last executing test programs: 4m56.082093604s ago: executing program 0 (id=303): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r1, 0xc11, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x0, 0x44}, {0xe8, 0x7}, {0x3, 0x4}, {0x0, 0x5}, {0x6, 0x7}], "7ecd4163b8fccf09"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (fail_nth: 5) 4m55.445985179s ago: executing program 0 (id=309): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0x0, 0x8}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) unshare(0x20000400) r6 = socket(0x23, 0x805, 0x0) connect$vsock_stream(r6, 0x0, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r7, &(0x7f0000000200)={0xa, 0x0, 0x8, @local, 0x200000, 0x2}, 0x20) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, &(0x7f0000000080)) ppoll(&(0x7f00000003c0)=[{r7, 0x2210}, {r8, 0x82}, {r6, 0x4000}, {r1, 0x1024}, {r9, 0x10}], 0x5, &(0x7f0000000400), &(0x7f0000000440)={[0x4]}, 0x8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRES16=r4, @ANYBLOB="030300000000000000000600000000000000", @ANYBLOB="1c000000"], 0x1c}}, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r2, r5, 0x25, 0xc, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=[0xffffffffffffffff, 0x7, 0x7fffffff], &(0x7f0000000200)=[0x3, 0x3, 0x3, 0x4], 0x6, 0x3, 0x1, r10}}, 0x40) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ip6gre0\x00', 0x84aebfbd6349a5f2}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r14, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendto$inet6(r14, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r14, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x8, 0x645}, 0x3c) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 4m54.904557756s ago: executing program 0 (id=315): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079109e000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000680)=""/114, 0x72}], 0x4}, 0x3f}], 0x2, 0x60, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYRES32=r3, @ANYBLOB="d00000000a000100000000000000001008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x20024090) (async) socket$igmp6(0xa, 0x3, 0x2) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x3, r3, 0x3, r4}, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r5, 0x0, &(0x7f0000000ac0)) 4m54.779016027s ago: executing program 0 (id=317): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r1, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x1f}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x5c}}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xb8da}, {0x8, 0x0, 0xfffffff8}, {0x8, 0x0, 0x200}, {0x8, 0x0, 0x80000001}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3aa7}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000884}, 0x4) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}}, 0x20080000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x25, 0x1, 0x800, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000440)={r0, 0xd, 0xffffffff00000000, 0x8}) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x8c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'wpan3\x00'}]}, 0x8c}}, 0x40000) (async, rerun: 32) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0xf, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa69}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x1, 0xb, 0x15, 0x9, 0xfffffffffffffff8, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x5}, @jmp={0x5, 0x0, 0xb, 0x0, 0x8, 0x80, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000640)='syzkaller\x00', 0x2, 0x21, &(0x7f0000000680)=""/33, 0x40f00, 0x6, '\x00', 0x0, 0x18, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0xd, 0x4, 0x9}, 0x10, 0xe, r10, 0x3, &(0x7f0000000700)=[r10], &(0x7f0000000740)=[{0x2, 0x2, 0x8, 0x4}, {0x0, 0x3, 0xa, 0x2}, {0x2, 0x4, 0xa}], 0x10, 0x3}, 0x94) (rerun: 32) ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f0000000840)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x9, 0x4, 0x8, 0x6, 0x3, 0x200}, {0x2, 0x3, 0xc8, 0x0, 0x7, 0x1}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), r3) (async) sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r1, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "85ccb0261b"}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x40090) (async, rerun: 32) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r6) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000c40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x4c, r12, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x40004) (async) r14 = openat$cgroup_ro(r10, &(0x7f0000000d80)='memory.events.local\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r14, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r15}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x811) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f40), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f0000000f80)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r6, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, r16, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x48011) (async, rerun: 64) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001240)={&(0x7f00000010c0)={0x164, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xcd}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}]}, @NL802154_ATTR_SEC_LEVEL={0x4c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x850}, 0x48001) (rerun: 64) r18 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r18, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0xf, 0x6, 0x0, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24008854) 4m53.92231069s ago: executing program 0 (id=325): r0 = socket(0x2d, 0x2, 0x0) accept$nfc_llcp(r0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) pipe(&(0x7f0000002740)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000030400000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="00faffff06500500536e04117c568083627269646765000400000080050017000000000006002700030000000a0014000180c20000000000eef846718727c69933d41d0a46b4b972cd245e1a39197d8244"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m53.356981714s ago: executing program 0 (id=333): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m52.995527832s ago: executing program 32 (id=333): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.269969126s ago: executing program 2 (id=3453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x8) recvmmsg(r0, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/156, 0x9c}], 0x1, &(0x7f0000000480)=""/171, 0xab}, 0xc}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000580)=""/8, 0x8}], 0x2, &(0x7f0000000600)=""/7, 0x7}, 0x10}, {{&(0x7f0000000640)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000001780)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/163, 0xa3}], 0x2, &(0x7f0000001e40)=""/4096, 0x1000}}, {{&(0x7f00000017c0)=@can, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001840)=""/120, 0x78}, {&(0x7f00000018c0)=""/210, 0xd2}, {&(0x7f00000019c0)=""/192, 0xc0}, {&(0x7f0000001a80)=""/179, 0xb3}], 0x4, &(0x7f0000001b80)}, 0xf93}, {{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000001c40)=""/120, 0x78}, {&(0x7f0000001cc0)=""/160, 0xa0}, {&(0x7f0000001d80)=""/97, 0x61}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x4, &(0x7f0000003e80)=""/75, 0x4b}, 0x3}, {{&(0x7f0000003f00)=@nfc, 0x80, &(0x7f0000003f80)=[{&(0x7f00000045c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003fc0)=""/213, 0xd5}, 0x7}, {{&(0x7f00000040c0)=@qipcrtr, 0x80, &(0x7f0000004280)=[{&(0x7f0000004140)=""/215, 0xd7}, {&(0x7f0000004240)=""/47, 0x2f}], 0x2, &(0x7f00000042c0)=""/97, 0x61}, 0xffffb8a2}], 0x7, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_extract_tcp_res(&(0x7f0000001b80), 0x7, 0x15c) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x24, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000540)=0x2, 0x4) sendmmsg$inet6(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x240400f0}, 0x804) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="a69c2ec659a3"], 0xfdef) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000004500)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x88}}, 0x10) 1.764104981s ago: executing program 3 (id=3458): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x2, 0x81}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='nv\x00', 0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="852885cae49122fe1c0effd36feaeea11e8c7d9243e045fbdddd6c7768569fcb6247ca61ece715cf58a4443e6c09733f793ccbecd39cda3d23d5d64e22a41ad9", 0x40}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x48800) shutdown(r0, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000007110b800000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.758165261s ago: executing program 3 (id=3460): socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, 0x0) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private=0xa010100, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {}, 0x0, 0x6e6bb6}, {{@in=@dev, 0x4d5, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) listen(r5, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000003c0)={"eabb11ff2b9976618466e6256698a350", 0x0, 0x0, {0x5}}) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32=0x0, @ANYBLOB="200001"], 0x38}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000eeff00000000c93ed00000000000504a803835212d"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r7, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r7, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r5}, 0x20) recvmmsg(r5, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12060, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c000008", @ANYRES16=r8, @ANYBLOB="000425bd7000fddbdf2503000000180004801400078008000200360000000800020009000000600004804400078008000300020000000800020002000000080003000800000008000400943f0000080001001c0000000800030000008003080003000300000008000100070000000c000780080001001e0000000900010073797a3000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x23, &(0x7f0000000340)=0x7ffe, 0x4) close(r9) (async) close(r9) r10 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcb, 0x0, 0x76e6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0xa}, {0xffff, 0xc}, {0xb, 0x10000}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x18, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xf2395cde6b98c537}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x44}}, 0x44080) 1.735049574s ago: executing program 3 (id=3464): syz_extract_tcp_res(&(0x7f0000000140)={0x41424344}, 0x7af, 0xf) syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x1f5, &(0x7f0000000fc0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0xb, 0x6, "151e18", 0x1bf, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[@routing={0x2b, 0xa, 0x1, 0xd1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast1, @loopback]}, @dstopts={0x11, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @routing={0x0, 0x2, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}], {{0x4e23, 0x4e22, r0, r1, 0x0, 0x0, 0x16, 0x10, 0x3, 0x0, 0xfffa, {[@exp_smc={0xfe, 0x6}, @sack={0x5, 0x1e, [0xfffff801, 0xedde, 0x1, 0x9, 0x101, 0x4, 0x5]}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "a33165c46da14a7d68e83e4d49be3dc9"}, @eol, @window={0x3, 0x3, 0x6}, @mss={0x2, 0x4, 0x8001}]}}, {"cc0c735730c243bd527a3d5c6521cf5f2a44e8fb71c2a8d735f179b49d29360f2861e105f7b5e72d9d4f71cd46f53dc6fdd7addb29aefc7317ec1461ffb7474c99723cc41b8f61f7355f8ab879b262853260b2d7b4b556357973a7375ed282bd5c26828dfd2179a083633243bd9ac24fedb2d3cc849a3522a7dfa480c8d32626c32c062a1a452d05e5502b529bfe841640ba5bd59619f8a071208701adc1274495f9098b1d7b1448e9d8734fc2e089d3449cff2bd54f9a36a2b627e333dc352213665d47e6a0ad557c39e649e1310a9d55c85d3ee575c520fcbc2c3b06b702"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xe8}, 0x94) 1.642201452s ago: executing program 4 (id=3466): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x30, r3, 0x1, 0x70bd2f, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe1}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x30, r3, 0x1, 0x70bd2f, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xe1}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) 1.641022872s ago: executing program 3 (id=3468): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001114d74300000000000000078b2842db"], 0x18}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000000)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x27, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @opaque="2451bba4192a726236cb1af53ee5900bde08a6a3b7cbb51b2e074e1be5783e9593cac81a1795775c4069a51d9205245940d0e86a9e16a48074992ee6b67e37634927fa35da"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) socket$kcm(0x2, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000, r4}, 0x18) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'veth1_to_batadv\x00', {}, 0x2}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000030400000000000000000000000035b39d85c2f479c6b8770788346d7d23e1ae1315a433e31c06a5590474d10d98cdacf9c227fb60b7a2a41bde1b1bb4423bd3c0e4b367b58cd029350e31c6ac16c8476ff4fb93b080f92fa758bb41535a51d34791d1bb56bab46f9f7d9bdd2bbfa40f702d2e838b09f304bf3902dbb3ec733ac19b602458aa03342dd0f38a5230482a359fe830ffa9", @ANYRES16=r4, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280080003008002000008000400000000000800050000000002"], 0x4c}}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x0, @multicast2}}) 1.544342288s ago: executing program 5 (id=3470): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0x2, @in=@loopback, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x4000}, 0xfffffffb}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0) (async) bind$tipc(r3, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0xfff3, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x389e00}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x48004) 1.343240158s ago: executing program 4 (id=3472): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r2, 0x4}, &(0x7f0000000040)=0x8) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00009607cdc5d3cb7fed6847a4421cb2002d00010026bd7000fcdbdf25040000000800f70018000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4c040) 1.282391009s ago: executing program 4 (id=3473): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c0000001000ffff2abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00270200542a0c003c0012800b0001006970766c616e00002c0002800600020003000000060001000100000006000200020000000600010002000000060002000100000008000500", @ANYRESHEX=r0, @ANYBLOB="08c77045a206186e323a885e021d000a", @ANYRES32=r1, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0xc1}, 0x4040050) 980.827801ms ago: executing program 5 (id=3474): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000100)=@ethtool_cmd={0x49, 0x6, 0x3, 0xe, 0x31, 0xff, 0x80, 0xd7, 0x6, 0x10, 0x3, 0x7ff, 0x5, 0x8, 0xf, 0x0, [0x4006, 0x6]}}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) (async) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000740)="8bf9c333442d145a6a694ddaf5187a9516cf6edf46a03edb22e9", 0x1a}], 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x24, r9, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000015}, 0x20040000) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r13, @ANYBLOB="1c005a801800016e9900"], 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4018000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000200)={0x1c4, r9, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x2d, 0x22}}}}, [@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40000}, 0x48085) (async) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) (async) recvmmsg(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000005c0)=""/248, 0xf8}, {&(0x7f0000000140)=""/114, 0x72}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000500)=""/159, 0x9f}, {0x0}], 0x4}}], 0x2, 0x0, 0x0) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r15 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r15, &(0x7f0000000080)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x1, @private0}, 0x1c, 0x0}}], 0x1, 0x40000) 836.703449ms ago: executing program 5 (id=3475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081208", 0x4d}], 0x1}, 0x0) r3 = socket$kcm(0x2, 0x7, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 827.475789ms ago: executing program 4 (id=3476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000408000140000000140800024000000012040005800c00088008000100506f19360900010073797a30"], 0x110}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r2) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x24000) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x4, 0x3}, 0x6) 766.206943ms ago: executing program 1 (id=3477): r0 = socket(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x3, 0x7, 0x8, 0x8}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) socket(0x8, 0x80000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x40, [0x4, 0x807, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket(0x10, 0x3, 0x6) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x3, 0x7, 0x8, 0x8}, 0x10) (async) socket(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) socket(0x8, 0x80000, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x40, [0x4, 0x807, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) 754.049947ms ago: executing program 2 (id=3478): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000700)={{0x0, 0x8, 0x4, 0x10000, 0x9, 0x9, 0x5, 0x954, 0xcdf, 0x7, 0xffff8001, 0x3, 0xca5, 0x80000001, 0x5}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x4b}]}, &(0x7f0000000080)='syzkaller\x00', 0x69, 0x85, &(0x7f00000000c0)=""/133, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xc, 0x4, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x40, 0x7b, &(0x7f0000000240)="484e5c8b287b4c2ec9ca9d4f284b602067aeffea86d1f8101689fe7c3f8691aeac2e680caaa2e64256eec2103a16911a75d00ea286c113246333d92313e09a18", &(0x7f0000000480)=""/123, 0x4, 0x0, 0xbd, 0x8f, &(0x7f0000000500)="e770125ed733c475a32c6b63604e391431c996ebd17361de611c7ef3174d91ad84406e7060f9017d39da398072d4dabe05c4ca110ef482b8928b3d2b7d1475c95ddd562e7f4038da114ae94208958c43d134ca0300416b2eb009f9464b38a54889808697c6c6feff8295818914d9630ca9acd8288e938b0984d360b8e83fd1f08ed468eb84a70dc6bfada64d56f04d2db2af4e2f7f2d294b9a235e2d232eec7c5ca0aee9cacc58d7c63adf93fc6960ad3eadfbd110dd1841e1ffae3b9b", &(0x7f00000005c0)="01817ade2e689007bd97c360ad0ac082e5952f60846cee6b0676ceb9f4c13d4840502e88f1e9c977db1890daec2686bf60aff756f6ff3d42bb7689d6b45f45aec6080437b80bd0bc1bc0662d4b94034522caf2e61241cc88f4ecb182bc69858495d4c328b0d003eab4440e53fca11e5199c282e14c786a91f63a1eda19d935d44f8f98dd113ed2e7ca70ee539585dc", 0x4, 0x0, 0x5}, 0x50) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0x4000000, 0x0, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffe}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 684.25974ms ago: executing program 1 (id=3479): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newchain={0x24, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0x5, 0xffff}, {0x9, 0xffe8}}}, 0x24}}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x10, 0x70bd26, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8040) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x12, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private}]}]}, 0xa0}}, 0x0) 606.079083ms ago: executing program 3 (id=3480): r0 = socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="001353a959000000009500070000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000000c0)={'pim6reg0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0x6, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x54, &(0x7f0000000640)=r7, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x54, &(0x7f0000000640)=r7, 0x4) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000680)="7afc70f82141dbb13c5173da307bc457", 0x10) (async) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000680)="7afc70f82141dbb13c5173da307bc457", 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d030100000000009500000000000000bc26080000000000bf67000000000000070300000fff07006702000003000000160600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r9, 0x400448e7, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001090000000000000000021800200000ff000000000008000100ac141400"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001090000000000000000021800200000ff000000000008000100ac141400"], 0x2c}}, 0x0) 605.131585ms ago: executing program 4 (id=3481): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14, 0x5a, 0x113}, 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) accept(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 585.170254ms ago: executing program 2 (id=3482): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, 0x0, &(0x7f00000007c0)) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0abc3c", 0x35}], 0x1}, 0x24004010) socket$kcm(0x11, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, 0x0, &(0x7f00000007c0)) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000040)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37786fd808252372a31e4939884f0abc3c", 0x35}], 0x1}, 0x24004010) (async) 503.553928ms ago: executing program 1 (id=3483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) (async, rerun: 32) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (rerun: 32) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r4, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) (async, rerun: 64) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (rerun: 64) bind$nfc_llcp(r5, &(0x7f00000000c0)={0x27, r4, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) (async) close(r3) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 32) r6 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r7 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r9, 0x1, 0x25, &(0x7f00000000c0)=0x10001, 0x4) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000000)=""/2, &(0x7f0000000140)=0x2) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=@newtfilter={0x878, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x1}, {}, {0x0, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xbc6, 0xf, 0x100, 0x800, 0x5, 0xfffffff7, 0xa, 0x8, 0x101, 0x1, 0x49, 0x8, 0x80, 0x4, 0x2, 0x5, 0x2ff, 0x7af, 0x8, 0x6, 0x3, 0x3ff, 0x9b, 0x811, 0x2, 0x100, 0x1, 0x1, 0x6, 0x1, 0x2, 0x1, 0x2, 0x29b3, 0x8, 0x5, 0x1, 0x80000001, 0x8, 0x5, 0x7, 0x2, 0x9, 0x1ff, 0x80000000, 0x77, 0x7fff, 0x7, 0x101, 0x7f, 0xc3, 0xf, 0x2596, 0x1, 0x4, 0x2, 0xc7eb, 0x3, 0x7, 0x4000000, 0x5, 0x8001, 0xc, 0xf605, 0x8, 0x1, 0x9, 0x2, 0x2a9, 0xc, 0x0, 0x1, 0x5, 0x200, 0x9cbb, 0x9, 0x1, 0x7, 0x80000001, 0x9, 0x7fffffff, 0x645, 0x2, 0x800, 0x2, 0x9, 0x9, 0x298, 0x186000, 0x3230, 0x4, 0x8e, 0x41b, 0x2, 0x1, 0x1ff, 0x5, 0x4, 0xe096, 0x2, 0x8, 0x3, 0x10001, 0x7, 0x0, 0xd53, 0xfffffffd, 0x1, 0x180, 0xa, 0x4, 0x9, 0x0, 0x7, 0x10, 0xa84, 0x3, 0x5, 0x6, 0xd72d, 0x0, 0xc9, 0x101, 0x9, 0xf, 0xb1e, 0x481, 0x4, 0x6, 0x9, 0xff, 0x8, 0xe0, 0x3, 0x6ee4, 0x81, 0x5, 0xfffffffa, 0x3, 0x5, 0x4, 0x8, 0x74d, 0x85, 0x80000000, 0x7fffffff, 0x1, 0xfffffff7, 0x1, 0x1, 0x20, 0x6, 0x5, 0x7, 0x8, 0x72, 0x4, 0x7, 0x4, 0x1ff, 0xc, 0x7, 0x613b, 0x3, 0x7ff, 0xefba, 0xf7, 0xfffffffc, 0x9, 0xfffffff8, 0x9, 0x100, 0x9, 0x1, 0x2, 0x80000000, 0x401, 0x1, 0x5, 0x81, 0x68, 0x1, 0x85, 0x40000080, 0x0, 0x5, 0x1ff, 0x5, 0x1, 0x7f, 0x7, 0x6, 0xfffffffb, 0xfff, 0x4, 0x2, 0x0, 0x2, 0x9, 0xfff, 0x6, 0x1, 0x5, 0x5, 0x71c, 0x6, 0x699c, 0x41bf, 0x21, 0x5, 0x7f, 0x8a5a, 0x5, 0x9, 0x1fddc4a1, 0xde5c, 0x8, 0x4, 0x6, 0x9366, 0x7, 0x800, 0x401, 0x7, 0xce, 0x8, 0x3, 0x2, 0x2, 0x5, 0xe, 0xfe, 0x9, 0xd36, 0x0, 0x0, 0x2c5, 0xe, 0x5, 0x8, 0x6, 0x8000, 0x0, 0x3, 0x7fffffff, 0x4, 0x6, 0x1, 0x0, 0x5, 0x9, 0x3f, 0x2, 0x81, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x8, 0x6, 0x6, 0x3, 0x6, 0xe, 0xff, 0xffffffff, 0x2, 0x8, 0x6, 0x13c, 0x800, 0x7, 0x4, 0x7, 0x5, 0xd, 0x1, 0x7, 0x6, 0x2cb9, 0x6, 0x8, 0x7fffffff, 0x3, 0x6, 0x10001, 0xda, 0x689, 0x7fffffff, 0x2, 0x10, 0x1ff, 0x2, 0x101, 0x14, 0x4, 0x4, 0x8000, 0x3c, 0x3, 0xa, 0x8, 0x2, 0x8001, 0x401, 0x3, 0xffffffff, 0x307, 0xda, 0x1ff, 0xa, 0x9, 0x7fff, 0x3, 0xc, 0x4, 0x2, 0x8, 0xfffffff7, 0x10000, 0x3, 0x5, 0x612, 0x0, 0x8, 0x2, 0x6, 0x8, 0x80000000, 0x3, 0x1000, 0x5, 0x2, 0x8, 0x3, 0xf, 0x0, 0xfffffffd, 0x4, 0x2, 0x9, 0xa, 0x8, 0x1257, 0x348, 0x9, 0x3, 0xffff85fd, 0x1, 0x9, 0x6, 0x3, 0x2, 0xff, 0xfffffffc, 0x6, 0x2, 0x5326, 0xb, 0x5, 0x7, 0x6, 0x81, 0xd9f6, 0xa, 0x8000, 0x0, 0x401, 0x2, 0x3, 0x0, 0x7, 0x7f, 0x73a6bd75, 0xfffff5cc, 0x35, 0x4, 0x4, 0xffff8000, 0xc, 0xa, 0x7fffffff, 0x10, 0x4, 0x7, 0x8, 0x80000001, 0x3, 0x0, 0x3, 0x6a4, 0xaa8, 0x9, 0x3c, 0x2, 0x6, 0x2c1, 0xa, 0x2, 0xfffffff7, 0x5, 0xf818, 0x4, 0x7, 0x1, 0x7fffffff, 0x4, 0xd98, 0x6, 0x6, 0xffff, 0x1, 0xaa3a, 0x5, 0x8, 0x9, 0x3, 0x9, 0x6, 0x200, 0x4, 0x5, 0x800, 0x8, 0xa16, 0x101, 0x6, 0x4, 0x10001, 0x8001, 0x401, 0x6, 0x5, 0x5, 0xfffffffe, 0x8, 0xffffffff, 0x9, 0x2, 0x8, 0x5, 0x80000001, 0xff, 0xc9, 0x5, 0x7ff, 0x4, 0x0, 0x7, 0x800, 0x3aee, 0xffffffff, 0x8, 0x0, 0x4, 0x0, 0x4, 0x7, 0x80000000, 0x0, 0x5, 0x7ab2a9cb, 0xfffffffe, 0xfff, 0x5, 0xffffffff, 0x0, 0x7f, 0x2, 0xfffffff9, 0x3, 0x10001, 0x4ed, 0x8, 0x6, 0x9, 0x4, 0xfffffff8, 0xe58, 0x80000001, 0x60000000, 0xffff, 0x4c16, 0xa9a, 0x401, 0xf, 0x7fff, 0x9, 0xf9, 0x3, 0x5, 0x7fff, 0xc, 0x8, 0xd674, 0xfff, 0x6, 0x7637, 0x6, 0x40, 0x92b88b6, 0xdc8d, 0x10001, 0x2, 0x5f4, 0x40, 0x373, 0x6, 0x7, 0xfffffffe, 0x1, 0x80, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x6, 0xb, 0x10001, {0x8, 0x2, 0x7, 0xffff, 0x6, 0xa}, {0x5, 0x0, 0xae, 0xd, 0x40, 0xfffeffff}, 0x1, 0xf, 0x1}}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) 402.317406ms ago: executing program 2 (id=3484): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25020100800c0002000600010000000000140001"], 0x114}], 0x1}, 0x0) unshare(0x20000400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000002}) 379.895639ms ago: executing program 5 (id=3485): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x4, 0xb}, 0x4) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="015cff"], 0x7) recvfrom$inet6(r1, &(0x7f0000000080)=""/242, 0xf2, 0x100, &(0x7f0000000180)={0xa, 0x4e24, 0x200000, @loopback}, 0x1c) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200230b000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="000000000000000008001280040001"], 0x28}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0100001a0013040000000000000000e000000100000000000000000000000020010000000000000000000000000000000000004e2400040200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000ffffac1414bb0000000032000000670000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000800000000020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f6000000000000000000000000000000013500000a00010100000000000000004c001200726663290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/244], 0x13c}, 0x1, 0x0, 0x0, 0x20}, 0x0) 282.518848ms ago: executing program 4 (id=3486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) listen(r1, 0x0) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, 0x0, &(0x7f00000002c0)=@tcp6=r3}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRESOCT=r0], 0x90}}, 0x0) 234.050271ms ago: executing program 2 (id=3487): r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect(r0, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r11, 0xf01, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4f}}}}}, 0x28}}, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x6, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0xb3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f00000004c0)={'pim6reg\x00', 0x7, 0x9}) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 232.850476ms ago: executing program 3 (id=3488): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000000)=@framed={{}, [@tail_call={{}, {}, {}, {0x4}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000001c0)=0x51) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000001080), 0x80800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r0, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd8, &(0x7f0000001180)=[{}], 0x8, 0x10, &(0x7f00000011c0), &(0x7f0000001200), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000001240)}}, 0x10) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000013c0)={r4, @loopback, @broadcast}, 0xc) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd020000400a9eb2020b8e17db1e6e6d2195f77c9a7fb556d8a445d9716fdc85b71be1719c926bab75ed78f8e8d39eba3994dd63ecf313c0fc4fcc05565e5b4af9", 0x42}], 0x1, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_BLACKHOLE={0x4}]}, 0x34}}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000d00)={0x0, 0x0, 0x3, 0x9, 0x3, 0x6, 0x6, 0xdac3, {0x0, @in6={{0xa, 0x4e23, 0x2, @remote, 0x8}}, 0x4120, 0x5, 0x6d8000, 0x7ba, 0xfffffff3}}, &(0x7f0000000dc0)=0xb0) sendmmsg$inet_sctp(r6, &(0x7f0000001000)=[{&(0x7f0000000480)=@in={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000940)="825d7d94f3983ffefab35b74f9818c90e2a8a21b5d9b29131e157cd485d4ae566e5d5cf6c40f1841ea82e49bd366a45cbd90124e3116d3b26d67bbc4846246dd6b0f04dba16fb554424d7f6ce533eec130c3c9bfe5cc8c49899a141a2b800202d79c6a6dcb7e1ac8cfe7f937cbb007a42e9d2ecbc47860a25010d2aa6acb17a553763067dc645a231e41d2ebe4e34db32e17470d3f0b60c1544eded036abcc746ccf9db2684efe5101b9fca6b9d09decdda20ef29ede043591151fe981a128616a048bf4d3e7d2736ee4755d6eb935138c9212fbb082fcc762f0478fc225a4f2f4", 0xe1}, {&(0x7f0000000a40)="28ede6424b9721633fb96719d8dfd3bc0afe680f6ad94449cf8dd7d108752d905b536090b8a36bec4082e094c278f6a75bffc1814608675d09805e7b0130f29d31a60178ade325e146db7ccadc432c3f498f55dc27448fb2db", 0x59}, {&(0x7f0000000ac0)="72254ff052cb6d8ddce7bc9b62ffb065e373b2cade99d7f994e2d8144fc0fe1ea10fac0893dc79fc85f604a258ec0d256050a81d8e275fd4070f2dea2b0c6737502fc0d835f94ddedcc39124f8b34aea8651e5df2593bda47393b39eceb06a4d5d2934393f63e3b29e6f", 0x6a}, {&(0x7f0000000b40)="a94d0f41adb02f959e0898253ff07fe332b295a21948ad1432841ebaa46585686a6bccfea7832400a511cd94317b3970fae0a8d3981a7df0ca18404e8430fb2da5eb49ced4d8c45f26adcc9f0394ede02e882bf5df", 0x55}, {&(0x7f0000000bc0)="9131c9dd25a6867a4a42dd831db119afe4fcb2c636bfb2a962b457366aa47198e624f4f8231fe87746f66a5e6e0564cba9b027c041cd6c32e5e4e940a7709bf4ef117b92cd622274ac6f6c74dfe05309019255df92b412c600e032c26008a6621e97d1acef56d195db50e1c6442b09a3bcf0", 0x72}, {&(0x7f0000000640)="ca", 0x1}, {&(0x7f0000000c40)="437c82bc476d", 0x6}, {&(0x7f0000001700)="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", 0x1000}], 0x8, &(0x7f0000000e00)=[@init={0x18, 0x84, 0x0, {0x9, 0x6e, 0x100, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0xef, 0x0, 0x8204, 0x1, 0xe40f, 0x2, 0x8, 0x7ff, r7}}, @dstaddrv6={0x20, 0x84, 0x8, @private2}], 0x68, 0x46045}, {&(0x7f0000000e80)=@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000ec0)="c622fc68aa208c0466a389c9fc0413cef163bb06056b9c34daedc5726efe2b467273158416ce771fd156ee958c49dfe1845d98de60608cf10818bce8e0a0589f2969e8ba760bc4ab22153993a2f20f54e80d6fcae06fc34fb42c74a3d1ef13d35684f0c4", 0x64}, {&(0x7f0000000f40)="859e36cd64e2295c1385530d27c7567060", 0x11}], 0x2, &(0x7f0000000fc0)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x2}}], 0x30, 0x2000009c}], 0x2, 0x4000000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000680)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fedbdf251500000008002c000400000014002b800500030002000000080001000200000008002a000100000008000300", @ANYRES32=r9], 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={&(0x7f0000000080)="d17e9245376fb8fc20696b24e9d80778b917953e3ee2f4257779d19526701315c891c48224b304a2f790c969cbba150078e8e1af1a98c9462173ab655748e3e73cdd3191d16a700477c2ced1f9f8fc23a702b71da7eb40ca1c1643d029e81cf582801da7936ccbc48f318323d3c1df4a24f1ece2b3edd62bdc1b4a0435b94c7c225443233af4203196f1c9065e6bae223b57c124b5ed3213967ab7ccb2ef4a078ae49d8c18c3bd", &(0x7f0000000280)=""/176, &(0x7f00000003c0)="e97356ebcda985d30de085460542c898265b68f348378847797b871470eba5c3be704a715a561910b4d3b1238ee1347d6befeed5ec3230127635e621144c26a9184bb623c0f3fc3e3875e1afbfd28bc6bedb11aa2a5079e0f67cb8c665f9ad808ec200f47c47690d5540ad118cb977049fc836cb4b5328601d85a5678fc43cac391b8cfc7efca6e0f0a84845662b57ca43ab4f63fc2f2f7ac80e084d26e6", &(0x7f0000000580)="cdb4afa1680f555bdac39420f07cda74472889e8e3adf16b85f3c912227f99813b19841bcfce669fe11617eef18f2447ae8e2b5118f055952370fdc9dc1087738f8dd63482ae58567aff01e15eabf51718a32453b96b243f0d12ed30", 0x0, 0xffffffffffffffff, 0x4}, 0x38) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x18c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x45, 0xe, {{{}, {}, @broadcast, @device_a, @random="8e742f592bf6"}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x7f, 0x1, 0x7}}, @void, @val={0x5, 0x3, {0xeb, 0x3a, 0xb0}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x9, 0x11, 0x979}}}}, @NL80211_ATTR_BEACON_TAIL={0x10e, 0xf, [@perr={0x84, 0x108, {0x1, 0x10, [{{}, @broadcast, 0x7c, @void, 0x7e}, {{}, @device_a, 0x90, @void, 0x25}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x22}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x30}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x28}, {{}, @device_a, 0x6, @void, 0x3e}, {{}, @broadcast, 0x38000000, @void, 0x1d}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x3c}, {{}, @device_a, 0x0, @void, 0x26}, {{0x0, 0x1}, @device_b, 0x8ec, @value, 0xb}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x40}, {{0x0, 0x1}, @device_a, 0x400, @value=@device_b, 0x1e}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x33}, {{}, @broadcast, 0xdfb421f, @void, 0x3c}, {{0x0, 0x1}, @device_a, 0x8000, @value=@device_b, 0xa}, {{}, @device_a, 0x7a, @void, 0x32}]}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x18c}}, 0xc010) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c5"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 206.224294ms ago: executing program 5 (id=3489): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r5, 0x325, 0x70bd29, 0x25dfd3f8}, 0x14}, 0x1, 0x0, 0x0, 0x4000892}, 0x4040) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {}, {0xffff}, {0xfff1, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) r6 = socket(0x10, 0x3, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x4c, r5, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x4c}}, 0x4004800) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) 177.450912ms ago: executing program 1 (id=3490): socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', r0, 0x4, 0x0, 0x2, 0x4, 0x49, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0xc, 0x4}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c0000001800dd8d00000000fdffffff020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4048090) 58.333142ms ago: executing program 5 (id=3491): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0xb, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000000)) sendto$inet6(r1, &(0x7f0000000040)="7cf37c0c2ad93c41e979b182c392508155904ae059cebb263f1fd82fe212a8cb14eb285c080b1ff7dc4483ef92bb8ac7875b8b993e05cea0859a1b00726aa4b91c6195e926b836c37eeb222cfa6674d356d35a5417c902357d70a035c92838e489fa720e7e86840e166b79febe84a2d95817d71fb38f2903bd94d9e44b11362c5319dc0d5e9eda131c4b15d59dac760a57026d4395deea37511398a5e47761fcb740c98f5277364bb6efdca88236615714ae5040e173", 0xb6, 0x4, &(0x7f0000000100)={0xa, 0x4e21, 0x6, @remote, 0x4}, 0x1c) 56.946476ms ago: executing program 1 (id=3492): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYRESDEC], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 55.968056ms ago: executing program 2 (id=3493): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x401, 0x4, 0x0, 0x4, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 0s ago: executing program 1 (id=3494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x90}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000880)={r0, 0x1, 0x6, "b2b6455f1b9402ac"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) sendmmsg$inet6(r2, &(0x7f0000000840)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xfffffd4a, @loopback, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000000c0)="7925734633e0aa5d73343d62405bacecf0028d9e01801342a405f1f98e72e8371d7586b52907b7034e81f14ae906db4ff0f18c37", 0x34}, {&(0x7f00000001c0)="a76f18b649850ff96392ed2feacbd6c72b4cf4cb3d8f72f5e044809757b57ccfa71582a04376632bedff80cd6894f7ac948e037f281020ee328cd45a92f135fd0c3e824674b368bc3bd64181d44fe0e96f194c204898b0c126fae12cd22467429a988060d32ce21e66e18ca0ef0d3f3b2f289c96cb149634d4ed413e2e0b7e1f20526e73f775a9aa348e29459f8b54dc71d2c2070aa3e65960cee5ba99ad62db26bb1f2f807bd7989441bcf587246d7285cf1e8cd8db0703f7ae9a68a2cd", 0xbe}, {&(0x7f0000000340)="8e63b8c7ff836ad944c8a7fb6315a1ef756e70121977213d300bfe8d0da1045eb95d6a3ba508097e77867219d015f536a0c60f875622f1a8bfa1df6e89b9fd0779fafedd8aaa4e19d405c6855cf345865ef89a0394a10e83ff4fb8dd7fcadd7928e24b811d67b69b6f01982d5aa30182e64abaae0074f217caab22622640610ced8e4449de8a89081738c70669c9626181bde63e66b54c55b7fba9", 0x9b}, {&(0x7f0000000500)="7829d98b4e4c225969b733bf1819f00b7d6a7eada3d972180c84d2b8ffbed1a727b8c9156f0403507d5fc689c9ad1d0f32d12544bd11be3382d97817ffa69952f7b6dc69e137ca4606", 0x49}], 0x4, &(0x7f0000000580)=[@hopopts_2292={{0x78, 0x29, 0x36, {0x2e, 0xb, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x18}}, @enc_lim={0x4, 0x1, 0xe}, @generic={0xc1, 0x43, "7186308fb6ef10550710dfc15629a79cf8d773d8933c8b2dabaf04f4118d987fd5d34f84d6174213fa31f327cbe22490a9a6f607afe9bbfcec1de26452e34148ac17d8"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffe}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x0, 0x8, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010102}]}}}, @hopopts={{0x58, 0x29, 0x36, {0x2, 0x7, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0xdf, 0xd31c, [0x7f, 0x2, 0xffffffffddebade2, 0x5ea]}}, @hao={0xc9, 0x10, @remote}]}}}, @rthdrdstopts={{0x178, 0x29, 0x37, {0x0, 0x2b, '\x00', [@generic={0x8, 0x38, "cb17ce96c0b393ed1ff1193d9e060c05a02094b57d3cb5bc493e7f24f2830a33201cbbe21a1c70546bb9707a7a6e591bf9ec4f8683c21103"}, @jumbo={0xc2, 0x4, 0xffff}, @ra={0x5, 0x2, 0x101}, @generic={0x3, 0x98, "99ade5d8a035a422ebe5cce314f9b738f1e313d0431a45f663c4f5a4862b99ba8995392460e27d830dcb9a7be23722e58e7a94be8ebef074a590f37e0452eedba83ceee8aeef4f971679c483df8af0bef49ab74b0720d1d1e33b7b911e465a21a7c52adcdcaa3e0e8413f81e3709d3e5740792a800a38cc288e1ad18a2ea94e748cb2e0f1771aea3a3876c975f9a6c12906bb16cbfea0568"}, @calipso={0x7, 0x40, {0x3, 0xe, 0x54, 0x0, [0x8000, 0x7, 0x2, 0xa8, 0x836, 0x8, 0x6]}}, @hao={0xc9, 0x10, @empty}, @generic={0x8, 0x16, "8a294400921d0aaefa9a42fa268585457c9e2d3aa91f"}, @hao={0xc9, 0x10, @private0}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x6c, 0x1, '\x00', [@ra, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0x2c0}}], 0x1, 0x0) kernel console output (not intermixed with test programs): ond_slave_1): Releasing backup interface [ 223.133699][T12969] team0: Port device team_slave_0 removed [ 223.158947][T12969] team0: Port device team_slave_1 removed [ 223.173926][T12969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.182067][T12969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.198401][T12969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.205974][T12969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.233205][T12969] bond1: (slave veth3): Releasing active interface [ 223.464038][T12989] __nla_validate_parse: 13 callbacks suppressed [ 223.464056][T12989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1909'. [ 223.492733][T12995] netlink: zone id is out of range [ 223.510596][T12997] netlink: zone id is out of range [ 223.569546][T13002] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1914'. [ 223.580572][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1914'. [ 223.623718][T13005] netlink: 'syz.4.1915': attribute type 1 has an invalid length. [ 223.783625][T13019] delete_channel: no stack [ 223.913897][T13030] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1921'. [ 223.935685][T13032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.081897][T13036] hsr0 speed is unknown, defaulting to 1000 [ 224.131657][T13040] veth1_to_bond: entered allmulticast mode [ 224.145005][T13036] lo speed is unknown, defaulting to 1000 [ 224.162068][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1925'. [ 224.178812][T13042] ip6tnl3: entered promiscuous mode [ 224.212708][T13044] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1927'. [ 224.315684][T13040] bond0: (slave bond_slave_1): Releasing backup interface [ 224.366032][T13040] veth1_to_bond (unregistering): left allmulticast mode [ 224.662986][T13073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1930'. [ 224.774333][T13079] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1934'. [ 225.166119][T13092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1941'. [ 225.304452][T13100] netlink: 'syz.2.1944': attribute type 33 has an invalid length. [ 225.413359][T13102] : entered promiscuous mode [ 225.430973][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 225.457392][T13108] netlink: 'syz.3.1947': attribute type 8 has an invalid length. [ 226.152721][T13146] netlink: 'syz.3.1959': attribute type 83 has an invalid length. [ 226.331712][T13156] nbd: illegal input index -8454144 [ 227.368958][T13199] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 227.550317][T13211] netlink: 'syz.4.1976': attribute type 1 has an invalid length. [ 227.565158][T13207] syz.5.1974 (13207) used obsolete PPPIOCDETACH ioctl [ 227.615982][T13211] 8021q: adding VLAN 0 to HW filter on device bond8 [ 227.655067][T13216] bond8: (slave geneve2): making interface the new active one [ 227.664360][T13216] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 227.703422][T13221] C: renamed from team_slave_0 [ 227.704055][T13209] nbd: illegal input index -8454144 [ 227.741858][T13221] netlink: 'syz.3.1980': attribute type 1 has an invalid length. [ 227.752355][T13221] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 227.820674][T13225] syzkaller1: entered promiscuous mode [ 227.826184][T13225] syzkaller1: entered allmulticast mode [ 227.944116][T13231] netlink: 'syz.2.1983': attribute type 16 has an invalid length. [ 227.964208][T13233] nbd: must specify a size in bytes for the device [ 227.990613][T13231] netlink: 'syz.2.1983': attribute type 3 has an invalid length. [ 228.829668][T13301] __nla_validate_parse: 17 callbacks suppressed [ 228.829687][T13301] netlink: 212288 bytes leftover after parsing attributes in process `syz.3.2006'. [ 228.853194][T13302] netlink: 212288 bytes leftover after parsing attributes in process `syz.3.2006'. [ 228.864977][T13302] sctp: [Deprecated]: syz.3.2006 (pid 13302) Use of int in max_burst socket option. [ 228.864977][T13302] Use struct sctp_assoc_value instead [ 228.911857][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 228.927000][T13313] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2007'. [ 229.025984][T13318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2011'. [ 229.051563][T13313] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2007'. [ 229.107904][T13318] vlan0: entered allmulticast mode [ 229.123330][T13318] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 229.180371][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2011'. [ 229.195373][T13332] Bluetooth: MGMT ver 1.23 [ 229.260542][T13317] team_slave_0: entered promiscuous mode [ 229.266295][T13317] team_slave_1: entered promiscuous mode [ 229.286261][T13317] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 229.444699][T13350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2021'. [ 229.482177][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2019'. [ 229.542767][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2023'. [ 229.553997][T13344] bridge6: port 1(veth9) entered blocking state [ 229.564466][T13344] bridge6: port 1(veth9) entered disabled state [ 229.572304][T13344] veth9: entered allmulticast mode [ 229.579948][T13344] veth9: entered promiscuous mode [ 229.715767][T13363] netlink: 'syz.3.2026': attribute type 4 has an invalid length. [ 229.825299][T13366] tipc: Enabled bearer , priority 0 [ 229.835534][T13366] syzkaller0: entered promiscuous mode [ 229.856115][T13366] syzkaller0: entered allmulticast mode [ 229.912794][T13366] tipc: Resetting bearer [ 229.935024][T13364] tipc: Resetting bearer [ 229.957320][T13364] tipc: Disabling bearer [ 230.135118][T13394] netlink: 'syz.3.2035': attribute type 21 has an invalid length. [ 230.141920][T13387] tipc: Cannot configure node identity twice [ 230.154569][T13394] netlink: 'syz.3.2035': attribute type 6 has an invalid length. [ 230.235288][T13392] netlink: 'syz.5.2037': attribute type 1 has an invalid length. [ 230.669039][T13442] tipc: Enabled bearer , priority 0 [ 230.689787][T13446] mac80211_hwsim hwsim4 ÿ: renamed from wlan1 [ 230.712861][T13442] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode [ 230.728323][T13442] mac80211_hwsim hwsim16 syzkaller0: entered allmulticast mode [ 230.776955][T13442] tipc: Resetting bearer [ 231.045241][T13461] vlan2: entered allmulticast mode [ 231.065259][T13461] erspan0: entered allmulticast mode [ 231.275636][T13470] bridge3: entered promiscuous mode [ 231.287165][T13470] bridge3: entered allmulticast mode [ 231.311520][T13481] netlink: 'syz.2.2061': attribute type 1 has an invalid length. [ 231.482308][T13486] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.504914][T13486] bond5: (slave bond6): making interface the new active one [ 231.529553][T13486] bond5: (slave bond6): Enslaving as an active interface with an up link [ 231.585957][T13481] bond5: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 231.599087][T13481] bond5: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 231.778065][ T6133] tipc: Node number set to 1167771213 [ 232.601473][T13558] netlink: 'syz.1.2082': attribute type 1 has an invalid length. [ 232.688421][T13559] netlink: 'syz.1.2082': attribute type 13 has an invalid length. [ 232.714038][T13559] veth0_macvtap: left promiscuous mode [ 232.748713][T13559] macvtap0: entered allmulticast mode [ 232.775789][T13559] macvtap0: refused to change device tx_queue_len [ 232.844784][T13566] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 232.890874][T13561] tipc: Enabled bearer , priority 0 [ 232.910504][T13561] syzkaller0: entered promiscuous mode [ 232.916005][T13561] syzkaller0: entered allmulticast mode [ 233.072171][T13561] tipc: Resetting bearer [ 233.095517][T13560] tipc: Resetting bearer [ 233.144814][T13560] tipc: Disabling bearer [ 233.170250][T13588] netlink: 'syz.3.2091': attribute type 1 has an invalid length. [ 233.473948][T13610] netlink: 'syz.2.2099': attribute type 18 has an invalid length. [ 233.639957][T13618] netlink: 'syz.5.2102': attribute type 5 has an invalid length. [ 233.917049][T13635] tipc: Enabled bearer , priority 0 [ 233.967460][T13644] __nla_validate_parse: 13 callbacks suppressed [ 233.967479][T13644] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2109'. [ 234.006585][T13646] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2110'. [ 234.031315][ T1087] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 234.057772][ T5885] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 234.065835][ T1087] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 234.155640][T13635] tipc: Disabling bearer [ 234.421511][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2116'. [ 234.435589][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2116'. [ 234.473657][T13670] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2118'. [ 234.847100][ T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 234.858964][ T9] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 234.881985][T13694] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2125'. [ 235.279376][T13727] IPVS: set_ctl: invalid protocol: 47 0.0.0.56:20002 [ 235.394085][ T5885] IPVS: starting estimator thread 0... [ 235.474499][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2137'. [ 235.506473][T13737] IPVS: using max 36 ests per chain, 86400 per kthread [ 235.769851][T13751] netlink: 'syz.2.2146': attribute type 2 has an invalid length. [ 235.799222][T13754] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2145'. [ 235.809363][T13756] netlink: 'syz.2.2146': attribute type 2 has an invalid length. [ 235.942530][T13764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'. [ 235.953265][T13764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2149'. [ 236.240421][T13783] netlink: 'syz.2.2156': attribute type 10 has an invalid length. [ 236.301229][T13783] bridge_slave_1: entered allmulticast mode [ 236.321300][T13783] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 236.715019][T13814] macsec3: entered promiscuous mode [ 236.728309][T13814] bridge0: entered promiscuous mode [ 236.740358][T13814] macsec3: entered allmulticast mode [ 236.754244][T13814] bridge0: port 3(macsec3) entered blocking state [ 236.772307][T13814] bridge0: port 3(macsec3) entered disabled state [ 236.789435][T13814] bridge0: left promiscuous mode [ 237.635402][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 237.641905][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 237.648469][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.656288][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.664262][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.672132][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.680097][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.687945][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.695845][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.703707][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.711669][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.719616][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.727540][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.735455][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.743403][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.751251][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.759187][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.767032][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.774929][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.782785][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.790703][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.798584][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.806500][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.814346][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.822371][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.830221][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.838165][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.845982][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.854073][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.861924][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.869893][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.877742][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.885652][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.893524][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.901545][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.909417][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.917332][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.925150][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.933078][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.940926][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.948853][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.956693][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.964591][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.972556][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.980468][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 237.988331][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 237.996257][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 238.004120][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 238.012053][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 238.019912][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 238.027850][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 238.035667][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 238.043678][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 238.051538][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 238.059494][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 238.067353][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 238.075245][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 238.083201][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 238.091130][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 238.098990][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 238.106906][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 238.114729][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 238.122665][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 238.130521][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 238.138549][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 238.146404][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 238.369078][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 238.675645][T13892] veth0: entered promiscuous mode [ 238.718878][T13892] veth0: left promiscuous mode [ 238.999123][T13915] __nla_validate_parse: 9 callbacks suppressed [ 238.999139][T13915] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2194'. [ 239.429623][T13938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2201'. [ 239.453797][T13941] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2202'. [ 239.496904][T13944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.566037][T13947] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2201'. [ 239.754667][T13963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 239.797177][T13964] openvswitch: netlink: IP tunnel dst address not specified [ 239.833173][T13964] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2208'. [ 240.429435][T14006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2218'. [ 240.454819][T14009] syzkaller0: create flow: hash 2267612260 index 1 [ 240.457687][T14008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.524203][T14006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2218'. [ 240.633792][T13994] syzkaller0: delete flow: hash 2267612260 index 1 [ 241.081949][T14043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2226'. [ 242.167880][T14014] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2220'. [ 242.178414][T14028] syz_tun: entered allmulticast mode [ 242.202114][T14028] syz_tun: left allmulticast mode [ 242.414652][T14051] netlink: 'syz.3.2229': attribute type 1 has an invalid length. [ 242.430912][T14051] netlink: 'syz.3.2229': attribute type 4 has an invalid length. [ 242.463425][T14052] netlink: 'syz.5.2228': attribute type 5 has an invalid length. [ 242.514135][T14058] netlink: 'syz.4.2232': attribute type 11 has an invalid length. [ 242.522785][T14060] netlink: 'syz.4.2232': attribute type 11 has an invalid length. [ 242.542304][T14058] netlink: 'syz.4.2232': attribute type 11 has an invalid length. [ 242.562023][T14060] netlink: 'syz.4.2232': attribute type 11 has an invalid length. [ 242.657765][T14072] 8021q: VLANs not supported on lo [ 242.692019][T14072] sctp: [Deprecated]: syz.1.2235 (pid 14072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.692019][T14072] Use struct sctp_sack_info instead [ 242.794734][T14080] netlink: 'syz.3.2238': attribute type 4 has an invalid length. [ 242.943259][T14076] syzkaller0: entered promiscuous mode [ 242.948999][T14076] syzkaller0: entered allmulticast mode [ 242.955235][T14084] netlink: 'syz.2.2239': attribute type 6 has an invalid length. [ 242.972259][T14090] tipc: Enabling of bearer rejected, failed to enable media [ 243.588704][T14108] netlink: 'syz.5.2244': attribute type 10 has an invalid length. [ 244.503506][T14107] bridge0: port 1(syz_tun) entered blocking state [ 244.514611][T14107] bridge0: port 1(syz_tun) entered disabled state [ 244.522474][T14107] syz_tun: entered allmulticast mode [ 244.535054][T14107] syz_tun: entered promiscuous mode [ 244.561498][T14107] bridge0: port 1(syz_tun) entered blocking state [ 244.568732][T14107] bridge0: port 1(syz_tun) entered forwarding state [ 244.610725][T14115] !: renamed from dummy0 (while UP) [ 244.784687][T14131] __nla_validate_parse: 10 callbacks suppressed [ 244.784705][T14131] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2253'. [ 244.786662][T14126] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2251'. [ 244.803614][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2253'. [ 244.838552][T14132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2251'. [ 244.853018][T14130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2252'. [ 245.045529][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2256'. [ 245.056087][T14137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2256'. [ 245.065859][T14138] lo: entered promiscuous mode [ 245.085776][T14138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.205563][T14143] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.221178][T14143] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.419265][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2261'. [ 245.451404][T14143] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.471971][T14143] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.490963][T14163] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 245.501600][T14163] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 245.654752][T14143] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.673507][T14143] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.711718][T14177] openvswitch: netlink: Actions may not be safe on all matching packets [ 245.819597][T14143] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.832577][T14143] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.908424][T14192] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2271'. [ 245.994186][ T1087] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.004771][ T1087] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.070974][ T1087] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.085099][ T1087] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.129709][ T1087] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.141300][ T1087] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.184413][ T1087] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.226302][ T1087] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.252295][T14209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2278'. [ 247.310011][T14272] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 247.319638][T14272] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 247.329460][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 247.448806][T14280] validate_nla: 10 callbacks suppressed [ 247.448825][T14280] netlink: 'syz.4.2299': attribute type 21 has an invalid length. [ 247.583972][T14296] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 247.779589][T14302] 8021q: adding VLAN 0 to HW filter on device bond9 [ 247.819803][T14310] vlan2: entered promiscuous mode [ 247.825050][T14310] bridge0: entered promiscuous mode [ 247.842267][T14302] pimreg: entered allmulticast mode [ 248.043862][T14331] netlink: 'syz.1.2316': attribute type 1 has an invalid length. [ 248.253211][T14347] syzkaller0: entered promiscuous mode [ 248.258952][T14347] syzkaller0: entered allmulticast mode [ 248.266757][T14346] tipc: Enabled bearer , priority 0 [ 248.274608][T14346] tipc: Enabling of bearer rejected, already enabled [ 248.287239][T14346] tipc: Enabling of bearer rejected, already enabled [ 248.301372][T14346] tipc: Enabling of bearer rejected, already enabled [ 248.313168][T14346] tipc: Enabling of bearer rejected, already enabled [ 248.323102][T14346] tipc: Enabling of bearer rejected, already enabled [ 248.335954][T14346] tipc: Enabling of bearer rejected, already enabled [ 248.355346][T14346] tipc: Enabling of bearer rejected, already enabled [ 248.364291][T14346] tipc: Enabling of bearer rejected, already enabled [ 248.390624][T14349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.398474][T14349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.414229][T14349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.424452][T14349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.512965][T14346] tipc: Resetting bearer [ 248.576070][T14346] tipc: Disabling bearer [ 249.244604][T14409] tipc: Enabling of bearer rejected, already enabled [ 249.464158][T14427] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 249.571519][T14432] netlink: del zone limit has 4 unknown bytes [ 250.054360][T14463] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 250.094899][T14463] team0: Device macvtap1 is already an upper device of the team interface [ 250.173651][T14480] netlink: 'syz.1.2357': attribute type 1 has an invalid length. [ 250.253766][T14480] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.262797][T14486] netlink: 'syz.3.2359': attribute type 29 has an invalid length. [ 250.270833][T14486] __nla_validate_parse: 29 callbacks suppressed [ 250.270851][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2359'. [ 250.298983][T14489] netlink: 'syz.3.2359': attribute type 29 has an invalid length. [ 250.321350][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2359'. [ 250.389927][T14489] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 250.401088][T14476] bond4: (slave geneve4): making interface the new active one [ 250.414177][T14476] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 250.425821][T14497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2362'. [ 250.426087][T14491] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.449858][T14491] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.537515][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2361'. [ 250.550793][T14491] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.563585][T14491] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.587617][T14509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2364'. [ 250.609532][T14510] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2363'. [ 250.661337][T14509] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2364'. [ 250.707149][T14491] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.731839][T14491] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.815281][T14518] syz.5.2366: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 250.832798][T14517] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2365'. [ 250.836711][T14518] CPU: 0 UID: 0 PID: 14518 Comm: syz.5.2366 Not tainted syzkaller #0 PREEMPT(full) [ 250.836735][T14518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.836751][T14518] Call Trace: [ 250.836760][T14518] [ 250.836767][T14518] dump_stack_lvl+0x189/0x250 [ 250.836798][T14518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.836819][T14518] ? __pfx__printk+0x10/0x10 [ 250.836841][T14518] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 250.836862][T14518] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 250.836883][T14518] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 250.836905][T14518] warn_alloc+0x214/0x310 [ 250.836931][T14518] ? stack_depot_save_flags+0x40/0x860 [ 250.836955][T14518] ? __pfx_warn_alloc+0x10/0x10 [ 250.836980][T14518] ? kasan_save_track+0x4f/0x80 [ 250.837001][T14518] ? xskq_create+0x56/0x170 [ 250.837021][T14518] ? xsk_init_queue+0xb0/0x110 [ 250.837040][T14518] ? xsk_setsockopt+0x4dc/0x8d0 [ 250.837059][T14518] ? do_sock_setsockopt+0x179/0x1b0 [ 250.837075][T14518] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 250.837092][T14518] ? do_syscall_64+0xfa/0x3b0 [ 250.837108][T14518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.837133][T14518] __vmalloc_node_range_noprof+0x125/0x12f0 [ 250.837185][T14518] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 250.837216][T14518] ? __kasan_kmalloc+0x93/0xb0 [ 250.837240][T14518] vmalloc_user_noprof+0xad/0xf0 [ 250.837263][T14518] ? xskq_create+0xbf/0x170 [ 250.837285][T14518] xskq_create+0xbf/0x170 [ 250.837310][T14518] xsk_init_queue+0xb0/0x110 [ 250.837334][T14518] xsk_setsockopt+0x4dc/0x8d0 [ 250.837358][T14518] ? __pfx_xsk_setsockopt+0x10/0x10 [ 250.837380][T14518] ? __pfx_aa_sk_perm+0x10/0x10 [ 250.837407][T14518] ? aa_sock_opt_perm+0xff/0x1b0 [ 250.837427][T14518] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 250.837444][T14518] ? __pfx_xsk_setsockopt+0x10/0x10 [ 250.837466][T14518] do_sock_setsockopt+0x179/0x1b0 [ 250.837489][T14518] __x64_sys_setsockopt+0x13f/0x1b0 [ 250.837513][T14518] do_syscall_64+0xfa/0x3b0 [ 250.837527][T14518] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.837550][T14518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.837566][T14518] ? clear_bhb_loop+0x60/0xb0 [ 250.837593][T14518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.837610][T14518] RIP: 0033:0x7f8be078eba9 [ 250.837635][T14518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.837650][T14518] RSP: 002b:00007f8be155b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 250.837669][T14518] RAX: ffffffffffffffda RBX: 00007f8be09d5fa0 RCX: 00007f8be078eba9 [ 250.837682][T14518] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 250.837693][T14518] RBP: 00007f8be0811e19 R08: 0000000000000004 R09: 0000000000000000 [ 250.837704][T14518] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.837716][T14518] R13: 00007f8be09d6038 R14: 00007f8be09d5fa0 R15: 00007ffcee782c98 [ 250.837746][T14518] [ 250.837757][T14518] Mem-Info: [ 251.075770][T14526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2370'. [ 251.090746][T14518] active_anon:3869 inactive_anon:0 isolated_anon:0 [ 251.090746][T14518] active_file:2822 inactive_file:39929 isolated_file:0 [ 251.090746][T14518] unevictable:768 dirty:56 writeback:0 [ 251.090746][T14518] slab_reclaimable:12102 slab_unreclaimable:116602 [ 251.090746][T14518] mapped:28914 shmem:1372 pagetables:1021 [ 251.090746][T14518] sec_pagetables:0 bounce:0 [ 251.090746][T14518] kernel_misc_reclaimable:0 [ 251.090746][T14518] free:1306565 free_pcp:15106 free_cma:0 [ 251.154317][T14528] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2370'. [ 251.156110][T14518] Node 0 active_anon:15576kB inactive_anon:0kB active_file:11288kB inactive_file:159512kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115656kB dirty:224kB writeback:0kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12816kB pagetables:3960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 251.249876][T14518] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 251.280015][T14518] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 251.283007][T14491] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.319720][T14518] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 251.325626][T14518] Node 0 DMA32 free:1325596kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15632kB inactive_anon:0kB active_file:11288kB inactive_file:157932kB unevictable:1536kB writepending:224kB present:3129332kB managed:2557436kB mlocked:0kB bounce:0kB free_pcp:37052kB local_pcp:21400kB free_cma:0kB [ 251.365782][T14518] lowmem_reserve[]: 0 0 1 1 1 [ 251.369325][T14491] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.371601][T14518] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 251.418232][T14528] tipc: Enabling of bearer rejected, already enabled [ 251.427399][T14531] bond0: Device is already in use. [ 251.434569][T14518] lowmem_reserve[]: 0 0 0 0 0 [ 251.440039][T14518] Node 1 Normal free:3885292kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23596kB local_pcp:11968kB free_cma:0kB [ 251.472743][T14518] lowmem_reserve[]: 0 0 0 0 0 [ 251.477933][T14518] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 251.509404][T14518] Node 0 DMA32: 475*4kB (UM) 136*8kB (UM) 244*16kB (UME) 230*32kB (UM) 107*64kB (UM) 38*128kB (UM) 20*256kB (UM) 3*512kB (ME) 1*1024kB (E) 5*2048kB (UME) 313*4096kB (UM) = 1325932kB [ 251.536533][T14518] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 251.580921][T14518] Node 1 Normal: 187*4kB (UE) 56*8kB (UME) 38*16kB (UME) 81*32kB (UME) 25*64kB (UME) 7*128kB (UME) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3885292kB [ 251.605026][ T6226] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.611424][T14518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 251.623158][T14518] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 251.625948][ T6226] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.642022][T14536] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 251.648068][T14518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 251.661254][T14518] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 251.722294][ T6226] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.733547][T14518] 44120 total pagecache pages [ 251.739178][ T6226] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.758464][T14518] 0 pages in swap cache [ 251.763427][T14518] Free swap = 124996kB [ 251.774757][T14548] IPv4: Oversized IP packet from 127.202.26.0 [ 251.787384][T14518] Total swap = 124996kB [ 251.791576][T14518] 2097051 pages RAM [ 251.807901][T14518] 0 pages HighMem/MovableOnly [ 251.822866][T14518] 425666 pages reserved [ 251.833868][T14518] 0 pages cma reserved [ 251.843539][ T6226] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.865616][ T6226] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.963702][ T6226] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.974356][ T6226] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.992577][T14557] syzkaller1: entered promiscuous mode [ 252.001064][T14557] syzkaller1: entered allmulticast mode [ 252.084569][T14564] tipc: Enabling of bearer rejected, failed to enable media [ 252.091992][T14566] netlink: 'syz.1.2382': attribute type 1 has an invalid length. [ 252.136255][T14566] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.166019][T14566] bond5: (slave ip6erspan0): making interface the new active one [ 252.175691][T14566] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 252.202923][T14569] hsr0 speed is unknown, defaulting to 1000 [ 252.274208][T14577] netlink: 'syz.2.2386': attribute type 9 has an invalid length. [ 252.294279][T14577] netlink: 'syz.2.2386': attribute type 9 has an invalid length. [ 252.484592][T14591] tunl0: entered promiscuous mode [ 252.508517][T14591] gre0: entered promiscuous mode [ 252.524937][T14597] netlink: 'syz.2.2393': attribute type 1 has an invalid length. [ 252.570173][T14591] gretap0: entered promiscuous mode [ 252.610729][T14591] erspan0: entered promiscuous mode [ 252.640135][T14591] ip_vti0: entered promiscuous mode [ 252.668849][T14600] netlink: 'syz.2.2394': attribute type 1 has an invalid length. [ 252.778979][T14603] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 252.825954][T14606] macvtap2: entered promiscuous mode [ 252.842437][T14606] vlan0: entered promiscuous mode [ 252.862048][T14606] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 252.869885][T14609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.872411][T14606] macvtap2: entered allmulticast mode [ 252.877535][T14609] IPv6: NLM_F_CREATE should be set when creating new route [ 253.009120][T14618] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 253.264657][T14633] netdevsim netdevsim5 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 253.765825][T14665] bridge0: port 1(syz_tun) entered disabled state [ 253.803470][T14663] netlink: 'syz.1.2413': attribute type 1 has an invalid length. [ 253.831161][T14665] netlink: 'syz.5.2415': attribute type 16 has an invalid length. [ 253.846594][T14665] netlink: 'syz.5.2415': attribute type 17 has an invalid length. [ 253.863393][T14665] lo: left promiscuous mode [ 253.871286][T14665] tunl0: left promiscuous mode [ 253.878877][T14665] gre0: left promiscuous mode [ 253.907184][T14665] gretap0: left promiscuous mode [ 253.914671][T14665] erspan0: left promiscuous mode [ 253.922062][T14665] ip_vti0: left promiscuous mode [ 253.933384][T14665] bridge0: port 1(syz_tun) entered blocking state [ 253.940052][T14665] bridge0: port 1(syz_tun) entered forwarding state [ 253.951921][T14672] netlink: 'syz.3.2417': attribute type 10 has an invalid length. [ 253.964803][T14665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.981890][ T5963] lo speed is unknown, defaulting to 1000 [ 253.991930][ T5963] syz0: Port: 1 Link ACTIVE [ 254.015812][ T5929] lo speed is unknown, defaulting to 1000 [ 254.362954][T14696] veth11: entered allmulticast mode [ 254.371794][T14696] netlink: 'syz.3.2423': attribute type 1 has an invalid length. [ 254.383846][T14698] team_slave_0: left promiscuous mode [ 254.389748][T14698] team_slave_1: left promiscuous mode [ 254.543932][T14707] netlink: 'syz.1.2426': attribute type 10 has an invalid length. [ 254.567537][T14698] team0 (unregistering): Port device team_slave_0 removed [ 254.599192][T14698] team0 (unregistering): Port device team_slave_1 removed [ 254.677375][T14696] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.716699][T14707] veth0_vlan: left promiscuous mode [ 254.723088][T14707] veth0_vlan: entered promiscuous mode [ 254.775436][T14707] team0: Device veth0_vlan failed to register rx_handler [ 255.006089][T14733] netlink: 'syz.3.2428': attribute type 1 has an invalid length. [ 255.113399][T14740] netlink: 'syz.5.2432': attribute type 21 has an invalid length. [ 255.339494][T14751] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 255.440804][T14751] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 255.533065][T14751] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 255.569171][T14751] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 255.596039][T14772] __nla_validate_parse: 14 callbacks suppressed [ 255.596057][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2440'. [ 255.611856][T14751] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 255.622059][T14772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2440'. [ 255.634068][T14751] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 255.635808][T14772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2440'. [ 255.645332][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2442'. [ 255.724302][T14775] 8021q: adding VLAN 0 to HW filter on device bond7 [ 255.773662][T14779] bond7: (slave geneve3): making interface the new active one [ 255.785448][T14779] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 255.845902][T14751] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 255.865151][T14790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2444'. [ 255.891805][T14790] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 255.944304][T14751] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 256.010016][T14751] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 256.113696][T14751] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 256.194439][T14807] 8021q: adding VLAN 0 to HW filter on device bond10 [ 256.229579][T14816] bond10: (slave veth9): Enslaving as an active interface with a down link [ 256.255647][T14819] tipc: New replicast peer: 255.255.255.255 [ 256.269263][T14819] tipc: Enabled bearer , priority 10 [ 256.293995][T14807] bond3: (slave veth0_to_bond): Releasing backup interface [ 256.340082][T14807] bond10: (slave veth0_to_bond): making interface the new active one [ 256.354324][T14807] veth0_to_bond: entered promiscuous mode [ 256.374133][T14807] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 256.442089][T14816] bond10: (slave veth11): Enslaving as an active interface with a down link [ 256.612231][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2456'. [ 256.649520][T14850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2459'. [ 256.665011][T14852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2456'. [ 256.918879][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2465'. [ 256.972567][T14869] openvswitch: netlink: Flow actions attr not present in new flow. [ 257.022694][T14879] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2464'. [ 257.102393][T14874] syzkaller1: entered promiscuous mode [ 257.138276][T14874] syzkaller1: entered allmulticast mode [ 257.392721][T14895] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 257.406708][ T5936] tipc: Node number set to 957839747 [ 257.467747][T14900] bond_slave_1: default FDB implementation only supports local addresses [ 257.559880][T14900] bond8: entered promiscuous mode [ 257.575381][T14900] bond8: entered allmulticast mode [ 257.581198][T14900] 8021q: adding VLAN 0 to HW filter on device bond8 [ 257.693899][T14900] bond8 (unregistering): Released all slaves [ 257.762080][T14906] tipc: Enabling of bearer rejected, already enabled [ 257.783437][T14906] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 257.913207][T14918] openvswitch: netlink: Key type 1799 is out of range max 32 [ 258.304876][T14934] veth9: left allmulticast mode [ 258.325288][T14934] veth9: left promiscuous mode [ 258.334743][T14934] bridge6: port 1(veth9) entered disabled state [ 258.379100][ T5948] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 258.607491][T14958] dvmrp0: entered allmulticast mode [ 258.614561][T14956] dvmrp0: left allmulticast mode [ 258.829077][T14975] validate_nla: 6 callbacks suppressed [ 258.829120][T14975] netlink: 'syz.2.2494': attribute type 1 has an invalid length. [ 259.042146][T14975] bond8 (unregistering): Released all slaves [ 259.073940][T14983] ip6tnl1: entered promiscuous mode [ 259.079625][T14983] ip6tnl1: entered allmulticast mode [ 259.095358][T14984] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 259.107369][T14984] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 259.171554][ T5936] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 259.213853][T14995] netlink: 'syz.4.2499': attribute type 6 has an invalid length. [ 259.225510][T14995] netlink: 'syz.4.2499': attribute type 6 has an invalid length. [ 263.976594][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 267.897093][ T6226] veth0_to_bond: left promiscuous mode [ 268.718007][T15006] bond0: (slave bridge_slave_1): Releasing backup interface [ 268.901002][T15006] bridge_slave_1: left allmulticast mode [ 269.539652][T15006] bond5: (slave bond6): Releasing backup interface [ 269.672137][T15006] bond7: (slave geneve3): Releasing active interface [ 269.685344][T15028] __nla_validate_parse: 9 callbacks suppressed [ 269.685362][T15028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2507'. [ 269.723275][T15031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2508'. [ 269.726434][T15028] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2507'. [ 269.742624][T15031] sock: sock_timestamping_bind_phc: sock not bind to device [ 269.783739][T15028] gretap1: entered promiscuous mode [ 269.794690][T15036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.798687][T15028] gretap1: entered allmulticast mode [ 270.015506][T15054] netlink: 'syz.1.2514': attribute type 1 has an invalid length. [ 270.025078][T15051] pim6reg1: entered promiscuous mode [ 270.030555][T15051] pim6reg1: entered allmulticast mode [ 270.036120][T15054] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2514'. [ 270.107247][T15057] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2516'. [ 270.473284][T15083] netlink: 'syz.3.2522': attribute type 1 has an invalid length. [ 270.489164][T15083] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2522'. [ 270.579237][T15083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2522'. [ 270.605881][T15092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2526'. [ 270.623464][T15083] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 270.936143][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2531'. [ 271.103891][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2533'. [ 271.443618][T15151] openvswitch: netlink: IPv4 tun info is not correct [ 271.506991][T15160] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 271.933937][T15193] netlink: 'syz.4.2549': attribute type 21 has an invalid length. [ 271.948773][T15193] netlink: 'syz.4.2549': attribute type 22 has an invalid length. [ 271.957234][T15193] netlink: 'syz.4.2549': attribute type 23 has an invalid length. [ 271.965212][T15193] netlink: 'syz.4.2549': attribute type 25 has an invalid length. [ 272.912673][T15259] tap0: tun_chr_ioctl cmd 2148553947 [ 273.561383][T15302] hsr0 speed is unknown, defaulting to 1000 [ 273.593502][T15302] lo speed is unknown, defaulting to 1000 [ 273.695819][T15313] syzkaller0: entered promiscuous mode [ 273.718394][T15313] syzkaller0: entered allmulticast mode [ 273.841365][ T30] audit: type=1107 audit(1757667588.067:3): pid=15314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='GÐ:°/§s££P4¥™%ŠÛJIezgCÕf½aLϽN®—¸`ß~t温ü45“¶ |x)ï)*4ÏCua5©éæöT²Ô9ƒîÃøcàu>Ö!r{¯Y†Ö'e_Ï6 1ÁŽÉ"×ä‡îÛ¢fþÐ8Ñ_m;ÂÙ¯&åן¤zà "Lj8—ì «Ÿì&žëÃmcr1nƒi5èϹøÑÊýRžg¿œ†ÖVÀO1pY)áÑŠ«ÿ¬V¿^' [ 275.264140][T15318] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 275.435972][T15337] __nla_validate_parse: 9 callbacks suppressed [ 275.435991][T15337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2592'. [ 275.504975][T15342] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2594'. [ 275.589084][T15346] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2592'. [ 275.611816][T15347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2595'. [ 275.645876][T15347] IPVS: length: 8 != 1152 [ 275.780025][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2597'. [ 275.823264][T15355] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2597'. [ 276.179574][T15372] netlink: 'syz.1.2602': attribute type 21 has an invalid length. [ 276.189411][T15372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2602'. [ 276.216154][T15372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2602'. [ 276.414048][T15384] mac80211_hwsim hwsim16 syzkaller0: left promiscuous mode [ 276.423616][T15384] mac80211_hwsim hwsim16 syzkaller0: left allmulticast mode [ 276.719640][T15407] sctp: [Deprecated]: syz.1.2610 (pid 15407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.719640][T15407] Use struct sctp_sack_info instead [ 276.884378][T15412] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2612'. [ 276.904718][T15412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2612'. [ 276.923037][T15415] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 276.950330][T15414] Dead loop on virtual device ip6_vti0, fix it urgently! [ 277.075165][T15423] sock: sock_set_timeout: `syz.4.2615' (pid 15423) tries to set negative timeout [ 277.372682][T15440] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode [ 277.388670][T15440] mac80211_hwsim hwsim16 syzkaller0: entered allmulticast mode [ 277.398164][T15447] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 277.413452][T15447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.551791][T15457] netlink: 'syz.4.2626': attribute type 1 has an invalid length. [ 277.744034][T15469] netlink: 'syz.4.2630': attribute type 1 has an invalid length. [ 277.861917][T15472] ipvlan1: entered promiscuous mode [ 278.097645][T15496] netlink: 'syz.2.2637': attribute type 21 has an invalid length. [ 278.370265][T15511] netlink: 'syz.3.2643': attribute type 5 has an invalid length. [ 278.545257][T15519] tipc: Enabled bearer , priority 0 [ 278.592577][T15519] tipc: Resetting bearer [ 278.757570][T15526] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 279.075812][T15546] netlink: 'syz.1.2653': attribute type 1 has an invalid length. [ 279.096457][T15546] netlink: 'syz.1.2653': attribute type 3 has an invalid length. [ 279.123640][T15546] NCSI netlink: No device for ifindex 131080 [ 279.155303][T15546] netlink: 'syz.1.2653': attribute type 4 has an invalid length. [ 279.165333][T15537] netlink: 'syz.4.2651': attribute type 6 has an invalid length. [ 279.183898][T15537] netlink: 'syz.4.2651': attribute type 5 has an invalid length. [ 279.414651][T15517] tipc: Disabling bearer [ 279.498567][T15560] openvswitch: netlink: Tunnel attr 16 has unexpected len 10 expected 0 [ 279.524764][T15561] bridge8: entered promiscuous mode [ 279.552665][T15561] bridge8: entered allmulticast mode [ 280.334352][T15597] team_slave_0: left promiscuous mode [ 280.341462][T15597] team_slave_1: left promiscuous mode [ 280.440458][T15607] __nla_validate_parse: 16 callbacks suppressed [ 280.440477][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2675'. [ 280.459951][T15607] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2675'. [ 280.781250][T15624] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 280.805046][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'. [ 280.842615][T15627] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2680'. [ 280.874830][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2684'. [ 281.096155][T15649] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2690'. [ 281.096155][T15647] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2690'. [ 281.261233][T15665] tipc: Enabled bearer , priority 0 [ 281.281201][T15665] syzkaller0: entered promiscuous mode [ 281.299881][T15665] syzkaller0: entered allmulticast mode [ 281.389357][T15677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2696'. [ 281.421520][T15665] tipc: Resetting bearer [ 281.428812][T15665] validate_nla: 8 callbacks suppressed [ 281.428839][T15665] netlink: 'syz.1.2693': attribute type 10 has an invalid length. [ 281.460204][T15665] batman_adv: batadv0: Adding interface: team0 [ 281.466771][T15665] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.493561][T15665] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 281.515367][T15677] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 281.598575][T15664] tipc: Resetting bearer [ 281.685494][T15664] tipc: Disabling bearer [ 281.719811][T15699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2701'. [ 281.944608][T15709] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2704'. [ 282.254298][T15740] netlink: 'syz.4.2713': attribute type 1 has an invalid length. [ 282.280440][T15740] netlink: 'syz.4.2713': attribute type 1 has an invalid length. [ 282.298910][T15731] delete_channel: no stack [ 282.720385][T15777] netlink: 'syz.4.2718': attribute type 1 has an invalid length. [ 282.880062][T15761] syzkaller0: entered promiscuous mode [ 282.896545][T15761] syzkaller0: entered allmulticast mode [ 282.942535][T15777] 8021q: adding VLAN 0 to HW filter on device bond11 [ 283.069277][T15794] netlink: 'syz.3.2726': attribute type 13 has an invalid length. [ 283.081602][T15794] netlink: 'syz.3.2726': attribute type 58 has an invalid length. [ 284.883008][T15815] can: request_module (can-proto-0) failed. [ 285.011372][T15836] netlink: 'syz.2.2736': attribute type 1 has an invalid length. [ 285.114079][T15847] netlink: 'syz.3.2740': attribute type 1 has an invalid length. [ 285.231509][T15856] netlink: 'syz.2.2741': attribute type 1 has an invalid length. [ 285.256251][T15856] nbd: error processing sock list [ 285.285596][T15856] block nbd0: shutting down sockets [ 285.309754][T15862] netlink: 'syz.3.2745': attribute type 1 has an invalid length. [ 285.452319][T15875] tipc: Enabling of bearer rejected, already enabled [ 285.475561][T15876] net veth1_virt_wifi .: renamed from virt_wifi0 [ 285.507317][T15878] __nla_validate_parse: 11 callbacks suppressed [ 285.507337][T15878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2749'. [ 285.581363][T15882] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 285.610848][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2752'. [ 285.637905][ T30] audit: type=1800 audit(1757667599.847:4): pid=15887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2751" name="memory.events" dev="tmpfs" ino=2872 res=0 errno=0 [ 285.714908][ T30] audit: type=1804 audit(1757667599.857:5): pid=15887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2751" name="/newroot/562/memory.events" dev="tmpfs" ino=2872 res=1 errno=0 [ 285.785081][T15894] tipc: Enabled bearer , priority 0 [ 285.828262][T15894] syzkaller0: entered promiscuous mode [ 285.833805][T15894] syzkaller0: entered allmulticast mode [ 285.866956][T15890] tipc: Resetting bearer [ 285.945677][T15890] tipc: Disabling bearer [ 286.160919][T15919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2758'. [ 286.171780][T15922] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2761'. [ 286.185010][T15919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2758'. [ 286.194712][T15919] netlink: 50 bytes leftover after parsing attributes in process `syz.4.2758'. [ 286.227292][T15919] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2758'. [ 286.394285][T15934] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2763'. [ 286.424052][T15934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2763'. [ 286.437838][T15934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2763'. [ 286.763299][T15960] validate_nla: 1 callbacks suppressed [ 286.763319][T15960] netlink: 'syz.1.2771': attribute type 9 has an invalid length. [ 286.880546][T15960] netlink: 'syz.1.2771': attribute type 9 has an invalid length. [ 287.751074][T16027] openvswitch: netlink: Unknown key attributes 2 [ 287.773702][T16028] openvswitch: netlink: Unknown key attributes 2 [ 287.882938][T16034] netlink: 'syz.4.2790': attribute type 1 has an invalid length. [ 288.012804][T16048] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20004 [ 288.156181][T16050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.167837][T16050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.268878][T16050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.279812][T16050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.305381][T16063] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 288.365345][T16050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.379096][T16050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.482436][T16050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.530669][T16050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.722252][ T1157] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.734884][ T1157] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.770245][ T1157] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.779171][ T1157] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.815925][ T1157] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.824819][ T1157] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.836744][ T1157] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.845998][ T1157] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.003978][T16099] netlink: 'syz.3.2807': attribute type 1 has an invalid length. [ 289.044356][T16101] vlan3: entered promiscuous mode [ 289.115979][T16096] hsr0 speed is unknown, defaulting to 1000 [ 289.161324][T16104] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 289.195821][T16096] lo speed is unknown, defaulting to 1000 [ 289.224677][T16115] tipc: Enabled bearer , priority 0 [ 289.293902][T16115] syzkaller0: entered promiscuous mode [ 289.302307][T16115] syzkaller0: entered allmulticast mode [ 289.331955][T16115] tipc: Resetting bearer [ 289.393194][T16109] tipc: Resetting bearer [ 289.442859][T16109] tipc: Disabling bearer [ 289.537446][T16121] hsr0 speed is unknown, defaulting to 1000 [ 289.715927][T16121] lo speed is unknown, defaulting to 1000 [ 290.625369][T16171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.760650][T16178] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 291.389390][T16205] sctp: [Deprecated]: syz.1.2835 (pid 16205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.389390][T16205] Use struct sctp_sack_info instead [ 291.407968][T16202] hsr0 speed is unknown, defaulting to 1000 [ 291.595968][T16202] lo speed is unknown, defaulting to 1000 [ 291.834319][T16233] __nla_validate_parse: 58 callbacks suppressed [ 291.834339][T16233] netlink: 264 bytes leftover after parsing attributes in process `syz.2.2843'. [ 292.087524][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2849'. [ 292.147755][T16254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2848'. [ 292.157233][T16254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2848'. [ 292.169051][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2849'. [ 293.835136][T16257] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 293.846470][T16257] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 294.045705][T16283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2855'. [ 294.224310][T16295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2856'. [ 294.347370][T16297] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2856'. [ 294.595812][ T5882] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.622998][ T5882] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.632012][ T5882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.649604][ T5882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.663197][ T5882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.693570][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.716919][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.725776][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.745606][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.761363][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.899035][T16301] hsr0 speed is unknown, defaulting to 1000 [ 294.930208][T16310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2861'. [ 294.968800][T16301] lo speed is unknown, defaulting to 1000 [ 295.590734][T16343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2870'. [ 295.605453][T16342] netlink: 'syz.4.2871': attribute type 1 has an invalid length. [ 295.815098][ T59] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.832696][ T59] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.881323][T16350] netlink: 'syz.4.2874': attribute type 10 has an invalid length. [ 295.964049][ T59] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.980717][ T59] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.004839][T16350] team0: Device veth1_macvtap failed to register rx_handler [ 296.043369][ T59] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.053960][ T59] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.140112][ T59] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.151350][ T59] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.359013][T16301] chnl_net:caif_netlink_parms(): no params data found [ 296.851134][ T51] Bluetooth: hci2: command tx timeout [ 296.953189][T16406] __nla_validate_parse: 4 callbacks suppressed [ 296.953207][T16406] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2892'. [ 296.973394][T16407] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2892'. [ 297.018362][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880588ac400: rx timeout, send abort [ 297.028625][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880588ac400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 297.043114][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058d7c800: rx timeout, send abort [ 297.053771][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058d7c800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 297.116068][T16410] syz.5.2893 uses old SIOCAX25GETINFO [ 297.174630][T16412] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 297.174630][T16410] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 297.223337][T16415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2894'. [ 297.775556][ T59] bond0 (unregistering): Released all slaves [ 297.790776][ T59] bond1 (unregistering): Released all slaves [ 297.803547][ T59] bond2 (unregistering): Released all slaves [ 297.918578][ T59] bond3 (unregistering): Released all slaves [ 297.932445][ T59] bond4 (unregistering): Released all slaves [ 297.946699][ T59] bond5 (unregistering): Released all slaves [ 297.962356][ T59] bond6 (unregistering): Released all slaves [ 297.982431][ T59] bond7 (unregistering): Released all slaves [ 297.995875][ T59] bond8 (unregistering): Released all slaves [ 298.008605][ T59] bond9 (unregistering): Released all slaves [ 298.024066][ T59] bond10 (unregistering): Released all slaves [ 298.042567][ T59] bond11 (unregistering): Released all slaves [ 298.058892][ T59] bond12 (unregistering): Released all slaves [ 298.074017][ T59] bond13 (unregistering): Released all slaves [ 298.582931][ T59] : left promiscuous mode [ 298.613110][T16301] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.625112][T16301] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.634789][T16301] bridge_slave_0: entered allmulticast mode [ 298.662521][T16301] bridge_slave_0: entered promiscuous mode [ 298.706154][T16441] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 298.713898][T16442] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 298.724371][T16441] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 298.731931][T16442] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 298.744868][ T59] tipc: Disabling bearer [ 298.768251][ T59] tipc: Left network mode [ 298.768357][T16301] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.813699][T16301] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.832872][T16301] bridge_slave_1: entered allmulticast mode [ 298.857693][T16301] bridge_slave_1: entered promiscuous mode [ 298.865847][ T59] IPVS: stopping backup sync thread 6866 ... [ 298.927076][ T51] Bluetooth: hci2: command tx timeout [ 298.990501][T16301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.018908][T16458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2903'. [ 299.075791][T16301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.114727][T16466] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 299.278944][T16476] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2909'. [ 299.298544][T16301] team0: Port device team_slave_0 added [ 299.312356][T16301] team0: Port device team_slave_1 added [ 299.340472][T16301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.351365][T16301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.377521][T16301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.394867][T16301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.402014][T16301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.428672][T16301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.494160][T16301] hsr_slave_0: entered promiscuous mode [ 299.502001][T16301] hsr_slave_1: entered promiscuous mode [ 299.509385][T16301] debugfs: 'hsr0' already exists in 'hsr' [ 299.515195][T16301] Cannot create hsr debugfs directory [ 299.885196][ T59] veth1_macvtap: left promiscuous mode [ 300.621192][ T59] lo (unregistering): left allmulticast mode [ 300.761750][T16301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 300.772970][T16301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 300.783993][T16301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 300.799769][T16301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 300.930936][ T59] IPVS: stop unused estimator thread 0... [ 300.934414][T16301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.965404][T16301] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.983549][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.990775][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.008644][ T51] Bluetooth: hci2: command tx timeout [ 301.027528][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.035372][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.233167][T16301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.270798][T16301] veth0_vlan: entered promiscuous mode [ 301.288033][T16301] veth1_vlan: entered promiscuous mode [ 301.317493][T16301] veth0_macvtap: entered promiscuous mode [ 301.329455][T16301] veth1_macvtap: entered promiscuous mode [ 301.348404][T16301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.363021][T16301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.379684][ T6214] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.390792][ T6214] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.400637][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.410614][ T1157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.464788][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.478005][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.506198][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.514432][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.557717][T16488] netlink: 'syz.3.2854': attribute type 1 has an invalid length. [ 301.565504][T16488] netlink: 784 bytes leftover after parsing attributes in process `syz.3.2854'. [ 303.087294][ T51] Bluetooth: hci2: command tx timeout [ 353.246830][ T49] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 353.443328][T16533] hsr0 speed is unknown, defaulting to 1000 [ 353.460247][T16535] netlink: 'syz.1.2923': attribute type 1 has an invalid length. [ 353.468177][T16535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2923'. [ 353.514924][ T5882] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.523771][ T5882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.532971][ T5882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.543006][ T5882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.551979][ T5882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.583828][T16536] hsr0 speed is unknown, defaulting to 1000 [ 353.590897][T16536] lo speed is unknown, defaulting to 1000 [ 353.851045][T16536] chnl_net:caif_netlink_parms(): no params data found [ 353.924262][T16536] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.931852][T16536] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.939483][T16536] bridge_slave_0: entered allmulticast mode [ 353.946848][T16536] bridge_slave_0: entered promiscuous mode [ 353.954503][T16536] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.962843][T16536] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.971604][T16536] bridge_slave_1: entered allmulticast mode [ 353.981876][T16536] bridge_slave_1: entered promiscuous mode [ 354.162654][T16536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.223893][T16536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.379439][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'. [ 354.499950][T16536] team0: Port device team_slave_0 added [ 354.538925][T16536] team0: Port device team_slave_1 added [ 354.645453][T16536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.662816][T16536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.726131][T16536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.741683][T16536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.749454][T16536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.805550][T16536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.820485][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2938'. [ 354.918007][T16600] netlink: 'syz.3.2937': attribute type 2 has an invalid length. [ 354.931432][T16600] netlink: 'syz.3.2937': attribute type 8 has an invalid length. [ 354.941979][T16536] hsr_slave_0: entered promiscuous mode [ 354.959383][T16536] hsr_slave_1: entered promiscuous mode [ 354.979112][T16536] debugfs: 'hsr0' already exists in 'hsr' [ 354.985629][T16536] Cannot create hsr debugfs directory [ 354.991802][T16599] unknown channel width for channel at 909000KHz? [ 355.003607][T16599] unknown channel width for channel at 909000KHz? [ 355.012355][T16599] unknown channel width for channel at 909000KHz? [ 355.081353][T16608] tipc: Enabled bearer , priority 0 [ 355.119046][T16611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2942'. [ 355.183958][T16608] tipc: Disabling bearer [ 355.262762][T16536] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.279232][T16536] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.344395][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2945'. [ 355.419569][T16624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2945'. [ 355.444415][T16536] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.455285][T16536] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.516081][T16536] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.532915][T16536] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.607968][T16536] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.618432][T16536] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.650309][ T51] Bluetooth: hci0: command tx timeout [ 355.737224][T16640] vxcan1 speed is unknown, defaulting to 1000 [ 355.760331][T16640] vxcan1 speed is unknown, defaulting to 1000 [ 355.767675][T16640] vxcan1 speed is unknown, defaulting to 1000 [ 355.843855][T16648] netlink: 'syz.5.2952': attribute type 21 has an invalid length. [ 355.891677][T16648] IPv6: NLM_F_CREATE should be specified when creating new route [ 355.974310][T16536] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 355.998415][T16653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2954'. [ 356.008193][T16536] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 356.016783][T16653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2954'. [ 356.040659][T16658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2955'. [ 356.043584][T16653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2954'. [ 356.059228][T16651] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 356.071734][T16536] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 356.080392][T16660] netlink: 'syz.1.2954': attribute type 7 has an invalid length. [ 356.099001][T16536] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 356.159565][T16640] infiniband syz2: set active [ 356.164661][ T5936] vxcan1 speed is unknown, defaulting to 1000 [ 356.170895][T16640] infiniband syz2: added vxcan1 [ 356.235817][T16640] RDS/IB: syz2: added [ 356.240023][T16640] smc: adding ib device syz2 with port count 1 [ 356.247533][T16640] smc: ib device syz2 port 1 has pnetid [ 356.253570][ T5936] vxcan1 speed is unknown, defaulting to 1000 [ 356.267263][T16640] vxcan1 speed is unknown, defaulting to 1000 [ 356.512946][T16640] vxcan1 speed is unknown, defaulting to 1000 [ 356.535741][T16536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.567602][T16678] xt_limit: Overflow, try lower: 271964/0 [ 356.622537][T16536] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.663007][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.670240][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.763327][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.770522][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.150343][T16708] Bluetooth: MGMT ver 1.23 [ 357.201917][T16640] vxcan1 speed is unknown, defaulting to 1000 [ 357.237013][T16711] netlink: 'syz.5.2966': attribute type 1 has an invalid length. [ 357.398653][T16536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.547988][T16731] tipc: Enabled bearer , priority 0 [ 357.556722][T16727] syzkaller0: entered promiscuous mode [ 357.562214][T16727] syzkaller0: entered allmulticast mode [ 357.608312][T16727] tipc: Resetting bearer [ 357.730279][ T5882] Bluetooth: hci0: command tx timeout [ 357.863524][T16640] vxcan1 speed is unknown, defaulting to 1000 [ 358.024080][T16536] veth0_vlan: entered promiscuous mode [ 358.055386][T16536] veth1_vlan: entered promiscuous mode [ 358.111998][T16536] veth0_macvtap: entered promiscuous mode [ 358.135157][T16536] veth1_macvtap: entered promiscuous mode [ 358.177954][T16536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.204809][T16536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.233314][ T1087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.248675][ T1157] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.271296][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.272256][T16640] vxcan1 speed is unknown, defaulting to 1000 [ 358.316632][T16753] bond5: entered promiscuous mode [ 358.321897][T16753] bond5: entered allmulticast mode [ 358.328050][T16753] 8021q: adding VLAN 0 to HW filter on device bond5 [ 358.504624][T16753] bond5 (unregistering): Released all slaves [ 358.554235][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.565492][T16726] tipc: Resetting bearer [ 358.602074][T16726] tipc: Disabling bearer [ 358.626164][T16640] vxcan1 speed is unknown, defaulting to 1000 [ 358.741596][T16760] __nla_validate_parse: 6 callbacks suppressed [ 358.741614][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2980'. [ 358.764320][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.782320][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.788307][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2980'. [ 358.875328][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.900934][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.901716][T16765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2982'. [ 359.070898][ T30] audit: type=1800 audit(1757667673.287:6): pid=16774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2914" name="memory.events" dev="tmpfs" ino=18 res=0 errno=0 [ 359.140571][ T30] audit: type=1804 audit(1757667673.297:7): pid=16775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2914" name="/newroot/0/memory.events" dev="tmpfs" ino=18 res=1 errno=0 [ 359.251377][T16786] netlink: 'syz.5.2985': attribute type 1 has an invalid length. [ 359.259736][T16786] netlink: 'syz.5.2985': attribute type 2 has an invalid length. [ 359.310430][T16786] netlink: 'syz.5.2985': attribute type 1 has an invalid length. [ 359.318465][T16786] netlink: 1156 bytes leftover after parsing attributes in process `syz.5.2985'. [ 359.319749][T16779] netlink: 'syz.5.2985': attribute type 1 has an invalid length. [ 359.418686][T16779] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2985'. [ 359.807244][ T5882] Bluetooth: hci0: command 0x040f tx timeout [ 360.096013][ T5882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.108408][ T5882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.119410][ T5882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.129055][ T5882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.139148][ T5882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.154907][T16813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2993'. [ 360.173699][T16813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2993'. [ 360.231153][T16811] hsr0 speed is unknown, defaulting to 1000 [ 360.305152][T16811] lo speed is unknown, defaulting to 1000 [ 360.436994][T16830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'. [ 360.722044][T16851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3004'. [ 360.730766][T16853] netlink: 'syz.5.3003': attribute type 16 has an invalid length. [ 360.758661][T16853] netlink: 'syz.5.3003': attribute type 17 has an invalid length. [ 360.768419][T16854] netlink: 'syz.1.3004': attribute type 6 has an invalid length. [ 360.904202][T16853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.952529][T16811] vxcan1 speed is unknown, defaulting to 1000 [ 360.960865][T16860] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3003'. [ 360.998413][T16866] syzkaller1: entered promiscuous mode [ 361.005035][T16866] syzkaller1: entered allmulticast mode [ 361.141979][T16874] block nbd0: not configured, cannot reconfigure [ 361.259795][T16877] vlan2: entered promiscuous mode [ 361.267556][T16877] bridge0: entered promiscuous mode [ 361.451760][T16887] netlink: 'syz.3.3012': attribute type 24 has an invalid length. [ 361.619003][T16811] chnl_net:caif_netlink_parms(): no params data found [ 361.754528][T16903] netlink: 'syz.3.3017': attribute type 13 has an invalid length. [ 361.891150][ T5882] Bluetooth: hci0: command 0x040f tx timeout [ 361.907592][T16903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.982322][T16811] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.002962][T16811] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.018140][T16811] bridge_slave_0: entered allmulticast mode [ 362.028052][T16811] bridge_slave_0: entered promiscuous mode [ 362.039036][T16916] netlink: 'syz.1.3021': attribute type 21 has an invalid length. [ 362.048445][T16811] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.055706][T16811] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.064315][T16811] bridge_slave_1: entered allmulticast mode [ 362.083220][T16811] bridge_slave_1: entered promiscuous mode [ 362.114391][T16921] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 362.125837][T16921] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 362.139321][T16921] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 362.149859][T16921] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 362.160283][T16918] lo: entered allmulticast mode [ 362.165434][T16921] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 362.176266][T16921] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 362.206871][ T5882] Bluetooth: hci4: command tx timeout [ 362.244951][T16918] lo: left allmulticast mode [ 362.257321][T16921] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 362.278403][T16921] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 362.317901][T16921] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 362.341090][T16921] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 362.355606][T16811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.368770][T16921] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 362.386022][T16921] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 362.413802][T16811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.434212][T16921] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 362.445101][T16921] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 362.528790][T16921] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 362.561430][T16944] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.564105][T16921] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 362.624869][T16811] team0: Port device team_slave_0 added [ 362.637443][T16921] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 362.658908][T16921] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 362.672481][T16811] team0: Port device team_slave_1 added [ 362.679262][T16921] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 362.692525][T16921] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 362.704497][T16921] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 362.716028][T16921] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 362.825274][T16921] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 362.853417][T16921] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 362.867640][T16811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.877668][T16811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.929286][T16811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.957703][T16811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.988541][T16811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.065543][T16811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.157470][T16970] bridge0: port 3(vlan2) entered blocking state [ 363.164013][T16970] bridge0: port 3(vlan2) entered disabled state [ 363.178084][T16970] vlan2: entered allmulticast mode [ 363.183347][T16970] bridge0: entered allmulticast mode [ 363.194309][T16970] vlan2: left allmulticast mode [ 363.201289][T16970] bridge0: left allmulticast mode [ 363.405600][T16811] hsr_slave_0: entered promiscuous mode [ 363.413913][T16811] hsr_slave_1: entered promiscuous mode [ 363.423479][T16811] debugfs: 'hsr0' already exists in 'hsr' [ 363.431666][T16811] Cannot create hsr debugfs directory [ 363.645750][T16999] netem: change failed [ 363.964190][T17026] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 363.977049][ T5882] Bluetooth: hci0: command 0x040f tx timeout [ 363.980455][T16811] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.005949][T16811] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.218109][T16811] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.262269][T16811] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.286541][ T5882] Bluetooth: hci4: command tx timeout [ 364.539682][T16811] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.588818][T16811] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.755388][T16811] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.767463][T16811] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.824007][T17073] validate_nla: 3 callbacks suppressed [ 364.824028][T17073] netlink: 'syz.4.3056': attribute type 1 has an invalid length. [ 364.840331][T17073] netlink: 'syz.4.3056': attribute type 4 has an invalid length. [ 364.848201][T17073] __nla_validate_parse: 13 callbacks suppressed [ 364.848217][T17073] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3056'. [ 364.864656][ T6214] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 364.940605][T17076] netlink: 'syz.4.3057': attribute type 1 has an invalid length. [ 364.951718][T17076] netlink: 'syz.4.3057': attribute type 1 has an invalid length. [ 364.962564][T17076] netlink: 'syz.4.3057': attribute type 1 has an invalid length. [ 364.973521][T17076] netlink: 'syz.4.3057': attribute type 2 has an invalid length. [ 364.981551][T17076] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3057'. [ 365.124875][T17084] netlink: 'syz.4.3061': attribute type 1 has an invalid length. [ 365.153645][T17084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.231626][T17090] veth3: entered promiscuous mode [ 365.245486][T17090] bond1: (slave veth3): Enslaving as an active interface with an up link [ 365.588122][T16811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 365.680095][T16811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 365.722575][T16811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 365.735911][T17100] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3063'. [ 365.763333][T16811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 366.017632][T17105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.028819][T17105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.062481][T17127] macsec0: entered promiscuous mode [ 366.069505][T17127] macsec0: entered allmulticast mode [ 366.074818][T17127] veth1_macvtap: entered allmulticast mode [ 366.081263][T17127] bridge0: port 3(macsec0) entered blocking state [ 366.088001][T17127] bridge0: port 3(macsec0) entered disabled state [ 366.096159][T17127] bridge0: port 3(macsec0) entered blocking state [ 366.102661][T17127] bridge0: port 3(macsec0) entered forwarding state [ 366.115544][T17122] syzkaller0: entered promiscuous mode [ 366.124309][T17122] syzkaller0: entered allmulticast mode [ 366.152034][T17122] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 366.184134][T17105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.200644][T17105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.222454][T17126] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3066'. [ 366.317854][T17105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.330517][T17105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.366875][ T5882] Bluetooth: hci4: command tx timeout [ 366.410953][T17105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.428802][T17105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.492818][T16811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.543271][T16811] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.564913][ T6214] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.572131][ T6214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.618280][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.625585][ T6214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.636078][ T6209] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.652705][ T6209] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.688682][ T6214] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.699316][ T6214] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.735310][ T6226] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.744377][ T6226] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.771792][ T1157] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.794983][ T1157] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.853768][T16811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.956174][T17156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.983659][T17159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.175552][T16811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.296083][T16811] veth0_vlan: entered promiscuous mode [ 367.308162][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3077'. [ 367.324319][T16811] veth1_vlan: entered promiscuous mode [ 367.383688][T16811] veth0_macvtap: entered promiscuous mode [ 367.402078][T16811] veth1_macvtap: entered promiscuous mode [ 367.452380][T16811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.478690][T16811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.504773][ T6209] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.524710][ T6209] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.548093][ T6209] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.583255][ T6209] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.800749][ T6206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.832468][ T6206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.873068][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.912506][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.084269][T17204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3086'. [ 368.214074][T17215] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3088'. [ 368.234205][T17215] netlink: 'syz.5.3088': attribute type 10 has an invalid length. [ 368.241341][T17213] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.257135][T17213] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.447405][ T5882] Bluetooth: hci4: command tx timeout [ 368.456089][T17213] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.487870][T17213] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.705074][T17213] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.737022][T17213] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.763650][T17230] Dead loop on virtual device ip6_vti0, fix it urgently! [ 368.892443][T17213] netdevsim netdevsim5 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.935774][T17234] netlink: 'syz.4.3095': attribute type 1 has an invalid length. [ 368.944348][T17213] netdevsim netdevsim5 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.967997][T17234] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3095'. [ 368.978112][T17233] netlink: 'syz.2.3096': attribute type 21 has an invalid length. [ 369.053710][T17233] sctp: [Deprecated]: syz.2.3096 (pid 17233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.053710][T17233] Use struct sctp_sack_info instead [ 369.094193][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 369.104929][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 369.113884][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 369.128031][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 369.138103][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 369.231748][T17237] hsr0 speed is unknown, defaulting to 1000 [ 369.261723][T17237] lo speed is unknown, defaulting to 1000 [ 369.285771][T17244] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.3099'. [ 369.326625][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3098'. [ 369.358424][ T6209] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.376015][ T6209] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.393990][T17246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.403886][T17246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.419560][T17246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.427397][T17246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.494731][ T6214] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.511499][ T6214] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.561535][ T6214] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.572807][ T6214] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.582379][T17237] vxcan1 speed is unknown, defaulting to 1000 [ 369.610950][ T6223] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.639371][ T6223] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.242245][T17237] chnl_net:caif_netlink_parms(): no params data found [ 370.355627][T17237] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.363252][T17237] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.371955][T17237] bridge_slave_0: entered allmulticast mode [ 370.380060][T17237] bridge_slave_0: entered promiscuous mode [ 370.393177][T17237] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.400761][T17237] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.408136][T17237] bridge_slave_1: entered allmulticast mode [ 370.416261][T17237] bridge_slave_1: entered promiscuous mode [ 370.466487][T17237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.481387][T17237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.528992][T17237] team0: Port device team_slave_0 added [ 370.538863][T17237] team0: Port device team_slave_1 added [ 370.589789][T17237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.597469][T17237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.624353][T17237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.644403][T17237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.651849][T17237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.678327][T17237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.733097][T17237] hsr_slave_0: entered promiscuous mode [ 370.739588][T17237] hsr_slave_1: entered promiscuous mode [ 370.746271][T17237] debugfs: 'hsr0' already exists in 'hsr' [ 370.753171][T17237] Cannot create hsr debugfs directory [ 370.808886][ T6206] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.820234][ T6206] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.894829][ T6206] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.905002][ T6206] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.989418][ T6206] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.001177][ T6206] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.075558][ T6206] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.112557][ T6206] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.166726][ T5882] Bluetooth: hci1: command tx timeout [ 371.414461][T17309] netlink: 'syz.5.3114': attribute type 21 has an invalid length. [ 371.432362][T17311] netlink: 'syz.5.3114': attribute type 21 has an invalid length. [ 371.484467][T17315] __nla_validate_parse: 2 callbacks suppressed [ 371.484485][T17315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3115'. [ 371.553502][ T6206] bond5 (unregistering): (slave ip6erspan0): Releasing active interface [ 371.742795][ T6206] bond4 (unregistering): (slave geneve4): Releasing active interface [ 372.341852][ T6206] bond0 (unregistering): Released all slaves [ 372.451665][ T6206] bond1 (unregistering): Released all slaves [ 372.558717][ T6206] bond2 (unregistering): Released all slaves [ 372.575844][ T6206] bond3 (unregistering): Released all slaves [ 372.680065][ T6206] bond4 (unregistering): Released all slaves [ 372.786133][ T6206] bond5 (unregistering): Released all slaves [ 372.821814][T17309] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3114'. [ 372.831830][T17311] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3114'. [ 372.941081][T17318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3116'. [ 372.976160][ T6206] : left promiscuous mode [ 372.984824][T17320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3117'. [ 373.039033][ T6206] tipc: Left network mode [ 373.054874][ T6206] IPVS: stopping master sync thread 15415 ... [ 373.063818][ T6206] IPVS: stopping backup sync thread 8691 ... [ 373.096070][T17322] netlink: 'syz.5.3118': attribute type 1 has an invalid length. [ 373.151189][T17325] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3118'. [ 373.156530][T17322] 8021q: adding VLAN 0 to HW filter on device bond6 [ 373.249749][ T5882] Bluetooth: hci1: command tx timeout [ 373.405862][T17237] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 373.432315][T17237] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 373.449374][T17237] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 373.477454][T17237] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 373.526298][T17340] tipc: Enabling of bearer rejected, failed to enable media [ 373.782333][T17237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.835861][T17351] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 373.891675][ T6206] batman_adv: batadv0: Removing interface: team0 [ 373.907395][ T6206] veth1_macvtap: left promiscuous mode [ 374.190112][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075da3800: rx timeout, send abort [ 374.698367][ C0] vcan0: j1939_tp_rxtimer: 0xffff888075da3800: abort rx timeout. Force session deactivation [ 375.113387][T17351] bridge0: port 1(syz_tun) entered disabled state [ 375.332818][ T5882] Bluetooth: hci1: command tx timeout [ 375.680795][T17351] vlan0: left promiscuous mode [ 375.685693][T17351] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 375.774119][T17377] batman_adv: batadv0: Adding interface: dummy0 [ 375.782512][T17377] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.838763][T17377] batman_adv: batadv0: Interface activated: dummy0 [ 375.890316][T17374] batadv0: mtu less than device minimum [ 375.904075][T17374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 375.916345][T17374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 375.928256][T17374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 375.939425][T17374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 375.950548][T17374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 375.961713][T17374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 375.972968][T17374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 375.984091][T17374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 375.996035][T17374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 376.029372][T17237] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.044231][ T957] lo speed is unknown, defaulting to 1000 [ 376.050757][ T1157] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.069003][ T957] syz0: Port: 1 Link DOWN [ 376.073446][ T1157] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.115234][T17399] IPv6: sit2: Disabled Multicast RS [ 376.130122][T17399] sit2: entered allmulticast mode [ 376.206019][ T957] lo speed is unknown, defaulting to 1000 [ 376.213219][ T1157] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.228544][ T1157] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.239814][ T1157] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.248636][ T1157] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.271354][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.278616][ T6209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.299764][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.306982][ T6209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.319038][ T1157] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.328116][ T1157] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.359526][T17416] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3138'. [ 376.472503][ T6206] IPVS: stop unused estimator thread 0... [ 376.538388][T17425] syz_tun: entered allmulticast mode [ 376.554933][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3139'. [ 376.575546][T17425] dvmrp8: entered allmulticast mode [ 376.661251][T17422] syz_tun: left allmulticast mode [ 376.808759][T17435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3143'. [ 376.869857][T17237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.010519][T17448] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 377.055611][T17237] veth0_vlan: entered promiscuous mode [ 377.089346][T17237] veth1_vlan: entered promiscuous mode [ 377.183190][T17237] veth0_macvtap: entered promiscuous mode [ 377.203090][T17237] veth1_macvtap: entered promiscuous mode [ 377.230962][T17237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.262891][T17237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.331792][ T6206] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.344688][ T6206] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.405642][ T6206] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.426430][ T5882] Bluetooth: hci1: command tx timeout [ 377.427769][T17473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3154'. [ 377.440987][ T6206] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.490257][T17475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3155'. [ 377.505710][T17475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3155'. [ 377.591460][T17479] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3157'. [ 377.667640][ T6206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.675487][ T6206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.759259][T17482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3158'. [ 377.771873][T17482] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3158'. [ 377.782285][T17486] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3160'. [ 377.795819][ T6223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.825880][ T6223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.835071][T17489] netlink: 'syz.4.3161': attribute type 1 has an invalid length. [ 377.847128][T17489] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3161'. [ 377.859066][T17489] sctp: [Deprecated]: syz.4.3161 (pid 17489) Use of int in maxseg socket option. [ 377.859066][T17489] Use struct sctp_assoc_value instead [ 377.935313][T17492] xt_l2tp: missing protocol rule (udp|l2tpip) [ 377.942670][ T6223] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 378.814291][T17538] unknown channel width for channel at 909000KHz? [ 378.844415][T17538] unknown channel width for channel at 909000KHz? [ 378.874211][T17538] unknown channel width for channel at 909000KHz? [ 379.042561][T17552] tipc: Started in network mode [ 379.051857][T17552] tipc: Node identity 080211000001, cluster identity 4711 [ 379.061980][T17552] tipc: Enabled bearer , priority 0 [ 379.078225][T17550] netlink: 'syz.2.3177': attribute type 11 has an invalid length. [ 379.246294][T17562] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 379.288678][T17562] bridge0: port 3(macsec0) entered disabled state [ 379.296298][T17562] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.304045][T17562] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.653194][T17589] unsupported nlmsg_type 40 [ 379.748557][T17598] xt_l2tp: missing protocol rule (udp|l2tpip) [ 380.176444][T17389] tipc: Node number set to 134418688 [ 380.564517][T17656] netlink: 'syz.1.3214': attribute type 10 has an invalid length. [ 380.580477][T17656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.602192][T17656] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 380.630563][T17656] netlink: 'syz.1.3214': attribute type 10 has an invalid length. [ 380.647787][T17656] batadv0: entered promiscuous mode [ 380.659127][T17656] batadv0: entered allmulticast mode [ 380.684051][T17656] bond0: (slave batadv0): Releasing backup interface [ 380.700407][T17657] netlink: 'syz.1.3214': attribute type 10 has an invalid length. [ 380.718862][T17656] bridge0: port 3(batadv0) entered blocking state [ 380.726984][T17656] bridge0: port 3(batadv0) entered disabled state [ 380.740505][T17657] batadv0: left allmulticast mode [ 380.745662][T17657] batadv0: left promiscuous mode [ 380.756074][T17657] bridge0: port 3(batadv0) entered disabled state [ 380.782387][T17657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.800100][T17657] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 381.049533][T17679] netlink: 'syz.3.3221': attribute type 8 has an invalid length. [ 381.410679][T17702] net_ratelimit: 15 callbacks suppressed [ 381.410697][T17702] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 381.481873][T17702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.516641][T17706] netlink: 'syz.2.3228': attribute type 39 has an invalid length. [ 381.669716][T17701] __nla_validate_parse: 14 callbacks suppressed [ 381.669734][T17701] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3228'. [ 381.995409][T17732] netlink: 'syz.1.3233': attribute type 1 has an invalid length. [ 382.051723][T17734] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3234'. [ 382.240727][T17747] netlink: 'syz.3.3239': attribute type 12 has an invalid length. [ 382.294669][T17753] tipc: Enabled bearer , priority 0 [ 382.303921][T17753] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 382.313748][T17753] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 382.375780][T17753] tipc: Resetting bearer [ 382.382243][T17757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3242'. [ 382.551196][T17772] sctp: [Deprecated]: syz.4.3246 (pid 17772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.551196][T17772] Use struct sctp_sack_info instead [ 382.642639][T17777] sctp: [Deprecated]: syz.3.3247 (pid 17777) Use of int in max_burst socket option. [ 382.642639][T17777] Use struct sctp_assoc_value instead [ 382.701961][T17752] tipc: Disabling bearer [ 382.717800][T17784] IPVS: sync thread started: state = BACKUP, mcast_ifn = xfrm0, syncid = 0, id = 0 [ 382.746972][T17783] tipc: Enabling of bearer rejected, already enabled [ 382.776586][T17783] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 382.807616][T17783] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 382.848751][T17783] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 382.865434][T17783] tipc: Resetting bearer [ 382.872434][T17783] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3248'. [ 383.059763][T17797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3252'. [ 383.209816][T17813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3254'. [ 383.241632][T17813] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3254'. [ 383.276705][T17813] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3254'. [ 383.717931][T17845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3262'. [ 383.902964][T17857] netlink: 'syz.5.3269': attribute type 21 has an invalid length. [ 384.111020][T17876] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000 [ 384.166836][T17878] netlink: 'syz.4.3275': attribute type 1 has an invalid length. [ 384.382850][T17882] 8021q: adding VLAN 0 to HW filter on device bond3 [ 384.393467][T17882] bond2: (slave bond3): making interface the new active one [ 384.407194][T17882] bond2: (slave bond3): Enslaving as an active interface with an up link [ 384.455103][T17878] ipvlan2: entered promiscuous mode [ 384.473797][T17878] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 384.512685][T17878] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 384.731800][T17912] tipc: Started in network mode [ 384.747081][T17912] tipc: Node identity 4e0af16306bd, cluster identity 4711 [ 384.756641][T17912] tipc: Enabled bearer , priority 0 [ 384.768538][T17914] netlink: 'syz.2.3286': attribute type 39 has an invalid length. [ 384.789921][T17925] syzkaller0: entered promiscuous mode [ 384.823178][T17925] syzkaller0: entered allmulticast mode [ 384.886488][T17927] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 384.910835][T17912] tipc: Resetting bearer [ 384.947984][T17911] tipc: Resetting bearer [ 384.993122][T17911] tipc: Disabling bearer [ 385.125317][T17945] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3292'. [ 385.724417][T17975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.822106][T17979] netlink: 'syz.1.3304': attribute type 2 has an invalid length. [ 385.830374][T17979] nbd: must specify a device to reconfigure [ 386.303863][T18014] C: renamed from lo [ 386.329299][T18016] tipc: Started in network mode [ 386.342811][T18016] tipc: Node identity ac14140f, cluster identity 4711 [ 386.350133][T18016] tipc: New replicast peer: 255.255.255.255 [ 386.359601][T18016] tipc: Enabled bearer , priority 10 [ 386.611350][T18042] netlink: 'syz.3.3321': attribute type 1 has an invalid length. [ 386.627673][T18042] netlink: 'syz.3.3321': attribute type 2 has an invalid length. [ 386.875541][T18054] __nla_validate_parse: 4 callbacks suppressed [ 386.875560][T18054] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3325'. [ 387.085870][T18068] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3327'. [ 387.129377][T18071] netlink: 'syz.5.3330': attribute type 32 has an invalid length. [ 387.146105][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3330'. [ 387.148448][T18068] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3327'. [ 387.172390][T18071] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 387.421256][T18068] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3327'. [ 387.443084][T18068] tc_dump_action: action bad kind [ 387.466533][ T5885] tipc: Node number set to 2886997007 [ 387.684033][T18095] netlink: 'syz.3.3337': attribute type 4 has an invalid length. [ 388.108411][T18127] sch_fq: defrate 0 ignored. [ 388.248648][T18138] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3349'. [ 388.287311][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 388.440485][T18150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3356'. [ 388.642478][T18161] netlink: 'syz.3.3361': attribute type 11 has an invalid length. [ 388.651423][T18161] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3361'. [ 388.668619][T18161] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3361'. [ 388.870198][T18174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3365'. [ 389.029817][T18185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.036749][T18183] netlink: 'syz.4.3367': attribute type 178 has an invalid length. [ 389.089769][T18190] netlink: 'syz.2.3369': attribute type 6 has an invalid length. [ 389.453929][T18210] hsr0 speed is unknown, defaulting to 1000 [ 389.491089][T18203] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 389.505006][T18203] 0ªî{X¹¦: entered allmulticast mode [ 389.516955][T18203] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 389.559854][T18210] C speed is unknown, defaulting to 1000 [ 389.603907][T18203] syz_tun: entered promiscuous mode [ 389.670391][T18203] syz_tun: entered allmulticast mode [ 389.694565][T18225] netlink: 'syz.3.3378': attribute type 4 has an invalid length. [ 390.251867][T18210] vxcan1 speed is unknown, defaulting to 1000 [ 390.366729][ T51] Bluetooth: hci1: command 0x0405 tx timeout [ 390.378125][T18266] nbd: must specify a size in bytes for the device [ 390.610496][T18284] sctp: [Deprecated]: syz.4.3399 (pid 18284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.610496][T18284] Use struct sctp_sack_info instead [ 391.159006][T18298] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 391.412479][T18322] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 391.465840][T18320] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.488690][T18320] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.504473][T18327] netlink: 'syz.4.3411': attribute type 1 has an invalid length. [ 391.586695][T18332] netlink: 'syz.3.3408': attribute type 16 has an invalid length. [ 391.613365][T18332] netlink: 'syz.3.3408': attribute type 17 has an invalid length. [ 391.622267][ T5885] vxcan1 speed is unknown, defaulting to 1000 [ 391.682508][T18336] rdma_op ffff88802d88c9f0 conn xmit_rdma 0000000000000000 [ 391.848837][T18332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 391.999965][T18333] hsr0 speed is unknown, defaulting to 1000 [ 392.050424][T18333] C speed is unknown, defaulting to 1000 [ 392.065406][T18351] __nla_validate_parse: 11 callbacks suppressed [ 392.065425][T18351] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3416'. [ 392.353022][T18366] netlink: 'syz.4.3420': attribute type 2 has an invalid length. [ 392.829411][T18382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3425'. [ 392.877654][T18333] vxcan1 speed is unknown, defaulting to 1000 [ 393.014282][T18389] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3427'. [ 393.062307][T18396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3430'. [ 393.494778][T17382] IPVS: starting estimator thread 0... [ 393.606454][T18425] IPVS: using max 34 ests per chain, 81600 per kthread [ 393.715199][T18436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.878659][T18443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.061837][T18448] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3447'. [ 394.093355][T18449] ip6gre2: entered allmulticast mode [ 394.120031][T18453] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3447'. [ 394.139380][T18454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3449'. [ 394.163495][T18457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3449'. [ 394.473229][T18472] TCP: TCP_TX_DELAY enabled [ 394.499630][T18472] syzkaller1: entered promiscuous mode [ 394.516584][T18472] syzkaller1: entered allmulticast mode [ 394.984794][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3468'. [ 395.142061][T18520] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3468'. [ 395.545043][T18522] tipc: Enabling of bearer rejected, failed to enable media [ 395.832956][T18543] netlink: 'syz.4.3476': attribute type 8 has an invalid length. [ 395.962442][T18552] netlink: 'syz.1.3479': attribute type 18 has an invalid length. [ 396.190764][T18573] netlink: 'syz.2.3484': attribute type 1 has an invalid length. [ 396.202804][T18573] netlink: 'syz.2.3484': attribute type 1 has an invalid length. [ 396.534376][ C1] ------------[ cut here ]------------ [ 396.539955][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 396.550773][ C1] WARNING: CPU: 1 PID: 16811 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 396.560923][ C1] Modules linked in: [ 396.565158][ C1] CPU: 1 UID: 0 PID: 16811 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 396.574749][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 396.584880][ C1] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 396.591264][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 20 85 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 e2 f0 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 396.610961][ C1] RSP: 0018:ffffc90000a08538 EFLAGS: 00010246 [ 396.617164][ C1] RAX: e895faa9df71e000 RBX: 000000000000000c RCX: ffff8880287d5a00 [ 396.625181][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 396.633184][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 396.641287][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff888075cd9de8 [ 396.649397][ C1] R13: 0000000000000000 R14: ffff88806c1d0e40 R15: ffff88806c1d30d8 [ 396.657416][ C1] FS: 0000555564d5c500(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 396.666480][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.673177][ C1] CR2: 000000110c2fcded CR3: 000000002f82c000 CR4: 00000000003526f0 [ 396.681215][ C1] Call Trace: [ 396.684516][ C1] [ 396.687425][ C1] rate_control_send_low+0x194/0x7a0 [ 396.692737][ C1] rate_control_get_rate+0x20b/0x5d0 [ 396.698090][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 396.703950][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 396.710600][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 396.716001][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 396.721785][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 396.727469][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 396.733459][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 396.739030][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 396.744600][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 396.750159][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 396.755697][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 396.761276][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 396.766784][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 396.772878][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 396.778468][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 396.785691][ C1] __iterate_interfaces+0x2a8/0x590 [ 396.790926][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 396.797049][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 396.804264][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 396.810348][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 396.817394][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 396.822601][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 396.828483][ C1] __hrtimer_run_queues+0x529/0xc60 [ 396.833701][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 396.839441][ C1] ? read_tsc+0x9/0x20 [ 396.843517][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 396.849339][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 396.854547][ C1] handle_softirqs+0x283/0x870 [ 396.859422][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 396.864191][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 396.869530][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 396.874736][ C1] __irq_exit_rcu+0xca/0x1f0 [ 396.879347][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 396.884575][ C1] irq_exit_rcu+0x9/0x30 [ 396.888837][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 396.894472][ C1] [ 396.897440][ C1] [ 396.900379][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 396.906397][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x37/0x90 [ 396.913267][ C1] Code: 08 80 a0 92 65 8b 0d 88 cd e0 10 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 3c 16 00 00 00 74 52 8b 8a 18 16 00 00 <83> f9 03 75 47 48 8b 8a 20 16 00 00 44 8b 8a 1c 16 00 00 49 c1 e1 [ 396.932899][ C1] RSP: 0018:ffffc9000f5cf340 EFLAGS: 00000246 [ 396.939010][ C1] RAX: ffffffff822e572e RBX: 0000000000000001 RCX: 0000000000000000 [ 396.947025][ C1] RDX: ffff8880287d5a00 RSI: 0000000000000001 RDI: 0000000000000000 [ 396.955039][ C1] RBP: ffffea00019ed640 R08: 0000000000000000 R09: ffffffff822e56fd [ 396.963067][ C1] R10: dffffc0000000000 R11: fffff9400033dac9 R12: ffffffff822e56fd [ 396.971060][ C1] R13: 0000000000000000 R14: 1ffffd400033dac9 R15: 0000000000000001 [ 396.979052][ C1] ? page_table_check_set+0x18d/0x730 [ 396.984427][ C1] ? page_table_check_set+0x18d/0x730 [ 396.989816][ C1] ? page_table_check_set+0x1be/0x730 [ 396.995198][ C1] page_table_check_set+0x1be/0x730 [ 397.000797][ C1] copy_pmd_range+0x4439/0x71d0 [ 397.005683][ C1] ? try_charge_memcg+0x22a/0x1290 [ 397.010827][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 397.016105][ C1] ? refill_obj_stock+0x116/0x850 [ 397.021186][ C1] copy_page_range+0xc14/0x1270 [ 397.026029][ C1] ? __lock_acquire+0xab9/0xd20 [ 397.030934][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 397.036222][ C1] ? up_write+0x1c4/0x420 [ 397.040564][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 397.047368][ C1] dup_mmap+0xf57/0x1ac0 [ 397.051656][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 397.056388][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 397.062290][ C1] ? mm_init+0xcc3/0xef0 [ 397.066574][ C1] copy_mm+0x13c/0x4b0 [ 397.070651][ C1] copy_process+0x1706/0x3c00 [ 397.075346][ C1] ? copy_process+0x97f/0x3c00 [ 397.080250][ C1] ? __pfx_copy_process+0x10/0x10 [ 397.085293][ C1] kernel_clone+0x21e/0x840 [ 397.089834][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 397.094961][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 397.100041][ C1] __x64_sys_clone+0x18b/0x1e0 [ 397.104816][ C1] ? count_memcg_event_mm+0x21/0x260 [ 397.110222][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 397.115556][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 397.120895][ C1] ? do_syscall_64+0xbe/0x3b0 [ 397.125583][ C1] do_syscall_64+0xfa/0x3b0 [ 397.130100][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.135291][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.141400][ C1] ? clear_bhb_loop+0x60/0xb0 [ 397.146120][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.152029][ C1] RIP: 0033:0x7fdbc1785413 [ 397.156562][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 397.176218][ C1] RSP: 002b:00007ffd765114a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 397.184785][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdbc1785413 [ 397.192812][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 397.200819][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 397.208823][ C1] R10: 0000555564d5c7d0 R11: 0000000000000246 R12: 0000000000000000 [ 397.216829][ C1] R13: 00000000000927c0 R14: 0000000000060c52 R15: 00007ffd76511640 [ 397.224844][ C1] [ 397.227901][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 397.235200][ C1] CPU: 1 UID: 0 PID: 16811 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 397.244728][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 397.254776][ C1] Call Trace: [ 397.258072][ C1] [ 397.260913][ C1] dump_stack_lvl+0x99/0x250 [ 397.265496][ C1] ? __asan_memcpy+0x40/0x70 [ 397.270073][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.275262][ C1] ? __pfx__printk+0x10/0x10 [ 397.279853][ C1] vpanic+0x281/0x750 [ 397.283825][ C1] ? __pfx__printk+0x10/0x10 [ 397.288423][ C1] ? __pfx_vpanic+0x10/0x10 [ 397.292911][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 397.298197][ C1] panic+0xb9/0xc0 [ 397.301906][ C1] ? __pfx_panic+0x10/0x10 [ 397.306326][ C1] __warn+0x31b/0x4b0 [ 397.310308][ C1] ? __rate_control_send_low+0x5df/0x820 [ 397.315928][ C1] ? __rate_control_send_low+0x5df/0x820 [ 397.321551][ C1] report_bug+0x2be/0x4f0 [ 397.325878][ C1] ? __rate_control_send_low+0x5df/0x820 [ 397.331500][ C1] ? __rate_control_send_low+0x5df/0x820 [ 397.337120][ C1] ? __rate_control_send_low+0x5e1/0x820 [ 397.342740][ C1] handle_bug+0x84/0x160 [ 397.346973][ C1] exc_invalid_op+0x1a/0x50 [ 397.351462][ C1] asm_exc_invalid_op+0x1a/0x20 [ 397.356302][ C1] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 397.362551][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 20 85 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 e2 f0 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 397.382167][ C1] RSP: 0018:ffffc90000a08538 EFLAGS: 00010246 [ 397.388239][ C1] RAX: e895faa9df71e000 RBX: 000000000000000c RCX: ffff8880287d5a00 [ 397.396207][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 397.404176][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 397.412571][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff888075cd9de8 [ 397.420643][ C1] R13: 0000000000000000 R14: ffff88806c1d0e40 R15: ffff88806c1d30d8 [ 397.428714][ C1] ? __rate_control_send_low+0x5de/0x820 [ 397.434448][ C1] rate_control_send_low+0x194/0x7a0 [ 397.439746][ C1] rate_control_get_rate+0x20b/0x5d0 [ 397.445070][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 397.450896][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 397.457321][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 397.462695][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 397.468410][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 397.474090][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 397.480074][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 397.485617][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 397.491172][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 397.496717][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 397.502258][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 397.507812][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 397.513268][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 397.519349][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 397.524885][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 397.532158][ C1] __iterate_interfaces+0x2a8/0x590 [ 397.537342][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 397.543396][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 397.550587][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 397.556644][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 397.563661][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 397.568854][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 397.574661][ C1] __hrtimer_run_queues+0x529/0xc60 [ 397.579875][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 397.585584][ C1] ? read_tsc+0x9/0x20 [ 397.589652][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 397.595449][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 397.600549][ C1] handle_softirqs+0x283/0x870 [ 397.605307][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 397.610076][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 397.615435][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 397.620730][ C1] __irq_exit_rcu+0xca/0x1f0 [ 397.625325][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 397.630517][ C1] irq_exit_rcu+0x9/0x30 [ 397.634749][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 397.640555][ C1] [ 397.643470][ C1] [ 397.646386][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 397.652439][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x37/0x90 [ 397.659280][ C1] Code: 08 80 a0 92 65 8b 0d 88 cd e0 10 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 3c 16 00 00 00 74 52 8b 8a 18 16 00 00 <83> f9 03 75 47 48 8b 8a 20 16 00 00 44 8b 8a 1c 16 00 00 49 c1 e1 [ 397.678887][ C1] RSP: 0018:ffffc9000f5cf340 EFLAGS: 00000246 [ 397.684972][ C1] RAX: ffffffff822e572e RBX: 0000000000000001 RCX: 0000000000000000 [ 397.692942][ C1] RDX: ffff8880287d5a00 RSI: 0000000000000001 RDI: 0000000000000000 [ 397.700920][ C1] RBP: ffffea00019ed640 R08: 0000000000000000 R09: ffffffff822e56fd [ 397.708909][ C1] R10: dffffc0000000000 R11: fffff9400033dac9 R12: ffffffff822e56fd [ 397.716874][ C1] R13: 0000000000000000 R14: 1ffffd400033dac9 R15: 0000000000000001 [ 397.724839][ C1] ? page_table_check_set+0x18d/0x730 [ 397.730214][ C1] ? page_table_check_set+0x18d/0x730 [ 397.735586][ C1] ? page_table_check_set+0x1be/0x730 [ 397.740971][ C1] page_table_check_set+0x1be/0x730 [ 397.746185][ C1] copy_pmd_range+0x4439/0x71d0 [ 397.751052][ C1] ? try_charge_memcg+0x22a/0x1290 [ 397.756188][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 397.761397][ C1] ? refill_obj_stock+0x116/0x850 [ 397.766461][ C1] copy_page_range+0xc14/0x1270 [ 397.771315][ C1] ? __lock_acquire+0xab9/0xd20 [ 397.776185][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 397.781467][ C1] ? up_write+0x1c4/0x420 [ 397.785800][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 397.792658][ C1] dup_mmap+0xf57/0x1ac0 [ 397.796921][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 397.801605][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 397.807581][ C1] ? mm_init+0xcc3/0xef0 [ 397.811823][ C1] copy_mm+0x13c/0x4b0 [ 397.815897][ C1] copy_process+0x1706/0x3c00 [ 397.820577][ C1] ? copy_process+0x97f/0x3c00 [ 397.825336][ C1] ? __pfx_copy_process+0x10/0x10 [ 397.830356][ C1] kernel_clone+0x21e/0x840 [ 397.834849][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 397.839949][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 397.844983][ C1] __x64_sys_clone+0x18b/0x1e0 [ 397.849738][ C1] ? count_memcg_event_mm+0x21/0x260 [ 397.855012][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 397.860323][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 397.865609][ C1] ? do_syscall_64+0xbe/0x3b0 [ 397.870280][ C1] do_syscall_64+0xfa/0x3b0 [ 397.874775][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.879964][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.886020][ C1] ? clear_bhb_loop+0x60/0xb0 [ 397.890692][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.896570][ C1] RIP: 0033:0x7fdbc1785413 [ 397.900977][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 397.920576][ C1] RSP: 002b:00007ffd765114a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 397.928980][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdbc1785413 [ 397.936944][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 397.944907][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 397.952868][ C1] R10: 0000555564d5c7d0 R11: 0000000000000246 R12: 0000000000000000 [ 397.960834][ C1] R13: 00000000000927c0 R14: 0000000000060c52 R15: 00007ffd76511640 [ 397.968816][ C1] [ 397.972143][ C1] Kernel Offset: disabled [ 397.976450][ C1] Rebooting in 86400 seconds..