833][ T1357] netlink: 'syz.2.7575': attribute type 51 has an invalid length. [ 849.398085][ T1361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7576'. [ 849.505613][ T1364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7576'. [ 849.539502][ T1363] policy can only be matched on NF_INET_PRE_ROUTING [ 849.539520][ T1363] unable to load match [ 849.559504][ T1368] sctp: [Deprecated]: syz.4.7578 (pid 1368) Use of int in max_burst socket option deprecated. [ 849.559504][ T1368] Use struct sctp_assoc_value instead [ 849.769395][ T1379] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:17952 [ 849.785393][T27099] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 850.210700][ T1403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7587'. [ 850.500653][ T1413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7591'. [ 850.580101][ T1422] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7593'. [ 850.868542][ T1413] bond5: Invalid ad_actor_system MAC address. [ 850.874975][ T1413] bond5: option ad_actor_system: invalid value (1) [ 850.884679][ T1413] bond5 (unregistering): Released all slaves [ 850.915668][ T1422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7593'. [ 851.787003][ T1465] netlink: 'syz.2.7606': attribute type 1 has an invalid length. [ 851.911338][ T1465] bond4: entered promiscuous mode [ 851.924645][ T1465] 8021q: adding VLAN 0 to HW filter on device bond4 [ 852.575278][ T1490] syzkaller0: entered promiscuous mode [ 852.593167][ T1490] syzkaller0: entered allmulticast mode [ 852.647836][ T1494] bond5: Invalid ad_actor_system MAC address. [ 852.654404][ T1494] bond5: option ad_actor_system: invalid value (1) [ 852.663594][ T1494] bond5 (unregistering): Released all slaves [ 856.627463][ T1551] __nla_validate_parse: 4 callbacks suppressed [ 856.627485][ T1551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7624'. [ 856.796981][ T1562] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.7631'. [ 856.811848][ T1562] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 856.942414][ T1569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 857.262987][ T1588] netlink: 'syz.1.7634': attribute type 8 has an invalid length. [ 857.271877][ T1588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7634'. [ 857.282191][ T1588] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.289994][ T1588] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.441410][ T1600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7640'. [ 857.465045][ T1600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7640'. [ 857.572883][ T1604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7642'. [ 858.019422][ T1618] syzkaller0: entered promiscuous mode [ 858.025330][ T1618] syzkaller0: entered allmulticast mode [ 858.109987][ T1622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7647'. [ 858.190414][ T1623] tap0: tun_chr_ioctl cmd 1074025676 [ 858.197508][ T1623] tap0: owner set to 0 [ 858.991739][ T1656] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 859.359273][ T1685] netlink: 'syz.0.7668': attribute type 8 has an invalid length. [ 859.368662][ T1685] netlink: 'syz.0.7668': attribute type 8 has an invalid length. [ 859.992327][ T1712] bond9: option fail_over_mac: invalid value (16) [ 860.006405][ T1712] bond9 (unregistering): Released all slaves [ 860.154555][ T1719] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7670'. [ 860.190937][ T1694] netlink: 248 bytes leftover after parsing attributes in process `syz.4.7670'. [ 860.224920][ T1696] netlink: 248 bytes leftover after parsing attributes in process `syz.4.7670'. [ 860.454515][ T1739] ipt_REJECT: TCP_RESET invalid for non-tcp [ 860.475957][ T1740] ipt_REJECT: TCP_RESET invalid for non-tcp [ 860.592041][ T1738] xt_CT: No such helper "snmp_trap" [ 860.997034][ T1774] mac80211_hwsim hwsim67 syzkaller0: entered promiscuous mode [ 861.016952][ T1774] mac80211_hwsim hwsim67 syzkaller0: entered allmulticast mode [ 861.241953][ T1794] netlink: 'syz.4.7694': attribute type 16 has an invalid length. [ 861.835645][ T1819] syzkaller1: entered promiscuous mode [ 861.841383][ T1819] syzkaller1: entered allmulticast mode [ 864.128945][ T1789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 864.499934][ T1835] __nla_validate_parse: 9 callbacks suppressed [ 864.499958][ T1835] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7706'. [ 864.566990][ T1840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7705'. [ 864.607419][ T1840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7705'. [ 864.650652][ T1846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7705'. [ 864.689535][ T1840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7705'. [ 864.709363][ T1849] xt_hashlimit: size too large, truncated to 1048576 [ 864.964561][ T1869] netlink: 'syz.2.7711': attribute type 2 has an invalid length. [ 865.064197][ T1878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7713'. [ 865.391803][ T1895] netlink: 'syz.3.7715': attribute type 1 has an invalid length. [ 865.559731][ T1897] bond5: (slave ip6gretap1): making interface the new active one [ 865.581641][ T1897] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 865.606326][ T1897] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 865.622346][ T1904] ip6t_REJECT: ECHOREPLY is not supported [ 865.629969][ T1897] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 865.992935][ T1927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7724'. [ 866.160321][ T1932] ------------[ cut here ]------------ [ 866.168045][ T1932] UBSAN: shift-out-of-bounds in net/mac80211/tx.c:2184:30 [ 866.175345][ T1932] shift exponent 190 is too large for 64-bit type 'unsigned long' [ 866.183344][ T1932] CPU: 0 UID: 0 PID: 1932 Comm: syz.4.7726 Not tainted syzkaller #0 PREEMPT(full) [ 866.183373][ T1932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 866.183389][ T1932] Call Trace: [ 866.183399][ T1932] [ 866.183408][ T1932] dump_stack_lvl+0xe8/0x150 [ 866.183448][ T1932] ubsan_epilogue+0xa/0x30 [ 866.183471][ T1932] __ubsan_handle_shift_out_of_bounds+0x385/0x410 [ 866.183519][ T1932] ieee80211_parse_tx_radiotap+0xadb/0x1950 [ 866.183562][ T1932] ? __pfx_ieee80211_parse_tx_radiotap+0x10/0x10 [ 866.183599][ T1932] ? ieee80211_downgrade_queue+0x432/0x5b0 [ 866.183632][ T1932] ieee80211_monitor_start_xmit+0xb1f/0x1250 [ 866.183665][ T1932] ? ieee80211_monitor_start_xmit+0x60d/0x1250 [ 866.183694][ T1932] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 866.183730][ T1932] dev_hard_start_xmit+0x2cd/0x830 [ 866.183771][ T1932] sch_direct_xmit+0x251/0x4c0 [ 866.183808][ T1932] ? __pfx_sch_direct_xmit+0x10/0x10 [ 866.183841][ T1932] ? htb_enqueue+0xcbe/0x1270 [ 866.183868][ T1932] __qdisc_run+0xa83/0x1560 [ 866.183918][ T1932] __dev_queue_xmit+0x1d26/0x3950 [ 866.183948][ T1932] ? __dev_queue_xmit+0x2b6/0x3950 [ 866.183981][ T1932] ? _copy_from_iter+0x21b/0x1670 [ 866.184017][ T1932] ? __pfx___dev_queue_xmit+0x10/0x10 [ 866.184038][ T1932] ? sock_alloc_send_pskb+0x896/0x990 [ 866.184068][ T1932] ? __pfx__copy_from_iter+0x10/0x10 [ 866.184118][ T1932] ? __pfx_packet_parse_headers+0x10/0x10 [ 866.184156][ T1932] ? packet_xmit+0x68/0x320 [ 866.184191][ T1932] packet_sendmsg+0x3f73/0x5240 [ 866.184234][ T1932] ? __futex_wait+0x1fc/0x420 [ 866.184282][ T1932] ? __lock_acquire+0x6b5/0x2cf0 [ 866.184339][ T1932] ? __pfx_packet_sendmsg+0x10/0x10 [ 866.184366][ T1932] ? aa_sk_perm+0x6d5/0x900 [ 866.184405][ T1932] ? __pfx_aa_sk_perm+0x10/0x10 [ 866.184433][ T1932] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 866.184475][ T1932] ? aa_sock_msg_perm+0xf1/0x1b0 [ 866.184507][ T1932] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 866.184542][ T1932] ? __pfx_packet_sendmsg+0x10/0x10 [ 866.184573][ T1932] __sys_sendto+0x672/0x710 [ 866.184609][ T1932] ? __pfx___sys_sendto+0x10/0x10 [ 866.184639][ T1932] ? do_futex+0x333/0x420 [ 866.184704][ T1932] ? rcu_is_watching+0x15/0xb0 [ 866.184744][ T1932] __x64_sys_sendto+0xde/0x100 [ 866.184777][ T1932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.184803][ T1932] do_syscall_64+0x15f/0xf80 [ 866.184832][ T1932] ? trace_irq_disable+0x3b/0x140 [ 866.184857][ T1932] ? clear_bhb_loop+0x40/0x90 [ 866.184886][ T1932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.184910][ T1932] RIP: 0033:0x7f963539cdd9 [ 866.184935][ T1932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.184956][ T1932] RSP: 002b:00007f96362ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 866.184981][ T1932] RAX: ffffffffffffffda RBX: 00007f9635615fa0 RCX: 00007f963539cdd9 [ 866.184999][ T1932] RDX: 000000000000013e RSI: 0000200000000240 RDI: 0000000000000003 [ 866.185014][ T1932] RBP: 00007f9635432d69 R08: 0000200000000200 R09: 0000000000000014 [ 866.185031][ T1932] R10: 0000000024048081 R11: 0000000000000246 R12: 0000000000000000 [ 866.185045][ T1932] R13: 00007f9635616038 R14: 00007f9635615fa0 R15: 00007ffdb3f26818 [ 866.185080][ T1932] [ 866.185108][ T1932] ---[ end trace ]--- [ 866.511735][ T1932] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 866.518996][ T1932] CPU: 0 UID: 0 PID: 1932 Comm: syz.4.7726 Not tainted syzkaller #0 PREEMPT(full) [ 866.528418][ T1932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 866.538619][ T1932] Call Trace: [ 866.541948][ T1932] [ 866.545011][ T1932] vpanic+0x56c/0xa60 [ 866.549155][ T1932] ? __pfx_vpanic+0x10/0x10 [ 866.553747][ T1932] ? irqentry_exit+0x218/0x730 [ 866.558599][ T1932] panic+0xc5/0xd0 [ 866.562567][ T1932] ? __pfx_panic+0x10/0x10 [ 866.567058][ T1932] ? __pfx__printk+0x10/0x10 [ 866.571754][ T1932] check_panic_on_warn+0x89/0xb0 [ 866.576757][ T1932] __ubsan_handle_shift_out_of_bounds+0x385/0x410 [ 866.583263][ T1932] ieee80211_parse_tx_radiotap+0xadb/0x1950 [ 866.589417][ T1932] ? __pfx_ieee80211_parse_tx_radiotap+0x10/0x10 [ 866.595905][ T1932] ? ieee80211_downgrade_queue+0x432/0x5b0 [ 866.601876][ T1932] ieee80211_monitor_start_xmit+0xb1f/0x1250 [ 866.607939][ T1932] ? ieee80211_monitor_start_xmit+0x60d/0x1250 [ 866.614172][ T1932] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 866.620676][ T1932] dev_hard_start_xmit+0x2cd/0x830 [ 866.625891][ T1932] sch_direct_xmit+0x251/0x4c0 [ 866.630734][ T1932] ? __pfx_sch_direct_xmit+0x10/0x10 [ 866.636093][ T1932] ? htb_enqueue+0xcbe/0x1270 [ 866.640850][ T1932] __qdisc_run+0xa83/0x1560 [ 866.645665][ T1932] __dev_queue_xmit+0x1d26/0x3950 [ 866.650782][ T1932] ? __dev_queue_xmit+0x2b6/0x3950 [ 866.655978][ T1932] ? _copy_from_iter+0x21b/0x1670 [ 866.661085][ T1932] ? __pfx___dev_queue_xmit+0x10/0x10 [ 866.666523][ T1932] ? sock_alloc_send_pskb+0x896/0x990 [ 866.671963][ T1932] ? __pfx__copy_from_iter+0x10/0x10 [ 866.677338][ T1932] ? __pfx_packet_parse_headers+0x10/0x10 [ 866.683139][ T1932] ? packet_xmit+0x68/0x320 [ 866.687802][ T1932] packet_sendmsg+0x3f73/0x5240 [ 866.692733][ T1932] ? __futex_wait+0x1fc/0x420 [ 866.697553][ T1932] ? __lock_acquire+0x6b5/0x2cf0 [ 866.702579][ T1932] ? __pfx_packet_sendmsg+0x10/0x10 [ 866.707837][ T1932] ? aa_sk_perm+0x6d5/0x900 [ 866.712414][ T1932] ? __pfx_aa_sk_perm+0x10/0x10 [ 866.717330][ T1932] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 866.723830][ T1932] ? aa_sock_msg_perm+0xf1/0x1b0 [ 866.728839][ T1932] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 866.734371][ T1932] ? __pfx_packet_sendmsg+0x10/0x10 [ 866.739641][ T1932] __sys_sendto+0x672/0x710 [ 866.744319][ T1932] ? __pfx___sys_sendto+0x10/0x10 [ 866.749411][ T1932] ? do_futex+0x333/0x420 [ 866.753847][ T1932] ? rcu_is_watching+0x15/0xb0 [ 866.758696][ T1932] __x64_sys_sendto+0xde/0x100 [ 866.763507][ T1932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.769620][ T1932] do_syscall_64+0x15f/0xf80 [ 866.774342][ T1932] ? trace_irq_disable+0x3b/0x140 [ 866.779428][ T1932] ? clear_bhb_loop+0x40/0x90 [ 866.784145][ T1932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.790257][ T1932] RIP: 0033:0x7f963539cdd9 [ 866.794734][ T1932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.814414][ T1932] RSP: 002b:00007f96362ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 866.822887][ T1932] RAX: ffffffffffffffda RBX: 00007f9635615fa0 RCX: 00007f963539cdd9 [ 866.830902][ T1932] RDX: 000000000000013e RSI: 0000200000000240 RDI: 0000000000000003 [ 866.838921][ T1932] RBP: 00007f9635432d69 R08: 0000200000000200 R09: 0000000000000014 [ 866.846933][ T1932] R10: 0000000024048081 R11: 0000000000000246 R12: 0000000000000000 [ 866.854948][ T1932] R13: 00007f9635616038 R14: 00007f9635615fa0 R15: 00007ffdb3f26818 [ 866.862976][ T1932] [ 866.866226][ T1932] Kernel Offset: disabled [ 866.870686][ T1932] Rebooting in 86400 seconds..