last executing test programs: 11.19073187s ago: executing program 1 (id=3021): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000980), &(0x7f0000000a00)=0x68) sendmsg(0xffffffffffffffff, 0x0, 0x20000004) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r2, 0xffffffffffffffff, 0x0, r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x206ea, @dev={0xfe, 0x80, '\x00', 0x33}}}}, &(0x7f0000000200)=0x98) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r6, 0x25, 0x17, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r10, r1, 0x0, r1}, 0x10) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r12, {0x0, 0x3}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x7, 0x2, 0x7f}}]}, 0x38}}, 0x4048010) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x9c, r9, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_method={{}, {}, {0x0, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0xfffffffffffffcc8}, {0x4}}, {0x8, 0x6, r12}}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x4004000) 10.864440792s ago: executing program 1 (id=3027): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(0xffffffffffffffff, 0x0, 0x20000004) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r2, 0xffffffffffffffff, 0x0, r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, r8, 0x809, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r6}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="1c005a80180001801400030024000700080001000800050002dd0f"], 0x38}}, 0x0) 10.528114746s ago: executing program 1 (id=3030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="0900000000000000000000000800010000000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x80d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000e2ffffffff36000000080001007063690011000200303030303a30303a31302e300000000b08007300000000000e0001006e657464657673696d0000000f00025aa0ed45a2c9ddff74ccc221d453006e"], 0x9b}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000540)={0x6, 0x0, 0x200, 0x5, 0xeab, 0x4, 0x1ff, 0x10001, 0x0}, &(0x7f0000000580)=0x20) setsockopt$inet_sctp_SCTP_AUTH_KEY(r11, 0x84, 0x17, &(0x7f0000000880)=ANY=[@ANYRES32=r12, @ANYBLOB="0f005d00ec6be8352778e926a77d220d3ce273e464ffb889364a6c17bc7926da2e656e701313271e8d6bceb96525ae7a1556f75e59c9415bccfb393847a5fdd81e01041e61698f05642cb551f0e20db7e866374f7c6454924f3260ebb119e0b9752df498ac20a7a44f8abd5969da108dc3c4742f635ae0969c6d4f1f82ed4ea03bc5e278aa457dcb1c5e54a4b3744fae03d86a"], 0x65) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000340)=0x0) r14 = gettid() r15 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/mnt\x00') sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="68010000", @ANYRES16=r7, @ANYBLOB="020026bd7000fedbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008c00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r8, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r9, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0000000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r10, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r13, @ANYBLOB="0e0001006e657461657673696d0000000f0002006e657464000008008bce3306bc343afd", @ANYRES32=r14, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r15, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=0x0, @ANYBLOB], 0x168}, 0x1, 0x0, 0x0, 0x20000884}, 0x40) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000200)=0x30) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000040)='\x00', 0x1) 2.836924602s ago: executing program 2 (id=3129): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003335a0000000500030000000000050003008000000005000300020000000800020003"], 0x50}}, 0x0) 2.723623197s ago: executing program 2 (id=3130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xffffff10, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r4, 0x101, 0x6, &(0x7f0000000080), &(0x7f0000000000)=0x4) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x5, 0x0, 0x8001, 0x1}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000002480)="3c00000058001f000307f4f9002304000a04d6490800010002010002070003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) 2.572380592s ago: executing program 3 (id=3132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv4_delroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0x14, 0x8, {0x8}}, @RTA_FLOW={0x4, 0x10}]}, 0x30}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000680)="170000000200010000ffbe8c5ee17688a2006c000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded241482cfe17c3778a", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local}}}}}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r1) 2.415506113s ago: executing program 3 (id=3133): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x248, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x2}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xa1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1b4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x64, 0x1, [@m_mirred={0x60, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0x11, 0x6, "d527360c37d81b077c369a3b45"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x13c, 0x1, [@m_ctinfo={0x138, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x9fb, 0x1, 0x5, 0xd, 0x7fffffff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0xea, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7f768d299cf02a379f46bdc6682f28a257745a6d3ef46b8f9de69a946bbf1ee9dcd47e35fd96ce64d20d45afb7c448a0482449961a6539ce9b8"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x248}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x100000000000001, 0x12) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x2, 'nr0\x00', {0x3}, 0x8000}) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x248, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x2}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xa1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1b4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x64, 0x1, [@m_mirred={0x60, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0x11, 0x6, "d527360c37d81b077c369a3b45"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x13c, 0x1, [@m_ctinfo={0x138, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x9fb, 0x1, 0x5, 0xd, 0x7fffffff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0xea, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7f768d299cf02a379f46bdc6682f28a257745a6d3ef46b8f9de69a946bbf1ee9dcd47e35fd96ce64d20d45afb7c448a0482449961a6539ce9b8"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x248}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000240)=0x100000000000001, 0x12) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x2, 'nr0\x00', {0x3}, 0x8000}) (async) socket(0x10, 0x803, 0x0) (async) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) (async) 2.348309612s ago: executing program 2 (id=3135): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_getaddr={0x6c, 0x16, 0x100, 0x70bd29, 0x25dfdbfc, {0x2, 0x8, 0x20, 0x0, r3}, [@IFA_LABEL={0x14, 0x3, 'wlan0\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0xdd60, 0x800, 0x3}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_FLAGS={0x8, 0x8, 0x7d0}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @IFA_LABEL={0x14, 0x3, 'pimreg0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x8080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}}, 0x20}}, 0x30040810) 2.222753812s ago: executing program 2 (id=3137): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r7, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r8, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000000540)={0xa, "eba722c8aa9faefb3d0eb5c113c9de0f1073b200b9e3406c27edd56061311feb5b5251e379812786f280a6a93af62a3db6859e7547fe9ecc8da4be3b9143e189cdcd00f2a9d6065931669b89144153bbce737e5c65eb6886b1aa6f652149298d2b867d8cbf3d99c128616f1318928e922b6aec3241738250bcf78220e205ac83"}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x1e}, @val={0x8, 0x3, r9}, @val={0xc}}}}, 0x30}}, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}]}, 0x24}}, 0x0) 2.096201883s ago: executing program 0 (id=3138): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (rerun: 64) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x9}, &(0x7f00000001c0)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e20, 0x8001, @mcast2, 0xfffffffc}}, 0x4, 0x0, 0xc930, 0x8, 0x6}, &(0x7f0000000140)=0x98) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffbd}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) (async, rerun: 64) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8000) (async, rerun: 64) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$tun(r6, &(0x7f0000000b00)={@val={0x0, 0x8100}, @void, @mpls={[{0x5, 0x0, 0x1}, {0x5}, {0x3, 0x0, 0x1}], @ipv6=@gre_packet={0x3, 0x6, "5d8d6d", 0x1385, 0x2f, 0xff, @loopback, @dev={0xfe, 0x80, '\x00', 0x1e}, {[@dstopts={0x84, 0x13, '\x00', [@generic={0x1, 0x70, "cd021b29bfed0ea3a8619c858d6c4ccf36592889d8cd09db2b64a2df34defdad8cabfa9d74e8f86736b316f37bf3f2d2ecd7d29c320ffca7345022ffa7c9c4ca3b5a56b35af5babc459f722d6476a342334cdddf77ddfbae7cdac2b7c6286d360ecc8ed692d92ab682db48b727e4bd95"}, @ra={0x5, 0x2, 0x8000}, @hao={0xc9, 0x10, @remote}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}, @srh={0x73, 0x6, 0x4, 0x3, 0x8, 0x20, 0x7b, [@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0xc}, @loopback]}, @routing={0x67, 0x6, 0x0, 0x2f, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x38}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1000, 0x1, [0x0], "e966f665dc9b39b3e2363d3debc29a429b3106f773735b2d2a4f96e4f58b09e29a00ad6a0b5a725e7a2102829510d308bf4c98bcf22414d6cda2891563d3cc9bc2c43ca739f8da29cac0f2677590835758049814c5aecca809316fa2dde9e76e7d75dab36509f7f77af9d2eb33bdebbde682fd5154bc94ae76f6d1eb32a13e5a7267f893b937ca1c740efc1076965c617c3e62e9808616bc054f650b3e98a3aad7435cf7f46be796b309e08244e7f557e1bee94bd04bcef4677dd14714ba71348cdaeca4abca0a2109a0c35ea3bef030835c377af334535d0ffbfdc87da7e28c950ee298601feb2a9738d23dc61c4f7258247b11dc6087e9f1f600031238e7abd6041903476287f9ff1109f8b3eba9be959973a5b5c998f7c7d9b1c719ed6af1690ba4a26ed91bcf9dff485d46ead6ec8440bf67049d83c6926df3b75e6baf9c15c8498e077b81a243115c301922f18caf4ad53cbeb14bc2b3f83eaeb11ec0c53c1bc3f08492b1e8d2c91e7d45864b83f40be127839b621f8052c7dcc75e228e9d1b60faffe0678f4ceadfc9536954544eee5beb66a60e9cb9a71df8b8abe67f60240827b4bbe16d6f604420c7833815d83bbaff3928b8c4762be6db30c0c2b80fa8e75782de175ccafa56fcfe9795b9ebb4bfaa390f32f82173785c0cca978a2a9ad67fdb68629fb29057b6e74450f21afa525d196f395c14f2b25870226126bba632a036086ce4abb93e339556906b0c6a6fcac62173d81bc28b7b22eb14e202e8584bb328241052a7fd7db04251f756ad08d1f06fec30194338fbe58a9112c12df264fef54463279f440c975bcf18b36fc335901cd5d6468ccde07bf7b0daf2a5b0b2d8f8652ef9f13629704b605cf642133663dfc0dc3769ae13084e68e683a175ed81f5f9dd4083d55cec9a66e1da35d8521e14b73432d5ff429d1f0417188a9595e440d0d95dac0f92893b033f84f939cdd68064eb9ede02220aaff2b58bb3ee1f08311f32be48171a981c7ea83a0cfa3b13168d8d539ce6889d3cf10821e44879e1042ba7061e84eff3692b14c98d845606f22467ee189b954f8aef273676f246c80005ed66f474f63f657942e4a5f202ec04fcd4617d0152ed078b1c46f80f1a94d0427d79de202f3a131b973f39624b7f0786340b4f6f7a2593cee605394668f1dc998369ec81fe1834fde9373d3fcec585df355a27a357457f06a61ccd730b971715d5e74f8580cb24b54674664a667b71ef2d07aab84f17da3dc9689be5820f7faf5edb7fc6f5fedf3bed264209798a05bc8c4b343b34c89c367caa23c3e0ce9fb6fb468e0619658eabb461edc754462f0284d29b5ac0b14a003f5a47eabd60886836b5bc5c47a85532e6c06ddb71bb6b51a0858525de78baaa1bc49a06f91c7ba6d97832653af1f29140f67dcfae20f0a1e54e24173c9adae98c39d2b53811e75f94c73339631887a0c863f0752c6f80c57c184dd0a5b6011e89eaccfc74e00461c7cfb779ffea83c176d106a34929c7c964f1f23b2df9d19d463115b93eb4e2a639c5620656bf7585e9e157965fd82b39ae751b44f120795ab89069dd75d6316a8aee985b38add5eb12118c97392c0bf0319873cba76bdf07b72fccb1fe8fa08142d40428699169d19377706cd5f1fbb0c9a2147bac7f8ff2fc1b19a7076fce69e32c8f41d28f97b4eaeb6d5954fca376fd87136f811016699e5912a09f4cac5efb7508c5ca0b11a6f7826d7e4d9d2164a09f63cf6596113bb587355a5d67b54892245ae11178df9c85509ded250ed3b0d8af78750359f609a9ca8b12b3eff0cafe915db7a0789e196d86729f8cb975d3fd73ca5643120a3d2b7c52107e5d8fb283c5306769c134aa5895e4070f8b6e92b463b63f163cdb8ce25a197f844d556ed08275e12e9725e667d3b56cbf31d94a955261f855e1af9dbb60d39e5f60de18a0a3ea1184579abb3f5d826bca7ad306cb07efeb494038f2310b21a62c0a6f896a0fb9a205ba877747f19218310616d58d91437f4dfc6050d7cdbdd95eb28b7f1ab5231393e17c7929395ae86c8d4e04c30acfe68651963ed1b75e78f06c12795e4c0c943ba6c65cdd05a4781b113cd965a62e57dda448db0f9267f08ecd4d7f40206658cd44d1fe62f891afe562234194c65f8ea9adaf5b46a9147dbbc5c4cef667b591da9105aa6a9792e059e3f1749c99ec1e68ea79dd73b57030001422ac88bacf11ff9945f1fd9857c3cbe9af303808ea0ee0236c506ff39cde248b31470ae7c8f03108cd1c825f29c89f75ee3bbdf499b27c0880b21f3989ee7da7916d12c98bc411dd817801abd6000de0255a31ed738fc8867523a60c59f74ccedc9ad68280efd5cd01afc437ae6ad0f3d3d37a5c4ae79bd758cda95caad1cd13ac509aef989a3fc3814a312f641db189ec39f535fa15340c3c34099217d0bf9ef7d9f35c6608945c3ca94f5d4f97a4fc5c4312d117b3001bad7d8caab6a308bc927ead6ace97e94676dc537fff3de28a7e1621549b13d85d37ce1a7b9f991fb3cb066d2407321e41629a46b302697a5f3bc2560ad637a2f0fba4047d37322d0541edeaa45fb62979917060e134becd2178c24cec8934a811d4fb7933f2b42b8032415492eafb87c0c0f2a00ce0c1ecf83b09f7825ccb4a281177e70e72ddb7903fedcd1bab392a1a21ed3891d915a7f37a8fe1dc20cfd71c1aadf453bb545d9d93a91f6255dc50fc30ceb98a146982ba6191fd8cc2962cb159e30adeb733b82661a355ef3e787ec1bdc0a15ec96902a65e42a2fce8ee7bef613daa05cdc47d8fa28cdcdf467e6ccec87b928cfee24b92a5c3e0e248af48cd4f6eb471047ba11385c753cb741d6e8792f46e1ec3e8a91e911f10f0ea1c934a964daa10585eef6d0a98cc45672ef454d7610774640c266eb88f113d0b8e84b47f3351a52cf3d58cd8990e629f11dd684dd9a9a9f5534369dea79419fc3c5b7255a003c8d1c28b1ba1b8e2b2455779791037f40ae3d7174ec1c608b42193a9361c069cb5899b86b1c63270ac14365d4fd37c0e79efcbc0a905dc87b9391324a3f894a3a8c1d929caa00349b0ee1f681d0d18454b16873e0dcdcbb209703500bd4c9fc1556938f4b3016b78c67df49ff9cddc4334a657a8a7611f97eea1ba81fe73ddf92a4d47119414700c2ec0f9cbfd6762e98105dba4a2e9d479506e0f04e2f26e88ec834ab0272c7b4660d21d7d497c13a663dbd56f75e6ff239eb210f5c7543b5119ef90fb566e2c0fa88b2adf1594c87c0f2d0ae8dca7ffcdc75a9b3b3089e1f31f4523aa1e47abeb78469febc05ecf90a13cd0f032d0ea6b26169f2c8be5d983604cfe0fd5e88b1262b0e583d14ea8200305b34c0a31c30d7ec51db5b1482ab394a3028be3542fea10e740d50bd063ba9e1e03fac2731c3c47e4b62759f4d8f946ab1cd00197f080e66f628db6145976d7678ffba28cecf0d3e596313d18864c38004207704f225e9c05f8f6c0afedaca117553030bdf8eed492c71db171b5ebb5115ee8e8942f3a4328ccd5a2ecab6ed23ff53a8c23f64c2cfd9815e6aa5cb5a5d56378384c0936ce2cbf0c35b0acf99c55050412b82a0809f7fecfd72d87f25e9794fbd1193cef611730d1b387f69a1a82f23759991128f796061940523fcd4ad3ab9a8a6884de1446c76a03ac1b6df20190b54fe2278e33278e6c3b2f1340941cdee476f923b6e0448427be8054f84648f51ca1f4f97cfc7e442f191ff9b97961f52156a2fe0874adba728c124f9f17a0ca704372666df59f6bf4543e2208e692f490d35c827fdb58c21e74329d81ef99ee86aea82b097c22cbd5e25717214899f3aa9c5b6f9f352b5f1041740d902f101790c93757d6802fae2e12c74ba3353c9e06f7622ea5020af016f02e802eda81d107edc41be873574d70ce378f5430ac69bfdb8f6da73b4c66b622ffefa7cc2c14704603fe12a7042d7d59d5710262d44ab9067d30f085fe97f89db371bb98b5403b5df0b02b911c982f44908020e76293864ccaa53fe9f0620481a33bc0d226784e835fe1d44d234aa95d713407f13cb2b8e2ca28886051a5d8e94ed5761c6a8b54cb761dc169f0394c7cfad26de8d7444b8bcd04a207275e59c3e19b08e78349d1c85670c56310e8eafb6d066fe43a4ae8b8ef5edeb3958b2c5324cfc345b7832760bec7a8957b854e044eb6feceeda9c46f3aba8eba62a69d238b771b26fce6fddc5f68ed6453e011586c27a133329bfae5f92268bec004b9ff7581eac23937607a149f758ab832490ac928c6d9f751d39ede450257d6e4038427ae66bbc0a70c4cc77f418dd17ea3cfa84b28a70e3485bf68629a179ffaed2d46811219b7057b77ff6c05824c1b4969529f27cdf69d28d08c2af4545ef13a1befff5360dd9c20aa4217d23d820548aedd58e095359eb09a8d96b0010d2f805a096ad05df641c4710cd332805f217c067040330db0655c6d08657ed999c1ecd37294edf0db0f9ee59cf6fb390e409fab03afe6db921dd4394c35840b2a7aeb9617dbf87075f099cae07d92064202c65b666564e0249cf9208474a8ec1aa344ce5947fd47c30a4ab968b6b70dfe92bfbc1c44f07c1c1d3d9fdb68dd9a1ec56d23a80b3f41fda2df6d4b67180729b559f8217e687db6c90abcfc937acd4cd7a77ba84a1860c87d007bcae7c22523abc75a9c48f600af6a4467bc66b56cece2bf18dc397a38bf9efdbc173fe2cac6cd0db579eab74fb7befcdda5a56f1072630c77e9817aa89ffe8bedec759e4ba2cebf72aa4430ffc99c78af18ea521fa33828479e84250ca9a6e5b4989f3db42e8a8855cb0ccca5a8b04842a2fd58301858bf30772cd9e94eecc34d1e33f79a71c9057d54927c4f84615b688adce0ec9b12c142e7c3810c54e0a1341b2182a856d4d75dca1fcc35232dd264f369dee4ab1beb1431dc82ce6c78676f3d45de9826661f3ea0c62fd48b0f9518bd0abede6b5756a158252b74c6ede6940fa0cbed8309c0da2917ef798ce65bcecb291aad9255087ec8e5c32000dd2ac884a428f6539bdbf532a71806098cec3a3558a124cbc0cf53d2b76ff2e7ac47a3d0aacb084cfd3a2b3f7d6dacd4b983f7df7ffda2cf80cd823763acf0861839107c1a2f2842bc6ed5a0b05a71f9729c6a32eecc7430a552e7201100f0a7d5e93f2f5977249d4707d093c62c33402e664d1633b7dcaf1cb7cfd7de2584aa232747afa77fa44b61c211cf9ef9d08776bc50771288558cace4f57da8f359eca40c9e805d1962f2e4c19f9bc758b7ab047a2fcacb238fd8d72ee1c89b7cc376e89edf3725ea3d0527215c5564ea3334c9e570d5bc1f7759133a92d38db70be42af4320fb944cd1e0b0359503e00bd929b2733c994acf6676fa0d8b52288646a26b13b4b5e305daf59b06ee42cc6e7bcf9feae3d2c9142999769353d2feedc10544554f1ed65a0b68b7cec97c3348b10254c220bad45eacdb921e2367fbf6b4fb427cf5ef78726572978ef01a0e163ba91d435a3f7e87cffe9381720b81023eef9ed6751f413ef1ff700ef2f1712af5beb3da6a5e5c563065d5fe40a0dffebd23eeb7d8cf8fe7daabcd230ba8e2edd43a601cded1eb7f20857d9ac92494698ce1364a8c5155d2a234c1e8f3aada7bcf664542489d27cbd9b1a2c5f24c1d4025d90b813ce07805119612dfaed95402573bf2a41dc90550295c55899882f4e381ff81603a3cc5790405f908f254fdc3c6c40927f0eefa5dfdfe04eeb1cd24b549d34cf42554b3d03ca3fcc6af78157"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x3, 0x3], "a9b9d60afb6d037aeca66c035fafcbd1f70d2dd511c337fb79f7b95cc3d79bc8f38e944bfa26f84b51aa82f3f979a41a7b5fa840d4c4c0e141e45958dacced3c17dbdf6abe38be1ab0db3423bff319dfb0ee4ad3a79f09fa5ca38f0d5071ed126140889f6277bad3a55636cafd899bcefd773f0993667fb4f57cb77de71d46f9af762d795cedbb400a6b7d9697928a8dcf76333fa13a9e4f92e0a3847e00f61a04a3ebbf2550f41531c3ddcf4786e42f6ed03004d8131a"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x400, 0x88, 0x308], "de12dc275197c4a07fe9b2758af6591863990e78db15daf92195067345ce93311cc2cb8f6748039af7c44636992ffc45943ef813931ecae34ca998b378e7a4e0d87bbca37ceadcfb667d141281ca96a02a82f170cd033893664a6d838b637203e6ce5129d654732cce8c6d9bac7cdb3f9297856b0f87d38110"}, {0x8, 0x88be, 0x2, {{0xe, 0x1, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x2, {{0xa, 0x2, 0xff, 0x3, 0x0, 0x0, 0x3, 0xfa}, 0x2, {0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "b1f100a3aa8777e786122b32a18ecaf47607f30e2a4699b88dbe72f8532091fd0d5b3380f3956fb8281249380a4fa3d47e5b7371f875efe5273760e66b61835cca2be682505f671efe65e380ce2e73984204fe5dccc52f1e9ffda88bf894054fefe20e19f268cd0ca1447b87b34923b841a98c0c8a9d270175dbf890d5dcf78bdd9702eca5ced7a412d9068972565e4f4a60ce1ee6176d34b40abf1f0d66a02c53a0b73b0569560b1e9f228c26620cb121c2514c86f087c1856e1b92c3a5893298d0a40d0360ae479dcaded6bb5756c53d0003e96c88f8e21e8ae73ff3631401062b4a955112bbe6da48c75010"}}}}}}, 0x13bd) 2.008694846s ago: executing program 3 (id=3139): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000100)=0x7fffffff, 0x28) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) close(r4) listen(r2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r5, 0x0) (async) listen(r5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000140012800b0001006970766c616e00000400028008000500ae0006bccab30e1f42ad571f2b2a704033f90bda9b64c0128a611aa8b0d34f53c824bc9e1c589f55afe47430ed29fa8812cee1d8a5ab6f0078e1283d4902f014dc15ae53d8290768f17a9b7c4477ee8992b662376ac90394ff942a5f113371d9795b1f77310cb229e597e92737b9dfa622cd2e22833b1228804ff30cd5e218a849231fe56113de00a6cbe5c95100a0ba91", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000001680)="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", 0x1000}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="011d0000000000000000010000000000000001410000001c001700000000000000ed6474683a7379"], 0x38}}, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000400000008000000010000008000000054460f0f08184a8cecf60757a7d3a42e2b3c503e92d3201515e5ab7645e11a69892e6abd402d59956879a2b92d9e673d32d34d9696", @ANYRESDEC=r0, @ANYBLOB='B\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000400"/28], 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @local}, &(0x7f0000000100)=0xc) socket$inet_udplite(0x2, 0x2, 0x88) (async) r12 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r11, &(0x7f0000000280)="e8448f5fd381a64a2b73baf87befb0b8987125815a86bf0ab520ee4887bb917c36d091b46e82a00cff079a9e5fac617bb0b065317d56df4df642f1005b", &(0x7f00000002c0)=@udp=r12, 0x4}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r11, &(0x7f0000000280)="e8448f5fd381a64a2b73baf87befb0b8987125815a86bf0ab520ee4887bb917c36d091b46e82a00cff079a9e5fac617bb0b065317d56df4df642f1005b", &(0x7f00000002c0)=@udp=r12, 0x4}, 0x20) 1.930830849s ago: executing program 0 (id=3140): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x84}, {0x6}]}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x4d6, 0x33}, 0xa, @in6=@private0, 0x3502, 0x3, 0x0, 0x5, 0x400, 0x1, 0x70}, {{@in=@loopback, 0x4d5, 0x32}, 0xf, @in=@multicast2, 0x3504, 0x4, 0x3, 0x0, 0x6, 0x2, 0x8}]}]}, 0x13c}}, 0x0) 1.811721283s ago: executing program 4 (id=3141): syz_emit_ethernet(0x2056, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x2020, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x200, "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"}, {0x0, 0x200, "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"}, {0x1, 0x1, "a22d4ba30d6b"}]}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x65}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x20000000) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r5, 0xff06, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x2}]}}, 0x0, 0xffffffffffffff0a, 0x0, 0x1, 0x7fffffff}, 0x28) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004"], 0xec}}, 0x8050) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @random="771108afd101", @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000f8910cdefab6167ebf3c56085ae51628309875531b952afe3c861981adae05bcdc35dc97a71b3969eb27b166e9600f6bfc23e46be8a38d6d67d893654864b9d11075d968350606a779f36d78f8f8229036ffc0ba6b8745e673db65d5adb469f82bc2dc81cf8ac8d9b4170b326d0fa8f60657f71b925dc04e6f0df1ee7e1d2822eb109828e416267c5efb85027b295cf42eac9024cdf3be1533d7fb2b7b194d4a98c15389f80583697ff2ad7b52f51d", @ANYRES16=r1, @ANYBLOB="01002cbd7000feffefff8900000008000300", @ANYRES32=r9, @ANYBLOB="14001d80"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.767535631s ago: executing program 0 (id=3142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000140)="41000200010007", 0x7) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES16=r3, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="18005e800800020000efff000c0001"], 0x34}}, 0x0) 1.570421356s ago: executing program 0 (id=3143): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x1}], 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='lp', 0x45) sendto$inet(r3, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}}, 0x40008095) 1.520442014s ago: executing program 2 (id=3144): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0x8c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_skbmod={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xb43}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x2}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.519412665s ago: executing program 4 (id=3145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x4, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 1.481465981s ago: executing program 3 (id=3146): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380), 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp, 0x1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f00000000c0)=@udp, 0x1}, 0x20) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4$alg(r2, 0x0, 0x0, 0x800) (async) r3 = accept4$alg(r2, 0x0, 0x0, 0x800) sendmsg$alg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f5a9496032", 0x5}, {&(0x7f00000002c0)=']', 0x1}], 0x2}, 0x55) socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) (async) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000500)='GPL\x00', 0x5, 0x11, &(0x7f00000017c0)=""/4098}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x59b, 0x8, {0x77359400}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "60001706111000"}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0xfffffffffffffe59}}, 0x20000086) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1000000005140000000000000000"], 0x10}}, 0x8000) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1000000005140000000000000000"], 0x10}}, 0x8000) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB], 0x114}], 0x1}, 0x4040044) 1.323668988s ago: executing program 2 (id=3147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x60, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x444e}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xa}, {0x8, 0xb, 0x7fff}}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) 1.21297608s ago: executing program 1 (id=3034): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001900)={@fallback=r1, r1, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000140)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x8, 0xb, 0x0, 0x1, [@nested={0x4, 0x2f}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.039278675s ago: executing program 4 (id=3149): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000008500000019000000958e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03022abd7000fddbdf2560de47881681cb465e05fedb5df5ced034196258d9cc8ea9a76fb62ff1e6a0f6da2cf95c210af2f66a3a3097bedb426774ffe9f32211699c840688613dec6c9c9e8ab634a764527ebc1cb06e237164ef62b5d8a03f8eb090632305030fde054348c16e686a8292babb7831c907e15dad6fdc0a95fd3ceea59cf4469204c4465804d87567ab4729eb9c2c0d86de491e836feb29bd494566", @ANYRES32=r3, @ANYBLOB="14002380050008000300000006000a0008000000"], 0x30}, 0x1, 0x0, 0x0, 0x4e808}, 0x4000) 863.626343ms ago: executing program 1 (id=3150): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x1, "1d0efbfc3288ce025aa21b9df50163d9"}}}, 0x1b) (async, rerun: 64) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) (rerun: 64) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000040)="ad74d2ee104966728899f0426e6cf65af30cb7f5ad41640d7ae348ddacdb1c8851ce08877d0098e481d29ca9d73490684c2d8889afe1e2973f50f87be82ba4c3ae1d7b4ad2a4503e80e8b69fd2e58185e41404910718b04f23c3c0c49709c1df5900cc8bebe8483f863615da540d451bf563d1d0235896d1ae4d0f7bab8342097e1892a551e558bccb01966dfd90f0586425ea0a34341015d8073dc3a9e7a79f30596adf63dde346359766b3c47976f9f38154f02a24809e28c6691e5f0f1ccb26ef5bd4802637a2f7aee06f22") (async, rerun: 64) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 64) write$nci(r1, &(0x7f0000000180)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x1, 0x2, 0x0, 0x3, {0x0, 0x81}}, 0x5) (async, rerun: 32) socketpair(0x5, 0x800, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r4, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x14}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x10}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x64}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x67}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4a}]}, 0x54}, 0x1, 0x0, 0x0, 0x44091}, 0x8001) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x6, 0x1, 0x402, 0x0, 0x0, {0x3, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x80) (async) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000004c0)={0x0, 0x1, 0x6, @multicast}, 0x10) (async, rerun: 32) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000500)) (async, rerun: 32) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r6, 0x0, 0x26, 0xfa, &(0x7f00000005c0)="9b1ad6d22334c913d03b11842fd01587c290abe1675ca0f097d5683e178ecc5ab96077c05986", &(0x7f0000000600)=""/250, 0x2, 0x0, 0x7, 0xf2, &(0x7f0000000700)="dbb5a97e722265", &(0x7f0000000740)="04fbbb83921be3b56283ef459406d9bc714a43918e51fd32eb537d330ba0294067c91caab7e918a5fb3c06c27315ada2fd5616b2b0d92ec0b414465b1743c9274aa415b56e25b5ca93dab81a0d1170aeb6c7ed2c92fb366b95e5574a1bfe0add5e517cb1c954c12d458401366196c7a6670267e482ebafce185688262c4bf8e3dc0c39bbb06fe56b98ed9e5cf49a8b1ea836eba0912141aefe6df714b75ed6ecdc09466997c8c4fa7e850c6f5812d09e81e76cfed31991e0acf806e58083abf0087c2b0a6757ea96f4bf4056fcfd0539e09ffc3f90bdec033a2a588492b41c0bbd6834da9b624e039f6d80302401a6ffee13", 0x2, 0x0, 0x3}, 0x50) (async) syz_emit_ethernet(0x5a, &(0x7f00000008c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x6}}, {@canfd={0xd, {{0x2, 0x1}, 0x14, 0x3, 0x0, 0x0, "ffe9df2c9be8c645e662909c0b3821f4edec571fab8761de0811a13b37a80631b1a77be07ca856455a484e247e59e3c9772e2d63c1383b95cf2b0fb299ab6423"}}}}, &(0x7f0000000940)={0x0, 0x1, [0xe7d, 0x9e7, 0x867, 0x5b8]}) (async, rerun: 32) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r6, 0x0, 0x25, 0xf, @val=@target_btf_id=0xffffffffffffffff}, 0x14) (rerun: 32) bpf$ITER_CREATE(0x21, &(0x7f00000009c0)={r7}, 0x8) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) (async) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000a00)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, r8, 0x400, 0x70bd2b, 0xffffffff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r9, &(0x7f0000000e40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x1a0, r4, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x170, 0x2a, [@random_vendor={0xdd, 0xdb, "95998393ddbcdfadb06b5e23e8f06871de058688f99a28cfbd6efd8fa371c5704fc84c0e1f7bc570d608bcdf33e6da27f8f0f0e25d53b91a0dfb588fd44dd6d90f437976508da0c24ea6f1af6094bce48d9fc2426f82a837cbfac0d068137f03291654d390b21c5cfc19d99f8eb0dfe69eb7983fcfd6ac4c2813b63321f7a9c80a8eb3f2ae6961a6fadeec1c45be46c0aa5bf36fe7e168eaf3e55b29aa66f7b15c092bef0d56e88306d7ecb387f8a466389a78740c5a76803b81f6608aae8c5960c2e311665d631ef1daa94118bf945d8ee6e17d8f1faef82c8f92"}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0xb945}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0x79, @device_b, 0x4, @value=@broadcast, 0x2, 0x21, @device_b, 0x6}}, @mesh_chsw={0x76, 0x6, {0x4, 0x58, 0x32, 0x8}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x9, 0x5, @broadcast, 0x0, @value=@broadcast, 0x2, 0x4, @broadcast, 0x7}}, @ibss={0x6, 0x2, 0xd}, @mic={0x8c, 0x10, {0x566, "a043baded836", @short="caad1ed4865c303a"}}, @rann={0x7e, 0x15, {{0x1, 0x4}, 0xf, 0x7, @device_a, 0x2992f8b3, 0x7ff, 0xd694}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x56}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40090}, 0x10) (async) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x28, r4, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1d}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x4010) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001040)={r9, 0x58, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)=@deltclass={0x2c, 0x29, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xf, 0x4}, {0x3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x81}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xb13d6959e68d27ff}, 0x0) 842.497584ms ago: executing program 3 (id=3151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xffff, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x800) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xb}}}, 0x51}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r9, 0x84, 0x4, 0x0, &(0x7f0000000180)) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x74, r10, 0x1, 0x0, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x0, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x74}}, 0x0) sendmsg$sock(r5, &(0x7f0000000140)={&(0x7f0000000280)=@llc={0x1a, 0x304, 0x67, 0xf5, 0xa, 0xe, @broadcast}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)="e4910c8ab35e6f716eb4af6630e348a0b7a1412ec3a0c709073707ca0b21c2770f4e43454ccace1f1bf313b7de7fbb0699d2a29957dfa69ab623f8fde5c988cf068a4f80665ecc5de3a07a423ae33879ec884c015cf6e9ab8a66abe5c5690c48eb957db2a8f745716ac3d9e2df1d5e2de2e0e190add6934ac4462bada7b57ccc156a0db85ea34dd174a6d1506d7e305114fefe636a6635964befe8bf2d6e0ecaecd1bf8ff90aecfbd42bb7b629e362ffa0278e34f2e40fe4b8594775184a4d298b42f913f8d5f6670f15ca", 0xcb}, {&(0x7f0000000380)="3ec3ccd2e13d4ca8c5a7048d6d802a811bd61bc9593a53ae11a278f725849b70abf02e81571f9980112d4279c76a545e3cbc6bd2952bd4d69c55ea81126c3bb4f94fb16b6652fae3af7e652f5df2a55b84602587f0e43e3940b5a45e817ce8e51c3fd1a4b2ab5aaf424790b04198c9a7aeca10588b28a3785db57c7aa38d77b63ddd20f19b06e992790a4d0a8e80b3c4c5717768", 0x94}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000000700)="09510ec388ca3ee7af40319dd0db1a0463c1d84722b6f8e6ce9453bec3f2e98a42fce619951d4fab546356b060126aff8f53f4c009bfd2ba09ab71e0f555029379a396de81e6081e2f26a50ebe0e32b9f189244702f53c2836a19395800a324d4e82624625b372edd801dbaf3cb010d91ed1457053549611d5235e67ddba7a487da9bd593e6e2effb593f6e14ac247bc8f56a8c335fa5010ff9a367078bb53808ef859936740c5ceda2e5c48456b7b2fee24cef0a1b2c7b315903588dce755bc67cd39e8031d94747d613fde47800389d6826f8c5806fdb09a4de1c3577b4e9fe534d937a214852db0798b8295d392", 0xef}], 0x5}, 0x4081) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r12, @ANYBLOB="010000000000000000000100000004000180ac000280"], 0xc4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 752.43903ms ago: executing program 4 (id=3152): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003840)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="b2dfd3", 0x3}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)=""/106, 0x6a}], 0x1}}], 0x1, 0x2001, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000075ba96e6"], 0x14}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="552b7bb6ef0000001e615e0640f0521044b6cf1dfad8b1ebc3ca01250e763c7b21886a4790ca72f86ba736ce31724e9e2a71e28f083d508e1bfe1f1e033690f04220fae3a44cdb169343b5f4a165763f20feb59038074a2e641a09ccb9ce7ce9d558b7e01a1a0d0ec9498e16f232e3"], &(0x7f0000000000)='GPL\x00'}, 0x94) 509.567321ms ago: executing program 4 (id=3153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x0, {0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}}}, 0x3a) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000480)=0x130000, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000ac0)=ANY=[@ANYBLOB="ffff0900ffffbbbbbbbbbbbb86dd6000000000100000fe8000000000000000000000000000aafe800000000000"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'veth0_macvtap\x00', 0x0}) r4 = gettid() r5 = socket(0x10, 0x803, 0xffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9fffffffe0adf2500007400", @ANYRES32=r3, @ANYBLOB="049c01000750050008001300", @ANYRES32=r4], 0x3c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00', @ANYRES16=r7, @ANYBLOB="00012cbd7000fedbdf25160000000c0099000d000000510000000a00060008021100000000000a00060008021100000000000a001a0008021100000000000a00060008021100000000000a001a00ffffffffffff00000a0006000802110000010000"], 0x68}, 0x1, 0x0, 0x0, 0x4044081}, 0x200408c1) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000040)={'syzkaller0\x00', @random="73af8f1cbeda"}) 479.413632ms ago: executing program 0 (id=3154): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "a8a1f4ca7c78a954b1c552dd0c694cfb9602293ae990ec006080f3af9c8a0daf8b6b3b8d8872515970eb87b0d439267b81c9bcb68c54e503e21e9b5bd7df8755"}}, 0x80}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r5, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x78}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24040094}, 0x24044884) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r3, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x206f, 0x72}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x11}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x33}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r6, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x7, @link='syz1\x00'}}}, ["", ""]}, 0x68}}, 0x4000000) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "a8a1f4ca7c78a954b1c552dd0c694cfb9602293ae990ec006080f3af9c8a0daf8b6b3b8d8872515970eb87b0d439267b81c9bcb68c54e503e21e9b5bd7df8755"}}, 0x80}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) listen(r5, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x78}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24040094}, 0x24044884) (async) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r3, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x206f, 0x72}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x11}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x33}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r6, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x7, @link='syz1\x00'}}}, ["", ""]}, 0x68}}, 0x4000000) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) 244.233918ms ago: executing program 3 (id=3155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=@deltclass={0x44, 0x29, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0xa}, {0x7, 0x6}, {0xf, 0xffff}}, [@tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_mq={0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = socket$netlink(0x10, 0x3, 0x7) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x2000000}, 0xc) 242.917505ms ago: executing program 1 (id=3156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x9, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtfilter={0x24, 0x28, 0xe27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 70.324739ms ago: executing program 0 (id=3157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x40000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x15430}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 4 (id=3158): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000002000)=[{{&(0x7f0000000340)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_retopts={{0xc}}], 0xc}}], 0x1, 0x44) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x8, 0x0, 0x4, @vifc_lcl_addr=@rand_addr=0x640100ff, @private=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0) kernel console output (not intermixed with test programs): 1262': attribute type 1 has an invalid length. [ 181.989803][T10208] netlink: 'syz.4.1262': attribute type 24 has an invalid length. [ 182.135745][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1265'. [ 182.168617][T10222] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1265'. [ 182.191639][T10225] sctp: [Deprecated]: syz.2.1266 (pid 10225) Use of int in max_burst socket option deprecated. [ 182.191639][T10225] Use struct sctp_assoc_value instead [ 182.202717][T10222] netlink: 'syz.0.1265': attribute type 5 has an invalid length. [ 182.473891][T10234] netlink: 'syz.4.1269': attribute type 10 has an invalid length. [ 182.510207][T10234] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.539703][T10234] bridge_slave_1: left allmulticast mode [ 182.551753][T10234] bridge_slave_1: left promiscuous mode [ 182.575733][T10234] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.593756][T10234] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 182.757888][T10254] netlink: 'syz.0.1272': attribute type 21 has an invalid length. [ 182.779574][T10254] netlink: 'syz.0.1272': attribute type 1 has an invalid length. [ 182.843502][T10244] netlink: 'syz.0.1272': attribute type 1 has an invalid length. [ 182.971659][T10244] bond6: entered promiscuous mode [ 182.993582][T10244] 8021q: adding VLAN 0 to HW filter on device bond6 [ 183.058050][T10254] 8021q: adding VLAN 0 to HW filter on device bond7 [ 183.069031][T10254] bond6: (slave bond7): making interface the new active one [ 183.076807][T10254] bond7: entered promiscuous mode [ 183.083976][T10254] bond6: (slave bond7): Enslaving as an active interface with an up link [ 183.224272][T10267] batman_adv: batadv0: Adding interface: dummy0 [ 183.239453][T10267] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.275528][T10267] batman_adv: batadv0: Interface activated: dummy0 [ 183.311527][T10267] batadv0: mtu less than device minimum [ 183.342898][T10267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.355527][T10267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.367858][T10267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.380381][T10267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.392597][T10267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.405482][T10267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.417984][T10267] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.890669][T10287] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.359233][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'. [ 184.467579][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 184.493951][T10310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1285'. [ 185.240875][T10326] netlink: 'syz.2.1291': attribute type 1 has an invalid length. [ 185.264764][T10326] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1291'. [ 185.914872][T10339] netlink: 'syz.0.1295': attribute type 12 has an invalid length. [ 186.034021][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1296'. [ 186.214389][T10357] netlink: 'syz.0.1300': attribute type 9 has an invalid length. [ 186.389951][T10365] xt_limit: Overflow, try lower: 271964/0 [ 186.644226][T10371] net_ratelimit: 12 callbacks suppressed [ 186.644246][T10371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.850850][T10034] Set syz1 is full, maxelem 65536 reached [ 187.239835][T10400] netlink: 'syz.2.1311': attribute type 23 has an invalid length. [ 187.493687][T10415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.408327][T10478] xt_limit: Overflow, try lower: 604147548/4200216962 [ 188.646763][T10487] wg1 speed is unknown, defaulting to 1000 [ 188.740314][T10495] netlink: 'syz.1.1336': attribute type 1 has an invalid length. [ 188.769582][T10495] netlink: 'syz.1.1336': attribute type 3 has an invalid length. [ 188.799789][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1338'. [ 188.810688][T10495] netlink: 'syz.1.1336': attribute type 235 has an invalid length. [ 188.823689][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1339'. [ 189.015831][T10504] sctp: [Deprecated]: syz.4.1340 (pid 10504) Use of int in max_burst socket option deprecated. [ 189.015831][T10504] Use struct sctp_assoc_value instead [ 189.115477][T10507] netlink: 'syz.1.1341': attribute type 1 has an invalid length. [ 189.139484][T10507] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1341'. [ 189.169029][T10507] netlink: 'syz.1.1341': attribute type 1 has an invalid length. [ 189.189865][T10514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1342'. [ 189.211946][T10514] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1342'. [ 189.213924][T10509] netlink: 'syz.4.1344': attribute type 30 has an invalid length. [ 189.246878][T10507] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1341'. [ 189.431815][T10520] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1346'. [ 189.457614][T10523] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1345'. [ 189.508879][T10523] netlink: 'syz.0.1345': attribute type 12 has an invalid length. [ 189.732012][T10533] dvmrp1: entered allmulticast mode [ 190.368479][T10566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.390969][T10562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.763715][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1360'. [ 190.784698][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1360'. [ 190.859753][ T8803] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.002288][ T8803] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.032801][ T8803] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.055949][ T8803] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.893599][T10642] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 191.943105][T10650] IPVS: ip_vs_edit_dest(): server weight less than zero [ 191.983363][T10642] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 192.001979][T10642] gretap2: entered promiscuous mode [ 192.008953][T10642] gretap2: entered allmulticast mode [ 192.198575][T10662] netlink: 'syz.0.1386': attribute type 25 has an invalid length. [ 192.230078][T10662] netlink: 'syz.0.1386': attribute type 12 has an invalid length. [ 192.461190][T10674] tipc: Started in network mode [ 192.471623][T10674] tipc: Node identity a260034c847, cluster identity 4711 [ 192.479757][T10674] tipc: Enabled bearer , priority 0 [ 192.542684][T10674] tipc: Disabling bearer [ 192.816264][ T4302] tipc: Subscription rejected, illegal request [ 193.527746][T10739] netlink: 'syz.4.1404': attribute type 16 has an invalid length. [ 193.771062][T10756] netlink: 'syz.2.1408': attribute type 10 has an invalid length. [ 193.988197][T10767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.995627][T10767] IPv6: NLM_F_CREATE should be set when creating new route [ 194.001590][T10766] __nla_validate_parse: 11 callbacks suppressed [ 194.001608][T10766] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1413'. [ 194.128378][T10777] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1415'. [ 194.305957][T10764] team0 (unregistering): Port device team_slave_0 removed [ 194.326597][T10764] team0 (unregistering): Port device team_slave_1 removed [ 194.351810][T10786] netlink: 'syz.4.1417': attribute type 1 has an invalid length. [ 194.378038][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1417'. [ 194.431730][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.438416][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.744899][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 194.857100][T10812] openvswitch: netlink: IPv4 tun info is not correct [ 195.045352][T10820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.104037][T10820] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 195.123405][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 195.131995][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1428'. [ 195.163882][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'. [ 195.229693][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1428'. [ 195.275142][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'. [ 195.742442][T10857] bridge_slave_0: entered promiscuous mode [ 195.767045][T10857] netlink: 'syz.1.1439': attribute type 12 has an invalid length. [ 195.891924][T10862] wg1 speed is unknown, defaulting to 1000 [ 196.320372][T10889] xfrm1: entered allmulticast mode [ 197.452623][T10907] bridge: RTM_NEWNEIGH with invalid ether address [ 197.474205][T10907] bridge: RTM_NEWNEIGH with invalid ether address [ 197.511797][T10907] netlink: 'syz.3.1454': attribute type 12 has an invalid length. [ 197.546512][T10912] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1452'. [ 197.609544][T10915] netlink: 'syz.0.1452': attribute type 1 has an invalid length. [ 197.674358][T10915] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1452'. [ 198.205333][T10944] netlink: 'syz.4.1463': attribute type 1 has an invalid length. [ 198.394123][T10960] bridge: RTM_NEWNEIGH with invalid ether address [ 198.413613][T10960] bridge: RTM_NEWNEIGH with invalid ether address [ 198.454207][T10960] netlink: 'syz.4.1467': attribute type 12 has an invalid length. [ 198.896290][T10946] infiniband syz!: set down [ 198.901246][T10946] infiniband syz!: added team_slave_0 [ 198.943744][T10946] RDS/IB: syz!: added [ 198.949064][T10946] smc: adding ib device syz! with port count 1 [ 198.955871][T10946] smc: ib device syz! port 1 has pnetid [ 211.868914][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 211.869807][ T5875] Bluetooth: hci2: command 0x0406 tx timeout [ 211.880669][ T5873] Bluetooth: hci3: command 0x0406 tx timeout [ 221.272875][T10993] lo: entered allmulticast mode [ 221.288736][T10993] tunl0: entered allmulticast mode [ 221.302058][T10995] __nla_validate_parse: 5 callbacks suppressed [ 221.302077][T10995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1478'. [ 221.306173][T10993] gre0: entered allmulticast mode [ 221.382101][T10993] gretap0: entered allmulticast mode [ 221.403503][T10993] erspan0: entered allmulticast mode [ 221.423591][T10993] ip_vti0: entered allmulticast mode [ 221.433587][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 221.450184][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 221.463270][T10993] ip6_vti0: entered allmulticast mode [ 221.482124][T10993] sit0: entered allmulticast mode [ 221.499572][T10993] ip6tnl0: entered allmulticast mode [ 221.529182][T10993] ip6gre0: entered allmulticast mode [ 221.551004][T10993] syz_tun: entered allmulticast mode [ 221.559361][T11012] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1477'. [ 221.586972][T11012] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1477'. [ 221.600016][T10993] ip6gretap0: entered allmulticast mode [ 221.612444][T10993] vcan0: entered allmulticast mode [ 221.633739][T10993] bond0: entered allmulticast mode [ 221.641799][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1477'. [ 221.651865][T10993] bond_slave_0: entered allmulticast mode [ 221.657898][T10993] bond_slave_1: entered allmulticast mode [ 221.674799][T10993] team0: entered allmulticast mode [ 221.680531][T10993] team_slave_0: entered allmulticast mode [ 221.691594][T10993] team_slave_1: entered allmulticast mode [ 221.706152][T10993] dummy0: entered allmulticast mode [ 221.712602][T10993] nlmon0: entered allmulticast mode [ 221.726985][T10993] batadv0: entered allmulticast mode [ 221.746829][T10993] vxcan0: entered allmulticast mode [ 221.754011][T10993] vxcan1: entered allmulticast mode [ 221.766675][T10993] veth0: entered allmulticast mode [ 221.778769][T10993] veth1: entered allmulticast mode [ 221.802472][T10993] wg0: entered allmulticast mode [ 221.819554][T10993] wg1: entered allmulticast mode [ 221.832554][T10993] wg2: entered allmulticast mode [ 221.852493][T10993] veth0_to_bridge: entered allmulticast mode [ 221.871227][T10993] bridge_slave_0: entered allmulticast mode [ 221.882126][T10993] veth1_to_bridge: entered allmulticast mode [ 221.893030][T10993] bridge_slave_1: entered allmulticast mode [ 221.906778][T10993] veth0_to_bond: entered allmulticast mode [ 221.920874][T10993] veth1_to_bond: entered allmulticast mode [ 221.931717][T10993] veth0_to_team: entered allmulticast mode [ 221.944146][T10993] veth1_to_team: entered allmulticast mode [ 221.968908][T10993] veth0_to_batadv: entered allmulticast mode [ 221.979666][T10993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.988577][T10993] batadv_slave_0: entered allmulticast mode [ 221.999802][T10993] veth1_to_batadv: entered allmulticast mode [ 222.009190][T10993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.017293][T10993] batadv_slave_1: entered allmulticast mode [ 222.034193][T10993] xfrm0: entered allmulticast mode [ 222.043597][T10993] veth0_to_hsr: entered allmulticast mode [ 222.053202][T10993] hsr_slave_0: entered allmulticast mode [ 222.063194][T10993] veth1_to_hsr: entered allmulticast mode [ 222.073900][T10993] hsr_slave_1: entered allmulticast mode [ 222.083190][T10993] hsr0: entered allmulticast mode [ 222.097945][T10993] veth0_vlan: entered allmulticast mode [ 222.116916][T10993] vlan0: entered allmulticast mode [ 222.122189][T10993] vlan1: entered allmulticast mode [ 222.129257][T10993] macvlan0: entered allmulticast mode [ 222.141527][T10993] macvlan1: left promiscuous mode [ 222.152696][T10993] ipvlan0: entered allmulticast mode [ 222.158637][T10993] ipvlan1: entered allmulticast mode [ 222.165526][T10993] veth1_macvtap: entered allmulticast mode [ 222.174217][T10993] veth0_macvtap: entered allmulticast mode [ 222.183943][T10993] macvtap0: entered allmulticast mode [ 222.198772][T10993] macsec0: entered allmulticast mode [ 222.208582][T10993] geneve0: entered allmulticast mode [ 222.221430][T10993] geneve1: entered allmulticast mode [ 222.229367][T10993] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 222.237245][T10993] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 222.251152][T10993] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 222.263693][T10993] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 222.277422][T10993] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 222.296758][T10993] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 222.318387][T10993] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 222.329441][T10993] veth2: entered allmulticast mode [ 222.335113][T10993] veth3: entered allmulticast mode [ 222.340603][T10993] erspan1: entered allmulticast mode [ 222.351891][T10993] bridge1: entered allmulticast mode [ 222.359808][T10993] nicvf0: entered allmulticast mode [ 222.371109][T10993] syztnl2: entered allmulticast mode [ 222.379672][T10993] bond1: entered allmulticast mode [ 222.384998][T10993] veth5: entered allmulticast mode [ 222.391914][T10993] veth4: entered allmulticast mode [ 222.397557][T10993] veth5: left promiscuous mode [ 222.403965][T10993] vxlan0: entered allmulticast mode [ 222.411623][T10993] ip6gre2: entered allmulticast mode [ 222.417104][T10993] bond2: entered allmulticast mode [ 222.422883][T10993] sit1: entered allmulticast mode [ 222.445743][T10993] macvlan2: entered allmulticast mode [ 222.451393][T10993] ip6tnl1: entered allmulticast mode [ 222.456838][T10993] ip6tnl2: entered allmulticast mode [ 222.463000][T10993] bond3: entered allmulticast mode [ 222.470034][T10993] gretap1: left promiscuous mode [ 222.479538][T10993] @: entered allmulticast mode [ 222.488242][T10993] batman_adv: batadv0: Interface deactivated: macsec1 [ 222.495664][T10993] macsec1: entered allmulticast mode [ 222.504031][T10993] hsr1: entered allmulticast mode [ 222.511322][T10993] gre1: entered allmulticast mode [ 222.540520][T10993] sit2: entered allmulticast mode [ 222.574906][ T5947] wg1 speed is unknown, defaulting to 1000 [ 222.581058][ T5947] syz2: Port: 1 Link DOWN [ 222.587044][ T8799] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 222.614879][ T8799] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 222.624192][ T8799] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.654940][ T8808] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 222.671986][ T8808] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 222.681522][ T8808] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.722380][ T8808] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 222.733077][ T8808] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 222.743041][ T8808] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.762613][T11022] netlink: 'syz.2.1482': attribute type 12 has an invalid length. [ 222.781710][ T8808] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 222.820823][ T8808] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 222.859899][ T8808] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.150379][T11039] veth1_macvtap: left promiscuous mode [ 223.239697][T11047] netlink: 'syz.0.1489': attribute type 1 has an invalid length. [ 223.256326][T11047] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1489'. [ 223.486400][T11060] netlink: 'syz.4.1492': attribute type 4 has an invalid length. [ 225.435486][T11091] tipc: Enabled bearer , priority 0 [ 225.443524][T11091] syzkaller0: entered promiscuous mode [ 225.452415][T11091] syzkaller0: entered allmulticast mode [ 225.473767][T11096] netlink: 'syz.2.1505': attribute type 4 has an invalid length. [ 225.547837][T11091] tipc: Resetting bearer [ 225.603372][T11090] tipc: Resetting bearer [ 225.657324][T11090] tipc: Disabling bearer [ 225.659755][T11107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.728979][T11112] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1508'. [ 225.941996][T11120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1510'. [ 225.992351][T11122] dvmrp0: entered allmulticast mode [ 226.262701][T11137] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1517'. [ 226.317959][T11142] netlink: 'syz.4.1518': attribute type 1 has an invalid length. [ 226.327614][T11141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1520'. [ 226.380251][T11142] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.394442][T11141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1520'. [ 226.404815][T11141] netlink: 'syz.3.1520': attribute type 7 has an invalid length. [ 226.412994][T11141] netlink: 'syz.3.1520': attribute type 8 has an invalid length. [ 226.426832][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1520'. [ 226.771787][T11167] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 226.838090][T11171] tipc: Enabled bearer , priority 0 [ 226.846997][T11171] syzkaller0: entered promiscuous mode [ 226.852950][T11171] syzkaller0: entered allmulticast mode [ 226.863747][T11171] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 226.882588][T11170] tipc: Resetting bearer [ 226.948434][T11170] tipc: Disabling bearer [ 227.047289][T11182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1531'. [ 227.090002][T11184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1532'. [ 227.143644][T11186] vlan2: entered allmulticast mode [ 227.149303][T11186] hsr0: entered allmulticast mode [ 227.155336][ T5880] Bluetooth: hci4: command 0x0405 tx timeout [ 227.167744][T11186] hsr_slave_0: entered allmulticast mode [ 227.174177][T11186] hsr_slave_1: entered allmulticast mode [ 227.383697][T11206] netlink: 'syz.4.1540': attribute type 1 has an invalid length. [ 227.400708][T11206] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1540'. [ 227.410362][T11206] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1540'. [ 227.431817][T11206] netlink: 'syz.4.1540': attribute type 9 has an invalid length. [ 227.444467][T11208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1537'. [ 228.099174][T11233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1545'. [ 228.132715][T11233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 228.658796][T11273] delete_channel: no stack [ 228.687830][T11270] delete_channel: no stack [ 228.692479][T11270] delete_channel: no stack [ 228.697878][T11277] netlink: 'syz.0.1560': attribute type 10 has an invalid length. [ 228.715034][T11275] netlink: 'syz.0.1560': attribute type 10 has an invalid length. [ 228.723265][T11270] delete_channel: no stack [ 228.733551][T11270] delete_channel: no stack [ 228.755075][T11270] delete_channel: no stack [ 228.760049][T11270] delete_channel: no stack [ 228.778503][T11270] delete_channel: no stack [ 228.783316][T11270] delete_channel: no stack [ 228.797780][T11270] delete_channel: no stack [ 228.811847][T11270] delete_channel: no stack [ 228.818206][T11270] delete_channel: no stack [ 228.835550][T11270] delete_channel: no stack [ 228.850423][T11270] delete_channel: no stack [ 228.936013][T11270] delete_channel: no stack [ 228.954220][T11270] delete_channel: no stack [ 228.982297][T11270] delete_channel: no stack [ 228.991908][T11270] delete_channel: no stack [ 229.006847][T11270] delete_channel: no stack [ 229.017036][T11270] delete_channel: no stack [ 229.027138][T11270] delete_channel: no stack [ 229.038654][T11270] delete_channel: no stack [ 229.053791][T11270] delete_channel: no stack [ 229.085984][T11270] delete_channel: no stack [ 229.094307][T11270] delete_channel: no stack [ 229.103839][T11270] delete_channel: no stack [ 229.111317][T11300] bridge: RTM_NEWNEIGH with invalid ether address [ 229.128906][T11270] delete_channel: no stack [ 229.133669][T11270] delete_channel: no stack [ 229.154931][T11270] delete_channel: no stack [ 229.159632][T11270] delete_channel: no stack [ 229.164461][T11270] delete_channel: no stack [ 229.170112][T11305] bridge: RTM_NEWNEIGH with invalid ether address [ 229.172181][T11270] delete_channel: no stack [ 229.181365][T11270] delete_channel: no stack [ 229.215275][T11300] netlink: 'syz.3.1568': attribute type 12 has an invalid length. [ 229.338484][T11314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.383860][T11318] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.423801][T11319] xfrm1: entered promiscuous mode [ 229.445664][T11319] xfrm1: entered allmulticast mode [ 229.490316][ T5981] IPVS: starting estimator thread 0... [ 229.585794][T11325] IPVS: using max 24 ests per chain, 57600 per kthread [ 229.661478][T11331] netlink: 'syz.4.1579': attribute type 3 has an invalid length. [ 229.912532][T11347] netlink: 'syz.0.1584': attribute type 12 has an invalid length. [ 229.968719][T11344] bond0: entered allmulticast mode [ 230.118269][T11360] sctp: [Deprecated]: syz.4.1588 (pid 11360) Use of int in maxseg socket option. [ 230.118269][T11360] Use struct sctp_assoc_value instead [ 230.209979][T11363] tipc: Enabled bearer , priority 0 [ 230.216994][T11365] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 230.254983][T11365] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 230.262357][T11365] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 230.307301][T11362] tipc: Enabling of bearer rejected, already enabled [ 230.335334][T11363] syzkaller0: entered promiscuous mode [ 230.338747][T11376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.340848][T11363] syzkaller0: entered allmulticast mode [ 230.455216][T11363] tipc: Resetting bearer [ 230.546290][T11363] tipc: Disabling bearer [ 230.597028][T11386] netlink: 'syz.4.1597': attribute type 23 has an invalid length. [ 230.843549][T11404] bridge4: entered promiscuous mode [ 230.914018][T11404] bridge4: entered allmulticast mode [ 231.448198][T11445] __nla_validate_parse: 16 callbacks suppressed [ 231.448227][T11445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1616'. [ 231.569567][T11449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1617'. [ 231.631320][T11449] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.756766][T11455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1617'. [ 231.818694][T11449] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.895171][T11449] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 231.945686][T11449] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 232.477165][T11503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1626'. [ 232.581759][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 232.592786][T11509] af_packet: tpacket_rcv: packet too big, clamped from 59478 to 4294967272. macoff=96 [ 232.614249][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 232.646988][T11511] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1630'. [ 232.729535][T11514] bond0: Device is already in use. [ 232.917307][T11529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1635'. [ 233.060134][T11535] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 233.209308][T11540] syz.4.1638 uses old SIOCAX25GETINFO [ 233.217102][T11540] netlink: 'syz.4.1638': attribute type 1 has an invalid length. [ 236.407781][T11547] netlink: 'syz.0.1640': attribute type 1 has an invalid length. [ 236.432393][T11554] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 236.475064][T11557] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 236.581300][T11557] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 236.628468][T11571] netlink: 'syz.1.1645': attribute type 64 has an invalid length. [ 236.656512][T11571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1645'. [ 236.675130][T11572] bond1: option mode: unable to set because the bond device has slaves [ 236.715858][T11571] netlink: 'syz.1.1645': attribute type 64 has an invalid length. [ 236.734051][T11571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1645'. [ 236.979710][T11584] netlink: 'syz.2.1649': attribute type 25 has an invalid length. [ 237.097880][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1651'. [ 237.340532][T11591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.397300][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1651'. [ 237.458444][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1651'. [ 237.481084][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1651'. [ 237.510161][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1651'. [ 237.557928][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1651'. [ 237.585951][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1651'. [ 237.605369][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1651'. [ 237.689779][T11614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.224332][T11650] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 238.344503][T11662] netlink: 'syz.1.1671': attribute type 21 has an invalid length. [ 238.521693][T11672] tipc: Enabled bearer , priority 0 [ 238.541658][T11674] syzkaller0: entered promiscuous mode [ 238.548599][T11674] syzkaller0: entered allmulticast mode [ 238.700126][T11674] tipc: Resetting bearer [ 238.776669][T11674] tipc: Disabling bearer [ 239.041312][T11711] netlink: 'syz.4.1683': attribute type 1 has an invalid length. [ 239.084004][T11714] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 239.147329][T11714] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 239.222683][T11716] gretap0: entered promiscuous mode [ 239.279032][T11714] 0{X功: renamed from gretap0 [ 239.303237][T11727] netlink: 'syz.2.1685': attribute type 9 has an invalid length. [ 239.406383][T11714] 0{X功: left promiscuous mode [ 239.411548][T11714] 0{X功: entered allmulticast mode [ 239.420922][T11714] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 239.669977][T11737] netlink: 'syz.1.1688': attribute type 1 has an invalid length. [ 239.966521][T11752] bridge_slave_0: left allmulticast mode [ 239.983990][T11752] bridge_slave_0: left promiscuous mode [ 240.002101][T11752] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.942870][T11820] syzkaller1: entered promiscuous mode [ 240.948958][T11820] syzkaller1: entered allmulticast mode [ 241.295325][T11822] netlink: 'syz.4.1714': attribute type 1 has an invalid length. [ 241.320866][T11822] netlink: 'syz.4.1714': attribute type 1 has an invalid length. [ 241.688185][ T5880] Bluetooth: hci4: link tx timeout [ 241.693820][ T5880] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 241.704353][ T5880] Bluetooth: hci4: link tx timeout [ 241.710427][ T5880] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 241.732400][ T5880] Bluetooth: hci4: link tx timeout [ 241.737704][ T5880] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 241.745800][ T5880] Bluetooth: hci4: link tx timeout [ 241.751121][ T5880] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 241.759357][ T5880] Bluetooth: hci4: link tx timeout [ 241.764858][ T5880] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 241.772712][ T5880] Bluetooth: hci4: link tx timeout [ 241.779005][ T5880] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 241.811013][T11845] __nla_validate_parse: 79 callbacks suppressed [ 241.811033][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1721'. [ 241.973645][ T8806] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.003111][ T8806] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.041085][ T8806] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.070696][ T8806] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.119098][T11858] netlink: 177652 bytes leftover after parsing attributes in process `syz.1.1724'. [ 242.326192][T11871] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1729'. [ 242.403837][T11873] tipc: Enabled bearer , priority 0 [ 242.412437][T11868] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1729'. [ 242.453648][T11873] syzkaller0: entered promiscuous mode [ 242.461403][T11873] syzkaller0: entered allmulticast mode [ 242.495253][T11864] syz.4.1728 (11864) used greatest stack depth: 17864 bytes left [ 242.565480][T11873] tipc: Resetting bearer [ 242.585486][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1734'. [ 242.615172][T11872] tipc: Resetting bearer [ 242.639650][T11872] tipc: Disabling bearer [ 242.801940][T11896] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1737'. [ 242.984026][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 243.010431][T11911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1744'. [ 243.206175][T11914] netlink: 152064 bytes leftover after parsing attributes in process `syz.3.1744'. [ 243.216607][T11914] netlink: zone id is out of range [ 243.221785][T11914] netlink: zone id is out of range [ 243.247321][T11914] netlink: zone id is out of range [ 243.253442][T11914] netlink: zone id is out of range [ 243.271114][T11914] netlink: zone id is out of range [ 243.304464][T11914] netlink: zone id is out of range [ 243.313302][T11914] netlink: zone id is out of range [ 243.336108][T11914] netlink: zone id is out of range [ 243.347382][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1749'. [ 243.361233][T11914] netlink: zone id is out of range [ 243.376360][T11914] netlink: zone id is out of range [ 243.726974][ T5880] Bluetooth: hci4: command 0x0405 tx timeout [ 244.260338][T11950] sctp: [Deprecated]: syz.0.1753 (pid 11950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.260338][T11950] Use struct sctp_sack_info instead [ 245.303258][T11988] validate_nla: 1 callbacks suppressed [ 245.303281][T11988] netlink: 'syz.4.1758': attribute type 13 has an invalid length. [ 245.988146][T11995] netlink: 'syz.0.1762': attribute type 4 has an invalid length. [ 246.112949][T12006] nbd: must specify at least one socket [ 246.344711][T12020] netlink: 'syz.1.1768': attribute type 33 has an invalid length. [ 246.559915][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059aa4000: rx timeout, send abort [ 247.074078][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059aa4000: abort rx timeout. Force session deactivation [ 248.692909][T12039] __nla_validate_parse: 5 callbacks suppressed [ 248.692932][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1773'. [ 248.749784][T12040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1773'. [ 249.003098][T12045] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1775'. [ 249.376061][T12078] netlink: 'syz.1.1784': attribute type 10 has an invalid length. [ 249.402180][T12078] batadv0: left promiscuous mode [ 249.418763][T12078] batadv0: left allmulticast mode [ 249.443499][T12078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.483525][T12078] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 249.509327][T12081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.527669][T12081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.537200][T12081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.545372][T12081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.553726][T12081] batman_adv: batadv0: Interface deactivated: macsec1 [ 249.572131][T12081] batman_adv: batadv0: Removing interface: macsec1 [ 249.631596][T12081] bond0: (slave batadv0): Releasing backup interface [ 249.836673][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1788'. [ 249.864215][T12099] macvtap1: entered promiscuous mode [ 249.870621][T12099] erspan0: entered promiscuous mode [ 249.878054][T12099] macvtap1: entered allmulticast mode [ 249.883611][T12099] erspan0: entered allmulticast mode [ 249.891329][T12101] netlink: 432 bytes leftover after parsing attributes in process `syz.1.1790'. [ 249.891956][T12097] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1789'. [ 249.916777][T12102] erspan0: left allmulticast mode [ 249.922034][T12102] erspan0: left promiscuous mode [ 250.193112][T12110] bridge0: entered promiscuous mode [ 250.208472][T12110] bridge0: entered allmulticast mode [ 250.301696][T12118] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1793'. [ 255.868269][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.876398][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.936643][T12135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1798'. [ 270.205231][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1803'. [ 270.236070][T12153] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1803'. [ 270.245414][T12153] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1803'. [ 270.260378][T12153] netlink: 'syz.4.1803': attribute type 5 has an invalid length. [ 270.277468][T12153] netlink: 'syz.4.1803': attribute type 6 has an invalid length. [ 270.285623][T12153] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1803'. [ 270.305250][T12160] netlink: 'syz.1.1806': attribute type 29 has an invalid length. [ 270.317408][T12160] netlink: 'syz.1.1806': attribute type 29 has an invalid length. [ 270.329162][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1806'. [ 270.352819][T12160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1806'. [ 270.377084][T12160] netlink: 'syz.1.1806': attribute type 20 has an invalid length. [ 270.401951][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1806'. [ 270.419525][T12164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1806'. [ 270.429947][T12160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1806'. [ 270.453631][T12165] net_ratelimit: 232 callbacks suppressed [ 270.453652][T12165] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 270.463188][T12160] netlink: 'syz.1.1806': attribute type 20 has an invalid length. [ 270.489184][T12169] netlink: 'syz.0.1808': attribute type 1 has an invalid length. [ 270.546431][T12165] netlink: 'syz.3.1807': attribute type 11 has an invalid length. [ 270.635160][T12165] netlink: 'syz.3.1807': attribute type 1 has an invalid length. [ 270.663943][T12181] netlink: 'syz.4.1812': attribute type 1 has an invalid length. [ 270.752994][T12189] netlink: 'syz.3.1815': attribute type 6 has an invalid length. [ 270.773871][T12181] 8021q: adding VLAN 0 to HW filter on device bond6 [ 270.798410][T12187] batadv_slave_1: entered promiscuous mode [ 270.807847][T12187] batman_adv: batadv0: Adding interface: macsec1 [ 270.816468][T12187] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.865462][T12187] batman_adv: batadv0: Interface activated: macsec1 [ 271.360857][T12226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.903854][T12251] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 272.181702][T12264] lo: Caught tx_queue_len zero misconfig [ 272.592725][T12284] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 272.608734][T12284] openvswitch: netlink: Duplicate key (type 0). [ 272.857620][T12295] IPv4: Oversized IP packet from 127.202.26.0 [ 272.913823][T12302] sctp: [Deprecated]: syz.2.1848 (pid 12302) Use of int in maxseg socket option. [ 272.913823][T12302] Use struct sctp_assoc_value instead [ 272.967354][T12309] bridge0: port 1(veth0_to_bridge) entered blocking state [ 272.996473][T12309] bridge0: port 1(veth0_to_bridge) entered disabled state [ 273.022551][T12309] veth0_to_bridge: entered promiscuous mode [ 273.359593][ T8803] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 273.950230][T12376] veth0_to_bridge: left promiscuous mode [ 273.969074][T12376] bridge0: port 1(veth0_to_bridge) entered disabled state [ 274.034386][T12383] x_tables: ip_tables: udp match: only valid for protocol 17 [ 274.062403][T12384] bond0: Caught tx_queue_len zero misconfig [ 274.959511][T12431] __nla_validate_parse: 16 callbacks suppressed [ 274.959534][T12431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1887'. [ 274.985298][ T8799] wlan1: Trigger new scan to find an IBSS to join [ 275.451172][T12465] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1892'. [ 275.918117][T12485] validate_nla: 8 callbacks suppressed [ 275.918138][T12485] netlink: 'syz.3.1895': attribute type 1 has an invalid length. [ 275.920706][T12477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'. [ 275.932262][T12485] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1895'. [ 275.943127][T12481] netlink: 'syz.2.1899': attribute type 10 has an invalid length. [ 276.111491][T12490] tipc: Enabled bearer , priority 0 [ 276.180802][T12491] syzkaller0: entered promiscuous mode [ 276.195523][T12491] syzkaller0: entered allmulticast mode [ 276.230867][T12488] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1900'. [ 276.318507][T12494] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 276.439202][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1903'. [ 276.464013][T12491] tipc: Resetting bearer [ 276.503259][T12491] tipc: Disabling bearer [ 276.821728][T12527] netlink: 'syz.0.1909': attribute type 1 has an invalid length. [ 276.855565][T12527] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1909'. [ 276.864340][T12529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.104125][T12544] netlink: 'syz.0.1914': attribute type 10 has an invalid length. [ 277.132382][T12544] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 277.150510][T12547] netlink: 'syz.2.1915': attribute type 2 has an invalid length. [ 277.168365][T12544] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 277.689133][T12582] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1923'. [ 277.753809][T12584] netlink: 'syz.0.1924': attribute type 12 has an invalid length. [ 277.955417][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1928'. [ 278.094272][T12603] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1931'. [ 278.123007][T12602] macvlan0: entered promiscuous mode [ 278.162607][T12602] batadv0: entered promiscuous mode [ 278.182522][T12602] debugfs: 'hsr1' already exists in 'hsr' [ 278.229560][T12602] Cannot create hsr debugfs directory [ 278.265068][T12602] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 278.294961][T12602] hsr1: entered allmulticast mode [ 278.300142][T12602] macvlan0: entered allmulticast mode [ 278.319772][T12602] batadv0: entered allmulticast mode [ 278.347216][T12602] macvlan0: left promiscuous mode [ 278.368959][T12602] batadv0: left promiscuous mode [ 278.612026][T12630] openvswitch: netlink: VXLAN extension 47 out of range max 1 [ 278.632600][T12630] openvswitch: netlink: VXLAN extension 47 out of range max 1 [ 278.640752][T12630] openvswitch: netlink: VXLAN extension 47 out of range max 1 [ 278.650333][T12630] openvswitch: netlink: VXLAN extension 47 out of range max 1 [ 278.658927][T12630] openvswitch: netlink: VXLAN extension 47 out of range max 1 [ 278.671769][T12630] openvswitch: netlink: VXLAN extension 47 out of range max 1 [ 278.682626][T12630] openvswitch: netlink: VXLAN extension 47 out of range max 1 [ 278.695486][T12630] openvswitch: netlink: VXLAN extension 47 out of range max 1 [ 278.733340][T12630] openvswitch: netlink: VXLAN extension 47 out of range max 1 [ 278.811018][T12641] netlink: 'syz.2.1944': attribute type 21 has an invalid length. [ 279.363135][T12675] sctp: [Deprecated]: syz.3.1956 (pid 12675) Use of int in max_burst socket option deprecated. [ 279.363135][T12675] Use struct sctp_assoc_value instead [ 279.687963][T12692] : left promiscuous mode [ 280.035190][ T8771] wlan1: Trigger new scan to find an IBSS to join [ 280.073830][T12707] __nla_validate_parse: 7 callbacks suppressed [ 280.073849][T12707] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1966'. [ 280.104763][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 280.137642][T12719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1969'. [ 280.150756][T12715] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1968'. [ 280.163729][T12721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1967'. [ 280.262223][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1970'. [ 280.286007][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1970'. [ 280.297720][T12724] netlink: 'syz.2.1970': attribute type 12 has an invalid length. [ 280.307154][T12724] netlink: 'syz.2.1970': attribute type 11 has an invalid length. [ 280.723053][T12744] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1975'. [ 280.900620][T12753] netlink: 'syz.3.1978': attribute type 23 has an invalid length. [ 281.015958][ T8796] wlan1: Creating new IBSS network, BSSID d2:a8:cb:7a:c9:2b [ 281.242883][T12766] tipc: Enabled bearer , priority 0 [ 281.278407][T12766] syzkaller0: entered promiscuous mode [ 281.295443][T12766] syzkaller0: entered allmulticast mode [ 281.348585][T12766] tipc: Resetting bearer [ 281.381665][T12765] tipc: Resetting bearer [ 281.419314][T12779] netlink: 'syz.2.1987': attribute type 10 has an invalid length. [ 281.468810][T12765] tipc: Disabling bearer [ 281.519444][T12779] bridge_slave_1: left allmulticast mode [ 281.561552][T12779] bridge_slave_1: entered promiscuous mode [ 281.578931][T12779] bridge_slave_1: entered allmulticast mode [ 281.595599][T12779] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 281.698849][T12791] netlink: 'syz.4.1985': attribute type 1 has an invalid length. [ 281.732808][T12791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1985'. [ 282.073902][T12810] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.1996'. [ 282.099161][T12810] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.1996'. [ 282.418167][T12827] netlink: 'syz.2.2002': attribute type 10 has an invalid length. [ 282.429819][T12827] batadv0: entered promiscuous mode [ 282.437066][T12827] net_ratelimit: 25 callbacks suppressed [ 282.437086][T12827] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 282.530256][T12832] bridge: RTM_NEWNEIGH with invalid ether address [ 282.557362][T12832] bridge: RTM_NEWNEIGH with invalid ether address [ 282.587784][T12832] netlink: 'syz.3.2005': attribute type 12 has an invalid length. [ 282.659830][T12842] tipc: Enabling of bearer rejected, failed to enable media [ 282.763246][T12851] IPVS: length: 8 != 1152 [ 283.117229][T12875] netlink: 'syz.1.2018': attribute type 12 has an invalid length. [ 283.125985][T12875] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 283.420722][T12890] lo: Caught tx_queue_len zero misconfig [ 283.680911][T12905] netlink: 'syz.1.2030': attribute type 33 has an invalid length. [ 283.705585][T12905] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 284.154264][T12937] netlink: 'syz.3.2040': attribute type 10 has an invalid length. [ 284.581230][T12966] wg1 speed is unknown, defaulting to 1000 [ 284.851540][T12972] netlink: 'syz.4.2049': attribute type 10 has an invalid length. [ 284.865926][T12972] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.878187][T12972] bond0: (slave team0): Enslaving as an active interface with an up link [ 285.185351][T12985] netlink: 'syz.1.2052': attribute type 18 has an invalid length. [ 285.203339][T12984] __nla_validate_parse: 15 callbacks suppressed [ 285.203402][T12984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2054'. [ 285.222942][T12988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2051'. [ 285.233041][T12976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2052'. [ 285.246948][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2051'. [ 285.256848][T12981] netlink: 'syz.4.2051': attribute type 9 has an invalid length. [ 285.325573][T12984] tipc: Enabled bearer , priority 0 [ 285.365447][T12984] syzkaller0: entered promiscuous mode [ 285.409592][T12984] syzkaller0: entered allmulticast mode [ 285.485025][T12984] tipc: Resetting bearer [ 285.535772][T12994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2055'. [ 285.573059][T12994] chnl_net:caif_netlink_parms(): no params data found [ 285.738905][T12984] tipc: Resetting bearer [ 285.801143][T12984] tipc: Disabling bearer [ 285.806894][T13010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2060'. [ 285.831386][T13005] 8021q: VLANs not supported on lo [ 285.930122][T13012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2062'. [ 285.978144][T13012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2062'. [ 285.988159][T13017] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2064'. [ 286.184934][ T5880] Bluetooth: hci4: command 0x0405 tx timeout [ 286.242631][T13029] syz.4.2068: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 286.278741][T13029] CPU: 0 UID: 0 PID: 13029 Comm: syz.4.2068 Not tainted syzkaller #0 PREEMPT(full) [ 286.278770][T13029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.278782][T13029] Call Trace: [ 286.278791][T13029] [ 286.278799][T13029] dump_stack_lvl+0x189/0x250 [ 286.278830][T13029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.278853][T13029] ? __pfx__printk+0x10/0x10 [ 286.278882][T13029] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 286.278904][T13029] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 286.278928][T13029] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 286.278955][T13029] warn_alloc+0x214/0x310 [ 286.278989][T13029] ? stack_depot_save_flags+0x40/0x860 [ 286.279023][T13029] ? __pfx_warn_alloc+0x10/0x10 [ 286.279056][T13029] ? kasan_save_track+0x4f/0x80 [ 286.279081][T13029] ? xskq_create+0x56/0x170 [ 286.279099][T13029] ? xsk_init_queue+0xb0/0x110 [ 286.279114][T13029] ? xsk_setsockopt+0x4dc/0x8d0 [ 286.279152][T13029] ? do_sock_setsockopt+0x179/0x1b0 [ 286.279176][T13029] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 286.279197][T13029] ? do_syscall_64+0xfa/0x3b0 [ 286.279216][T13029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.279245][T13029] __vmalloc_node_range_noprof+0x125/0x12f0 [ 286.279317][T13029] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 286.279355][T13029] ? __kasan_kmalloc+0x93/0xb0 [ 286.279385][T13029] vmalloc_user_noprof+0xad/0xf0 [ 286.279413][T13029] ? xskq_create+0xbf/0x170 [ 286.279434][T13029] xskq_create+0xbf/0x170 [ 286.279459][T13029] xsk_init_queue+0xb0/0x110 [ 286.279482][T13029] xsk_setsockopt+0x4dc/0x8d0 [ 286.279516][T13029] ? __pfx_xsk_setsockopt+0x10/0x10 [ 286.279545][T13029] ? __pfx_aa_sk_perm+0x10/0x10 [ 286.279578][T13029] ? aa_sock_opt_perm+0xff/0x1b0 [ 286.279602][T13029] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 286.279624][T13029] ? __pfx_xsk_setsockopt+0x10/0x10 [ 286.279656][T13029] do_sock_setsockopt+0x179/0x1b0 [ 286.279686][T13029] __x64_sys_setsockopt+0x13f/0x1b0 [ 286.279718][T13029] do_syscall_64+0xfa/0x3b0 [ 286.279738][T13029] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.279759][T13029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.279778][T13029] ? clear_bhb_loop+0x60/0xb0 [ 286.279802][T13029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.279821][T13029] RIP: 0033:0x7f9f62d8eec9 [ 286.279840][T13029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.279857][T13029] RSP: 002b:00007f9f63c1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 286.279880][T13029] RAX: ffffffffffffffda RBX: 00007f9f62fe5fa0 RCX: 00007f9f62d8eec9 [ 286.279893][T13029] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 286.279905][T13029] RBP: 00007f9f62e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 286.279918][T13029] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.279931][T13029] R13: 00007f9f62fe6038 R14: 00007f9f62fe5fa0 R15: 00007ffd622cfd08 [ 286.279968][T13029] [ 286.280056][T13029] Mem-Info: [ 286.352464][T13031] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2069'. [ 286.363235][T13029] active_anon:4589 inactive_anon:0 isolated_anon:0 [ 286.363235][T13029] active_file:3014 inactive_file:39949 isolated_file:0 [ 286.363235][T13029] unevictable:768 dirty:78 writeback:0 [ 286.363235][T13029] slab_reclaimable:11750 slab_unreclaimable:106675 [ 286.363235][T13029] mapped:29098 shmem:1356 pagetables:1087 [ 286.363235][T13029] sec_pagetables:0 bounce:0 [ 286.363235][T13029] kernel_misc_reclaimable:0 [ 286.363235][T13029] free:1320372 free_pcp:12083 free_cma:0 [ 286.644937][T13029] Node 0 active_anon:18456kB inactive_anon:0kB active_file:12056kB inactive_file:159600kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116392kB dirty:308kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14204kB pagetables:4612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 286.698500][T13035] 8021q: adding VLAN 0 to HW filter on device bond8 [ 286.710231][T13029] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 286.728933][T13046] validate_nla: 1 callbacks suppressed [ 286.728952][T13046] netlink: 'syz.2.2073': attribute type 8 has an invalid length. [ 286.741300][T13029] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 286.785054][T13029] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 286.791030][T13029] Node 0 DMA32 free:1369692kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18512kB inactive_anon:0kB active_file:12056kB inactive_file:158020kB unevictable:1536kB writepending:308kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:33028kB local_pcp:14744kB free_cma:0kB [ 286.824452][T13029] lowmem_reserve[]: 0 0 1 1 1 [ 286.831778][T13029] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 286.842703][T13037] 8021q: adding VLAN 0 to HW filter on device bond8 [ 286.885793][T13037] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 286.902891][T13037] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 286.914478][T13029] lowmem_reserve[]: 0 0 0 0 0 [ 286.926426][T13029] Node 1 Normal free:3895980kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14944kB local_pcp:6656kB free_cma:0kB [ 286.968233][T13029] lowmem_reserve[]: 0 0 0 0 0 [ 286.973250][T13029] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 286.991608][T13029] Node 0 DMA32: 721*4kB (UME) 703*8kB (UM) 282*16kB (U) 887*32kB (UE) 98*64kB (UME) 41*128kB (UME) 16*256kB (UM) 5*512kB (M) 7*1024kB (UME) 4*2048kB (UM) 316*4096kB (M) = 1369276kB [ 287.010288][T13029] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 287.023697][T13029] Node 1 Normal: 187*4kB (UME) 54*8kB (UME) 43*16kB (UME) 121*32kB (UME) 39*64kB (UME) 7*128kB (UME) 5*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3895980kB [ 287.052660][T13029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 287.083383][T13029] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 287.109405][T13029] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 287.140718][T13054] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.144362][T13029] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 287.189446][T13029] 44315 total pagecache pages [ 287.200869][T13029] 0 pages in swap cache [ 287.205220][T13029] Free swap = 124996kB [ 287.209534][T13029] Total swap = 124996kB [ 287.213909][T13029] 2097051 pages RAM [ 287.220105][T13029] 0 pages HighMem/MovableOnly [ 287.232030][T13029] 425672 pages reserved [ 287.237902][T13029] 0 pages cma reserved [ 287.315845][T13063] netlink: 'syz.2.2077': attribute type 9 has an invalid length. [ 287.344898][T13063] netlink: 'syz.2.2077': attribute type 6 has an invalid length. [ 287.369299][T13063] netlink: 'syz.2.2077': attribute type 7 has an invalid length. [ 287.417120][T13063] netlink: 'syz.2.2077': attribute type 8 has an invalid length. [ 287.549293][T13076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.563421][T13076] batadv0: mtu less than device minimum [ 287.577194][T13076] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.589856][T13076] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.602062][T13076] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.614184][T13076] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.626257][T13076] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.638773][T13076] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.651374][T13076] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.663751][T13076] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.675949][T13076] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 287.815806][T13076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.405244][T13135] tipc: Enabling of bearer rejected, failed to enable media [ 288.632038][T13140] nbd: must specify a device to reconfigure [ 288.668471][T13144] syzkaller1: entered promiscuous mode [ 288.678220][T13144] syzkaller1: entered allmulticast mode [ 288.751149][T13143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.637906][T13185] macsec0: entered promiscuous mode [ 289.643295][T13185] macsec0: entered allmulticast mode [ 289.820674][T13193] netlink: 'syz.1.2114': attribute type 16 has an invalid length. [ 289.851830][T13193] netlink: 'syz.1.2114': attribute type 17 has an invalid length. [ 289.902024][T13193] sctp: [Deprecated]: syz.1.2114 (pid 13193) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.902024][T13193] Use struct sctp_sack_info instead [ 290.239558][T13213] __nla_validate_parse: 14 callbacks suppressed [ 290.239592][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2122'. [ 290.480656][T13230] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2125'. [ 290.494156][T13220] veth7: entered promiscuous mode [ 290.779273][T13247] veth0: entered promiscuous mode [ 290.787059][T13247] veth0: left promiscuous mode [ 290.810395][T13247] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2131'. [ 290.889188][T13255] dvmrp0: entered promiscuous mode [ 291.241134][T13276] netlink: 'syz.0.2139': attribute type 1 has an invalid length. [ 291.258083][T13279] tipc: Enabling of bearer rejected, failed to enable media [ 291.281211][T13279] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2140'. [ 291.316205][T13283] netlink: 'syz.1.2142': attribute type 15 has an invalid length. [ 291.354300][T13283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2142'. [ 291.448139][T13295] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.455574][T13295] IPv6: NLM_F_CREATE should be set when creating new route [ 291.463134][T13295] IPv6: NLM_F_CREATE should be set when creating new route [ 291.470534][T13295] IPv6: NLM_F_CREATE should be set when creating new route [ 291.806792][T13312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2148'. [ 291.886130][T13314] netlink: 'syz.2.2149': attribute type 1 has an invalid length. [ 292.004482][T13319] bond4: (slave vxcan9): The slave device specified does not support setting the MAC address [ 292.018769][T13319] bond4: (slave vxcan9): Error -95 calling set_mac_address [ 292.368881][T13344] netlink: 'syz.4.2158': attribute type 1 has an invalid length. [ 292.461526][T13344] veth5: entered promiscuous mode [ 292.471840][T13344] bond7: (slave veth5): Enslaving as a backup interface with a down link [ 292.491547][T13350] syzkaller0: entered promiscuous mode [ 292.497718][T13350] syzkaller0: entered allmulticast mode [ 292.843837][T13369] syzkaller0: entered promiscuous mode [ 292.850483][T13369] syzkaller0: entered allmulticast mode [ 292.879525][T13374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2164'. [ 293.182007][T13394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2166'. [ 293.414174][T13402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2170'. [ 293.524162][T13407] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2170'. [ 293.848854][T13392] wg1: left promiscuous mode [ 293.853729][T13392] wg1: left allmulticast mode [ 293.970885][T13392] net_ratelimit: 13 callbacks suppressed [ 293.970907][T13392] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 294.096573][ T8799] bond3: (slave veth0_to_bond): link status definitely down, disabling slave [ 294.130290][ T8799] bond3: now running without any active interface! [ 294.400986][T13430] tipc: Enabled bearer , priority 0 [ 294.438539][T13430] syzkaller0: entered promiscuous mode [ 294.444179][T13430] syzkaller0: entered allmulticast mode [ 294.481307][T13430] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 294.609326][T13430] syzkaller0: mtu less than device minimum [ 294.625754][T13427] tipc: Resetting bearer [ 294.696854][T13427] tipc: Disabling bearer [ 295.387376][T13497] netlink: 'syz.1.2195': attribute type 3 has an invalid length. [ 296.342958][T13502] bond3: left promiscuous mode [ 296.371528][T13502] bond6: left promiscuous mode [ 296.377406][T13502] bond7: left promiscuous mode [ 296.389885][T13502] macvtap1: left promiscuous mode [ 296.400103][T13502] batman_adv: batadv0: Interface deactivated: macsec1 [ 296.425704][T13520] __nla_validate_parse: 3 callbacks suppressed [ 296.425726][T13520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2199'. [ 296.447944][T13520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2199'. [ 296.484831][ T8799] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.502305][ T8799] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.548464][ T8799] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.582756][ T8799] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.619769][ T8799] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.647323][ T8799] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.659688][T13533] tipc: Enabling of bearer rejected, media not registered [ 296.668838][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2200'. [ 296.679338][ T8799] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.695944][ T8799] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.723157][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2200'. [ 296.769263][T13538] bridge_slave_0: entered promiscuous mode [ 296.809859][T13538] netlink: 'syz.4.2203': attribute type 12 has an invalid length. [ 296.961649][T13549] nbd: must specify a device to reconfigure [ 297.573920][T13578] tipc: Enabled bearer , priority 0 [ 297.593786][T13578] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2212'. [ 297.623066][T13583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2215'. [ 297.652511][T13578] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 297.766351][T13576] tipc: Disabling bearer [ 297.891461][ T8775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 297.922904][ T8775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 297.962908][ T8775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 298.004629][ T8775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 298.159945][T13617] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2222'. [ 298.202494][T13619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2223'. [ 298.281590][T13619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2223'. [ 298.317154][T13619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'. [ 298.331249][T13623] netlink: 'syz.0.2225': attribute type 2 has an invalid length. [ 298.339903][T13623] netlink: 'syz.0.2225': attribute type 2 has an invalid length. [ 298.963658][T13660] netlink: 'syz.2.2236': attribute type 32 has an invalid length. [ 298.980483][T13660] (unnamed net_device) (uninitialized): option coupled_control: invalid value (110) [ 299.331591][T13680] netlink: 'syz.1.2239': attribute type 2 has an invalid length. [ 299.390377][T13682] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 299.619709][ T30] audit: type=1107 audit(1758831735.046:6): pid=13696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='賸5烑寱%柰U鼳伱速犽0仚l卼枯/ 6驃▕鐩' [ 300.261589][T13741] netlink: 'syz.2.2259': attribute type 1 has an invalid length. [ 300.460615][T13742] bond5: (slave vxcan9): The slave device specified does not support setting the MAC address [ 300.477084][T13742] bond5: (slave vxcan9): Error -95 calling set_mac_address [ 301.216145][T13790] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 301.417503][T13793] 8021q: adding VLAN 0 to HW filter on device bond8 [ 301.440674][T13800] team0: Device wireguard1 is of different type [ 301.489148][T13805] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 301.499038][T13808] __nla_validate_parse: 12 callbacks suppressed [ 301.499061][T13808] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2278'. [ 301.529159][T13803] netlink: 'syz.0.2277': attribute type 12 has an invalid length. [ 301.589787][T13810] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.2278'. [ 301.631606][T13810] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.2278'. [ 301.635410][T13812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2279'. [ 301.695772][T13812] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2279'. [ 301.770084][T13816] net veth1_virt_wifi .: renamed from virt_wifi0 [ 301.815747][T13818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2282'. [ 301.933722][T13832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2284'. [ 302.445615][T13859] netlink: 'syz.2.2290': attribute type 9 has an invalid length. [ 302.537214][T13863] netlink: 'syz.4.2292': attribute type 12 has an invalid length. [ 302.574009][T13863] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2292'. [ 302.971995][T13914] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2297'. [ 302.973280][T13913] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2297'. [ 303.073039][T13910] delete_channel: no stack [ 303.167962][T13925] netlink: 'syz.3.2298': attribute type 1 has an invalid length. [ 303.178192][T13926] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 303.242800][T13931] netlink: 'syz.2.2299': attribute type 1 has an invalid length. [ 303.620570][T13908] validate_nla: 1 callbacks suppressed [ 303.620593][T13908] netlink: 'syz.0.2296': attribute type 1 has an invalid length. [ 304.252951][T13976] tipc: Enabled bearer , priority 0 [ 304.287464][T13976] syzkaller0: entered promiscuous mode [ 304.303229][T13976] syzkaller0: entered allmulticast mode [ 304.448001][T13976] tipc: Resetting bearer [ 304.483950][T13988] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 304.539187][T13974] tipc: Resetting bearer [ 304.635541][T13974] tipc: Disabling bearer [ 304.676456][T14003] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 304.970652][T14015] tipc: Enabling of bearer rejected, failed to enable media [ 305.435932][T14032] netlink: 'syz.1.2322': attribute type 1 has an invalid length. [ 305.524313][T14041] tipc: Enabled bearer , priority 0 [ 305.541492][T14037] can: request_module (can-proto-0) failed. [ 305.631228][T14040] tipc: Disabling bearer [ 305.713878][T14051] netlink: 'syz.4.2328': attribute type 1 has an invalid length. [ 305.728381][T14053] netlink: 'syz.4.2328': attribute type 1 has an invalid length. [ 305.828853][T14058] macvlan0: left allmulticast mode [ 306.367269][T14093] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 306.799432][T14074] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 307.012246][T14123] __nla_validate_parse: 12 callbacks suppressed [ 307.012268][T14123] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2352'. [ 307.102008][T14123] netlink: 'syz.2.2352': attribute type 1 has an invalid length. [ 307.115770][T14123] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2352'. [ 307.138813][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2352'. [ 307.206659][T14129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2354'. [ 307.331377][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2356'. [ 307.340999][T14134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2356'. [ 307.538276][T14146] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2360'. [ 307.579601][T14148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.627438][T14148] netlink: 'syz.4.2361': attribute type 9 has an invalid length. [ 307.945352][T14159] netlink: 'syz.3.2364': attribute type 58 has an invalid length. [ 307.953492][T14159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2364'. [ 308.011818][T14162] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 308.040107][T14162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2367'. [ 308.064901][T14162] netlink: 'syz.2.2367': attribute type 10 has an invalid length. [ 308.091874][T14162] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 308.103725][T14162] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 308.113216][T14162] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 308.264099][T14170] netlink: 'syz.4.2368': attribute type 3 has an invalid length. [ 308.398215][T14177] C: renamed from team_slave_0 (while UP) [ 308.436886][T14177] netlink: 'syz.4.2368': attribute type 1 has an invalid length. [ 308.473118][T14177] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 308.692149][T14187] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 308.856378][T14190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2373'. [ 308.875050][T14195] netlink: 'syz.0.2376': attribute type 1 has an invalid length. [ 309.481457][T14221] gre2: entered promiscuous mode [ 309.513672][T14221] gre2: entered allmulticast mode [ 309.705812][T14236] netlink: 'syz.3.2388': attribute type 4 has an invalid length. [ 309.767802][T14236] netlink: 'syz.3.2388': attribute type 4 has an invalid length. [ 309.808982][T14239] netlink: 'syz.4.2391': attribute type 12 has an invalid length. [ 309.982629][T14253] netlink: 'syz.1.2395': attribute type 7 has an invalid length. [ 309.995379][T14249] bond0: (slave vlan1): Opening slave failed [ 310.012275][T14253] netlink: 'syz.1.2395': attribute type 8 has an invalid length. [ 310.020108][T14257] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 310.420521][T14279] netlink: 'syz.4.2403': attribute type 12 has an invalid length. [ 311.172020][T14319] bond0: (slave bridge_slave_1): Releasing backup interface [ 311.597016][T14342] macvtap1: entered promiscuous mode [ 311.602470][T14342] vlan0: entered promiscuous mode [ 311.665081][T14342] macvtap1: entered allmulticast mode [ 311.685574][T14342] vlan0: entered allmulticast mode [ 311.690925][T14342] veth0_vlan: entered allmulticast mode [ 312.082151][T14367] __nla_validate_parse: 13 callbacks suppressed [ 312.082172][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2426'. [ 312.121251][T14363] netlink: 264 bytes leftover after parsing attributes in process `syz.4.2425'. [ 312.145358][T14372] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2429'. [ 312.207244][T14373] pim6reg1: entered promiscuous mode [ 312.212607][T14373] pim6reg1: entered allmulticast mode [ 312.296740][T14384] netlink: 'syz.0.2428': attribute type 1 has an invalid length. [ 312.350992][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2428'. [ 312.491203][T14384] 8021q: adding VLAN 0 to HW filter on device bond9 [ 312.691633][T14415] netlink: 'syz.0.2428': attribute type 1 has an invalid length. [ 313.033530][T14389] bond9 (unregistering): Released all slaves [ 313.256589][T14448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2445'. [ 313.270750][T14441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2442'. [ 313.280819][T14445] 0{X功: left allmulticast mode [ 313.467164][ T8799] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 313.515710][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2448'. [ 313.563384][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2448'. [ 313.842374][T14445] bond0: (slave team0): Releasing backup interface [ 313.850671][T14445] batman_adv: batadv0: Interface deactivated: dummy0 [ 313.860384][T14445] batman_adv: batadv0: Removing interface: dummy0 [ 313.898399][T14445] veth1: left promiscuous mode [ 313.903670][T14445] veth1: left allmulticast mode [ 314.003045][T14445] bond0: (slave bond_slave_0): Releasing backup interface [ 314.018958][T14445] bond0: (slave bond_slave_1): Releasing backup interface [ 314.091392][T14445] team0: Port device C removed [ 314.110475][T14445] team0: Port device team_slave_1 removed [ 314.125788][T14445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.143166][T14445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.485286][T14445] ip6gre1: left allmulticast mode [ 314.521184][T14445] xfrm1: left allmulticast mode [ 314.542196][T14445] vlan2: left allmulticast mode [ 314.554617][T14445] hsr0: left allmulticast mode [ 314.559649][T14445] hsr_slave_0: left allmulticast mode [ 314.565519][T14445] hsr_slave_1: left allmulticast mode [ 314.573116][T14445] bridge4: left promiscuous mode [ 314.581799][T14445] bridge4: left allmulticast mode [ 314.703123][T14445] veth5: left promiscuous mode [ 314.712959][T14445] bond7: (slave veth5): Releasing backup interface [ 314.757815][T14445] bond8: (slave ip6gretap1): Releasing backup interface [ 314.769461][T14445] vlan0: left allmulticast mode [ 314.775279][T14445] veth0_vlan: left allmulticast mode [ 314.780937][T14445] vlan0: left promiscuous mode [ 314.787753][T14445] macvtap1: left promiscuous mode [ 314.793167][T14445] macvtap1: left allmulticast mode [ 314.884759][ T8799] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.904317][ T8799] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.945492][ T8799] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.977291][ T8799] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.027215][ T8799] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.050262][ T8799] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.088373][ T8799] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.132770][ T8799] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.193928][T14518] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2455'. [ 315.381554][T14529] syzkaller0: entered promiscuous mode [ 315.391913][T14529] syzkaller0: entered allmulticast mode [ 315.590099][T14560] netlink: 'syz.1.2464': attribute type 8 has an invalid length. [ 317.308884][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.326900][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.367775][T14578] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 317.422600][T14582] netlink: 'syz.3.2467': attribute type 5 has an invalid length. [ 317.438163][T14586] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2470'. [ 317.474378][T14588] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2470'. [ 317.620552][T14596] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 317.647898][T14600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2475'. [ 317.665090][T14600] netlink: 'syz.3.2475': attribute type 3 has an invalid length. [ 317.795493][T14601] syzkaller0: entered promiscuous mode [ 317.807943][T14601] syzkaller0: entered allmulticast mode [ 317.863058][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2474'. [ 319.771805][T14637] IPv6: sit3: Disabled Multicast RS [ 319.791909][T14637] sit3: entered allmulticast mode [ 319.898969][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2486'. [ 319.920844][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2486'. [ 319.933906][T14646] netlink: 'syz.4.2488': attribute type 1 has an invalid length. [ 319.949822][T14646] netlink: 'syz.4.2488': attribute type 1 has an invalid length. [ 320.353361][T14667] netlink: 'syz.0.2492': attribute type 12 has an invalid length. [ 320.828023][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2499'. [ 320.940494][T14693] veth0: entered promiscuous mode [ 321.304031][T14707] netlink: 'syz.2.2505': attribute type 12 has an invalid length. [ 321.389142][T14718] netlink: 'syz.4.2507': attribute type 10 has an invalid length. [ 321.402703][T14718] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2507'. [ 321.453757][T14718] team0: Port device geneve0 added [ 321.489505][ T4302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.503483][T14721] netlink: 'syz.1.2509': attribute type 1 has an invalid length. [ 321.523933][ T4302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.617948][ T4302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.653123][ T4302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.844245][T14730] 8021q: adding VLAN 0 to HW filter on device bond10 [ 321.857735][T14730] bond9: (slave bond10): making interface the new active one [ 321.879645][T14730] bond9: (slave bond10): Enslaving as an active interface with an up link [ 321.895556][T14685] veth0: left promiscuous mode [ 321.909554][T14721] bond9: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 321.980662][T14721] bond9: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 322.174684][T14759] netlink: 'syz.0.2515': attribute type 1 has an invalid length. [ 322.301755][T14764] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 322.321384][T14764] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 322.332476][T14764] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 322.500665][T14759] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 322.518159][T14759] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 322.858414][T14805] netlink: 'syz.4.2526': attribute type 12 has an invalid length. [ 323.163416][T14825] netlink: 'syz.2.2530': attribute type 1 has an invalid length. [ 323.172238][T14825] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2530'. [ 323.182441][T14825] netlink: 'syz.2.2530': attribute type 1 has an invalid length. [ 323.213926][T14829] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2532'. [ 323.244077][T14829] NCSI netlink: No device for ifindex 0 [ 323.262922][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2533'. [ 323.277336][T14831] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 323.291122][T14831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.489484][T14831] team0 (unregistering): Port device geneve0 removed [ 323.511521][ T4302] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.521793][ T4302] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.551995][T14839] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 323.565223][ T4302] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.574339][ T4302] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.671637][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2537'. [ 323.751290][T14850] tipc: Enabled bearer , priority 0 [ 323.782790][T14853] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2540'. [ 323.794235][T14853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2540'. [ 323.844387][T14850] syzkaller0: entered promiscuous mode [ 323.852790][T14850] syzkaller0: entered allmulticast mode [ 323.968295][T14850] tipc: Resetting bearer [ 324.050375][T14848] tipc: Resetting bearer [ 324.144272][T14848] tipc: Disabling bearer [ 324.186365][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2547'. [ 324.221653][T14878] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2545'. [ 324.472793][T14887] tipc: Enabled bearer , priority 0 [ 324.524837][T14891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2552'. [ 324.534883][T14891] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2552'. [ 324.556835][T14887] syzkaller0: entered promiscuous mode [ 324.562502][T14887] syzkaller0: entered allmulticast mode [ 324.600011][T14891] gretap0: entered promiscuous mode [ 324.616021][T14891] 0{X功: renamed from gretap0 [ 324.632494][T14891] 0{X功: left promiscuous mode [ 324.645132][T14891] 0{X功: entered allmulticast mode [ 324.660812][T14891] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 324.681144][T14887] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 324.714215][T14887] tipc: Resetting bearer [ 324.961428][T14915] netlink: 'syz.4.2558': attribute type 1 has an invalid length. [ 325.066969][T14921] bond9: (slave gretap0): making interface the new active one [ 325.076157][T14921] bond9: (slave gretap0): Enslaving as an active interface with an up link [ 325.086117][T14886] tipc: Resetting bearer [ 325.102791][T14886] tipc: Disabling bearer [ 325.120148][T14915] 8021q: adding VLAN 0 to HW filter on device bond9 [ 325.145526][T14924] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 325.443461][T14942] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 325.472136][T14942] smc: removing ib device syz! [ 325.835222][T14959] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 326.092052][T14972] netlink: 'syz.1.2577': attribute type 2 has an invalid length. [ 326.635835][T14985] ip6tnl0: Caught tx_queue_len zero misconfig [ 327.183770][T15006] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 327.282771][T15007] batman_adv: batadv0: Removing interface: macsec1 [ 327.533119][T15023] team0: Caught tx_queue_len zero misconfig [ 327.683362][T15028] netlink: 'syz.4.2594': attribute type 4 has an invalid length. [ 327.905681][T15036] tc_dump_action: action bad kind [ 328.815550][T15075] __nla_validate_parse: 13 callbacks suppressed [ 328.815575][T15075] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2608'. [ 328.979316][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2610'. [ 329.059234][T15084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2611'. [ 329.093922][T15084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2611'. [ 329.103651][T15084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2611'. [ 329.569513][T15109] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2620'. [ 329.637519][T15123] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2620'. [ 329.889280][T15128] netlink: 'syz.0.2623': attribute type 3 has an invalid length. [ 329.927949][T15128] delete_channel: no stack [ 329.952674][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2623'. [ 330.048747][T15135] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2626'. [ 330.119423][T15135] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2626'. [ 330.257798][T15139] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 330.407445][T15152] netlink: 'syz.4.2631': attribute type 39 has an invalid length. [ 330.431599][T15154] netlink: 'syz.1.2630': attribute type 2 has an invalid length. [ 330.624312][T15161] netlink: 'syz.0.2633': attribute type 1 has an invalid length. [ 331.839141][T15224] bridge0: port 1(veth0_to_bridge) entered blocking state [ 331.850106][T15224] bridge0: port 1(veth0_to_bridge) entered disabled state [ 331.878110][T15224] veth0_to_bridge: entered allmulticast mode [ 331.890050][T15224] veth0_to_bridge: entered promiscuous mode [ 332.017674][T15234] netlink: zone id is out of range [ 332.039094][T15234] netlink: del zone limit has 4 unknown bytes [ 332.081108][ T8770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.120602][ T8770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.497999][T15261] openvswitch: netlink: VXLAN extension 47 out of range max 1 [ 332.789185][T15277] geneve2: entered promiscuous mode [ 332.797371][T15277] geneve2: entered allmulticast mode [ 332.825623][ T4302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 332.860077][ T4302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 332.919859][ T4302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 332.964340][T15284] netlink: 'syz.3.2671': attribute type 21 has an invalid length. [ 332.967527][ T4302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 333.059912][ T8805] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 333.088929][ T8805] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 333.116120][ T8805] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 333.153287][ T8805] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 333.335640][T15301] openvswitch: netlink: Missing key (keys=40, expected=80) [ 333.899261][T15337] netlink: 'syz.4.2689': attribute type 10 has an invalid length. [ 333.938786][T15339] netlink: 'syz.4.2689': attribute type 10 has an invalid length. [ 334.290521][T15359] __nla_validate_parse: 13 callbacks suppressed [ 334.290545][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2696'. [ 334.511628][T15376] netlink: 'syz.4.2699': attribute type 10 has an invalid length. [ 334.552013][T15376] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 334.838859][T15391] netlink: 'syz.3.2703': attribute type 1 has an invalid length. [ 335.457247][T15422] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2709'. [ 335.811213][T15442] netlink: 'syz.1.2715': attribute type 8 has an invalid length. [ 335.883280][T15448] netlink: 'syz.2.2718': attribute type 21 has an invalid length. [ 335.920689][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2716'. [ 336.049432][T15459] netlink: 'syz.2.2720': attribute type 21 has an invalid length. [ 336.081203][T15456] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2719'. [ 336.102037][T15459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2720'. [ 336.372930][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2723'. [ 336.513919][T15487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2727'. [ 336.519368][T15486] netlink: 'syz.2.2726': attribute type 4 has an invalid length. [ 336.751813][T15498] IPVS: Unknown mcast interface: dvmrp0 [ 336.791136][T15496] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2728'. [ 336.833171][T15496] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2728'. [ 336.862448][T15496] 0{X功: renamed from gretap0 [ 336.893923][T15496] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 336.998681][T15504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2734'. [ 337.159918][T15509] syzkaller0: entered promiscuous mode [ 337.169716][T15509] syzkaller0: entered allmulticast mode [ 339.141882][T15523] wg1 speed is unknown, defaulting to 1000 [ 345.465010][ T8796] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 370.424207][T15545] netlink: 'syz.0.2745': attribute type 1 has an invalid length. [ 370.453917][T15550] __nla_validate_parse: 2 callbacks suppressed [ 370.453938][T15550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2746'. [ 370.474964][T15551] wg1 speed is unknown, defaulting to 1000 [ 370.482947][T15546] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 370.574417][T15550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2746'. [ 370.602554][T15557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2750'. [ 370.766607][T15557] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2750'. [ 370.983243][T15580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2757'. [ 371.096627][T15590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2760'. [ 371.159918][T15593] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2760'. [ 371.366071][T15602] tipc: Enabled bearer , priority 0 [ 371.400239][T15606] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2765'. [ 371.427732][T15602] syzkaller0: entered promiscuous mode [ 371.433446][T15602] syzkaller0: entered allmulticast mode [ 371.481688][T15601] tipc: Resetting bearer [ 371.537126][T15601] tipc: Disabling bearer [ 371.571726][T15608] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2766'. [ 371.582048][T15608] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2766'. [ 372.566292][T15646] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 372.582358][T15646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.071066][T15671] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 373.104967][T15671] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 373.143274][T15677] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 373.155692][ T8796] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.176316][ T8796] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.207759][ T8796] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.236341][ T8796] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.369866][T15688] netlink: 'syz.4.2789': attribute type 2 has an invalid length. [ 373.378728][T15688] nbd: must specify a device to reconfigure [ 373.472099][T15694] xt_bpf: check failed: parse error [ 373.622329][T15702] netlink: 'syz.2.2792': attribute type 1 has an invalid length. [ 373.922421][T15711] sysfs: cannot create duplicate filename '/class/ieee80211/!瀵$蘈賤 樥镠y岗丌 ' [ 373.937205][T15711] CPU: 0 UID: 0 PID: 15711 Comm: syz.4.2795 Not tainted syzkaller #0 PREEMPT(full) [ 373.937234][T15711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 373.937246][T15711] Call Trace: [ 373.937254][T15711] [ 373.937263][T15711] dump_stack_lvl+0x189/0x250 [ 373.937299][T15711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.937322][T15711] ? __pfx__printk+0x10/0x10 [ 373.937357][T15711] ? kernfs_path_from_node+0x2f/0x290 [ 373.937379][T15711] ? kernfs_path_from_node+0x250/0x290 [ 373.937398][T15711] ? kernfs_path_from_node+0x2f/0x290 [ 373.937425][T15711] sysfs_warn_dup+0x8e/0xa0 [ 373.937446][T15711] sysfs_do_create_link_sd+0xc0/0x110 [ 373.937471][T15711] device_add_class_symlinks+0x1cf/0x240 [ 373.937501][T15711] device_add+0x475/0xb50 [ 373.937529][T15711] wiphy_register+0x1ba6/0x28d0 [ 373.937574][T15711] ? __pfx_wiphy_register+0x10/0x10 [ 373.937593][T15711] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 373.937630][T15711] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 373.937664][T15711] ieee80211_register_hw+0x3484/0x4100 [ 373.937711][T15711] ? ieee80211_register_hw+0x1421/0x4100 [ 373.937751][T15711] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 373.937792][T15711] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 373.937833][T15711] ? __hrtimer_setup+0x187/0x210 [ 373.937851][T15711] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 373.937874][T15711] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 373.937938][T15711] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 373.937962][T15711] ? trace_kmalloc+0x1f/0xd0 [ 373.937984][T15711] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 373.938009][T15711] ? kstrndup+0xbf/0x160 [ 373.938044][T15711] hwsim_new_radio_nl+0xea4/0x1b10 [ 373.938076][T15711] ? __pfx___nla_validate_parse+0x10/0x10 [ 373.938121][T15711] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 373.938173][T15711] ? __nla_parse+0x40/0x60 [ 373.938198][T15711] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 373.938236][T15711] genl_family_rcv_msg_doit+0x212/0x300 [ 373.938271][T15711] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 373.938316][T15711] ? bpf_lsm_capable+0x9/0x20 [ 373.938341][T15711] ? security_capable+0x7e/0x2e0 [ 373.938377][T15711] genl_rcv_msg+0x60e/0x790 [ 373.938409][T15711] ? __pfx_genl_rcv_msg+0x10/0x10 [ 373.938433][T15711] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 373.938487][T15711] netlink_rcv_skb+0x208/0x470 [ 373.938506][T15711] ? __lock_acquire+0xab9/0xd20 [ 373.938534][T15711] ? __pfx_genl_rcv_msg+0x10/0x10 [ 373.938559][T15711] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 373.938606][T15711] ? down_read+0x1ad/0x2e0 [ 373.938632][T15711] genl_rcv+0x28/0x40 [ 373.938655][T15711] netlink_unicast+0x82f/0x9e0 [ 373.938698][T15711] ? __pfx_netlink_unicast+0x10/0x10 [ 373.938729][T15711] ? netlink_sendmsg+0x642/0xb30 [ 373.938747][T15711] ? skb_put+0x11b/0x210 [ 373.938785][T15711] netlink_sendmsg+0x805/0xb30 [ 373.938821][T15711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.938847][T15711] ? aa_sock_msg_perm+0xf1/0x1d0 [ 373.938871][T15711] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.938893][T15711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.938915][T15711] __sock_sendmsg+0x219/0x270 [ 373.938947][T15711] ____sys_sendmsg+0x505/0x830 [ 373.938977][T15711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.939015][T15711] ? import_iovec+0x74/0xa0 [ 373.939047][T15711] ___sys_sendmsg+0x21f/0x2a0 [ 373.939074][T15711] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.939149][T15711] ? __fget_files+0x2a/0x420 [ 373.939166][T15711] ? __fget_files+0x3a0/0x420 [ 373.939200][T15711] __x64_sys_sendmsg+0x19b/0x260 [ 373.939228][T15711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 373.939269][T15711] ? do_user_addr_fault+0xc8a/0x1390 [ 373.939305][T15711] ? do_syscall_64+0xbe/0x3b0 [ 373.939334][T15711] do_syscall_64+0xfa/0x3b0 [ 373.939354][T15711] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.939374][T15711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.939394][T15711] ? clear_bhb_loop+0x60/0xb0 [ 373.939419][T15711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.939437][T15711] RIP: 0033:0x7f9f62d8eec9 [ 373.939457][T15711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.939473][T15711] RSP: 002b:00007f9f63bda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.939496][T15711] RAX: ffffffffffffffda RBX: 00007f9f62fe6180 RCX: 00007f9f62d8eec9 [ 373.939510][T15711] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 373.939522][T15711] RBP: 00007f9f62e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 373.939533][T15711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.939543][T15711] R13: 00007f9f62fe6218 R14: 00007f9f62fe6180 R15: 00007ffd622cfd08 [ 373.939581][T15711] [ 374.447625][T15719] vlan3: entered allmulticast mode [ 374.455790][T15719] hsr0: entered allmulticast mode [ 374.470726][T15719] hsr_slave_0: entered allmulticast mode [ 374.476763][T15719] hsr_slave_1: entered allmulticast mode [ 375.113565][T15755] tipc: Enabled bearer , priority 0 [ 375.200722][T15755] syzkaller0: entered promiscuous mode [ 375.206501][T15755] syzkaller0: entered allmulticast mode [ 376.072729][T15775] __nla_validate_parse: 13 callbacks suppressed [ 376.072750][T15775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2809'. [ 376.114648][ T5982] tipc: Node number set to 4134662768 [ 377.234782][ T5880] Bluetooth: hci4: command 0x0405 tx timeout [ 377.475112][ T8799] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 377.705682][T15767] tipc: Resetting bearer [ 377.730111][T15754] tipc: Resetting bearer [ 377.763223][T15754] tipc: Disabling bearer [ 377.779770][T15771] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2809'. [ 377.931054][T15797] tipc: Enabling of bearer rejected, failed to enable media [ 378.026403][T15802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2815'. [ 378.111899][T15806] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2816'. [ 378.483864][T15824] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2821'. [ 378.749763][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.756523][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.797543][T15839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2827'. [ 378.822791][T15839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2827'. [ 379.042528][T15851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2832'. [ 379.262618][T15872] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2840'. [ 379.304632][ T5880] Bluetooth: hci4: command 0x0405 tx timeout [ 379.314321][T15877] syzkaller0: entered promiscuous mode [ 379.382292][T15877] syzkaller0: entered allmulticast mode [ 379.410514][T15875] tipc: Enabled bearer , priority 0 [ 379.486577][T15894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2843'. [ 379.509394][T15875] tipc: Resetting bearer [ 379.596219][T15875] tipc: Disabling bearer [ 381.243400][T15991] nbd: must specify a device to reconfigure [ 381.400008][T16003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.498697][T16008] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 381.528303][T16008] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 381.556770][T16008] gretap2: entered promiscuous mode [ 381.562363][T16008] gretap2: entered allmulticast mode [ 382.030452][T16048] __nla_validate_parse: 3 callbacks suppressed [ 382.030473][T16048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2883'. [ 382.225987][T16055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2887'. [ 382.325063][T16061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2888'. [ 383.067972][T16103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2898'. [ 383.298313][T16103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2898'. [ 383.413986][T16122] netlink: 'syz.4.2902': attribute type 2 has an invalid length. [ 383.445041][T16122] netlink: 'syz.4.2902': attribute type 2 has an invalid length. [ 383.513957][T16128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2903'. [ 383.592919][T16130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2904'. [ 383.639872][T16130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2904'. [ 383.901395][T16141] netlink: 'syz.1.2907': attribute type 12 has an invalid length. [ 383.932447][T16141] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2907'. [ 383.966808][T16141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2907'. [ 384.055349][T16146] tipc: Enabled bearer , priority 0 [ 384.115181][T16149] syzkaller0: entered promiscuous mode [ 384.131250][T16149] syzkaller0: entered allmulticast mode [ 384.242163][T16149] tipc: Resetting bearer [ 384.295284][T16145] tipc: Resetting bearer [ 384.434861][T16145] tipc: Disabling bearer [ 384.669974][T16172] tipc: Enabled bearer , priority 0 [ 384.693927][T16172] netlink: 'syz.2.2918': attribute type 1 has an invalid length. [ 384.742113][ T5880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 384.757556][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 384.779295][ T5880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 384.797558][ T5880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 384.814152][ T5880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 384.846796][T16172] tipc: Disabling bearer [ 384.904871][T16184] tipc: Enabled bearer , priority 0 [ 384.938333][T16183] tipc: Disabling bearer [ 384.972747][T16192] netlink: 'syz.1.2924': attribute type 2 has an invalid length. [ 385.017649][T16179] wg1 speed is unknown, defaulting to 1000 [ 385.206181][T16209] netlink: 'syz.1.2928': attribute type 39 has an invalid length. [ 385.301524][T16218] delete_channel: no stack [ 385.607549][T16179] chnl_net:caif_netlink_parms(): no params data found [ 385.677242][T16222] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 385.810672][T16179] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.823509][T16179] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.835967][T16179] bridge_slave_0: entered allmulticast mode [ 385.844348][T16179] bridge_slave_0: entered promiscuous mode [ 385.855829][T16179] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.863185][T16179] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.874101][T16179] bridge_slave_1: entered allmulticast mode [ 385.896911][T16179] bridge_slave_1: entered promiscuous mode [ 385.970163][T16179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.015284][T16179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.134202][T16179] team0: Port device team_slave_0 added [ 386.175241][T16247] tipc: Enabled bearer , priority 0 [ 386.189035][T16179] team0: Port device team_slave_1 added [ 386.218372][T16247] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 386.238503][T16247] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 386.268274][T16247] tipc: Resetting bearer [ 386.278880][T16251] netlink: 'syz.0.2939': attribute type 10 has an invalid length. [ 386.333133][T16257] netlink: 'syz.0.2939': attribute type 10 has an invalid length. [ 386.360679][T16247] tipc: Resetting bearer [ 386.374249][T16251] netlink: 'syz.0.2939': attribute type 10 has an invalid length. [ 386.382687][T16258] netlink: 'syz.0.2939': attribute type 10 has an invalid length. [ 386.408119][T16179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.425383][T16256] block nbd2: server does not support multiple connections per device. [ 386.438504][T16179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.446268][T16256] block nbd2: shutting down sockets [ 386.481247][T16179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.496844][T16179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.556605][T16179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.586270][T16179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.725004][T16179] hsr_slave_0: entered promiscuous mode [ 386.732378][T16179] hsr_slave_1: entered promiscuous mode [ 386.742652][T16179] debugfs: 'hsr0' already exists in 'hsr' [ 386.774316][T16179] Cannot create hsr debugfs directory [ 386.861817][ T8771] tipc: Resetting bearer [ 386.912702][ T5869] Bluetooth: hci3: command tx timeout [ 386.971009][T16279] sock: sock_set_timeout: `syz.1.2947' (pid 16279) tries to set negative timeout [ 387.120782][T16282] : renamed from veth1_vlan (while UP) [ 387.156571][T16289] __nla_validate_parse: 5 callbacks suppressed [ 387.156592][T16289] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2950'. [ 387.174081][T16279] wg1 speed is unknown, defaulting to 1000 [ 387.285475][T14507] tipc: Node number set to 2537750823 [ 387.411163][T16179] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.540302][T16305] bridge_slave_0: left allmulticast mode [ 387.582686][T16305] bridge_slave_0: left promiscuous mode [ 387.593138][T16305] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.610001][T16310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2955'. [ 387.624671][T16310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2955'. [ 387.625450][T16305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.643355][T16310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2955'. [ 387.649846][T16305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.677806][T16305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.689808][T16305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.716900][T16305] bond1: (slave geneve2): Releasing active interface [ 387.752135][T16305] bond4: (slave gretap1): Releasing active interface [ 387.827933][T16179] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.060776][T16179] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.230668][T16179] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.405485][T16344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2966'. [ 388.506005][T16348] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2968'. [ 388.556798][T16179] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 388.602060][T16179] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 388.632366][T16179] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 388.653991][T16179] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 388.991514][ T5869] Bluetooth: hci3: command tx timeout [ 389.082373][T16384] C: renamed from lo [ 389.171581][T16390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2979'. [ 389.250922][T16179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.367568][T16179] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.418203][ T8799] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.425541][ T8799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.581890][ T8796] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.589407][ T8796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.748361][T16419] net veth1_virt_wifi .: renamed from virt_wifi0 [ 389.847867][T16425] tipc: Enabling of bearer rejected, already enabled [ 390.068286][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2991'. [ 390.129710][T16438] validate_nla: 2 callbacks suppressed [ 390.129730][T16438] netlink: 'syz.1.2992': attribute type 39 has an invalid length. [ 390.605143][T16460] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2997'. [ 390.658072][T16462] sctp: [Deprecated]: syz.3.2998 (pid 16462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 390.658072][T16462] Use struct sctp_sack_info instead [ 390.823878][T16471] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3001'. [ 390.841551][T16179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.065151][ T5869] Bluetooth: hci3: command tx timeout [ 391.291261][T16492] netlink: 'syz.2.3008': attribute type 4 has an invalid length. [ 391.769715][T16179] veth0_vlan: entered promiscuous mode [ 391.827198][T16179] veth1_vlan: entered promiscuous mode [ 391.919604][T16538] netlink: 'syz.3.3018': attribute type 8 has an invalid length. [ 391.969785][T16179] veth0_macvtap: entered promiscuous mode [ 391.997100][T16179] veth1_macvtap: entered promiscuous mode [ 392.057745][T16179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.103123][T16179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.155880][T16492] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 392.188197][ T8798] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.238830][ T8798] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.301964][ T8798] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.334001][ T8798] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.439547][T16555] IPv6: sit3: Disabled Multicast RS [ 392.468965][T16555] sit3: entered allmulticast mode [ 392.724208][T16568] __nla_validate_parse: 11 callbacks suppressed [ 392.724230][T16568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3028'. [ 392.748338][ T8796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.761521][ T8796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.848880][ T8805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.880078][ T8805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.021177][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3030'. [ 393.144983][ T5869] Bluetooth: hci3: command tx timeout [ 393.276827][T16594] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3035'. [ 393.289712][T16591] macvtap1: entered allmulticast mode [ 393.299092][T16591] veth0_macvtap: entered allmulticast mode [ 393.338270][T16597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3033'. [ 393.490998][T16603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3038'. [ 393.514530][T16601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3037'. [ 393.650157][T16601] netlink: 'syz.4.3037': attribute type 2 has an invalid length. [ 393.773996][T16614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.792937][T16615] Unsupported ieee802154 address type: 0 [ 393.901107][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3041'. [ 394.019575][T16620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3042'. [ 394.300101][ T5880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 394.335790][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 394.346160][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 394.375936][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 394.396079][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 394.522141][T16639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3048'. [ 394.576807][T16631] wg1 speed is unknown, defaulting to 1000 [ 394.710929][T16647] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 394.777493][T16649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3052'. [ 394.802358][T16652] netlink: 'syz.3.3051': attribute type 10 has an invalid length. [ 394.830902][T16652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.875655][T16649] netlink: 'syz.0.3052': attribute type 1 has an invalid length. [ 394.883563][T16649] netlink: 'syz.0.3052': attribute type 1 has an invalid length. [ 395.412730][T16675] netlink: 'syz.3.3060': attribute type 1 has an invalid length. [ 395.437900][T16631] chnl_net:caif_netlink_parms(): no params data found [ 395.600360][T16675] 8021q: adding VLAN 0 to HW filter on device bond5 [ 395.753081][T16691] openvswitch: netlink: IPv4 tun info is not correct [ 396.042063][T16631] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.063743][T16631] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.071929][T16631] bridge_slave_0: entered allmulticast mode [ 396.080823][T16631] bridge_slave_0: entered promiscuous mode [ 396.098820][T16712] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.274843][T16631] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.292650][T16631] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.315039][T16631] bridge_slave_1: entered allmulticast mode [ 396.327910][T16631] bridge_slave_1: entered promiscuous mode [ 396.394191][T16716] syz_tun: entered allmulticast mode [ 396.507057][ T5869] Bluetooth: hci1: command tx timeout [ 396.522744][T16631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.552090][T16631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.650067][T16631] team0: Port device team_slave_0 added [ 396.720263][T16631] team0: Port device team_slave_1 added [ 396.793561][T16631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.850679][T16631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.926135][T16631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.967857][T16631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.980795][T16631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.013980][T16631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.157859][T16631] hsr_slave_0: entered promiscuous mode [ 397.165428][T16631] hsr_slave_1: entered promiscuous mode [ 397.172358][T16631] debugfs: 'hsr0' already exists in 'hsr' [ 397.179052][T16631] Cannot create hsr debugfs directory [ 397.301430][T16755] tipc: Can't bind to reserved service type 1 [ 397.703740][T16779] netlink: 'syz.4.3087': attribute type 11 has an invalid length. [ 397.728673][T16631] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.747100][T16631] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.762350][T16631] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 397.941483][T16631] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.963519][T16631] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.974448][T16631] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 397.982480][T16796] __nla_validate_parse: 8 callbacks suppressed [ 397.982498][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3094'. [ 398.097620][T16796] veth0_to_bridge: left allmulticast mode [ 398.104008][T16796] veth0_to_bridge: left promiscuous mode [ 398.128149][T16796] bridge0: port 1(veth0_to_bridge) entered disabled state [ 398.321777][T16631] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 398.350105][T16631] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.377587][T16631] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.401387][T16631] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 398.457515][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3098'. [ 398.587370][ T5869] Bluetooth: hci1: command tx timeout [ 398.634165][T16631] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.664666][T16631] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.683118][T16631] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 398.945432][T16842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3106'. [ 399.057345][T16631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 399.100517][T16631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 399.128243][T16631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 399.140420][T16631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 399.164447][T16853] vlan0: entered promiscuous mode [ 399.172580][T16853] vlan0: entered allmulticast mode [ 399.183803][T16853] veth0_vlan: entered allmulticast mode [ 399.221417][T16853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3108'. [ 399.231410][T16855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3111'. [ 399.239826][T16855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3111'. [ 399.448956][T16869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3115'. [ 399.472366][T16631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.543967][T16631] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.581217][ T8771] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.588653][ T8771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.628158][T16874] netlink: 'syz.2.3116': attribute type 1 has an invalid length. [ 399.654068][ T8771] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.661373][ T8771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.678033][T16874] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3116'. [ 399.865163][T16885] netlink: 'syz.2.3118': attribute type 1 has an invalid length. [ 399.873040][T16885] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3118'. [ 400.450877][T16913] netlink: 'syz.3.3125': attribute type 2 has an invalid length. [ 400.545278][T16631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.671450][ T5869] Bluetooth: hci1: command tx timeout [ 400.749320][T16631] veth0_vlan: entered promiscuous mode [ 400.795722][T16924] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3130'. [ 400.820643][T16631] veth1_vlan: entered promiscuous mode [ 400.835277][T16924] netlink: 'syz.2.3130': attribute type 3 has an invalid length. [ 400.967814][T16631] veth0_macvtap: entered promiscuous mode [ 401.015346][T16631] veth1_macvtap: entered promiscuous mode [ 401.114157][T16631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.158798][T16631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.210272][ T4302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.236153][ T4302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.291196][ T4302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.309601][ T4302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.696885][T16974] Bluetooth: MGMT ver 1.23 [ 401.857863][ T4302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.892952][ T4302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.979688][ T8775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.994046][ T8775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.022931][T16983] netlink: 'syz.4.3145': attribute type 4 has an invalid length. [ 402.156732][T16991] netlink: 'syz.3.3146': attribute type 3 has an invalid length. [ 402.197474][T16991] netlink: 'syz.3.3146': attribute type 3 has an invalid length. [ 402.233320][T16991] netlink: 'syz.3.3146': attribute type 3 has an invalid length. [ 402.280100][T16991] netlink: 'syz.3.3146': attribute type 3 has an invalid length. [ 402.304244][T16991] netlink: 'syz.3.3146': attribute type 3 has an invalid length. [ 402.325504][T16991] netlink: 'syz.3.3146': attribute type 3 has an invalid length. [ 402.349116][T16991] netlink: 'syz.3.3146': attribute type 3 has an invalid length. [ 402.398417][T17005] openvswitch: netlink: VXLAN extension 47 out of range max 1 [ 402.745701][ T5869] Bluetooth: hci1: command tx timeout [ 402.846607][T17014] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 403.368210][T17043] __nla_validate_parse: 72 callbacks suppressed [ 403.368235][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3156'. [ 403.439634][T13996] ================================================================== [ 403.447757][T13996] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350 [ 403.455344][T13996] Read of size 8 at addr ffff88806b16c0a0 by task khidpd_15be0009/13996 [ 403.463789][T13996] [ 403.466232][T13996] CPU: 0 UID: 0 PID: 13996 Comm: khidpd_15be0009 Not tainted syzkaller #0 PREEMPT(full) [ 403.466259][T13996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 403.466271][T13996] Call Trace: [ 403.466280][T13996] [ 403.466288][T13996] dump_stack_lvl+0x189/0x250 [ 403.466314][T13996] ? __kasan_check_byte+0x12/0x40 [ 403.466342][T13996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.466363][T13996] ? lock_release+0x4b/0x3e0 [ 403.466389][T13996] ? __virt_addr_valid+0x4a5/0x5c0 [ 403.466414][T13996] print_report+0xca/0x240 [ 403.466432][T13996] ? __mutex_lock+0x801/0x1350 [ 403.466452][T13996] kasan_report+0x118/0x150 [ 403.466478][T13996] ? __mutex_lock+0x801/0x1350 [ 403.466503][T13996] __mutex_lock+0x801/0x1350 [ 403.466525][T13996] ? __mutex_lock+0x5bb/0x1350 [ 403.466548][T13996] ? l2cap_unregister_user+0x6a/0x1b0 [ 403.466578][T13996] ? __pfx___mutex_lock+0x10/0x10 [ 403.466604][T13996] ? __pfx___timer_delete_sync+0x10/0x10 [ 403.466641][T13996] l2cap_unregister_user+0x6a/0x1b0 [ 403.466670][T13996] hidp_session_thread+0x3c9/0x410 [ 403.466700][T13996] ? __pfx_hidp_session_thread+0x10/0x10 [ 403.466726][T13996] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 403.466744][T13996] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 403.466774][T13996] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 403.466801][T13996] ? __kthread_parkme+0x7b/0x200 [ 403.466821][T13996] ? __kthread_parkme+0x1a1/0x200 [ 403.466844][T13996] kthread+0x70e/0x8a0 [ 403.466867][T13996] ? __pfx_hidp_session_thread+0x10/0x10 [ 403.466894][T13996] ? __pfx_kthread+0x10/0x10 [ 403.466918][T13996] ? _raw_spin_unlock_irq+0x23/0x50 [ 403.466935][T13996] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.466953][T13996] ? __pfx_kthread+0x10/0x10 [ 403.466976][T13996] ret_from_fork+0x439/0x7d0 [ 403.466997][T13996] ? __pfx_ret_from_fork+0x10/0x10 [ 403.467020][T13996] ? __switch_to_asm+0x39/0x70 [ 403.467043][T13996] ? __switch_to_asm+0x33/0x70 [ 403.467065][T13996] ? __pfx_kthread+0x10/0x10 [ 403.467088][T13996] ret_from_fork_asm+0x1a/0x30 [ 403.467120][T13996] [ 403.467128][T13996] [ 403.671169][T13996] Allocated by task 5877: [ 403.675497][T13996] kasan_save_track+0x3e/0x80 [ 403.680617][T13996] __kasan_kmalloc+0x93/0xb0 [ 403.685217][T13996] __kmalloc_noprof+0x27a/0x4f0 [ 403.690068][T13996] hci_alloc_dev_priv+0x28/0x2060 [ 403.695100][T13996] vhci_create_device+0x120/0x650 [ 403.700132][T13996] vhci_write+0x3ce/0x4a0 [ 403.704465][T13996] vfs_write+0x5c9/0xb30 [ 403.708719][T13996] ksys_write+0x145/0x250 [ 403.713082][T13996] do_syscall_64+0xfa/0x3b0 [ 403.717694][T13996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.723646][T13996] [ 403.725979][T13996] Freed by task 5877: [ 403.730044][T13996] kasan_save_track+0x3e/0x80 [ 403.734903][T13996] kasan_save_free_info+0x46/0x50 [ 403.739924][T13996] __kasan_slab_free+0x5b/0x80 [ 403.744870][T13996] kfree+0x18e/0x440 [ 403.748770][T13996] bt_host_release+0x82/0x90 [ 403.753372][T13996] device_release+0x9c/0x1c0 [ 403.758234][T13996] kobject_put+0x22b/0x480 [ 403.762754][T13996] vhci_release+0x15a/0x1a0 [ 403.767344][T13996] __fput+0x44c/0xa70 [ 403.771325][T13996] task_work_run+0x1d1/0x260 [ 403.775931][T13996] do_exit+0x6b5/0x2300 [ 403.780103][T13996] do_group_exit+0x21c/0x2d0 [ 403.784807][T13996] get_signal+0x1286/0x1340 [ 403.789341][T13996] arch_do_signal_or_restart+0x9a/0x750 [ 403.794988][T13996] exit_to_user_mode_loop+0x75/0x110 [ 403.800283][T13996] do_syscall_64+0x2bd/0x3b0 [ 403.805657][T13996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.811549][T13996] [ 403.813969][T13996] Last potentially related work creation: [ 403.819678][T13996] kasan_save_stack+0x3e/0x60 [ 403.824357][T13996] kasan_record_aux_stack+0xbd/0xd0 [ 403.829640][T13996] insert_work+0x3d/0x330 [ 403.833975][T13996] __queue_work+0xbaf/0xfb0 [ 403.838518][T13996] queue_work_on+0x181/0x270 [ 403.843291][T13996] process_scheduled_works+0xae1/0x17b0 [ 403.848918][T13996] worker_thread+0x8a0/0xda0 [ 403.853618][T13996] kthread+0x70e/0x8a0 [ 403.857776][T13996] ret_from_fork+0x439/0x7d0 [ 403.862457][T13996] ret_from_fork_asm+0x1a/0x30 [ 403.867308][T13996] [ 403.869715][T13996] Second to last potentially related work creation: [ 403.877098][T13996] kasan_save_stack+0x3e/0x60 [ 403.881797][T13996] kasan_record_aux_stack+0xbd/0xd0 [ 403.887168][T13996] insert_work+0x3d/0x330 [ 403.891508][T13996] __queue_work+0xcd2/0xfb0 [ 403.896010][T13996] call_timer_fn+0x17b/0x5f0 [ 403.900613][T13996] __run_timer_base+0x646/0x860 [ 403.905466][T13996] run_timer_softirq+0xb7/0x180 [ 403.910409][T13996] handle_softirqs+0x283/0x870 [ 403.915256][T13996] __irq_exit_rcu+0xca/0x1f0 [ 403.919843][T13996] irq_exit_rcu+0x9/0x30 [ 403.924170][T13996] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 403.929886][T13996] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 403.935950][T13996] [ 403.938363][T13996] The buggy address belongs to the object at ffff88806b16c000 [ 403.938363][T13996] which belongs to the cache kmalloc-8k of size 8192 [ 403.952673][T13996] The buggy address is located 160 bytes inside of [ 403.952673][T13996] freed 8192-byte region [ffff88806b16c000, ffff88806b16e000) [ 403.967074][T13996] [ 403.969475][T13996] The buggy address belongs to the physical page: [ 403.976576][T13996] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6b168 [ 403.985344][T13996] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 403.994387][T13996] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 404.002101][T13996] page_type: f5(slab) [ 404.006087][T13996] raw: 00fff00000000040 ffff88801a442280 ffffea0001ad0600 dead000000000002 [ 404.014844][T13996] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 404.023426][T13996] head: 00fff00000000040 ffff88801a442280 ffffea0001ad0600 dead000000000002 [ 404.032095][T13996] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 404.040945][T13996] head: 00fff00000000003 ffffea0001ac5a01 00000000ffffffff 00000000ffffffff [ 404.049879][T13996] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 404.060105][T13996] page dumped because: kasan: bad access detected [ 404.066608][T13996] page_owner tracks the page as allocated [ 404.072455][T13996] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5523, tgid 5523 (sh), ts 56887671633, free_ts 56822771500 [ 404.092713][T13996] post_alloc_hook+0x240/0x2a0 [ 404.097489][T13996] get_page_from_freelist+0x21e4/0x22c0 [ 404.103213][T13996] __alloc_frozen_pages_noprof+0x181/0x370 [ 404.109116][T13996] alloc_pages_mpol+0x232/0x4a0 [ 404.113975][T13996] allocate_slab+0x8a/0x370 [ 404.118624][T13996] ___slab_alloc+0xbeb/0x1420 [ 404.123311][T13996] __kmalloc_cache_noprof+0x296/0x3d0 [ 404.128779][T13996] tomoyo_init_log+0x111f/0x1f70 [ 404.133894][T13996] tomoyo_supervisor+0x340/0x1480 [ 404.138917][T13996] tomoyo_env_perm+0x149/0x1e0 [ 404.143773][T13996] tomoyo_find_next_domain+0x15cf/0x1aa0 [ 404.149409][T13996] tomoyo_bprm_check_security+0x11c/0x180 [ 404.155218][T13996] security_bprm_check+0x89/0x270 [ 404.160499][T13996] bprm_execve+0x8ee/0x1450 [ 404.165175][T13996] do_execveat_common+0x510/0x6a0 [ 404.170538][T13996] __x64_sys_execve+0x94/0xb0 [ 404.175331][T13996] page last free pid 5521 tgid 5521 stack trace: [ 404.181655][T13996] __free_frozen_pages+0xbc4/0xd30 [ 404.186800][T13996] __slab_free+0x303/0x3c0 [ 404.191564][T13996] qlist_free_all+0x97/0x140 [ 404.196350][T13996] kasan_quarantine_reduce+0x148/0x160 [ 404.201813][T13996] __kasan_slab_alloc+0x22/0x80 [ 404.206672][T13996] __kmalloc_noprof+0x224/0x4f0 [ 404.211555][T13996] tomoyo_supervisor+0xbd5/0x1480 [ 404.216764][T13996] tomoyo_path_permission+0x25a/0x380 [ 404.222477][T13996] tomoyo_path_perm+0x392/0x4b0 [ 404.227597][T13996] security_inode_getattr+0x12f/0x330 [ 404.233317][T13996] vfs_statx+0x18e/0x550 [ 404.237732][T13996] vfs_fstatat+0x118/0x170 [ 404.242148][T13996] __x64_sys_newfstatat+0x116/0x190 [ 404.247869][T13996] do_syscall_64+0xfa/0x3b0 [ 404.252525][T13996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.258415][T13996] [ 404.260740][T13996] Memory state around the buggy address: [ 404.266627][T13996] ffff88806b16bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 404.275297][T13996] ffff88806b16c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 404.283448][T13996] >ffff88806b16c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 404.291774][T13996] ^ [ 404.297138][T13996] ffff88806b16c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 404.305284][T13996] ffff88806b16c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 404.313513][T13996] ================================================================== [ 404.324416][T13996] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 404.331832][T13996] CPU: 0 UID: 0 PID: 13996 Comm: khidpd_15be0009 Not tainted syzkaller #0 PREEMPT(full) [ 404.342168][T13996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 404.352319][T13996] Call Trace: [ 404.355606][T13996] [ 404.358548][T13996] dump_stack_lvl+0x99/0x250 [ 404.363150][T13996] ? __asan_memcpy+0x40/0x70 [ 404.367750][T13996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.372951][T13996] ? __pfx__printk+0x10/0x10 [ 404.377729][T13996] vpanic+0x281/0x750 [ 404.381802][T13996] ? __pfx_vpanic+0x10/0x10 [ 404.386741][T13996] ? irqentry_exit+0x74/0x90 [ 404.391420][T13996] panic+0xb9/0xc0 [ 404.395578][T13996] ? __pfx_panic+0x10/0x10 [ 404.400001][T13996] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 404.405905][T13996] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 404.412144][T13996] ? __mutex_lock+0x801/0x1350 [ 404.416994][T13996] check_panic_on_warn+0x89/0xb0 [ 404.421935][T13996] ? __mutex_lock+0x801/0x1350 [ 404.426882][T13996] end_report+0x78/0x160 [ 404.431216][T13996] kasan_report+0x129/0x150 [ 404.435986][T13996] ? __mutex_lock+0x801/0x1350 [ 404.440841][T13996] __mutex_lock+0x801/0x1350 [ 404.445518][T13996] ? __mutex_lock+0x5bb/0x1350 [ 404.450288][T13996] ? l2cap_unregister_user+0x6a/0x1b0 [ 404.455666][T13996] ? __pfx___mutex_lock+0x10/0x10 [ 404.460779][T13996] ? __pfx___timer_delete_sync+0x10/0x10 [ 404.466498][T13996] l2cap_unregister_user+0x6a/0x1b0 [ 404.471806][T13996] hidp_session_thread+0x3c9/0x410 [ 404.477020][T13996] ? __pfx_hidp_session_thread+0x10/0x10 [ 404.482745][T13996] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 404.488640][T13996] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 404.494979][T13996] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 404.501344][T13996] ? __kthread_parkme+0x7b/0x200 [ 404.506385][T13996] ? __kthread_parkme+0x1a1/0x200 [ 404.511500][T13996] kthread+0x70e/0x8a0 [ 404.515576][T13996] ? __pfx_hidp_session_thread+0x10/0x10 [ 404.521593][T13996] ? __pfx_kthread+0x10/0x10 [ 404.526209][T13996] ? _raw_spin_unlock_irq+0x23/0x50 [ 404.531503][T13996] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.536807][T13996] ? __pfx_kthread+0x10/0x10 [ 404.541518][T13996] ret_from_fork+0x439/0x7d0 [ 404.546109][T13996] ? __pfx_ret_from_fork+0x10/0x10 [ 404.551396][T13996] ? __switch_to_asm+0x39/0x70 [ 404.556304][T13996] ? __switch_to_asm+0x33/0x70 [ 404.561156][T13996] ? __pfx_kthread+0x10/0x10 [ 404.565763][T13996] ret_from_fork_asm+0x1a/0x30 [ 404.570539][T13996] [ 404.573845][T13996] Kernel Offset: disabled [ 404.578163][T13996] Rebooting in 86400 seconds..