last executing test programs: 12.913668329s ago: executing program 3 (id=2398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000240)={0x3, [0xe9f, 0xc, 0x2]}, &(0x7f00000002c0)=0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fd00000085000000a800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) sendto$inet6(r3, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000200)={0xa, 0x4e23, 0xd, @loopback, 0xffffffff}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000300), 0x8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES16=r5, @ANYBLOB="010022bdf000fcdbdf251000000008000300", @ANYRES32=r6, @ANYBLOB="08000600", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) syz_emit_ethernet(0x5e, &(0x7f0000000480)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@local}]}, @ssrr={0x89, 0xf, 0xce, [@broadcast, @dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x18}]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) syz_emit_ethernet(0x82, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3c0000000000000000000000000000000100ff02000000000000000000000000000133", @ANYRESDEC=r5, @ANYBLOB="576aa6d21d"], 0x0) (async, rerun: 64) socket$inet(0x2, 0x800, 0x4d) (rerun: 64) 12.069859398s ago: executing program 3 (id=2411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x4c, 0x1a, 0x2, 0x0, 0xfffffffd, {0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_PROBES={0x8, 0x4, 0xffffffff}]}, 0x4c}}, 0x0) syz_emit_ethernet(0x14a, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x1, 0x2, [0x783, 0xd2, 0x9fc, 0xa99]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x2c, 0x3, 0xe7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x4, 0x401}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={r4, 0x7f, 0x6, 0xd, 0xc, 0x1000}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0x800000000000d}, 0xfffffffffffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003900010324bd7002fadfdf9b000000b5554908f12b0696124e696efebd405a3ee982dfa8656ed31a246dcb19901f26cf17792cf22412b82bcc1a4467665faca17c74b424ff6c60383dc3b7de70a914fa5acf74ee556edc6eb1023ead9dd2641709"], 0x14}}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00000c00000000000000000000000400080088856d00f92fb75e907b22b4d70848507ea830038a000000000000e80300efff0000000002010000ac1414aa00001c00000000000300060000000000020000000a0101010000000000000000"], 0x60}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socketpair(0x31, 0xa, 0x5a, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x30) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x20000000000000bc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) unshare(0x24040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9, 0x0, 0x5d28}, 0x18) 11.740088215s ago: executing program 3 (id=2415): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00140000000280", 0x2a}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r6, &(0x7f0000000300), 0x2, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="19002dbd7000fcffffff1b000000180001801400020064756d6d7930"], 0x2c}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff51}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r10}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='rpc_buf_alloc\x00', r10, 0x0, 0x4}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x480, 0x0, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000240)) 11.18685631s ago: executing program 3 (id=2424): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x2160) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) readv(r6, &(0x7f0000000840)=[{&(0x7f00000000c0)=""/180, 0xb4}, {&(0x7f0000000180)=""/132, 0x84}, {&(0x7f0000000240)=""/18, 0x12}, {&(0x7f0000000280)=""/226, 0xe2}, {&(0x7f0000000480)=""/250, 0xfa}, {&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000000680)=""/212, 0xd4}, {&(0x7f0000000780)=""/185, 0xb9}], 0x8) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) close(r7) syz_init_net_socket$x25(0x9, 0x5, 0x0) 10.204549332s ago: executing program 3 (id=2437): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, r2, 0x1, 0x0, 0x25dfdbfe, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x44}, 0x1, 0xffffffff00000003, 0x0, 0x4000}, 0x0) 10.09591924s ago: executing program 3 (id=2438): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1dfcff0004000000040000000911000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1dfcff0004000000040000000911000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet(0x2, 0x2, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r1}, 0x20) r2 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0x1, 0xfffffffc}}], 0x18, 0x4c00}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) unshare(0x2c020400) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, 0xfffffffffffffffd, 0x0) (async) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, 0xfffffffffffffffd, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000008000000000000000000000f70000000001000000000000292a8c0be9bdac0088fa2e942cec026fcab26be94cc34e80e0c54fb1ed66bf2397c6937fbb58a043555179a8b68c70d2d28438460bee754be701f4d6c944972fb6a940be8fcf6e26ce9f3be8e450b19ee3c204e0c9e7cb464169916960531353d4a1ed508a7062eb276748a68e1199e73ab1c16d6f274c"], 0x48) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000008000000000000000000000f70000000001000000000000292a8c0be9bdac0088fa2e942cec026fcab26be94cc34e80e0c54fb1ed66bf2397c6937fbb58a043555179a8b68c70d2d28438460bee754be701f4d6c944972fb6a940be8fcf6e26ce9f3be8e450b19ee3c204e0c9e7cb464169916960531353d4a1ed508a7062eb276748a68e1199e73ab1c16d6f274c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5774b037, 0x0, 0x6e}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x2002, 0x4, 0x0, 0x5}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5774b037, 0x0, 0x6e}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x2002, 0x4, 0x0, 0x5}, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2800c880) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r8, 0x8911, &(0x7f0000000000)) (async) ioctl$sock_netdev_private(r8, 0x8911, &(0x7f0000000000)) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe) socket(0x2b, 0x6, 0x8000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 6.817140416s ago: executing program 0 (id=2470): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x22020600) r10 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r10, 0x11, 0xb, &(0x7f00000000c0)=0x7ffffffc, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', r5, 0x1, 0x20, 0x0, 0x4, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x44, 0x58, 0x3, 0xa, [{@local, 0x2f}, {@multicast1, 0x6}, {@local, 0x7fff}, {@empty, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x47ed}, {@remote, 0x2}, {@broadcast, 0xa}, {@broadcast, 0xfffffffa}]}, @end, @timestamp_prespec={0x44, 0x24, 0x4c, 0x3, 0x6, [{@empty, 0x7f}, {@empty, 0x7}, {@empty, 0x43}, {@multicast1, 0x6}]}, @timestamp_addr={0x44, 0x3c, 0xc3, 0x1, 0xf, [{@multicast2, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x39ba}, {@loopback, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x80000000}, {@multicast1, 0x1800}, {@multicast2, 0xffffffff}, {@private=0xa010100, 0xc0000}]}, @noop, @noop, @timestamp={0x44, 0xc, 0x64, 0x0, 0x6, [0xff0d, 0x8]}, @timestamp={0x44, 0x8, 0xfa, 0x0, 0x4, [0x9]}, @noop]}}}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f03", 0x17}], 0x1}, 0x0) r11 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) 5.838328339s ago: executing program 0 (id=2477): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x1, 0x80000, 0x25dfdbfe, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x6}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000240)={0xae4e, {0x2, 0x7, 0xfffffffffffffffd, 0x3, 0x382}}) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2b, 'io'}]}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x2, 0x2, "e8e81a", 0x2, 0x3}) syz_emit_ethernet(0x4e, &(0x7f0000000940)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xaf01, 0x1ff, @mcast2}}}}}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc9, &(0x7f0000000000), 0x4) 3.930392655s ago: executing program 0 (id=2489): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x1, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2, 0x8000, 0x0, 0x0, 0x300}}) unshare(0x2a020400) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) close(0x3) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x270) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) writev(r1, &(0x7f0000003b00)=[{&(0x7f0000000580)="c24e", 0x2}], 0x1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="7a26aa188a0884e3b37e9a766eb08bbe", 0x10) close(0x3) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0xfdac}], 0x1}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000100003050300"/20, @ANYRES32=0x0, @ANYBLOB="15010000000001002400128009000100626f6e6400000000140002800800030006000000080004003037f0996b6200000000"], 0x44}}, 0x28000000) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@allocspi={0x108, 0x16, 0x100, 0x70bd2c, 0x25dfdbfd, {{{@in=@local, @in6=@mcast1, 0x4e22, 0xffff, 0x4e22, 0x3, 0x2, 0x20, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x4d6, 0xff}, @in=@dev={0xac, 0x14, 0x14, 0x39}, {0x48, 0x3, 0xd, 0x6, 0x51, 0xfff, 0x15d417a1, 0x4}, {0x1, 0x6, 0xfc5aef4, 0x1000}, {0xd, 0x7, 0x4}, 0x70bd2d, 0x3504, 0xa, 0x1, 0x6e, 0x4}, 0xfffffffa, 0x3ff}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @XFRMA_SET_MARK={0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000002}, 0x4008) 3.388237326s ago: executing program 4 (id=2494): syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x74) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x74) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x800000000000001, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xfffffffb, 0x7, 0x6}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="01c6a47198fd86ae175a20c737c92a941800000000000000e60000002008000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7093665a15489836d0001000068008df05000400000004000200"], 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000480), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x7f, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffee) (async) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffee) write$tun(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x100) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000000000000fcfe07000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000395cedb216292c2cc020000000000000000000000000000000000009f724510ab3acfd900000000000000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r4, 0x0, &(0x7f0000000200)=""/76}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) unshare(0x6a040000) (async) unshare(0x6a040000) r5 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x6180, 0x0) (async) ioctl$sock_netrom_SIOCADDRT(r5, 0x6180, 0x0) sendmsg$sock(r5, &(0x7f0000000ac0)={&(0x7f0000000340)=@caif, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)="8ffbb77daf9a88b801b78dca03cb45734d41c4c0335164692615ee8a1433f92b7f6498ae0d8a2641be99b214f04561ec4c9aeefbb7430b55db8fe6f17e5be3b74c61916b0c27719da6c6bdda11b0143fae6317b36377d4be0c0e037d26ad9c8127b372d0dd1e986fbea46c8e", 0x6c}, {&(0x7f0000000800)="15a41ea152713af01ea59cc6e4da5602e5d6c553378d1ff53ca094744b20fd2b8181f454615a57b8296bb88886808a90454651feb34f8a5d9da4a6d5e25303f1de8090a2ccbd5e3fb59f6fdb522c889a9d30", 0x52}, {&(0x7f00000008c0)="a739b434e935be80be616fe290135c9db9c13d1a4e169147f595fd638b6a4d065210a762c31ff35f151989ff464d55289bce5256e1b8cfc2f4cd0e3c2fbf73b5580dc84d66e6e723a603117ca84ec16c8fccafd956bb3a283d8b3b", 0x5b}, {&(0x7f0000000940)="76ba28606ad8178e29922b8eee8254a0ab77badf182108172da85800d50daa8a176e1afd7497a0cc7844e857c1b8a142bab4e21af121511aed91277e58e0bed39dc6ae6a816b8427fce09483aa3d2abbf89cfbf2eb38874198b82a6b43e6cedba8d1c98d3e01ba0eb03dc12ca99be2f2a3ccc340fbcea6b055aabd7c71eb45561e2672a884436ee78d8791f84f85a4986e300adafdae4998e1222f45f523f01f1adfb6845dc3b1b7a52c158cb1e12137ab903076d394b4", 0xb7}, {&(0x7f0000000600)=')', 0x1}], 0x5, &(0x7f0000000a80)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x30}, 0x8000) syz_genetlink_get_family_id$team(&(0x7f0000000040), r5) 3.20893232s ago: executing program 4 (id=2496): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e23, 0xe0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e23, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0xf6, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xf, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xada, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000280)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x200000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x8, 0x9, 0x0, 0xe, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000580)=0x5) vmsplice(r7, &(0x7f0000000100)=[{&(0x7f0000001600)='\f', 0x1}], 0x1, 0x2) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$bt_hci(r8, 0x84, 0x7f, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x1, 0x84) 2.676822899s ago: executing program 2 (id=2501): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000480)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_link_settings={0x4d, 0x3, 0xc5, 0x5a, 0x7f, 0x6, 0xb, 0x7, 0xfd, 0x2, [0x6a33eee4, 0x0, 0x7e88000, 0x2, 0x7ca, 0x7, 0x6, 0x2], [0x3, 0xf, 0x63, 0x6, 0x6, 0x2, 0x7, 0x7fff, 0x1000000, 0x1]}}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x74, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff3, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xfffffffffffffe08, 0x1, 0xfffffffb}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x401}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x44044) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000000000604000000080000000100000ff7ffffff0400000001000000fffffff70030615f5f002e305f"], 0x0, 0x46, 0x0, 0x1}, 0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$int_in(r5, 0x0, &(0x7f0000000180)=0xfffffffffffffffc) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r8, @ANYBLOB='\b'], 0x24}}, 0x4000) 2.548175499s ago: executing program 2 (id=2502): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$sock(r0, &(0x7f0000002280)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@timestamping={{0x14, 0x1, 0x41, 0x7}}], 0x18}}], 0x1, 0x80) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$packet_int(r2, 0x112, 0xc, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000016000000b30000007f000000004f0000ee91888a24f321ad92b8a30ecb6eaf217eb04de221ee80278fe8842d89f8a45e982d6f4228d071890b36b3", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000500), &(0x7f00000000c0)=@tcp6, 0x2}, 0x20) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={r5, @in={{0x2, 0x4e22, @multicast2}}, [0x6, 0xb95d, 0x8, 0x7f4a, 0xe, 0x7, 0xd0, 0x5, 0x2, 0x7fffffffffffffff, 0x3, 0x3, 0x3, 0xb99, 0x2]}, &(0x7f00000001c0)=0x100) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xffffffffffffffff, "b47e714fb6a11321983eab4b74a3599254b3b1f887df7bc9f22aa5d366c05bfa", 0x8001, 0x7f, 0x9, 0xc}, 0x3c) 2.320607178s ago: executing program 2 (id=2504): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000fdff2b000000044dec7c0ad4fd71745b32ca40042c00000002000000000000000000000b00000000000000000100000d00b0f5c9ad6f3ef7e00000000000000000000009030000000000a813127850969b8797fd05fc7337975c463d655413c60c2f1ab0efc0f50f58db4aa3dd417fea6c913b067df1811482ecaa7fa79f355eda4157d380d331e856b30189c5a9edd171a72a711f11c541f80ddf0f02658d099f75c01cfe76d9b64b81ce8627497d2ffafe102691d8c7a3247910253840a3308e237e21ce522bf3947a920d13"], &(0x7f0000001b80)=""/4090, 0x46, 0xffa, 0xa}, 0x20) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000fdff2b000000044dec7c0ad4fd71745b32ca40042c00000002000000000000000000000b00000000000000000100000d00b0f5c9ad6f3ef7e00000000000000000000009030000000000a813127850969b8797fd05fc7337975c463d655413c60c2f1ab0efc0f50f58db4aa3dd417fea6c913b067df1811482ecaa7fa79f355eda4157d380d331e856b30189c5a9edd171a72a711f11c541f80ddf0f02658d099f75c01cfe76d9b64b81ce8627497d2ffafe102691d8c7a3247910253840a3308e237e21ce522bf3947a920d13"], &(0x7f0000001b80)=""/4090, 0x46, 0xffa, 0xa}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000200)={r5, 0x1, 0x6, @multicast}, 0x10) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x100, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x14, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0xc1) (async) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x100, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x14, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0xc1) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@getchain={0x74, 0x66, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9, 0xa}, {0xd, 0x8}, {0x5}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x6}, {0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xfffffffb}, {0x8, 0xb, 0xe9}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000893}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@getchain={0x74, 0x66, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9, 0xa}, {0xd, 0x8}, {0x5}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x6}, {0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xfffffffb}, {0x8, 0xb, 0xe9}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000893}, 0x0) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r10, @ANYRESHEX=r12, @ANYRESDEC, @ANYRES64=r5, @ANYRES32=r9, @ANYRES64=r3, @ANYRESOCT=r12, @ANYRES16=r13], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, r16}, 0x38) bind$bt_hci(r15, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) bind$bt_hci(r15, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000000)=0x2, 0x4) write$bt_hci(r15, &(0x7f0000000000)=ANY=[], 0xa) setsockopt(r14, 0x84, 0x14, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 2.228921767s ago: executing program 4 (id=2506): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000090000000000000080000000850000007500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, &(0x7f0000000000)=0xff98) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gretap0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$tun(0xffffffffffffffff, &(0x7f0000000480)={@val={0x0, 0xfbfb}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @empty, @loopback, @broadcast, @rand_addr=0x64010100}}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) 2.024670932s ago: executing program 1 (id=2507): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB="880000000314010000000000000000000900020073797a3100000000080041007278650014003300627269646765300000000000000000000900020073797a31000000000800410072786500140033006d6163766c616e392a1e5600000000000900020073797a30000000000800410001786500140033006c6f00000000"], 0x88}}, 0x20000000) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x0, 0x711, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r4, &(0x7f0000000f40)="ba40cdbbce875bd2d21997bf84d4ececb1ddb442e734c6b5f509f7844678ae575dc31d5f50f42aeadb3ca50d25419dc62db1fcb6f278f589b886104536e85a16945138085a8658dd828ff205af45f5e7f48bae8e56a1c6d36967d22ea682af4313a6e15848accf2ee0c5bcd581c9e5121307e1f6e2af5cfed999e61c652154eedeb4f01903748ac3a6ae1d06e7e7b56999cd37aa4d07d37cc0", 0x99) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001040)=0x1c, 0x800) setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000001080)=@hopopts={0x73, 0x14, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x5, 0x48f, [0x1ff, 0xffff, 0x6, 0x6]}}, @pad1, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x30, {0x0, 0xa, 0xb, 0x3, [0x0, 0x0, 0x7, 0x9, 0x6]}}, @calipso={0x7, 0x40, {0x3, 0xe, 0x6, 0x4, [0x0, 0xf, 0x2, 0x7f, 0x8, 0x7, 0x0]}}]}, 0xb0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x1, &(0x7f00000000c0)=0xffff6a4b, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001240)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001004048d46d2d7bbdae28e7aa177fda4723631f15cb28066e7174d45ed05433112ce542d2", @ANYRES32=0x0, @ANYBLOB="010003dd000086de00000000002d616e88f0ff0000000000"], 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) r9 = socket(0x23, 0x80002, 0x0) bind$inet(r9, &(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000003c00)=ANY=[@ANYBLOB="e00000001000090500c63703b60000000000d00008004300ff030000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27d08000000337c000400bf852c8986626691b01b5f44e4ce28715f2828"], 0xe0}], 0x1}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r7, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x30020400}, 0xc, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="b8020000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fcdbdf257a000000d200fa0080347f37755c28cf78bd480b1ae691e9fa9a5d8f0d133cae1085c6ed235901d3c919fe23370957588ac1dffd0d91819194e258e7e281dd9c375fc2361d6df689fbfdb1297b2cf5b2a0068acd52d3acad3b93267a87ede8e2064dcfacc91bae79128cb54829ce18516aa8fd419748e647805f329bfcf639e16f351fd76546e5580fadc49281f2cc61d1549969121bceb1a487fc943c4009333183cdbf9fa03043434b0ee7e9c28bb5b47ba5806e5b7a7b25ec67c7ed5c029e3d0f4b48128b408604494504000000baa745a247c09d0000e600fa00b67cec7f6c270ad065af5efd6450f06c86d354f72db70c472c944b924a4c34277f75f584d0938519a5860a2e41ad52f3553fc8cad67f148d76b8053b7caa8f4ceef85d9d0b57799f8d92088f5e97aec6202f7c0a19df8ae4105c7dc6052e8ed9899a651566b08d3ffb748a0692628c46ae6a5551ad449ca2e2cc477332d17e43531858fa8e498338de4f018cc0a910f9319a809e69540d3f856333e66198194e93b66d666005657b77291478bbb6d7a5960c674a97a89db02eff7251c651f3d6e3912f0dfdd83217b243f911213b11572eaaae9c75154b60c28318775b7314ef6a2900004400fa00672b7bc4dec16e97053f6e3d743083a1df76f0986de472360323e56a5493efe10720ab143b93bbd72cbf2103012460f69b749936607099410b95a4c1ef9a2f0e9b002a002a8e3946eb7d0076a8b57ffee7060209008b55f47e158f289773e88297066c694e6b3e483e91358b3f8e061bb76adf443541a3996abee93425ac751901caeed8bc45c00cc848eb825774ff7f58de94fa665edcf089f2e481212f3a970437efccf49ac8a8b109f4a07107010101010240097e15024605080211000001060000004000000027ce00002d1a4000017a02000000000000040000001500000000030100000002000600fb0004000000427d47234aec05baab91aea8d12f1673"], 0x2b8}, 0x1, 0x0, 0x0, 0x40004}, 0x4045815) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000002000010300000000fbdbdf25022000000000000000000000090001"], 0x2c}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1.281950728s ago: executing program 0 (id=2508): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060007010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001f", 0x6c}], 0x1}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000000000001000000ffffff7f000000001400000000000000100100000d0000000703ba000000000084173bd519dcda221c062cb12a1689804afbb9eca83bd17f27c64714738dafdfdeb1e20a3a242ad89c21c200dc60ba7eae185d52d4d8ea449d9c75fa7fed144a62684876866b"], 0x30}, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071114c00000000008510000002000000850000008a00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68000000100001002cbd70002000000000000000", @ANYRES32=0x0, @ANYBLOB="1001935784800000140003006e657464657673696d300000000000001400140069703667726574617030000000000000200016801c00018018000c8014"], 0x68}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000010) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001a00)={@multicast1, @multicast2}, &(0x7f0000001a40)=0xc) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000100)="e6", 0x1}], 0x10000000000000d4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003c00)=@generic={&(0x7f0000003bc0)='./file0/file0\x00', 0x0, 0x10}, 0x18) ioctl$BTRFS_IOC_FS_INFO(r9, 0x8400941f, &(0x7f0000003c40)) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002abd7000fbdbdf254400000008000300", @ANYRES32=r10, @ANYBLOB="1c0023800602030741f2b4eb18060000000700"], 0x38}}, 0x40040) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28081}, 0x8000002) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r12, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) socket$pppoe(0x18, 0x1, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r12, 0x40089416, &(0x7f0000001d40)) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000003b40)={{}, {0x4}, 0x18c, 0x0, 0x0, &(0x7f0000001d80)='./file0\x00', &(0x7f0000001dc0)='./file0\x00', &(0x7f0000001e00)="db763eae853c7742f19aba28859a456aaad742c5d1f08f6bcef7587ba3e0830c654470605aacc55fc172ce5c93db74c609b05adadab446206a6b6802b825a8adad5b9f7fa4d4558bd311a4048c2c5cc3476eb6b7fb748ed4", 0x58, 0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="0200000082010000010000000cee000000883bfe65bb0e388d88d3c0d18166663a9913c87781a4d1a32533af8ea506196f2d3ae08894f3dd83f658cf8300da322bec9f9653d8667714733c281d4d2e27e41efe1492f86846ff5d2cb9faf6c193e70e90fc478a0edfa58caf2bd28d73f4e3b6b9a3c5c544c9696df48e2b1bf8a9fc6f6001f394233244bd894832539cf8d91f1612089394d98c300f88e68e0f6b15f4b2c8c9a48479ea86545e50a74fe09df7b9fd71c11d7ee35f616b83bfeff8d37100f631e5cd8461df88947260aed3a979d5c60ede054191e52fb4d68e024c55364b5c0082ae95b20d1680342abf21004f909c39c354f835494f43c34f9987000000ee6ce14bd5e4d32446e610cb786644d081850956637f638c9f9aa2129be9b81ff0cb97a11c6a4251a0a2614d65d8fc50ed213c031a7b1aea3b893dfd3b6f34fc37af8f249fecda4315f1b54935c1bc1c18b80b88a3ad00491f40ba65723e28ee1823c43bc32b63d57afffec0600d7b60c4375e3adf3fe507749c33950753d2a17f32e9bb3ad95b080000006743c36a4a0ddf57ffe8974387a3f5163c857e1aebf7ad88de338da3d0905b72387d10788a0bcc005890c4a2afc378caa14064f58571882e77cd656d43f86364ab8fd1125c1616e0a0395112acae7b59c8cf27530ecf5a97f31eb57c6dc485343bf8fbc930a2131270bde1404cc35a9d7c17ddcec23b55a6f240b66017e2aa924e0e"], 0x196}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000140)) 1.178106911s ago: executing program 2 (id=2509): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x888, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x3ff, 0x5, 0xfffffffd, {0x8, 0x1, 0x2, 0xf801, 0xa6d, 0x12b}, {0x5, 0x0, 0x4, 0x3701, 0xcc3e, 0x7}, 0x0, 0x2, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0xe, 0x80000001, 0x8, 0x200, 0x6, 0x8, 0x4, 0x10200000, 0x4, 0x3, 0x9, 0x3, 0xffffffff, 0xb, 0x9, 0x4, 0x9, 0x5, 0x300000, 0xe1b5, 0xc5b, 0x6, 0x4, 0x9, 0x6, 0x9, 0x8, 0x3, 0x9, 0xd, 0x7f, 0x7, 0xce0, 0x1ff, 0x6, 0x6, 0x41, 0xff, 0x800, 0xfff, 0x7, 0x9, 0xd, 0x4, 0xffffff1f, 0xa, 0xc, 0x8, 0xfffffffa, 0x155, 0x7, 0x0, 0x18000, 0xc, 0x9, 0x40000, 0x101, 0x6, 0x3ff, 0x1, 0x3, 0x7554, 0x2, 0x4, 0x1, 0x4, 0xd, 0x8000, 0xff, 0x0, 0xeac2, 0x87, 0x3, 0xfe000000, 0x3, 0x8001, 0xff, 0xffff1cac, 0x2892, 0x6, 0x8c5e, 0x1, 0x5, 0xffffffff, 0x80, 0xffffffac, 0x3, 0xff1, 0x2, 0x2, 0x8, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x80000001, 0x9, 0x8, 0x0, 0x8, 0x487, 0x6, 0x8, 0x1000, 0x1ff800, 0x6, 0xfffffffe, 0x3c78, 0xfa1, 0x3, 0x6, 0x9, 0xffffffff, 0x80000002, 0x2, 0xda, 0x9, 0x401, 0x6, 0x7, 0x2, 0x2, 0xe, 0x835, 0x4, 0x3, 0x6cc7, 0x6, 0x8, 0x8, 0x400, 0x8, 0x4, 0x3, 0x5, 0x5, 0x0, 0x9, 0x400, 0x3, 0x0, 0x4cc, 0xb, 0x0, 0xce, 0x6, 0x0, 0xc8, 0x4, 0x5, 0x4, 0x1ff, 0x1ff, 0x968, 0x5, 0x68cff086, 0x2, 0xfff, 0x2, 0x7ff, 0x1000, 0x80000001, 0x9, 0x9, 0x0, 0x8001, 0x1000, 0x8b7f, 0xfe, 0xc, 0x8, 0x7, 0x8000000, 0x0, 0x7fff, 0xfffffffd, 0x5, 0x815d, 0x5, 0x44, 0x4, 0x6, 0x3, 0x1, 0x8, 0x0, 0x7ff, 0x3, 0x8, 0x1, 0x2, 0x800, 0x7, 0x5, 0x10, 0xfffffff7, 0x8, 0x40, 0x1, 0x10001, 0x1000, 0xe42c, 0x1, 0x101, 0x6, 0x8, 0x4, 0x9a14, 0x4, 0x81, 0x7, 0x0, 0x8, 0x8, 0xfffffffa, 0x0, 0x30000, 0x7ff, 0x4, 0x3, 0xd, 0x5, 0x0, 0xfff, 0x3, 0x7b0, 0x7, 0x9, 0xffff, 0x5, 0xff, 0x4, 0x0, 0x4, 0x9, 0x6, 0x100, 0x81, 0x0, 0x7fc, 0x2, 0x5, 0x80, 0x2, 0xe, 0x1, 0x40, 0x1ff, 0x3, 0x380, 0x6, 0x7, 0x8, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x8, 0x7, 0xffff, 0x2, 0x3, 0x7fff, 0x8, 0x0, 0x401, 0x4, 0x0, 0xf7b1, 0xa, 0x40, 0x200, 0x0, 0x1, 0x9, 0x9, 0x8, 0xbf2, 0x2, 0xffff9374, 0x9, 0x1, 0x5, 0x3ff, 0x3, 0x6, 0x5, 0x2, 0x7, 0xe, 0x5, 0x4, 0x9, 0x8, 0xf0, 0x5, 0x8000, 0x0, 0x7, 0xff, 0x2, 0x2, 0x400, 0x0, 0x5, 0x2, 0x401, 0x100, 0xf30, 0x8001, 0x9, 0x370, 0x3, 0x1, 0xfffffff9, 0x9, 0x3, 0x5, 0xb9b, 0x1, 0x5, 0x0, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0x7, 0x76, 0x9, 0xffff, 0x8, 0xd, 0x80, 0x4, 0x9, 0x7ff, 0x80000001, 0x9, 0x6, 0x7f, 0x9, 0x7ff, 0x3, 0x8, 0x31, 0x1, 0x2d, 0x0, 0xf02, 0x15200, 0xa, 0x1, 0xe148, 0x7, 0x1, 0x3, 0x6, 0x6, 0xb, 0xfffffffa, 0x4, 0xdf, 0x80000000, 0x8001, 0x2, 0x3, 0x2971010e, 0x3b655406, 0x1, 0x8, 0x6, 0x6, 0x4, 0x4, 0x8, 0x80000001, 0x5dd, 0x2d3, 0x7, 0x8, 0x5, 0x79d5, 0x2, 0x800, 0x8d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x338, 0x6, 0x2, 0x4, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x3ff, 0x8, 0x56, 0x7, 0x401, 0x7, 0x0, 0x0, 0x0, 0xda, 0x5, 0x42, 0x18, 0xfffffff7, 0x5, 0xed2, 0x7, 0x211, 0x0, 0x2, 0xc9, 0x3, 0x8, 0x1, 0x9, 0x58, 0x8, 0x5e5, 0x5, 0x3, 0xfffffffb, 0x3, 0xff, 0x6, 0x10, 0xf7ee907a, 0xff, 0xc9, 0x9, 0x0, 0x400, 0x0, 0x7, 0x6, 0x9, 0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x7, 0x2, 0x3, 0x9, 0x9, 0x0, 0x7, 0x4, 0x0, 0x4, 0x4, 0x4, 0x6f3, 0x6, 0x10, 0x0, 0x7, 0xfffffff9, 0xfffffffa, 0x9, 0x53a, 0x8, 0x1, 0x4, 0xb, 0x8, 0xfffffff9, 0x400, 0x461, 0x81, 0x8, 0x2, 0x7ff, 0x2, 0x8000, 0x7, 0x4, 0xba95, 0x4, 0x4706, 0x7ff, 0x4, 0xffffffff, 0xf7b1, 0x3, 0x2, 0x5, 0x9, 0x1fffc, 0x80000000, 0x8001, 0x9, 0x4, 0x9, 0x3, 0x6, 0xce, 0x8]}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.149780744s ago: executing program 4 (id=2510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) 1.044971125s ago: executing program 1 (id=2511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x22, &(0x7f00000011c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xff84, 0x0, 0x84, 0x0, @remote, @broadcast}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 672.140537ms ago: executing program 4 (id=2512): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f00000002c0)={0x0, 0x7, 0xefff, 0xfa64}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1084, 0xa802}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4015}, 0x40000c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x1, 0x0) vmsplice(r7, &(0x7f0000000400)=[{&(0x7f0000000180)="0ddf", 0x2}, {&(0x7f0000000380)="a67349d868", 0x5}, {&(0x7f0000001100)="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", 0xf81}], 0x3, 0x6) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) write(r5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}}, 0x20}, 0x1, 0x0, 0x0, 0x4004080}, 0x8ae257a066ce3d64) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) recvmmsg(r9, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x963}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) splice(r9, &(0x7f0000000080)=0x81, 0xffffffffffffffff, &(0x7f0000000240)=0x8, 0x2, 0x4) sendmsg$nl_xfrm(r10, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000940)=@newsa={0x180, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0xa, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x3, 0x2, 0x1, 0x0, 0x3}, [@algo_crypt={0x48, 0x2, {{'cbc-camellia-aesni\x00'}}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x4075}, 0x4004810) r11 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001680)=ANY=[@ANYBLOB="1800000022cdd22b4860f92f5af9d8e0ba50aa968d4ab675fdeb371b6bdfcd6d2701000b559a733b84897cb83d001a0d66963c8851e2080000000000000048651b6080a636dfbb0200a4c3635836733fb1906b18f2668c22b4abbd2ca3312ea789fbb100b723190cae06dc08ed65e33104b1727283b5db85082c407edf16e36503671ba2a7c54851f9a407679686a21fc42f04519aeaee1fbe77a69e", @ANYRES16=r8, @ANYBLOB="a7944b9cad48c448805f37739c22cfa81f9fe9e12cd020fb3eca89ecbe05670fa5b9b41aa8e4638c1cd09b1c45e208c0cb9beb66ed86e876d09447e3c08e514253812327b4a9f23a6ae200a50ee8b9950a4ef6a09abd45dd3be46c859fd8393945e41b6552faf80da72ec0441bcd0c1a72e40b6053176b7b3705a89581a077b4ca004ab193ee4103049ccf40ba8fa945408d8c31ac02e80458341eec5992d16f1d8e0ca1f01373960c18256cf0ebb061b8fdf4ec17633637a82e0ba15e86457daaff7eb9389e494926eb4fe267e7aa3cdba4472891", @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r8, @ANYRESDEC=r10, @ANYRES32=r9, @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRES16=r9], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) 669.381286ms ago: executing program 2 (id=2513): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x34, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x40000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0xfffffffb, [{0xe, 0x0, 0x3}, {0x7, 0x3, 0xfffffffd}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x46, 0x0, 0x6}, 0x28) r8 = socket$inet(0x2, 0x80000, 0x40005) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r8, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 665.976514ms ago: executing program 1 (id=2514): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000852b1262fac55aa5e000000000000000f9ffffff00fe00000001000084080000000600000001000000030000000000feffffff2d000000"], &(0x7f0000000380)=""/3, 0x46, 0x3, 0x1}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32, @ANYBLOB="40e9216a365c6d1d06588f356fcfeb5e154d09856a2c15a97f506d0e2d59423a3a28fa89c67a7c3733e31a2b58484c7a1516a5bbb1e5efd18fd968b8bccac4054ea599d3aab2491c5059cab6b13a36c5e24e2b52a13d43cdbbda7eb73c96f43e832da3f97eb4ddc58d46b12170844c3c7cff440a758f79c4b9acd328ca61de1a58062debd53dcd17ba85b2d3d1e62051144a09520cdac7c8e6cfc8bd896f031038643533fcd9"], 0x1c}}, 0x20000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x12}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1a8, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x174, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x4}, @TCA_BPF_ACT={0x164, 0x1, [@m_mirred={0x160, 0x11, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xf1, 0xffffffffffffffff, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x3, 0x8, 0xe, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5c, 0x7, 0xfff, 0x1}, 0x4}}]}, {0xd1, 0x6, "319bb848351b002738b6c4c50b9141bebb58a1fd9f04e35af9c32268b29dfa1c25c9502b51b55eff39526a56fd0f6d8f94d05679ea0836ee4adecfe3236d2d9a2d17310974eb3856d00a1028999d09c1f69183f20defc6d04e2c20de3729c15f156d19b570d01b6142387bd42a81ccacf99246c39d5c0d6e393d44dab6dd2521c8f0dd94491c7577458990a9641f0c88b8c57718b8f2c791c8d35eeee9461545ee2dd6d5371b63e2755d125610f6fb5c23db3466b1c9e7b9a79e2f269e7e897258f89199853270075498a6c432"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1d8}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x884}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) unshare(0x8040600) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r9, 0x80) connect$unix(r7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r6, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r10, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 399.943551ms ago: executing program 1 (id=2515): syz_emit_ethernet(0x3b6, &(0x7f0000000380)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x40000000, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad800000000a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc9"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x10, "f5000000000000000007000200fe8000000000000800000000008879e66485201a0015ca83740000000000000000000800000000000000f17969f6890d740ab10c5bf2716daa51c5996fe2b9220245877c1238cd9838cbeddd8786c8c25bb521531d0a780ab8bad2f7d8b03377e5e931a9b614e0b16f737aee2c165a46a6f807"}, {0x4, 0x10, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b83"}]}}}}}}, 0x0) 298.387386ms ago: executing program 1 (id=2516): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xa) (async) socket$inet(0xa, 0x801, 0x84) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000540)='qgroup_num_dirty_extents\x00', r3, 0x0, 0x7}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x6, 0x0}, 0x8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r2, @ANYBLOB="0300fcbb3700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000300"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x8, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x7, 0xf5, &(0x7f0000000640)=""/245, 0x41100, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0x4, 0x5}, 0x10, r4, 0x0, 0x0, &(0x7f0000000880)=[r2, r2, r5, r5], 0x0, 0x10, 0x80}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="f76175ca9c4dc20cfe3169d38e06816a1203f73ea4a24a220f8720bad6029c2c2218e37c4cea1af800d23748896ea5b757f68d48e0"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x26}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000980)='cachefiles_ondemand_copen\x00', r6, 0x0, 0x4000000002000000}, 0xffffff6f) (async) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0xfffffffffffffffd, 0x8000000000000000, 0x3, 0x0, 0x4cf}, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r7, 0x29, 0x31, 0x0, &(0x7f0000000280)) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0xff, @mcast2}}, 0x0, 0x0, 0xfffffffe, 0x0, 0x39}, 0x9c) (async) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) shutdown(r0, 0x2) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="85002a16ae0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x1b}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0x5, 0x1ff}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0x6c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) 193.058629ms ago: executing program 0 (id=2517): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000d10000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000010000100000000000001000000000000", @ANYRES32=r3, @ANYBLOB="00010000ac0000003c0012800b000100697036746e6c00002c000280060011004e20000006000f0002000000060012004e24000008000700000100000500060007000000"], 0x5c}}, 0xeb64d656001b2f26) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1403, 0x4, 0x70bd2c, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x2200c0c0) 81.596095ms ago: executing program 1 (id=2518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) socket$rds(0x15, 0x5, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 68.650888ms ago: executing program 0 (id=2519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x4, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x2}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@local, 0x0, 0xff}, 0x0, @in=@empty}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)={0xc7c, r3, 0x201, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x364, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0xc, 0x12, 0x1b, 0x0, 0x60, 0x48, 0x12, 0x30, 0x9, 0x48, 0x6, 0x1, 0x6, 0x4, 0x6c, 0x3, 0x16, 0x24, 0xc, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x48, 0xc, 0x36, 0x30, 0xc, 0x12, 0x5, 0x30, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x16, 0x2, 0xcfc, 0x9, 0x7, 0xfa56, 0x7, 0x2]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x7}, {0x1}, {0x6, 0x9}, {0x0, 0xa}, {0x3, 0x3}, {0x0, 0xa}, {0x0, 0x6}, {}, {0x5, 0x2}, {0x7}, {0x4, 0x1}, {0x7}, {0x0, 0x4}, {0x5, 0x7}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x6}, {0x2, 0x2}, {0x6, 0x5}, {0x5, 0xa}, {0x0, 0x1}, {0x2, 0x4}, {0x5, 0x7}, {0x1, 0xa}, {0x2, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0xa}, {0x5, 0x5}, {0x3, 0x3}, {0x4, 0x7}, {0x0, 0x9}, {0x7, 0x2}, {0x7, 0x8}, {0x3}, {0x3, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x6, 0x5}, {0x0, 0x9}, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0x3}, {0x7, 0x7}, {0x0, 0x8}, {0x7, 0x6}, {0x3, 0xa}, {0x5, 0xa}, {0x5}, {0x3, 0x6}, {0x0, 0x4}, {0x4, 0x2}, {0x5, 0x8}, {0x4, 0x9}, {0x6, 0x2}, {0x7, 0x4}, {0x5, 0x7}, {0x0, 0x6}, {0x6, 0x4}, {0x2, 0xa}, {0x1, 0x4}, {0x6, 0x3}, {0x3}, {0x4, 0x2}, {0x4, 0x2}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0x1}, {0x6, 0x3}, {0x3, 0x5}, {0x4, 0x9}, {0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x5}, {0x5, 0x9}, {0x5, 0xa}, {0x0, 0x6}, {0x5, 0x9}, {0x1, 0x2}, {0x1}, {0x2, 0x8}, {0x2, 0x6}, {0x0, 0x6}, {0x1, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0xa2, 0x1, 0x3, 0xf, 0xfc00, 0x3, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffb, 0xffff, 0xa, 0x8, 0x7703, 0x2, 0xa]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x6}, {0x1, 0xa}, {0x0, 0x2}, {0x0, 0xa}, {0x3, 0x2}, {0x5}, {0x1, 0x3}, {0x5, 0x2}, {0x4, 0x5}, {0x0, 0x8}, {0x2, 0x3}, {0x5, 0x4}, {0x1, 0x6}, {0x4, 0x7}, {0x2, 0x6}, {0x4, 0x4}, {0x4, 0x6}, {0x5, 0x6}, {0x1, 0xa}, {0x1, 0x2}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x2}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x10, 0x132, 0x401, 0x3b83, 0x40, 0x0, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x50f, 0xb, 0x401, 0x3, 0x100, 0xa, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff, 0x401, 0x9, 0x400, 0x6147, 0x8, 0x54]}}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x8, 0x800, 0x0, 0x0, 0x5, 0xe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x66a, 0x1, 0x9, 0x10, 0x200, 0x4a2a, 0xabf9]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x12, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9f8, 0x1032, 0x7, 0x6, 0x1, 0x7bb4, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x1, 0x7, 0x6, 0x9, 0x5, 0x9]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x5, 0xa}, {0x4, 0xa}, {0x0, 0x9}, {0x6, 0x4}, {0x5, 0x5}, {0x7, 0x4}, {0x7, 0x6}, {0x4, 0x3}, {0x5, 0x1b}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x1, 0x4d30, 0x5, 0xc, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x6, 0x8}, {0x7, 0x3}, {0x2, 0xa}, {0x6, 0xa}, {0x7}, {0x0, 0x7}, {0x2, 0x9}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x7}, {0x6, 0x1}, {0x0, 0xa}, {0x1, 0x9}, {0x6, 0x3}, {0x4, 0x9}, {0x4}, {0x3, 0x8}, {0x0, 0x6}, {}, {0x1, 0x2}, {0x3, 0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x1}, {0x0, 0x2}, {0x6, 0x4}]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x1, 0x5, 0x4, 0x4, 0xfff7, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x9, 0x1b, 0x4, 0x1b, 0x4, 0x5, 0xb, 0x32, 0x58, 0x16, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x0, 0x0, 0xc, 0xff7f, 0xff, 0xe2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x927a, 0xba5b, 0x1ff, 0x8, 0x2, 0x2, 0x0, 0xac1e]}}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x2}, {0x7, 0x6}, {0x6, 0x9}, {0x0, 0x5}, {0x1}, {0x7, 0x6}, {0x5, 0x1}, {0x5, 0x9}, {0x7}, {0x1, 0x2}, {0x0, 0x2}, {0x6, 0x3}, {0x0, 0x9}, {0x5, 0x1}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0x5}, {}, {0x2, 0x9}, {0x2, 0x7}, {0x5, 0x4}, {0x0, 0x4}, {0x3, 0x3}, {0x0, 0x9}, {0x7, 0x3}, {0x2, 0x9}, {0x6, 0x2}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x3}, {0x1, 0x5}, {0x6, 0x9}, {0x0, 0x1}, {0x7, 0x3}, {0x6, 0x3}, {0x5}, {0x3, 0xa}, {0x5, 0x7}, {0x6}, {0x0, 0x8}, {0x2, 0x9}, {0x7, 0x6}, {0x7, 0x1}, {0x1, 0x6}, {0x4, 0x6}, {0x6, 0x3}, {0x5, 0x2}, {0x4, 0x4}, {0x0, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x2, 0x8}, {0x3, 0x2}, {0x5, 0x5}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xff, 0x9, 0x800, 0x0, 0x9, 0xfffe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x8001, 0x71c, 0x401, 0x3, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0xfff9, 0x7f3f, 0x6, 0xcdd3, 0x5, 0x400]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x18, 0x24, 0x12, 0x16, 0x18, 0x9, 0x5, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x9, 0x5, 0x9, 0x2, 0x10, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x820, 0x3, 0x8001, 0xe21, 0xfff, 0x5, 0x9, 0x9]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x3b8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0xfff, 0x9, 0x4, 0x2, 0x40, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x42d, 0x1, 0x8001, 0x3, 0x4, 0x3, 0x575f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x7fff, 0x8001, 0x0, 0x401, 0x600, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0xc, 0x24, 0x5, 0x1b, 0x3a, 0xb, 0x48, 0x6c, 0x16, 0x30, 0x9, 0x0, 0x2, 0xc, 0x6c, 0x48, 0x18, 0xb, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfff, 0x2, 0x0, 0x8, 0x5, 0x8001, 0x3]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x6, 0xbff, 0xec, 0x8, 0x0, 0xb67, 0xf09]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2fb8, 0x2, 0x3a20, 0x7, 0xa6b3, 0x5, 0x7, 0x41]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x60cf, 0x7, 0x401, 0x6, 0x7, 0x8, 0x400, 0xfa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xf67c, 0x401, 0x9, 0x0, 0x8000, 0xba14, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x7, 0x400, 0x7d, 0x80, 0x3, 0xf]}}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0x3}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0xa}, {0x2, 0x1}, {0x3, 0x5}, {0x1, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x7, 0x5}, {0x4, 0x9}, {0x4, 0x7}, {0x1, 0x7}, {0x1, 0x5}, {0x6, 0x8}, {0x4}, {0x0, 0xa}, {}, {0x1}, {0x0, 0x6}, {0x2, 0x9}, {0x4, 0xa}, {0x4, 0x7}, {0x6}, {0x6, 0x4}, {0x4, 0x2}, {0x1, 0x9}, {0x3, 0x4}, {0x2, 0x1}, {0x6, 0x2}, {0x6, 0x2}, {0x3}, {0x1, 0xa}, {0x3, 0x6}, {0x7, 0x5}, {0x2, 0x1}, {0x0, 0x5}, {0x2, 0x4}, {0x7, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x716, 0x6, 0xe8, 0x3, 0xfffb, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x8001, 0x3, 0x4, 0xfeee, 0x9, 0x4]}}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x2}, {0x5, 0xa}, {0x6, 0x3}, {0x0, 0x9}, {0x5, 0x8}, {0x0, 0x5}, {0x2, 0x2}, {0x3, 0x4}, {0x7, 0xa}, {0x0, 0x5}, {0x3}, {0x7, 0x9}, {}, {0x4, 0x6}, {0x6, 0x1}, {0x0, 0x7}, {0x3, 0x9}, {0x1, 0x4}, {0x5}, {0x5}, {0x4, 0x2}, {0x6, 0x6}, {0x0, 0x9}, {0x3}, {0x0, 0x6}, {0x2, 0x6}, {0x3, 0x9}, {0x7, 0x3}, {0x3}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x5}, {0x6, 0x8}, {0x0, 0x7}, {}, {0x2, 0x8}, {0x4, 0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x5}, {0x3, 0x6}, {0x2, 0x4}, {0x5, 0x2}, {0x0, 0x8}, {0x6, 0x9}, {0x5, 0x3}, {0x7, 0x4}, {0x7, 0x7}, {0x0, 0x9}, {0x1, 0x2}, {0x4, 0x7}, {0x0, 0x9}, {0x1, 0x8}, {0x5, 0xa}, {0x5, 0x9}, {0x3, 0x8}, {0x5, 0x9}, {0x7, 0x7}, {0x4, 0x6}, {0x0, 0x7}, {0x4, 0x3}, {0x0, 0x9}, {0x6, 0x8}, {0x3, 0x1}, {0x7, 0x3}, {0x0, 0x3}, {0x1, 0x1}, {0x2, 0x7}, {0x1, 0x7}, {0x7, 0x2}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x7}, {0x3}, {0x3, 0x4}, {0x5, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x2000, 0xf1f0, 0x7, 0x1, 0x5, 0xffff]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0xbe, 0xfff, 0x9, 0x1ff, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0xc, 0x3, 0x18, 0x6, 0x24, 0x2, 0x48, 0x24, 0x60, 0x3, 0x18, 0x30, 0x30, 0x3, 0x30, 0x18, 0x2, 0x5, 0x2, 0x4, 0x24, 0x2]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x7, 0x4}, {0x3, 0x8}, {0x5, 0x8}, {0x7, 0x1}, {0x3, 0x7}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x3}, {0x4}, {0x5}, {0x1, 0x4}, {0x1, 0x3}, {0x4, 0xa}, {0x5, 0xa}, {0x3}, {0x5, 0xa}, {0x2, 0x5}, {0x5, 0x3}, {0x7, 0x8}, {0x1, 0x1}, {0x1, 0x3}, {0x7, 0x2}, {0x3, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x5, 0x8000, 0xe, 0x2f, 0xc, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x3, 0x16, 0x6, 0x60, 0x48, 0x60, 0x1b, 0x16, 0x1b, 0x0, 0x48, 0x1b, 0x36, 0x3, 0x48, 0x18, 0xb, 0x60, 0x6, 0x36, 0x6c, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xe, 0x4, 0xa, 0x2, 0x8001, 0xe5c, 0x800]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6c, 0x0, 0x1, 0xfffc, 0xc50, 0x5, 0x1f6, 0x1]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xb, 0x60, 0x5, 0x33, 0x48, 0x1b, 0x1f, 0xb, 0x16, 0x9, 0x1, 0x4, 0xc, 0x4, 0x12, 0x1b]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1e2, 0xf, 0x8, 0x0, 0x4, 0x101, 0x4, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x81, 0x6, 0xb7, 0x5, 0x4, 0xe6b, 0xff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0xc, 0x48, 0xc, 0x1, 0xb, 0x24, 0x5, 0x4, 0xb, 0x16, 0x4, 0x60, 0xc, 0x5, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xf4bb, 0x5, 0x1, 0x5, 0x3ff, 0x5, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x88, 0xb, 0x9, 0x5, 0x7, 0x6, 0xf]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x4}, {0x1, 0x5}, {0x7, 0xa}, {0x6, 0x9}, {0x0, 0x4}, {0x3, 0x8}, {0x2, 0x1}, {0x5, 0xa}, {0x2, 0xa}, {0x1}, {0x7, 0x9}, {0x0, 0xa}, {0x5, 0x5}, {0x7, 0x2}, {0x3, 0x5}, {0x6, 0x3}, {0x2, 0x7}, {0x4, 0x7}, {0x5, 0x3}, {0x6, 0x5}, {0x6, 0x6}, {0x2, 0x7}, {0x0, 0x3}, {0x1, 0x9}, {0x6, 0x9}, {0x6, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7e, 0x3, 0xa69, 0xfff7, 0xf, 0xfff, 0xfff6, 0x4e1]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x7}, {0x2, 0x3}, {0x4, 0xa}, {0x3, 0x8}, {0x0, 0x5}, {0x3, 0x8}, {0x2, 0x3}, {0x5, 0xa}, {0x7, 0x5}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x6, 0x24, 0x16, 0x12, 0x9, 0x9, 0xb, 0x39, 0x18, 0x0, 0x6c, 0xf, 0x9, 0x5, 0x48, 0x12, 0x1, 0x24, 0x12]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0xa, 0x8, 0x4, 0x3, 0xa, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x4e91, 0x2, 0x2, 0xb5, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x0, 0x100, 0x0, 0x6, 0x0, 0xe]}}]}]}, @NL80211_ATTR_TX_RATES={0x1f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2b, 0x0, 0x42, 0x101, 0xfff8, 0x4e8, 0x7]}}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6b9, 0x10, 0x6a, 0x5, 0xc5c, 0x8, 0x6, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x3}, {0x3, 0xa}, {0x0, 0x2}, {0x4, 0x3}, {0x6, 0x8}, {0x7, 0x6}, {0x4}, {0x6, 0x7}, {0x4, 0x2}, {0x6, 0x9}, {0x0, 0x5}, {0x2, 0x9}, {0x2, 0x3}, {0x7, 0x3}, {0x1, 0x2}, {0x1, 0x4}, {0x2, 0x3}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0x5}, {0x6, 0x9}, {0x4, 0x7}, {0x3, 0xa}, {0x0, 0x1}, {0x0, 0x1}, {0x6, 0x5}, {0x0, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x3, 0x7}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6, 0x16, 0x19, 0x18, 0x30, 0xc, 0x60, 0x4, 0x4, 0x24, 0x3, 0xb, 0x4, 0xb, 0x1]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0xa}, {0x6, 0x5}, {0x1, 0x7}, {0x2, 0x6}, {0x7, 0x3}, {0x0, 0x3}, {0x7, 0x4}, {0x6, 0x4}, {0x7, 0xa}, {0x5, 0x3}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x5}, {0x4, 0x4}, {0x3}, {0x5, 0x6}, {0x4, 0x3}, {0x1, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x7}, {0x7, 0x6}, {0x5}, {0x1, 0x1}, {0x2}, {0x3, 0x7}, {0x1, 0x5}, {0x3, 0x8}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x9, 0x22, 0x100, 0x1, 0x7, 0x1, 0x9]}}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x1, 0xa2, 0x0, 0x0, 0x0, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x7, 0x6ecc, 0xf9, 0x4, 0x8000, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x2, 0x3, 0x9, 0x7, 0xa6, 0x4, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x5, 0x12, 0x7c, 0x0, 0x24, 0x6, 0x6c, 0x30, 0x6c, 0x24, 0x6, 0x24]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf30, 0xff, 0x0, 0x9, 0x0, 0x8, 0x8000, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4b, 0x4, 0x0, 0x5, 0xc8a, 0xc, 0x1000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0xfff7, 0x7, 0xf6f1, 0x5, 0x7, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x31, 0x4, 0x4, 0x6, 0x800, 0x6, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x4, 0x800, 0xfff, 0x0, 0x6, 0x5, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3c, 0x8, 0x3, 0x8000, 0x6, 0x7ff, 0x1]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x1, 0x1, 0x24, 0x48, 0x36, 0xc, 0x12, 0x1b, 0x48, 0x18, 0x6c, 0x30, 0x1, 0x3, 0x16, 0xb, 0x60, 0x30, 0x36, 0x30, 0x30, 0x0, 0x30, 0xb]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x0, 0x1, 0x48, 0x60]}]}]}, @NL80211_ATTR_TX_RATES={0xf8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x8, 0x6, 0xfcd, 0x9, 0x2, 0x3, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x10, 0x1, 0x1, 0x0, 0x3, 0x3ff, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x5, 0x8}, {0x3, 0x4}, {0x4, 0x7}, {}, {0x1, 0x8}, {0x6, 0xa}, {0x5, 0x2}, {0x6, 0x8}, {0x4, 0xa}, {0x3}, {0x4, 0xa}, {0x3, 0x4}, {0x1, 0x2}, {0x1, 0x9}, {0x4, 0x5}, {0x0, 0x1}, {0x6, 0x4}, {0x6}, {0x4, 0x4}, {0x4, 0x2}, {0x5, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfe00, 0x7, 0xed9c, 0x0, 0x9, 0x8, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x0, 0x8, 0x9, 0x6, 0xffff, 0xacb2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{}, {0x1, 0xa}, {0x7}, {0x7, 0x5}, {0x2}, {0x7, 0x5}, {0x4, 0x3}, {0x7, 0x3}, {0x4, 0x1}, {0x4, 0x7}, {0x1, 0x4}, {0x3, 0x8}, {0x2}, {0x0, 0x8}, {0x7, 0x4}, {0x5, 0x7}, {0x3, 0x8}, {0x5, 0x1}, {0x0, 0x8}, {0x7, 0x9}, {0x2, 0x9}, {0x5, 0x8}, {0x1, 0x7}, {0x5, 0xa}, {0x1, 0x1}, {0x7, 0xa}, {0x1, 0x9}, {0x7, 0x9}, {0x0, 0x8}, {0x2, 0x7}, {0x3, 0x3}, {0x2, 0x8}, {0x5, 0x4}, {0x7}, {0x7, 0x4}, {0x3, 0x3}, {0x0, 0x7}, {0x5, 0x9}, {0x5, 0x8}, {0x0, 0x9}, {0x5, 0x4}, {0x2, 0x3}, {0x3, 0x4}, {0x4, 0x8}, {0x0, 0x7}, {0x1, 0x9}, {0x2, 0x6}, {0x3, 0x2}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0x6}, {0x0, 0x2}, {0x4}, {0x6, 0x2}, {0x2, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x1cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x6, 0x2}, {0x2, 0x8}, {0x3, 0x6}, {0x3, 0xa}, {0x0, 0x9}, {0x0, 0x1}, {0x7, 0x4}, {0x4, 0x9}, {0x2, 0x6}, {0x4, 0x9}, {0x6, 0x4}, {0x5, 0x9}, {0x5, 0x6}, {0x5, 0x1}, {0x4, 0xa}, {0x7, 0x3}, {0x1, 0x7}, {}, {0x4, 0x9}, {0x7}, {0x3, 0x2}, {0x3, 0x2}, {0x2, 0x2}, {0x2, 0x4}, {0x4}, {0x4, 0x6}, {0x1, 0xa}, {0x6}, {0x3, 0x3}, {0x0, 0x1}, {0x7, 0x7}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x0, 0x9}, {0x3}, {0x6, 0x9}, {0x5, 0x6}, {}, {0x6, 0x8}, {0x5, 0x2}, {0x2, 0x8}, {0x1, 0x2}, {0x5}, {0x0, 0xa}, {0x1, 0x9}, {0x1, 0x4}, {0x4, 0x9}, {0x1}, {0x4, 0x6}, {0x6, 0x2}, {0x6}, {0x1, 0x6}, {0x6, 0x2}, {0x7}, {0x5}, {0x1, 0x4}, {0x3, 0x6}, {0x6, 0x7}, {0x6}, {0x7, 0x1}, {0x1, 0xa}, {0x7, 0x1}, {0x0, 0x2}, {0x1, 0x9}, {0x2, 0x6}, {0x5, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xe3f, 0x6, 0x6, 0x9, 0xfff8, 0x3f45]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x0, 0x7}, {0x5, 0x9}, {0x4, 0x1}, {0x3, 0x6}, {0x7, 0x4}, {0x1, 0x9}, {0x3, 0x8}, {0x2, 0x1}, {0x4, 0x6}, {0x5}, {0x1, 0x2}, {0x0, 0x3}, {0x2, 0x9}, {0x2, 0x4}, {0x2, 0x9}, {0x5, 0x2}, {0x5, 0x4}, {0x0, 0x6}, {0x7, 0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x5, 0x3, 0x3, 0x2, 0x2, 0x2, 0x9]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x0, 0xa}, {0x4, 0x5}, {0x1, 0x8}, {}, {0x0, 0x9}, {0x0, 0xa}, {0x2}, {0x4, 0x1}, {0x0, 0x8}, {0x2, 0x8}, {0x6, 0x5}, {0x7, 0x9}, {0x5, 0x3}, {0x7, 0x5}, {0x0, 0x7}, {0x0, 0x3}, {0x7, 0x5}, {0x6}, {0x0, 0x3}, {0x2, 0x7}, {0x0, 0x4}, {0x1}, {0x7, 0x17}, {0x5, 0x6}, {0x0, 0x8}, {0x1, 0x7}, {0x2, 0x6}, {0x0, 0xa}, {0x7, 0x7}, {0x3, 0x8}, {0x2, 0x2}, {0x7}, {0x3, 0x3}, {0x3, 0x3}, {0x5, 0x5}, {0x2, 0x4}, {0x4}, {0x0, 0xa}, {0x6, 0x4}, {0x2, 0x2}, {0x0, 0x2}, {0x4, 0xa}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x7}, {0x4, 0x4}, {0x1, 0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x7, 0xa}, {0x2, 0x7}, {0x4, 0x4}, {0x6, 0x5}, {0x4, 0x1}, {0x5, 0xa}, {0x2, 0x5}, {0x5, 0x5}, {0x2, 0x4}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe41, 0xa7c, 0x3, 0x1, 0x8, 0x81, 0xe046, 0xd]}}]}, @NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x3, 0x20, 0x36, 0x5, 0x3, 0x30, 0xc, 0x60, 0x60, 0x4, 0x2f, 0x1b, 0x16]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x5, 0x6}, {0x0, 0x5}, {0x5}, {0x3, 0x5}, {0x5, 0x5}, {0x2, 0xa}, {0x5, 0x7}, {0x0, 0x9}, {0x2, 0x9}, {0x2}, {0x2, 0x3}, {0x1, 0xa}, {0x7, 0x5}, {0x1, 0xa}, {0x2, 0x6}, {0x5, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x1, 0x5}, {0x1, 0x2}, {0x7, 0x1}, {0x1, 0x7}, {0x6, 0x4}, {0x0, 0x9}, {0x0, 0x7}, {0x5}, {0x3, 0x1}, {0x7, 0x2}, {0x4, 0x8}, {0x5, 0x2}, {0x5, 0x9}, {0x3, 0x1}, {0x5, 0x6}, {0x1, 0x7}, {0x3, 0x2}, {0x5, 0x5}, {}, {0x4, 0x2}, {0x6, 0x3}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x6}, {0x6, 0x7}, {0x3}, {0x0, 0x6}, {0x7}, {0x6, 0x7}, {0x7}, {0x1, 0x9}, {0x6, 0x9}, {}, {0x0, 0x2}, {0x1, 0x8}, {0x1, 0x7}, {0x5, 0x2}, {0x0, 0x6}, {0x2, 0x6}, {0x3, 0x6}, {0x7, 0x9}, {0x7, 0x5}, {0x1, 0x6}, {0x4, 0x9}, {0x4, 0x4}, {0x3}, {0x6, 0x8}, {0x0, 0x8}, {0x4, 0x8}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0x8}, {0x0, 0x8}, {0x5}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0x4}, {0x1, 0x1}, {0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x2, 0x3, 0x4, 0x400, 0xf57c, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x4, 0x60, 0xb, 0x5, 0x12, 0x1b, 0x1b, 0x6, 0x3, 0x1b, 0x2, 0xb, 0x0, 0x18, 0x30, 0x18, 0x2e, 0x16, 0x16, 0x1, 0x9, 0x48, 0x6c, 0x16, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfffd, 0x6, 0x3, 0x5, 0x7fff, 0x6c2, 0x2000]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0xc7c}, 0x1, 0x0, 0x0, 0x400c040}, 0x400c840) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xfffffee6, 0x8f, 0x1000000}, {0xc}}]}, 0x54}}, 0x0) 946.12µs ago: executing program 4 (id=2520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='mem_connect\x00', r1, 0x0, 0x1000000002}, 0x18) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001f40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14}}, 0xcc}}, 0x200000d4) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) pselect6(0x40, &(0x7f0000000040)={0x5, 0xbad, 0x7, 0x0, 0x5, 0x80, 0x8, 0x3d}, &(0x7f00000000c0)={0x7, 0x2, 0xfffffffffffffff9, 0x2, 0x2, 0x8, 0x8, 0xffff}, &(0x7f0000000100)={0x6, 0x3, 0x3, 0x0, 0x7, 0xbbe, 0x6f66, 0x6}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000240)={&(0x7f0000000200)={[0xc]}, 0x8}) 0s ago: executing program 2 (id=2521): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000d00b800000000000000080008000d000000", 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="ff0000006600bee586744a4b18810000040000000200000000000000", @ANYRES32, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_80211_inject_frame(0x0, 0x0, 0xb5) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05a300000000000000000d00000008000300"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r5}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x16, 0x1, 0x0, 0x1, [@generic="88046fa3301e12b1dbed7c66a9a96b690465"]}]}, 0x3c}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r6, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0x20, 0x40044}}], 0x1, 0x4) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, r5, r9}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r11, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r10], 0x38}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) kernel console output (not intermixed with test programs): sr1: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network [ 208.322631][ T9653] hsr1: entered promiscuous mode [ 208.431535][ T9659] ieee802154 phy0 wpan0: encryption failed: -22 [ 208.523792][ T9667] netlink: 'syz.0.928': attribute type 10 has an invalid length. [ 209.059019][ T9683] netlink: 56 bytes leftover after parsing attributes in process `syz.1.934'. [ 209.626122][ T9705] netlink: 68 bytes leftover after parsing attributes in process `syz.3.939'. [ 210.119259][ T9719] ieee802154 phy0 wpan0: encryption failed: -22 [ 210.616702][ T9746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.949'. [ 211.365431][ T9780] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.382409][ T9784] netlink: 32 bytes leftover after parsing attributes in process `syz.3.959'. [ 211.435473][ T9784] netlink: 'syz.3.959': attribute type 10 has an invalid length. [ 211.443421][ T9784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.959'. [ 211.510346][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.962'. [ 211.534230][ T9784] bond0: option arp_all_targets: invalid value (196616) [ 211.601996][ T9798] sctp: [Deprecated]: syz.1.962 (pid 9798) Use of int in maxseg socket option. [ 211.601996][ T9798] Use struct sctp_assoc_value instead [ 211.624509][ T3446] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 211.661029][ T3446] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 211.745226][ T3446] bond0: (slave batadv0): link status definitely up, 0 Mbps full duplex [ 211.762168][ T3446] bond0: active interface up! [ 212.237445][ T9834] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.472769][ T30] audit: type=1107 audit(1756788866.855:5): pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 212.545329][ T9857] netlink: 20 bytes leftover after parsing attributes in process `syz.3.979'. [ 212.883978][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.981'. [ 212.951555][ T9872] can: request_module (can-proto-0) failed. [ 212.972141][ T9872] openvswitch: netlink: IP tunnel dst address not specified [ 213.130881][ T9880] netlink: 19 bytes leftover after parsing attributes in process `syz.2.983'. [ 213.142126][ T9881] netlink: 19 bytes leftover after parsing attributes in process `syz.2.983'. [ 213.532352][ T9895] ieee802154 phy0 wpan0: encryption failed: -22 [ 213.707809][ T9904] netlink: 'syz.2.992': attribute type 12 has an invalid length. [ 213.731796][ T9894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.748019][ T9894] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.778662][ T9894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.981145][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 214.006861][ T9920] netlink: 207084 bytes leftover after parsing attributes in process `syz.1.999'. [ 214.118004][ T9923] netlink: 'syz.4.1000': attribute type 4 has an invalid length. [ 214.139268][ T9923] netlink: 'syz.4.1000': attribute type 4 has an invalid length. [ 214.344787][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1004'. [ 214.460539][ T9942] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1005'. [ 214.964346][ T9964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1012'. [ 214.973850][ T9964] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1012'. [ 215.030648][ T9972] tipc: Enabled bearer , priority 0 [ 215.067358][ T9972] tipc: Resetting bearer [ 215.114126][ T9970] tipc: Disabling bearer [ 215.166360][ T9977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1017'. [ 215.673593][T10001] syzkaller0: entered promiscuous mode [ 215.717916][T10001] syzkaller0: entered allmulticast mode [ 215.807070][T10002] bpq0: left promiscuous mode [ 216.091052][T10011] bridge0: port 1(erspan0) entered blocking state [ 216.103553][T10011] bridge0: port 1(erspan0) entered disabled state [ 216.110384][T10011] erspan0: entered allmulticast mode [ 216.141473][T10011] erspan0: entered promiscuous mode [ 216.191857][T10018] erspan0: left allmulticast mode [ 216.199880][T10018] erspan0: left promiscuous mode [ 216.206602][T10018] bridge0: port 1(erspan0) entered disabled state [ 216.262769][T10019] ieee802154 phy0 wpan0: encryption failed: -22 [ 216.650160][T10037] syzkaller1: entered promiscuous mode [ 216.666120][T10037] syzkaller1: entered allmulticast mode [ 216.855237][T10042] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 216.929206][T10058] tipc: Enabled bearer , priority 0 [ 217.035114][T10058] syzkaller0: entered promiscuous mode [ 217.052365][T10058] syzkaller0: entered allmulticast mode [ 217.562337][T10105] dvmrp8: entered allmulticast mode [ 217.655970][T10113] tipc: Enabling of bearer rejected, failed to enable media [ 217.944645][T10093] tipc: Resetting bearer [ 217.978339][T10093] tipc: Disabling bearer [ 218.078095][T10134] __nla_validate_parse: 8 callbacks suppressed [ 218.078116][T10134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1053'. [ 218.498369][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'. [ 218.698315][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1058'. [ 218.900914][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1061'. [ 218.918148][T10166] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 219.007861][T10161] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 219.062366][T10161] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1059'. [ 219.112395][T10163] veth5: entered promiscuous mode [ 219.122055][T10163] bridge1: port 1(veth5) entered blocking state [ 219.132273][T10163] bridge1: port 1(veth5) entered disabled state [ 219.142437][T10163] veth5: entered allmulticast mode [ 219.157794][T10171] pimreg: left allmulticast mode [ 219.350773][T10178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1063'. [ 219.369431][T10179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1065'. [ 219.437671][T10183] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.520709][T10190] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1068'. [ 219.976290][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1071'. [ 220.135661][T10213] openvswitch: netlink: IP tunnel dst address not specified [ 220.406752][T10226] netlink: 'syz.1.1075': attribute type 4 has an invalid length. [ 220.535595][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1074'. [ 220.587062][T10228] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 220.596468][ T5929] IPVS: starting estimator thread 0... [ 220.693460][T10231] IPVS: using max 25 ests per chain, 60000 per kthread [ 220.715453][T10235] nbd: must specify at least one socket [ 221.029969][T10244] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.423948][ T3520] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 221.445753][ T3520] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 221.478848][ T3520] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 221.500740][ T3520] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.056278][T10294] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 222.268334][ T30] audit: type=1800 audit(1756788876.655:6): pid=10307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1100" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1236 res=0 errno=0 [ 222.390507][ T30] audit: type=1804 audit(1756788876.775:7): pid=10313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1102" name="/newroot/219/cgroup.controllers" dev="tmpfs" ino=1143 res=1 errno=0 [ 222.471135][ T30] audit: type=1800 audit(1756788876.805:8): pid=10313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1102" name="cgroup.controllers" dev="tmpfs" ino=1143 res=0 errno=0 [ 222.616228][T10323] tipc: Enabled bearer , priority 0 [ 222.635744][T10323] syzkaller0: entered promiscuous mode [ 222.665357][T10323] syzkaller0: entered allmulticast mode [ 222.725482][T10323] tipc: Resetting bearer [ 222.746241][T10319] tipc: Resetting bearer [ 222.796283][T10319] tipc: Disabling bearer [ 222.940334][T10336] bridge: RTM_NEWNEIGH with invalid ether address [ 223.707070][T10369] __nla_validate_parse: 6 callbacks suppressed [ 223.707091][T10369] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1121'. [ 223.873715][T10388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1127'. [ 224.171662][T10398] netlink: 'syz.1.1129': attribute type 1 has an invalid length. [ 224.282639][T10398] 8021q: adding VLAN 0 to HW filter on device bond7 [ 224.308469][T10404] vlan0: entered promiscuous mode [ 224.313808][T10404] bond7: entered promiscuous mode [ 224.319879][T10404] vlan0: entered allmulticast mode [ 224.325364][T10404] bond7: entered allmulticast mode [ 224.346835][T10398] bond7: (slave gretap3): making interface the new active one [ 224.354659][T10398] gretap3: entered promiscuous mode [ 224.360167][T10398] gretap3: entered allmulticast mode [ 224.368518][T10398] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 224.392349][T10412] netlink: 'syz.0.1134': attribute type 13 has an invalid length. [ 224.804060][T10437] netlink: 'syz.4.1142': attribute type 1 has an invalid length. [ 225.545770][T10467] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.060663][T10491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1158'. [ 226.239287][T10499] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.300579][T10501] netlink: 'syz.1.1162': attribute type 4 has an invalid length. [ 226.340462][T10501] netlink: 'syz.1.1162': attribute type 4 has an invalid length. [ 226.410456][T10503] netlink: 'syz.2.1163': attribute type 1 has an invalid length. [ 226.426101][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1162'. [ 226.465154][T10503] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1163'. [ 226.796480][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1167'. [ 227.030675][T10530] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 227.167998][T10536] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1171'. [ 227.327363][T10539] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.564694][T10555] sctp: [Deprecated]: syz.3.1177 (pid 10555) Use of int in max_burst socket option. [ 227.564694][T10555] Use struct sctp_assoc_value instead [ 227.611946][T10557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1176'. [ 227.772472][T10565] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20003 [ 227.790916][T10565] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20000 [ 227.895066][T10568] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1181'. [ 228.086748][T10583] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1184'. [ 228.453997][T10605] netlink: 'syz.3.1187': attribute type 10 has an invalid length. [ 228.491287][T10605] team0: Port device geneve0 added [ 228.672262][T10611] netlink: 'syz.0.1189': attribute type 1 has an invalid length. [ 228.821438][T10611] 8021q: adding VLAN 0 to HW filter on device bond3 [ 229.241152][T10632] __nla_validate_parse: 1 callbacks suppressed [ 229.241171][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1195'. [ 229.267853][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1195'. [ 229.325476][T10631] netlink: 'syz.4.1195': attribute type 4 has an invalid length. [ 229.366167][T10631] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1195'. [ 229.389472][T10631] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 229.467791][T10646] netlink: 'syz.1.1197': attribute type 1 has an invalid length. [ 229.522242][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'. [ 229.531931][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'. [ 229.725862][T10654] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1199'. [ 229.830338][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 229.922412][T10662] tipc: Enabled bearer , priority 0 [ 229.950352][T10662] syzkaller0: entered promiscuous mode [ 229.967597][T10662] syzkaller0: entered allmulticast mode [ 229.979533][T10666] netlink: 'syz.1.1203': attribute type 10 has an invalid length. [ 229.987803][T10666] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1203'. [ 229.999823][T10666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.076193][T10667] tipc: Resetting bearer [ 230.287968][ T30] audit: type=1800 audit(1756788884.665:9): pid=10680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1208" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1214 res=0 errno=0 [ 230.479502][T10690] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.507558][T10690] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 230.524248][T10690] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 230.689105][T10690] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.719405][T10690] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 230.752406][T10690] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 230.892158][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 230.911348][T10690] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.941333][T10690] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 230.963052][ T5983] tipc: Node number set to 2144866606 [ 230.983047][T10690] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 231.097087][T10690] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.119109][T10690] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 231.142042][T10690] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 231.198667][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 231.275987][T10728] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 231.429920][T10730] ieee802154 phy0 wpan0: encryption failed: -22 [ 231.490986][ T1337] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.510768][ T1337] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 231.522500][ T1337] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 19999 - 0 [ 231.537121][T10732] tipc: Enabled bearer , priority 0 [ 231.539033][T10718] netlink: 'syz.1.1218': attribute type 3 has an invalid length. [ 231.562776][ T1337] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.571323][ T1337] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 231.588997][T10718] netlink: 'syz.1.1218': attribute type 1 has an invalid length. [ 231.600126][ T1337] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 19999 - 0 [ 231.615893][T10736] syzkaller0: entered promiscuous mode [ 231.621672][T10736] syzkaller0: entered allmulticast mode [ 231.721862][ T1337] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.732142][ T1337] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 231.740862][ T1337] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 19999 - 0 [ 231.752609][ T1337] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.773691][ T1337] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 231.782203][ T1337] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 19999 - 0 [ 231.803323][T10732] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 231.841902][T10736] tipc: Resetting bearer [ 231.896866][T10731] tipc: Resetting bearer [ 231.955285][T10731] tipc: Disabling bearer [ 232.188479][T10769] TCP: TCP_TX_DELAY enabled [ 232.942471][T10799] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 233.057306][T10799] netlink: 'syz.1.1236': attribute type 3 has an invalid length. [ 233.075896][T10799] netlink: 'syz.1.1236': attribute type 1 has an invalid length. [ 233.222803][T10808] veth0_to_team: entered promiscuous mode [ 233.240404][T10808] veth0_to_team: entered allmulticast mode [ 233.298679][T10815] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 233.429795][T10815] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.801176][T10841] syzkaller1: entered promiscuous mode [ 233.807142][T10841] syzkaller1: entered allmulticast mode [ 233.936859][T10846] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.349444][T10858] __nla_validate_parse: 7 callbacks suppressed [ 234.349469][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'. [ 234.387350][T10862] xt_socket: unknown flags 0xd0 [ 234.447977][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1254'. [ 234.488200][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 234.570398][T10863] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 234.689387][T10863] netlink: 'syz.0.1253': attribute type 3 has an invalid length. [ 234.703323][T10882] _ÐZ`Ô€@S!: entered promiscuous mode [ 234.842164][T10863] netlink: 'syz.0.1253': attribute type 1 has an invalid length. [ 234.931105][T10863] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1253'. [ 235.067728][T10896] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.102252][T10900] netlink: 'syz.2.1264': attribute type 11 has an invalid length. [ 235.128047][T10900] netlink: 'syz.2.1264': attribute type 11 has an invalid length. [ 236.078377][T10926] netlink: del zone limit has 4 unknown bytes [ 236.369192][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1278'. [ 236.385970][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 236.390592][T10939] netlink: 'syz.0.1275': attribute type 10 has an invalid length. [ 236.403241][T10941] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1276'. [ 236.416883][T10945] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 236.439623][T10946] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 236.461974][T10939] bond0: (slave dummy0): Releasing backup interface [ 236.573977][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1279'. [ 236.593345][T10945] validate_nla: 2 callbacks suppressed [ 236.593365][T10945] netlink: 'syz.4.1277': attribute type 3 has an invalid length. [ 236.615344][T10950] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 236.621067][T10945] netlink: 'syz.4.1277': attribute type 1 has an invalid length. [ 236.627753][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 236.631925][T10945] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1277'. [ 236.676534][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 236.697986][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 236.712623][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 236.752532][T10958] netlink: 'syz.4.1280': attribute type 1 has an invalid length. [ 236.793990][T10958] netlink: 'syz.4.1280': attribute type 1 has an invalid length. [ 236.886273][T10965] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1283'. [ 236.961264][T10973] netlink: 'syz.2.1285': attribute type 4 has an invalid length. [ 237.039252][T10977] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.052325][T10977] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.139132][T10977] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.176952][T10977] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.296800][T10977] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.307032][T10977] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.361334][T10977] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.383498][T10977] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.459846][T11000] syzkaller1: entered promiscuous mode [ 237.466800][T11000] syzkaller1: entered allmulticast mode [ 237.567986][ T6149] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.587947][ T6149] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.617044][ T6149] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.629897][ T6149] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.669554][ T6149] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.692942][ T6149] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.727162][T11013] syz_tun: entered allmulticast mode [ 237.768945][ T6149] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.786895][ T6149] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.827220][T11011] dvmrp8: entered allmulticast mode [ 237.983161][T11011] syz_tun: left allmulticast mode [ 237.988621][T11011] dvmrp8: left allmulticast mode [ 238.351368][T11045] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 238.382563][T11045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.480605][T11051] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.548111][T11055] ieee802154 phy0 wpan0: encryption failed: -22 [ 239.841974][T11122] __nla_validate_parse: 6 callbacks suppressed [ 239.841998][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'. [ 239.946811][T11137] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 240.124324][T11137] netlink: 'syz.0.1323': attribute type 3 has an invalid length. [ 240.132216][T11137] netlink: 'syz.0.1323': attribute type 1 has an invalid length. [ 240.162688][T11150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1327'. [ 240.220478][T11150] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1327'. [ 240.227209][T11137] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1323'. [ 240.572057][T11159] Bluetooth: MGMT ver 1.23 [ 240.588150][T11159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1332'. [ 240.659870][T11164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1334'. [ 240.836482][T11173] netlink: 'syz.4.1336': attribute type 1 has an invalid length. [ 240.869236][T11173] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1336'. [ 241.095416][T11178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1338'. [ 241.193526][T11182] tipc: Enabling of bearer rejected, already enabled [ 241.906452][T11207] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1347'. [ 241.919232][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1346'. [ 242.475582][T11233] netlink: 'syz.4.1349': attribute type 16 has an invalid length. [ 242.818747][T11236] netlink: 'syz.4.1350': attribute type 1 has an invalid length. [ 243.176424][T11245] bond0: (slave gretap0): Error: Device type is different from other slaves [ 244.111209][T11282] netlink: 'syz.1.1364': attribute type 2 has an invalid length. [ 244.161719][T11282] k›*·]‘: entered promiscuous mode [ 244.423611][T11295] netlink: 'syz.0.1367': attribute type 1 has an invalid length. [ 244.442058][T11282] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.459966][T11282] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.486626][T11286] vlan1: entered allmulticast mode [ 244.492003][T11286] bond1: entered allmulticast mode [ 244.547724][T11293] veth0_to_team: entered promiscuous mode [ 244.567146][T11293] veth0_to_team: entered allmulticast mode [ 244.727682][T11297] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 244.738081][T11297] bond4: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 244.751488][T11297] bond4: (slave vcan0): making interface the new active one [ 244.760048][T11297] bond4: (slave vcan0): Enslaving as an active interface with an up link [ 244.807518][T11298] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 244.841576][T11298] bond4: (slave vcan1): Enslaving as a backup interface with an up link [ 244.979251][T11302] netlink: 'syz.2.1368': attribute type 3 has an invalid length. [ 245.007467][T11302] netlink: 'syz.2.1368': attribute type 1 has an invalid length. [ 245.040541][T11302] __nla_validate_parse: 9 callbacks suppressed [ 245.040561][T11302] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1368'. [ 245.127332][T11310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1370'. [ 245.743989][T11338] vlan0: entered promiscuous mode [ 245.771038][T11340] tipc: Enabled bearer , priority 0 [ 245.798963][T11340] syzkaller0: entered promiscuous mode [ 245.817070][T11340] syzkaller0: entered allmulticast mode [ 245.928016][T11346] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1379'. [ 245.991381][T11350] tipc: Resetting bearer [ 246.016242][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1383'. [ 246.096589][T11335] tipc: Resetting bearer [ 246.146341][T11335] tipc: Disabling bearer [ 246.350534][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 246.572796][T11375] netlink: 'syz.1.1386': attribute type 3 has an invalid length. [ 246.608639][T11379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1385'. [ 246.623202][T11375] netlink: 'syz.1.1386': attribute type 1 has an invalid length. [ 246.649590][T11375] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1386'. [ 247.422411][T11407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1395'. [ 247.559112][T11406] lo speed is unknown, defaulting to 1000 [ 247.573070][T11407] bridge_slave_1: left allmulticast mode [ 247.590590][T11407] bridge_slave_1: left promiscuous mode [ 247.600944][T11407] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.621201][T11407] bridge_slave_0: left allmulticast mode [ 247.632978][T11407] bridge_slave_0: left promiscuous mode [ 247.639682][T11416] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1398'. [ 247.641441][T11420] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1398'. [ 247.661810][T11407] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.931742][T11406] lo speed is unknown, defaulting to 1000 [ 247.962385][T11427] syz.0.1401 (11427) used obsolete PPPIOCDETACH ioctl [ 247.969883][T11406] lo speed is unknown, defaulting to 1000 [ 247.984228][T11431] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.010903][T11406] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 248.042163][T11406] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 248.206931][T11406] lo speed is unknown, defaulting to 1000 [ 248.320599][T11406] lo speed is unknown, defaulting to 1000 [ 248.332534][T11406] lo speed is unknown, defaulting to 1000 [ 248.379803][T11406] lo speed is unknown, defaulting to 1000 [ 248.399597][T11406] lo speed is unknown, defaulting to 1000 [ 248.408171][T11443] netlink: 'syz.1.1403': attribute type 3 has an invalid length. [ 248.435781][T11443] netlink: 'syz.1.1403': attribute type 1 has an invalid length. [ 248.570908][T11457] dvmrp1: entered allmulticast mode [ 248.585468][T11457] dvmrp1: left allmulticast mode [ 248.884668][T11471] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.899697][T11474] netlink: 'syz.0.1418': attribute type 49 has an invalid length. [ 248.952990][T11477] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 248.980872][T11464] lo speed is unknown, defaulting to 1000 [ 249.002489][T11478] openvswitch: netlink: Missing key (keys=40, expected=80) [ 249.019301][T11467] netlink: 'syz.2.1414': attribute type 4 has an invalid length. [ 249.129195][ T919] lo speed is unknown, defaulting to 1000 [ 249.135723][ T919] syz2: Port: 1 Link ACTIVE [ 249.462429][T11485] macvtap1: entered allmulticast mode [ 249.470075][T11485] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 249.511369][T11485] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 249.659415][T11509] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 249.714892][T11482] lo speed is unknown, defaulting to 1000 [ 249.776907][T11509] netlink: 'syz.2.1426': attribute type 3 has an invalid length. [ 249.835850][T11509] netlink: 'syz.2.1426': attribute type 1 has an invalid length. [ 250.360215][T11536] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.283381][T11573] __nla_validate_parse: 8 callbacks suppressed [ 251.283405][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'. [ 251.348187][T11573] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 251.539720][T11592] unsupported nlmsg_type 40 [ 251.542217][T11595] netlink: 'syz.2.1442': attribute type 3 has an invalid length. [ 251.636171][T11595] netlink: 'syz.2.1442': attribute type 1 has an invalid length. [ 251.663193][T11595] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1442'. [ 251.789173][T11603] ieee802154 phy0 wpan0: encryption failed: -22 [ 251.938065][T11605] lo speed is unknown, defaulting to 1000 [ 251.987631][T11604] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1448'. [ 252.589850][T11633] lo speed is unknown, defaulting to 1000 [ 252.848834][T11644] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1459'. [ 252.936124][T11646] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1460'. [ 252.995851][T11646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1460'. [ 253.202654][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1461'. [ 253.252467][T11661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1464'. [ 253.252765][T11662] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 253.261896][T11659] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 253.270238][T11660] delete_channel: no stack [ 253.282631][T11653] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 253.293828][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1464'. [ 253.442318][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1465'. [ 253.461775][T11669] netlink: 'syz.2.1461': attribute type 3 has an invalid length. [ 253.470098][T11669] netlink: 'syz.2.1461': attribute type 1 has an invalid length. [ 253.562201][T11674] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.914743][T11694] netlink: 'syz.0.1473': attribute type 1 has an invalid length. [ 254.070550][T11694] 8021q: adding VLAN 0 to HW filter on device bond5 [ 254.104857][T11700] macvlan2: entered promiscuous mode [ 254.110375][T11700] macvlan2: entered allmulticast mode [ 254.126888][T11700] bond5: entered promiscuous mode [ 254.133425][T11700] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 254.179194][T11700] bond5: left promiscuous mode [ 254.338216][T11706] lo speed is unknown, defaulting to 1000 [ 254.548500][T11719] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.565447][T11726] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 254.565486][T11039] bond0: (slave bond_slave_0): interface is now down [ 254.612611][T11039] bond0: (slave bond_slave_1): interface is now down [ 254.630778][T11039] bond0: (slave batadv0): interface is now down [ 254.683341][ T6155] bond0: (slave bond_slave_0): interface is now down [ 254.699434][ T6155] bond0: (slave bond_slave_1): interface is now down [ 254.723821][ T6155] bond0: (slave batadv0): interface is now down [ 254.742402][T11735] netlink: 'syz.3.1482': attribute type 3 has an invalid length. [ 254.754370][ T6155] bond0: (slave bond_slave_0): interface is now down [ 254.784821][T11735] netlink: 'syz.3.1482': attribute type 1 has an invalid length. [ 254.792899][ T6155] bond0: (slave bond_slave_1): interface is now down [ 254.820750][ T6155] bond0: (slave batadv0): interface is now down [ 254.866567][ T6155] bond0: (slave bond_slave_0): interface is now down [ 254.902232][ T6155] bond0: (slave bond_slave_1): interface is now down [ 254.924336][ T6155] bond0: (slave batadv0): interface is now down [ 254.963406][T11039] bond0: (slave bond_slave_0): interface is now down [ 254.980951][T11743] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 254.991007][T11039] bond0: (slave bond_slave_1): interface is now down [ 255.027222][T11039] bond0: (slave batadv0): interface is now down [ 255.076236][T11039] bond0: (slave bond_slave_0): interface is now down [ 255.085643][T11039] bond0: (slave bond_slave_1): interface is now down [ 255.102685][T11039] bond0: (slave batadv0): interface is now down [ 255.132381][T11740] lo speed is unknown, defaulting to 1000 [ 255.138417][ T49] bond0: (slave bond_slave_0): interface is now down [ 255.150821][ T49] bond0: (slave bond_slave_1): interface is now down [ 255.162633][ T49] bond0: (slave batadv0): interface is now down [ 255.183165][ T49] bond0: (slave bond_slave_0): interface is now down [ 255.190115][ T49] bond0: (slave bond_slave_1): interface is now down [ 255.210828][ T49] bond0: (slave batadv0): interface is now down [ 255.263162][ T49] bond0: (slave bond_slave_0): interface is now down [ 255.269916][ T49] bond0: (slave bond_slave_1): interface is now down [ 255.305331][ T49] bond0: (slave batadv0): interface is now down [ 255.344678][ T49] bond0: (slave bond_slave_0): interface is now down [ 255.359615][ T49] bond0: (slave bond_slave_1): interface is now down [ 255.384685][ T49] bond0: (slave batadv0): interface is now down [ 255.423518][ T6160] bond0: (slave bond_slave_0): interface is now down [ 255.430278][ T6160] bond0: (slave bond_slave_1): interface is now down [ 255.467977][ T6160] bond0: (slave batadv0): interface is now down [ 255.520676][ T6160] bond0: (slave bond_slave_0): interface is now down [ 255.540268][ T6160] bond0: (slave bond_slave_1): interface is now down [ 255.572903][ T6160] bond0: (slave batadv0): interface is now down [ 255.603255][ T6160] bond0: (slave bond_slave_0): interface is now down [ 255.624536][ T6160] bond0: (slave bond_slave_1): interface is now down [ 255.631478][ T6160] bond0: (slave batadv0): interface is now down [ 255.693186][T11037] bond0: (slave bond_slave_0): interface is now down [ 255.703860][T11037] bond0: (slave bond_slave_1): interface is now down [ 255.710605][T11037] bond0: (slave batadv0): interface is now down [ 255.743225][ T6160] bond0: (slave bond_slave_0): interface is now down [ 255.752298][ T6160] bond0: (slave bond_slave_1): interface is now down [ 255.776847][ T6160] bond0: (slave batadv0): interface is now down [ 255.813006][ T6160] bond0: (slave bond_slave_0): interface is now down [ 255.827602][ T6160] bond0: (slave bond_slave_1): interface is now down [ 255.834957][ T6160] bond0: (slave batadv0): interface is now down [ 255.852972][T11037] bond0: (slave bond_slave_0): interface is now down [ 255.863047][T11037] bond0: (slave bond_slave_1): interface is now down [ 255.869878][T11037] bond0: (slave batadv0): interface is now down [ 255.893073][T11039] bond0: (slave bond_slave_0): interface is now down [ 255.900260][T11039] bond0: (slave bond_slave_1): interface is now down [ 255.907332][T11039] bond0: (slave batadv0): interface is now down [ 255.933019][T11037] bond0: (slave bond_slave_0): interface is now down [ 255.939928][T11037] bond0: (slave bond_slave_1): interface is now down [ 255.952952][T11037] bond0: (slave batadv0): interface is now down [ 255.973219][T11037] bond0: (slave bond_slave_0): interface is now down [ 255.980381][T11037] bond0: (slave bond_slave_1): interface is now down [ 255.987810][T11037] bond0: (slave batadv0): interface is now down [ 256.013317][ T6160] bond0: (slave bond_slave_0): interface is now down [ 256.020228][ T6160] bond0: (slave bond_slave_1): interface is now down [ 256.027559][ T6160] bond0: (slave batadv0): interface is now down [ 256.053070][T11037] bond0: (slave bond_slave_0): interface is now down [ 256.060219][T11037] bond0: (slave bond_slave_1): interface is now down [ 256.067670][T11037] bond0: (slave batadv0): interface is now down [ 256.093163][T11039] bond0: (slave bond_slave_0): interface is now down [ 256.100223][T11039] bond0: (slave bond_slave_1): interface is now down [ 256.107561][T11039] bond0: (slave batadv0): interface is now down [ 256.133015][T11039] bond0: (slave bond_slave_0): interface is now down [ 256.140116][T11039] bond0: (slave bond_slave_1): interface is now down [ 256.151986][T11039] bond0: (slave batadv0): interface is now down [ 256.173357][ T6155] bond0: (slave bond_slave_0): interface is now down [ 256.180391][ T6155] bond0: (slave bond_slave_1): interface is now down [ 256.187567][ T6155] bond0: (slave batadv0): interface is now down [ 256.213332][ T6155] bond0: (slave bond_slave_0): interface is now down [ 256.223907][ T6155] bond0: (slave bond_slave_1): interface is now down [ 256.230905][ T6155] bond0: (slave batadv0): interface is now down [ 256.253758][ T6160] bond0: (slave bond_slave_0): interface is now down [ 256.260864][ T6160] bond0: (slave bond_slave_1): interface is now down [ 256.273745][ T6160] bond0: (slave batadv0): interface is now down [ 256.303366][T11039] bond0: (slave bond_slave_0): interface is now down [ 256.315403][T11039] bond0: (slave bond_slave_1): interface is now down [ 256.322148][T11039] bond0: (slave batadv0): interface is now down [ 256.343439][ T6160] bond0: (slave bond_slave_0): interface is now down [ 256.352660][ T6160] bond0: (slave bond_slave_1): interface is now down [ 256.362313][ T6160] bond0: (slave batadv0): interface is now down [ 256.384858][ T12] bond0: (slave bond_slave_0): interface is now down [ 256.394902][ T12] bond0: (slave bond_slave_1): interface is now down [ 256.401899][ T12] bond0: (slave batadv0): interface is now down [ 256.422977][ T6160] bond0: (slave bond_slave_0): interface is now down [ 256.437561][ T6160] bond0: (slave bond_slave_1): interface is now down [ 256.445053][ T6160] bond0: (slave batadv0): interface is now down [ 256.463481][ T6160] bond0: (slave bond_slave_0): interface is now down [ 256.470464][ T6160] bond0: (slave bond_slave_1): interface is now down [ 256.479138][ T6160] bond0: (slave batadv0): interface is now down [ 256.504094][ T6155] bond0: (slave bond_slave_0): interface is now down [ 256.515000][ T6155] bond0: (slave bond_slave_1): interface is now down [ 256.522168][ T6155] bond0: (slave batadv0): interface is now down [ 256.543921][ T6160] bond0: (slave bond_slave_0): interface is now down [ 256.557581][ T6160] bond0: (slave bond_slave_1): interface is now down [ 256.567102][ T6160] bond0: (slave batadv0): interface is now down [ 256.597831][ T6155] bond0: (slave bond_slave_0): interface is now down [ 256.605682][ T6155] bond0: (slave bond_slave_1): interface is now down [ 256.612637][ T6155] bond0: (slave batadv0): interface is now down [ 256.643528][ T12] bond0: (slave bond_slave_0): interface is now down [ 256.650648][ T12] bond0: (slave bond_slave_1): interface is now down [ 256.663570][ T12] bond0: (slave batadv0): interface is now down [ 256.683816][ T12] bond0: (slave bond_slave_0): interface is now down [ 256.690745][ T12] bond0: (slave bond_slave_1): interface is now down [ 256.708262][ T12] bond0: (slave batadv0): interface is now down [ 256.733621][ T6160] bond0: (slave bond_slave_0): interface is now down [ 256.740557][ T6160] bond0: (slave bond_slave_1): interface is now down [ 256.747616][ T6160] bond0: (slave batadv0): interface is now down [ 256.777870][ T6160] bond0: (slave bond_slave_0): interface is now down [ 256.789379][ T6160] bond0: (slave bond_slave_1): interface is now down [ 256.796710][ T6160] bond0: (slave batadv0): interface is now down [ 256.823238][ T6160] bond0: (slave bond_slave_0): interface is now down [ 256.834922][ T6160] bond0: (slave bond_slave_1): interface is now down [ 256.841757][ T6160] bond0: (slave batadv0): interface is now down [ 256.876844][ T6160] bond0: (slave bond_slave_0): interface is now down [ 256.892919][ T6160] bond0: (slave bond_slave_1): interface is now down [ 256.899978][ T6160] bond0: (slave batadv0): interface is now down [ 256.923984][ T6160] bond0: (slave bond_slave_0): interface is now down [ 256.932539][ T6160] bond0: (slave bond_slave_1): interface is now down [ 256.941312][ T6160] bond0: (slave batadv0): interface is now down [ 256.963186][ T12] bond0: (slave bond_slave_0): interface is now down [ 256.969954][ T12] bond0: (slave bond_slave_1): interface is now down [ 256.993370][ T12] bond0: (slave batadv0): interface is now down [ 257.023590][ T6160] bond0: (slave bond_slave_0): interface is now down [ 257.031055][ T6160] bond0: (slave bond_slave_1): interface is now down [ 257.038565][ T6160] bond0: (slave batadv0): interface is now down [ 257.063419][ T6155] bond0: (slave bond_slave_0): interface is now down [ 257.070318][ T6155] bond0: (slave bond_slave_1): interface is now down [ 257.080639][ T6155] bond0: (slave batadv0): interface is now down [ 257.121161][ T6155] bond0: (slave bond_slave_0): interface is now down [ 257.131863][ T6155] bond0: (slave bond_slave_1): interface is now down [ 257.142104][ T6155] bond0: (slave batadv0): interface is now down [ 257.164364][ T6160] bond0: (slave bond_slave_0): interface is now down [ 257.172230][ T6160] bond0: (slave bond_slave_1): interface is now down [ 257.182903][ T6160] bond0: (slave batadv0): interface is now down [ 257.203203][ T6160] bond0: (slave bond_slave_0): interface is now down [ 257.209959][ T6160] bond0: (slave bond_slave_1): interface is now down [ 257.222495][ T6160] bond0: (slave batadv0): interface is now down [ 257.258060][T11039] bond0: (slave bond_slave_0): interface is now down [ 257.282374][T11039] bond0: (slave bond_slave_1): interface is now down [ 257.289920][T11039] bond0: (slave batadv0): interface is now down [ 257.293023][T11752] 0ªX¹¦À: renamed from caif0 [ 257.305675][T11752] 0ªX¹¦À: entered allmulticast mode [ 257.310964][T11752] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 257.335201][T11039] bond0: (slave bond_slave_0): interface is now down [ 257.346918][T11039] bond0: (slave bond_slave_1): interface is now down [ 257.353187][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.362132][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.362902][T11039] bond0: (slave batadv0): interface is now down [ 257.413809][ T6155] bond0: (slave bond_slave_0): interface is now down [ 257.420621][ T6155] bond0: (slave bond_slave_1): interface is now down [ 257.432293][ T6155] bond0: (slave batadv0): interface is now down [ 257.453242][T11039] bond0: (slave bond_slave_0): interface is now down [ 257.471153][T11039] bond0: (slave bond_slave_1): interface is now down [ 257.493238][T11039] bond0: (slave batadv0): interface is now down [ 257.533077][T11039] bond0: (slave bond_slave_0): interface is now down [ 257.551269][T11039] bond0: (slave bond_slave_1): interface is now down [ 257.565077][T11039] bond0: (slave batadv0): interface is now down [ 257.604292][T11039] bond0: (slave bond_slave_0): interface is now down [ 257.629316][T11039] bond0: (slave bond_slave_1): interface is now down [ 257.645093][T11039] bond0: (slave batadv0): interface is now down [ 257.648657][ T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.674742][T11039] bond0: (slave bond_slave_0): interface is now down [ 257.685435][T11039] bond0: (slave bond_slave_1): interface is now down [ 257.692306][T11039] bond0: (slave batadv0): interface is now down [ 257.696249][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.714016][T11039] bond0: (slave bond_slave_0): interface is now down [ 257.727941][ T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.746693][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.749797][T11039] bond0: (slave bond_slave_1): interface is now down [ 257.762501][ T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.780033][T11039] bond0: (slave batadv0): interface is now down [ 257.801905][T11785] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.809849][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.827916][ T6160] bond0: (slave bond_slave_0): interface is now down [ 257.848177][ T6160] bond0: (slave bond_slave_1): interface is now down [ 257.861889][ T6160] bond0: (slave batadv0): interface is now down [ 257.884004][ T6160] bond0: (slave bond_slave_0): interface is now down [ 257.911927][ T6160] bond0: (slave bond_slave_1): interface is now down [ 257.919954][T11788] netlink: 'syz.0.1495': attribute type 1 has an invalid length. [ 257.930743][ T6160] bond0: (slave batadv0): interface is now down [ 257.963253][T11039] bond0: (slave bond_slave_0): interface is now down [ 257.972677][T11039] bond0: (slave bond_slave_1): interface is now down [ 257.985067][T11039] bond0: (slave batadv0): interface is now down [ 258.013297][T11039] bond0: (slave bond_slave_0): interface is now down [ 258.027965][T11039] bond0: (slave bond_slave_1): interface is now down [ 258.034912][T11039] bond0: (slave batadv0): interface is now down [ 258.050043][T11794] IPVS: set_ctl: invalid protocol: 115 172.30.0.5:20000 [ 258.053022][ T6160] bond0: (slave bond_slave_0): interface is now down [ 258.064118][ T6160] bond0: (slave bond_slave_1): interface is now down [ 258.071179][ T6160] bond0: (slave batadv0): interface is now down [ 258.107951][ T12] bond0: (slave bond_slave_0): interface is now down [ 258.124650][ T12] bond0: (slave bond_slave_1): interface is now down [ 258.131447][ T12] bond0: (slave batadv0): interface is now down [ 258.153504][ T6160] bond0: (slave bond_slave_0): interface is now down [ 258.160638][ T6160] bond0: (slave bond_slave_1): interface is now down [ 258.185131][ T6160] bond0: (slave batadv0): interface is now down [ 258.235393][ T6160] bond0: (slave bond_slave_0): interface is now down [ 258.242429][ T6160] bond0: (slave bond_slave_1): interface is now down [ 258.267173][ T6160] bond0: (slave batadv0): interface is now down [ 258.296511][ T6160] bond0: (slave bond_slave_0): interface is now down [ 258.316864][ T6160] bond0: (slave bond_slave_1): interface is now down [ 258.335521][ T6160] bond0: (slave batadv0): interface is now down [ 258.373473][ T49] bond0: (slave bond_slave_0): interface is now down [ 258.390969][ T49] bond0: (slave bond_slave_1): interface is now down [ 258.400276][ T49] bond0: (slave batadv0): interface is now down [ 258.434114][ T49] bond0: (slave bond_slave_0): interface is now down [ 258.455190][ T49] bond0: (slave bond_slave_1): interface is now down [ 258.469952][ T49] bond0: (slave batadv0): interface is now down [ 258.503148][ T49] bond0: (slave bond_slave_0): interface is now down [ 258.524579][ T49] bond0: (slave bond_slave_1): interface is now down [ 258.531727][ T49] bond0: (slave batadv0): interface is now down [ 258.613259][ T49] bond0: (slave bond_slave_0): interface is now down [ 258.620033][ T49] bond0: (slave bond_slave_1): interface is now down [ 258.667775][T11814] netlink: 'syz.4.1503': attribute type 1 has an invalid length. [ 258.673182][ T49] bond0: (slave batadv0): interface is now down [ 258.701293][T11814] __nla_validate_parse: 9 callbacks suppressed [ 258.701315][T11814] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1503'. [ 258.720063][ T6160] bond0: (slave bond_slave_0): interface is now down [ 258.731941][ T6160] bond0: (slave bond_slave_1): interface is now down [ 258.738878][ T6160] bond0: (slave batadv0): interface is now down [ 258.764495][ T6155] bond0: (slave bond_slave_0): interface is now down [ 258.791856][ T6155] bond0: (slave bond_slave_1): interface is now down [ 258.834687][ T6155] bond0: (slave batadv0): interface is now down [ 258.858190][T11039] bond0: (slave bond_slave_0): interface is now down [ 258.891228][T11039] bond0: (slave bond_slave_1): interface is now down [ 258.909526][T11039] bond0: (slave batadv0): interface is now down [ 258.953385][ T6160] bond0: (slave bond_slave_0): interface is now down [ 258.974277][ T6160] bond0: (slave bond_slave_1): interface is now down [ 258.981357][ T6160] bond0: (slave batadv0): interface is now down [ 259.003763][T11039] bond0: (slave bond_slave_0): interface is now down [ 259.010571][T11039] bond0: (slave bond_slave_1): interface is now down [ 259.052917][T11039] bond0: (slave batadv0): interface is now down [ 259.088067][ T6160] bond0: (slave bond_slave_0): interface is now down [ 259.111473][ T6160] bond0: (slave bond_slave_1): interface is now down [ 259.130134][ T6160] bond0: (slave batadv0): interface is now down [ 259.142568][T11821] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1504'. [ 259.163351][ T6160] bond0: (slave bond_slave_0): interface is now down [ 259.171226][ T6160] bond0: (slave bond_slave_1): interface is now down [ 259.183228][ T6160] bond0: (slave batadv0): interface is now down [ 259.213027][T11039] bond0: (slave bond_slave_0): interface is now down [ 259.219781][T11039] bond0: (slave bond_slave_1): interface is now down [ 259.228637][T11039] bond0: (slave batadv0): interface is now down [ 259.253938][ T6160] bond0: (slave bond_slave_0): interface is now down [ 259.269414][ T6160] bond0: (slave bond_slave_1): interface is now down [ 259.277963][ T6160] bond0: (slave batadv0): interface is now down [ 259.303951][ T6160] bond0: (slave bond_slave_0): interface is now down [ 259.321189][ T6160] bond0: (slave bond_slave_1): interface is now down [ 259.328345][ T6160] bond0: (slave batadv0): interface is now down [ 259.340743][T11805] macsec0: entered allmulticast mode [ 259.355316][ T6160] bond0: (slave bond_slave_0): interface is now down [ 259.377377][ T6160] bond0: (slave bond_slave_1): interface is now down [ 259.397916][ T6160] bond0: (slave batadv0): interface is now down [ 259.444580][ T13] bond0: (slave bond_slave_0): interface is now down [ 259.464082][T11039] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.467496][ T13] bond0: (slave bond_slave_1): interface is now down [ 259.486571][T11039] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 259.504859][ T13] bond0: (slave batadv0): interface is now down [ 259.517251][T11039] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.531708][T11039] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 259.542334][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1506'. [ 259.553365][T11039] bond0: (slave bond_slave_0): interface is now down [ 259.558513][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.573211][ T13] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 259.588160][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1506'. [ 259.598100][T11039] bond0: (slave bond_slave_1): interface is now down [ 259.608262][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.619442][T11039] bond0: (slave batadv0): interface is now down [ 259.630941][ T13] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 259.645249][T11829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1506'. [ 259.656524][ T13] bond0: (slave bond_slave_0): interface is now down [ 259.663387][T11829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1506'. [ 259.678924][ T13] bond0: (slave bond_slave_1): interface is now down [ 259.686165][ T13] bond0: (slave batadv0): interface is now down [ 259.724038][ T13] bond0: (slave bond_slave_0): interface is now down [ 259.741507][ T13] bond0: (slave bond_slave_1): interface is now down [ 259.763871][ T13] bond0: (slave batadv0): interface is now down [ 259.775315][ T13] bond0: now running without any active interface! [ 259.916134][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1518'. [ 259.970968][T11836] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.013532][T11840] netlink: 'syz.0.1509': attribute type 15 has an invalid length. [ 260.302186][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1513'. [ 260.338150][T11856] bond0: entered promiscuous mode [ 260.374654][T11856] batadv0: entered promiscuous mode [ 260.381412][T11856] debugfs: 'hsr0' already exists in 'hsr' [ 260.388556][T11856] Cannot create hsr debugfs directory [ 260.397318][T11856] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 260.411104][T11856] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 260.425095][T11856] hsr0: entered allmulticast mode [ 260.434977][T11856] bond0: entered allmulticast mode [ 260.436446][T11865] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.454966][T11863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.473016][T11856] batadv0: entered allmulticast mode [ 260.508819][T11856] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 260.680199][T11876] netlink: 'syz.3.1520': attribute type 21 has an invalid length. [ 260.706936][T11877] netlink: 'syz.3.1520': attribute type 21 has an invalid length. [ 260.721110][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1520'. [ 260.731383][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1520'. [ 260.759360][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.784115][T11877] netlink: 'syz.3.1520': attribute type 21 has an invalid length. [ 260.796675][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.807118][T11876] netlink: 'syz.3.1520': attribute type 21 has an invalid length. [ 260.878972][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.903370][T11889] ±ÿ: renamed from batadv_slave_1 [ 260.929308][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.966112][T11889] netlink: 'syz.0.1523': attribute type 11 has an invalid length. [ 261.120500][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.131463][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.223113][T11039] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.251855][T11039] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.326370][T11039] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.337127][T11039] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.625793][T11922] netlink: 'syz.3.1531': attribute type 1 has an invalid length. [ 261.640978][T11922] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 261.659061][T11922] gretap1: entered promiscuous mode [ 261.712174][T11921] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 261.730556][T11926] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 261.888769][T11926] netlink: 'syz.0.1533': attribute type 3 has an invalid length. [ 261.923064][T11926] netlink: 'syz.0.1533': attribute type 1 has an invalid length. [ 261.988888][T11932] tipc: Enabling of bearer rejected, already enabled [ 262.018815][T11932] batadv0: entered promiscuous mode [ 262.195200][ T7344] lo speed is unknown, defaulting to 1000 [ 262.218490][ T7344] syz2: Port: 1 Link DOWN [ 262.286664][T11939] lo speed is unknown, defaulting to 1000 [ 263.931210][T12035] __nla_validate_parse: 22 callbacks suppressed [ 263.931230][T12035] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1568'. [ 264.161661][T12055] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.322165][T12064] validate_nla: 5 callbacks suppressed [ 264.322186][T12064] netlink: 'syz.1.1575': attribute type 10 has an invalid length. [ 264.360879][T12064] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.370379][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1577'. [ 264.388879][T12065] netlink: 'syz.1.1575': attribute type 8 has an invalid length. [ 264.400380][T12064] bond0: (slave team0): Enslaving as an active interface with a down link [ 264.403011][T12065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1575'. [ 264.484475][T12074] delete_channel: no stack [ 264.510381][T12074] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1579'. [ 264.576006][T12077] delete_channel: no stack [ 264.766715][T12081] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1580'. [ 264.908987][T12094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'. [ 265.070880][T12100] lo speed is unknown, defaulting to 1000 [ 265.071105][T12102] tipc: Enabling of bearer rejected, already enabled [ 265.331386][T12120] netlink: 'syz.1.1590': attribute type 1 has an invalid length. [ 265.535832][T12120] 8021q: adding VLAN 0 to HW filter on device bond9 [ 265.601402][T12132] netlink: 'syz.4.1594': attribute type 14 has an invalid length. [ 265.797492][T12139] netlink: 'syz.2.1595': attribute type 4 has an invalid length. [ 265.809272][T12136] netlink: 'syz.2.1595': attribute type 4 has an invalid length. [ 266.509054][T12167] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1604'. [ 266.965391][T12182] netlink: 'syz.0.1609': attribute type 1 has an invalid length. [ 267.075828][T12186] dvmrp8: entered allmulticast mode [ 267.097212][T12185] dvmrp8: left allmulticast mode [ 267.114528][T12196] netlink: 'syz.1.1612': attribute type 13 has an invalid length. [ 267.128911][T12196] netlink: 'syz.1.1612': attribute type 17 has an invalid length. [ 267.170008][T12196] gretap0: refused to change device tx_queue_len [ 267.180022][T12196] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 267.206787][T12190] netlink: 'syz.4.1608': attribute type 1 has an invalid length. [ 267.593794][T12214] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 267.611103][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1616'. [ 267.781924][T12222] netlink: 4208 bytes leftover after parsing attributes in process `syz.4.1618'. [ 267.828509][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1618'. [ 268.128078][T12234] bond1: (slave gretap1): Releasing active interface [ 268.188257][T12245] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 268.214893][T12234] bond2: (slave geneve2): Releasing active interface [ 268.249685][T12234] bond4: (slave vcan0): Releasing backup interface [ 268.280115][T12234] bond4: (slave vcan1): making interface the new active one [ 268.344146][T12234] bond4: (slave vcan1): Releasing backup interface [ 268.409276][T12243] lo speed is unknown, defaulting to 1000 [ 268.579410][T12257] sctp: [Deprecated]: syz.3.1628 (pid 12257) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.579410][T12257] Use struct sctp_sack_info instead [ 268.590295][T12254] lo speed is unknown, defaulting to 1000 [ 269.017009][T12286] tipc: Enabled bearer , priority 0 [ 269.374579][T12301] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 269.392653][T12302] IPVS: set_ctl: invalid protocol: 202 0.0.0.0:0 [ 269.411742][T12303] __nla_validate_parse: 7 callbacks suppressed [ 269.411762][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1639'. [ 269.422077][T12298] IPVS: set_ctl: invalid protocol: 12852 201.83.53.226:12643 [ 269.441383][T12298] IPVS: set_ctl: invalid protocol: 12852 201.83.53.226:12643 [ 269.482895][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1639'. [ 269.532441][T12283] tipc: Disabling bearer [ 269.762489][T12317] pim6reg1: entered promiscuous mode [ 269.771254][T12317] pim6reg1: entered allmulticast mode [ 269.995351][T12317] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1643'. [ 270.093797][T12317] bond7 (unregistering): Released all slaves [ 270.524876][T12340] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1650'. [ 270.597009][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.624024][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.652131][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.667560][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.712357][T12338] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.803168][T12338] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.915321][T12365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1653'. [ 271.006715][T12338] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.168191][T12365] 8021q: adding VLAN 0 to HW filter on device bond10 [ 271.206461][T12338] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.218183][T12360] lo speed is unknown, defaulting to 1000 [ 271.371617][T12372] lo speed is unknown, defaulting to 1000 [ 271.460052][T12377] lo speed is unknown, defaulting to 1000 [ 271.485336][ T59] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.515328][T12383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1659'. [ 271.566747][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1659'. [ 271.653568][T12381] tipc: Enabled bearer , priority 0 [ 271.670655][T11037] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.778312][T12383] tipc: Enabling of bearer rejected, already enabled [ 271.834041][T12381] syzkaller0: entered promiscuous mode [ 271.839839][T12381] syzkaller0: entered allmulticast mode [ 271.872021][ T6155] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.936783][ T6155] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.955562][T12381] tipc: Resetting bearer [ 271.971657][T12381] tipc: Disabling bearer [ 272.407407][T12408] validate_nla: 5 callbacks suppressed [ 272.407429][T12408] netlink: 'syz.4.1664': attribute type 1 has an invalid length. [ 272.688723][ T30] audit: type=1800 audit(1756788927.065:10): pid=12397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1661" name="memory.events" dev="tmpfs" ino=1648 res=0 errno=0 [ 273.212543][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'. [ 273.268611][T12434] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 273.492699][T12438] netlink: 'syz.1.1670': attribute type 3 has an invalid length. [ 273.529641][T12438] netlink: 'syz.1.1670': attribute type 1 has an invalid length. [ 273.591042][T12438] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1670'. [ 274.292786][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1680'. [ 274.674729][T12473] tun0: tun_chr_ioctl cmd 1074025675 [ 274.708884][T12473] tun0: persist enabled [ 274.892397][T12485] netlink: 'syz.1.1684': attribute type 13 has an invalid length. [ 274.908808][T12485] netlink: 'syz.1.1684': attribute type 17 has an invalid length. [ 275.021250][T12493] netlink: 'syz.0.1687': attribute type 1 has an invalid length. [ 275.030726][T12493] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1687'. [ 275.052752][T12481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.090851][T12485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.222649][T12502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1690'. [ 275.247187][T12505] netlink: 'syz.3.1691': attribute type 2 has an invalid length. [ 275.256069][T12502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1690'. [ 275.267646][T12502] netlink: 'syz.4.1690': attribute type 3 has an invalid length. [ 275.294633][T12511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1690'. [ 275.306810][T12511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1690'. [ 275.316859][T12511] netlink: 'syz.4.1690': attribute type 3 has an invalid length. [ 275.325222][T12489] lo speed is unknown, defaulting to 1000 [ 275.548467][T12517] bond6: entered promiscuous mode [ 275.554221][T12517] bond6: entered allmulticast mode [ 275.982312][T12534] lo speed is unknown, defaulting to 1000 [ 276.202253][T12538] v: renamed from veth1_vlan [ 276.535164][T12553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1702'. [ 276.718561][T12561] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 276.800196][T12567] netlink: 'syz.4.1708': attribute type 3 has an invalid length. [ 276.810874][T12565] lo speed is unknown, defaulting to 1000 [ 276.828799][T12567] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1708'. [ 277.565198][T12579] ieee802154 phy0 wpan0: encryption failed: -22 [ 277.724755][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1714'. [ 277.732424][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1715'. [ 277.779398][T12589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1714'. [ 277.798641][T12588] lo speed is unknown, defaulting to 1000 [ 277.819389][T12589] validate_nla: 2 callbacks suppressed [ 277.819410][T12589] netlink: 'syz.2.1714': attribute type 1 has an invalid length. [ 277.985399][T12586] lo speed is unknown, defaulting to 1000 [ 278.071824][T12599] delete_channel: no stack [ 278.694413][T12628] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.292596][T12658] bridge5: entered promiscuous mode [ 279.668603][T12669] nbd: socks must be embedded in a SOCK_ITEM attr [ 279.683520][T12671] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.311629][T12697] __nla_validate_parse: 11 callbacks suppressed [ 280.311652][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'. [ 280.388515][T12697] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 280.498372][T12701] netlink: 'syz.1.1748': attribute type 3 has an invalid length. [ 280.506783][T12701] netlink: 'syz.1.1748': attribute type 1 has an invalid length. [ 280.515780][T12701] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1748'. [ 281.270880][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1758'. [ 281.300129][T12724] openvswitch: netlink: Duplicate or invalid key (type 0). [ 281.307838][T12724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.440922][T12734] netlink: 'syz.0.1760': attribute type 1 has an invalid length. [ 281.472705][T12736] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1761'. [ 281.486912][T12736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1761'. [ 281.763671][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1763'. [ 281.779699][T12749] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 281.858256][T12752] netlink: 'syz.3.1763': attribute type 3 has an invalid length. [ 281.877965][T12752] netlink: 'syz.3.1763': attribute type 1 has an invalid length. [ 281.897945][T12752] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1763'. [ 282.193608][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1769'. [ 282.219426][T12763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1769'. [ 282.679894][T12777] syzkaller0: entered promiscuous mode [ 282.713213][T12777] syzkaller0: entered allmulticast mode [ 282.720323][T12776] tipc: Enabled bearer , priority 0 [ 282.763697][T12775] tipc: Resetting bearer [ 282.812147][T12774] tipc: Resetting bearer [ 282.896326][T12774] tipc: Disabling bearer [ 283.048810][T12791] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1776'. [ 283.089657][T12793] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 283.222585][T12798] netlink: 'syz.1.1777': attribute type 3 has an invalid length. [ 283.270988][T12798] netlink: 'syz.1.1777': attribute type 1 has an invalid length. [ 285.167340][T12857] tipc: Enabled bearer , priority 0 [ 285.175026][T12857] syzkaller0: entered promiscuous mode [ 285.180541][T12857] syzkaller0: entered allmulticast mode [ 285.230481][T12857] tipc: Resetting bearer [ 285.250425][T12856] tipc: Resetting bearer [ 285.290354][T12856] tipc: Disabling bearer [ 285.778645][T12870] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 286.048384][T12877] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.163513][T12901] __nla_validate_parse: 5 callbacks suppressed [ 287.163533][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1814'. [ 287.179290][T12901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1814'. [ 287.230196][T12901] netlink: 'syz.1.1814': attribute type 18 has an invalid length. [ 287.314090][T12904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1815'. [ 287.588806][T12916] veth5: left allmulticast mode [ 287.594293][T12916] bridge1: port 1(veth5) entered disabled state [ 287.622131][T12917] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.643508][T12916] bond4: (slave ip6gretap1): Releasing backup interface [ 287.700137][T12918] lo speed is unknown, defaulting to 1000 [ 287.734692][T12923] netlink: 'syz.1.1820': attribute type 12 has an invalid length. [ 288.002565][T12928] lo speed is unknown, defaulting to 1000 [ 288.522464][T12938] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1823'. [ 288.544249][T12936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1822'. [ 288.560201][T12936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1822'. [ 288.579593][T12936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1822'. [ 288.596504][T12939] netlink: 'syz.4.1823': attribute type 10 has an invalid length. [ 288.612897][T12939] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1823'. [ 288.660268][T12939] bond0: option arp_all_targets: invalid value (196616) [ 288.878002][T12949] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1827'. [ 288.907603][T12953] ieee802154 phy0 wpan0: encryption failed: -22 [ 289.058621][T12952] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1828'. [ 289.068956][T12960] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 289.087561][T12950] tipc: Enabled bearer , priority 0 [ 289.358228][T12963] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 289.738103][T12947] tipc: Disabling bearer [ 289.800347][T12978] netlink: 'syz.2.1834': attribute type 2 has an invalid length. [ 290.177219][T12999] netlink: 'syz.4.1839': attribute type 1 has an invalid length. [ 290.463802][T13005] tap0: tun_chr_ioctl cmd 1074025677 [ 290.470769][T13005] tap0: linktype set to 774 [ 290.672102][T13011] netlink: 'syz.2.1842': attribute type 4 has an invalid length. [ 290.701020][T13011] netlink: 'syz.2.1842': attribute type 4 has an invalid length. [ 290.723105][ T1591] lo speed is unknown, defaulting to 1000 [ 290.729050][ T1591] syz2: Port: 1 Link ACTIVE [ 290.765478][T13012] netlink: zone id is out of range [ 290.770677][T13012] netlink: zone id is out of range [ 290.781118][T12815] Set syz1 is full, maxelem 65536 reached [ 291.086247][T13022] netlink: 'syz.2.1846': attribute type 29 has an invalid length. [ 291.111961][T13026] netlink: 'syz.2.1846': attribute type 29 has an invalid length. [ 291.330556][T13034] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 291.443657][T13042] netlink: 'syz.3.1851': attribute type 3 has an invalid length. [ 291.486664][T13042] netlink: 'syz.3.1851': attribute type 1 has an invalid length. [ 292.428474][T13093] tipc: Resetting bearer [ 292.435064][T13093] tipc: Resetting bearer [ 292.671535][T13109] __nla_validate_parse: 16 callbacks suppressed [ 292.671560][T13109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1874'. [ 292.818963][T13124] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1878'. [ 292.850943][T13120] ieee802154 phy0 wpan0: encryption failed: -22 [ 292.917152][T13124] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1878'. [ 292.939212][T13116] lo speed is unknown, defaulting to 1000 [ 293.032123][T13126] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1878'. [ 293.417979][T13139] ieee802154 phy0 wpan0: encryption failed: -22 [ 293.462407][T13141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1881'. [ 293.486106][T13141] smc: net device bond0 applied user defined pnetid SYZ [ 293.677418][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1883'. [ 293.817936][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1884'. [ 293.838950][T13155] syz_tun: entered promiscuous mode [ 293.856649][T13155] syz_tun: left promiscuous mode [ 294.084510][T13174] tipc: Enabled bearer , priority 0 [ 294.099777][T13174] syzkaller0: entered promiscuous mode [ 294.128377][T13174] syzkaller0: entered allmulticast mode [ 294.181491][T13174] tipc: Resetting bearer [ 294.181847][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1892'. [ 294.197983][T13173] tipc: Resetting bearer [ 294.222350][T13173] tipc: Disabling bearer [ 294.251652][T13182] lo speed is unknown, defaulting to 1000 [ 294.547998][T13200] netlink: 'syz.4.1896': attribute type 1 has an invalid length. [ 294.741447][T13212] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1898'. [ 295.059132][T13233] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1903'. [ 295.225362][T13212] bond0 (unregistering): Released all slaves [ 295.560958][T13257] ieee802154 phy0 wpan0: encryption failed: -22 [ 295.645620][T13260] tipc: Can't bind to reserved service type 2 [ 295.802697][ T30] audit: type=1800 audit(1756788950.185:11): pid=13268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1913" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2028 res=0 errno=0 [ 296.049313][T13280] v: renamed from veth1_vlan [ 296.086369][T13284] FAULT_INJECTION: forcing a failure. [ 296.086369][T13284] name failslab, interval 1, probability 0, space 0, times 0 [ 296.113150][T13284] CPU: 0 UID: 0 PID: 13284 Comm: syz.2.1917 Not tainted syzkaller #0 PREEMPT(full) [ 296.113181][T13284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.113205][T13284] Call Trace: [ 296.113214][T13284] [ 296.113225][T13284] dump_stack_lvl+0x189/0x250 [ 296.113257][T13284] ? __pfx____ratelimit+0x10/0x10 [ 296.113279][T13284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.113304][T13284] ? __pfx__printk+0x10/0x10 [ 296.113341][T13284] ? __pfx___might_resched+0x10/0x10 [ 296.113361][T13284] ? fs_reclaim_acquire+0x7d/0x100 [ 296.113400][T13284] should_fail_ex+0x414/0x560 [ 296.113434][T13284] should_failslab+0xa8/0x100 [ 296.113466][T13284] __kmalloc_noprof+0xcb/0x4f0 [ 296.113491][T13284] ? kfree+0x4d/0x440 [ 296.113513][T13284] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 296.113540][T13284] tomoyo_realpath_from_path+0xe3/0x5d0 [ 296.113564][T13284] ? tomoyo_domain+0xd9/0x130 [ 296.113592][T13284] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 296.113621][T13284] tomoyo_path_number_perm+0x1e8/0x5a0 [ 296.113654][T13284] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 296.113687][T13284] ? sb_end_write+0xe9/0x1c0 [ 296.113709][T13284] ? vfs_write+0x956/0xb30 [ 296.113778][T13284] ? ksys_write+0x1e1/0x250 [ 296.113813][T13284] security_file_ioctl+0xcb/0x2d0 [ 296.113843][T13284] __se_sys_ioctl+0x47/0x170 [ 296.113872][T13284] do_syscall_64+0xfa/0x3b0 [ 296.113892][T13284] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.113912][T13284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.113932][T13284] ? clear_bhb_loop+0x60/0xb0 [ 296.113957][T13284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.113976][T13284] RIP: 0033:0x7ff35858ebe9 [ 296.113994][T13284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.114022][T13284] RSP: 002b:00007ff359404038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.114043][T13284] RAX: ffffffffffffffda RBX: 00007ff3587c5fa0 RCX: 00007ff35858ebe9 [ 296.114059][T13284] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000003 [ 296.114072][T13284] RBP: 00007ff359404090 R08: 0000000000000000 R09: 0000000000000000 [ 296.114084][T13284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.114096][T13284] R13: 00007ff3587c6038 R14: 00007ff3587c5fa0 R15: 00007ffe885b8cf8 [ 296.114135][T13284] [ 296.115334][T13284] ERROR: Out of memory at tomoyo_realpath_from_path. [ 296.485423][T13296] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.518892][T13298] netlink: 'syz.2.1923': attribute type 29 has an invalid length. [ 296.534668][T13298] netlink: 'syz.2.1923': attribute type 29 has an invalid length. [ 296.822250][T13315] netlink: 'syz.1.1928': attribute type 1 has an invalid length. [ 296.896925][T13315] bond11: (slave vcan1): The slave device specified does not support setting the MAC address [ 296.907500][T13315] bond11: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 296.921734][T13315] bond11: (slave vcan1): making interface the new active one [ 296.930302][T13315] bond11: (slave vcan1): Enslaving as an active interface with an up link [ 297.002238][T13315] bond11: (slave vcan2): The slave device specified does not support setting the MAC address [ 297.047028][T13315] bond11: (slave vcan2): Enslaving as a backup interface with an up link [ 297.099858][T13325] lo speed is unknown, defaulting to 1000 [ 297.350847][T13334] ieee802154 phy0 wpan0: encryption failed: -22 [ 297.498666][T13340] geneve3: entered promiscuous mode [ 297.550941][T13348] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.628164][T13348] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.909516][T13361] netlink: 'syz.3.1944': attribute type 2 has an invalid length. [ 297.971382][T13348] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.057361][T13361] k›*·]‘: entered promiscuous mode [ 298.089163][T13363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.138926][T13348] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.263750][ T6155] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.344376][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.358343][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.386089][ T6160] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.863252][T13405] __nla_validate_parse: 4 callbacks suppressed [ 298.863272][T13405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1957'. [ 299.465461][T13431] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1963'. [ 299.501860][T13431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1963'. [ 299.785386][T13441] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1965'. [ 299.813193][T13441] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1965'. [ 299.844706][T13441] netlink: 'syz.0.1965': attribute type 21 has an invalid length. [ 300.547491][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1972'. [ 300.594338][T13462] lo speed is unknown, defaulting to 1000 [ 300.628182][T13467] FAULT_INJECTION: forcing a failure. [ 300.628182][T13467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.664940][T13463] tipc: Enabling of bearer rejected, failed to enable media [ 300.692564][T13467] CPU: 1 UID: 0 PID: 13467 Comm: syz.1.1974 Not tainted syzkaller #0 PREEMPT(full) [ 300.692595][T13467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 300.692608][T13467] Call Trace: [ 300.692616][T13467] [ 300.692626][T13467] dump_stack_lvl+0x189/0x250 [ 300.692655][T13467] ? __pfx____ratelimit+0x10/0x10 [ 300.692677][T13467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.692702][T13467] ? __pfx__printk+0x10/0x10 [ 300.692730][T13467] ? __might_fault+0xb0/0x130 [ 300.692771][T13467] should_fail_ex+0x414/0x560 [ 300.692809][T13467] _copy_from_user+0x2d/0xb0 [ 300.692835][T13467] ppp_set_compress+0xfd/0x730 [ 300.692864][T13467] ? __pfx_ppp_set_compress+0x10/0x10 [ 300.692902][T13467] ppp_ioctl+0x1441/0x19a0 [ 300.692932][T13467] ? __pfx_ppp_ioctl+0x10/0x10 [ 300.692969][T13467] ? ksys_write+0x1e1/0x250 [ 300.693004][T13467] ? bpf_lsm_file_ioctl+0x9/0x20 [ 300.693031][T13467] ? __pfx_ppp_ioctl+0x10/0x10 [ 300.693053][T13467] __se_sys_ioctl+0xf9/0x170 [ 300.693083][T13467] do_syscall_64+0xfa/0x3b0 [ 300.693104][T13467] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.693125][T13467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.693145][T13467] ? clear_bhb_loop+0x60/0xb0 [ 300.693170][T13467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.693189][T13467] RIP: 0033:0x7f6e4298ebe9 [ 300.693207][T13467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.693225][T13467] RSP: 002b:00007f6e40bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.693247][T13467] RAX: ffffffffffffffda RBX: 00007f6e42bc5fa0 RCX: 00007f6e4298ebe9 [ 300.693262][T13467] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000003 [ 300.693275][T13467] RBP: 00007f6e40bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 300.693287][T13467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.693298][T13467] R13: 00007f6e42bc6038 R14: 00007f6e42bc5fa0 R15: 00007ffe4f0ff3e8 [ 300.693332][T13467] [ 301.340724][T13484] tipc: Enabled bearer , priority 0 [ 301.348418][T13484] syzkaller0: entered promiscuous mode [ 301.354335][T13484] syzkaller0: entered allmulticast mode [ 301.360665][T13484] tipc: Resetting bearer [ 301.509627][T13484] tipc: Resetting bearer [ 301.566852][T13501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1985'. [ 301.582730][T13482] tipc: Resetting bearer [ 301.675023][T13482] tipc: Disabling bearer [ 301.896292][T13516] FAULT_INJECTION: forcing a failure. [ 301.896292][T13516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.927321][T13516] CPU: 0 UID: 0 PID: 13516 Comm: syz.4.1989 Not tainted syzkaller #0 PREEMPT(full) [ 301.927361][T13516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 301.927374][T13516] Call Trace: [ 301.927383][T13516] [ 301.927393][T13516] dump_stack_lvl+0x189/0x250 [ 301.927423][T13516] ? __pfx____ratelimit+0x10/0x10 [ 301.927444][T13516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.927469][T13516] ? __pfx__printk+0x10/0x10 [ 301.927511][T13516] should_fail_ex+0x414/0x560 [ 301.927545][T13516] _copy_to_user+0x31/0xb0 [ 301.927571][T13516] simple_read_from_buffer+0xe1/0x170 [ 301.927607][T13516] proc_fail_nth_read+0x1b3/0x220 [ 301.927635][T13516] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.927661][T13516] ? rw_verify_area+0x2a6/0x4d0 [ 301.927686][T13516] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.927711][T13516] vfs_read+0x1fd/0xa30 [ 301.927736][T13516] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 301.927767][T13516] ? __pfx_vfs_read+0x10/0x10 [ 301.927801][T13516] ? ppp_ioctl+0x145a/0x19a0 [ 301.927839][T13516] ksys_read+0x145/0x250 [ 301.927875][T13516] ? __pfx_ksys_read+0x10/0x10 [ 301.927908][T13516] ? do_syscall_64+0xbe/0x3b0 [ 301.927934][T13516] do_syscall_64+0xfa/0x3b0 [ 301.927954][T13516] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.927972][T13516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.927992][T13516] ? clear_bhb_loop+0x60/0xb0 [ 301.928015][T13516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.928034][T13516] RIP: 0033:0x7ff60978d5fc [ 301.928052][T13516] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 301.928069][T13516] RSP: 002b:00007ff60a6d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 301.928090][T13516] RAX: ffffffffffffffda RBX: 00007ff6099c5fa0 RCX: 00007ff60978d5fc [ 301.928104][T13516] RDX: 000000000000000f RSI: 00007ff60a6d50a0 RDI: 0000000000000004 [ 301.928116][T13516] RBP: 00007ff60a6d5090 R08: 0000000000000000 R09: 0000000000000000 [ 301.928128][T13516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.928139][T13516] R13: 00007ff6099c6038 R14: 00007ff6099c5fa0 R15: 00007ffe06ed99d8 [ 301.928170][T13516] [ 302.627218][T13548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2001'. [ 302.643165][T13548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2001'. [ 302.763620][T13559] netlink: 'syz.3.2003': attribute type 1 has an invalid length. [ 302.830957][T13559] bond3: entered promiscuous mode [ 302.837778][T13559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 302.848289][T13558] syzkaller0: entered promiscuous mode [ 302.853996][T13558] syzkaller0: entered allmulticast mode [ 302.861417][T13556] tipc: Enabled bearer , priority 0 [ 302.913782][T13556] tipc: Resetting bearer [ 302.975137][T13556] tipc: Disabling bearer [ 303.225052][T13583] tipc: Trying to set illegal importance in message [ 303.307796][T13586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2014'. [ 303.328457][T13586] tipc: Enabled bearer , priority 0 [ 303.337939][T13586] syzkaller0: entered promiscuous mode [ 303.343924][T13586] syzkaller0: entered allmulticast mode [ 303.635927][T13587] lo speed is unknown, defaulting to 1000 [ 303.675026][T13592] 8021q: adding VLAN 0 to HW filter on device bond7 [ 303.804560][T13592] bond7 (unregistering): Released all slaves [ 303.863918][T13600] tipc: Resetting bearer [ 303.920305][T13585] tipc: Resetting bearer [ 303.972976][T13585] tipc: Disabling bearer [ 304.712680][T13641] netlink: 'syz.1.2027': attribute type 2 has an invalid length. [ 304.761281][T13641] : entered promiscuous mode [ 305.055288][T13662] __nla_validate_parse: 2 callbacks suppressed [ 305.055307][T13662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2036'. [ 305.090008][T13662] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 305.105234][T13662] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 305.122455][T13665] netlink: 'syz.3.2037': attribute type 21 has an invalid length. [ 305.132523][T13665] netlink: 'syz.3.2037': attribute type 22 has an invalid length. [ 305.146060][T13665] netlink: 'syz.3.2037': attribute type 23 has an invalid length. [ 305.157141][T13665] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2037'. [ 305.167584][T13662] netlink: 'syz.4.2036': attribute type 1 has an invalid length. [ 305.175655][T13662] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2036'. [ 305.196153][T13662] netlink: 'syz.4.2036': attribute type 1 has an invalid length. [ 305.287713][T13673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2040'. [ 306.031857][T13710] netlink: 'syz.0.2052': attribute type 1 has an invalid length. [ 306.043314][T13710] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2052'. [ 306.052496][T13710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2052'. [ 306.064356][T13710] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2052'. [ 306.154737][T13715] netlink: 'syz.2.2054': attribute type 1 has an invalid length. [ 306.167688][T13715] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2054'. [ 306.298123][T13719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2057'. [ 306.410578][T13726] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2060'. [ 306.498372][T13729] bond11: option mode: unable to set because the bond device has slaves [ 306.525352][T13730] netlink: 'syz.4.2061': attribute type 1 has an invalid length. [ 306.562429][T13732] tipc: Enabling of bearer rejected, already enabled [ 308.242675][T13808] netlink: 'syz.1.2079': attribute type 22 has an invalid length. [ 308.256170][T13800] can: request_module (can-proto-0) failed. [ 308.487748][T13823] 8021q: VLANs not supported on tunl0 [ 308.579723][T13827] netlink: 'syz.1.2085': attribute type 10 has an invalid length. [ 308.726173][T13827] bond0: option arp_all_targets: invalid value (196616) [ 309.193938][T13836] veth7: entered promiscuous mode [ 309.648600][T13852] lo speed is unknown, defaulting to 1000 [ 310.240528][T13874] __nla_validate_parse: 11 callbacks suppressed [ 310.240550][T13874] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2098'. [ 310.313154][T13874] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2098'. [ 310.322667][T13879] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2099'. [ 310.353564][T13878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2100'. [ 310.370954][T13879] validate_nla: 1 callbacks suppressed [ 310.370988][T13879] netlink: 'syz.1.2099': attribute type 10 has an invalid length. [ 310.384982][T13879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2099'. [ 310.526311][T13878] hsr_slave_1 (unregistering): left promiscuous mode [ 310.908201][T13875] lo speed is unknown, defaulting to 1000 [ 310.921253][T13895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2103'. [ 311.016349][T13895] tipc: Failed to remove unknown binding: 66,1,1/0:2543378129/2543378131 [ 311.497594][T13928] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2111'. [ 311.514530][T13927] tipc: Enabled bearer , priority 0 [ 311.525744][T13930] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2112'. [ 311.545414][T13927] syzkaller0: entered promiscuous mode [ 311.551089][T13927] syzkaller0: entered allmulticast mode [ 311.563521][T13930] netlink: 'syz.4.2112': attribute type 10 has an invalid length. [ 311.582934][T13930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2112'. [ 311.627303][T13918] lo speed is unknown, defaulting to 1000 [ 311.642339][T13928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2111'. [ 311.688227][T13932] lo speed is unknown, defaulting to 1000 [ 311.696277][T13927] tipc: Resetting bearer [ 311.710541][T13925] tipc: Resetting bearer [ 311.729642][T13925] tipc: Disabling bearer [ 312.211648][T13954] tipc: Enabled bearer , priority 0 [ 312.224232][T13954] syzkaller0: entered promiscuous mode [ 312.246837][T13954] syzkaller0: entered allmulticast mode [ 312.357222][T13954] tipc: Resetting bearer [ 312.383966][T13952] tipc: Resetting bearer [ 312.422417][T13952] tipc: Disabling bearer [ 312.645723][T13975] netlink: 'syz.1.2124': attribute type 10 has an invalid length. [ 312.848264][T13972] lo speed is unknown, defaulting to 1000 [ 313.294011][T13998] netlink: 'syz.2.2131': attribute type 1 has an invalid length. [ 313.457132][T14004] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 313.505139][T14004] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 314.130676][T14036] bridge0: port 1(syz_tun) entered blocking state [ 314.158785][T14036] bridge0: port 1(syz_tun) entered disabled state [ 314.167231][ T30] audit: type=1800 audit(1756788968.555:12): pid=14005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2130" name="cgroup.controllers" dev="tmpfs" ino=2243 res=0 errno=0 [ 314.193176][T14036] syz_tun: entered allmulticast mode [ 314.200435][T14036] syz_tun: entered promiscuous mode [ 314.501437][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.533486][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.570056][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.609883][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.691023][T14050] lo speed is unknown, defaulting to 1000 [ 314.909713][T14068] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 315.244020][T14086] __nla_validate_parse: 9 callbacks suppressed [ 315.244042][T14086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2157'. [ 315.547930][T14144] netlink: 788 bytes leftover after parsing attributes in process `syz.3.2162'. [ 315.616011][T14145] lo speed is unknown, defaulting to 1000 [ 316.238580][T14159] lo speed is unknown, defaulting to 1000 [ 316.969221][T14190] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2169'. [ 317.010668][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2171'. [ 317.417710][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2176'. [ 317.432692][T14212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2177'. [ 317.451759][T14212] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 317.470653][T14210] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 317.564489][T14219] netlink: 'syz.0.2177': attribute type 3 has an invalid length. [ 317.582985][T14219] netlink: 'syz.0.2177': attribute type 1 has an invalid length. [ 317.593541][T14218] netlink: 'syz.2.2176': attribute type 3 has an invalid length. [ 317.601333][T14218] netlink: 'syz.2.2176': attribute type 1 has an invalid length. [ 317.619976][T14219] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2177'. [ 317.629992][T14218] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2176'. [ 317.944119][T14231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2183'. [ 318.102605][T14234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2184'. [ 318.190386][T14231] lo speed is unknown, defaulting to 1000 [ 318.197520][T14239] tipc: Enabled bearer , priority 0 [ 318.235821][T14239] syzkaller0: entered promiscuous mode [ 318.257989][T14239] syzkaller0: entered allmulticast mode [ 318.346697][T14233] tipc: Resetting bearer [ 318.417266][T14233] tipc: Disabling bearer [ 318.458557][T14245] tipc: Enabled bearer , priority 0 [ 318.470255][T14249] syzkaller0: entered promiscuous mode [ 318.498857][T14249] syzkaller0: entered allmulticast mode [ 318.870108][T14249] tipc: Resetting bearer [ 318.931475][T14249] tipc: Disabling bearer [ 319.239892][T14260] lo speed is unknown, defaulting to 1000 [ 319.378518][T14268] syzkaller1: entered promiscuous mode [ 319.397331][T14268] syzkaller1: entered allmulticast mode [ 319.777656][T14278] tipc: Enabled bearer , priority 0 [ 319.810497][T14283] syzkaller0: entered promiscuous mode [ 319.833798][T14283] syzkaller0: entered allmulticast mode [ 320.038560][T14277] tipc: Resetting bearer [ 320.158547][T14277] tipc: Disabling bearer [ 320.483589][T14282] lo speed is unknown, defaulting to 1000 [ 320.870215][T14316] __nla_validate_parse: 5 callbacks suppressed [ 320.870236][T14316] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2203'. [ 320.911823][T14318] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2204'. [ 320.955963][T14318] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2204'. [ 320.970728][T14310] netlink: 'syz.2.2201': attribute type 1 has an invalid length. [ 320.987928][T14310] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2201'. [ 320.994981][T14318] netlink: 'syz.0.2204': attribute type 5 has an invalid length. [ 321.022903][T14310] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2201'. [ 321.049566][T14318] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2204'. [ 321.479591][T14339] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2208'. [ 321.489288][T14340] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2208'. [ 321.606455][T14344] nftables ruleset with unbound chain [ 321.676632][T14349] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 321.811115][T14358] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 321.818613][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2213'. [ 322.160932][T14381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2219'. [ 322.217122][T14385] netlink: 'syz.3.2221': attribute type 2 has an invalid length. [ 322.293357][T14391] netlink: 'syz.0.2222': attribute type 13 has an invalid length. [ 322.301475][T14391] netlink: 'syz.0.2222': attribute type 17 has an invalid length. [ 322.312394][T14391] netlink: 'syz.0.2222': attribute type 27 has an invalid length. [ 322.383474][T14391] lo speed is unknown, defaulting to 1000 [ 322.555970][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.562579][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.940633][T14416] 8021q: adding VLAN 0 to HW filter on device bond14 [ 322.963174][T14416] bond13: (slave bond14): Enslaving as an active interface with an up link [ 323.001823][T14413] bond13 (unregistering): (slave bond14): Releasing backup interface [ 323.060543][T14413] bond13 (unregistering): Released all slaves [ 323.540837][T14437] lo speed is unknown, defaulting to 1000 [ 324.018985][T14458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.068202][T14465] openvswitch: netlink: Duplicate or invalid key (type 0). [ 324.081191][T14465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.265326][T14470] bond0: (slave bond_slave_1): Releasing backup interface [ 324.473287][T14479] lo speed is unknown, defaulting to 1000 [ 324.609178][T14489] sctp: [Deprecated]: syz.4.2247 (pid 14489) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.609178][T14489] Use struct sctp_sack_info instead [ 325.055439][T14508] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 325.084379][T14508] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 325.417691][T14528] lo speed is unknown, defaulting to 1000 [ 325.961713][T14544] __nla_validate_parse: 11 callbacks suppressed [ 325.961735][T14544] netlink: 648 bytes leftover after parsing attributes in process `syz.3.2261'. [ 326.005540][T14544] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 326.285422][T14565] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2268'. [ 326.299462][T14565] validate_nla: 1 callbacks suppressed [ 326.299483][T14565] netlink: 'syz.2.2268': attribute type 10 has an invalid length. [ 326.314864][T14565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2268'. [ 326.325400][T14554] tipc: Enabled bearer , priority 0 [ 326.389683][T14566] syzkaller0: entered promiscuous mode [ 326.427249][T14566] syzkaller0: entered allmulticast mode [ 326.457837][T14565] bond0: option arp_all_targets: invalid value (196616) [ 326.562047][T14566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2266'. [ 326.594660][T14582] netlink: 'syz.0.2271': attribute type 1 has an invalid length. [ 326.607558][T14575] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 326.637280][T14575] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 326.768846][T14553] tipc: Resetting bearer [ 326.801080][T14553] tipc: Disabling bearer [ 326.861721][T14575] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 326.911658][T14575] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 326.979431][T14600] lo speed is unknown, defaulting to 1000 [ 327.047324][T14575] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 327.087926][T14575] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 327.231914][T14575] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 327.262381][T14575] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 327.502462][ T3520] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.511014][ T3520] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 327.721817][ T6149] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.741690][ T6149] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 327.753574][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059592000: rx timeout, send abort [ 327.815249][ T6149] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.824151][ T6149] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 327.877100][ T6149] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.888088][ T6149] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 327.904835][T14574] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.940029][T14574] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 327.985874][T14623] wg1 speed is unknown, defaulting to 1000 [ 327.992230][T14623] wg1 speed is unknown, defaulting to 1000 [ 328.015051][T14574] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.030722][T14574] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 328.063186][T14623] wg1 speed is unknown, defaulting to 1000 [ 328.097332][T14574] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.113090][T14574] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 328.123044][T14623] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 328.163283][T14623] wg1 speed is unknown, defaulting to 1000 [ 328.171124][T14623] wg1 speed is unknown, defaulting to 1000 [ 328.179940][T14623] wg1 speed is unknown, defaulting to 1000 [ 328.195028][T14574] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.205633][T14574] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 328.231266][T14623] wg1 speed is unknown, defaulting to 1000 [ 328.243640][T14623] wg1 speed is unknown, defaulting to 1000 [ 328.261978][T14636] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 328.263300][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059592000: abort rx timeout. Force session deactivation [ 328.288773][T14632] IPVS: stopping backup sync thread 14636 ... [ 328.470813][T14647] tipc: Enabled bearer , priority 0 [ 328.487282][T14644] syzkaller0: entered promiscuous mode [ 328.512082][T14644] syzkaller0: entered allmulticast mode [ 328.541466][T14649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.690416][T14645] tipc: Resetting bearer [ 328.729366][T14645] tipc: Disabling bearer [ 328.748439][T14642] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2289'. [ 328.829435][T14642] lo speed is unknown, defaulting to 1000 [ 328.839301][T14642] wg1 speed is unknown, defaulting to 1000 [ 329.029481][T14662] lo speed is unknown, defaulting to 1000 [ 329.057304][T14662] wg1 speed is unknown, defaulting to 1000 [ 329.089523][T14673] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2296'. [ 329.109647][T14673] netlink: 'syz.2.2296': attribute type 10 has an invalid length. [ 329.119392][T14673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2296'. [ 329.149576][T14673] bond0: option arp_all_targets: invalid value (196616) [ 329.540724][T14677] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.577801][ T6160] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.590326][ T6160] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 329.713087][T14677] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.737578][T14691] lo speed is unknown, defaulting to 1000 [ 329.761504][T14677] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.798165][ T6160] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.817314][ T6160] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 329.831637][T14691] wg1 speed is unknown, defaulting to 1000 [ 329.848890][T14677] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.941417][ T6160] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.953491][ T6160] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 329.962311][T14702] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2304'. [ 330.040859][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.051758][ T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 330.083636][T14702] nbd1: detected capacity change from 0 to 127 [ 330.098083][ T5878] block nbd1: Receive control failed (result -32) [ 330.142419][T14136] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.504727][ T6160] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.561934][ T6160] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.588516][ T10] lo speed is unknown, defaulting to 1000 [ 330.595397][ T10] syz2: Port: 1 Link DOWN [ 330.753516][T14721] syzkaller0: entered promiscuous mode [ 330.759099][T14721] syzkaller0: entered allmulticast mode [ 330.996630][T14732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2309'. [ 331.046789][T14136] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.145613][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2312'. [ 331.205226][T14742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2312'. [ 331.207460][T14739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2312'. [ 331.282698][T14745] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2313'. [ 331.292534][T14748] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2313'. [ 331.372700][T14753] netlink: 'syz.2.2315': attribute type 12 has an invalid length. [ 331.402749][T14751] lo speed is unknown, defaulting to 1000 [ 331.403138][T14753] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2315'. [ 331.487125][T14751] wg1 speed is unknown, defaulting to 1000 [ 331.848583][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2320'. [ 331.918285][T14771] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 332.066173][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2322'. [ 332.115539][T14779] netlink: 'syz.0.2320': attribute type 3 has an invalid length. [ 332.126030][T14779] netlink: 'syz.0.2320': attribute type 1 has an invalid length. [ 332.140751][T14779] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2320'. [ 332.689722][T14810] tipc: Enabled bearer , priority 0 [ 332.706761][T14805] tipc: Resetting bearer [ 332.725954][T14805] tipc: Disabling bearer [ 333.007532][T14825] netlink: 'syz.2.2339': attribute type 2 has an invalid length. [ 333.047380][T14825] netlink: 'syz.2.2339': attribute type 1 has an invalid length. [ 333.351991][T14842] veth0: entered promiscuous mode [ 333.519913][T14837] veth0 (unregistering): left promiscuous mode [ 333.778038][T14857] tipc: Enabling of bearer rejected, failed to enable media [ 334.281780][T14884] netlink: 'syz.1.2353': attribute type 1 has an invalid length. [ 334.724694][T14908] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 334.761865][T14910] netlink: 'syz.0.2362': attribute type 10 has an invalid length. [ 334.788710][T14910] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 335.089679][T14934] 0ªX¹¦À: left allmulticast mode [ 335.132926][T14934] bridge5: left promiscuous mode [ 335.178327][T14136] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.205278][T14136] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.223000][T14136] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.245679][T14136] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.293494][T14939] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 335.311454][T14939] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 335.359691][T14939] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 335.369431][T14939] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 335.558124][T14949] lo speed is unknown, defaulting to 1000 [ 335.583037][T14949] wg1 speed is unknown, defaulting to 1000 [ 336.933753][T14980] tipc: Enabled bearer , priority 0 [ 337.046844][T14995] netlink: 'syz.1.2381': attribute type 10 has an invalid length. [ 337.055344][T14995] __nla_validate_parse: 13 callbacks suppressed [ 337.055365][T14995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2381'. [ 337.078973][T14980] syzkaller0: entered promiscuous mode [ 337.107168][T14980] syzkaller0: entered allmulticast mode [ 337.108619][T14996] netlink: 'syz.0.2379': attribute type 1 has an invalid length. [ 337.113494][T14980] tipc: Resetting bearer [ 337.127857][T14989] tipc: Enabling of bearer rejected, failed to enable media [ 337.148340][T14995] bond0: option arp_all_targets: invalid value (196616) [ 337.278904][T14990] tipc: Resetting bearer [ 337.454838][T15011] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2385'. [ 338.010572][ T10] tipc: Node number set to 2615473796 [ 339.542989][T14990] tipc: Disabling bearer [ 339.555624][T15011] 0·: renamed from hsr0 [ 339.559100][T15005] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 339.571470][T15011] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 339.582370][T15011] 0·: entered allmulticast mode [ 339.587625][T15011] hsr_slave_0: entered allmulticast mode [ 339.595242][T15011] 8021q: adding VLAN 0 to HW filter on device 70· [ 339.604213][T15011] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 339.620722][T15017] netlink: 'syz.2.2387': attribute type 14 has an invalid length. [ 339.847600][T15034] netlink: 'syz.1.2394': attribute type 10 has an invalid length. [ 339.855816][T15034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2394'. [ 339.866300][T15034] bond0: option arp_all_targets: invalid value (196616) [ 339.963225][T15038] netlink: 'syz.0.2395': attribute type 4 has an invalid length. [ 339.971391][T15038] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2395'. [ 340.128303][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2396'. [ 340.711300][T15087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2405'. [ 340.887577][T15097] netlink: 'syz.4.2407': attribute type 10 has an invalid length. [ 340.960238][T15097] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2407'. [ 341.011397][T15097] bond0: option arp_all_targets: invalid value (196616) [ 341.323886][T15118] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2414'. [ 341.493214][T15121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.507839][T15121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.548116][T15129] netlink: 'syz.3.2415': attribute type 10 has an invalid length. [ 341.611107][T15132] tipc: Enabling of bearer rejected, already enabled [ 341.829315][T15140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2419'. [ 341.880794][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2420'. [ 342.005860][T15145] lo speed is unknown, defaulting to 1000 [ 342.020611][T15145] wg1 speed is unknown, defaulting to 1000 [ 342.106184][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2425'. [ 342.539541][T15173] lo speed is unknown, defaulting to 1000 [ 342.579036][T15178] lo speed is unknown, defaulting to 1000 [ 342.637286][T15173] wg1 speed is unknown, defaulting to 1000 [ 342.646387][T15171] lo speed is unknown, defaulting to 1000 [ 342.656560][T15178] wg1 speed is unknown, defaulting to 1000 [ 342.705458][T15187] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2433'. [ 342.726020][T15171] wg1 speed is unknown, defaulting to 1000 [ 342.761556][T15190] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2433'. [ 343.591046][T15217] lo speed is unknown, defaulting to 1000 [ 343.692434][T15217] wg1 speed is unknown, defaulting to 1000 [ 344.157059][T15250] tipc: Enabled bearer , priority 0 [ 344.222442][T15250] syzkaller0: entered promiscuous mode [ 344.272975][T15250] syzkaller0: entered allmulticast mode [ 344.405971][T15250] tipc: Resetting bearer [ 344.422319][T15249] tipc: Resetting bearer [ 344.438156][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2442'. [ 344.449758][T15217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2442'. [ 344.500700][T15220] netlink: 'syz.1.2442': attribute type 13 has an invalid length. [ 344.510514][T15220] netlink: 'syz.1.2442': attribute type 17 has an invalid length. [ 344.574462][T15249] tipc: Disabling bearer [ 344.600662][T15220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.649945][T15259] lo speed is unknown, defaulting to 1000 [ 344.658411][T15259] wg1 speed is unknown, defaulting to 1000 [ 345.061872][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2454'. [ 345.155374][T15269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2455'. [ 345.170696][T15270] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 345.267620][T15269] tipc: Enabled bearer , priority 0 [ 345.308203][T15269] syzkaller0: entered promiscuous mode [ 345.316494][T15269] syzkaller0: entered allmulticast mode [ 345.347476][T15266] netlink: 'syz.1.2454': attribute type 3 has an invalid length. [ 345.353290][T15269] tipc: Resetting bearer [ 345.368391][T15268] tipc: Resetting bearer [ 345.383229][T15266] netlink: 'syz.1.2454': attribute type 1 has an invalid length. [ 345.401344][T15266] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2454'. [ 345.432471][T15268] tipc: Disabling bearer [ 345.590797][T15275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2457'. [ 345.620547][T15275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2457'. [ 346.039316][T15294] ieee802154 phy0 wpan0: encryption failed: -22 [ 346.221490][T15301] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 346.448526][T15308] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 346.577910][T15308] netlink: 'syz.0.2470': attribute type 3 has an invalid length. [ 346.625934][T15308] netlink: 'syz.0.2470': attribute type 1 has an invalid length. [ 346.727661][T15319] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.745535][T15319] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 346.843043][T15319] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.893036][T15319] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 347.012114][T15320] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 347.062252][T15320] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 347.126241][T15320] team0: Failed to send options change via netlink (err -105) [ 347.184906][T15320] team0: Port device batadv1 added [ 347.224286][T15319] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.260209][T15319] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 347.345325][T15322] lo speed is unknown, defaulting to 1000 [ 347.367336][T15319] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.388574][T15319] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 347.432106][T15322] wg1 speed is unknown, defaulting to 1000 [ 347.450574][T15336] openvswitch: netlink: IP tunnel dst address not specified [ 347.752623][T15347] netlink: 'syz.4.2479': attribute type 13 has an invalid length. [ 347.762029][ T3520] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.774585][T15347] netlink: 'syz.4.2479': attribute type 17 has an invalid length. [ 347.795375][ T3520] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 347.817222][ T3520] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.834030][ T3520] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 348.061544][T15347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 348.125513][T15343] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 348.161931][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.193424][ T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 348.293233][T15349] lo speed is unknown, defaulting to 1000 [ 348.300173][ T3520] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.325979][ T3520] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 348.351699][T15349] wg1 speed is unknown, defaulting to 1000 [ 348.362290][T15354] syz_tun: entered allmulticast mode [ 348.397963][T15353] dvmrp8: entered allmulticast mode [ 348.438049][T15356] tipc: Enabling of bearer rejected, failed to enable media [ 348.487631][T15353] syz_tun: left allmulticast mode [ 348.505024][T15353] dvmrp8: left allmulticast mode [ 348.752121][T15365] gretap0: entered promiscuous mode [ 348.760438][T15365] vlan1: entered promiscuous mode [ 349.341291][T15385] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 349.387827][T15385] netlink: 'syz.4.2490': attribute type 3 has an invalid length. [ 349.847771][T15402] __nla_validate_parse: 6 callbacks suppressed [ 349.847791][T15402] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2493'. [ 350.096844][T15419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2497'. [ 350.125202][T15419] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2497'. [ 350.134905][T15419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2497'. [ 350.145840][T15419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2497'. [ 350.157747][T15419] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2497'. [ 350.211266][T15420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2498'. [ 350.335778][T15425] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2499'. [ 350.375577][T15425] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2499'. [ 350.405592][T15425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2499'. [ 350.732284][T15389] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071997241136) [ 350.785823][T15389] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 351.216114][T15457] netlink: 'syz.1.2507': attribute type 21 has an invalid length. [ 351.910578][T15452] bond0: (slave gretap0): Error: Device type is different from other slaves [ 352.141918][T15466] vlan2: entered promiscuous mode [ 352.354445][T15481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.375209][T15481] netlink: 'syz.1.2514': attribute type 1 has an invalid length. [ 352.535413][T15485] netlink: 'syz.1.2514': attribute type 1 has an invalid length. [ 353.192829][ C0] [ 353.195224][ C0] ================================ [ 353.200353][ C0] WARNING: inconsistent lock state [ 353.205491][ C0] syzkaller #0 Not tainted [ 353.209910][ C0] -------------------------------- [ 353.215021][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 353.222041][ C0] syz.4.2520/15502 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 353.228533][ C0] ffff888059abaca8 (&p->tcfa_lock){+.?.}-{3:3}, at: est_timer+0xd4/0x9f0 [ 353.236995][ C0] {SOFTIRQ-ON-W} state was registered at: [ 353.242719][ C0] lock_acquire+0x120/0x360 [ 353.247339][ C0] _raw_spin_lock+0x2e/0x40 [ 353.251940][ C0] tcf_skbedit_init+0xaf4/0xff0 [ 353.256886][ C0] tcf_action_init_1+0x460/0x6d0 [ 353.261916][ C0] tcf_action_init+0x2cf/0xab0 [ 353.266772][ C0] tc_ctl_action+0x430/0xbd0 [ 353.271459][ C0] rtnetlink_rcv_msg+0x77c/0xb70 [ 353.276486][ C0] netlink_rcv_skb+0x205/0x470 [ 353.281346][ C0] netlink_unicast+0x82c/0x9e0 [ 353.286295][ C0] netlink_sendmsg+0x805/0xb30 [ 353.291169][ C0] __sock_sendmsg+0x21c/0x270 [ 353.295941][ C0] ____sys_sendmsg+0x505/0x830 [ 353.300798][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 353.305564][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 353.310591][ C0] do_syscall_64+0xfa/0x3b0 [ 353.315357][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.321433][ C0] irq event stamp: 306 [ 353.325582][ C0] hardirqs last enabled at (306): [] _raw_spin_unlock_irq+0x23/0x50 [ 353.335403][ C0] hardirqs last disabled at (305): [] _raw_spin_lock_irq+0x7d/0xf0 [ 353.344875][ C0] softirqs last enabled at (0): [] copy_process+0x97f/0x3c00 [ 353.353900][ C0] softirqs last disabled at (303): [] __irq_exit_rcu+0xca/0x1f0 [ 353.363208][ C0] [ 353.363208][ C0] other info that might help us debug this: [ 353.371265][ C0] Possible unsafe locking scenario: [ 353.371265][ C0] [ 353.378888][ C0] CPU0 [ 353.382166][ C0] ---- [ 353.385470][ C0] lock(&p->tcfa_lock); [ 353.389721][ C0] [ 353.393175][ C0] lock(&p->tcfa_lock); [ 353.397687][ C0] [ 353.397687][ C0] *** DEADLOCK *** [ 353.397687][ C0] [ 353.406003][ C0] 2 locks held by syz.4.2520/15502: [ 353.411294][ C0] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 353.421165][ C0] #1: ffffc90000007be0 ((&est->timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 353.430902][ C0] [ 353.430902][ C0] stack backtrace: [ 353.437337][ C0] CPU: 0 UID: 0 PID: 15502 Comm: syz.4.2520 Not tainted syzkaller #0 PREEMPT(full) [ 353.437361][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.437372][ C0] Call Trace: [ 353.437381][ C0] [ 353.437389][ C0] dump_stack_lvl+0x189/0x250 [ 353.437424][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.437443][ C0] ? __pfx__printk+0x10/0x10 [ 353.437467][ C0] ? print_lock_name+0xde/0x100 [ 353.437490][ C0] print_usage_bug+0x297/0x2e0 [ 353.437507][ C0] valid_state+0xc3/0xf0 [ 353.437522][ C0] mark_lock_irq+0x36/0x390 [ 353.437535][ C0] ? kasan_save_stack+0x4d/0x60 [ 353.437554][ C0] ? kasan_save_stack+0x3e/0x60 [ 353.437573][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 353.437588][ C0] ? insert_work+0x3d/0x330 [ 353.437611][ C0] ? call_timer_fn+0x17e/0x5f0 [ 353.437634][ C0] ? __run_timer_base+0x646/0x860 [ 353.437657][ C0] mark_lock+0x11b/0x190 [ 353.437672][ C0] __lock_acquire+0x680/0xd20 [ 353.437699][ C0] ? est_timer+0xd4/0x9f0 [ 353.437721][ C0] lock_acquire+0x120/0x360 [ 353.437743][ C0] ? est_timer+0xd4/0x9f0 [ 353.437767][ C0] ? register_lock_class+0x51/0x320 [ 353.437793][ C0] _raw_spin_lock+0x2e/0x40 [ 353.437816][ C0] ? est_timer+0xd4/0x9f0 [ 353.437837][ C0] est_timer+0xd4/0x9f0 [ 353.437863][ C0] ? call_timer_fn+0xbe/0x5f0 [ 353.437886][ C0] ? call_timer_fn+0xbe/0x5f0 [ 353.437909][ C0] ? __pfx_est_timer+0x10/0x10 [ 353.437935][ C0] call_timer_fn+0x17e/0x5f0 [ 353.437958][ C0] ? __pfx_est_timer+0x10/0x10 [ 353.437979][ C0] ? call_timer_fn+0xbe/0x5f0 [ 353.438002][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 353.438028][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.438052][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.438066][ C0] ? __pfx_est_timer+0x10/0x10 [ 353.438089][ C0] __run_timer_base+0x61a/0x860 [ 353.438110][ C0] ? ktime_get+0x3e/0x1f0 [ 353.438132][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 353.438153][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 353.438180][ C0] run_timer_softirq+0xb7/0x180 [ 353.438201][ C0] handle_softirqs+0x283/0x870 [ 353.438219][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 353.438237][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 353.438257][ C0] __irq_exit_rcu+0xca/0x1f0 [ 353.438272][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 353.438292][ C0] irq_exit_rcu+0x9/0x30 [ 353.438306][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 353.438332][ C0] [ 353.438337][ C0] [ 353.438344][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 353.438361][ C0] RIP: 0010:rcu_is_watching+0x67/0xb0 [ 353.438379][ C0] Code: 89 f7 e8 bc be 7c 00 48 c7 c3 98 cf a1 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 99 42 fa 10 <74> 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f c3 cc cc cc cc cc e8 81 69 [ 353.438394][ C0] RSP: 0018:ffffc9001a84f670 EFLAGS: 00000286 [ 353.438416][ C0] RAX: 000000000003cc34 RBX: ffff8880b8632f98 RCX: 80b9c85533d9bc00 [ 353.438428][ C0] RDX: ffffc9001a84f801 RSI: ffffffff8be337e0 RDI: ffffffff8be337a0 [ 353.438440][ C0] RBP: dffffc0000000000 R08: ffffc9001a84ff48 R09: 0000000000000000 [ 353.438451][ C0] R10: ffffc9001a84f818 R11: fffff52003509f05 R12: ffffc9001a84ff58 [ 353.438463][ C0] R13: ffffffff8172c195 R14: ffffffff8dbe1d10 R15: dffffc0000000000 [ 353.438477][ C0] ? unwind_next_frame+0xa5/0x2390 [ 353.438502][ C0] ? unwind_next_frame+0xa5/0x2390 [ 353.438519][ C0] lock_release+0x4b/0x3e0 [ 353.438541][ C0] ? deref_stack_reg+0x19f/0x230 [ 353.438561][ C0] ? unwind_next_frame+0xa5/0x2390 [ 353.438578][ C0] unwind_next_frame+0x19a9/0x2390 [ 353.438599][ C0] ? unwind_next_frame+0xa5/0x2390 [ 353.438616][ C0] ? do_syscall_64+0xfa/0x3b0 [ 353.438635][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 353.438655][ C0] arch_stack_walk+0x11c/0x150 [ 353.438678][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.438696][ C0] stack_trace_save+0x9c/0xe0 [ 353.438714][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 353.438734][ C0] ? arch_stack_walk+0xfc/0x150 [ 353.438754][ C0] kasan_save_track+0x3e/0x80 [ 353.438774][ C0] ? kasan_save_track+0x3e/0x80 [ 353.438792][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 353.438812][ C0] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 353.438833][ C0] ? ref_tracker_alloc+0x133/0x460 [ 353.438856][ C0] ? sk_alloc+0x1b1/0x370 [ 353.438871][ C0] ? __netlink_create+0x65/0x260 [ 353.438894][ C0] ? netlink_create+0x3ca/0x590 [ 353.438910][ C0] ? __sock_create+0x4b3/0x9f0 [ 353.438932][ C0] ? __sys_socket+0xd7/0x1b0 [ 353.438954][ C0] ? __x64_sys_socket+0x7a/0x90 [ 353.438976][ C0] ? do_syscall_64+0xfa/0x3b0 [ 353.439013][ C0] __kasan_kmalloc+0x93/0xb0 [ 353.439035][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 353.439057][ C0] ? ref_tracker_alloc+0x133/0x460 [ 353.439081][ C0] ref_tracker_alloc+0x133/0x460 [ 353.439105][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 353.439136][ C0] ? sock_lock_init+0x41c/0x870 [ 353.439153][ C0] ? sk_prot_alloc+0x161/0x220 [ 353.439171][ C0] sk_alloc+0x1b1/0x370 [ 353.439189][ C0] __netlink_create+0x65/0x260 [ 353.439215][ C0] netlink_create+0x3ca/0x590 [ 353.439232][ C0] ? __pfx_nfnetlink_unbind+0x10/0x10 [ 353.439255][ C0] ? __pfx_nfnetlink_bind+0x10/0x10 [ 353.439278][ C0] __sock_create+0x4b3/0x9f0 [ 353.439306][ C0] __sys_socket+0xd7/0x1b0 [ 353.439331][ C0] __x64_sys_socket+0x7a/0x90 [ 353.439355][ C0] do_syscall_64+0xfa/0x3b0 [ 353.439371][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.439386][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.439408][ C0] ? clear_bhb_loop+0x60/0xb0 [ 353.439426][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.439441][ C0] RIP: 0033:0x7ff60978ebe9 [ 353.439457][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.439470][ C0] RSP: 002b:00007ff60a6b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 353.439486][ C0] RAX: ffffffffffffffda RBX: 00007ff6099c6090 RCX: 00007ff60978ebe9 [ 353.439498][ C0] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 353.439508][ C0] RBP: 00007ff609811e19 R08: 0000000000000000 R09: 0000000000000000 [ 353.439518][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.439527][ C0] R13: 00007ff6099c6128 R14: 00007ff6099c6090 R15: 00007ffe06ed99d8 [ 353.439546][ C0] [ 354.088279][T15503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium