last executing test programs: 54.031791247s ago: executing program 2 (id=3490): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xffd, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0x401, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0x10001, 0x2c800000, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x52bd315b, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x10000000, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x0, 0x3, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x87c}}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_init_net_socket$ax25(0x3, 0x5, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280), 0x4) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 53.842018857s ago: executing program 2 (id=3494): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018681000000000000c4b4b004c00000003000000010000000000000403000000002e00"], 0x0, 0x27}, 0x28) socket$inet6(0xa, 0x5, 0xffffd21d) 53.689503576s ago: executing program 2 (id=3496): syz_extract_tcp_res(&(0x7f00000000c0), 0x9, 0x9) syz_extract_tcp_res(&(0x7f0000000100), 0x36, 0x10000) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@can={0xc, {{0x2, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "0761de9232edb118"}}}}, 0x0) 53.596715669s ago: executing program 2 (id=3498): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x40}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) 53.476367003s ago: executing program 2 (id=3500): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0xa}, {0x3}, {0x3}, {0x2}]}]}, {0x0, [0x5f, 0x61]}}, &(0x7f0000000180)=""/220, 0x50, 0xdc, 0x1}, 0x28) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x78}, 0x1c) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB], 0x50) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xf, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b40)='GPL\x00', 0x5, 0x8f, &(0x7f0000000b80)=""/143, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000c40)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000c80)=[{0x1, 0x5, 0x6, 0x8}, {0x0, 0x5, 0x2, 0x9}, {0x4, 0x3, 0x7, 0xc}], 0x10, 0x5}, 0x94) (async) getsockopt$inet_buf(r3, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000f00)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0x3, 0x1ff, 0x4, 0x2, 0x7a87b65821310799, 0xbfd1, 0x5}, &(0x7f0000000fc0)=0x9c) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) (async) r9 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) 52.973680698s ago: executing program 2 (id=3504): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) sendto(r1, 0x0, 0x0, 0x20000800, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f00000001c0), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008000f"], 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0xc808) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xb4, r3, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5bb13106a51b04caf2ea6b907d4bb9b19300506050797473"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xb4}, 0x1, 0x0, 0x0, 0x400480c0}, 0x40408c0) 52.70808856s ago: executing program 32 (id=3504): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) sendto(r1, 0x0, 0x0, 0x20000800, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f00000001c0), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008000f"], 0x34}, 0x1, 0x0, 0x0, 0x4040010}, 0xc808) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0800250000000040080002"], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xb4, r3, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5bb13106a51b04caf2ea6b907d4bb9b19300506050797473"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xb4}, 0x1, 0x0, 0x0, 0x400480c0}, 0x40408c0) 2.181760145s ago: executing program 3 (id=4286): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x20008811) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x30000000}, 0x400c040) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x60}, 0x80) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r5, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x3c4280}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x74, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVICE={0x40, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xfffd}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x74}, 0x1, 0x0, 0x0, 0x200048d0}, 0xc482a43129c08cf) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000900)={&(0x7f0000000800), 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r2, 0x2, 0x3, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r6) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa4, r10, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, r4, 0x0, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r9) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000c80)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000cc0)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r9, &(0x7f0000000e40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xd8, r11, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9d22a84d8b402fc7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x41) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r14, 0x400, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0xe9c9712b73243616) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000001000), r9) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x3c, r15, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8801}, 0x2000c044) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x1407, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004800}, 0x800) 1.764144561s ago: executing program 3 (id=4294): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000002600)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x3, @remote}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="aff93218d81fadf3158036386be9a9b8783555d71cfd27b3dd07b1e485365ba7bfbb2a54292ab8f1b5e28a37f0a0627e5325046f98896323bf3c1c", 0x3b}, {0xfffffffffffffffc}, {&(0x7f00000002c0)="abd1b3229da0f08b9f57cc2e96f5079f3d3dd527b8216552e77ed06283c3196ef9cfcd8509d94ab39a6384f25a47a93f3d68c071e2e9d7d267934a118ce0f6682957a0b995e557a46d27c460d87a015bb668c650bb5a6b109c3bdaf525f3a8852a2236ec1a747b794eb8c64d5433d879dd97df9273a41e80a59880b030c50133d07a8f3dcac0e89934de06f935adca1b38abfe41ce0e76614db16752e5a12f64464abf2f4dab80603e424e4238ef3e25524045cbaac72de58eb3c0527ac76197b15ea22ab6b8c699dfe0b9842baddf79ddfe34a6409c989053425a21", 0xdc}, {&(0x7f00000000c0)="d84903c6296fe31ec064988378db162b838fad20de56a1cf627ac44f6f1f5ce3c7870b2c065108f8bf254898f41725ce084337029c5d55c51ee787eff93f0b82639f25682cabfba37f8e42c8a9674509a243914e17524178a58e4a331055a8", 0x5f}, {&(0x7f0000000480)="bb6b1452b9b411e2e14a4c4a641e8c70b9e71c1d16d5761312669adc88e5a46518dd7f69f10743adaed3d4773457619cf5698f1d7d0d1e1e44be7ebef9dd5e64b119f06222ea24e293c9898181cfd064a235d47d4e7396bbdf957fbbe1c65c60253daa178d2753cb4e77f21d7b3c07a9244dffa8dda16716b8533af7a6824437ac1b000f1493158c4b623dbecdedec59d5c31ae7a71c3f96b760d7b900b8eedb0b007541bade256ec40a173a31f84c7ac7fe3d3f186496779d3b", 0xba}], 0x5}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000540)="6c68d5f5837aa50ea2da38393a3387634de61248e91ebea4c100f4ed607d017550dbbb0a49db9e1ec05be2e9c3fa99f4fd8529d3af818740264de0c2ecc85d6ee578420a332d87198123b0b827a7bcbf2a049d", 0x53}, {&(0x7f00000005c0)="4dfe01205ab540c95d23db84bc0ea275cde041fc8fe32722e23a4096a1cf44efc27e10579891a350306a7a72696830a782a23618c568381ac72423fcd939f551b72ca5566977eaf927045bcbb9d4f3e0be803f6ef9bc3c7dc52775f904829dc38fa5449ce6c6016729df1067732357f020dd06", 0x73}, {&(0x7f0000000640)="2060dc163f8fa52d9439ad0dfb9302bf01bd67e9128edad041501d9db19685831bf099da4dcf84b71c2bd6d616f0b96a963f9739f74be8c078a3d9c6e0745a3ac08a4d1a1f163002da112d65601da299d0ec91298d049ed9e1c8ff7828edadd3673e7b361c9177549b9d1ef83f0f5042c10dfe5f1e6c68489413190bb801630b467c757e4c3c1a126dadf1d788a180947faeb3e8c57c0c967601bce6f3194529be830160bf39da822c89fcbdd980071147c7484a66eb91454ed2318a28789ca133e7e27f82cdb4e10ebef1b6b28cc1", 0xcf}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="42d160cff9255c9a4df34eafcfd53f0b117f2a64f248d355ff570f5f95dc445e4be9534e587f8f863484efe7d0808a4a28b51cff7e02649969f11bd69f68d6ee6129f7a533c84b1b07026c373bbeaa8e2da96ea5b3db412a32b3ba332cc4ff49a1038f5d18505e7a39a33a5906c97ce42f", 0x71}], 0x5, &(0x7f0000000140)=[{0x28, 0x10c, 0xc4, "1b800e221c80220380122acffe8c26c316f0f0936854"}], 0x28}}, {{&(0x7f0000001840)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000018c0)="bccf57e4505650ae6492aec5fbdd84311ffcf8c9a8ddf7f335979c3d68c442888cac13885d59eeed05575b2f34c3f58ae6532c4e4948d6f91a95c6d21595d9619679b30eda0f33f1b0861f83ed8c6e5774ad3bd035597ebdf54c08d58f369e202dab09098d45574b2133407b4dead6c757a97d847297ab4c6f50353574107b21273edc617770da12b33dbce67cefdbd63e4f47bb04", 0x95}, {&(0x7f0000001980)="b47b053cc182bc7f5cc28d2049d7bf5bb82a43def03449ddde52c6595061cec743b4e23972e031ba736dc487abb11ab0525bd2492d317f7384c531e66defdf880e1869db0b1e417b7775b1f0ddcc1d1ede6fcb7a1ff091355becfcedbc85006c51077c550d67d6e186d9e5893bae02aa06155711403ddc8da884d33a9f654339c8fc4aa5e8ced980d3e4d363b82f897fa93f413b17a3b262a2", 0x99}], 0x2, &(0x7f0000001a40)=[{0x38, 0x119, 0x595f, "a03bcbe7f205a6eaa5f6efb0b54772a3d95b4d6c74c624a3ce5e7c48b00abcdb3e3b7b0842ef5203"}, {0x20, 0x0, 0x4, "63bba04671380c755f1aaac7"}, {0x50, 0x10f, 0xfffffff2, "05f4a449005ab4e3bc293b25d8a1826079f197c5783e99b4b19a06c8eb385ac2b353829ec3eb2fbb5c8b1da458b1948fe22d61761a3eae4cec"}, {0x108, 0x112, 0xfffffff8, "b0e4d85f0d5a01b071c0b1f1ae8e8b7d68c7d21db075f3236378f5e8e9655647f69777f3b35477350e39b40e33510d52ba2d0120c438d88d02d888423aff9c947f502b8dc0ca65e0b66439421b1189dfdf1c059d24981a9fe77421021422cdfd2bc04b3b66b1e8e055a614a7a5a62ebe3270c427ff1914ab4898b352723434ad9a538491f5249c7283773fcd3634b2457217c98829b29d1ad959d368c93c007ad006b4a4e61972fc7787ee40697ebceac74e5895c0158f34778f67a494dda051168ba1a55a40857884dc80024f9ace05e0790ec2bdcb5c2dd65ec1054e055fee3a257969ea0a19c4bd38403051e9f1a3cb"}, {0x108, 0x104, 0x4, "0fdccc0429cec3bc32be8461371e134c28f9c8f49f19efc13ad77e351464ae7c976d9d6962bcb70e8e21874f8dd7de7d31a96c22d5a3b924973d8b14d3ee397d93fe689aeb300df45a702607a0d1b7bac1b51a315608ed14b23971e416321136836f4c90fd63a44deb0a1378a2adffddfc0e33634874a1723b1832ce06bfc4718ec6963764191e6cb2e4851980fd4f150960d90a163474380dcda426477999cf510d74103fedf7ea04278ff6d7e3d5a479519815814db5da175d15a2f1a6b6c929580c311e8cd2cd4fa6eb4bfd18ca7575142a8802433f2cdc7042328b1f6e8276f2ff501678835369102a402351792d2082"}, {0x60, 0x0, 0x80, "0816c038fba9b32493e8d8d2b1d98f141b753aea0cbaa4fc3d9e25d4b4e13eeda8f24f4d511d9d12f4facdd27e6312a30eb6e60ff6880462e1a0556cc029284f3ac531a131842c0be5c1d27581"}], 0x318}}, {{&(0x7f0000001d80)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001e00)="5cd5cab6c43b723a340ce13be04d220d", 0x10}], 0x1, &(0x7f0000001e80)=[{0x48, 0x1, 0x9, "c2fd61fe37db1ba3e8c761647a5adfeb9525909067dd4073d3a5e0d4e8f2911b3f31ebbd121c5986924f08fd6e8a665f01f9d73285dd"}, {0x108, 0x114, 0x5, "940f9d422fdd4b04d7b89b1e95404299f040c946f6f897ba5d6ecf86ca638f51facd68ba979496cc1de8aa48d82355c7d022000db4b5035e3cb9aba445c32d420c7d1cad45197d24e2f75c8211867060ba4ace57efc4900501a17a669dece2406d93c768c38babddde7eea5af612c840ca2ff467b6718572529ceceba3f26e0990904ac0407a6d77ec5dfce8f39d071abf56cb42ec0d720561f21b76d0d654b60bbe2407c3f4f77691a52cc689ad78e51118657194f3dd02ed343a2ed425d0fd1a24a0434f8603537c70827b5d86b1d3c4e385b18b0eba98d4923383391d140483d2b0a4635616be07d10e7abf18008675af57"}], 0x150}}, {{&(0x7f0000002000)=@hci={0x1f, 0xffffffffffffffff}, 0x80, &(0x7f0000002140)=[{&(0x7f0000002080)="b8efe3364a36f395b795a9df9e2215e5dddd2800e6ebff670ae2b4d50972974db5bd0949240507eae482fc04de52823b94e4abd57dc2b45e0c978ed49dc627542d4fd2b04a2dbce4", 0x48}, {&(0x7f0000002100)="46340d128528ee219d348f71045f3b4a7717607149957a59", 0x18}], 0x2}}, {{&(0x7f0000002180)=@nl, 0x80, &(0x7f0000002300)=[{&(0x7f0000002200)="562053f3a9725d3951f51d3b7127f2d6e007e9449c3c021b75c172a0bb8ae491f49a986ef4b2519fb26bcfa449184b03cdab010ba6400ab8af2767e44e3823392ee2834c49280328d34d9af356521986432b530ad24c23cff3a37c7e374451056d13490474e55dfedc1d94ed0cd4ec50405bca59be3f69faf08985a62ddf10e8d8df1ec931ed30e9f85a66860c2cbe13a80f86827d771b9057c59d20758d111f9cf2c8484501ec5aed57a7419d5af00080c5ef624a665a46f677d96599da748e2990ae29f8edfa7cffc22def9b659f951a77fbde7a303fc56c9987ac", 0xdc}], 0x1, &(0x7f0000002340)=[{0x58, 0x1e0, 0x6, "f82c8b405d576ae150d8c8fee0790f147bb87df8ce16a7fda97309fd3c8295b30021171e4826ddf5341dc095e9e1ff305d823f8e4e00a461b6d692f4f10539c2ff6cb69efc39dc"}, {0x110, 0x10d, 0x9, "1cbb2e4d11c4ce160d606da63f3acc699e7c8f5a0dc39ff995c73ff6753f91d88434c63e77bebf7d597145ed688264189b745f30f9e25f56a24ee5d08e16beb1fc48a9adf0d3085e6a854b8fbb9aa8cf0973ccf7a0209c159543c1b1519cec8d72ea3d63c514157218624bc3a3879e2eb23b2cf22869ab99555723e684836e4a79498a0afc308b4c3162bca4b806fb02757285e3f84973a863c06618cfa7b7407fd4f2681904f4e31774f306773842e906ed4af85b1acdf92dadc538b93094fbcd35fdd8ab0c27ea99fccd06cb5d92108097d07b0aab8ca87ff1cbb19b8e2c41d5bfde469d542cc7e467ee51cd14b948a4b64ca1d329928254"}, {0x58, 0x119, 0x8, "cf57343728fb27f66eeb9c892f3b41b3ee1aef69000adf03798cc186d9edb64de3a4a6e2d9637cf891b5534b24ef512209b25a15c765f83e0835cfe840bd787bfcaf0b57ae"}, {0xf8, 0x10d, 0x9, "d02a02eae1b6cf7492e46ef66afdc91e112763c768a0160dd421908f09f02181b5ca8228bb1dd73020a163bcc3a04801df79a90763af16634f7f74f7d02076691ae5096b6bfa93aad4a2fe5569fb7eb1a10bf2822fe53ddd335fff7ddd9f4a807938a1e6ab60baf4f2d2269990488aa4e95b9b93e990f72b9200260cd533ced84d3935b799c3f4ba01475d543e6f33361a9fc603a45d6cfcf160fac6c982902b4b9d345683f74970fe0d3b0870872c8991a356595c8e5d47183d5da198b8e26e7a261f2ffd360974360aeaa41982fe52e9b0978ef8663d8c75b679add9a422139442"}], 0x2b8}}], 0x6, 0x4008015) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast1}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x85, 0x0, &(0x7f0000000440)=0x9b) 1.645282865s ago: executing program 3 (id=4296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x80, @loopback, 0xfffffffc}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xffffffff}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000b80)='f', 0x1, 0x4040801, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000000680)=0x7, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x81, 0x4a, 0xfffffffd, 0x1, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x8780, 0x7fffffff, 0xc3}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000bc0)={'sit0\x00', 0x0, 0x40, 0x700, 0x1, 0x7, {{0x69, 0x4, 0x2, 0x16, 0x1a4, 0x68, 0x0, 0x7, 0x4, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x3f, 0x3, [{0x7, 0x8, "207bd9e142e9"}, {0x1, 0x10, "12528e64193e5449a0c41de42b5e"}, {0x5, 0xf, "0499cd4b5cdf19356190281cde"}, {0x6, 0x12, "cc3320dcd2351153c11ced7de3d25ca4"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0xc6, 0x3, 0xd, [{@broadcast, 0xd3}, {@multicast1, 0x6}, {@broadcast, 0x5}, {@rand_addr=0x64010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x7}, {@private=0xa010100, 0x7}, {@broadcast, 0xf}]}, @ssrr={0x89, 0x1b, 0x72, [@rand_addr=0x64010100, @private=0xb, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1, @empty]}, @noop, @noop, @timestamp={0x44, 0x28, 0x4d, 0x0, 0x9, [0x1, 0xb7, 0x2, 0x3, 0x0, 0x15, 0x4, 0x5, 0x5]}, @generic={0x44, 0xc, "a9bbbf201ac99ea6eb89"}, @timestamp_prespec={0x44, 0x4c, 0x1f, 0x3, 0xb, [{@loopback, 0x1}, {@empty, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@local}, {@private=0x5, 0x8000}, {@rand_addr=0x64010100, 0x401}, {@rand_addr=0x64010102, 0x373b}, {@remote, 0x78a3}, {@private=0xa010102, 0x100}]}, @cipso={0x86, 0x71, 0x3, [{0x5, 0x4, "4914"}, {0x1, 0x5, "acac8c"}, {0x1, 0x10, "55765a410492117748974ea19fde"}, {0x2, 0xe, "18d795c009a5b8736ffcf4c9"}, {0x6, 0x4, "e5dc"}, {0x1, 0x10, "4a55d6d1cbaefeb0a48a52a9c9b0"}, {0x1, 0xd, "cb6993dfd7063dabbab650"}, {0x1, 0x12, "aca3cb154d7654b713ae18f4c86a3877"}, {0x2, 0x4, 'r;'}, {0x1, 0xd, "1a52701db2e0a09e9cc630"}]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=@ipmr_delroute={0x60, 0x19, 0x1, 0x70bd28, 0x25dfdbff, {0x80, 0x10, 0x20, 0x11, 0xfe, 0x3, 0xff, 0x5, 0xc00}, [@RTA_NH_ID={0x8, 0x1e, 0x5}, @RTA_SRC={0x8, 0x2, @multicast1}, @RTA_DPORT={0x6, 0x1d, 0x4e22}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_OIF={0x8, 0x4, r3}, @RTA_DPORT={0x6, 0x1d, 0x4e20}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x8, 0x9, r5}}, @RTA_OIF={0x8, 0x4, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x51800}, 0x1) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="f9", 0x1}], 0x1}, 0x400c01d) bpf$PROG_LOAD(0x15, &(0x7f0000000480)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r8, 0x28543634fae43ad}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="14000000100001000000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000080), 0x619, r10}, 0x38) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, &(0x7f0000000000)=0x1) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000300)=ANY=[], 0x340a) 1.256949681s ago: executing program 1 (id=4305): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x20, 0x80, 0xcc, 0xfd, 0x2, 0xc8, 0x6, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0xc) 1.211716062s ago: executing program 1 (id=4307): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x20050840) sendmsg$kcm(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000002fc0), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0200", 0x8, 0x0, 0x0, @local, @local, {[@srh={0x32}]}}}}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @loopback, @rand_addr=0x3}}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000100), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x8, 0x9, 0x4}, 0x50) r3 = socket(0x2, 0x80805, 0x0) socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x7d, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.128271992s ago: executing program 5 (id=4310): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}, [@generic="299a50bdc19377268b5707eafb"]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, 0x0, 0x48) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0xb, 0xa2, 0x9, 0x4, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d4, 0xfe, 0xf, 0x72, 0x4, 0x40000000}]}, 0x20}}, 0x40014) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@updpolicy={0x10c, 0x19, 0x729, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x18}, {0x0, 0x7, 0x0, 0x2, 0xffffffffffffff1f, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@mark={0xc, 0x15, {0x35075b, 0x3de}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x10c}}, 0x8000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 1.089460081s ago: executing program 0 (id=4311): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'erspan0\x00', @local}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.016708051s ago: executing program 1 (id=4312): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x3, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffff801}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f00000002c0), &(0x7f0000000440)=r1}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x3}}, 0x26) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r6) sendmsg$IEEE802154_START_REQ(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x4008104) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r8, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000040) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r9) sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x14, r10, 0x1, 0x70bd27, 0xffffffff}, 0x14}}, 0x0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r10, 0x20, 0x8070bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x10}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40814}, 0x4000080) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x5, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r13, 0x1, 0x4d, 0x0, &(0x7f0000000140)) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc) 962.55451ms ago: executing program 0 (id=4314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa1}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close(r0) 948.151565ms ago: executing program 5 (id=4315): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 861.322084ms ago: executing program 1 (id=4316): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x8, 0x0, &(0x7f0000000340)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="38e6ff00", @ANYRES16, @ANYBLOB="01000000000000000000050000000c"], 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012002102000000000000000007"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400d1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtfilter={0x60, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x7, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r8, 0x89ef, &(0x7f0000000000)) ioctl$sock_proto_private(r8, 0x89ea, &(0x7f0000000040)="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") 838.755411ms ago: executing program 0 (id=4318): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000008a0000006a0a00ff000000003500000000000000950000000000000018"], 0x0, 0xa, 0x95, &(0x7f0000000180)=""/149}, 0x94) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000880), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @initdev}, &(0x7f0000000340)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', r7, 0x7800, 0x8000, 0x472b, 0xfffffffe, {{0x13, 0x4, 0x0, 0x1, 0x4c, 0x66, 0x0, 0x1, 0x29, 0x0, @remote, @private=0xa010102, {[@cipso={0x86, 0x38, 0xffffffffffffffff, [{0x6, 0x6, "e0fbee3c"}, {0x2, 0x12, "01ae35c84b61f72e2fd88d780e8183dd"}, {0x0, 0x9, "f9b24983f4daea"}, {0x7, 0x7, "52587f8eb9"}, {0x1, 0x8, "18fe422994e9"}, {0x5, 0x2}]}]}}}}}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000380)) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000480)) close(r0) 686.586253ms ago: executing program 4 (id=4319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1f40, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x3}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf8, r4, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000080}, 0x24008008) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x54, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1f40, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x3}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) (async) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf8, r4, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000080}, 0x24008008) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) (async) 633.546984ms ago: executing program 5 (id=4320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8fbf2bbd7000fcdbcf2516000000140001800d0001007564703a73797a3200000000"], 0x28}}, 0x0) 616.260766ms ago: executing program 3 (id=4321): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000ac0)={0x10, 0x0, 0x25dfdbfb, 0x8000}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0xea60}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)=@migrate={0x50, 0x21, 0x800, 0x70bd29, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4e22, 0x8, 0x4e20, 0xdc, 0x2, 0xa0, 0x80, 0xc}, 0x6e6bb4, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) 604.479966ms ago: executing program 1 (id=4322): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x20000050) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x20000050) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x105000, 0x0) write$tun(r2, &(0x7f00000001c0)={@val={0x0, 0x88f7}, @void, @ipv4=@udp={{0x16, 0x4, 0x2, 0x5, 0xbc, 0x65, 0x0, 0x9, 0x11, 0x0, @broadcast, @empty, {[@noop, @timestamp_addr={0x44, 0x1c, 0x6, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x7ff}, {@multicast1, 0x7}, {@local, 0x81}]}, @timestamp_addr={0x44, 0xc, 0xe, 0x1, 0x4, [{@loopback}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0x10, 0xbe, 0x0, 0xf, [0x2, 0x81, 0x2]}]}}, {0x4e24, 0x4e24, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x1, "9f257dfe87edff6c9ff504dd6e2da7b93e76848e1ed866b463b99145822da233", "702a3480426b36de0cebb3e6c309e051", {"0b8cc4ffe3d82ec4a61affd9d9946200", "f30b2eef08fe1e10246d98c4ac9e6709"}}}}}, 0xc0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000280)={'batadv0\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000280)={'batadv0\x00', @broadcast}) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) ioctl$SIOCGSKNS(r2, 0x894c, &(0x7f0000000340)={'wg0\x00', 0x600}) r3 = accept4(r0, &(0x7f0000000380)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000000400)=0x80, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x4, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x888) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r4, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x24040800) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000017c0)={0x0, @initdev, @dev}, &(0x7f0000001800)=0xc) (async) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000017c0)={0x0, @initdev, @dev}, &(0x7f0000001800)=0xc) sendmmsg$inet6(r3, &(0x7f0000001b00)=[{{&(0x7f0000000680)={0xa, 0x4e23, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa571}, 0x1c, &(0x7f0000001780)=[{&(0x7f00000006c0)="989635bc78e4589d9fcfd554cb7e07b256b220d6285c433938438be684b4a95c9e23bb29e16350526e16e4f2fe63a3557eca82ee2fc84469535cf7a4affa0db51bc5a7688b995a320b89a6bd57482d3ac204040e9d3110d11122541fcc0f119a770e5dd1419312e73a1700eb8b1d34727d79a94cfb3eb1e3113e3a33c724d0bfa79365d677235c02c0d94626fb7e5cdb14752b9bd47e3b2ffee6b814aa411908efff1a7c0707d1f7d4ba", 0xaa}, {&(0x7f0000000780)="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", 0x1000}], 0x2, &(0x7f0000001840)=[@flowinfo={{0x14, 0x29, 0xb, 0xd62a}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x3c, 0x7, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0xc7, 0x2, [0x800, 0x10000, 0x1, 0x5, 0x91]}}, @jumbo={0xc2, 0x4, 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r5}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x3b, 0x12, 0x2, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private0, @loopback, @dev={0xfe, 0x80, '\x00', 0x29}, @dev={0xfe, 0x80, '\x00', 0x3e}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xa}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @dstopts_2292={{0x128, 0x29, 0x4, {0x11, 0x21, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x7, 0xd5, "68eeac3d60d720a37ac4ec7276df9abe44a7cc54f2ac95fb1df00fc0ea48c1a8e0fbd5996bbda4706fb72b04376eba637f3dff63d6c1b614dae70c98c5e87e97927f5b79bc46e15f38bbb4795bc58380dd9f2f5020e6b4a019db26fc2de1235d8a5aaf21d58ab54fa79e66a98d499071ecda8ae5f0de22ceb5a83a57b5c689f31a39614e282b25944b7141ae6e2b5c7cf339e533e1e5d5c3e9bc5cf4edda0d69a35b901e770b8de50f7d2eab4ae67337bea48445123d49faf413b2666a768f1edae954600e59c26946f0243139ed26e81f70d60bb1"}, @pad1, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast1}, @generic={0x5, 0x5, "64af7c21ab"}, @enc_lim={0x4, 0x1, 0xa}]}}}], 0x2a8}}], 0x1, 0x880) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x30, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x30, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = getuid() sendmsg$nl_netfilter(r3, &(0x7f0000001ec0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001c80)={0x200, 0x10, 0x4, 0x301, 0x70bd2a, 0x25dfdbfb, {0x5}, [@nested={0x1c1, 0x2d, 0x0, 0x1, [@typed={0x14, 0xd2, 0x0, 0x0, @ipv6=@private2}, @generic="1372a8cd3b3ae4641a7e85a2077250f72fa2dc96f49b6e282e1c3e40e06bfbb4cc2fe98df7774cf2fd5a6d33f99cb643aaade0d476765348c9d698367076da46def5fe613b30df92920ed21e6f237c85f0350b6eba0f7a01685a3b20b1cf86e08e6553159eb2fd493aa7832acc92353597ab85605bdd7abc27d157f246fc23a352b02feadaeb3783edb79f699774d00263f56b4b8131528632764a", @nested={0x4, 0x65}, @nested={0x4, 0x89}, @generic="19d8cb2d9dd36ade83493c64b5664d96f76941d32e8a2105c2318173e9c96363cbf9be2355975642780d47f8f9a9c21ab0b22c2a0ebd4c27f1bb730fbc6a6eee3a7faccd021760a7853e009ed24ff7d4a0e2c95d1438fa512b903c2d4ececa691c08c1a4d835c3ddfc0647d741433f81e4ff991af6c825d14a1d8282d723e4ad3ed6e618", @generic="22c7dbd7f61e2182e4a2afc4bd0f7d69515cb009c7b15a56280bedfb3669623ce62f0a6b00b3391905f6ee3927fec066c30cd0db8379067b09298d671491d78adaebf89ede9ba99194cba0a547412dfef8b6bdd888399cbb1fb1e8b20d34516efc234d230f4d2ed535b6b90981e4c88b9285f376e086c9a444eeaac81ee92b308d0f"]}, @typed={0xc, 0x107, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0xb1, 0x0, 0x0, @uid=r6}, @generic, @nested={0x8, 0xb3, 0x0, 0x1, [@nested={0x4, 0xd}]}, @nested={0xc, 0x6c, 0x0, 0x1, [@nested={0x4, 0x10d}, @nested={0x4, 0x1b}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000025}, 0x8001) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000003f80)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003f40)={&(0x7f0000001f80)={0x1f8c, r7, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x1f78, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x284, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x3}, @broadcast, @broadcast, @from_mac=@broadcast, {0x3, 0x1e5}}, 0x4, @default, 0x4008, @void, @val={0x1, 0x3, [{0x12, 0x1}, {0x6c}, {0x60, 0x1}]}, @void, @val={0x4, 0x6, {0x32, 0x1, 0x5, 0xb492}}, @val={0x6, 0x2, 0x3ed}, @val={0x5, 0xe4, {0xf4, 0x41, 0x8, "73be342a1cfb3d82b81bb8f2683bfa7d426e583e35eb78badf14506ee9e6a48eaf4bc6eeb0656f475bba5f28951ec4cbc4c16b6c9dc3f67f3a066292edd6299d71815f55b2434ec944b79c4ed2942635ee8ad729b986c63f013f8db0767ffa5bd7e8f51ebc9ee13f7da4caad3b1cf48cc49f35f5c294a25187bbe7030088485c6432409dd887ad7b60e86989a4f6ec143668960d343e704612050759a4e14e96d2cf712fa530f53ce323d390a95e6186fd48cf28b1d5c1a94c142a4f70d5fd987aa5d8632990d238d895484f1397dd812dfdfb4a552dd13ea00921cee9195fc0c0"}}, @val={0x25, 0x3, {0x0, 0xb6, 0x7f}}, @void, @void, @val={0x2d, 0x1a, {0x800, 0x1, 0x5, 0x0, {0x3ff, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x5, 0x18}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x69}}, @void, [{0xdd, 0xd3, "7b2afdf32f53d1bdf66802a334abde3d1e3b5949e7adf23169d17de113a6434d392acc18ca856e9713ad3f05df390e68b405454cff27feb8028e0588d482ef7273156e8758657b0b33d1271a0cfe353b4c82744116e037a13341fc7228b6e55a4ca6e347bdb48de83da5d915a61eb0bcb3858b1365159542b50b2d17b4cd81e8f783f1ee19e31203d4bcacdafa599d7f523b731e33af7c6af25f345d8403ff5619958747dd4ff1c2646c1055c21bd909d0cd81de60eca93bc5bae6d9331f0b3f87625cd2c48ff48e67bfc365d3dda163ef5d11"}, {0xdd, 0x2f, "e3e61104fcd51e5a235045faed03373293b6219d8683222679c50e40517e533e9e2548c93534d2286dc83ad91a63f4"}, {0xdd, 0x2b, "6b041a0e1c7c51a77abe78c737e7f020908a8e3892bf8207f7a502984a273aa2a7e9ccd8b8fb9c6109d80c"}]}}, @NL80211_ATTR_PROBE_RESP={0x8a, 0x91, "a2ccc97f6f042a49a897d3bb0e01b98ad662ed06c28c4afbc2e9e740ce05af2abe3b50749543708af2ba531be7904515909345f82715007c9b202be0871e919c065f12eeedd96d8947355f793fe4b38a09c5915aa5e51287552ac6af2b61166b9a2d08f855e8d4800cb2bf3dd14a540cbef51d63ac18120e06f31f0727d4f41773f171989a43"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x1ff, 0xd2b]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x7fff, 0x9, 0x0]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x2de, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0x9, 0x1}}, 0x818, @default, 0x804, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xc}, @val={0x4, 0x6, {0x4, 0x2, 0x8, 0x1}}, @val={0x6, 0x2, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x8796f73e4b64f787, 0x5}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x9e, 0xb3, 0x6}}, @void, @void, @void, @val={0x76, 0x6, {0x5, 0xf0, 0x33, 0x5}}, [{0xdd, 0xed, "c12392f6de048c507fe7ab03bdf8bef555c3a8adef6479cd2d190f22554ec9beecb27fb12d3e9c85b31b63998d66f1f8c05248a4dbeeb3763de5508b340f528c7083d953d0abba6f91f9fe01fe42a612e7b6e6939bfd7dd3e753f82c46f825189d35826a6b814174274a9384c8d802e7dbca2700e533d2864038171db93e108d21c437d612a0bf1fbd85d427f6158c694433526e4980900a1f7ecd055468b795be24ceeab96bc3c27110323bee56604271f88e6bf5a4410d39524ea5e549fc2f0f26d92dd98e4ffcea60b26a36a85881621e01a2e8f33a2e9baf9ed5ea4f394cda2bd5f6b54ccb6e9e6a650925"}, {0xdd, 0x89, "4aa9026b5eeccc491a00e40b0d1613bd69f5ee5e486a89f079d71ac181a42c5c03143e7a87231a1ce3c4dfd218bd755a1681a430cb8100802c4008fdfbc3d710f34b2cbf95e0c9a54b4575097e9fed472387027406f15a4da446dda57309905f3e30c0aa9e24b87964af5caa191050ad0507bd0d678f15f1c459ec926f79d17283b91f0bfbc31da70b"}, {0xdd, 0x59, "f3cfaa3b4d6da141f7af96bc7d2eedd434d39160b8f82af0314dd5341abf2dfd3880b565ffe50cec7f0c1321e771baf45dec278c2b7f548a7147b9da36eb9a83db795f66da7e4f5a7eb980a647b5a89d5861d66179025269e8"}, {0xdd, 0xb2, "76ee0582fcb2e955a13db061956d8f96d5273ef84d2e8f0add26bef8f041890a776d90818f4d90ee9f9a443ba75117011b6e3eb248c45e02afa6afec22b61c57e36006cc75016e00376b5a8bcbe9e610c01d4c2533588b0ac0bc1a1dcc9753a266c6615f9fda76ad5750a85f000898dc8393c64122781ffbf5b3cabdd3392fe0f3d0841247de525182d1269faf2b7537600fb21aa3d806a671aeb4ad71e15c420bd37b41e13837be25036a4c4a9749d1c26f"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x52, 0x7f, [@random_vendor={0xdd, 0x4c, "7c2fab25d4a2cdba21e4866001e3924bfa9cebbd662e18c12c3fdf929c1be578a8e9fddffa74e09e01ec8305c4c2adeabf0cb3bce125ca6f625cdd613b30017e358d503fc0df5fd262dc68ef"}]}, @NL80211_ATTR_PROBE_RESP={0x69d, 0x91, "1a333b4b15fb98891b2d89f4abf9e12577af14a32c936004c34d2eab107764b403fa1aa9a87ed8ef8f02e72d0539dfe85f50546a1424fb45f46d2889d4887b71b306b796cb3c75ce82d01f390d437e061881c05ff337746ca4653596b3d0699805f10dcccf86e18a62c05659bb074bcc52b3dc679ed458363588f1e41112275c2aa9b80e9106b6743a5566c04baec2c94759fb3fe2cad718321d2815df802f7261898214d17704b8492b0951c2002d133d94173779551b562ceaf1900a186e89f8c91a80732d2a74e59f32a43cea1f546421158ac3da3d908d98a3d9f3e038ffefa35460730e7abef5887ee2b9e582295ac81f14cd63320619afa8d14376e4230dbdeecc3306356dc8a7ef50a009b2dedc35f369494e7c4dee1b1395e02b05f5475f21cf978a808791efcd823682bf1e8e3ae5b42d83f837556a80368883f2608ea705fc086c85d1a66d707bf2bc84f1272af4bd19c7ef5e23240dcf9aa2b00e9ceea8ff5740650376828bf48fa312f3a27d5e9d4d5ed47279015a9b95625962ce6e211b19e799b739e42fa1d033c943b40e0abeda0707247572c0c04b1697a9da0876486415236222f3da4333ab178215c74fe47370527a66a17bb2b0c309c5f0c028de799bce3b52229dbb4ddd529e6aec9a9e92ba0b7cc567705843ec15948bc431c8a566b34437fe47588765c19442fa77d0a25446b27c1b8ce82f047dcbfb1d37f6903647f971a644bb4e72210af8af8aa9ed188d966fac393b4b3df56f450b4db496882e0eea0a018c3ec928e5f0bb40bfd0840d854c539cb84142357cffb404551789615a72856cff6c15d332206d06d85fe4d574c9cd1d48dffb649f2563750ab9b1500b8cac18b9c97cc827bdb191d592b8452951a52e9b6bf35716edbd26071c254e6474612f60d4754bb9b223d9363f152d8d25626e03294ca57d496ba4d5fb50d589f594abce03ca1db02a9a676a80d982c8c8588a8d139d431d7422941f6b55fbb43bbcfa36bafc905b79cc27c7b2d1d203c44406afce743a7c4722fb2ba4492f46d12c27bb0706b55dee870414927d7fe5615f1426d8b6d7221ec40e4848a70d90dd866d4ee95c17ba601355b04cac8d74e463374ed3bdfc1ad4122ffdd7178c7235a15176256b9159915b95118fd319bba78de3f46c76c91889441cb3cd4b42030eca36569dc46c90441ec8d2b849907b091b57af765139e0ef0f3a3adf94529e1bb91dbd5292da41d418cdbe5935ff3f269f42f9e4cf710f87de81285f123fd7181e27641e2b12e650d372548b155da3cef598b7e3c7d5da60b720e1a2c4e6d3fa95dd60bfae3dcda73e29be9ceaaef8ae02644571b3d9b99ed299bfabe5dcf94a534c19312590e69ad3c0e17d3fc775b695579099135f5eca9be840af4b890be8f3e5d7e398b8ee8a51e0d532ab6ea4b892ec73d29faf906564d06929b5e0a2d93ca247d2f039ecea6ea982b99a21733159391e11f222077b88f1cf4c1ae7e096821f842c265c66076eb0c2b8e39452d9a5fa94623aff1d1ec3233b77421751b9eee66a592d0a0b120015bf0814fdbf1e9ab3655b1b9068ae7c155909004302224ed6a621975b31907ab827526c2ac24a55f469fa4702204c21cc63478744e949282b80c30db461cbc79e51ad6d978c2bb5d669a753a8119b552989deed6fd0293af504ccb7faf548678f7fc67739b0a117debc5c244d62311d49e26fedf53aa5c7bc2dc139db966b30a82c77f00f2d9e78efb80d893b7ea3c1dadc07cba43cd6e5f52c05e5cd1182a3d12856dcd9ae6d56f60f238815025a2f27dc26083563386360f03def4fda2acdcf5042ac7da8fa63c9b6e4160ead0f7e8d14d8b44f5d302c90f31aa14e9bd4a24fa3a11e1dab259c31edf966a2a388029a540be729657e0161019b1898eea522d7b6b8f72779b1ce14be21315029d021495d6615a4da458ce89dc173d6f07c032d620596752765599daa641eb23044c0778f3fdfde60639bcb1ad48ca1947be2335c366143eb772c1c97f78c253ea6e87b6b9df071a657610c742d14e3ec306327e2d36e6879eb81ea6b550698e90582a16e1418155569bfd5304f3665217bfedca2176e2c1cd9e8c0a0fc32496375ec59083fb7c7274cc6dd0de31f708c52151665f2646f72326e9cd9f3dabf2dc9a28473ed3db0d3434ab7b6bd6056bc4083edc3c6d401e3669da9d1a416a9eeadc48d7a361ea5c8fb467dfbdb74fca880cf600b54a02a05f287bc290779001836bde3ffef2a2a069f0b731486b1552df569d8cd00798be2f86b7533a04aa8fd52758b016b989901b55315e6af5a1e3b9779a403f78888d6347eaafa8fe37b51796dd3797ced770ba985ddc9d0c084ba9ff4822f72d331b805"}, @NL80211_ATTR_FTM_RESPONDER={0xf4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x5b, 0x2, "9e1dab9e4eb3fdd95d9775c50297383fbba783809aaf90400bc66790be7d916946bc30e317718ac7c2280c03b1382863bda9f4db3fda60ab5d28d0785157b2434861232a5c587544056983aeb194142b143e0675d644f2"}, @NL80211_FTM_RESP_ATTR_LCI={0x8f, 0x2, "310be27b9ff453613499ad27736990edcf079459214beb26ed51eb210713db0ac387d989655db0bc0fa6aa22ca6a0b80ad141e55f0056b454c4440eafe8a8417f29f6a5bab67d7f8dc00eae8b4c10fd48b82bb07e539dbc9d8975d951a969d9bb4b05d1c45fed535ddc446585bb223f025d2cb22c5cdaee94093647f0afafcbd082db9258d7cb747e5b802"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x48, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x3d, 0x2, "498e179c39afb96760cb46edc24fe12f54d5a2c6c764cbee1bb9a7152b675a88180d982475f51c28a887da66aef99596a8c2c7583ed7e3646c"}]}, @NL80211_ATTR_IE={0x10c, 0x2a, [@ibss={0x6, 0x2, 0x5e0b}, @mesh_chsw={0x76, 0x6, {0x3, 0x0, 0x36, 0x7}}, @measure_req={0x26, 0xdd, {0xce, 0x81, 0x5, "201b9792c97028d7d58a36c83664017c5610c051564a402c3e85b52c7dccddd9e98f6ac3c79d54e32300775d2fbc326d980b1ef7e2aaf4a445b580c19ecc466a0e6f86c2a89bce025425407bd2768b9c1be2144cd8f7f358f5334ae00cd3d6194361ef29ffc9ccdfd297589cfbec53b23cdae17ae56ff96689fc1a30e11ce24cd840beee7a3e9cf6b50dd8c8019ec2a038a81beff98886a0597795074908a27f311a2f9b0116eeeb15c46d31c06e3bc77db8e1d5cb14c551c3e0fe8c109521fba974c623376b55b82867690f24b03e63e85cc12e3d4dae6f8071"}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mic={0x8c, 0x18, {0x175, "d76262a60c2f", @long="75a577bda61a51271b17d6e1a82b3a41"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x7c, 0x7f, [@chsw_timing={0x68, 0x4, {0x9, 0x3ff}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @fast_bss_trans={0x37, 0x6d, {0x1, 0x1, "521eeef9ed717931680e373e7ed30600", "3aa3576edbff86c0547414ff01e01836e3f052966bd696ae478b66f863dc883c", "e3ba7a327e99a891c9e27dc3662c5a348077e1fd27885d07413998f226d86cff", [{0x2, 0x19, "c0f480fd4ec91fb2bcf212a3ca765afecec2b18c943d36fe76"}]}}]}, @NL80211_ATTR_BEACON_TAIL={0xc7, 0xf, [@random={0x83, 0xc1, "893bdfaaaecf2cfdc2dbd2881cf20ae86e7b43577bdafd6ee68bbf15eaa5adf178dda8bf49db0bc4d0985fb0b1bc2cbabaf9225cf6b42b0cfdf8ebba9455ba6cc687c309ae9c361048f37e788e0d66b80db1c325eb9b93e64ea22b8eca116c7851ee0299c9ac2a074fd0ce4b5c253a16e01dfe5d157d5e9d2c36ede38d7387e62b7f5fc321f3f47f8b59fd45696c65b5b71a74ba839c7a3453983d9ce73e6e901ec7d8d0da21fbb0c8ac607b6d4161cd767def6874baed488e4071680ff9ffe7ab"}]}, @NL80211_ATTR_PROBE_RESP={0x404, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x61a, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x1, 0xa, 0x9, 0x7fff, 0x1, 0x8, 0x1]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0xa3, 0xf, [@channel_switch={0x25, 0x3, {0x0, 0x5, 0xf7}}, @gcr_ga={0xbd, 0x6}, @mic={0x8c, 0x10, {0xcbd, "6eca412af5b0", @short="01c809d6b8ad70b1"}}, @preq={0x82, 0x30, {{0x1, 0x1}, 0x9, 0x2, 0x0, @broadcast, 0x1, @void, 0x8001, 0x69d, 0x2, [{{}, @broadcast, 0x3}, {{0x1, 0x0, 0x1}, @device_a, 0x2}]}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @measure_req={0x26, 0x38, {0xff, 0x6, 0x4, "74f0f20f15264a39ee72bf4d52d22d1e06832d68bb40e9ef79dc4bb10123a5418978a81d3bd7b7817c3d7bd22a46d4db421885a5a7"}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6, {0xfe, 0x0, 0x22, 0x1}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x3b, 0x80, [@mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @supported_rates={0x1, 0x8, [{0x1, 0x1}, {0x9, 0x1}, {0x24}, {0x4}, {0x36}, {0x18, 0x1}, {0x6c}, {0x16, 0x1}]}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0x1, 0x6}}, @cf={0x4, 0x6, {0x6, 0xb, 0x4, 0x3}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_b, @device_b}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x3e, 0x80, [@cf={0x4, 0x6, {0x6, 0xb, 0x45, 0x73}}, @preq={0x82, 0x30, {{0x0, 0x1, 0x1}, 0x5, 0x2, 0x9, @broadcast, 0x8, @void, 0x4, 0x986, 0x2, [{{0x1}, @broadcast, 0x6}, {{0x1, 0x0, 0x1}, @device_b, 0x1}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x388, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x60, 0x3, "42cd49930a142ba332e4846b7d86aa19c1f8f40961e102b608271a0ddf90a9ad8659f8573ca3e47cc369572c338e83b0dd4fed952e4c8e99bc440287e7ca13da894bd90baafa37b5be6df88a1e3403ba4a0c5a47d85a4286e7a34f4e"}, @NL80211_FTM_RESP_ATTR_LCI={0xc7, 0x2, "4723acf18a6af3136b88add0eb20b11502ce5f905cb4f8ea4a6517105bd8a809e9155696c7b1958abfca468122d8d49c73a6eb92cf031d7128a582738d7c7b8da0ec0f1c2a1de576d1ca20a5b99ee905c1c5fa359d407b40c756b5c66cc5ee32a3c588472ae416bee9e316d5c8a376ffadc7ce9ca1ed2ffeaaca9fc42907c4dacd25cc7515f713377b197c1d9589f394f7362d0c3d3410ec642f937ff075422dd65586aa2568de346c2f119cec7cc4fe0d328283f1765533082aac06fe5336fdd0ab8a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x72, 0x3, "eee821a92f522d267fee1000c1f0c192c13722fbd8dff7565e77e62d52207e8d637057f876ccb8f92cccfb638d2a4fda7c4b86725ca5f37ed55f32d495d7219be8863217c61acffa050133f3ea82f689c2b6d573e7840d4f7aff6d73e72b7547ba56c8455fd478ff634b7fa36e57"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc0, 0x2, "180e02865c4d03bcc57e4a495207ffeaafd1137a9be42e67c9841b45895d89d0fcebb4cf4168e64c4480ff08e693603814accd2856fa547cd1b691db603478370944e2a2ffa84d4b1ea10c93b210adfa9d948695b8205736576d75f105ff600c01b0f157ecb482398eb6257d089b714193cb4b91563d79dd187d9fb7f09fc08cc18064435740b2f2a49458a1a152b0a6dd82da7246edd2813d20dce0c5f65e6497ca27df1f9dc2b9551288ea44111220770fec227022ccbfb43a4415"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x99, 0x3, "72afbb5803f6a033549afddfb761e8dcbdf12e7a7830df9d1f122636a8e6b0b753d922bc513985503672a27ec68e06302b2efd2e846aa3ceabad84aa5e833462dc50c2935104bbc67275515f790543ffb251d4573067e9c041926cfff88a55a3e57e0248b51a877b991e14e8ede685f4d6fe3559784125ed8ae91d3d2a28eaa9368df39d7c7654a55205824cc7483b26b60a47821b"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x84, 0x3, "c22cd818830a585fd9c611d4407336b7ff35fe4c7df1b8ada17aefff7ce8c94390e29c26a98934756c1242818f7c4c7ebf3c617af07e0f0ef705dbf9686e26c76ec7c59ef1b9568bc30b670a31b4d417f3039b98a8b78b0fb21db22f983f5e40cabc37885543585282beb83b78385248ce87326df4c97bd9675e024ad6302445"}]}]]}]}, 0x1f8c}, 0x1, 0x0, 0x0, 0x894}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000004300)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000042c0)={&(0x7f0000004040)={0x240, r7, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x64}}}}, [@NL80211_ATTR_FRAME={0x218, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3e4b}, @device_b, @device_a, @random="c9e9e3f9136a", {0x3, 0x7}}, 0x1, @random=0x6, 0x48, @void, @void, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0xfc, 0xf, 0x9, 0xfff8}}, @val={0x6, 0x2, 0x3660}, @void, @val={0x72, 0x6}, @void, [{0xdd, 0x17, "b297d9423c12903df178df74ce8198845d13345f9a4f8d"}, {0xdd, 0x5e, "dc03cc4a1fdb5d2d39b72585d3a71a474556830e6d0fd003baf8b5fbb7cf03127929570c4ec7b28b69e54d16b6734054e4a3c8b1bb2b92f2a379387d2a675fa15c91f9df684b3df6c58d4ca7ea34aaecf0307391a340fcf759be4ee50139"}, {0xdd, 0x98, "df088e816a88b228a19ba54f81ad0a017f8eaa00eef2a8c70b2f0e9ae582275526bffe828b9ad513adfae7a20b86ccb3a07f81c57dac403e894b18ec29493f326b5d67da01d3370bbdadb37ce2634c82e8647de64c3df4cfa348b6dbb909754b823d42ad46ba81ec28511e59d9dc4f33f98c095c06a80ee166b227afe92e6ad53931e14618c168536b05c83f413ebbcc8c14106f19251aa2"}, {0xdd, 0xc4, "2a84418d11882b59904ba11043cc9ff990585b1bc33246259ca19a1668b2f077cda22f4db53a1ffee8d46dd24d9129d9413e8ddaf1ea3983ec6564d4ea9bb193a9cbbbeafb851cae4c150adf0508c2c44e44cc5382843fb271d6d1bad73414f1803bda6cfd4fe22a5eb15ac158ba783e31b2cbe9e4670055c8dcf4d1e02b31d73dbdb5997fd919fdebb90d1ba9d39318a7ad3ce3f50790ddb70ead58770d1384340cc75463f5812c2cb81ca41cae39253b31332996701870bf253fb4901e9f2f68fc8e40"}]}}]}, 0x240}, 0x1, 0x0, 0x0, 0x40081}, 0x44) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@ipv4={""/10, ""/2, @multicast1}}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000004440)=0xe8) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@ipv4={""/10, ""/2, @multicast1}}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000004440)=0xe8) r9 = socket(0x27, 0x800, 0x7fff) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r10, 0x84, 0x7, &(0x7f0000004480)={0x400}, 0x4) sendmsg$IPSET_CMD_HEADER(r9, &(0x7f0000004580)={&(0x7f00000044c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004540)={&(0x7f0000004500)={0x24, 0xc, 0x6, 0x203, 0x0, 0x0, {0x3b4d4c9f71d926cc, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x20044040) getsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f00000045c0), &(0x7f0000004600)=0x4) (async) getsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f00000045c0), &(0x7f0000004600)=0x4) socket$packet(0x11, 0x6, 0x300) (async) r11 = socket$packet(0x11, 0x6, 0x300) getsockname$packet(r11, &(0x7f0000004640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004680)=0x14) 524.788203ms ago: executing program 5 (id=4323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x54, r3, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x3, {0x1, 0x200, 0x1b, 0x6}}}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x3}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8000000, {0x81, 0x5, 0x8}}}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="1c005a8018000180140003000600bebe"], 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r1, @ANYBLOB="00082abd7000fedbdf251c0000000c0099000400000068000000"], 0x20}, 0x1, 0x0, 0x0, 0x24001044}, 0x801) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r6, 0x89f1, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7fff, 0x85, 0x1904}, 0x50) r7 = socket$key(0xf, 0x3, 0x2) ioctl$sock_netdev_private(r6, 0x89f0, &(0x7f0000000080)="b46bc88bbab2309e068fed117b132f537a7c738e1eb1b89013b31133270a8c1994c75e3b6406dd25ef628bda7585f18ef0dd3bc187aeb0489d08413d315a38254bbd6a39e128c207c03bd19a61d6dabcc542f542de625ae9e90dbdd84aa5e172cee02982d198125aefc5a04016d14904c8c38eb449227553e530cfcee041cfcabe80e9b75a84654efe60027eec914c4bfe630e85fa92c4f636b71962e0d62d867b039ff72d8216e5163548aab78fa4bff5136bfaf60737a142bd7fe606aa65c095efcecfbaf2c10dd6f465ee2d464a0e7dd3c7cd0c01b66b367fe08239f1e172c6e1b2b0d1f02c75676b445e8a4b") sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000004300)={0x2, 0x3, 0x0, 0x2, 0x13, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2, 0xfffffffd}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_lifetime={0x4, 0x3}]}, 0x98}, 0x1, 0x7}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x54, r3, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x3, {0x1, 0x200, 0x1b, 0x6}}}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x3}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8000000, {0x81, 0x5, 0x8}}}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x800) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="1c005a8018000180140003000600bebe"], 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r1, @ANYBLOB="00082abd7000fedbdf251c0000000c0099000400000068000000"], 0x20}, 0x1, 0x0, 0x0, 0x24001044}, 0x801) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r6, 0x89f1, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7fff, 0x85, 0x1904}, 0x50) (async) socket$key(0xf, 0x3, 0x2) (async) ioctl$sock_netdev_private(r6, 0x89f0, &(0x7f0000000080)="b46bc88bbab2309e068fed117b132f537a7c738e1eb1b89013b31133270a8c1994c75e3b6406dd25ef628bda7585f18ef0dd3bc187aeb0489d08413d315a38254bbd6a39e128c207c03bd19a61d6dabcc542f542de625ae9e90dbdd84aa5e172cee02982d198125aefc5a04016d14904c8c38eb449227553e530cfcee041cfcabe80e9b75a84654efe60027eec914c4bfe630e85fa92c4f636b71962e0d62d867b039ff72d8216e5163548aab78fa4bff5136bfaf60737a142bd7fe606aa65c095efcecfbaf2c10dd6f465ee2d464a0e7dd3c7cd0c01b66b367fe08239f1e172c6e1b2b0d1f02c75676b445e8a4b") (async) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000004300)={0x2, 0x3, 0x0, 0x2, 0x13, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2, 0xfffffffd}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_lifetime={0x4, 0x3}]}, 0x98}, 0x1, 0x7}, 0x0) (async) 523.331815ms ago: executing program 4 (id=4324): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="db84feca8d5a50353cb7c7275c787114", 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x40094) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x34, 0xff, 0xf}, 0x2c) 515.052815ms ago: executing program 0 (id=4325): r0 = socket(0x18, 0x4, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffe0, 0xffff}, {0x5, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40408c1}, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3ff, 0x5, 0x8, 0x7, 0x9}, 0xf8, 0x0, 0x100, 0x2, 0x4, 0x5, 0xb, 0x1b, 0x7, 0x5, {0x6, 0x7fffffff, 0x5, 0x1, 0x3, 0x9}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000) (async) sendto$packet(r0, &(0x7f0000000300)="bb", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0xf5, r6, 0x1, 0x8, 0x6, @broadcast}, 0x14) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) r8 = socket(0x1f, 0x5, 0xffffffff) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) accept4$unix(r0, &(0x7f0000000140)=@abs, &(0x7f0000000040)=0x6e, 0x0) getsockopt(r8, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) (async) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], 0x0) (async) r9 = socket$packet(0x11, 0x3, 0x300) (async) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r10, 0x1, 0x2e, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x800, &(0x7f00000002c0)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @local}, 0x14) 436.620249ms ago: executing program 1 (id=4326): r0 = socket$igmp6(0xa, 0x3, 0x2) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="ab6ef4cdfb08d99ab27190dbcc4bb38209d992d71f5ca06691d474cf2276de6dfdd7b838b2", 0x25}], 0x1) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000500)={0x6, &(0x7f0000000440)=[{0x0, 0xa4, &(0x7f0000000080)="ac25da1fc78a3ab4b26b60229886c47a4315e27a3b29a9e3fa06768ed5690b68a59292259cab66e1343882205798d3c7baf72286b49052e443280ce28ae8813097d7b4bd7fc3cf082d1c4b45e15c06ea8b66b19f61b94236c9d1927be9980b7b6b447c42c344c9685c9de79e664cfdc58949e2f002ce604576cb5882038ec68e69fd57f49c633f50df863b219dac8e59de0037505e278bcc2af9bb007f44c8010e8f171c"}, {0x0, 0xef, &(0x7f0000000140)="6d75c5054962f2b706fbff6e974a6d6b9e42e06f0282b75618b623541d8a397e9860550fd020c7f0a6e3e4edff3559caa42a583eeee49be86b5d7995cf81493f2486f2be3f780721a2894bd0a66fded82b20c4687b94224cff00904deacd437799277c5541c93838f33f9356f76d132a3c3a0070fa4832c837c277e92831df32edc5130fbcca5c29aa6a011fb1a505a61ce00358d618293cf424686acb0c60ee1753c07819af4db4a547da03dab78a838c57f62f3b28c1e5ad0832b23f7e10601ce6acb977c169b6a1cdae90c5a2bd49488c720ac0203bf1941f1445d02c37b438f3e3d71f830db81bcc432fa9ef9a", 0x1, 0x1}, {0xeb, 0x5e, &(0x7f0000000240)="c9febefca6e50021d4171a667eefb9b9797941700d26549d8cd4452b79536ad0c005a53e7690672471a3f8b69214c810f7e304458bf3f91f33fe3337e9d5ea70b776c9b91d002720822e0f207ebc75039449ac7bf60f9561b4527b550034", 0x1, 0x5dc61245645ce2a4}, {0x7, 0x61, &(0x7f00000002c0)="3460520046adddadcbdc3c46fbb4d110544f0984d146c4c23ae33233a9c927812339d1d15662f8fbf0fd92b009d41ca5700c16f0e67fb6a18d752b850f6f4d2b0c5446f09904bfb501da2a429e50ba16149a58d11035fcc74c8eedb0438a0d39a0", 0x1, 0x1}, {0xfffffffe, 0x2e, &(0x7f0000000340)="bb10a03ab49fa0e97eb1349b34bec468b45c48e967d459d3b7c804cda6d9fd15453441ba018d5ceb5ccb7a571ba8"}, {0x7fffffff, 0xb9, &(0x7f0000000380)="d3316a081063cdca43ba60df71233c7f9422582713d33ebf799bc7679c203e184559a95f25eb8ebf676219d7892a0e8e1606e26f328b8cebf9914db8cd099ea91ebf6866dc291a55622bc030de40c74f3396accaebd835ecb9c0d72e67114ba524d053c4f5ccb681795b39544b537352caa9b0aa8183bc636b92b5fc09d4acf35ada5a6880a732f7cf3e63bd03afe08204c15a1bd63ebf25fb225c0ad61232ff3ccb3803fefb10d709584ad9eef40e59521b5062e1240132b5"}]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000540)) recvmmsg(r1, &(0x7f0000008200)=[{{&(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000600)=""/197, 0xc5}], 0x1, &(0x7f0000000740)=""/19, 0x13}, 0x40}, {{&(0x7f0000000780)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/116, 0x74}, {&(0x7f0000000880)=""/12, 0xc}, {&(0x7f00000008c0)=""/14, 0xe}, {&(0x7f0000000900)=""/237, 0xed}, {&(0x7f0000000a00)=""/144, 0x90}], 0x5}}, {{&(0x7f0000000b40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000005c80)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/172, 0xac}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/4096, 0x1000}], 0x6, &(0x7f0000005d00)=""/163, 0xa3}, 0x80000001}, {{0x0, 0x0, &(0x7f0000006080)=[{&(0x7f0000005dc0)=""/163, 0xa3}, {&(0x7f0000005e80)=""/30, 0x1e}, {&(0x7f0000005ec0)=""/116, 0x74}, {&(0x7f0000005f40)=""/55, 0x37}, {&(0x7f0000005f80)=""/239, 0xef}], 0x5, &(0x7f0000006100)=""/207, 0xcf}, 0x9}, {{&(0x7f0000006200)=@ax25={{0x3, @default}, [@netrom, @rose, @netrom, @bcast, @bcast, @bcast, @netrom, @default]}, 0x80, &(0x7f00000064c0)=[{&(0x7f0000006280)=""/170, 0xaa}, {&(0x7f0000006340)=""/156, 0x9c}, {&(0x7f0000006400)=""/149, 0x95}], 0x3, &(0x7f0000006500)=""/68, 0x44}, 0x8}, {{0x0, 0x0, &(0x7f0000006900)=[{&(0x7f0000006580)=""/214, 0xd6}, {&(0x7f0000006680)=""/251, 0xfb}, {&(0x7f0000006780)=""/148, 0x94}, {&(0x7f0000006840)=""/141, 0x8d}], 0x4, &(0x7f0000006940)=""/168, 0xa8}, 0x9}, {{0x0, 0x0, &(0x7f0000007e40)=[{&(0x7f0000006a00)=""/86, 0x56}, {&(0x7f0000006a80)=""/203, 0xcb}, {&(0x7f0000006b80)=""/71, 0x47}, {&(0x7f0000006c00)=""/94, 0x5e}, {&(0x7f0000006c80)=""/34, 0x22}, {&(0x7f0000006cc0)=""/36, 0x24}, {&(0x7f0000006d00)=""/4096, 0x1000}, {&(0x7f0000007d00)=""/14, 0xe}, {&(0x7f0000007d40)=""/161, 0xa1}, {&(0x7f0000007e00)=""/64, 0x40}], 0xa, &(0x7f0000007f00)=""/8, 0x8}, 0x6f}, {{&(0x7f0000007f40)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000081c0)=[{&(0x7f0000007fc0)=""/157, 0x9d}, {&(0x7f0000008080)=""/193, 0xc1}, {&(0x7f0000008180)=""/10, 0xa}], 0x3}, 0xf}], 0x8, 0x20, &(0x7f0000008400)) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000008440), 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000008480)=r3, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f00000084c0)={'filter\x00', 0x4}, 0x68) connect$inet(r3, &(0x7f0000008540)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000008580)=0x8, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000008680)={&(0x7f00000085c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000008640)={&(0x7f0000008600)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000086c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r5 = openat$cgroup_ro(r3, &(0x7f0000008ac0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000008b00)={0x0, 0x2}, &(0x7f0000008b40)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000008b80)={r6, 0x5}, &(0x7f0000008bc0)=0x8) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000008c00)={0x62, @empty, 0x4e22, 0x0, 'nq\x00', 0x12, 0x2, 0x41}, 0x2c) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f0000008c40)={0x0, 0x0, "91a6a90320af721d22ab8a1cba568812"}) socket(0x1e, 0x5, 0x6) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000008c80)=0x1, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_INFO(r9, 0x0, 0x60, &(0x7f0000008cc0)={'filter\x00', 0x0, [0xfffffff9, 0x8000, 0xfffffffb]}, &(0x7f0000008d40)=0x44) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000008d80), &(0x7f0000008dc0)=0x8) r10 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) poll(&(0x7f0000008e00)=[{r10, 0x241c}, {r2, 0x8ac}, {r5, 0xc000}, {r4, 0x2}, {r5, 0x21c}, {r8, 0x5}], 0x6, 0x7) ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0x82307202, &(0x7f0000008e40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$MRT_DEL_MFC_PROXY(r9, 0x0, 0xd3, &(0x7f0000009080)={@private=0xa010100, @multicast2, 0x1, "24b3d992ae6ad1c666066f080301b66a82a1b82dbc0f62fdda5b36b8e363b258", 0x1fc0000, 0x8, 0x401, 0x83}, 0x3c) 365.17431ms ago: executing program 4 (id=4327): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c000000000500"/42], 0x0) 352.439823ms ago: executing program 3 (id=4328): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x0, r5, 0x3f, 0x0, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x30}}, 0x4000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="080026007f17000008009f0006"], 0x34}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x24000040) 293.27489ms ago: executing program 5 (id=4329): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "024000dc00"}}}]}, 0x48}}, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x1c) pipe(&(0x7f0000000180)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000001c0)={'ip6gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff1e}, 0x48) (async) unshare(0xc020680) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = socket(0x2b, 0x80801, 0x1) (async) close(r3) bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}, 0x3}}, 0x10) (async) r5 = socket(0x10, 0x3, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) getsockopt$ax25_int(r6, 0x101, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async, rerun: 32) write(r5, &(0x7f0000000140)="240000005a001f001007f4d655c63589ce9e04020800038005000000ffc8bbb86ec81ffd", 0x24) (rerun: 32) 209.389584ms ago: executing program 4 (id=4330): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$pppoe(0x18, 0x1, 0x0) tee(r0, r1, 0x1ff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000180)={0x1d, r11, 0x8000000000000, {0x1, 0xf3f9f191647927c8, 0x4}, 0xfe}, 0x18) setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f00000000c0)={@private=0xa010101, @local, r11}, 0xc) 208.005672ms ago: executing program 0 (id=4331): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x3d, 0x0, 0x1}, {}, {0x6}]}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x8, [@const={0x10, 0x0, 0x0, 0xa, 0x3}, @struct={0x1, 0x6, 0x0, 0x4, 0x0, 0x6, [{0x6, 0x5, 0xfff}, {0x2, 0x1, 0x99}, {0xe, 0x3, 0x9}, {0x7, 0x0, 0x6}, {0x1, 0x1, 0x7}, {0x1, 0x5, 0x9}]}, @enum={0xc, 0x2, 0x0, 0x6, 0x4, [{0x4, 0x42b}, {0x8, 0x7}]}]}, {0x0, [0x5f, 0x61, 0x0, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000500), 0x9c, 0x0, 0x1, 0xff, 0x10000, @value=r0}, 0x28) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r2}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000, 0x1015c, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value, @value=r3}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}}, 0x0) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000080)={'syztnl0\x00', r10, 0x7, 0x80, 0x2b9a, 0xffffffff, {{0x6, 0x4, 0x2, 0x6, 0x18, 0x68, 0x0, 0x7, 0x2f, 0x0, @private=0xa010100, @empty, {[@ra={0x94, 0x4}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r11, 0x8912, &(0x7f00000001c0)={0x2000000, {0x2, 0x4e20, @broadcast}, {0x2, 0x1, @remote}, {0x2, 0x0, @broadcast}}) (async) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000280)={0x1f, @none, 0x8}, 0xa) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={r11}) ioctl$SIOCX25SCUDMATCHLEN(r12, 0x89e7, &(0x7f00000003c0)={0x25}) r13 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r13, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 126.645171ms ago: executing program 4 (id=4332): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r1, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040860) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000013c0)={'team0\x00', &(0x7f00000012c0)=@ethtool_drvinfo={0x3, "b1015904849180e9a33bba5c09d84bcfaaf125ea71d525c3ca8d29f38ca7de3d", "3e905dc5345701120000e7d653ecc234c1c17000", "e27209058368b97e07c6a36bd71bf50faaaa4cc459b461563d96fcf43cef9556", "cb2da74058cb8d204d1fcfe681724ba1c43f448a6dd17bc66b6ca749694f6aba", "942b254fd347c27ba8eac26cb159a5d6fca9f2ebd5f690c7d1aae8c50669cfb9", "5fc03157508709b83ecd0a7b"}}) 94.067037ms ago: executing program 3 (id=4333): socket$unix(0x1, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'vcan0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x800003e}, 0x80, &(0x7f0000000080)}, 0x2800c0c4) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x41800}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmmsg$inet(r9, &(0x7f0000006540)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="b3", 0x1}], 0x1}}], 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r7, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010001ffffcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000400012800e0001006970366772657461700000002c00028014000700fc00000000000000000000000000ee0014000600fc02000000000000000000000000000008000a00", @ANYRES32=r8, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) connect$can_bcm(r1, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000010500"/16, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0100006001"], 0x48}}, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) 20.712661ms ago: executing program 5 (id=4334): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x20, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5, 0x0, 0x4000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) 15.30009ms ago: executing program 4 (id=4335): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r3, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x2c, 0xfc0, 0x68, 0x0, 0x2, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e1e, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xb, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b105a456f064be0300ffe61e"}, @window={0x3, 0x3, 0x6}]}}, {"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"}}}}, 0xfce) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r6}, @CGW_DST_IF={0x8, 0xa, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 0s ago: executing program 0 (id=4336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=@delsa={0x160, 0x11, 0x4, 0x70bd2c, 0x25dfdbfe, {@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4d2, 0x2, 0x33}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd28, 0x879}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}, @tmpl={0xc4, 0x5, [{{@in6=@remote, 0x4d2, 0x32}, 0x2, @in=@multicast1, 0x3504, 0x3, 0x2, 0x3, 0x2, 0x6, 0x5}, {{@in6=@local, 0x4d6, 0x6c}, 0x8, @in6=@mcast2, 0x3501, 0x4, 0x1, 0x8, 0xfff, 0xfb, 0xfffffff8}, {{@in=@local, 0x4d6, 0x2b}, 0xa, @in6=@empty, 0x3501, 0x3, 0x3, 0x15, 0x0, 0xff, 0x1000}]}, @mark={0xc, 0x15, {0x35075b, 0x8001}}, @tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x2b}, 0xa, @in=@remote, 0x34ff, 0x1, 0x0, 0xa, 0x7, 0x3}]}, @mark={0xc, 0x15, {0x350759, 0x9}}]}, 0x160}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) kernel console output (not intermixed with test programs): ype 3 has an invalid length. [ 386.556957][T15370] netlink: 'syz.2.2584': attribute type 3 has an invalid length. [ 386.587757][T15370] netlink: 'syz.2.2584': attribute type 3 has an invalid length. [ 386.601799][T15370] netlink: 'syz.2.2584': attribute type 3 has an invalid length. [ 386.614069][T15370] netlink: 'syz.2.2584': attribute type 3 has an invalid length. [ 386.616287][T15376] bridge0: port 1(ipvlan0) entered blocking state [ 386.629343][T15376] bridge0: port 1(ipvlan0) entered disabled state [ 386.636172][T15370] netlink: 'syz.2.2584': attribute type 3 has an invalid length. [ 386.644244][T15370] netlink: 'syz.2.2584': attribute type 3 has an invalid length. [ 386.649555][T15376] ipvlan0: entered allmulticast mode [ 386.653283][T15370] netlink: 'syz.2.2584': attribute type 3 has an invalid length. [ 386.665554][T15376] bridge0: entered allmulticast mode [ 386.668138][T15378] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2585'. [ 386.673288][T15376] ipvlan0: left allmulticast mode [ 386.685951][T15376] bridge0: left allmulticast mode [ 386.977223][ T106] IPVS: starting estimator thread 0... [ 387.091194][T15407] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2593'. [ 387.105664][T15400] IPVS: using max 36 ests per chain, 86400 per kthread [ 387.148995][T15407] NCSI netlink: No device for ifindex 813332851 [ 387.287223][T15422] syzkaller0: entered promiscuous mode [ 387.300107][T15422] syzkaller0: entered allmulticast mode [ 387.773590][T15457] 9: entered promiscuous mode [ 387.790187][T15459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2612'. [ 388.000372][T15471] 8021q: adding VLAN 0 to HW filter on device bond7 [ 388.180950][T15480] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2616'. [ 388.222313][T15480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2616'. [ 388.264769][T15480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2616'. [ 388.313181][T15480] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2616'. [ 388.446566][T15487] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 388.478158][T15487] x_tables: duplicate underflow at hook 1 [ 388.568495][T15495] bond9: entered promiscuous mode [ 388.574180][T15495] 8021q: adding VLAN 0 to HW filter on device bond9 [ 388.649264][T15495] bond9: (slave bridge4): making interface the new active one [ 388.657205][T15495] bridge4: entered promiscuous mode [ 388.665025][T15495] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 388.719806][T15508] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2625'. [ 388.755871][T15506] syzkaller0: entered promiscuous mode [ 388.773615][T15510] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 388.781821][T15506] syzkaller0: entered allmulticast mode [ 388.891072][ T30] audit: type=1800 audit(1768413864.593:8): pid=15506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2626" name="memory.events" dev="tmpfs" ino=2594 res=0 errno=0 [ 388.934149][ T30] audit: type=1804 audit(1768413864.593:9): pid=15506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2626" name="/newroot/508/memory.events" dev="tmpfs" ino=2594 res=1 errno=0 [ 389.085834][T15522] syzkaller0: entered promiscuous mode [ 389.091338][T15522] syzkaller0: entered allmulticast mode [ 389.231776][T15522] bond12: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 389.290391][T15522] bond12 (unregistering): Released all slaves [ 389.353514][T15541] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2634'. [ 389.967799][T15566] netlink: 'syz.4.2639': attribute type 11 has an invalid length. [ 389.980028][T15569] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 390.218854][T15600] sock: sock_timestamping_bind_phc: sock not bind to device [ 390.273986][T15590] 8021q: adding VLAN 0 to HW filter on device bond12 [ 390.301147][T15604] bond12: (slave veth0_to_bond): making interface the new active one [ 390.315187][T15604] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 390.345045][T15590] bond12: entered promiscuous mode [ 390.350437][T15590] veth0_to_bond: entered promiscuous mode [ 390.356969][T15590] bond12: entered allmulticast mode [ 390.362173][T15590] veth0_to_bond: entered allmulticast mode [ 390.493462][T15615] syzkaller1: entered promiscuous mode [ 390.500141][T15615] syzkaller1: entered allmulticast mode [ 390.509104][T15615] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 390.969829][T15631] netlink: 'syz.3.2658': attribute type 11 has an invalid length. [ 391.062333][T15636] gretap0: entered promiscuous mode [ 391.209653][T15642] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 391.228347][T15642] bond7 (unregistering): Released all slaves [ 391.275171][T15647] sctp: [Deprecated]: syz.2.2663 (pid 15647) Use of int in max_burst socket option deprecated. [ 391.275171][T15647] Use struct sctp_assoc_value instead [ 391.293570][T15649] validate_nla: 63 callbacks suppressed [ 391.293590][T15649] netlink: 'syz.1.2664': attribute type 1 has an invalid length. [ 391.380872][T15649] 8021q: adding VLAN 0 to HW filter on device bond7 [ 391.843851][T15675] __nla_validate_parse: 13 callbacks suppressed [ 391.843871][T15675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2672'. [ 392.162058][T15697] : entered promiscuous mode [ 392.173924][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2680'. [ 392.258933][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2680'. [ 392.402688][T15711] xt_cgroup: invalid path, errno=-2 [ 392.580571][T15723] siw: device registration error -23 [ 392.586866][T15727] siw: device registration error -23 [ 392.592895][T15726] netlink: 'syz.0.2688': attribute type 29 has an invalid length. [ 392.645123][T15729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2687'. [ 392.654494][T15726] netlink: 'syz.0.2688': attribute type 29 has an invalid length. [ 393.057241][T15760] Cannot find add_set index 65532 as target [ 393.174061][T15765] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 393.198333][T15765] bond7 (unregistering): Released all slaves [ 393.470458][T15792] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2706'. [ 394.001893][T15825] netlink: 'syz.1.2717': attribute type 10 has an invalid length. [ 394.045220][T15839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2722'. [ 394.079220][T15825] batman_adv: batadv0: Adding interface: netdevsim0 [ 394.095448][T15825] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.144871][T15844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2722'. [ 394.159390][T15825] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 394.180994][T15841] netlink: 808 bytes leftover after parsing attributes in process `syz.3.2724'. [ 394.280997][T15841] netlink: 'syz.3.2724': attribute type 1 has an invalid length. [ 394.294624][T15852] sit3: entered promiscuous mode [ 394.300699][T15852] sit3: entered allmulticast mode [ 394.369707][T15844] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2722'. [ 394.462189][T15854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2722'. [ 394.700818][T15887] pim6reg1: entered promiscuous mode [ 394.716359][T15887] pim6reg1: entered allmulticast mode [ 394.746647][T15887] pim6reg1: left promiscuous mode [ 394.756409][T15887] pim6reg1: left allmulticast mode [ 395.326714][T15927] ip6t_srh: unknown srh invflags 4000 [ 395.430208][T15930] netlink: 'syz.3.2746': attribute type 1 has an invalid length. [ 396.724871][T16037] lo: left promiscuous mode [ 396.734690][T16037] tunl0: left promiscuous mode [ 396.747372][T16037] gre0: left promiscuous mode [ 396.752299][T16037] gretap0: left promiscuous mode [ 396.758271][T16037] erspan0: left promiscuous mode [ 396.763434][T16037] ip_vti0: left promiscuous mode [ 397.264497][T16037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.289507][T16037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.567961][T16037] bond1: left promiscuous mode [ 397.585731][T16037] bond1: left allmulticast mode [ 397.657836][T16037] bond2: left allmulticast mode [ 397.662716][T16037] bond2: left promiscuous mode [ 397.671761][T16037] macvlan0: left promiscuous mode [ 397.677287][T16037] macvlan0: left allmulticast mode [ 397.774671][T16037] bond6: left promiscuous mode [ 397.843838][ T36] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.875929][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.903305][ T36] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.930125][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.966748][ T36] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.009153][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.045376][ T36] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.060770][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.139944][T16074] netlink: 'syz.3.2789': attribute type 10 has an invalid length. [ 398.145857][T16069] syzkaller0: entered promiscuous mode [ 398.155733][T16069] syzkaller0: entered allmulticast mode [ 398.740371][T16116] syzkaller0: entered promiscuous mode [ 398.746275][T16116] syzkaller0: entered allmulticast mode [ 399.053620][T16135] netlink: 'syz.0.2801': attribute type 5 has an invalid length. [ 399.122083][T16140] __nla_validate_parse: 11 callbacks suppressed [ 399.122102][T16140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2803'. [ 399.166970][T16140] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2803'. [ 399.252673][T16151] veth0: entered promiscuous mode [ 399.261517][T16150] veth0: left promiscuous mode [ 399.455165][T16159] netlink: 'syz.3.2811': attribute type 1 has an invalid length. [ 399.466461][T16159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.499773][T16200] netlink: 'syz.0.2824': attribute type 21 has an invalid length. [ 400.561509][T16200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2824'. [ 400.571914][T16202] Cannot find add_set index 0 as target [ 400.576013][T16204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2826'. [ 400.587606][T16204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2826'. [ 400.598373][T16204] netlink: 'syz.1.2826': attribute type 3 has an invalid length. [ 400.612029][T16200] netlink: 'syz.0.2824': attribute type 21 has an invalid length. [ 400.843140][T16218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2829'. [ 401.056663][T16233] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 401.090090][T16233] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 401.103494][T16245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2835'. [ 401.269076][T16247] lo: entered promiscuous mode [ 401.446874][T16264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2841'. [ 401.488634][T16264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2841'. [ 401.600817][T16270] netem: change failed [ 401.640400][T16273] syzkaller0: entered promiscuous mode [ 401.650053][T16273] syzkaller0: entered allmulticast mode [ 401.723672][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2848'. [ 402.126423][T16311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.214309][T16306] macvtap3: entered promiscuous mode [ 402.230834][T16306] macvtap3: entered allmulticast mode [ 402.251585][T16313] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 402.331897][T16318] netlink: 'syz.1.2858': attribute type 1 has an invalid length. [ 402.442010][T16323] netlink: 'syz.4.2861': attribute type 21 has an invalid length. [ 402.466466][T16323] IPv6: NLM_F_CREATE should be specified when creating new route [ 402.522896][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 402.532621][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 402.541571][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 402.550587][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 402.560393][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 402.576495][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 402.583913][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 402.591767][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 402.604810][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 402.612863][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 402.679904][T16335] bridge_slave_0: left allmulticast mode [ 402.697930][T16335] bridge_slave_0: left promiscuous mode [ 402.703753][T16335] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.753331][T16335] bridge_slave_1: left allmulticast mode [ 402.776782][T16335] bridge_slave_1: left promiscuous mode [ 402.792749][T16335] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.819552][T16335] bond12: (slave veth0_to_bond): Releasing active interface [ 402.836168][T16335] veth0_to_bond: left promiscuous mode [ 402.856658][T16335] veth0_to_bond: left allmulticast mode [ 402.883380][T16335] bond0: (slave bond_slave_0): Releasing backup interface [ 402.912652][T16335] bond0: (slave bond_slave_1): Releasing backup interface [ 402.936363][T16335] team_slave_0: left promiscuous mode [ 402.954716][T16335] team0: Port device team_slave_0 removed [ 402.973870][T16335] team_slave_1: left promiscuous mode [ 403.005279][T16335] team0: Port device team_slave_1 removed [ 403.020713][T16335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.029151][T16335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.041745][T16335] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 403.237257][T16371] bridge0: port 1(veth0_to_bridge) entered blocking state [ 403.244930][T16371] bridge0: port 1(veth0_to_bridge) entered disabled state [ 403.283448][T16371] veth0_to_bridge: entered allmulticast mode [ 403.310737][T16371] veth0_to_bridge: entered promiscuous mode [ 403.335282][T16371] bridge0: port 1(veth0_to_bridge) entered blocking state [ 403.342992][T16371] bridge0: port 1(veth0_to_bridge) entered listening state [ 403.564406][T16394] netlink: 'syz.2.2879': attribute type 2 has an invalid length. [ 403.679804][T16404] lo: MTU too low for tipc bearer [ 403.684907][T16404] tipc: Enabling of bearer rejected, failed to enable media [ 403.744893][T16401] syzkaller1: entered promiscuous mode [ 403.759264][T16401] syzkaller1: entered allmulticast mode [ 404.217836][T16428] __nla_validate_parse: 21 callbacks suppressed [ 404.217855][T16428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2888'. [ 404.262173][T16428] netlink: 'syz.4.2888': attribute type 3 has an invalid length. [ 404.270144][T16428] netlink: 'syz.4.2888': attribute type 3 has an invalid length. [ 404.278958][T16428] netlink: 'syz.4.2888': attribute type 3 has an invalid length. [ 404.333056][T16442] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2892'. [ 404.487761][T16327] chnl_net:caif_netlink_parms(): no params data found [ 404.496706][T16448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.523560][T16448] netlink: 'syz.1.2893': attribute type 1 has an invalid length. [ 404.581116][T16448] bond9: (slave xfrm2): The slave device specified does not support setting the MAC address [ 404.591905][T16448] bond9: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 404.605152][T16448] bond9: (slave xfrm2): making interface the new active one [ 404.613814][T16448] bond9: (slave xfrm2): Enslaving as an active interface with an up link [ 404.640642][T16448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2893'. [ 404.706573][ T5841] Bluetooth: hci5: command tx timeout [ 404.736055][T16448] bond9 (unregistering): (slave xfrm2): Releasing backup interface [ 404.756619][T16448] bond9 (unregistering): Released all slaves [ 404.907110][T16467] syzkaller0: entered promiscuous mode [ 404.912890][T16467] syzkaller0: entered allmulticast mode [ 404.983963][T16479] lo: Caught tx_queue_len zero misconfig [ 405.004138][T16486] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 405.007477][T16327] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.021605][T16327] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.030469][T16327] bridge_slave_0: entered allmulticast mode [ 405.047488][T16327] bridge_slave_0: entered promiscuous mode [ 405.189680][T16327] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.206382][T16327] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.214276][T16327] bridge_slave_1: entered allmulticast mode [ 405.241306][T16327] bridge_slave_1: entered promiscuous mode [ 405.337845][T16499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'. [ 405.363133][T16327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.387873][T16327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.458847][T16505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2908'. [ 405.481173][T16327] team0: Port device team_slave_0 added [ 405.492681][T16507] veth0: entered promiscuous mode [ 405.510143][T16327] team0: Port device team_slave_1 added [ 405.556282][T16506] veth0: left promiscuous mode [ 405.621175][T16327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.642603][T16327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.694084][T16327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.719460][T16327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.738131][T16327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.787584][T16327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.813771][T16524] x_tables: unsorted underflow at hook 4 [ 405.963806][T16327] hsr_slave_0: entered promiscuous mode [ 405.983040][T16327] hsr_slave_1: entered promiscuous mode [ 405.991709][T16327] debugfs: 'hsr0' already exists in 'hsr' [ 405.997862][T16327] Cannot create hsr debugfs directory [ 406.128109][T16536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2919'. [ 406.164815][T16538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2920'. [ 406.188159][T16541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.333289][T16550] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2924'. [ 406.389212][T16552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2923'. [ 406.426223][T16555] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000 [ 406.614387][T16569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2928'. [ 406.744868][T16327] batman_adv: batadv0: Removing interface: netdevsim0 [ 406.785925][ T5841] Bluetooth: hci5: command tx timeout [ 406.970435][T16581] syzkaller0: entered promiscuous mode [ 406.986643][T16581] syzkaller0: entered allmulticast mode [ 407.105722][T16327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 407.132038][T16327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 407.159709][T16327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 407.183786][T16327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 407.202925][T16587] syzkaller0: entered promiscuous mode [ 407.208916][T16587] syzkaller0: entered allmulticast mode [ 407.691506][T16609] syzkaller0: entered promiscuous mode [ 407.706808][T16609] syzkaller0: entered allmulticast mode [ 407.782198][T16625] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 408.326998][T16654] sctp: [Deprecated]: syz.0.2945 (pid 16654) Use of int in max_burst socket option. [ 408.326998][T16654] Use struct sctp_assoc_value instead [ 408.868202][ T5841] Bluetooth: hci5: command tx timeout [ 409.319939][T16327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.390407][T16327] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.417637][ T7358] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.424880][ T7358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.487738][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.494935][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.512490][T16660] __nla_validate_parse: 2 callbacks suppressed [ 409.512511][T16660] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2948'. [ 409.585201][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2950'. [ 409.614718][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2950'. [ 409.656931][T16664] netlink: 'syz.2.2950': attribute type 14 has an invalid length. [ 409.679341][T16664] netlink: 'syz.2.2950': attribute type 13 has an invalid length. [ 409.875659][T16684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.901520][T16684] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2953'. [ 409.928405][T16327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.952311][T16687] xt_hashlimit: size too large, truncated to 1048576 [ 410.020726][T16327] veth0_vlan: entered promiscuous mode [ 410.060882][T16327] veth1_vlan: entered promiscuous mode [ 410.081413][T16692] netlink: 'syz.2.2954': attribute type 1 has an invalid length. [ 410.113524][T16692] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2954'. [ 410.164061][T16327] veth0_macvtap: entered promiscuous mode [ 410.188977][T16327] veth1_macvtap: entered promiscuous mode [ 410.223899][T16327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.248521][T16327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.338342][T11729] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.349343][T11729] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.361253][T11729] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.430704][T11729] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.553355][T16715] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2960'. [ 410.688343][ T7365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.704875][ T7365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.764009][T16725] netlink: 'syz.2.2965': attribute type 4 has an invalid length. [ 410.773875][T11729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.774583][T16725] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2965'. [ 410.792696][T11729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.800382][T16725] `: renamed from bond0 [ 410.816744][T16723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2964'. [ 410.836756][T16723] veth0_to_bridge: left allmulticast mode [ 410.842620][T16723] veth0_to_bridge: left promiscuous mode [ 410.879727][T16723] bridge0: port 1(veth0_to_bridge) entered disabled state [ 410.953326][ T5841] Bluetooth: hci5: command tx timeout [ 411.222810][T16745] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2969'. [ 411.266875][T16740] syzkaller0: entered promiscuous mode [ 411.273115][T16740] syzkaller0: entered allmulticast mode [ 411.438800][T16751] netlink: 'syz.4.2970': attribute type 21 has an invalid length. [ 411.454190][T16751] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2970'. [ 411.744786][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 411.755366][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 411.764137][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 411.772772][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 411.811078][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 413.179031][T16773] x_tables: duplicate underflow at hook 1 [ 413.237320][T16782] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 413.451080][T16791] netlink: 'syz.1.2978': attribute type 2 has an invalid length. [ 413.577821][T16798] netlink: 'syz.4.2981': attribute type 2 has an invalid length. [ 413.811144][T16814] tipc: Enabled bearer , priority 0 [ 413.830245][T16814] syzkaller0: entered promiscuous mode [ 413.860885][T16814] syzkaller0: entered allmulticast mode [ 413.900788][T16816] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 413.906965][T16819] xt_nat: multiple ranges no longer supported [ 413.910428][ T52] Bluetooth: hci2: command tx timeout [ 413.929659][T16817] netlink: 'syz.4.2987': attribute type 20 has an invalid length. [ 413.954130][T16814] tipc: Resetting bearer [ 413.990344][T16814] veth0: Caught tx_queue_len zero misconfig [ 414.020063][T16813] tipc: Resetting bearer [ 414.078108][T16813] tipc: Disabling bearer [ 414.181250][T16835] FAULT_INJECTION: forcing a failure. [ 414.181250][T16835] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 414.204311][T16835] CPU: 0 UID: 0 PID: 16835 Comm: syz.4.2992 Not tainted syzkaller #0 PREEMPT(full) [ 414.204337][T16835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.204349][T16835] Call Trace: [ 414.204357][T16835] [ 414.204366][T16835] dump_stack_lvl+0xe8/0x150 [ 414.204395][T16835] should_fail_ex+0x414/0x560 [ 414.204431][T16835] _copy_from_user+0x2d/0xb0 [ 414.204455][T16835] kstrtouint_from_user+0xc4/0x170 [ 414.204478][T16835] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 414.204514][T16835] proc_fail_nth_write+0x88/0x200 [ 414.204535][T16835] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 414.204562][T16835] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 414.204584][T16835] vfs_write+0x27e/0xb30 [ 414.204612][T16835] ? __pfx_vfs_write+0x10/0x10 [ 414.204630][T16835] ? __fget_files+0x2a/0x420 [ 414.204658][T16835] ? __fget_files+0x3a0/0x420 [ 414.204677][T16835] ? __fget_files+0x2a/0x420 [ 414.204707][T16835] ksys_write+0x145/0x250 [ 414.204727][T16835] ? __pfx_ksys_write+0x10/0x10 [ 414.204758][T16835] do_syscall_64+0xec/0xf80 [ 414.204777][T16835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.204795][T16835] ? trace_irq_disable+0x37/0x100 [ 414.204819][T16835] ? clear_bhb_loop+0x60/0xb0 [ 414.204841][T16835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.204859][T16835] RIP: 0033:0x7efd9b78e1ff [ 414.204876][T16835] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 414.204892][T16835] RSP: 002b:00007efd9c5cd030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 414.204913][T16835] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efd9b78e1ff [ 414.204927][T16835] RDX: 0000000000000001 RSI: 00007efd9c5cd0a0 RDI: 000000000000000e [ 414.204939][T16835] RBP: 00007efd9c5cd090 R08: 0000000000000000 R09: 0000000000000000 [ 414.204950][T16835] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 414.204961][T16835] R13: 00007efd9b9e6128 R14: 00007efd9b9e6090 R15: 00007ffea6726f88 [ 414.204995][T16835] [ 414.569758][T16848] ipt_rpfilter: unknown options [ 414.890333][T16870] __nla_validate_parse: 9 callbacks suppressed [ 414.890353][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3002'. [ 414.960456][T16766] chnl_net:caif_netlink_parms(): no params data found [ 415.222337][T16894] netlink: 'syz.0.3004': attribute type 2 has an invalid length. [ 415.323765][T16900] netlink: 'syz.4.3006': attribute type 1 has an invalid length. [ 415.343329][T16898] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3005'. [ 415.490271][T16914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3010'. [ 415.504597][T16766] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.512272][T16917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3008'. [ 415.521542][T16766] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.521772][T16766] bridge_slave_0: entered allmulticast mode [ 415.523508][T16766] bridge_slave_0: entered promiscuous mode [ 415.545164][T16766] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.553278][T16766] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.561535][T16766] bridge_slave_1: entered allmulticast mode [ 415.572353][T16766] bridge_slave_1: entered promiscuous mode [ 415.580889][T16918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3008'. [ 415.590439][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3008'. [ 415.600270][T16918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3008'. [ 415.657867][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3008'. [ 415.691772][T16766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.748607][T16766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.773630][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3015'. [ 415.789356][T16930] netlink: 'syz.4.3014': attribute type 3 has an invalid length. [ 415.798502][T16930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3014'. [ 415.866658][T16766] team0: Port device team_slave_0 added [ 415.952314][T16936] openvswitch: netlink: Tunnel attr 44 out of range max 16 [ 415.960442][T16937] openvswitch: netlink: Tunnel attr 44 out of range max 16 [ 415.982433][T16766] team0: Port device team_slave_1 added [ 415.988165][ T52] Bluetooth: hci2: command tx timeout [ 416.006290][T16935] macvtap1: entered promiscuous mode [ 416.011663][T16935] bond2: entered promiscuous mode [ 416.017335][T16935] macvtap1: entered allmulticast mode [ 416.023180][T16935] bond2: entered allmulticast mode [ 416.029152][T16935] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 416.043711][T16936] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 416.075801][T16940] macvtap2: entered promiscuous mode [ 416.084917][T16940] macvtap2: entered allmulticast mode [ 416.251350][T16766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.275650][T16766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.346821][T16766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.448446][T16766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.466532][T16766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.496871][T16766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.652976][T16976] bond13: Unable to set down delay as MII monitoring is disabled [ 416.672652][T16976] bond13 (unregistering): Released all slaves [ 416.737537][T16766] hsr_slave_0: entered promiscuous mode [ 416.744284][T16766] hsr_slave_1: entered promiscuous mode [ 416.763410][T16766] debugfs: 'hsr0' already exists in 'hsr' [ 416.769750][T16766] Cannot create hsr debugfs directory [ 416.798893][T16989] netlink: 'syz.1.3028': attribute type 19 has an invalid length. [ 417.300457][T16766] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 417.432419][T16766] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 417.454892][T17032] netlink: 'syz.3.3042': attribute type 13 has an invalid length. [ 417.482360][T17029] bond0: (slave bridge_slave_1): Releasing backup interface [ 417.509046][T17029] bond0: (slave bond_slave_0): Releasing backup interface [ 417.518546][T17029] bond0: (slave bond_slave_1): Releasing backup interface [ 417.533606][T17029] team0: Port device team_slave_0 removed [ 417.543562][T17029] team0: Port device team_slave_1 removed [ 417.550160][T17029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.561113][T17029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.570075][T17029] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 417.620976][ T5885] syz1: Port: 1 Link DOWN [ 417.652538][T16766] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 418.033545][T16766] `: (slave netdevsim0): Releasing backup interface [ 418.067007][ T52] Bluetooth: hci2: command tx timeout [ 418.081623][T16766] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 418.401079][T16766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 418.440502][T16766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 418.459659][T16766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 418.474481][T16766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 418.591811][T17106] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 418.642252][T16766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.693357][T16766] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.750181][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.757397][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.814655][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.820652][T17115] can: request_module (can-proto-4) failed. [ 418.821852][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.319231][T17148] syzkaller0: entered promiscuous mode [ 419.332920][T17148] syzkaller0: entered allmulticast mode [ 419.392157][T16766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.482908][T16766] veth0_vlan: entered promiscuous mode [ 419.518707][T16766] veth1_vlan: entered promiscuous mode [ 419.602363][T16766] veth0_macvtap: entered promiscuous mode [ 419.636977][T16766] veth1_macvtap: entered promiscuous mode [ 419.686654][T17169] netlink: 'syz.3.3070': attribute type 1 has an invalid length. [ 419.720198][T16766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.733902][T16766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.753310][T11729] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.770669][T11729] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.797756][T17175] veth1_macvtap: left promiscuous mode [ 419.859464][T11729] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.896436][T11729] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.906438][T17176] netlink: 'syz.0.3071': attribute type 3 has an invalid length. [ 419.917236][T17181] __nla_validate_parse: 75 callbacks suppressed [ 419.917256][T17181] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3073'. [ 419.940079][T17181] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3073'. [ 419.973918][T17183] xt_l2tp: unknown flags: 10 [ 420.148861][ T52] Bluetooth: hci2: command tx timeout [ 420.160237][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.184168][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.250154][T17192] netlink: 'syz.4.3077': attribute type 1 has an invalid length. [ 420.283368][T17188] openvswitch: netlink: Multiple metadata blocks provided [ 420.293854][ T7351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.304033][ T7351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.877227][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3084'. [ 420.887666][T17219] syzkaller0: entered allmulticast mode [ 420.905973][T17219] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 420.959727][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 420.969298][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 420.977327][T17224] x_tables: duplicate underflow at hook 1 [ 420.990008][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 421.000249][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 421.010622][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 421.237881][T17234] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3090'. [ 421.411769][T17249] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 421.479870][T17251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3095'. [ 421.526497][T17251] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3095'. [ 421.672782][T17268] netlink: 'syz.1.3099': attribute type 1 has an invalid length. [ 421.889273][T17279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3101'. [ 421.998481][T17286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3105'. [ 422.030864][T17290] netlink: 'syz.2.3104': attribute type 4 has an invalid length. [ 422.259479][T17297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3107'. [ 422.597606][T17320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3113'. [ 422.647038][T17221] chnl_net:caif_netlink_parms(): no params data found [ 423.075695][T17221] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.082864][T17221] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.106327][ T5841] Bluetooth: hci3: command tx timeout [ 423.144646][T17221] bridge_slave_0: entered allmulticast mode [ 423.174665][T17221] bridge_slave_0: entered promiscuous mode [ 423.212547][T17221] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.226228][T17221] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.233627][T17221] bridge_slave_1: entered allmulticast mode [ 423.242453][T17221] bridge_slave_1: entered promiscuous mode [ 423.279975][T17361] openvswitch: netlink: Key type 132 is out of range max 32 [ 423.364200][T17366] netlink: 'syz.0.3125': attribute type 29 has an invalid length. [ 423.374746][T17365] netlink: 'syz.0.3125': attribute type 29 has an invalid length. [ 423.398030][T17221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.431533][T17221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.454893][T17371] netlink: 'syz.3.3126': attribute type 5 has an invalid length. [ 423.503396][T17371] geneve2: entered promiscuous mode [ 423.509674][T17371] geneve2: entered allmulticast mode [ 423.518725][T17378] netlink: 'syz.3.3126': attribute type 5 has an invalid length. [ 423.531855][ T36] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 423.554504][T17221] team0: Port device team_slave_0 added [ 423.579029][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 423.602803][ T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 423.629035][T17221] team0: Port device team_slave_1 added [ 423.668479][T17383] netlink: 'syz.2.3131': attribute type 1 has an invalid length. [ 423.678752][ T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 423.720618][T17221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.728601][T17221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.760640][T17221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.786275][T17221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.804566][T17221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.858682][T17221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.914658][T17393] tipc: Enabling of bearer rejected, failed to enable media [ 423.927207][T17397] tipc: Enabling of bearer rejected, media not registered [ 424.024102][T17402] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 424.041651][T17221] hsr_slave_0: entered promiscuous mode [ 424.053190][T17221] hsr_slave_1: entered promiscuous mode [ 424.059926][T17221] debugfs: 'hsr0' already exists in 'hsr' [ 424.066794][T17221] Cannot create hsr debugfs directory [ 424.073073][T17402] netlink: 'syz.3.3135': attribute type 2 has an invalid length. [ 424.250683][T17409] bridge2: entered promiscuous mode [ 424.264285][T17409] bridge2: entered allmulticast mode [ 424.279599][T17409] team0: Port device bridge2 added [ 424.301719][T17409] bridge0: port 3(team0) entered blocking state [ 424.311453][T17409] bridge0: port 3(team0) entered disabled state [ 424.321193][T17409] team0: entered allmulticast mode [ 424.327326][T17409] team_slave_0: entered allmulticast mode [ 424.333078][T17409] team_slave_1: entered allmulticast mode [ 424.342207][T17409] team0: entered promiscuous mode [ 424.349343][T17409] team_slave_0: entered promiscuous mode [ 424.355852][T17409] team_slave_1: entered promiscuous mode [ 424.362609][T17409] bridge0: port 3(team0) entered blocking state [ 424.369052][T17409] bridge0: port 3(team0) entered forwarding state [ 424.608685][T17221] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.641515][T17221] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.722333][T17450] netlink: 'syz.1.3150': attribute type 10 has an invalid length. [ 424.752388][T17450] team0: entered promiscuous mode [ 424.778730][T17450] macvlan0: entered promiscuous mode [ 424.798469][T17450] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.867200][T17221] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.881496][T17221] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.033620][T17221] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.059799][T17221] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.150345][T17460] __nla_validate_parse: 10 callbacks suppressed [ 425.150364][T17460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'. [ 425.150957][T17221] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.189831][ T5841] Bluetooth: hci3: command tx timeout [ 425.194274][T17221] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.347494][T17484] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3157'. [ 425.500568][T17221] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 425.523511][T17489] pim6reg1: entered promiscuous mode [ 425.536173][T17489] pim6reg1: entered allmulticast mode [ 425.565811][T17221] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 425.639506][T17221] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 425.664082][T17221] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 425.829175][T17507] batadv_slave_0: Caught tx_queue_len zero misconfig [ 426.106222][T17530] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3166'. [ 426.238919][T17221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.288671][T17221] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.332549][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.339814][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.399293][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.406649][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.443038][T17540] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3170'. [ 426.531750][T17545] netlink: 'syz.2.3172': attribute type 11 has an invalid length. [ 426.556971][T17545] netlink: 'syz.2.3172': attribute type 11 has an invalid length. [ 426.572953][T17545] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3172'. [ 426.596953][T17546] netlink: 'syz.2.3172': attribute type 11 has an invalid length. [ 426.604874][T17546] netlink: 'syz.2.3172': attribute type 11 has an invalid length. [ 426.635180][T17546] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3172'. [ 427.020499][T17221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.267237][ T5841] Bluetooth: hci3: command tx timeout [ 427.632234][T17581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3178'. [ 427.743373][T17221] veth0_vlan: entered promiscuous mode [ 427.768463][T17221] veth1_vlan: entered promiscuous mode [ 427.911459][T17221] veth0_macvtap: entered promiscuous mode [ 427.941816][T17221] veth1_macvtap: entered promiscuous mode [ 428.004832][T17221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.026958][T17221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.082063][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.099854][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.119186][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.139395][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.293398][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.315184][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.500287][ T7364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.516197][ T7364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.625805][T17610] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 428.960322][T17617] bond0: (slave caif0): Error: Device type is different from other slaves [ 429.012626][T17615] openvswitch: netlink: Message has 592 unknown bytes. [ 429.041351][T17615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.063207][T17621] pim6reg1: entered promiscuous mode [ 429.088103][T17621] pim6reg1: entered allmulticast mode [ 429.345522][ T5841] Bluetooth: hci3: command tx timeout [ 429.426247][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 429.441133][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 429.450175][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 429.458185][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 429.473549][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 429.674646][T17640] IPVS: ip_vs_add_dest(): server weight less than zero [ 429.781513][T17646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3198'. [ 429.881092][ T7364] batman_adv: batadv0: Removing interface: netdevsim0 [ 429.930500][ T912] IPVS: starting estimator thread 0... [ 430.025609][T17661] IPVS: using max 37 ests per chain, 88800 per kthread [ 430.151521][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.297966][T17670] IPv4: Oversized IP packet from 172.20.20.24 [ 430.305187][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 430.312211][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 430.393060][T11729] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.493106][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.547404][ T13] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.738393][T17684] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3205'. [ 430.813700][T17688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3209'. [ 430.973767][ T7364] bond4 (unregistering): (slave gretap1): Releasing active interface [ 430.990108][T17693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3210'. [ 431.050560][ T7364] bond3 (unregistering): (slave geneve2): Releasing active interface [ 431.507969][ T52] Bluetooth: hci1: command tx timeout [ 431.545237][ T7364] bond0 (unregistering): Released all slaves [ 431.643002][ T7364] bond1 (unregistering): Released all slaves [ 431.736748][ T7364] bond2 (unregistering): left allmulticast mode [ 431.743014][ T7364] bond2 (unregistering): left promiscuous mode [ 431.761261][ T7364] macvlan0 (unregistering): left promiscuous mode [ 431.768629][ T7364] team0: Port device macvlan0 removed [ 431.788425][ T7364] bond2 (unregistering): Released all slaves [ 431.888071][ T7364] bond3 (unregistering): Released all slaves [ 431.981064][ T7364] bond4 (unregistering): Released all slaves [ 432.072252][ T7364] bond5 (unregistering): Released all slaves [ 432.168451][ T7364] bond6 (unregistering): Released all slaves [ 432.261163][ T7364] bond7 (unregistering): Released all slaves [ 432.273777][ T7364] bond8 (unregistering): Released all slaves [ 432.312796][T17698] bridge0: port 4(batadv1) entered blocking state [ 432.325927][T17698] bridge0: port 4(batadv1) entered disabled state [ 432.332557][T17698] batadv1: entered allmulticast mode [ 432.367491][T17698] batadv1: entered promiscuous mode [ 432.621058][T17712] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3217'. [ 432.631367][T17712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3217'. [ 432.678606][T17717] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3219'. [ 432.825859][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 432.835492][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 433.077219][T17722] tipc: Started in network mode [ 433.082902][T17722] tipc: Node identity 16f5b4bdfe87, cluster identity 3 [ 433.090420][T17722] tipc: Enabled bearer , priority 11 [ 433.096931][ T7364] : left promiscuous mode [ 433.128931][T17630] chnl_net:caif_netlink_parms(): no params data found [ 433.187242][ T7364] tipc: Left network mode [ 433.574600][T17743] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3224'. [ 433.615642][ T5841] Bluetooth: hci1: command tx timeout [ 433.675874][T17747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3225'. [ 433.738520][T17630] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.795885][T17630] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.803217][T17630] bridge_slave_0: entered allmulticast mode [ 433.827208][T17630] bridge_slave_0: entered promiscuous mode [ 433.841650][T17630] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.855154][T17630] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.900311][T17630] bridge_slave_1: entered allmulticast mode [ 433.917295][T17630] bridge_slave_1: entered promiscuous mode [ 434.080971][T17764] validate_nla: 1 callbacks suppressed [ 434.080989][T17764] netlink: 'syz.4.3231': attribute type 15 has an invalid length. [ 434.113110][T17755] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 434.169285][T17630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.224263][ T5885] tipc: Node number set to 3899831485 [ 434.270287][T17630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.356862][T17773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3233'. [ 434.579508][T17630] team0: Port device team_slave_0 added [ 434.618278][ T7364] hsr_slave_0: left promiscuous mode [ 434.687006][ T7364] pim6reg (unregistering): left allmulticast mode [ 435.365133][T17630] team0: Port device team_slave_1 added [ 435.373075][T17804] bond0: (slave veth1_to_hsr): Error: Device can not be enslaved while up [ 435.479878][T17808] netlink: 'syz.0.3245': attribute type 1 has an invalid length. [ 435.519062][T17808] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 435.559053][T17630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.586293][T17630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.621260][T17630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.634809][T17630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.643374][T17630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.670126][ T5841] Bluetooth: hci1: command tx timeout [ 435.712635][T17822] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3249'. [ 435.723658][T17630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.950565][T17630] hsr_slave_0: entered promiscuous mode [ 435.968851][T17630] hsr_slave_1: entered promiscuous mode [ 436.004151][ T7364] IPVS: stop unused estimator thread 0... [ 436.084658][T17832] netlink: 'syz.2.3252': attribute type 25 has an invalid length. [ 436.093191][T17832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3252'. [ 436.131349][T17832] netlink: 'syz.2.3252': attribute type 25 has an invalid length. [ 436.148889][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.163311][T17832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3252'. [ 436.183567][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.217663][T17835] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3253'. [ 436.276511][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.300732][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.919400][T17866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.936397][T17866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.414680][ T7364] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.424285][ T7364] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.435559][ T7364] ` (unregistering): Released all slaves [ 437.529921][ T7364] bond1 (unregistering): (slave lo): Removing an active aggregator [ 437.538819][ T7364] bond1 (unregistering): (slave lo): Releasing backup interface [ 437.547094][ T7364] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 437.558353][ T7364] bond1 (unregistering): Released all slaves [ 437.570871][ T7364] bond2 (unregistering): Released all slaves [ 437.662730][ T7364] bond3 (unregistering): Released all slaves [ 437.748171][ T5841] Bluetooth: hci1: command tx timeout [ 437.761814][ T7364] bond4 (unregistering): (slave bond5): Releasing backup interface [ 437.770523][ T7364] bond4 (unregistering): Released all slaves [ 437.867825][ T7364] bond5 (unregistering): Released all slaves [ 437.958908][ T7364] bond6 (unregistering): Released all slaves [ 438.049313][ T7364] bond7 (unregistering): Released all slaves [ 438.140516][T17630] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.264507][ T7364] 9: left promiscuous mode [ 438.371845][T17630] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.372629][T17881] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 438.418163][ T7364] : left promiscuous mode [ 438.473296][T17630] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.537330][ T7364] tipc: Disabling bearer [ 438.552014][ T7364] tipc: Left network mode [ 438.552064][T17889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.574702][T17891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3266'. [ 438.597877][T17885] syzkaller0: entered promiscuous mode [ 438.603465][T17885] syzkaller0: entered allmulticast mode [ 438.628390][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3268'. [ 438.645560][T17889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3268'. [ 438.659420][T17630] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.712189][T17889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3268'. [ 438.745744][T17889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3268'. [ 439.106882][ T5911] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 439.117538][ T5911] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 439.128980][ T5911] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 439.137042][ T5911] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 439.144711][ T5911] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 439.152637][ T5911] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 439.162289][ T5911] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 439.318698][T17929] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.325949][T17929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.366529][T17630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 439.415717][T17630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 439.470430][T17946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3280'. [ 439.488455][T17630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 439.558729][T17630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 439.644893][T17961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3283'. [ 439.674360][T17956] bond1: (slave vlan1): Enslaving as a backup interface with an up link [ 439.943268][T17978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.990425][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.222934][T17988] bridge1: port 1(veth3) entered blocking state [ 440.239462][T17988] bridge1: port 1(veth3) entered disabled state [ 440.247970][T17988] veth3: entered allmulticast mode [ 440.258484][T17988] veth3: entered promiscuous mode [ 440.280879][T17982] bridge1: port 2(veth0_to_bond) entered blocking state [ 440.288878][T17982] bridge1: port 2(veth0_to_bond) entered disabled state [ 440.297657][T17982] veth0_to_bond: entered allmulticast mode [ 440.304737][T17982] veth0_to_bond: entered promiscuous mode [ 440.380859][ T7364] hsr_slave_0: left promiscuous mode [ 440.399754][ T7364] hsr_slave_1: left promiscuous mode [ 441.044088][T17998] netlink: 'syz.2.3290': attribute type 4 has an invalid length. [ 441.058292][T17996] syzkaller0: entered promiscuous mode [ 441.065875][T17996] syzkaller0: entered allmulticast mode [ 441.193502][T18013] __nla_validate_parse: 2 callbacks suppressed [ 441.193521][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3294'. [ 441.220302][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3294'. [ 441.292535][T17630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.347574][T17630] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.421500][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.428694][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.497617][T18034] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3298'. [ 441.519640][T18029] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 441.533856][T18029] bond2 (unregistering): Released all slaves [ 441.563209][T18034] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3298'. [ 441.573931][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.581205][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.615004][ T7364] IPVS: stop unused estimator thread 0... [ 441.623497][T18034] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3298'. [ 441.658081][T18034] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3298'. [ 441.692923][T18034] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3298'. [ 441.731059][T18034] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3298'. [ 441.773952][T18034] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3298'. [ 441.788316][T18034] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3298'. [ 441.989529][ T7365] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 441.997956][ T7365] ip6gretap1 (unregistering): left allmulticast mode [ 442.308429][ T7365] team0: Port device geneve0 removed [ 442.556013][ T7365] bond0 (unregistering): Released all slaves [ 442.568226][ T7365] bond1 (unregistering): Released all slaves [ 442.673814][ T7365] bond2 (unregistering): Released all slaves [ 442.770210][ T7365] bond3 (unregistering): Released all slaves [ 442.862137][ T7365] bond4 (unregistering): Released all slaves [ 442.960367][ T7365] bond5 (unregistering): Released all slaves [ 443.051999][ T7365] bond6 (unregistering): (slave veth5): Releasing active interface [ 443.060063][ T7365] vlan3: entered promiscuous mode [ 443.067903][ T7365] bond6 (unregistering): (slave vlan3): Releasing active interface [ 443.077407][ T7365] bond6 (unregistering): Released all slaves [ 443.171663][ T7365] bond7 (unregistering): Released all slaves [ 443.261446][ T7365] bond8 (unregistering): (slave veth9): Releasing active interface [ 443.274388][ T7365] bond8 (unregistering): (slave veth11): Releasing active interface [ 443.284630][ T7365] bond8 (unregistering): Released all slaves [ 443.297355][ T7365] bond9 (unregistering): Released all slaves [ 443.387041][ T7365] bond10 (unregistering): Released all slaves [ 443.476438][ T7365] bond11 (unregistering): Released all slaves [ 443.567201][ T7365] bond12 (unregistering): Released all slaves [ 443.779973][T18061] netlink: 'syz.4.3302': attribute type 11 has an invalid length. [ 443.795383][T18061] netlink: 'syz.4.3302': attribute type 11 has an invalid length. [ 443.797085][T18059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.834536][T18063] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 443.864088][T18063] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 443.876548][T18063] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 443.946813][T17630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.074804][T17630] veth0_vlan: entered promiscuous mode [ 444.099055][T17630] veth1_vlan: entered promiscuous mode [ 444.102640][T18072] IPVS: length: 8 != 1152 [ 444.168273][T17630] veth0_macvtap: entered promiscuous mode [ 444.189038][T17630] veth1_macvtap: entered promiscuous mode [ 444.264467][T17630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.295981][T17630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.364348][ T7358] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.392189][ T7358] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.431520][ T7358] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.461076][ T7358] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.799824][ T7364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.822449][ T7364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.923210][ T7364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.959500][ T7364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.115119][T18086] lec:lec_atm_close: lec0: Shut down! [ 445.404397][T18122] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 445.427940][ T7365] tipc: Left network mode [ 445.438260][T18124] tipc: Started in network mode [ 445.443167][T18124] tipc: Node identity 3eaeb4a7bc73, cluster identity 4711 [ 445.477536][T18124] tipc: Enabled bearer , priority 0 [ 445.487509][T18124] syzkaller0: MTU too low for tipc bearer [ 445.493263][T18124] tipc: Disabling bearer [ 445.501872][T18124] openvswitch: netlink: IP tunnel dst address not specified [ 445.624179][T18131] IPVS: set_ctl: invalid protocol: 8 10.1.1.1:20003 [ 445.643232][T18134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.664838][T18132] IPVS: Unknown mcast interface: pimreg1 [ 446.131785][T18156] netlink: 'syz.1.3330': attribute type 1 has an invalid length. [ 446.331428][T18163] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 446.397752][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 446.409511][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 446.426546][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 446.437613][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 446.445484][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 446.660772][T18176] __nla_validate_parse: 11 callbacks suppressed [ 446.660790][T18176] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3336'. [ 446.696680][T18176] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3336'. [ 446.720520][T18174] bridge0: port 3(batadv1) entered blocking state [ 446.738182][T18182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3336'. [ 446.748025][T18174] bridge0: port 3(batadv1) entered disabled state [ 446.754632][T18174] batadv1: entered allmulticast mode [ 446.796851][T18174] batadv1: entered promiscuous mode [ 447.030221][T18187] veth7: entered allmulticast mode [ 447.145028][T18188] veth9: entered allmulticast mode [ 447.187762][ T3648] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 447.197094][ T3648] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 447.283284][ T7365] hsr_slave_0: left promiscuous mode [ 447.315845][ T7365] hsr_slave_1: left promiscuous mode [ 447.365104][ T7365] veth0_macvtap: left promiscuous mode [ 447.569780][ T7365] pimreg (unregistering): left allmulticast mode [ 448.357394][T18218] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 448.378037][T18232] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3351'. [ 448.436473][T18232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3351'. [ 448.457104][T18232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3351'. [ 448.469315][T18235] tipc: Started in network mode [ 448.474194][T18235] tipc: Node identity 464d66a28bcc, cluster identity 4711 [ 448.481471][ T52] Bluetooth: hci4: command tx timeout [ 448.505696][T18235] tipc: Enabled bearer , priority 0 [ 448.512421][T18236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3351'. [ 448.533731][T18237] syzkaller0: entered promiscuous mode [ 448.547344][T18237] syzkaller0: entered allmulticast mode [ 448.559686][T18242] tipc: Resetting bearer [ 448.596298][T18231] tipc: Resetting bearer [ 448.699459][T18231] tipc: Disabling bearer [ 448.809022][T18254] syzkaller1: entered promiscuous mode [ 448.848732][T18254] syzkaller1: entered allmulticast mode [ 449.266169][T18283] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 449.278083][T18280] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3358'. [ 449.328042][ T7365] IPVS: stop unused estimator thread 0... [ 449.366136][T18283] bond2: option lp_interval: invalid value (0) [ 449.372341][T18283] bond2: option lp_interval: allowed values 1 - 2147483647 [ 449.383140][T18283] bond2 (unregistering): Released all slaves [ 449.564696][T18301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3362'. [ 449.574711][T18301] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3362'. [ 449.593104][T18299] dvmrp0: entered allmulticast mode [ 449.605084][T18167] chnl_net:caif_netlink_parms(): no params data found [ 449.820457][T18320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.858606][T18322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.928266][T18332] netlink: 'syz.4.3371': attribute type 33 has an invalid length. [ 450.003727][T18329] syzkaller0: entered promiscuous mode [ 450.013626][T18329] syzkaller0: entered allmulticast mode [ 450.062296][T18167] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.086459][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.094194][T18167] bridge_slave_0: entered allmulticast mode [ 450.120271][T18167] bridge_slave_0: entered promiscuous mode [ 450.201891][T18355] netlink: 'syz.4.3377': attribute type 6 has an invalid length. [ 450.262576][T18357] netlink: 'syz.4.3377': attribute type 6 has an invalid length. [ 450.546091][ T52] Bluetooth: hci4: command tx timeout [ 451.523864][T18167] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.531301][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.539789][T18167] bridge_slave_1: entered allmulticast mode [ 451.547765][T18167] bridge_slave_1: entered promiscuous mode [ 451.787876][T18372] __nla_validate_parse: 5 callbacks suppressed [ 451.787893][T18372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3381'. [ 451.801722][T18371] vlan2: entered promiscuous mode [ 451.835791][T18371] geneve1: entered promiscuous mode [ 451.837451][T18375] x_tables: duplicate underflow at hook 2 [ 451.848037][T18371] vlan2: entered allmulticast mode [ 451.853277][T18371] geneve1: entered allmulticast mode [ 451.865904][T18167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.890071][T18167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.140238][T18167] team0: Port device team_slave_0 added [ 452.162354][ T7364] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.179567][T18167] team0: Port device team_slave_1 added [ 452.203289][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.292871][ T7364] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.324153][T18398] openvswitch: netlink: Message has 592 unknown bytes. [ 452.339409][T18167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.344083][T18398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.348021][T18167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.403867][T18167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.426425][T18167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.434665][T18167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.479277][T18167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.491099][ T7358] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.550912][T18415] IPVS: length: 184 != 24 [ 452.625846][ T52] Bluetooth: hci4: command tx timeout [ 452.717999][ T7365] bond5 (unregistering): (slave gretap1): Releasing active interface [ 452.762912][ T7365] dvmrp6 (unregistering): left allmulticast mode [ 452.790532][ T7365] bond3 (unregistering): (slave geneve2): Releasing active interface [ 453.186214][ T7365] bond0 (unregistering): Released all slaves [ 453.199804][ T7365] bond1 (unregistering): (slave veth3): Releasing backup interface [ 453.209243][ T7365] bond1 (unregistering): Released all slaves [ 453.302213][ T7365] bond2 (unregistering): Released all slaves [ 453.396327][ T7365] bond3 (unregistering): Released all slaves [ 453.484700][ T7365] bond4 (unregistering): Released all slaves [ 453.498601][ T7365] bond5 (unregistering): Released all slaves [ 453.591253][ T7365] bond6 (unregistering): Released all slaves [ 453.687988][T18167] hsr_slave_0: entered promiscuous mode [ 453.694661][T18167] hsr_slave_1: entered promiscuous mode [ 453.701510][T18167] debugfs: 'hsr0' already exists in 'hsr' [ 453.707571][T18167] Cannot create hsr debugfs directory [ 453.722376][ T7365] : left promiscuous mode [ 453.783321][ T7365] tipc: Left network mode [ 453.800972][ T7365] IPVS: stopping backup sync thread 17106 ... [ 453.861624][T18167] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.947837][T18167] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.012706][T18167] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.094270][T18167] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.253699][ T7365] hsr_slave_0: left promiscuous mode [ 454.259693][ T7365] hsr_slave_1: left promiscuous mode [ 454.696609][ T7365] vlan1 (unregistering): left allmulticast mode [ 454.716569][ T52] Bluetooth: hci4: command tx timeout [ 454.964437][T15937] smc: removing ib device sy [ 455.128751][T18167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 455.151866][T18167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 455.167163][T18167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 455.182560][T18167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 455.399830][T18167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.471448][T18167] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.492120][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.499284][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.534247][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.541432][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.877062][T18167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.934734][T18167] veth0_vlan: entered promiscuous mode [ 455.952159][T18167] veth1_vlan: entered promiscuous mode [ 455.993946][T18167] veth0_macvtap: entered promiscuous mode [ 456.010104][T18167] veth1_macvtap: entered promiscuous mode [ 456.034009][T18167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.053065][T18167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.071905][ T7358] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.091025][ T7358] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.113633][ T7358] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.132095][ T7358] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.210477][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.220291][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.275181][ T7365] IPVS: stop unused estimator thread 0... [ 456.289191][T11729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.297739][T11729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.317611][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3397'. [ 483.327665][T18435] netlink: 'syz.3.3396': attribute type 10 has an invalid length. [ 483.380617][T18443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3395'. [ 483.750814][T18470] Can't find ip_set type bitmap:ip,mac [ 483.758759][T18469] bridge0: port 3(ipvlan2) entered blocking state [ 483.770225][T18469] bridge0: port 3(ipvlan2) entered disabled state [ 483.777331][T18469] ipvlan2: entered allmulticast mode [ 483.786242][T18469] bridge0: entered allmulticast mode [ 483.801133][T18469] ipvlan2: left allmulticast mode [ 483.815388][T18469] bridge0: left allmulticast mode [ 484.129405][T18492] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 484.616238][T18520] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3415'. [ 484.621572][T18519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3416'. [ 484.662644][T18519] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3416'. [ 484.810162][T18530] netlink: 'syz.2.3419': attribute type 16 has an invalid length. [ 484.867155][T18543] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3422'. [ 485.014025][T18553] macsec1: entered promiscuous mode [ 485.044852][T18558] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3428'. [ 485.091603][T18562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3426'. [ 485.330983][T18579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3431'. [ 485.688651][T18602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3439'. [ 485.719862][ T7364] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.741144][ T7364] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.761295][ T7364] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.790701][ T7364] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.912316][T18602] team0: Port device team_slave_0 removed [ 486.073008][T18627] x_tables: duplicate underflow at hook 2 [ 487.084609][T18696] netlink: 'syz.3.3471': attribute type 30 has an invalid length. [ 487.128427][T18696] bond2: option arp_missed_max: invalid value (0) [ 487.135017][T18696] bond2: option arp_missed_max: allowed values 1 - 255 [ 487.147497][T18696] bond2 (unregistering): Released all slaves [ 487.184230][T18704] openvswitch: netlink: Message has 12 unknown bytes. [ 487.461661][T18717] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 487.639430][T18726] batadv1: left allmulticast mode [ 487.650901][T18726] batadv1: left promiscuous mode [ 487.659625][T18726] bridge0: port 3(batadv1) entered disabled state [ 487.711860][T18732] tipc: Can't bind to reserved service type 0 [ 487.740944][T18735] sctp: [Deprecated]: syz.3.3484 (pid 18735) Use of struct sctp_assoc_value in delayed_ack socket option. [ 487.740944][T18735] Use struct sctp_sack_info instead [ 487.761249][T18726] bridge_slave_1: left allmulticast mode [ 487.780064][T18726] bridge_slave_1: left promiscuous mode [ 487.786798][T18726] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.796155][T18726] bridge_slave_0: left allmulticast mode [ 487.801836][T18726] bridge_slave_0: left promiscuous mode [ 487.807888][T18726] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.916057][T18738] vlan2: entered promiscuous mode [ 487.921132][T18738] geneve1: entered promiscuous mode [ 487.927686][T18738] vlan2: entered allmulticast mode [ 487.932848][T18738] geneve1: entered allmulticast mode [ 488.491263][T18778] __nla_validate_parse: 13 callbacks suppressed [ 488.491282][T18778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3495'. [ 488.516523][T18778] netlink: 'syz.1.3495': attribute type 7 has an invalid length. [ 488.531652][T18782] netlink: 'syz.3.3497': attribute type 2 has an invalid length. [ 488.547850][T18782] netlink: 'syz.3.3497': attribute type 11 has an invalid length. [ 488.557640][T18782] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3497'. [ 488.619705][T18782] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 488.643501][T18782] bond2 (unregistering): Released all slaves [ 488.706925][T18789] bridge2: entered promiscuous mode [ 488.713539][T18789] bridge2: entered allmulticast mode [ 488.838944][T18795] xt_CT: You must specify a L4 protocol and not use inversions on it [ 488.839683][T18795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3502'. [ 488.942178][T18795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3502'. [ 489.515733][T18803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3506'. [ 489.534545][T18805] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3509'. [ 489.557150][ T7364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.580078][ T7364] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.632439][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 489.642536][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 489.653350][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 489.662183][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 489.671710][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 489.750200][ T7364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.761360][ T7364] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.856211][ T7364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.869497][ T7364] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.943583][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3512'. [ 490.015250][ T7364] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.031915][ T7364] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.045517][T18839] netlink: 'syz.3.3512': attribute type 21 has an invalid length. [ 490.053354][T18839] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3512'. [ 490.072298][T18822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3512'. [ 490.126575][T18846] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3517'. [ 490.213473][T18835] syzkaller0: entered promiscuous mode [ 490.235915][T18835] syzkaller0: entered allmulticast mode [ 490.526193][T18854] sctp: [Deprecated]: syz.1.3520 (pid 18854) Use of int in max_burst socket option. [ 490.526193][T18854] Use struct sctp_assoc_value instead [ 491.747703][ T5841] Bluetooth: hci0: command tx timeout [ 491.998786][T18866] 8021q: VLANs not supported on ip6_vti0 [ 492.069007][T18876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.113578][T18875] macvtap1: entered promiscuous mode [ 492.136380][T18875] macvtap1: entered allmulticast mode [ 492.141797][T18875] veth1_vlan: entered allmulticast mode [ 492.161067][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.195051][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.277474][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.378022][T15937] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.604871][T18904] openvswitch: netlink: IP tunnel dst address not specified [ 493.038538][ T7364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.064809][ T7364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.099728][ T7364] bond0 (unregistering): Released all slaves [ 493.294220][T18924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.345646][T18920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.691359][T18811] chnl_net:caif_netlink_parms(): no params data found [ 493.825919][ T5841] Bluetooth: hci0: command tx timeout [ 493.870853][ T7364] hsr_slave_0: left promiscuous mode [ 493.878320][ T7364] hsr_slave_1: left promiscuous mode [ 493.879393][T18950] __nla_validate_parse: 6 callbacks suppressed [ 493.879409][T18950] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3545'. [ 493.885203][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.908599][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.919837][ T7364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.927362][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.951180][ T7364] veth1_macvtap: left promiscuous mode [ 493.965946][ T7364] veth0_macvtap: left promiscuous mode [ 493.972545][ T7364] veth1_vlan: left promiscuous mode [ 493.991032][ T7364] veth0_vlan: left promiscuous mode [ 494.225246][T18969] netlink: 'syz.0.3550': attribute type 1 has an invalid length. [ 494.481575][ T7364] team0 (unregistering): Port device team_slave_1 removed [ 494.522194][ T7364] team0 (unregistering): Port device team_slave_0 removed [ 494.895157][T18951] syzkaller0: entered promiscuous mode [ 494.900793][T18951] syzkaller0: entered allmulticast mode [ 494.972740][T18974] sctp: [Deprecated]: syz.4.3551 (pid 18974) Use of int in max_burst socket option deprecated. [ 494.972740][T18974] Use struct sctp_assoc_value instead [ 495.192485][T18811] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.215739][T18811] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.248576][T18811] bridge_slave_0: entered allmulticast mode [ 495.271292][T18811] bridge_slave_0: entered promiscuous mode [ 495.296653][T18811] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.306987][T18811] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.314239][T18811] bridge_slave_1: entered allmulticast mode [ 495.351996][T18811] bridge_slave_1: entered promiscuous mode [ 495.578376][T18811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.607007][T18811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.679696][T19004] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3559'. [ 495.723345][T18811] team0: Port device team_slave_0 added [ 495.748997][T18811] team0: Port device team_slave_1 added [ 495.816190][T19009] delete_channel: no stack [ 495.924704][ T5841] Bluetooth: hci0: command tx timeout [ 495.949401][ T7364] bridge_slave_1: left allmulticast mode [ 495.971011][ T7364] bridge_slave_1: left promiscuous mode [ 495.979977][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.992034][ T7364] bridge_slave_0: left allmulticast mode [ 495.998837][ T7364] bridge_slave_0: left promiscuous mode [ 496.004677][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.280756][ T7364] erspan0 (unregistering): left promiscuous mode [ 496.317772][ T7364] gretap0 (unregistering): left promiscuous mode [ 496.426824][ T7364] bond2 (unregistering): (slave geneve2): Releasing active interface [ 496.435014][ T7364] bond2 (unregistering): (slave geneve2): the permanent HWaddr of slave - da:c4:78:81:19:6f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 496.539190][ T7364] bridge0 (unregistering): left allmulticast mode [ 496.778974][ T7364] bond9 (unregistering): (slave bridge4): Releasing backup interface [ 496.792386][ T7364] bridge4 (unregistering): left promiscuous mode [ 496.875061][ T7364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.888451][ T7364] bond0 (unregistering): Released all slaves [ 496.909037][ T7364] bond1 (unregistering): Released all slaves [ 497.013443][ T7364] bond2 (unregistering): (slave veth3): Releasing active interface [ 497.022451][ T7364] bond2 (unregistering): Released all slaves [ 497.121916][ T7364] bond3 (unregistering): Released all slaves [ 497.214831][ T7364] bond4 (unregistering): Released all slaves [ 497.227210][ T7364] bond5 (unregistering): Released all slaves [ 497.239369][ T7364] bond6 (unregistering): Released all slaves [ 497.334689][ T7364] bond7 (unregistering): Released all slaves [ 497.427520][ T7364] bond8 (unregistering): (slave veth13): Releasing active interface [ 497.436538][ T7364] bond8 (unregistering): Released all slaves [ 497.525256][ T7364] bond9 (unregistering): Released all slaves [ 497.547238][T18811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.554185][T18811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.595419][T18811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.612274][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3564'. [ 497.648367][T18811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.692136][T18811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.771303][T18811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.846952][ T7364] : left promiscuous mode [ 497.983652][ T7364] 9: left promiscuous mode [ 497.988933][ T5841] Bluetooth: hci0: command tx timeout [ 497.999158][T19034] xt_CT: You must specify a L4 protocol and not use inversions on it [ 498.010050][T19034] netlink: 'syz.1.3570': attribute type 2 has an invalid length. [ 498.038859][T18811] hsr_slave_0: entered promiscuous mode [ 498.049350][T18811] hsr_slave_1: entered promiscuous mode [ 498.055800][T18811] debugfs: 'hsr0' already exists in 'hsr' [ 498.061576][T18811] Cannot create hsr debugfs directory [ 498.068416][ T7364] tipc: Disabling bearer [ 498.084651][ T7364] tipc: Disabling bearer [ 498.093505][ T7364] tipc: Left network mode [ 498.293865][T19051] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 498.333696][T19053] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3577'. [ 498.342922][T19053] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3577'. [ 498.445634][T19062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3578'. [ 498.459867][T19061] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3579'. [ 498.469814][T19061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3579'. [ 498.682940][T18811] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 498.731434][T18811] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 498.772801][ T7364] hsr_slave_0: left promiscuous mode [ 498.791893][ T7364] hsr_slave_1: left promiscuous mode [ 498.799164][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.816365][ T7364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.904046][T19085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3584'. [ 498.988640][T19088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3584'. [ 498.998027][T19088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3584'. [ 499.318134][T15937] smc: removing ib device !yz! [ 499.512636][T18811] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 499.524583][T19073] veth1_macvtap: left promiscuous mode [ 499.533620][T19073] macsec0: entered promiscuous mode [ 499.540560][T19073] macsec0: entered allmulticast mode [ 499.585862][T18811] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 499.723304][T19091] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3586'. [ 500.245870][T19108] syzkaller0: entered promiscuous mode [ 500.316995][T18811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.342893][T19108] syzkaller0: left promiscuous mode [ 500.609697][T18811] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.671321][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.673457][T19130] netlink: 'syz.1.3596': attribute type 11 has an invalid length. [ 500.678650][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.725471][T19130] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3596'. [ 500.752544][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.759818][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.886274][T18811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.938897][T19146] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3599'. [ 501.257914][ T7364] IPVS: stop unused estimator thread 0... [ 501.429665][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.521497][T19167] x_tables: ip_tables: ah match: only valid for protocol 51 [ 501.549585][T19169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.551846][T18811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.653930][T19172] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3605'. [ 501.767304][T19177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3607'. [ 501.822505][T19151] IPv6: sit1: Disabled Multicast RS [ 502.070174][ T52] block nbd1: Receive control failed (result -32) [ 502.070174][ T5841] block nbd0: Receive control failed (result -32) [ 502.155031][T18811] veth0_vlan: entered promiscuous mode [ 502.189909][T18811] veth1_vlan: entered promiscuous mode [ 502.235675][T19202] netlink: 'syz.3.3610': attribute type 1 has an invalid length. [ 502.272135][T19202] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3610'. [ 502.362768][T18811] veth0_macvtap: entered promiscuous mode [ 502.391299][T18811] veth1_macvtap: entered promiscuous mode [ 502.440185][T18811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.468826][T19227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3619'. [ 502.582624][T18811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.639086][ T7364] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.684520][ T7364] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.700888][ T7364] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.738145][ T7364] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.864084][T19241] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 502.893791][T19221] lec:lec_atm_close: lec0: Shut down! [ 502.918677][ T7364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.946082][ T7364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.018937][ T7364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.047379][ T7364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.231443][T19254] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20001 [ 503.364483][T19263] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:20002 [ 504.545523][T19261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.563104][T19261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.608670][T19261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.616367][T19261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.866546][T19280] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 504.909889][T19288] __nla_validate_parse: 2 callbacks suppressed [ 504.909906][T19288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3637'. [ 504.948029][T19285] netlink: 'syz.5.3635': attribute type 1 has an invalid length. [ 505.178118][T19308] netlink: 'syz.5.3642': attribute type 1 has an invalid length. [ 505.196240][T19308] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3642'. [ 505.316520][T19317] tipc: Started in network mode [ 505.329166][T19317] tipc: Node identity , cluster identity 4711 [ 505.344040][T19317] tipc: Failed to set node id, please configure manually [ 505.353406][T19320] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3647'. [ 505.366359][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3645'. [ 505.371647][T19317] tipc: Enabling of bearer rejected, failed to enable media [ 505.480713][T19322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3645'. [ 505.535654][T19329] block nbd2: Unsupported socket: should be TCP or UNIX. [ 505.739305][T19346] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3656'. [ 505.756312][T19346] netlink: 'syz.5.3656': attribute type 1 has an invalid length. [ 505.764434][T19346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.778730][T19346] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3656'. [ 505.780696][T19341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3654'. [ 505.868424][T19354] netlink: 'syz.3.3658': attribute type 1 has an invalid length. [ 505.964266][T19364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.031966][T19368] veth0: entered promiscuous mode [ 506.160450][T19366] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3662'. [ 506.170000][T19368] pim6reg1: entered promiscuous mode [ 506.177482][T19368] pim6reg1: entered allmulticast mode [ 506.219376][T19368] veth0: left promiscuous mode [ 506.451275][T19394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3669'. [ 506.872512][ T5841] Bluetooth: hci0: command 0x0401 tx timeout [ 507.046386][T19425] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.053955][T19425] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.067573][T19425] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.074811][T19425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.082382][T19425] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.089567][T19425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.106016][T19425] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.113338][T19425] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.222897][T19432] netlink: 'syz.0.3680': attribute type 1 has an invalid length. [ 507.264138][T19442] netlink: 'syz.3.3681': attribute type 10 has an invalid length. [ 508.217189][T19471] bridge3: entered promiscuous mode [ 508.222601][T19471] bridge3: entered allmulticast mode [ 508.243049][T19472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.656976][T19506] netlink: 'syz.4.3701': attribute type 1 has an invalid length. [ 508.692838][T19510] x_tables: duplicate underflow at hook 1 [ 508.814752][T19516] tipc: Started in network mode [ 508.830051][T19516] tipc: Node identity 030000000000000017a3, cluster identity 4711 [ 509.079386][T19541] netlink: 'syz.0.3714': attribute type 1 has an invalid length. [ 509.189447][T19545] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 509.204258][T19545] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 509.220930][T19551] netlink: 'syz.3.3716': attribute type 5 has an invalid length. [ 509.240461][T19541] gretap1: entered promiscuous mode [ 509.309155][T19541] bond1: (slave gretap1): making interface the new active one [ 509.328712][T19541] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 509.382185][T19541] macvlan2: entered promiscuous mode [ 509.403968][T19541] macvlan2: entered allmulticast mode [ 509.417481][T19541] bond1: entered promiscuous mode [ 509.424052][T19541] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 509.432566][T19545] block nbd2: Unsupported socket: should be TCP or UNIX. [ 509.460961][T19541] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 509.489000][T19541] bond1: left promiscuous mode [ 509.590837][T19574] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 509.757537][T19583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.885028][T19600] netlink: 'syz.0.3730': attribute type 3 has an invalid length. [ 510.121869][T19615] __nla_validate_parse: 25 callbacks suppressed [ 510.121889][T19615] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.3734'. [ 510.268311][T19630] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3738'. [ 510.282487][T19628] netlink: 'syz.3.3737': attribute type 1 has an invalid length. [ 510.296498][T19628] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3737'. [ 510.348438][T19628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3737'. [ 510.369176][T19630] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.421644][T19631] vlan2: entered allmulticast mode [ 510.519283][T19630] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.560491][T19643] tipc: Trying to set illegal importance in message [ 510.670498][T19630] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.710725][T19651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3742'. [ 510.763871][T19651] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3742'. [ 510.828743][T19651] xt_l2tp: v2 doesn't support IP mode [ 510.838365][T19651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3742'. [ 510.838368][T19630] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.847566][T19651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3742'. [ 510.887323][T19657] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.897657][T19657] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.971405][T19660] netlink: 'syz.5.3747': attribute type 1 has an invalid length. [ 511.061715][ T7364] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.128096][T19664] tipc: Enabled bearer , priority 0 [ 511.138047][ T7361] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.147511][T19664] syzkaller0: entered promiscuous mode [ 511.155157][T19664] syzkaller0: entered allmulticast mode [ 511.173621][ T7364] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.202251][ T7364] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.236523][ T5841] block nbd2: Receive control failed (result -32) [ 511.246214][T19664] tipc: Resetting bearer [ 511.288430][T19663] tipc: Resetting bearer [ 511.353534][T19686] Cannot find add_set index 2 as target [ 511.364735][T19663] tipc: Disabling bearer [ 511.535563][T19699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3759'. [ 511.544784][T19699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3759'. [ 511.634849][T19688] team0 (unregistering): Port device team_slave_0 removed [ 511.638617][T19705] netlink: 'syz.3.3761': attribute type 1 has an invalid length. [ 511.659673][T19688] team0 (unregistering): Port device team_slave_1 removed [ 512.014563][T19720] netlink: 'syz.3.3765': attribute type 4 has an invalid length. [ 512.043074][T19719] netlink: 'syz.3.3765': attribute type 4 has an invalid length. [ 512.066012][T19723] netlink: 'syz.3.3765': attribute type 10 has an invalid length. [ 512.103395][T19720] netlink: 'syz.3.3765': attribute type 10 has an invalid length. [ 512.657097][T19747] syzkaller0: entered promiscuous mode [ 512.662955][T19747] syzkaller0: entered allmulticast mode [ 512.681255][T19747] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 513.293981][T19785] netlink: 'syz.4.3784': attribute type 3 has an invalid length. [ 513.506945][T19807] netlink: 'syz.1.3789': attribute type 33 has an invalid length. [ 513.582109][T19807] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 513.607044][T19807] bond1 (unregistering): Released all slaves [ 513.667973][T19816] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004 [ 513.984930][T19840] netlink: 'syz.5.3799': attribute type 7 has an invalid length. [ 514.014144][T19840] netlink: 'syz.5.3799': attribute type 8 has an invalid length. [ 514.027000][T19839] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 514.049295][T19839] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 514.138508][T19844] bridge_slave_1: left allmulticast mode [ 514.144362][T19844] bridge_slave_1: left promiscuous mode [ 514.163286][T19844] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.173950][T19844] bridge_slave_0: left allmulticast mode [ 514.183152][T19844] bridge_slave_0: left promiscuous mode [ 514.189887][T19844] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.309295][ T5911] IPVS: starting estimator thread 0... [ 514.405567][T19853] IPVS: using max 53 ests per chain, 127200 per kthread [ 515.468936][T19929] __nla_validate_parse: 21 callbacks suppressed [ 515.468955][T19929] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3825'. [ 515.485945][T19929] openvswitch: netlink: Flow actions attr not present in new flow. [ 515.580502][T19938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3827'. [ 515.687489][T19941] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3828'. [ 515.752842][T19945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3830'. [ 515.873995][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3832'. [ 515.884077][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3832'. [ 515.965044][T19945] hsr_slave_0 (unregistering): left promiscuous mode [ 515.978994][T19955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3832'. [ 515.988720][T19955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3832'. [ 515.999240][T19955] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3832'. [ 516.034399][T19968] pim6reg: entered allmulticast mode [ 516.199258][T19986] validate_nla: 2 callbacks suppressed [ 516.199276][T19986] netlink: 'syz.1.3839': attribute type 3 has an invalid length. [ 516.332294][T19999] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3842'. [ 516.468112][T20011] syz_tun: entered allmulticast mode [ 516.670460][T20027] lo: entered promiscuous mode [ 516.686768][T20028] netlink: 'syz.3.3851': attribute type 33 has an invalid length. [ 516.689295][T20027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.743465][T20007] syz_tun: left allmulticast mode [ 516.757399][T20031] xt_hashlimit: invalid rate [ 516.812465][T20032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.096129][T20107] xt_ecn: cannot match TCP bits for non-tcp packets [ 518.392079][T20137] netlink: 'syz.1.3884': attribute type 3 has an invalid length. [ 518.404353][T20138] netlink: 'syz.0.3883': attribute type 2 has an invalid length. [ 518.451907][T20138] netlink: 'syz.0.3883': attribute type 2 has an invalid length. [ 519.057046][T20178] IPv4: Oversized IP packet from 172.20.20.24 [ 519.066988][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 519.074152][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 519.184962][T20185] netlink: 'syz.4.3897': attribute type 11 has an invalid length. [ 519.294936][T20192] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 519.317473][T20192] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 519.389669][T20196] syzkaller0: entered promiscuous mode [ 519.395192][T20196] syzkaller0: entered allmulticast mode [ 519.791679][T20228] netlink: 'syz.4.3911': attribute type 1 has an invalid length. [ 519.821336][T20230] netlink: 'syz.4.3911': attribute type 1 has an invalid length. [ 519.889889][T20233] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 519.932833][T20233] bond2 (unregistering): Released all slaves [ 519.956336][T20230] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 519.978403][T20241] syzkaller0: entered promiscuous mode [ 519.984912][T20241] syzkaller0: entered allmulticast mode [ 520.027961][T20241] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 520.043474][T20241] IPv6: NLM_F_CREATE should be specified when creating new route [ 520.063039][T20241] wg1: entered promiscuous mode [ 520.076086][T20241] wg1: entered allmulticast mode [ 520.276917][T20252] bond2: option resend_igmp: invalid value (32767) [ 520.283573][T20252] bond2: option resend_igmp: allowed values 0 - 255 [ 520.295956][T20252] bond2 (unregistering): Released all slaves [ 520.301236][T20259] netlink: 'syz.3.3922': attribute type 83 has an invalid length. [ 520.348169][T20262] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 520.380820][T20262] bridge0: entered allmulticast mode [ 520.513681][T20271] __nla_validate_parse: 21 callbacks suppressed [ 520.513700][T20271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3925'. [ 520.539656][T20272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3925'. [ 520.641736][T20281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 520.649030][T20281] IPv6: NLM_F_CREATE should be set when creating new route [ 520.741845][T20285] tunl0: entered promiscuous mode [ 520.749039][T20285] netlink: 'syz.0.3930': attribute type 3 has an invalid length. [ 520.757108][T20285] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3930'. [ 520.768594][T20287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3931'. [ 520.857487][T20294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3932'. [ 520.960374][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3936'. [ 520.962909][T20302] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3935'. [ 521.292740][T20324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3941'. [ 521.417824][T20331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3943'. [ 521.573171][T20349] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3948'. [ 522.218404][T20398] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 522.337348][T20410] netlink: 'syz.5.3968': attribute type 1 has an invalid length. [ 522.583395][T20425] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 522.809191][T20447] netlink: 'syz.4.3979': attribute type 1 has an invalid length. [ 523.280434][T20483] xt_hashlimit: max too large, truncated to 1048576 [ 523.748818][T20519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.804135][T20523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.917968][T20523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.023019][T20514] ip6gre0: entered promiscuous mode [ 524.275032][T20555] syzkaller0: entered promiscuous mode [ 524.294178][T20555] syzkaller0: entered allmulticast mode [ 524.365635][T20555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.793974][T20585] netlink: 'syz.5.4023': attribute type 2 has an invalid length. [ 524.857940][T20588] syzkaller0: entered promiscuous mode [ 524.868942][T20588] syzkaller0: left promiscuous mode [ 525.219093][T20607] netlink: 'syz.1.4031': attribute type 2 has an invalid length. [ 525.277211][T20614] netlink: 'syz.5.4032': attribute type 13 has an invalid length. [ 525.324979][T20614] veth0_macvtap: left promiscuous mode [ 525.350211][T20614] macvtap0: entered allmulticast mode [ 525.378440][T20614] macvtap0: refused to change device tx_queue_len [ 525.408715][T20614] netlink: 'syz.5.4032': attribute type 11 has an invalid length. [ 525.492300][T20614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 525.600510][T20614] ip6gre1: entered allmulticast mode [ 525.775143][T20634] netlink: 'syz.5.4038': attribute type 1 has an invalid length. [ 525.785178][T20635] __nla_validate_parse: 25 callbacks suppressed [ 525.785196][T20635] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4035'. [ 526.106541][T20650] netlink: 'syz.3.4044': attribute type 1 has an invalid length. [ 526.273856][T20667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4048'. [ 526.366339][T20673] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4051'. [ 526.385181][T20673] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4051'. [ 526.412739][T20679] netlink: 'syz.5.4051': attribute type 1 has an invalid length. [ 526.452647][T20679] netlink: 544 bytes leftover after parsing attributes in process `syz.5.4051'. [ 526.474455][T20673] netlink: 596 bytes leftover after parsing attributes in process `syz.5.4051'. [ 526.490944][T20679] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4051'. [ 526.504620][T20686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4055'. [ 526.728481][T20704] x_tables: unsorted entry at hook 3 [ 526.842937][T20708] netlink: 'syz.5.4061': attribute type 1 has an invalid length. [ 526.864450][T20708] netlink: 'syz.5.4061': attribute type 4 has an invalid length. [ 526.879870][T20710] openvswitch: netlink: IP tunnel dst address not specified [ 526.884323][T20708] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4061'. [ 526.967922][T20720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4065'. [ 527.362280][T20749] Bluetooth: MGMT ver 1.23 [ 527.434712][T20755] validate_nla: 2 callbacks suppressed [ 527.434730][T20755] netlink: 'syz.3.4075': attribute type 2 has an invalid length. [ 527.503282][T20758] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 527.950450][T20791] block nbd3: Unsupported socket: should be TCP or UNIX. [ 528.299913][T20818] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 528.316071][T20819] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 528.429350][T20827] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 528.441403][T20827] Cannot find del_set index 4 as target [ 528.455222][T20827] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 528.469672][T20827] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 529.073143][T20867] netlink: 'syz.3.4110': attribute type 21 has an invalid length. [ 529.108334][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 529.198668][T20867] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 529.298840][T20867] bond3 (unregistering): Released all slaves [ 529.421169][T20900] vlan0: entered promiscuous mode [ 529.427779][T20900] vlan0: entered allmulticast mode [ 529.434400][T20900] veth0_vlan: entered allmulticast mode [ 529.519588][ T8026] IPVS: starting estimator thread 0... [ 529.605922][T20907] IPVS: using max 31 ests per chain, 74400 per kthread [ 530.406873][T20965] netlink: 'syz.4.4135': attribute type 23 has an invalid length. [ 530.421519][T20968] veth0: entered promiscuous mode [ 530.435857][T20966] veth0: left promiscuous mode [ 530.717787][T20982] netlink: 'syz.0.4139': attribute type 1 has an invalid length. [ 530.732394][T20982] netlink: 'syz.0.4139': attribute type 29 has an invalid length. [ 530.743184][T20982] netlink: 'syz.0.4139': attribute type 29 has an invalid length. [ 530.806077][T20994] __nla_validate_parse: 28 callbacks suppressed [ 530.806095][T20994] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4142'. [ 530.872537][T20996] netlink: 'syz.0.4144': attribute type 1 has an invalid length. [ 530.882398][T20996] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4144'. [ 530.894190][T20996] netlink: 'syz.0.4144': attribute type 1 has an invalid length. [ 530.907004][T20996] netlink: 638 bytes leftover after parsing attributes in process `syz.0.4144'. [ 530.918696][T20996] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4144'. [ 531.092669][T21014] x_tables: duplicate underflow at hook 3 [ 531.254878][T21023] syzkaller0: entered promiscuous mode [ 531.261227][T21023] syzkaller0: entered allmulticast mode [ 531.285952][T21025] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4152'. [ 531.459965][T21037] Cannot find set identified by id 0 to match [ 531.486582][T21037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4155'. [ 531.509066][T21037] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4155'. [ 531.550621][T21044] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4160'. [ 531.560597][T21044] netlink: 'syz.3.4160': attribute type 33 has an invalid length. [ 531.622901][T21044] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 531.637863][T21044] bond3 (unregistering): Released all slaves [ 531.683637][T21053] 8021q: VLANs not supported on ipvlan1 [ 531.853497][T21065] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4165'. [ 531.906046][T21070] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4166'. [ 532.054351][T21079] netlink: 'syz.4.4171': attribute type 1 has an invalid length. [ 532.224267][T21091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.430374][T21110] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 532.470966][T21114] validate_nla: 1 callbacks suppressed [ 532.470984][T21114] netlink: 'syz.3.4182': attribute type 3 has an invalid length. [ 532.794573][T21132] syzkaller0: entered promiscuous mode [ 532.801051][T21132] syzkaller0: entered allmulticast mode [ 533.011303][T21145] netlink: 'syz.3.4189': attribute type 12 has an invalid length. [ 533.248986][T21165] vlan2: entered allmulticast mode [ 533.255748][T21165] veth1: entered allmulticast mode [ 533.307732][T21163] : entered promiscuous mode [ 533.584970][T21188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.872557][T21204] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.879865][T21204] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.986964][T21200] netlink: 'syz.3.4201': attribute type 1 has an invalid length. [ 535.577600][T21234] netlink: 'syz.5.4210': attribute type 1 has an invalid length. [ 535.614843][T21234] netlink: 'syz.5.4210': attribute type 1 has an invalid length. [ 535.823600][T21253] tipc: MTU too low for tipc bearer [ 535.831006][T21253] __nla_validate_parse: 12 callbacks suppressed [ 535.831022][T21253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4217'. [ 535.878572][T21253] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4217'. [ 535.901922][T21258] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4220'. [ 536.008839][T21257] veth1_vlan (unregistering): left allmulticast mode [ 536.050685][T21265] ipt_REJECT: TCP_RESET invalid for non-tcp [ 536.224087][T21267] netlink: 'syz.3.4222': attribute type 21 has an invalid length. [ 536.349178][T21276] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 536.368514][T21276] bond3: (slave lo): Enslaving as a backup interface with an up link [ 536.377855][T21276] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 536.504078][T21281] netlink: 'syz.1.4224': attribute type 30 has an invalid length. [ 536.620065][T21293] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 536.719692][T21302] netlink: 'syz.3.4231': attribute type 10 has an invalid length. [ 536.760039][T21302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.778135][T21302] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 536.879385][T21308] netlink: 'syz.5.4232': attribute type 3 has an invalid length. [ 537.009409][T21316] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4233'. [ 537.059576][T21316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4233'. [ 537.105655][T21316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4233'. [ 537.157459][T21316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4233'. [ 537.648240][T21357] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 537.722303][T21359] pimreg: entered allmulticast mode [ 537.815181][ T7361] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.834969][ T7361] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.859288][ T7361] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.878327][ T7361] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.963893][T21371] openvswitch: netlink: EtherType 0 is less than min 600 [ 537.990000][T21371] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4249'. [ 538.169413][T21385] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 538.228777][T21385] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 538.283285][T21385] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4253'. [ 538.351980][T21385] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4253'. [ 539.044936][T21448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 539.311595][T21469] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.320645][T21469] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.327930][T21469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.433547][T21476] netlink: 'syz.3.4277': attribute type 1 has an invalid length. [ 539.564013][T21476] 8021q: adding VLAN 0 to HW filter on device bond4 [ 539.606749][T21487] block nbd3: Unsupported socket: should be TCP or UNIX. [ 539.654123][T21477] 8021q: adding VLAN 0 to HW filter on device bond4 [ 539.673193][T21477] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 539.706954][T21477] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 540.373370][T21526] sctp: [Deprecated]: syz.1.4293 (pid 21526) Use of int in max_burst socket option deprecated. [ 540.373370][T21526] Use struct sctp_assoc_value instead [ 540.658303][T21544] netlink: 'syz.5.4298': attribute type 1 has an invalid length. [ 540.727062][T21544] 8021q: adding VLAN 0 to HW filter on device bond4 [ 541.108117][T21586] netlink: 'syz.0.4311': attribute type 29 has an invalid length. [ 541.117190][T21586] __nla_validate_parse: 7 callbacks suppressed [ 541.117206][T21586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4311'. [ 541.151931][T21584] dvmrp6: entered allmulticast mode [ 541.243995][T21595] netlink: 'syz.5.4315': attribute type 39 has an invalid length. [ 541.313299][T21597] netlink: 'syz.4.4317': attribute type 3 has an invalid length. [ 541.343688][T21597] netlink: 1644 bytes leftover after parsing attributes in process `syz.4.4317'. [ 541.485199][T21606] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4319'. [ 541.635125][T21620] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4323'. [ 541.920494][T21646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4328'. [ 541.990716][T21652] netlink: 'syz.0.4331': attribute type 11 has an invalid length. [ 542.017226][T21652] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4331'. [ 542.083021][T21654] xt_CT: No such helper "pptp" [ 542.135707][ T36] ------------[ cut here ]------------ [ 542.141641][ T36] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 542.155536][ T36] WARNING: net/mac80211/tx.c:758 at ieee80211_tx_h_rate_ctrl+0xbdd/0x1760, CPU#1: kworker/u8:2/36 [ 542.166212][ T36] Modules linked in: [ 542.170462][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 542.179817][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 542.189935][ T36] Workqueue: events_unbound cfg80211_wiphy_work [ 542.196295][ T36] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc4a/0x1760 [ 542.202749][ T36] Code: 00 00 48 8b 44 24 50 8b 30 45 31 ff 83 e6 07 41 0f 95 c7 31 ff e8 66 32 e9 f6 43 8d 0c 7f 83 c1 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 be 01 00 00 00 49 bf 00 00 00 00 00 fc ff df e9 [ 542.222420][ T36] RSP: 0018:ffffc90000ac73c0 EFLAGS: 00010206 [ 542.228552][ T36] RAX: ffffffff8ad7c99a RBX: ffffffff8f930590 RCX: 0000000000000005 [ 542.236593][ T36] RDX: ffff88801b31edc4 RSI: ffff88804595d7c8 RDI: ffffffff8f930590 [ 542.244683][ T36] RBP: ffffc90000ac7528 R08: ffff888060cc29c7 R09: 1ffff1100c198538 [ 542.249110][T21666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4335'. [ 542.252702][ T36] R10: dffffc0000000000 R11: ffffed100c198539 R12: ffff88801b31edc4 [ 542.269597][ T36] R13: 1ffff92000158e8c R14: ffff88804595d7c8 R15: 0000000000000001 [ 542.277974][ T36] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 542.286954][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 542.293641][ T36] CR2: 000055556e60d5c8 CR3: 0000000074ccc000 CR4: 00000000003526f0 [ 542.301648][ T36] Call Trace: [ 542.304931][ T36] [ 542.307941][ T36] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 542.314041][ T36] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 542.320260][ T36] invoke_tx_handlers_late+0xba/0x18a0 [ 542.325781][ T36] ? invoke_tx_handlers_early+0xa0c/0x1d50 [ 542.331632][ T36] ieee80211_tx+0x2ac/0x460 [ 542.336191][ T36] ? __pfx_ieee80211_tx+0x10/0x10 [ 542.341274][ T36] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 542.347314][ T36] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 542.353151][ T36] ? ieee80211_scan_state_send_probe+0x4e8/0xa00 [ 542.359536][ T36] ieee80211_scan_state_send_probe+0x594/0xa00 [ 542.365751][ T36] ? try_to_wake_up+0x7f5/0x12b0 [ 542.370714][ T36] ieee80211_scan_work+0x65f/0x1c50 [ 542.375989][ T36] cfg80211_wiphy_work+0x2ab/0x450 [ 542.381124][ T36] ? process_scheduled_works+0x9ef/0x1770 [ 542.386896][ T36] process_scheduled_works+0xad1/0x1770 [ 542.392497][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 542.398524][ T36] ? do_raw_spin_lock+0x121/0x290 [ 542.403589][ T36] worker_thread+0x8a0/0xda0 [ 542.408252][ T36] kthread+0x711/0x8a0 [ 542.412342][ T36] ? __pfx_worker_thread+0x10/0x10 [ 542.417501][ T36] ? __pfx_kthread+0x10/0x10 [ 542.422100][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 542.427342][ T36] ? __pfx_kthread+0x10/0x10 [ 542.431985][ T36] ret_from_fork+0x510/0xa50 [ 542.436630][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 542.441760][ T36] ? __switch_to+0xc9e/0x1480 [ 542.446528][ T36] ? __pfx_kthread+0x10/0x10 [ 542.451144][ T36] ret_from_fork_asm+0x1a/0x30 [ 542.455981][ T36] [ 542.459016][ T36] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 542.466306][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 542.475599][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 542.485693][ T36] Workqueue: events_unbound cfg80211_wiphy_work [ 542.491967][ T36] Call Trace: [ 542.495259][ T36] [ 542.498199][ T36] vpanic+0x1e0/0x670 [ 542.502209][ T36] panic+0xb9/0xc0 [ 542.505958][ T36] ? __pfx_panic+0x10/0x10 [ 542.510407][ T36] ? ret_from_fork_asm+0x1a/0x30 [ 542.515379][ T36] __warn+0x317/0x4b0 [ 542.519389][ T36] ? ieee80211_tx_h_rate_ctrl+0xbdd/0x1760 [ 542.525199][ T36] ? ieee80211_tx_h_rate_ctrl+0xbdd/0x1760 [ 542.531004][ T36] __report_bug+0x288/0x500 [ 542.535506][ T36] ? ieee80211_tx_h_rate_ctrl+0xbdd/0x1760 [ 542.541316][ T36] ? __pfx___report_bug+0x10/0x10 [ 542.546342][ T36] ? kasan_save_track+0x4f/0x80 [ 542.551194][ T36] ? kasan_save_track+0x3e/0x80 [ 542.556041][ T36] ? __kasan_slab_alloc+0x6c/0x80 [ 542.561059][ T36] ? kmalloc_reserve+0xbd/0x290 [ 542.565899][ T36] ? __alloc_skb+0x204/0x3a0 [ 542.570495][ T36] ? __netdev_alloc_skb+0xc1/0x850 [ 542.575594][ T36] ? ieee80211_probereq_get+0x60/0x270 [ 542.581052][ T36] ? ieee80211_build_probe_req+0x178/0x480 [ 542.586852][ T36] report_bug_entry+0x19a/0x290 [ 542.591701][ T36] ? ieee80211_tx_h_rate_ctrl+0xc4a/0x1760 [ 542.597498][ T36] ? ieee80211_tx_h_rate_ctrl+0xc4f/0x1760 [ 542.603296][ T36] handle_bug+0xca/0x200 [ 542.607547][ T36] exc_invalid_op+0x1a/0x50 [ 542.612047][ T36] asm_exc_invalid_op+0x1a/0x20 [ 542.616889][ T36] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc4a/0x1760 [ 542.623296][ T36] Code: 00 00 48 8b 44 24 50 8b 30 45 31 ff 83 e6 07 41 0f 95 c7 31 ff e8 66 32 e9 f6 43 8d 0c 7f 83 c1 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 be 01 00 00 00 49 bf 00 00 00 00 00 fc ff df e9 [ 542.643041][ T36] RSP: 0018:ffffc90000ac73c0 EFLAGS: 00010206 [ 542.649113][ T36] RAX: ffffffff8ad7c99a RBX: ffffffff8f930590 RCX: 0000000000000005 [ 542.657086][ T36] RDX: ffff88801b31edc4 RSI: ffff88804595d7c8 RDI: ffffffff8f930590 [ 542.665053][ T36] RBP: ffffc90000ac7528 R08: ffff888060cc29c7 R09: 1ffff1100c198538 [ 542.673015][ T36] R10: dffffc0000000000 R11: ffffed100c198539 R12: ffff88801b31edc4 [ 542.680982][ T36] R13: 1ffff92000158e8c R14: ffff88804595d7c8 R15: 0000000000000001 [ 542.688966][ T36] ? ieee80211_tx_h_rate_ctrl+0xc3a/0x1760 [ 542.694798][ T36] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 542.700872][ T36] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 542.707032][ T36] invoke_tx_handlers_late+0xba/0x18a0 [ 542.712498][ T36] ? invoke_tx_handlers_early+0xa0c/0x1d50 [ 542.718316][ T36] ieee80211_tx+0x2ac/0x460 [ 542.722819][ T36] ? __pfx_ieee80211_tx+0x10/0x10 [ 542.727857][ T36] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 542.733837][ T36] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 542.739643][ T36] ? ieee80211_scan_state_send_probe+0x4e8/0xa00 [ 542.745971][ T36] ieee80211_scan_state_send_probe+0x594/0xa00 [ 542.752136][ T36] ? try_to_wake_up+0x7f5/0x12b0 [ 542.757084][ T36] ieee80211_scan_work+0x65f/0x1c50 [ 542.762305][ T36] cfg80211_wiphy_work+0x2ab/0x450 [ 542.767418][ T36] ? process_scheduled_works+0x9ef/0x1770 [ 542.773134][ T36] process_scheduled_works+0xad1/0x1770 [ 542.778695][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 542.784666][ T36] ? do_raw_spin_lock+0x121/0x290 [ 542.789701][ T36] worker_thread+0x8a0/0xda0 [ 542.794310][ T36] kthread+0x711/0x8a0 [ 542.798382][ T36] ? __pfx_worker_thread+0x10/0x10 [ 542.803484][ T36] ? __pfx_kthread+0x10/0x10 [ 542.808078][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 542.813275][ T36] ? __pfx_kthread+0x10/0x10 [ 542.817864][ T36] ret_from_fork+0x510/0xa50 [ 542.822450][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 542.827551][ T36] ? __switch_to+0xc9e/0x1480 [ 542.832227][ T36] ? __pfx_kthread+0x10/0x10 [ 542.836814][ T36] ret_from_fork_asm+0x1a/0x30 [ 542.841610][ T36] [ 542.844994][ T36] Kernel Offset: disabled [ 542.849305][ T36] Rebooting in 86400 seconds..