last executing test programs: 6.436475324s ago: executing program 2 (id=3138): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{0x0, 0x114}], 0x1}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) write(r0, &(0x7f0000000180)="072026c1009371668d2da6", 0xb) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fcdbdf250200000008000600ffffffff08000b00", @ANYRES32=r1, @ANYRESDEC=r1], 0x34}, 0x1, 0x0, 0x0, 0x8c0}, 0x40002) sendto$inet(r0, &(0x7f00000002c0)="876f2466dc9a0929f8ca889b05d6531c6aa3349e1be50df54225d9ca49e7bacd667bdd778eb157376d954a6b6c4590784d7e6c70526bcf3c33657acafce51545f84a0ae8fbfc8e3a7dc37ae690f122fc2e76fa13ded97552d0cd8fc3d3aa24b8de8c48a8a4", 0x65, 0x4040, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @random="7f0a00034011", @val={@val={0x88a8, 0x2, 0x1}, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0x800, 0xc80, 0x7fff, 0x7fff, 0x80000001}}}}}, 0x0) accept4$netrom(r0, &(0x7f0000000440)={{0x3, @rose}, [@default, @remote, @rose, @netrom, @netrom, @remote, @netrom, @rose]}, &(0x7f0000000280)=0x48, 0x80000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x2, 0x3, 0x882, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2c}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x4010) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000140)=0x4) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{0x0, 0x114}], 0x1}, 0x0) (async) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) write(r0, &(0x7f0000000180)="072026c1009371668d2da6", 0xb) (async) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fcdbdf250200000008000600ffffffff08000b00", @ANYRES32=r1, @ANYRESDEC=r1], 0x34}, 0x1, 0x0, 0x0, 0x8c0}, 0x40002) (async) sendto$inet(r0, &(0x7f00000002c0)="876f2466dc9a0929f8ca889b05d6531c6aa3349e1be50df54225d9ca49e7bacd667bdd778eb157376d954a6b6c4590784d7e6c70526bcf3c33657acafce51545f84a0ae8fbfc8e3a7dc37ae690f122fc2e76fa13ded97552d0cd8fc3d3aa24b8de8c48a8a4", 0x65, 0x4040, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) (async) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @random="7f0a00034011", @val={@val={0x88a8, 0x2, 0x1}, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0x800, 0xc80, 0x7fff, 0x7fff, 0x80000001}}}}}, 0x0) (async) accept4$netrom(r0, &(0x7f0000000440)={{0x3, @rose}, [@default, @remote, @rose, @netrom, @netrom, @remote, @netrom, @rose]}, &(0x7f0000000280)=0x48, 0x80000) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x2, 0x3, 0x882, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2c}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x4010) (async) 6.329439615s ago: executing program 2 (id=3141): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002600)=0x0) syz_open_procfs$namespace(r2, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711215000000000095000000000000bc"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) unshare(0x6020400) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f0000000000)='ns/net\x00') (async) unshare(0x2c060000) (async) close(0x3) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000040)={@dev, @broadcast, 0x0}, &(0x7f0000000080)=0xc) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xfc41}], 0x1}, 0x40000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000200)=r3}, 0x20) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@enum64={0xc, 0x3, 0x0, 0x13, 0x1, 0x0, [{0xe, 0x1a, 0x7}, {0xd, 0x2, 0x285}, {0x5, 0x1, 0x3}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x46, 0x0, 0x1a}]}, {0x0, [0x2e, 0x2e]}}, &(0x7f0000000340)=""/34, 0x5c, 0x22, 0x400, 0xe}, 0x28) pipe(&(0x7f00000007c0)={0xffffffffffffffff}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) close(r6) setsockopt$bt_l2cap_L2CAP_LM(r13, 0x6, 0x3, &(0x7f0000000ac0)=0xb3, 0x4) (async) getsockopt$bt_l2cap_L2CAP_LM(r13, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000080)=0x1) (async) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0xc2, 0x38}, 0xc) (async) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0600000000000000000000000000000000008000", @ANYRES32=r7, @ANYRES32=r3, @ANYBLOB="05000000050000000300"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0xa, &(0x7f0000000280)=@raw=[@call={0x85, 0x0, 0x0, 0x7f}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @generic={0x7, 0x9, 0x7, 0x95b6, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000300)='GPL\x00', 0x3, 0x96, &(0x7f0000000b40)=""/150, 0x41100, 0x20, '\x00', r7, 0x25, r10, 0x8, &(0x7f0000000740)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x5, 0x3, 0x5bf}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000980)=[0xffffffffffffffff, r11, r12, r14, r8, r15], &(0x7f00000009c0)=[{0x0, 0x4, 0x5, 0x3}, {0x3, 0x3, 0x10}, {0x2, 0x3, 0xb, 0xa}, {0x2, 0x5, 0x8, 0x7}, {0x4, 0x5, 0x5, 0xa}, {0x2, 0x2, 0x5, 0x6}, {0x2, 0x4, 0xb, 0x5}, {0x3, 0x2, 0x5, 0x5}, {0x1, 0x5, 0x7, 0x4}, {0x5, 0x2, 0xb, 0x52763dc5f0d186bb}], 0x10, 0x66fd}, 0x94) 6.218930222s ago: executing program 2 (id=3143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) (async) r2 = socket$kcm(0x2, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000001280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000012c0)='#', 0x1}], 0x1}, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000180), 0x43) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r1, 0x1, 0x70bd24, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}], 0x20}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={r5, @in={{0x2, 0x4e21, @local}}, 0x8, 0x300000, 0x8, 0x7, 0x2}, &(0x7f0000000300)=0x98) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a01010000000000000000000000002c000000180a01040000000000000000020000000c0005400f000000000000000900010073797a3000"], 0x68}}, 0x0) 6.052652375s ago: executing program 2 (id=3146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x7, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x9c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffff2, 0xc}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "75b0ab284a"}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "91b84aec0e"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc000}, 0x4020000) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1, "703b744dc5c6"}]}}}}}}, 0x0) 5.840926332s ago: executing program 2 (id=3150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x1b8, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x124, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="c000b2000a0002000000000000000000060005002e5f"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 5.046783433s ago: executing program 2 (id=3154): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) 2.392966339s ago: executing program 3 (id=3195): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000800) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000800) (async) 2.339911346s ago: executing program 3 (id=3196): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="cfcc06ae2d5669638afeb55764b972bb18e069225d15ccc5e54377db35b6d2518441e269b10e020f82d6c6ee587f1fb69966ecfaf64d3c58e05101"], 0x5) socket(0x2, 0x3, 0xff) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYRES8, @ANYRESHEX=r1, @ANYBLOB="00022bbd7000fcdbdf250b00000009000700827fc374cc000000040005000a00060008021100000100000a00060008021100000100000500080003000000"], 0x44}}, 0x449e2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200), 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xd, &(0x7f0000000040), 0x4) setsockopt$inet_mreqn(r4, 0x0, 0x20, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xff}, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0xfe4, 0x9, 0x11, 0xafb}, 0x8) sendto$inet6(r3, &(0x7f0000000500)="d2", 0x1, 0x4005, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000005c0)={0xfff, 0x1, 0x3, 0x5, 0xfffffff7}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a300000000014000380080002400000000008000140000000072c000000180a05000000000000000000010000000900010073797a30000000000c0005"], 0xc8}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'geneve1\x00'}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x70bd29, 0x25dfdbfd, {0x2, 0x18, 0xc0, 0x2, r6}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0xffbb, 0x0, 0x0, 0x10001}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x8, 0x201}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r7}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x56, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000000000006111900000000000c6000000ffff0000950000000000000092acc79385d28e40470ac0e5ee2d6fdb99a5962b0902749ce458b9328947b89f526886e3008a0c87bd6a8cee420db840791c4b77cc3e482066d5b879a653317c3dff5962d1cd371fcc8baa4443de75e71ff423e13a68bf9abfd6513e159ea0a4b24c2c488ac719a632c0f9cb9485c072ec94de0d26c771078a1002", @ANYRESOCT], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0x7f, "ce3ee0036923ffbbce6f3744e45fa04f5c3ecaa9601bdb8f8b10e901a527cbae77a270010b20b0cae622bdb336cbd1a76fd96f0d4474528b9f6b11fa1ce733456da8541e05bdefe7b9bdd39bdb69fe6cbc38310c92df74eee379321a9ee866a0b8909f9cc449fb175ef4d7d59ec850f404ef0396542e06643e5bd283a3227d"}, &(0x7f0000000340)=0x87) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000380)={r9, 0xfffffbf7}, &(0x7f00000003c0)=0x8) 1.792361993s ago: executing program 1 (id=3200): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048051) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f00000002c0)={0x5, 0x3ff}, 0x8) close(r5) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xf, 0x0, &(0x7f0000000700)="a498812dcc59a7470a16d3e5158013", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x264, r9, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2eb4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x977}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc39d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fe00}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a}]}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xa, @private1, 0x28fc}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7277}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xce}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3eb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa2710ccb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fcffffff3b00000008000300", @ANYRES32=r10, @ANYBLOB="1e003300c03c0200ffffffffffff08021100000050505050505063000c00000004008e001e"], 0x60}, 0x1, 0x0, 0x0, 0x240408d0}, 0x20) 1.31040651s ago: executing program 3 (id=3206): syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0xd5f90f5b8dc99650) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x38, r4, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8050) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x1}, {0xb, 0x4}, {0xb, 0xffe0}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24008010}, 0x10) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x4, 0x72}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x1e, 0x81, 0x37}, {@rand_addr=0x64010105, 0x4e23, 0x0, 0xc3, 0x3, 0x12d5c}}, 0x44) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x14e) 1.074682895s ago: executing program 0 (id=3210): r0 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f00000052c0)=@nameseq={0x1e, 0x4}, 0x10) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000711069000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0x1}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd604dd30800180600ff020000000000000000000000000001fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) 872.458932ms ago: executing program 4 (id=3211): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110780000000000630123000000000095000000000000008f6a138c9e4eb32e71d7754e127d8d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01e697342cf987ca2161e2a58904"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) write$cgroup_int(r1, &(0x7f0000000100)=0x3, 0x12) accept(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@private2, @in=@multicast1}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) syz_emit_ethernet(0x6c, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x10, [0x7, 0x7], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x22eb, 0xfffffffc}}}}}}, 0x0) bind$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @local}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="189436987a0700000000000000001b03fe640000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000007a000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 872.013032ms ago: executing program 0 (id=3212): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$xdp(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef729d308e08ed3e683813c1dcac50bf343bc65be49dbd852caf9a2d0656abc82adf0651c4ac76bf558a3179de6c947fb553be50db8ba2860b2483934d5d39cbcc8bc393eb926dbdb8de385f7d627982072679d9853515e79", 0xea}, {&(0x7f00000005c0)="63311794932b42fa800fe297013ca7feab7756ef7824de8a320ce51a7d2a8f9354bbec77c836bc975b39c022940880a890aff150d32e9641e2ec516273f54e5b972dfa3ba0ce3d330c754f50784dd3d120ebfa42481477f49fb6de051c98a3aff4f0cb9f1ea7841c11fe0f25b2dd3f90d203d9c390a2031dffeb947bd6b9c329a50d95eb82723641a7cdcb20a10068b5fde7f93c3ac3b2653dd2db5d3855a43ec44a301f0079ffe4437a5fe135d5fa92fa", 0xb1}, {&(0x7f00000007c0)="dba348f3686f64658eef3472e762256ef8a9583e6b06ed88c2ef46e6f984e69058e797f054e94bf370b74113ad8d0db3393d6d488248ca023e8aa857d2d69f24712bc88cbd2a39190c437931fd386fe3d82738f55e2268975f389b01d0603267672f7f2c80", 0x65}], 0x3, 0x0, 0x0, 0x20000080}, 0x440000d0) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12040) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x8919, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700260a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, r10, 0x1, 0x70bd2a, 0x0, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xfff, 0x2}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 839.70931ms ago: executing program 1 (id=3213): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x71, 0x0, &(0x7f0000000440)=0x9b) ioctl$SIOCAX25DELFWD(r0, 0x89eb, 0x0) socket(0x29, 0x5, 0xf) 826.854376ms ago: executing program 4 (id=3214): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7c, r1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x80002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001180)={&(0x7f0000000fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x2, 0x800, 0x4}]}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x2e]}}, 0x0, 0x36, 0x0, 0x1, 0x4863dbfa}, 0x28) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@deltfilter={0x0, 0x2d, 0x10, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xfff8, 0xd}, {0xe, 0x9}, {0xc, 0xffe0}}, [@TCA_CHAIN={0x0, 0xb, 0x7}, @TCA_CHAIN={0x0, 0xb, 0xef1}]}, 0x70}}, 0x0) 687.903798ms ago: executing program 1 (id=3215): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x74}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x9}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x7e}}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x9}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xb}, @NL80211_MESHCONF_ELEMENT_TTL={0x5}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xea}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x338}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x18}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x75}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4008c00}, 0x48010) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r0, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xa3fc, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x404c000) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0xd}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e05329f358"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc010}, 0x20000000) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000580)={0x0, 0x0, 0x9, 0xfffd, 0x6, 0xbed, 0x5, 0x6, {0x0, @in6={{0xa, 0x4e23, 0x9, @remote, 0xffff}}, 0x659b, 0x5, 0x2, 0x401, 0x100}}, &(0x7f0000000640)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000700)={r3, 0x48, &(0x7f0000000680)=[@in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e24, 0x0, @mcast1, 0xfff}]}, &(0x7f0000000740)=0x10) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r0, 0xc81, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x38}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x240081c4}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, r0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x2c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x5}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x337}, @NL80211_TXQ_ATTR_QUEUE={0x5}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x81}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a80)={'tunl0\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x8, 0x700, 0x9, 0x100, {{0xc, 0x4, 0x1, 0x10, 0x30, 0x67, 0x0, 0x8d, 0x2f, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x1c, 0xfc, 0x3, 0x7, [{@remote, 0xfff}, {@private=0xa010100, 0x5}, {@private=0xa010100, 0x1}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000ac0)={'erspan0\x00', 0x0, 0x10, 0x7, 0x4a, 0xe2, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x67, 0x0, 0x3, 0x29, 0x0, @empty, @local, {[@ra={0x94, 0x4, 0x1}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0}, &(0x7f0000000b80)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000c80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x50, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x40) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r8, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r9, 0x10, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x110, r1, 0x10000000) sendmmsg$sock(r1, &(0x7f0000003400)=[{{&(0x7f0000000e00)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000000e80)="ffdfeab3d26047eef7e67b", 0xb}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000001ec0)="96d33abdd8990d75d538ee84deb692b49e1bca600c314b01c23e742643c047469cbd3efc1311ab86dca9c6a8384d14a95d1f1fd7611c0dadf531a5506259168d31fe092c43c4438c432725b8f12a8ac7573ac9d7e94fec55b2ef74dfee53bcbac471efd1cf18d475b450381737147fcf8fac32e49121f75c2c5a8d6f0a3d2b230161f353af23e1e095a15cb5", 0x8c}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000002f80)="8f7dbcd1a4f04d96b0e03a72ff2836", 0xf}, {&(0x7f0000002fc0)="e987fdbb8e446b407a7d17a041a045fe5833dddad0db9d5dd42bf251e9910ea508a8364b9baa3f24b12f215c50ea5d668ff15e25b426953be78ae6a87b1087c875ce60a6ca457785f64f9aedccce6bd5ed12f7c1db4c2b6e99e74589d8034a342842cff47a1dd8f07548c34a59949840dc66014f078c32bd7d6d2fe27691a6cba1710d4073cfa682ec1c789b4d21bb964caaa211be441c62256c0149e0070985829e15ce4439e7a7173ec51bdf35350475b99c1de0b637d37ebbdf282faa614a88c6d1d0e26a6cc5ad3cb5a627e22705f32540c6dfa5e303439464", 0xdb}, {&(0x7f00000030c0)="2673f91423d228ea605b6c0f5e614e3e", 0x10}, {&(0x7f0000003100)="a49ddb95efcd0b4d51f08e66b2a0ddacf421571b815f46bca4efe00e3859bf6dfbc7ee545f52d03dec9f48dd5018e5d20e97e8d69649244d9b37bd27a3459a3e2481699699b456443f87e1c8aeaceef0868b7ef3bb161fee474afc1feffaa654d02c111b4c8c93874bf108d909a6db379b9cc2d7f720d94602ddbf18c1605be874337dd8b8fe5640bd125d6646c8198fef8197bf5bba3bbb4d17a9df17081c09aefdc3ae7571eef83a6ab4d65f712b19fa5a3c41b31887627f6aba50bddd65fa1353a863f523e85ffeaf95ad5845f85fd4c7842194e6c4", 0xd7}, {&(0x7f0000003200)="909087a93e6f46dea4d4b9bae0d9c75438ed65fe2201eccec2f78f1f94486c35d08d0f2acce199412a0fe07370f8838415bca0c1111e629ec1e6240996b3aa72fe910ce9c705445c7f9e01860000c796bd501511fc2e6e6a5442ad640164d99f022b240dcbe7be9deec9195278782e163af74100dcffe51065a867ad0f81d2ccacf0572b68c09576d814a39b5191ed6f80fd4bcae42d518bbb55868c06109eec33a81e07fe0f14766c9d7555f4043954c750276768031ec0cf2818dcb08562196247c4ad570aed1435bd5596a1c5a1f593ba67e07deb6a54c70826fb68", 0xdd}], 0x9, &(0x7f00000033c0)=[@mark={{0x14, 0x1, 0x24, 0x1}}], 0x18}}], 0x1, 0x8c0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000003480)={{r1}, 0x4, &(0x7f0000003440)=[0x8, 0x7, 0x2, 0x846d], 0xfffffffffffffffc, 0x2}) syz_emit_ethernet(0x26, &(0x7f0000003500)={@link_local, @local, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x7, 0x1, 0x4}}, {@can={0xc, {{0x2, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "e958f581cd7eb957"}}}}, &(0x7f0000003540)={0x1, 0x3, [0xbf5, 0xa3, 0xbe9, 0x23c]}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl(r10, 0xfffffffd, &(0x7f0000003580)="187b701394b983b32f9a013f291d6bfbdad2932da84568b44d6721041df6da7adb47e085c49126554380b04ef25e2811e0f8e32acb8f0db249eb046c29525cf8ad4035c7e56834e067073900cb") r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f0000003600)={r3, @in={{0x2, 0x4e24, @rand_addr=0x64010102}}}, 0x84) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f00000037c0)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x5e6b9cee0ed2ba71}, 0xc, &(0x7f0000003780)={&(0x7f0000003700)={0x54, r0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x2004a040) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000003a40)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003a00)={&(0x7f0000003880)={0x168, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x78}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x216}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa4b}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x20880}, 0x4000) 682.301808ms ago: executing program 4 (id=3216): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000002050000000000000000000700000538000380140001800800010000000000080002007f0000010c00028005000100210000001400018008000100e0000001080002006401010108000840000000020800054000000004ee0af0b5d36bfcb293eb29044e0a924d863b9eb62620fcfe25097910fec8b7728747d9a979dbbe2a1b440eb67213694ccf11bd04bcf1fe704d871a6bb9bd11ecc1e5544c11aceec0ac24a9b3dae3a8fad2a22fb2b77c42fd49d55a567abdab9cc72258f1550bcd75a3c5c1cd1f9dfa6e1ac6bc08058c12595bf888aca1abc3614d2a6c98262793ed5bd39eb3d0a142066fb8c75b31c22c8f3d0f71795ba2b84b82b595765775b84a69e369dc6a2b"], 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000000)=0x8000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'macvlan0\x00'}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000200)=0x2, 0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) sendmsg$nl_route(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, [@RTA_MARK={0x8, 0x10, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000640)={r10, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000080)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001580)={r10, @in={{0x2, 0x4f23, @multicast2}}, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x45}, &(0x7f0000000540)=0x9c) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32=r12, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="b6d92922181f3975803d477f665a16a008e63d922cb35492b1d0d178773619b50da1f0e6eec5251b957203292bf63176b48dff6f6e4e79284c3f0218e5b9dd21bee4ea3c118317e2018ece40f53748e46295f82595a1a57708e1091a24ad00f8cca1f11f0873518050920be91094ff61defb709259f4b828a789cfec8cdf169a4bdec52223", @ANYRES64=0x0], 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000100001002bbd7000fcdbdf2500000000", @ANYRES32=r13, @ANYBLOB="0000000004000000180012800b00010067656e65766500000800028004000e00"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000001300010700000000000000002713", @ANYRES32=r5, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}}, 0x3, 0x0, 0x8, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d44201cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 680.11981ms ago: executing program 0 (id=3217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000100)=0xfff, &(0x7f0000000180)=0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2, 0x4e21, 0x4b, 0x2}, {0x0, 0x0, 0x4, 0x34a, 0x0, 0x0, 0x9c0, 0x6}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0xa, @in6=@remote, 0x3507, 0x4, 0x3, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x158) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@fallback=r0, 0x2e, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0]}, 0x40) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8080"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="580000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08002800988da8"], 0x58}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007008b617400140004800800014000000000080002"], 0xa4}}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000000c0)={0x0, 0x3, 0x1}) 590.052991ms ago: executing program 4 (id=3218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000039b0bff91965", @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r10, 0x1, 0x0, 0xfffffffe, {{0x8}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000080) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000039b0bff91965", @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r10, 0x1, 0x0, 0xfffffffe, {{0x8}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000080) (async) 564.454809ms ago: executing program 3 (id=3219): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x44, 0x11, 0x839, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x7, 0x1}, {0xffff, 0x1}}, [{0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x5ce8bece}, {0x8, 0xb, 0x25f7}, {0x8, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) 520.434357ms ago: executing program 1 (id=3220): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) 425.711043ms ago: executing program 1 (id=3221): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x94) r2 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x86, &(0x7f0000000440), 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5, 0x4}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r3, @ANYRES16=r0, @ANYBLOB="bd838681401cc190000067f0ff0008000300", @ANYRES32=r4, @ANYRESDEC=r0], 0x30}}, 0x0) 420.265749ms ago: executing program 0 (id=3222): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xa8, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa8}}, 0x0) 328.452881ms ago: executing program 4 (id=3223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 327.533966ms ago: executing program 3 (id=3224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x18, r2, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r4, 0x401, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc9, 0x2, [@union]}}, 0x0, 0x26}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002ec0), r6) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f00000001c0)=0x1) recvmmsg(r6, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0xed000000, 0x10, &(0x7f0000000200), 0x10}, 0x80) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040011}, 0x8004) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYRES32, @ANYBLOB="08001f0004"], 0x44}}, 0x0) 324.162254ms ago: executing program 1 (id=3225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = socket(0x848000000015, 0x805, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000004880)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet(r9, 0x0, 0xc000) (async) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0xec, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x3, 0x7, 0x400000}, 0xe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x7}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "a03b77c7bf60b0466eaaa6c981fad06f"}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00'}) (async, rerun: 32) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) (async, rerun: 32) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=0x0], 0x20}}, 0x0) 295.629105ms ago: executing program 0 (id=3226): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10}, {0x9}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_skbmod={0x30, 0x16, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x22, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4810}, 0x0) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x0, 0x1456) syz_emit_ethernet(0x36, &(0x7f0000001200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000208004500002800002000fd06907864010101ac1414aa00004e22", @ANYRES32=r5, @ANYRES32=0x41424344, @ANYBLOB="5c2063c9538023e782acab6a9550b28a22a96f34967b57e22b95bd016aace18d3d79f6c058468748ab45537afacddf2e6ed173f0fddf84e4864587a68a6fd94242b1759b9d5de26f2de9a2541f20a4c9310100b3881080f5fe1fb7be50452c97de02c26500e19a0a425d408f669bb51247c89212c32a552befc2d7a4a60334"], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_audit(0x10, 0x3, 0x9) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x24044050) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r10, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r10, 0x89f5, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r12, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) ioctl$sock_inet_SIOCDELRT(r12, 0x890c, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) pipe(&(0x7f00000012c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0x1a, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x3, 0x0, 0x1, 0xb, 0x9, 0xfffffffffffffffc, 0x10}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xc9}, @jmp={0x5, 0x0, 0x8, 0x8, 0x3, 0xfffffffffffffff4}, @jmp={0x5, 0x1, 0xa, 0x4, 0xb, 0x80, 0x1}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd43}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f00000010c0)='syzkaller\x00', 0xa, 0x6f, &(0x7f0000001100)=""/111, 0x40f00, 0xb, '\x00', r3, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000011c0)={0x1, 0xe, 0x400, 0x20000005}, 0x10, 0x0, r6, 0x4, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, r13], &(0x7f0000001340)=[{0x1, 0x2, 0x2, 0x2}, {0x1, 0x3, 0xe, 0xc}, {0x5, 0x2, 0xd, 0x1}, {0x2, 0x1, 0xb, 0x4}]}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="ce483145", @ANYRES16=r9, @ANYBLOB="050004000000fcdbdf252e00000008000300", @ANYRES32=r11, @ANYBLOB="0a003400020202020202000004000501"], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r9], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe84, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 250.765578ms ago: executing program 4 (id=3227): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r3, &(0x7f0000000200)={0x2c, 0xf, r5, 0x0, r3}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r8, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000d40)=""/210, 0xd2}, {&(0x7f0000002900)=""/239, 0xef}], 0x2}, 0x8910}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xb0}}, 0x0) 52.543466ms ago: executing program 3 (id=3228): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) (async) epoll_create1(0x80000) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private0, 0x4e22, 0x7, 0x4e23, 0x0, 0xa, 0x80, 0x20, 0x3b, r3, r4}, {0x6, 0x8, 0x9, 0x842, 0x6e0, 0xffffffff, 0x1, 0x9}, {0x7, 0x7, 0x1, 0xf5b6}, 0xa8, 0x6e6bba, 0x2, 0x1, 0x2, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x32}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3506, 0x2, 0x1, 0x7, 0x7, 0x8, 0x3}}, 0xe8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) syz_emit_ethernet(0x4a, &(0x7f0000004940)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\n=\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0xf5, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async) sendfile(r0, r0, 0x0, 0x4) 0s ago: executing program 0 (id=3229): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xad01a927d4210f60}}}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x80) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f00000016c0)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14, 0x7}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010120, @broadcast, {[@timestamp={0x44, 0x4, 0x96, 0x0, 0x1}]}}, "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"}}, 0xfce) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4801) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r7, r3, 0x0, 0xfffbffff) sendmmsg$unix(r1, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000001c0)="0d202c89f3fcbec464f88f3350b22134c7b2a63838578d61cf5a77bcefd4682e9aa0a1", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000002f80)="f3138b9b6db511b9ae21807c4364c367ff850b1557ddb77e2fa847dfa0a27912685e340b1d95a2e1c3addecbf7a512de6097b533e3cf913ea96f5d06a31493065fadb6210eb6f6f4b006f2f75096712422ee025c27deefdc9ffcbdd83b51926f1b5de8bd3d1e9ab11afa319762ae7521c064efb2ffa39059b20550a0ebf6859987b77b6a6a85693ee11994af3a79ce73ce4b160f5104a6d5fa212c843569f462aead57c373cb0e383ce375f9fba4f50283a33e3860a5b3d4c0ddbc6351483ebc21a43cd296c4a4136ae6df95223595d23ed726132a4a9704771c0016458836b2e78972e9e296f484351efad3b0b703ddafb1780d6cb634d6e1", 0xf9}, {&(0x7f0000001e80)="ab", 0x1}], 0x2, 0x0, 0x0, 0x4004000}}], 0x2, 0x0) kernel console output (not intermixed with test programs): ][ T9932] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 192.681588][ T9932] 8021q: adding VLAN 0 to HW filter on device bond5 [ 193.077996][ T9975] gretap0: entered promiscuous mode [ 193.100776][ T9977] 0ªî{X¹¦: renamed from gretap0 [ 193.119487][ T9977] 0ªî{X¹¦: left promiscuous mode [ 193.136307][ T9977] 0ªî{X¹¦: entered allmulticast mode [ 193.148694][ T9977] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 193.505166][ T9995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.545343][ T9995] bond_slave_0: left allmulticast mode [ 193.609072][ T9995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.637506][ T9995] bond_slave_1: left allmulticast mode [ 193.657166][ T9995] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 193.666795][ T9995] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 193.682565][ T9995] bond0 (unregistering): (slave 0!): Releasing backup interface [ 193.691159][ T9995] !: left allmulticast mode [ 193.699976][ T9995] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 193.710191][ T9995] bridge_slave_1: left allmulticast mode [ 193.719202][ T9995] bond0 (unregistering): Released all slaves [ 193.757164][T10010] tipc: Enabled bearer , priority 0 [ 193.835820][T10010] tipc: Disabling bearer [ 194.375854][T10051] netlink: 'syz.1.1177': attribute type 3 has an invalid length. [ 194.402031][T10052] bridge0: port 3(syz_tun) entered blocking state [ 194.426300][T10052] bridge0: port 3(syz_tun) entered disabled state [ 194.440073][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.448688][T10052] syz_tun: entered allmulticast mode [ 194.452296][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.473241][T10052] syz_tun: entered promiscuous mode [ 194.615519][T10068] openvswitch: netlink: Actions may not be safe on all matching packets [ 194.629420][T10068] __nla_validate_parse: 21 callbacks suppressed [ 194.629444][T10068] netlink: 146840 bytes leftover after parsing attributes in process `syz.0.1181'. [ 194.766336][T10075] netlink: 'syz.4.1183': attribute type 1 has an invalid length. [ 194.853067][T10082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.978357][T10090] bridge3: entered allmulticast mode [ 194.989622][T10082] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1184'. [ 195.049029][T10097] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1189'. [ 195.098339][T10097] vlan4: entered allmulticast mode [ 195.119069][T10097] erspan0: entered allmulticast mode [ 195.218827][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1192'. [ 195.340114][T10111] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1196'. [ 195.399140][T10115] tipc: Enabling of bearer rejected, failed to enable media [ 195.399347][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'. [ 195.435687][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'. [ 195.457555][T10114] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 195.583007][T10124] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 195.679936][T10130] lo: entered promiscuous mode [ 195.692207][T10130] tunl0: entered promiscuous mode [ 195.705564][T10130] gre0: entered promiscuous mode [ 195.705705][T10131] delete_channel: no stack [ 195.731568][T10130] gretap0: entered promiscuous mode [ 195.741853][T10130] erspan0: entered promiscuous mode [ 195.749352][T10132] netlink: 'syz.2.1201': attribute type 1 has an invalid length. [ 195.751698][T10130] ip_vti0: entered promiscuous mode [ 195.871852][T10137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1203'. [ 195.883445][T10137] tc_dump_action: action bad kind [ 195.904191][T10137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1203'. [ 195.998180][T10143] openvswitch: netlink: Flow key attr not present in new flow. [ 196.007065][T10143] netlink: 'syz.0.1205': attribute type 1 has an invalid length. [ 196.015364][T10143] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1205'. [ 196.071414][T10145] netlink: 'syz.2.1206': attribute type 1 has an invalid length. [ 196.090367][T10145] netlink: 'syz.2.1206': attribute type 1 has an invalid length. [ 196.274994][T10157] netlink: 'syz.4.1210': attribute type 1 has an invalid length. [ 196.301563][T10157] bond3 (unregistering): Released all slaves [ 196.319019][T10161] netlink: 'syz.3.1211': attribute type 33 has an invalid length. [ 196.319255][T10159] netlink: 'syz.3.1211': attribute type 33 has an invalid length. [ 196.327971][T10161] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 196.349835][T10161] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 196.360059][T10161] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 196.370621][T10159] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 196.394021][T10157] ip6tnl2: entered promiscuous mode [ 196.399588][T10157] ip6tnl2: entered allmulticast mode [ 196.515425][T10060] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.515609][T10059] Bluetooth: hci1: command 0x0406 tx timeout [ 196.522113][T10060] Bluetooth: hci2: command 0x0406 tx timeout [ 196.527691][T10059] Bluetooth: hci3: command 0x0406 tx timeout [ 196.615415][T10173] bond3: entered promiscuous mode [ 196.620682][T10173] bond3: entered allmulticast mode [ 196.628314][T10173] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.669001][T10173] bond3 (unregistering): Released all slaves [ 196.737387][T10183] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 196.828280][T10144] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 197.803857][T10240] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 198.066354][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.075446][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 198.229098][T10280] syzkaller0: entered promiscuous mode [ 198.234767][T10280] syzkaller0: entered allmulticast mode [ 198.315133][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.594764][T10054] Bluetooth: hci0: command 0x0c1a tx timeout [ 198.974190][T10314] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 199.066819][T10319] 8021q: adding VLAN 0 to HW filter on device bond4 [ 199.075921][T10319] bond3: (slave bond4): making interface the new active one [ 199.084419][T10319] bond3: (slave bond4): Enslaving as an active interface with an up link [ 199.107850][T10319] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 199.122208][T10319] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.130272][T10326] pim6reg1: entered promiscuous mode [ 199.137013][T10326] pim6reg1: entered allmulticast mode [ 199.332874][T10331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.497440][T10332] netdevsim netdevsim4 : renamed from netdevsim0 [ 199.506907][T10332] netdevsim netdevsim4 : left promiscuous mode [ 199.790429][T10335] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 199.826716][T10335] __nla_validate_parse: 14 callbacks suppressed [ 199.826737][T10335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1261'. [ 200.649952][T10337] nbd0: detected capacity change from 0 to 127 [ 200.653585][T10054] block nbd0: Receive control failed (result -32) [ 200.672626][ T7298] block nbd0: Dead connection, failed to find a fallback [ 200.683908][ T7298] block nbd0: shutting down sockets [ 200.693873][ T7298] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.704889][ T7298] Buffer I/O error on dev nbd0, logical block 0, async page read [ 200.713149][ T7298] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.722695][ T7298] Buffer I/O error on dev nbd0, logical block 1, async page read [ 200.730702][ T7298] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.740177][ T7298] Buffer I/O error on dev nbd0, logical block 2, async page read [ 200.748192][ T7298] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.759038][ T7298] Buffer I/O error on dev nbd0, logical block 3, async page read [ 200.783192][ T7298] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.817914][ T7298] Buffer I/O error on dev nbd0, logical block 0, async page read [ 200.820632][T10351] lo: left promiscuous mode [ 200.836900][ T7298] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.858893][ T7298] Buffer I/O error on dev nbd0, logical block 1, async page read [ 200.867326][T10351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.889472][ T7298] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.908004][T10359] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1266'. [ 200.920490][T10356] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.945139][ T7298] Buffer I/O error on dev nbd0, logical block 2, async page read [ 200.964738][ T7298] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 200.974169][ T7298] Buffer I/O error on dev nbd0, logical block 3, async page read [ 201.017803][ T7298] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.040802][ T7298] Buffer I/O error on dev nbd0, logical block 0, async page read [ 201.069132][ T7298] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.114239][T10368] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1273'. [ 201.123153][ T7298] Buffer I/O error on dev nbd0, logical block 1, async page read [ 201.146383][T10371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1271'. [ 201.169300][ T7298] ldm_validate_partition_table(): Disk read failed. [ 201.177630][ T7298] Dev nbd0: unable to read RDB block 0 [ 201.184828][ T7298] nbd0: unable to read partition table [ 201.207371][ T7298] ldm_validate_partition_table(): Disk read failed. [ 201.237313][ T7298] Dev nbd0: unable to read RDB block 0 [ 201.240079][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1274'. [ 201.246471][ T7298] nbd0: unable to read partition table [ 201.290092][T10368] syzkaller1: entered promiscuous mode [ 201.317942][T10368] syzkaller1: entered allmulticast mode [ 201.337433][T10368] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1273'. [ 201.363204][T10389] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1277'. [ 201.473515][T10407] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1276'. [ 201.504431][T10410] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1279'. [ 201.547476][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1276'. [ 201.687355][T10422] IPVS: set_ctl: invalid protocol: 50 172.20.20.29:20004 [ 202.499940][T10457] validate_nla: 7 callbacks suppressed [ 202.499962][T10457] netlink: 'syz.0.1294': attribute type 1 has an invalid length. [ 203.452728][T10523] netlink: 'syz.2.1312': attribute type 6 has an invalid length. [ 203.550259][T10529] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 203.784213][T10552] sctp: [Deprecated]: syz.2.1316 (pid 10552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.784213][T10552] Use struct sctp_sack_info instead [ 204.039907][T10569] netlink: 'syz.0.1324': attribute type 4 has an invalid length. [ 204.394318][T10572] netlink: 'syz.3.1325': attribute type 5 has an invalid length. [ 204.407048][T10572] geneve3: entered promiscuous mode [ 204.412535][T10572] geneve3: entered allmulticast mode [ 204.420783][ T3494] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 204.431580][ T3494] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 204.440411][ T3494] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 204.453144][ T3494] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 204.675324][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.842274][T10602] macsec1: entered promiscuous mode [ 204.850966][T10602] bridge0: port 1(macsec1) entered blocking state [ 204.858568][T10602] bridge0: port 1(macsec1) entered disabled state [ 204.866778][T10602] macsec1: entered allmulticast mode [ 204.884658][T10602] bridge0: entered allmulticast mode [ 204.907825][T10602] macsec1: left allmulticast mode [ 204.928391][T10602] bridge0: left allmulticast mode [ 205.112288][T10619] __nla_validate_parse: 18 callbacks suppressed [ 205.112308][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'. [ 205.204831][T10632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1345'. [ 205.318268][T10640] bridge0: port 3(batadv1) entered blocking state [ 205.340015][T10640] bridge0: port 3(batadv1) entered disabled state [ 205.374743][T10640] batadv1: entered allmulticast mode [ 205.385812][T10640] batadv1: entered promiscuous mode [ 205.632238][T10676] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1360'. [ 205.657252][T10675] sctp: [Deprecated]: syz.4.1361 (pid 10675) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.657252][T10675] Use struct sctp_sack_info instead [ 205.674586][T10671] veth3: entered allmulticast mode [ 205.692989][T10671] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.703967][T10680] sctp: [Deprecated]: syz.4.1361 (pid 10680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.703967][T10680] Use struct sctp_sack_info instead [ 205.733309][T10671] bridge_slave_1: left allmulticast mode [ 205.760619][T10671] bridge_slave_1: left promiscuous mode [ 205.769691][T10671] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.807351][T10671] bond0: (slave bond_slave_0): Releasing backup interface [ 205.816902][ T37] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 205.826985][ T37] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 205.847592][T10671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.863682][T10671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.937773][T10678] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 205.972583][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1367'. [ 205.986796][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1367'. [ 206.249222][T10715] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 206.545822][T10750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1382'. [ 206.601481][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1384'. [ 206.611101][T10753] tc_dump_action: action bad kind [ 206.767439][T10772] netlink: 'syz.4.1389': attribute type 1 has an invalid length. [ 206.778520][T10772] netlink: 'syz.4.1389': attribute type 4 has an invalid length. [ 206.789303][T10772] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1389'. [ 206.846525][T10782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1391'. [ 206.862784][T10782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1391'. [ 206.924010][T10786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.000369][T10794] netlink: 'syz.0.1396': attribute type 12 has an invalid length. [ 207.239357][T10815] netlink: 'syz.3.1404': attribute type 7 has an invalid length. [ 207.258017][T10815] netlink: 'syz.3.1404': attribute type 8 has an invalid length. [ 207.286973][T10815] 0ªî{X¹¦: entered promiscuous mode [ 207.296410][T10815] batadv_slave_1: entered promiscuous mode [ 207.305152][T10815] erspan0: entered promiscuous mode [ 207.311623][T10815] debugfs: 'hsr1' already exists in 'hsr' [ 207.320731][T10815] Cannot create hsr debugfs directory [ 207.452111][T10831] syz_tun: left allmulticast mode [ 207.458032][T10831] syz_tun: left promiscuous mode [ 207.463696][T10831] bridge0: port 3(syz_tun) entered disabled state [ 207.480400][T10831] batadv1: left allmulticast mode [ 207.493750][T10831] batadv1: left promiscuous mode [ 207.505899][T10831] bridge0: port 2(batadv1) entered disabled state [ 207.538014][T10831] : left allmulticast mode [ 207.545660][T10831] bridge0: port 1() entered disabled state [ 207.693494][T10848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.733168][ T1152] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 207.758500][T10851] syzkaller1: entered promiscuous mode [ 207.769095][T10851] syzkaller1: entered allmulticast mode [ 207.790702][T10857] batman_adv: batadv0: Adding interface: dummy0 [ 207.803837][T10851] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 207.814044][T10857] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.841618][T10851] netlink: 'syz.4.1413': attribute type 32 has an invalid length. [ 207.851171][T10857] batman_adv: batadv0: Interface activated: dummy0 [ 207.909895][T10857] netlink: 'syz.0.1416': attribute type 5 has an invalid length. [ 208.115085][T10883] netlink: 'syz.3.1422': attribute type 3 has an invalid length. [ 208.275711][T10054] Bluetooth: hci0: command 0x0c1a tx timeout [ 208.401500][T10895] syz.0.1427 (10895) used greatest stack depth: 17992 bytes left [ 208.456518][T10913] netlink: 'syz.4.1431': attribute type 21 has an invalid length. [ 208.808296][T10949] netlink: 'syz.4.1441': attribute type 12 has an invalid length. [ 208.823359][T10949] netlink: 'syz.4.1441': attribute type 29 has an invalid length. [ 209.133694][T10967] tipc: Enabling of bearer rejected, failed to enable media [ 209.274168][T10968] netlink: 'syz.3.1433': attribute type 13 has an invalid length. [ 209.286042][T10968] netlink: 'syz.3.1433': attribute type 17 has an invalid length. [ 209.327651][T10968] 0ªî{X¹¦: left allmulticast mode [ 209.423690][T10968] bridge0: port 2(batadv0) entered blocking state [ 209.430297][T10968] bridge0: port 2(batadv0) entered forwarding state [ 209.437234][T10968] bridge0: port 1() entered blocking state [ 209.443251][T10968] bridge0: port 1() entered forwarding state [ 209.462775][T10968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.518684][T10976] netlink: 'syz.2.1448': attribute type 14 has an invalid length. [ 209.571370][T10988] bridge5: entered promiscuous mode [ 209.579715][T10988] bridge5: entered allmulticast mode [ 210.162733][T11019] __nla_validate_parse: 29 callbacks suppressed [ 210.162911][T11019] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1462'. [ 210.169024][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1464'. [ 210.199851][T11019] netlink: 'syz.0.1462': attribute type 1 has an invalid length. [ 210.210668][T11023] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1463'. [ 210.339160][T11030] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1467'. [ 210.367242][T11031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.376955][T11030] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1467'. [ 210.412564][T11037] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1468'. [ 210.714127][T11065] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1478'. [ 210.737864][T11065] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1478'. [ 210.764800][T11067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1479'. [ 210.871224][T11088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1479'. [ 211.147053][ T9332] IPVS: starting estimator thread 0... [ 211.237928][T11112] syz_tun: entered allmulticast mode [ 211.245153][T11114] IPVS: using max 38 ests per chain, 91200 per kthread [ 211.258500][T11124] ip6erspan0: entered promiscuous mode [ 211.264030][T11124] ip6erspan0: entered allmulticast mode [ 211.474660][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 212.127866][T11204] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.247799][T11211] ipvlan2: entered promiscuous mode [ 213.209026][T11303] validate_nla: 6 callbacks suppressed [ 213.209048][T11303] netlink: 'syz.1.1542': attribute type 2 has an invalid length. [ 213.301727][T11310] netlink: 'syz.1.1544': attribute type 58 has an invalid length. [ 213.338051][T11269] geneve2: entered promiscuous mode [ 213.343439][T11269] geneve2: entered allmulticast mode [ 213.351010][ T3175] netdevsim netdevsim4 : set [1, 0] type 2 family 0 port 6081 - 0 [ 213.373223][ T3175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.402471][ T3175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.417972][ T3175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.646184][T11331] netlink: 'syz.0.1551': attribute type 4 has an invalid length. [ 213.835360][T11346] vlan2: entered promiscuous mode [ 213.840764][T11346] vlan2: entered allmulticast mode [ 213.846718][T11346] hsr_slave_1: entered allmulticast mode [ 214.289752][T11385] ipvlan2: entered promiscuous mode [ 214.531914][T11408] tipc: Bearer : already 2 bearers with priority 10 [ 214.542062][T11408] tipc: Bearer : trying with adjusted priority [ 214.564358][T11408] tipc: Enabling not permitted [ 214.584524][T11408] tipc: Enabling of bearer rejected, failed to enable media [ 214.803159][T11431] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 214.845257][T11435] IPVS: length: 31 != 8 [ 214.961893][T11447] tipc: Enabled bearer , priority 0 [ 214.971212][T11446] tipc: Enabling of bearer rejected, already enabled [ 214.983626][T11449] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 214.994110][T11449] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 215.005767][T11449] tipc: Resetting bearer [ 215.132506][T11465] netlink: 'syz.3.1594': attribute type 1 has an invalid length. [ 215.347135][T11480] netlink: 'syz.4.1602': attribute type 21 has an invalid length. [ 215.362180][T11480] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 215.487213][ T30] audit: type=1800 audit(1756055404.178:4): pid=11486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1601" name="cgroup.controllers" dev="tmpfs" ino=1722 res=0 errno=0 [ 215.623150][T11507] __nla_validate_parse: 35 callbacks suppressed [ 215.623171][T11507] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1607'. [ 215.834369][ T13] tipc: Resetting bearer [ 215.944734][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1614'. [ 215.985368][ T44] tipc: Node number set to 470706484 [ 216.039209][T11540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1618'. [ 216.042452][T11539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.102815][T11540] xfrm0: entered allmulticast mode [ 216.109467][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1618'. [ 216.125464][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1618'. [ 216.149634][T11547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1621'. [ 216.162072][T11547] bridge_slave_1 (unregistering): left allmulticast mode [ 216.169513][T11547] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.306828][T11557] netlink: 'syz.0.1624': attribute type 1 has an invalid length. [ 216.316281][T11557] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1624'. [ 216.562697][T11581] netlink: 'syz.3.1630': attribute type 1 has an invalid length. [ 216.573084][T11581] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1630'. [ 216.582576][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1630'. [ 216.719918][T11594] netlink: 'syz.0.1633': attribute type 2 has an invalid length. [ 216.774357][T11601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1635'. [ 216.998976][T11615] batman_adv: batadv0: Interface deactivated: dummy0 [ 217.022695][T11615] : left promiscuous mode [ 217.042747][T11615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.055962][T11615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.112903][T11615] veth1_to_bond: left allmulticast mode [ 217.119181][T11615] macvlan2: left promiscuous mode [ 217.130138][ T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.140812][ T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.150959][ T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.160767][ T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.244729][T11623] netlink: 'syz.2.1642': attribute type 1 has an invalid length. [ 217.288420][T11623] 8021q: adding VLAN 0 to HW filter on device bond6 [ 217.297321][T11623] bond5: (slave bond6): making interface the new active one [ 217.305762][T11623] bond5: (slave bond6): Enslaving as an active interface with an up link [ 217.326856][T11623] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 217.340816][T11623] 8021q: adding VLAN 0 to HW filter on device bond5 [ 217.750214][T11659] netdevsim netdevsim4 : entered promiscuous mode [ 217.758628][T11659] team0: Port device  added [ 217.832796][T11663] tipc: Enabled bearer , priority 0 [ 217.901653][T11663] syzkaller0: entered promiscuous mode [ 217.908299][T11663] syzkaller0: entered allmulticast mode [ 217.914761][T11663] tipc: Resetting bearer [ 217.926216][ T1152] tipc: Resetting bearer [ 218.012266][T11660] tipc: Resetting bearer [ 218.081354][T11660] tipc: Disabling bearer [ 218.217592][T11693] validate_nla: 3 callbacks suppressed [ 218.217613][T11693] netlink: 'syz.4.1663': attribute type 33 has an invalid length. [ 218.859670][T11748] netlink: 'syz.1.1675': attribute type 1 has an invalid length. [ 218.874611][T11748] netlink: 'syz.1.1675': attribute type 1 has an invalid length. [ 218.893038][T11748] netlink: 'syz.1.1675': attribute type 2 has an invalid length. [ 218.908516][T11751] netlink: 'syz.2.1676': attribute type 30 has an invalid length. [ 218.935873][T11751] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 219.003042][T11751] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 219.219111][T10054] block nbd1: Receive control failed (result -32) [ 219.394634][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 219.843372][T11815] netlink: 'syz.2.1695': attribute type 1 has an invalid length. [ 220.078491][T11826] netlink: 'syz.1.1699': attribute type 10 has an invalid length. [ 220.091737][T11826] team0: Device ipvlan1 failed to register rx_handler [ 221.027285][T11894] netlink: 'syz.3.1722': attribute type 13 has an invalid length. [ 221.072888][T11894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.212583][T11905] __nla_validate_parse: 23 callbacks suppressed [ 221.212603][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1723'. [ 221.219177][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1725'. [ 221.389265][T11916] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1728'. [ 221.499129][T11922] wg0: left promiscuous mode [ 221.515532][T11927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1731'. [ 221.636852][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1733'. [ 221.665374][T11936] bridge0: port 2(batadv0) entered disabled state [ 221.670635][T11941] sctp: [Deprecated]: syz.4.1735 (pid 11941) Use of int in maxseg socket option. [ 221.670635][T11941] Use struct sctp_assoc_value instead [ 221.696327][T11941] sctp: [Deprecated]: syz.4.1735 (pid 11941) Use of int in maxseg socket option. [ 221.696327][T11941] Use struct sctp_assoc_value instead [ 221.712253][T11936] : left allmulticast mode [ 221.727549][T11941] sctp: [Deprecated]: syz.4.1735 (pid 11941) Use of int in maxseg socket option. [ 221.727549][T11941] Use struct sctp_assoc_value instead [ 221.730923][T11936] : left promiscuous mode [ 221.755495][T11936] bridge0: port 1() entered disabled state [ 221.774030][T11941] sctp: [Deprecated]: syz.4.1735 (pid 11941) Use of int in maxseg socket option. [ 221.774030][T11941] Use struct sctp_assoc_value instead [ 221.796395][T11941] sctp: [Deprecated]: syz.4.1735 (pid 11941) Use of int in maxseg socket option. [ 221.796395][T11941] Use struct sctp_assoc_value instead [ 221.813288][T11941] sctp: [Deprecated]: syz.4.1735 (pid 11941) Use of int in maxseg socket option. [ 221.813288][T11941] Use struct sctp_assoc_value instead [ 221.831162][T11941] sctp: [Deprecated]: syz.4.1735 (pid 11941) Use of int in maxseg socket option. [ 221.831162][T11941] Use struct sctp_assoc_value instead [ 221.850811][T11941] sctp: [Deprecated]: syz.4.1735 (pid 11941) Use of int in maxseg socket option. [ 221.850811][T11941] Use struct sctp_assoc_value instead [ 221.868798][T11941] sctp: [Deprecated]: syz.4.1735 (pid 11941) Use of int in maxseg socket option. [ 221.868798][T11941] Use struct sctp_assoc_value instead [ 221.883598][T11941] sctp: [Deprecated]: syz.4.1735 (pid 11941) Use of int in maxseg socket option. [ 221.883598][T11941] Use struct sctp_assoc_value instead [ 222.694775][T12011] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1753'. [ 222.720478][T12017] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1751'. [ 222.746907][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1752'. [ 222.840690][T12027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1755'. [ 222.860033][T12028] netlink: 'syz.3.1757': attribute type 1 has an invalid length. [ 222.922929][T12028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.998701][T12035] bond0: (slave veth7): Enslaving as an active interface with a down link [ 223.017719][T12044] syzkaller1: entered promiscuous mode [ 223.023849][T12044] syzkaller1: entered allmulticast mode [ 223.042294][T12028] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 223.086219][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 223.110225][T12054] netlink: 'syz.2.1764': attribute type 2 has an invalid length. [ 223.162228][T12035] bond0: (slave veth9): Enslaving as an active interface with a down link [ 223.261110][T12065] netlink: 'syz.1.1767': attribute type 1 has an invalid length. [ 223.310191][T12066] netem: change failed [ 223.420625][T12076] veth0_to_team: entered allmulticast mode [ 223.468697][T12078] pimreg3: entered allmulticast mode [ 223.478147][T12082] delete_channel: no stack [ 223.488157][T12079] delete_channel: no stack [ 223.492750][T12079] delete_channel: no stack [ 223.499836][T12079] delete_channel: no stack [ 223.506443][T12079] delete_channel: no stack [ 223.527041][T12079] delete_channel: no stack [ 223.531802][T12079] delete_channel: no stack [ 223.539081][T12079] delete_channel: no stack [ 223.543678][T12079] delete_channel: no stack [ 223.565969][T12085] tipc: Enabled bearer , priority 10 [ 223.603511][T12081] delete_channel: no stack [ 223.621430][T12081] delete_channel: no stack [ 223.643286][T12081] delete_channel: no stack [ 223.651453][T12081] delete_channel: no stack [ 223.656452][T12081] delete_channel: no stack [ 223.661187][T12081] delete_channel: no stack [ 223.666818][T12081] delete_channel: no stack [ 223.678436][T12081] delete_channel: no stack [ 223.684879][T12081] delete_channel: no stack [ 223.695526][T12081] delete_channel: no stack [ 223.705764][T12081] delete_channel: no stack [ 223.716118][T12081] delete_channel: no stack [ 223.727589][T12081] delete_channel: no stack [ 223.738883][T12081] delete_channel: no stack [ 223.744357][T12081] delete_channel: no stack [ 223.763143][T12081] delete_channel: no stack [ 223.779347][T12081] delete_channel: no stack [ 223.793508][T12081] delete_channel: no stack [ 223.820212][T12081] delete_channel: no stack [ 223.832622][T12081] delete_channel: no stack [ 223.860308][T12081] delete_channel: no stack [ 223.873505][T12081] delete_channel: no stack [ 223.884130][T12081] delete_channel: no stack [ 223.928273][T12081] delete_channel: no stack [ 224.150279][T12140] bridge0: port 1(syz_tun) entered blocking state [ 224.176834][T12140] bridge0: port 1(syz_tun) entered disabled state [ 224.199024][T12140] syz_tun: entered allmulticast mode [ 224.208691][T12140] syz_tun: entered promiscuous mode [ 224.218337][T12143] tipc: Enabled bearer , priority 10 [ 224.236682][T12150] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 224.610271][T12167] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.336051][ T1212] tipc: Node number set to 3231633450 [ 225.488404][T12190] veth: renamed from dummy0 [ 225.581781][T12204] netlink: 'syz.3.1800': attribute type 1 has an invalid length. [ 225.662630][T12208] syzkaller0: entered promiscuous mode [ 225.683002][T12208] syzkaller0: entered allmulticast mode [ 225.714746][T12220] netlink: 'syz.0.1806': attribute type 1 has an invalid length. [ 226.182403][T12262] openvswitch: netlink: Missing key (keys=40, expected=100) [ 226.321718][T12271] __nla_validate_parse: 37 callbacks suppressed [ 226.321737][T12271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1821'. [ 226.717412][T12300] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20002 [ 226.860774][T12312] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1837'. [ 226.932520][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1840'. [ 227.021780][T12325] netlink: 'syz.4.1842': attribute type 1 has an invalid length. [ 227.153507][T12325] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 227.158423][T12332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1844'. [ 227.296492][T12348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1846'. [ 227.472214][T12356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1851'. [ 227.492892][T12356] syzkaller1: entered promiscuous mode [ 227.499688][T12356] syzkaller1: entered allmulticast mode [ 227.659587][T12375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1856'. [ 227.811757][T12391] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1862'. [ 227.904267][T12393] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 227.993897][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1865'. [ 228.001580][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1867'. [ 228.504814][T12442] netlink: 'syz.0.1877': attribute type 1 has an invalid length. [ 228.542757][T12447] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 228.584757][T12447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.104423][T12492] can: request_module (can-proto-0) failed. [ 229.480158][T12535] 8021q: VLANs not supported on ip6gre0 [ 229.592825][T12556] sch_tbf: burst 0 is lower than device lo mtu (17233) ! [ 229.733826][T12566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.880905][T12614] netlink: 'syz.0.1925': attribute type 10 has an invalid length. [ 230.903569][T12614] team0: Port device geneve0 added [ 230.925547][ T3494] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.955382][ T3494] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.979245][ T3494] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.010888][ T3494] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.073103][T12633] netlink: 'syz.3.1932': attribute type 6 has an invalid length. [ 231.354354][T12658] netlink: 'syz.4.1938': attribute type 3 has an invalid length. [ 231.382560][T12661] __nla_validate_parse: 53 callbacks suppressed [ 231.382582][T12661] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1939'. [ 231.502919][T12672] netlink: 'syz.3.1942': attribute type 13 has an invalid length. [ 231.518875][T12672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.553884][T12675] IPVS: length: 57 != 8 [ 231.674821][T12677] syzkaller0: entered promiscuous mode [ 231.680468][T12677] syzkaller0: entered allmulticast mode [ 231.757733][T12692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1948'. [ 231.943777][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1952'. [ 231.958348][T12713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1952'. [ 232.063897][T12722] netlink: 'syz.1.1954': attribute type 5 has an invalid length. [ 232.345011][T12752] netlink: 'syz.2.1967': attribute type 10 has an invalid length. [ 232.425759][T12759] netlink: 'syz.0.1970': attribute type 21 has an invalid length. [ 232.759031][T12789] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1977'. [ 232.770037][T12789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1977'. [ 232.785463][T12789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1977'. [ 233.046854][T12818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1988'. [ 233.176202][T12834] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1993'. [ 233.177563][T12837] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1993'. [ 233.770966][T12877] can: request_module (can-proto-0) failed. [ 234.155755][T12911] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 234.539435][T12951] netlink: 'syz.4.2025': attribute type 12 has an invalid length. [ 234.669515][T12964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.694035][T12964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.702700][T12964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.720630][T12964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.754651][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 234.773767][T12955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.803412][T12952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.113748][T13006] netlink: 'syz.1.2037': attribute type 12 has an invalid length. [ 235.130160][T13006] netlink: 'syz.1.2037': attribute type 11 has an invalid length. [ 235.147862][T13008] netlink: 'syz.0.2038': attribute type 1 has an invalid length. [ 235.176594][T13008] netlink: 'syz.0.2038': attribute type 2 has an invalid length. [ 235.467666][T13038] netlink: 'syz.2.2047': attribute type 1 has an invalid length. [ 235.581104][T13054] netlink: 'syz.2.2052': attribute type 10 has an invalid length. [ 235.650259][T13054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.665545][T13063] sctp: [Deprecated]: syz.3.2054 (pid 13063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.665545][T13063] Use struct sctp_sack_info instead [ 236.545091][T13144] __nla_validate_parse: 56 callbacks suppressed [ 236.545114][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2077'. [ 236.715873][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 236.768821][T13160] netlink: 'syz.0.2085': attribute type 1 has an invalid length. [ 236.932296][T13177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2088'. [ 236.972259][T13177] nbd: must specify a device to reconfigure [ 237.142745][T13195] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2094'. [ 237.246414][T13202] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 237.259968][T13202] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 237.283745][T13200] vcan0: entered allmulticast mode [ 237.343339][T13208] netlink: 'syz.3.2099': attribute type 27 has an invalid length. [ 237.430083][T13217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2101'. [ 237.757796][T13240] macvtap1: entered allmulticast mode [ 237.763524][T13240] veth0_macvtap: entered allmulticast mode [ 237.842878][T13244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2108'. [ 238.428148][T13274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2115'. [ 238.518194][T13274] vlan5: entered allmulticast mode [ 238.523393][T13274] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 238.567625][T13274] netlink: 'syz.0.2115': attribute type 23 has an invalid length. [ 238.748183][T13309] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2123'. [ 238.751471][T13314] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2126'. [ 238.773082][T13316] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2126'. [ 238.812721][T13312] geneve2: entered promiscuous mode [ 238.818620][T13312] geneve2: entered allmulticast mode [ 238.848845][ T1152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 238.857784][ T1152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 238.911667][ T1152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 238.930963][ T1152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 239.290039][T13367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.722949][T13395] geneve1: left promiscuous mode [ 239.729636][T13395] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 239.751766][T13395] geneve2: left promiscuous mode [ 239.760290][T13395] tipc: Resetting bearer [ 239.771441][T13395] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 239.780050][T13395] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 239.789605][T13395] veth3: left allmulticast mode [ 239.799452][T13395] geneve3: left promiscuous mode [ 239.804603][T13395] geneve3: left allmulticast mode [ 239.817924][ T3494] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.854696][ T3494] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 239.868031][ T3494] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.881857][ T3494] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 239.896962][ T3494] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.914032][ T3494] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 239.928444][T13406] validate_nla: 5 callbacks suppressed [ 239.928466][T13406] netlink: 'syz.0.2152': attribute type 10 has an invalid length. [ 239.949752][ T3494] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.977194][ T3494] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 240.236665][T13440] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 240.448835][T13463] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 240.456865][T13463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.733738][T13487] lo: entered promiscuous mode [ 240.743764][T13487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.826226][T13484] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 241.210396][T13528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.543722][T13552] syzkaller0: entered promiscuous mode [ 241.550753][T13552] syzkaller0: entered allmulticast mode [ 241.569026][T13550] tipc: Enabled bearer , priority 0 [ 241.589316][T13556] tipc: Enabled bearer , priority 0 [ 241.646109][T13564] netlink: 'syz.2.2201': attribute type 1 has an invalid length. [ 241.700094][T13571] __nla_validate_parse: 82 callbacks suppressed [ 241.700115][T13571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2203'. [ 241.706601][T13564] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.731570][T13556] tipc: Disabling bearer [ 241.743013][T13552] tipc: Resetting bearer [ 241.754217][T13552] tipc: Disabling bearer [ 241.771873][T13575] bond7: (slave geneve2): making interface the new active one [ 241.783931][T13575] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 241.816800][T13577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2204'. [ 241.909560][T13585] netlink: 648 bytes leftover after parsing attributes in process `syz.1.2207'. [ 241.947567][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2206'. [ 241.974405][T13591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2206'. [ 241.995815][T13587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2206'. [ 241.999939][T13591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2206'. [ 242.209801][T13614] openvswitch: netlink: IPv4 tun info is not correct [ 242.276792][T13624] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2219'. [ 242.326138][T13626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.781270][T13665] netlink: 'syz.2.2229': attribute type 1 has an invalid length. [ 242.829743][T13665] 8021q: adding VLAN 0 to HW filter on device bond8 [ 242.880058][T13668] 8021q: adding VLAN 0 to HW filter on device bond8 [ 242.887737][T13668] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 242.902028][T13668] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 242.950496][T13665] veth9: entered promiscuous mode [ 242.967122][T13679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2229'. [ 242.979445][T13665] bond8: (slave veth9): Enslaving as an active interface with a down link [ 242.989313][T13671] team_slave_0: left promiscuous mode [ 243.007669][T13679] 8021q: adding VLAN 0 to HW filter on device bond8 [ 243.015359][T13681] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2231'. [ 243.034263][T13681] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 243.415733][T13719] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 243.430684][T13719] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 243.530173][T13729] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004 [ 243.702494][T13744] syzkaller1: entered promiscuous mode [ 243.724128][T13744] syzkaller1: entered allmulticast mode [ 244.054251][T13773] xfrm0: left promiscuous mode [ 244.100158][T13767] netlink: 'syz.0.2255': attribute type 5 has an invalid length. [ 244.917147][T13807] netlink: 'syz.1.2268': attribute type 2 has an invalid length. [ 245.003969][T13807] nbd: must specify a device to reconfigure [ 245.010437][T13809] netlink: 'syz.1.2268': attribute type 2 has an invalid length. [ 245.019771][T13809] nbd: must specify a device to reconfigure [ 245.808655][T13870] netlink: 'syz.2.2285': attribute type 10 has an invalid length. [ 245.817618][T13870] batadv0: entered promiscuous mode [ 245.823269][T13870] batadv0: entered allmulticast mode [ 245.838300][T13870] bridge0: port 1(batadv0) entered blocking state [ 245.846770][T13870] bridge0: port 1(batadv0) entered disabled state [ 246.021032][T13885] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 246.031315][ T76] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 246.040916][ T76] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 246.069434][T13890] netlink: 'syz.3.2290': attribute type 39 has an invalid length. [ 246.140835][T13899] sit1: entered promiscuous mode [ 246.147900][T13899] sit1: entered allmulticast mode [ 246.154679][T13896] netlink: 'syz.0.2294': attribute type 10 has an invalid length. [ 246.260301][T13906] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 246.437104][T13917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.441959][T13934] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 246.777840][T13963] __nla_validate_parse: 25 callbacks suppressed [ 246.777863][T13963] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2308'. [ 246.948348][T13973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2310'. [ 247.046048][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2314'. [ 247.059921][T13984] delete_channel: no stack [ 247.077458][T13984] bridge8: entered promiscuous mode [ 247.105988][T13984] bridge8: entered allmulticast mode [ 247.218516][T13996] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2317'. [ 247.501382][T14018] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 247.512828][T14018] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 247.536750][T14018] gretap2: entered promiscuous mode [ 247.542777][T14018] gretap2: entered allmulticast mode [ 247.561417][T14021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2325'. [ 247.792675][T14047] netlink: 'syz.1.2330': attribute type 58 has an invalid length. [ 247.858328][T14047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2330'. [ 247.861060][T14038] netlink: 'syz.1.2330': attribute type 58 has an invalid length. [ 247.920004][T14038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2330'. [ 247.930537][T14059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2335'. [ 247.947815][T14060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2335'. [ 248.471046][T14067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.501491][T14067] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2338'. [ 248.847023][T14101] macvlan3: entered allmulticast mode [ 248.852838][T14101] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 249.215986][T14133] vcan0 (unregistering): left allmulticast mode [ 249.407107][T14151] tap0: tun_chr_ioctl cmd 1074025676 [ 249.415586][T14151] tap0: owner set to 0 [ 249.574968][T14162] netlink: 'syz.1.2371': attribute type 1 has an invalid length. [ 249.576152][T14171] netlink: 'syz.3.2369': attribute type 10 has an invalid length. [ 249.606590][T14162] netlink: 'syz.1.2371': attribute type 2 has an invalid length. [ 249.615021][T14170] netlink: 'syz.3.2369': attribute type 10 has an invalid length. [ 249.790814][T14190] openvswitch: netlink: Key type 6658 is out of range max 32 [ 250.054246][T14218] validate_nla: 67 callbacks suppressed [ 250.054267][T14218] netlink: 'syz.3.2385': attribute type 13 has an invalid length. [ 250.093760][T14218] netlink: 'syz.3.2385': attribute type 13 has an invalid length. [ 250.093766][T12158] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.093810][T12158] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.159908][T12158] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.180152][T12158] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.212730][T14231] syzkaller1: entered promiscuous mode [ 250.229892][T14231] syzkaller1: entered allmulticast mode [ 250.531664][T14267] netlink: 'syz.4.2401': attribute type 1 has an invalid length. [ 250.569848][T14267] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.613428][T14267] bond5: (slave veth15): Enslaving as an active interface with a down link [ 250.648490][T14267] bond5: (slave veth17): Enslaving as an active interface with a down link [ 250.700825][T14285] netlink: 'syz.2.2404': attribute type 13 has an invalid length. [ 250.906779][T14285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.107091][T14302] netlink: 'syz.2.2410': attribute type 1 has an invalid length. [ 251.338002][T14319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.660883][T14353] netlink: set zone limit has 8 unknown bytes [ 251.682184][T14354] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 251.718431][T14360] IPv6: sit1: Disabled Multicast RS [ 251.783421][T14363] netlink: 'syz.3.2430': attribute type 5 has an invalid length. [ 251.793407][T14363] __nla_validate_parse: 39 callbacks suppressed [ 251.793428][T14363] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2430'. [ 251.815371][T14369] sctp: [Deprecated]: syz.0.2432 (pid 14369) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.815371][T14369] Use struct sctp_sack_info instead [ 251.843371][T14366] tipc: Enabling of bearer rejected, failed to enable media [ 252.287598][T14412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2445'. [ 252.306427][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2445'. [ 252.372029][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2439'. [ 252.515381][T14434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2450'. [ 252.651906][T14442] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2452'. [ 252.681375][T14442] netlink: 'syz.4.2452': attribute type 1 has an invalid length. [ 252.689358][T14442] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.2452'. [ 252.711704][T14442] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2452'. [ 253.819566][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2461'. [ 253.828662][T14462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2461'. [ 253.859561][T14469] netlink: 'syz.3.2463': attribute type 21 has an invalid length. [ 253.870112][T14465] hsr_slave_0: left promiscuous mode [ 253.870907][T14469] netlink: 'syz.3.2463': attribute type 22 has an invalid length. [ 253.886043][T14469] netlink: 'syz.3.2463': attribute type 23 has an invalid length. [ 253.894227][T14465] hsr_slave_1: left promiscuous mode [ 254.446630][T14536] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 254.458092][T14538] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 254.550158][T14546] syz.3.2485: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 254.585097][T14546] CPU: 0 UID: 0 PID: 14546 Comm: syz.3.2485 Not tainted syzkaller #0 PREEMPT(full) [ 254.585124][T14546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.585140][T14546] Call Trace: [ 254.585147][T14546] [ 254.585155][T14546] dump_stack_lvl+0x189/0x250 [ 254.585182][T14546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.585203][T14546] ? __pfx__printk+0x10/0x10 [ 254.585226][T14546] ? lock_release+0x4b/0x3e0 [ 254.585253][T14546] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 254.585274][T14546] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 254.585295][T14546] warn_alloc+0x214/0x310 [ 254.585322][T14546] ? stack_depot_save_flags+0x40/0x860 [ 254.585346][T14546] ? __pfx_warn_alloc+0x10/0x10 [ 254.585372][T14546] ? kasan_save_track+0x4f/0x80 [ 254.585393][T14546] ? xskq_create+0x56/0x170 [ 254.585416][T14546] ? xsk_init_queue+0xb0/0x110 [ 254.585436][T14546] ? xsk_setsockopt+0x4dc/0x8d0 [ 254.585455][T14546] ? do_sock_setsockopt+0x17c/0x1b0 [ 254.585471][T14546] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 254.585486][T14546] ? do_syscall_64+0xfa/0x3b0 [ 254.585510][T14546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.585531][T14546] __vmalloc_node_range_noprof+0x125/0x12f0 [ 254.585570][T14546] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 254.585596][T14546] ? xsk_setsockopt+0x462/0x8d0 [ 254.585619][T14546] ? __kasan_kmalloc+0x93/0xb0 [ 254.585643][T14546] vmalloc_user_noprof+0xad/0xf0 [ 254.585667][T14546] ? xskq_create+0xbf/0x170 [ 254.585690][T14546] xskq_create+0xbf/0x170 [ 254.585713][T14546] xsk_init_queue+0xb0/0x110 [ 254.585736][T14546] xsk_setsockopt+0x4dc/0x8d0 [ 254.585758][T14546] ? __pfx_xsk_setsockopt+0x10/0x10 [ 254.585778][T14546] ? __pfx_aa_sk_perm+0x10/0x10 [ 254.585803][T14546] ? lock_release+0x4b/0x3e0 [ 254.585827][T14546] ? aa_sock_opt_perm+0xff/0x1b0 [ 254.585844][T14546] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 254.585870][T14546] ? __pfx_xsk_setsockopt+0x10/0x10 [ 254.585892][T14546] do_sock_setsockopt+0x17c/0x1b0 [ 254.585911][T14546] __x64_sys_setsockopt+0x13f/0x1b0 [ 254.585930][T14546] do_syscall_64+0xfa/0x3b0 [ 254.585956][T14546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.585973][T14546] ? clear_bhb_loop+0x60/0xb0 [ 254.585992][T14546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.586010][T14546] RIP: 0033:0x7f2fedf8ebe9 [ 254.586030][T14546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.586046][T14546] RSP: 002b:00007f2fec1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 254.586065][T14546] RAX: ffffffffffffffda RBX: 00007f2fee1b5fa0 RCX: 00007f2fedf8ebe9 [ 254.586079][T14546] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 254.586091][T14546] RBP: 00007f2fee011e19 R08: 0000000000000004 R09: 0000000000000000 [ 254.586109][T14546] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.586123][T14546] R13: 00007f2fee1b6038 R14: 00007f2fee1b5fa0 R15: 00007ffcb8fb8108 [ 254.586149][T14546] [ 254.586181][T14546] Mem-Info: [ 254.928094][T14546] active_anon:4397 inactive_anon:0 isolated_anon:0 [ 254.928094][T14546] active_file:2696 inactive_file:39880 isolated_file:0 [ 254.928094][T14546] unevictable:770 dirty:107 writeback:0 [ 254.928094][T14546] slab_reclaimable:12105 slab_unreclaimable:186763 [ 254.928094][T14546] mapped:30934 shmem:1359 pagetables:1065 [ 254.928094][T14546] sec_pagetables:0 bounce:0 [ 254.928094][T14546] kernel_misc_reclaimable:0 [ 254.928094][T14546] free:1236924 free_pcp:19073 free_cma:0 [ 255.005523][T14546] Node 0 active_anon:17556kB inactive_anon:0kB active_file:10784kB inactive_file:159316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123768kB dirty:428kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13152kB pagetables:4020kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 255.044219][T14546] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 255.119400][T14548] sctp: [Deprecated]: syz.3.2485 (pid 14548) Use of int in max_burst socket option deprecated. [ 255.119400][T14548] Use struct sctp_assoc_value instead [ 255.154692][T14546] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 255.185683][T14546] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 255.191518][T14546] Node 0 DMA32 free:1048732kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17236kB inactive_anon:0kB active_file:10784kB inactive_file:157740kB unevictable:1536kB writepending:428kB present:3129332kB managed:2557460kB mlocked:0kB bounce:0kB free_pcp:52068kB local_pcp:22216kB free_cma:0kB [ 255.268775][T14546] lowmem_reserve[]: 0 0 1 1 1 [ 255.273572][T14546] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 255.294646][T14559] validate_nla: 3 callbacks suppressed [ 255.294673][T14559] netlink: 'syz.4.2487': attribute type 2 has an invalid length. [ 255.341214][T14546] lowmem_reserve[]: 0 0 0 0 0 [ 255.361446][T14546] Node 1 Normal free:3888496kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19072kB local_pcp:7168kB free_cma:0kB [ 255.439652][T14546] lowmem_reserve[]: 0 0 0 0 0 [ 255.465522][T14546] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 255.556441][T14546] Node 0 DMA32: 641*4kB (ME) 354*8kB (ME) 124*16kB (UME) 814*32kB (UME) 830*64kB (UME) 178*128kB (UME) 39*256kB (UM) 19*512kB (UME) 5*1024kB (UM) 8*2048kB (UME) 215*4096kB (M) = 1031188kB [ 255.613272][T14546] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 255.656663][T14546] Node 1 Normal: 196*4kB (UM) 66*8kB (UME) 43*16kB (UME) 67*32kB (UME) 23*64kB (UME) 9*128kB (UME) 3*256kB (UM) 2*512kB (M) 3*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3888496kB [ 255.705423][T14546] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.734619][T14546] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 255.764665][T14546] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.794610][T14546] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 255.817429][T14546] 46782 total pagecache pages [ 255.822194][T14546] 0 pages in swap cache [ 255.829804][T14546] Free swap = 124996kB [ 255.844696][T14546] Total swap = 124996kB [ 255.865042][T14546] 2097051 pages RAM [ 255.868912][T14546] 0 pages HighMem/MovableOnly [ 255.905642][T14546] 425660 pages reserved [ 255.909874][T14546] 0 pages cma reserved [ 256.129671][T14605] dvmrp1: left allmulticast mode [ 256.268853][T14613] netlink: 'syz.1.2499': attribute type 11 has an invalid length. [ 256.663825][T14637] tunl0: entered promiscuous mode [ 256.706474][T14637] gre0: entered promiscuous mode [ 256.711762][T14637] ip_vti0: entered promiscuous mode [ 256.777405][T14637] ip6_vti0: entered promiscuous mode [ 256.789224][T14637] sit0: entered promiscuous mode [ 256.805371][T14652] __nla_validate_parse: 7 callbacks suppressed [ 256.805393][T14652] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2510'. [ 256.820843][T14637] ip6tnl0: entered promiscuous mode [ 256.826501][T14637] ip6gre0: entered promiscuous mode [ 256.835243][T14637] ip6gretap0: entered promiscuous mode [ 256.852797][T14637] bond0: entered promiscuous mode [ 256.864634][T14637] bond_slave_0: entered promiscuous mode [ 256.894695][T14637] bond_slave_1: entered promiscuous mode [ 256.901373][T14637] team0: entered promiscuous mode [ 256.917787][T14637] team_slave_0: entered promiscuous mode [ 256.935219][T14637] team_slave_1: entered promiscuous mode [ 256.944979][T14637] macvlan2: entered promiscuous mode [ 256.960090][T14637] geneve0: entered promiscuous mode [ 256.975133][T14637] veth: entered promiscuous mode [ 256.987241][T14637] nlmon0: entered promiscuous mode [ 257.004832][T14637] caif0: entered promiscuous mode [ 257.014959][T14637] batadv0: entered promiscuous mode [ 257.036892][T14637] vxcan0: entered promiscuous mode [ 257.049888][T14637] vxcan1: entered promiscuous mode [ 257.055503][T14661] netlink: 'syz.3.2514': attribute type 1 has an invalid length. [ 257.063645][T14665] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2513'. [ 257.074640][T14637] veth0: entered promiscuous mode [ 257.085210][T14637] veth1: entered promiscuous mode [ 257.091466][T14637] wg0: entered promiscuous mode [ 257.098407][T14637] wg1: entered promiscuous mode [ 257.104292][T14637] wg2: entered promiscuous mode [ 257.112272][T14637] veth0_to_bridge: entered promiscuous mode [ 257.112742][T14663] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2514'. [ 257.120767][T14637] : entered promiscuous mode [ 257.133697][T14637] veth0_to_bond: entered promiscuous mode [ 257.140185][T14637] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 257.185502][T14661] 8021q: adding VLAN 0 to HW filter on device bond3 [ 257.205691][T14671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2515'. [ 257.259682][T14674] netlink: 'syz.1.2517': attribute type 17 has an invalid length. [ 257.273572][T14674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2517'. [ 257.283692][T14674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2517'. [ 257.350936][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2519'. [ 257.351506][T14677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2518'. [ 257.367286][T14684] netlink: 'syz.3.2519': attribute type 1 has an invalid length. [ 257.396552][T14682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2520'. [ 257.539687][T14699] tipc: Bearer : already 2 bearers with priority 10 [ 257.566591][T14699] tipc: Bearer : trying with adjusted priority [ 257.583936][T14699] tipc: Enabled bearer , priority 9 [ 257.608879][T14702] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2527'. [ 257.690854][T14708] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 257.894241][T14737] netlink: 'syz.1.2535': attribute type 6 has an invalid length. [ 258.019468][T14752] netlink: 'syz.2.2537': attribute type 10 has an invalid length. [ 258.073205][T14752] veth0_vlan: entered allmulticast mode [ 258.300681][T14776] lo: left promiscuous mode [ 258.324391][T14776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.484842][T14783] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 258.541081][T14787] tipc: Enabled bearer , priority 0 [ 258.549500][T14787] syzkaller0: entered promiscuous mode [ 258.561765][T14787] syzkaller0: entered allmulticast mode [ 258.589818][T14795] netlink: 'syz.4.2550': attribute type 1 has an invalid length. [ 258.634732][T14787] tipc: Resetting bearer [ 258.636034][T14798] netlink: 'syz.0.2549': attribute type 1 has an invalid length. [ 258.653936][T14787] tipc: Disabling bearer [ 258.680992][T14807] netlink: 'syz.3.2552': attribute type 11 has an invalid length. [ 258.715771][T14794] netlink: 'syz.4.2550': attribute type 1 has an invalid length. [ 258.724316][T14794] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 258.938668][T14830] openvswitch: netlink: Actions may not be safe on all matching packets [ 259.722707][T10054] Bluetooth: hci0: command tx timeout [ 260.073504][T14907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 260.211228][T14936] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 260.227082][T14936] batman_adv: batadv0: Adding interface: wlan1 [ 260.241596][T14936] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.268222][T14936] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 260.282305][T14940] syzkaller0: Caught tx_queue_len zero misconfig [ 260.648229][T14956] validate_nla: 3 callbacks suppressed [ 260.648250][T14956] netlink: 'syz.3.2600': attribute type 10 has an invalid length. [ 260.669943][T14958] netlink: 'syz.2.2599': attribute type 1 has an invalid length. [ 260.691072][T14964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.019695][T15004] netlink: 'syz.4.2611': attribute type 7 has an invalid length. [ 261.356516][T15034] unknown channel width for channel at 909000KHz? [ 261.379751][T15034] unknown channel width for channel at 909000KHz? [ 261.444162][T15042] netlink: 'syz.3.2622': attribute type 10 has an invalid length. [ 261.758511][T15071] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 261.853801][T15078] netlink: 'syz.0.2631': attribute type 2 has an invalid length. [ 261.891592][T15076] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 262.016376][T15091] netlink: 'syz.0.2634': attribute type 15 has an invalid length. [ 262.025142][T15091] __nla_validate_parse: 23 callbacks suppressed [ 262.025161][T15091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2634'. [ 262.081938][T12160] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 262.092563][T15091] netlink: 'syz.0.2634': attribute type 15 has an invalid length. [ 262.101101][ T3175] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 262.112321][ T3175] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 262.124278][T15091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2634'. [ 262.133502][T15103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2638'. [ 262.146614][ T3175] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 262.212549][T15104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2637'. [ 262.224617][T15104] netlink: 'syz.3.2637': attribute type 7 has an invalid length. [ 262.232487][T15104] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2637'. [ 262.259517][T15107] veth1_macvtap: left promiscuous mode [ 262.274791][T15107] macsec0: entered promiscuous mode [ 262.281289][T15107] macsec0: entered allmulticast mode [ 262.329982][T15113] veth1_macvtap: entered promiscuous mode [ 262.336801][T15113] veth1_macvtap: entered allmulticast mode [ 262.373682][T15113] macsec0: left promiscuous mode [ 262.383766][T15113] macsec0: left allmulticast mode [ 262.389765][T15113] veth1_macvtap: left allmulticast mode [ 262.431196][T15116] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 262.619516][T15140] smc: net device bond0 applied user defined pnetid SYZ2 [ 262.653719][T15140] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2649'. [ 262.687927][T15143] netlink: 'syz.3.2650': attribute type 1 has an invalid length. [ 262.726805][T15141] sctp: [Deprecated]: syz.2.2649 (pid 15141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.726805][T15141] Use struct sctp_sack_info instead [ 262.768911][T15146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2650'. [ 262.779518][T15140] smc: removing net device bond0 with user defined pnetid SYZ2 [ 262.789120][T15140] bond0 (unregistering): Released all slaves [ 262.811049][T15147] vlan3: entered promiscuous mode [ 262.838451][T15146] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.908033][T15161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2655'. [ 262.948284][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2656'. [ 262.958103][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2656'. [ 262.968546][T15161] netlink: 'syz.0.2655': attribute type 7 has an invalid length. [ 263.086997][T15180] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:0 [ 263.114827][T15177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.446099][T15208] lo: left promiscuous mode [ 263.450861][T15208] tunl0: left promiscuous mode [ 263.456506][T15208] gre0: left promiscuous mode [ 263.461475][T15208] ip_vti0: left promiscuous mode [ 263.467421][T15208] ip6_vti0: left promiscuous mode [ 263.472580][T15208] sit0: left promiscuous mode [ 263.492183][T15208] ip6tnl0: left promiscuous mode [ 263.498169][T15208] ip6gre0: left promiscuous mode [ 263.503817][T15208] ip6gretap0: left promiscuous mode [ 263.509765][T15208] bond0: left promiscuous mode [ 263.515429][T15208] bond_slave_1: left promiscuous mode [ 263.521200][T15208] team0: left promiscuous mode [ 263.528337][T15208] team_slave_0: left promiscuous mode [ 263.534019][T15208] team_slave_1: left promiscuous mode [ 263.540326][T15208] macvlan2: left promiscuous mode [ 263.548337][T15208] geneve0: left promiscuous mode [ 263.553740][T15208] veth: left promiscuous mode [ 263.560565][T15208] nlmon0: left promiscuous mode [ 263.569452][T15208] caif0: left promiscuous mode [ 263.575577][T15208] batadv0: left promiscuous mode [ 263.580908][T15208] vxcan0: left promiscuous mode [ 263.588588][T15208] vxcan1: left promiscuous mode [ 263.595985][T15208] veth0: left promiscuous mode [ 263.601880][T15208] veth1: left promiscuous mode [ 263.605833][T15207] nbd: must specify a device to reconfigure [ 263.611087][T15208] wg0: left promiscuous mode [ 263.665134][T15208] wg1: left promiscuous mode [ 263.670122][T15208] wg2: left promiscuous mode [ 263.681461][T15208] veth0_to_bridge: left promiscuous mode [ 263.699614][T15208] : left promiscuous mode [ 263.708676][T15208] veth0_to_bond: left promiscuous mode [ 263.714989][T15208] bond_slave_0: left promiscuous mode [ 263.730326][T15208] gretap2: left promiscuous mode [ 263.764647][T12160] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 263.793445][T12160] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.816147][T12160] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 263.834972][T12160] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.856894][T12160] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 263.890248][T12160] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.910756][T12160] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 263.930301][T12160] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.978559][T15241] syz.2.2679 (15241) used obsolete PPPIOCDETACH ioctl [ 264.393852][T15289] sctp: [Deprecated]: syz.0.2693 (pid 15289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.393852][T15289] Use struct sctp_sack_info instead [ 264.564231][T15300] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 265.545973][T15406] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 265.584878][T15406] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 265.867744][T15431] validate_nla: 11 callbacks suppressed [ 265.867765][T15431] netlink: 'syz.2.2732': attribute type 13 has an invalid length. [ 265.900937][T15431] netlink: 'syz.2.2732': attribute type 13 has an invalid length. [ 266.092585][T15452] sctp: [Deprecated]: syz.0.2734 (pid 15452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.092585][T15452] Use struct sctp_sack_info instead [ 266.661636][T15497] veth1_to_bond: entered allmulticast mode [ 266.669986][T15497] veth1_to_bond: left allmulticast mode [ 267.021251][T15520] netlink: 'syz.4.2760': attribute type 1 has an invalid length. [ 267.032479][T15521] netlink: 'syz.4.2760': attribute type 1 has an invalid length. [ 267.096948][T15525] netlink: 'syz.0.2762': attribute type 1 has an invalid length. [ 267.112434][T15529] __nla_validate_parse: 28 callbacks suppressed [ 267.112457][T15529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2764'. [ 267.154887][T10170] Bluetooth: hci4: command 0x0405 tx timeout [ 267.190335][T15525] bond1 (unregistering): Released all slaves [ 267.361388][T15548] netlink: 'syz.3.2771': attribute type 1 has an invalid length. [ 267.400442][T15548] netlink: 'syz.3.2771': attribute type 4 has an invalid length. [ 267.421427][T15553] netlink: 'syz.0.2774': attribute type 10 has an invalid length. [ 267.439674][T15548] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2771'. [ 268.329243][T15620] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2792'. [ 268.354794][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 268.566770][T15644] veth13: entered allmulticast mode [ 268.733250][T15652] netlink: 'syz.2.2802': attribute type 1 has an invalid length. [ 268.780404][T15652] smc: adding net device bond0 with user defined pnetid SYZ2 [ 268.860796][T15652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.890359][T15654] vlan2: entered promiscuous mode [ 268.904404][T15654] bond0: entered promiscuous mode [ 268.912493][T15654] vlan2: entered allmulticast mode [ 268.948667][T15654] bond0: entered allmulticast mode [ 269.025280][T15660] veth15: entered allmulticast mode [ 269.230037][T15681] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2809'. [ 269.239566][T10170] Bluetooth: hci4: command 0x0405 tx timeout [ 269.258150][T15681] vlan3: entered allmulticast mode [ 269.271281][T15681] gretap0: entered allmulticast mode [ 269.394981][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 269.434891][T15698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2817'. [ 269.469334][T15698] netlink: 'syz.2.2817': attribute type 2 has an invalid length. [ 269.582380][T15714] vlan2: entered promiscuous mode [ 269.614960][T15717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2822'. [ 269.872383][T15740] sit1: entered promiscuous mode [ 269.890964][T15740] sit1: entered allmulticast mode [ 270.002073][T15755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2830'. [ 270.069676][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2832'. [ 270.180934][T15775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2839'. [ 270.434888][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 270.468902][T15795] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 270.530817][T15806] pim6reg1: entered promiscuous mode [ 270.554691][T15806] pim6reg1: entered allmulticast mode [ 270.761539][T15824] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2849'. [ 270.772618][T15824] nbd: illegal input index -8454144 [ 271.092282][T15852] smc: net device erspan0 applied user defined pnetid SYZ0 [ 271.370041][T10170] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.378205][T10170] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.387748][ T5857] syz_tun (unregistering): left allmulticast mode [ 271.395015][T10170] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.402785][T10170] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.404487][ T5857] syz_tun (unregistering): left promiscuous mode [ 271.411435][T10170] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.442761][ T5857] bridge0: port 1(syz_tun) entered disabled state [ 271.474732][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 271.661015][T15875] tc_dump_action: action bad kind [ 271.824416][T15881] sctp: [Deprecated]: syz.2.2865 (pid 15881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.824416][T15881] Use struct sctp_sack_info instead [ 271.892809][T15882] sctp: [Deprecated]: syz.2.2865 (pid 15882) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.892809][T15882] Use struct sctp_sack_info instead [ 271.940747][T15892] vlan0: entered allmulticast mode [ 271.946368][T15892] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 272.010666][T15865] chnl_net:caif_netlink_parms(): no params data found [ 272.191842][T15865] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.200951][T15865] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.208316][T15865] bridge_slave_0: entered allmulticast mode [ 272.216604][T15865] bridge_slave_0: entered promiscuous mode [ 272.224493][T15865] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.231646][T15865] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.239423][T15865] bridge_slave_1: entered allmulticast mode [ 272.247464][T15865] bridge_slave_1: entered promiscuous mode [ 272.295894][T15865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.309688][T15865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.320067][T15905] __nla_validate_parse: 4 callbacks suppressed [ 272.320086][T15905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2872'. [ 272.361141][T15905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2872'. [ 272.390454][T15865] team0: Port device team_slave_0 added [ 272.399272][T15865] team0: Port device team_slave_1 added [ 272.477495][T15865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.477625][T15915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2877'. [ 272.489408][T15865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.519952][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 272.529048][T15865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.536601][T15919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2878'. [ 272.542169][T15865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.556615][T15865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.558499][T15916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2876'. [ 272.583058][T15865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.583534][T15915] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 272.718236][T15865] hsr_slave_0: entered promiscuous mode [ 272.730288][T15928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2881'. [ 272.731531][T15865] hsr_slave_1: entered promiscuous mode [ 272.752628][T15865] debugfs: 'hsr0' already exists in 'hsr' [ 272.759088][T15865] Cannot create hsr debugfs directory [ 272.771988][T15928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2881'. [ 272.839464][T15938] netlink: 'syz.1.2884': attribute type 1 has an invalid length. [ 272.899727][T15938] bond7: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 272.919426][T15938] bond7: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 272.930395][T15938] bond7: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 272.963432][T15949] bond7: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 272.977744][T15949] bond7: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 273.000915][T15938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2884'. [ 273.070888][T15955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2887'. [ 273.340458][T15865] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.360093][T15865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.380342][T15865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.398577][T15865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.474871][T10170] Bluetooth: hci0: command tx timeout [ 273.486317][T15865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.509502][T15865] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.537662][T12155] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.544896][T12155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.554884][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 273.580970][T12159] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.588148][T12159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.611417][T15992] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2896'. [ 273.739283][T16001] netlink: 'syz.3.2898': attribute type 12 has an invalid length. [ 273.788564][T16001] netlink: 'syz.3.2898': attribute type 12 has an invalid length. [ 273.798996][T16001] netlink: 'syz.3.2898': attribute type 12 has an invalid length. [ 273.807339][ T5859] 0: reclassify loop, rule prio 0, protocol 800 [ 273.827573][T16001] netlink: 'syz.3.2898': attribute type 12 has an invalid length. [ 273.860776][T16001] netlink: 'syz.3.2898': attribute type 12 has an invalid length. [ 273.885659][T16001] netlink: 'syz.3.2898': attribute type 12 has an invalid length. [ 273.908699][T16001] netlink: 'syz.3.2898': attribute type 12 has an invalid length. [ 273.922061][T16001] netlink: 'syz.3.2898': attribute type 12 has an invalid length. [ 273.935629][T16001] netlink: 'syz.3.2898': attribute type 12 has an invalid length. [ 274.052954][T15865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.141287][T15865] veth0_vlan: entered promiscuous mode [ 274.177000][T15865] veth1_vlan: entered promiscuous mode [ 274.249529][T15865] veth0_macvtap: entered promiscuous mode [ 274.270148][T15865] veth1_macvtap: entered promiscuous mode [ 274.309950][T15865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.358904][T15865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.401387][ T76] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.439219][ T76] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.452703][ T76] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.461834][ T76] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.549899][T12159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.559043][T12159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.594812][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 274.642499][ T3175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.667666][ T3175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.696692][ T3175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.714242][ T3175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.742592][T16071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.763207][T16071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.162212][T16097] tipc: Resetting bearer [ 275.171731][T16097] tipc: Resetting bearer [ 275.258059][ T5861] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 275.266602][ T5861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 275.275945][T16093] nbd2: detected capacity change from 0 to 127 [ 275.282615][ T5861] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 275.296516][ T5861] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 275.298211][T10170] block nbd2: Receive control failed (result -104) [ 275.305214][T10054] block nbd2: Receive control failed (result -32) [ 275.317500][T10170] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.397405][T12155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 275.417948][ T3175] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 275.478895][T12155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 275.541931][T12155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 275.554885][T10170] Bluetooth: hci0: command tx timeout [ 275.591546][T12155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 275.635139][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 276.042733][T12155] bond0 (unregistering): Released all slaves [ 276.060540][T12155] bond1 (unregistering): Released all slaves [ 276.079388][T12155] bond2 (unregistering): Released all slaves [ 276.093804][T12155] bond3 (unregistering): (slave bond4): Releasing backup interface [ 276.109990][T12155] bond3 (unregistering): Released all slaves [ 276.126185][T12155] bond4 (unregistering): Released all slaves [ 276.141072][T12155] bond5 (unregistering): Released all slaves [ 276.152424][T12155] bond6 (unregistering): Released all slaves [ 276.163356][T12155] bond7 (unregistering): Released all slaves [ 276.314401][T16099] chnl_net:caif_netlink_parms(): no params data found [ 276.331980][T12155] tipc: Disabling bearer [ 276.340309][T12155] tipc: Disabling bearer [ 276.360615][T12155] tipc: Left network mode [ 276.553069][T16099] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.569544][T16099] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.578143][T16157] tipc: Can't bind to reserved service type 1 [ 276.602657][T16099] bridge_slave_0: entered allmulticast mode [ 276.626774][T16099] bridge_slave_0: entered promiscuous mode [ 276.663231][T16099] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.674028][T16099] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.681861][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 276.690581][T16099] bridge_slave_1: entered allmulticast mode [ 276.695461][T16156] nbd3: detected capacity change from 0 to 127 [ 276.701562][T16099] bridge_slave_1: entered promiscuous mode [ 276.732176][T12155] batman_adv: batadv0: Removing interface: wlan1 [ 276.744959][T10170] block nbd3: Receive control failed (result -104) [ 276.786730][T16099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.880286][T16099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.970255][T16099] team0: Port device team_slave_0 added [ 276.992798][T16099] team0: Port device team_slave_1 added [ 277.122785][T16184] syzkaller1: entered promiscuous mode [ 277.128564][T16184] syzkaller1: entered allmulticast mode [ 277.143464][T16099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.151146][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.179472][T16099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.223562][T12155] pim6reg (unregistering): left allmulticast mode [ 277.394691][T10170] Bluetooth: hci5: command tx timeout [ 277.463063][T16099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.473758][T16099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.500640][T16099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.576352][T16199] __nla_validate_parse: 82 callbacks suppressed [ 277.576375][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2953'. [ 277.634850][T10056] Bluetooth: hci0: command tx timeout [ 277.652449][T16099] hsr_slave_0: entered promiscuous mode [ 277.660428][T16099] hsr_slave_1: entered promiscuous mode [ 277.669190][T16099] debugfs: 'hsr0' already exists in 'hsr' [ 277.675876][T16099] Cannot create hsr debugfs directory [ 277.715074][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 277.781869][T16220] tipc: Enabling of bearer rejected, already enabled [ 277.801332][T16220] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 277.826513][T16220] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 277.836752][T16220] tipc: Resetting bearer [ 277.858335][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2961'. [ 277.861479][T16226] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2962'. [ 277.877677][T16226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2962'. [ 277.901391][T16220] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 277.920930][T12155] IPVS: stop unused estimator thread 0... [ 277.922860][T16220] tipc: Resetting bearer [ 278.135175][T16247] validate_nla: 63 callbacks suppressed [ 278.135196][T16247] netlink: 'syz.0.2969': attribute type 3 has an invalid length. [ 278.228707][T16255] netlink: 'syz.4.2972': attribute type 1 has an invalid length. [ 278.283222][T16099] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.302399][T16260] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 278.330725][T16260] bond1: entered promiscuous mode [ 278.336376][T16260] bond1: entered allmulticast mode [ 278.341857][T16260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.351128][T16099] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 278.362464][T16099] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 278.379160][T16099] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 278.411664][T16274] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2975'. [ 278.422929][T16274] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2975'. [ 278.432286][T16274] netlink: 'syz.0.2975': attribute type 5 has an invalid length. [ 278.441733][T16274] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2975'. [ 278.451246][T16274] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2975'. [ 278.460802][T16274] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2975'. [ 278.470073][T16274] netlink: 'syz.0.2975': attribute type 5 has an invalid length. [ 278.478236][T16274] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2975'. [ 278.487972][T16274] netlink: 'syz.0.2975': attribute type 5 has an invalid length. [ 278.496574][T16274] netlink: 'syz.0.2975': attribute type 5 has an invalid length. [ 278.504965][T16274] netlink: 'syz.0.2975': attribute type 5 has an invalid length. [ 278.513014][T16274] netlink: 'syz.0.2975': attribute type 5 has an invalid length. [ 278.522798][T16274] netlink: 'syz.0.2975': attribute type 5 has an invalid length. [ 278.531236][T16274] netlink: 'syz.0.2975': attribute type 5 has an invalid length. [ 278.547799][T16099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.569979][T16099] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.581689][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.588881][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.622372][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.629600][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.656779][T16282] netlink: zone id is out of range [ 278.677861][T16278] netlink: zone id is out of range [ 278.683389][T16099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.691946][T16278] netlink: zone id is out of range [ 278.708691][T16282] netlink: zone id is out of range [ 278.714199][T16282] netlink: zone id is out of range [ 278.729648][T16278] netlink: zone id is out of range [ 278.730076][T16282] netlink: zone id is out of range [ 278.740283][T16282] netlink: zone id is out of range [ 278.754876][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 278.771992][T16278] netlink: zone id is out of range [ 278.900565][T16296] nbd: socks must be embedded in a SOCK_ITEM attr [ 279.128613][T16313] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.163237][T16099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.294305][T16327] syzkaller1: entered promiscuous mode [ 279.306546][T16327] syzkaller1: entered allmulticast mode [ 279.317379][T16099] veth0_vlan: entered promiscuous mode [ 279.352251][T16099] veth1_vlan: entered promiscuous mode [ 279.426874][T16099] veth0_macvtap: entered promiscuous mode [ 279.475235][T10170] Bluetooth: hci5: command tx timeout [ 279.490639][T16099] veth1_macvtap: entered promiscuous mode [ 279.528156][T16099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.540101][T16099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.584314][T12158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.596140][T12158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.620275][T12158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.630373][T12158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.651605][T16351] vlan2: entered promiscuous mode [ 279.683808][T12159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.712519][T12159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.720686][T10170] Bluetooth: hci0: command tx timeout [ 279.759791][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.781877][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.027669][T16376] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 280.158591][T16381] pim6reg1: entered promiscuous mode [ 280.163953][T16381] pim6reg1: entered allmulticast mode [ 280.581115][T16403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.588428][T16403] IPv6: NLM_F_CREATE should be set when creating new route [ 280.595765][T16403] IPv6: NLM_F_CREATE should be set when creating new route [ 280.602989][T16403] IPv6: NLM_F_CREATE should be set when creating new route [ 280.643484][T16404] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.706215][ T1152] smc: removing ib device syz2 [ 280.756365][T10056] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.764741][T10056] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.772483][T10056] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.781761][T10056] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.789951][T10056] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.412553][T16425] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 281.433506][T16425] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 281.514681][T16425] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.561179][T16425] bridge_slave_1: left allmulticast mode [ 281.561637][T10056] Bluetooth: hci5: command tx timeout [ 281.580436][T16425] bridge_slave_1: left promiscuous mode [ 281.599868][T16425] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.633122][T16425] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 281.710781][T16407] chnl_net:caif_netlink_parms(): no params data found [ 281.815244][T16407] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.822557][T16407] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.830988][T16407] bridge_slave_0: entered allmulticast mode [ 281.839720][T16407] bridge_slave_0: entered promiscuous mode [ 281.850624][T16407] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.856799][T16446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.861024][T16407] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.879759][T16407] bridge_slave_1: entered allmulticast mode [ 281.898103][T16407] bridge_slave_1: entered promiscuous mode [ 281.939550][T16407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.952152][T16407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.987492][T16407] team0: Port device team_slave_0 added [ 281.996029][T16407] team0: Port device team_slave_1 added [ 282.039552][T16407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.054726][T16407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.090528][T16407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.128728][T16407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.139180][T16407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.167723][T16407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.300088][T16407] hsr_slave_0: entered promiscuous mode [ 282.309355][T16407] hsr_slave_1: entered promiscuous mode [ 282.316567][T16407] debugfs: 'hsr0' already exists in 'hsr' [ 282.323537][T16407] Cannot create hsr debugfs directory [ 282.549703][T16407] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.624316][T16407] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.657600][T16513] __nla_validate_parse: 112 callbacks suppressed [ 282.657621][T16513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3038'. [ 282.697474][T16407] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.782833][T16407] netdevsim netdevsim4  (unregistering): left promiscuous mode [ 282.834586][T10056] Bluetooth: hci3: command tx timeout [ 282.840275][T16407] team0: Port device  removed [ 282.852886][T16407] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.875692][T16532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3043'. [ 282.930454][T16537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3045'. [ 282.991232][T16407] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 283.002269][T16407] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 283.025151][T16407] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 283.035942][T16407] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 283.131354][T16551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3048'. [ 283.155157][T16407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.201035][T16407] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.222464][T12160] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.229679][T12160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.266308][T12160] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.273565][T12160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.442204][T16573] validate_nla: 30 callbacks suppressed [ 283.442226][T16573] netlink: 'syz.3.3053': attribute type 6 has an invalid length. [ 283.542496][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3056'. [ 283.632932][T16407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.635238][T10056] Bluetooth: hci5: command tx timeout [ 283.651247][T16592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3058'. [ 283.668824][T16592] netlink: 'syz.0.3058': attribute type 1 has an invalid length. [ 283.688676][T16596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3059'. [ 283.703933][T16596] netlink: 50 bytes leftover after parsing attributes in process `syz.3.3059'. [ 283.713940][T16596] netlink: 50 bytes leftover after parsing attributes in process `syz.3.3059'. [ 283.725949][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3059'. [ 283.881898][T16606] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 283.954828][ C0] net_ratelimit: 28 callbacks suppressed [ 283.954850][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 284.132797][T16407] veth0_vlan: entered promiscuous mode [ 284.156315][T16407] veth1_vlan: entered promiscuous mode [ 284.219211][T16407] veth0_macvtap: entered promiscuous mode [ 284.243915][T16407] veth1_macvtap: entered promiscuous mode [ 284.299308][T16407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.330713][T16407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.410986][T12159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.441151][T12159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.462571][T12159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.491203][T12159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.657812][T16650] netlink: 'syz.3.3074': attribute type 2 has an invalid length. [ 284.676475][T12160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.684351][T12160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.700228][T16650] netlink: 'syz.3.3074': attribute type 2 has an invalid length. [ 284.719194][T16657] netlink: 'syz.3.3074': attribute type 2 has an invalid length. [ 284.729271][T16651] veth1_macvtap: left promiscuous mode [ 284.738160][T16651] macsec0: entered promiscuous mode [ 284.750011][T16651] macsec0: entered allmulticast mode [ 284.782398][T16656] veth1_macvtap: entered promiscuous mode [ 284.798386][T16656] veth1_macvtap: entered allmulticast mode [ 284.806263][T16656] macsec0: left promiscuous mode [ 284.811441][T16656] macsec0: left allmulticast mode [ 284.817196][T16656] veth1_macvtap: left allmulticast mode [ 284.841371][T12155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.875804][T12155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.919906][T10056] Bluetooth: hci3: command tx timeout [ 284.995078][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 285.003513][T16679] IPVS: set_ctl: invalid protocol: 136 100.1.1.0:20003 [ 285.012967][T16679] netlink: 'syz.2.3079': attribute type 4 has an invalid length. [ 285.132752][T16696] netlink: 'syz.2.3083': attribute type 1 has an invalid length. [ 285.585028][T10170] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.593940][T10170] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.604733][T10170] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.613877][T10170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.627920][T10170] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.822655][T16717] bridge0: port 1(batadv0) entered disabled state [ 285.883181][T16712] chnl_net:caif_netlink_parms(): no params data found [ 286.019611][T16712] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.028239][T16712] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.039036][T16712] bridge_slave_0: entered allmulticast mode [ 286.046856][T16712] bridge_slave_0: entered promiscuous mode [ 286.055282][T16712] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.062519][T16712] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.070370][T16712] bridge_slave_1: entered allmulticast mode [ 286.086267][T16712] bridge_slave_1: entered promiscuous mode [ 286.205454][T16734] syzkaller0: entered promiscuous mode [ 286.211005][T16734] syzkaller0: entered allmulticast mode [ 286.266168][T16712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.335167][T16712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.427562][T16747] pim6reg1: entered promiscuous mode [ 286.447814][T16747] pim6reg1: entered allmulticast mode [ 286.456791][T16712] team0: Port device team_slave_0 added [ 286.476635][T16757] netlink: 'syz.1.3102': attribute type 1 has an invalid length. [ 286.487355][T16712] team0: Port device team_slave_1 added [ 286.556998][T16757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.581641][T16758] bond1: (slave veth3): Enslaving as an active interface with a down link [ 286.610553][T16762] bond1: (slave veth5): Enslaving as an active interface with a down link [ 286.625879][T16712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.642029][T16712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.669515][T16712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.685129][T16712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.692123][T16712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.719862][T16712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.761677][T16774] pim6reg1: entered promiscuous mode [ 286.774596][T16774] pim6reg1: entered allmulticast mode [ 286.921295][T16712] hsr_slave_0: entered promiscuous mode [ 286.936280][T16712] hsr_slave_1: entered promiscuous mode [ 286.949613][T16712] debugfs: 'hsr0' already exists in 'hsr' [ 286.975321][T16712] Cannot create hsr debugfs directory [ 286.994928][T10170] Bluetooth: hci3: command tx timeout [ 287.007005][T16784] pimreg: entered allmulticast mode [ 287.369725][T16712] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.462898][T16712] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.510103][T16818] netlink: 'syz.0.3120': attribute type 4 has an invalid length. [ 287.533238][T16818] `: renamed from bond0 (while UP) [ 287.547434][T16712] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.677866][T16827] __nla_validate_parse: 12 callbacks suppressed [ 287.677886][T16827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3123'. [ 287.692910][T16712] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.715981][T10170] Bluetooth: hci4: command tx timeout [ 287.778175][T16835] openvswitch: netlink: IPv4 tun info is not correct [ 287.782826][T16837] netlink: zone id is out of range [ 287.795049][T16837] netlink: del zone limit has 4 unknown bytes [ 287.861838][T16712] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 287.887431][T16712] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 287.903803][T16839] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3127'. [ 287.918611][T16712] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 287.938776][T16712] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 288.019447][T16858] netlink: 'syz.0.3129': attribute type 12 has an invalid length. [ 288.195457][T16712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.263784][T16712] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.297581][ T3175] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.304785][ T3175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.331196][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.338486][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.359703][T16875] tipc: Started in network mode [ 288.368301][T16875] tipc: Node identity ac1414aa, cluster identity 4711 [ 288.376038][T16877] IPv6: Can't replace route, no match found [ 288.379665][T16875] tipc: Enabled bearer , priority 10 [ 288.393551][T16880] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3136'. [ 288.469658][T16883] validate_nla: 1 callbacks suppressed [ 288.469679][T16883] netlink: 'syz.2.3138': attribute type 6 has an invalid length. [ 288.691067][T16907] tipc: Started in network mode [ 288.697868][T16911] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3143'. [ 288.714566][T16907] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 288.722219][T16907] tipc: Enabled bearer , priority 10 [ 288.783935][T16712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.899392][T16916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3146'. [ 288.913283][T16712] veth0_vlan: entered promiscuous mode [ 288.943227][T16712] veth1_vlan: entered promiscuous mode [ 288.971702][T16712] veth0_macvtap: entered promiscuous mode [ 288.982052][T16712] veth1_macvtap: entered promiscuous mode [ 289.007433][T16712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.033297][T16712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.068739][ T76] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.076315][T10170] Bluetooth: hci3: command tx timeout [ 289.089315][T12155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.111314][T12155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.133711][T12155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.494836][ T10] tipc: Node number set to 2886997162 [ 289.769072][ T3175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.795952][T10170] Bluetooth: hci4: command tx timeout [ 289.805329][ T3175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.845067][ T10] tipc: Node number set to 10136234 [ 289.863611][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.888495][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.918873][T16950] netlink: 'syz.1.3156': attribute type 8 has an invalid length. [ 289.968354][T16955] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3158'. [ 290.180152][T16964] netlink: 'syz.3.3162': attribute type 1 has an invalid length. [ 290.209560][T16964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3162'. [ 290.372561][T16980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3165'. [ 290.428295][T16980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3165'. [ 290.460461][T16984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3167'. [ 290.539957][T10056] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 290.547805][T10056] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 290.558125][T10056] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 290.570395][T10056] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 290.580557][T10056] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 290.707764][T17001] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 290.867588][T16985] chnl_net:caif_netlink_parms(): no params data found [ 291.098055][T16985] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.130847][T16985] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.138854][T16985] bridge_slave_0: entered allmulticast mode [ 291.149750][T16985] bridge_slave_0: entered promiscuous mode [ 291.157307][T17022] nbd4: detected capacity change from 0 to 127 [ 291.166950][T16985] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.174079][T16985] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.183094][T16985] bridge_slave_1: entered allmulticast mode [ 291.190649][T16985] bridge_slave_1: entered promiscuous mode [ 291.227373][T16985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.240103][T16985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.281070][T16985] team0: Port device team_slave_0 added [ 291.289721][T16985] team0: Port device team_slave_1 added [ 291.343290][T16985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.350928][T16985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.378945][T17023] nbd5: detected capacity change from 0 to 127 [ 291.395021][ T5861] block nbd5: Receive control failed (result -104) [ 291.401803][T10054] block nbd5: Receive control failed (result -32) [ 291.405068][T10170] block nbd4: Receive control failed (result -32) [ 291.415360][T10056] block nbd4: Receive control failed (result -32) [ 291.423124][T16107] block nbd5: Dead connection, failed to find a fallback [ 291.439388][T16107] block nbd5: shutting down sockets [ 291.445070][T16985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.465508][T16107] blk_print_req_error: 138 callbacks suppressed [ 291.465526][T16107] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.469421][T16985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.491646][T16107] buffer_io_error: 138 callbacks suppressed [ 291.491664][T16107] Buffer I/O error on dev nbd5, logical block 0, async page read [ 291.497999][T16985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.498040][T16985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.586352][T16107] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.602065][T16107] Buffer I/O error on dev nbd5, logical block 1, async page read [ 291.612873][T16107] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.644018][T16107] Buffer I/O error on dev nbd5, logical block 2, async page read [ 291.652491][T16107] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.665454][T16107] Buffer I/O error on dev nbd5, logical block 3, async page read [ 291.673375][T16107] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.689335][T16107] Buffer I/O error on dev nbd5, logical block 0, async page read [ 291.697966][T16107] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.720782][T16107] Buffer I/O error on dev nbd5, logical block 1, async page read [ 291.722074][T17053] netlink: 'syz.4.3181': attribute type 1 has an invalid length. [ 291.749828][T16107] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.771355][T16107] Buffer I/O error on dev nbd5, logical block 2, async page read [ 291.772099][T17055] IPVS: length: 157 != 24 [ 291.782855][T16107] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.803551][T16107] Buffer I/O error on dev nbd5, logical block 3, async page read [ 291.826031][T17055] Bluetooth: MGMT ver 1.23 [ 291.830889][T16107] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.846179][T16107] Buffer I/O error on dev nbd5, logical block 0, async page read [ 291.854211][T16107] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 291.865612][T16107] Buffer I/O error on dev nbd5, logical block 1, async page read [ 291.874731][T10170] Bluetooth: hci4: command tx timeout [ 291.881923][T16107] ldm_validate_partition_table(): Disk read failed. [ 291.891577][T16107] Dev nbd5: unable to read RDB block 0 [ 291.901232][T16107] nbd5: unable to read partition table [ 291.933220][T16107] ldm_validate_partition_table(): Disk read failed. [ 291.949362][T16985] hsr_slave_0: entered promiscuous mode [ 291.956565][T16985] hsr_slave_1: entered promiscuous mode [ 291.963267][T16985] debugfs: 'hsr0' already exists in 'hsr' [ 291.969982][T16107] Dev nbd5: unable to read RDB block 0 [ 291.976915][T16107] nbd5: unable to read partition table [ 291.985504][T16985] Cannot create hsr debugfs directory [ 292.007252][T17053] veth2: entered promiscuous mode [ 292.014318][T17053] veth2: entered allmulticast mode [ 292.033330][T17053] veth3: entered promiscuous mode [ 292.462404][T16985] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.482734][T16985] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.589905][T16985] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.643286][T16985] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.674598][T10170] Bluetooth: hci2: command tx timeout [ 292.896933][T16985] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.026985][T16985] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.236931][T16985] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.283884][T16985] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.373561][T17118] __nla_validate_parse: 15 callbacks suppressed [ 293.373583][T17118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3200'. [ 293.480019][T16985] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 293.495705][T16985] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 293.511088][T16985] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 293.535381][T16985] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 293.602360][T17134] can: request_module (can-proto-3) failed. [ 293.660316][T17141] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 293.680908][T16985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.717875][T17148] IPVS: set_ctl: invalid protocol: 520 0.1.4.4:20001 [ 293.745447][T16985] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.769406][T12155] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.776630][T12155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.801812][T12155] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.809107][T12155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.959774][T10170] Bluetooth: hci4: command tx timeout [ 294.100886][T17173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3212'. [ 294.186694][T16985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.261278][T16985] veth0_vlan: entered promiscuous mode [ 294.293553][T17185] netlink: 'syz.0.3217': attribute type 10 has an invalid length. [ 294.311604][T17185] team0: Port device netdevsim0 added [ 294.321505][T16985] veth1_vlan: entered promiscuous mode [ 294.327519][T17185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3217'. [ 294.346511][T17185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3217'. [ 294.348039][T17189] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3219'. [ 294.563685][T16985] veth0_macvtap: entered promiscuous mode [ 294.582830][T16985] veth1_macvtap: entered promiscuous mode [ 294.587807][T17206] nbd: must specify a size in bytes for the device [ 294.624094][T16985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.652294][T17213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3226'. [ 294.654743][T16985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.671690][T17206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3224'. [ 294.693263][ T1152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.705246][ T1152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.714323][ T1152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.730884][ T1152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.755146][T10170] Bluetooth: hci2: command tx timeout [ 294.852793][T17222] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 294.864842][T17222] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 294.873293][T17222] CPU: 0 UID: 0 PID: 17222 Comm: syz.3.3228 Not tainted syzkaller #0 PREEMPT(full) [ 294.882701][T17222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.892811][T17222] RIP: 0010:klist_remove+0x14a/0x340 [ 294.898125][T17222] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 e9 5b b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ca 5b b3 f6 49 8b 44 24 58 48 89 44 24 08 [ 294.917776][T17222] RSP: 0018:ffffc90003387a20 EFLAGS: 00010202 [ 294.923880][T17222] RAX: 000000000000000b RBX: ffff888054318000 RCX: 0000000000000000 [ 294.931863][T17222] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 294.939844][T17222] RBP: ffffc90003387b08 R08: ffffffff8f89fe83 R09: 1ffffffff1f13fd0 [ 294.947917][T17222] R10: dffffc0000000000 R11: fffffbfff1f13fd1 R12: 0000000000000000 [ 294.956020][T17222] R13: 1ffff1100b5be58c R14: ffff88805adf2c60 R15: dffffc0000000000 [ 294.964114][T17222] FS: 00007fa07698e6c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 294.973064][T17222] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.979760][T17222] CR2: 0000200000423000 CR3: 00000000302aa000 CR4: 00000000003526f0 [ 294.987848][T17222] Call Trace: [ 294.991248][T17222] [ 294.994192][T17222] ? __pfx_klist_remove+0x10/0x10 [ 294.999245][T17222] ? __pfx_kobject_move+0x10/0x10 [ 295.004386][T17222] ? get_device_parent+0x366/0x3a0 [ 295.009525][T17222] device_move+0x193/0x700 [ 295.013962][T17222] hci_conn_del_sysfs+0xb8/0x170 [ 295.018915][T17222] hci_conn_del+0xc33/0x11b0 [ 295.023533][T17222] hci_conn_hash_flush+0x191/0x230 [ 295.028702][T17222] hci_dev_reset+0x44b/0x6b0 [ 295.033327][T17222] ? hci_sock_ioctl+0x5b7/0x910 [ 295.038459][T17222] sock_do_ioctl+0xd9/0x300 [ 295.043013][T17222] ? __pfx_sock_do_ioctl+0x10/0x10 [ 295.048227][T17222] ? do_futex+0x395/0x420 [ 295.052581][T17222] sock_ioctl+0x576/0x790 [ 295.056937][T17222] ? lock_release+0x4b/0x3e0 [ 295.061544][T17222] ? __pfx_sock_ioctl+0x10/0x10 [ 295.066408][T17222] ? __fget_files+0x2a/0x420 [ 295.071055][T17222] ? __fget_files+0x3a0/0x420 [ 295.075753][T17222] ? __fget_files+0x2a/0x420 [ 295.080394][T17222] ? bpf_lsm_file_ioctl+0x9/0x20 [ 295.085350][T17222] ? __pfx_sock_ioctl+0x10/0x10 [ 295.090221][T17222] __se_sys_ioctl+0xfc/0x170 [ 295.094829][T17222] do_syscall_64+0xfa/0x3b0 [ 295.099387][T17222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.105472][T17222] ? clear_bhb_loop+0x60/0xb0 [ 295.110169][T17222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.116077][T17222] RIP: 0033:0x7fa075b8ebe9 [ 295.120505][T17222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.140213][T17222] RSP: 002b:00007fa07698e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.148640][T17222] RAX: ffffffffffffffda RBX: 00007fa075db6090 RCX: 00007fa075b8ebe9 [ 295.156741][T17222] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000005 [ 295.164722][T17222] RBP: 00007fa075c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 295.172725][T17222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.180727][T17222] R13: 00007fa075db6128 R14: 00007fa075db6090 R15: 00007fff176e0c28 [ 295.188722][T17222] [ 295.191746][T17222] Modules linked in: [ 295.197369][T17222] ---[ end trace 0000000000000000 ]--- [ 295.206461][T17222] RIP: 0010:klist_remove+0x14a/0x340 [ 295.212549][T17222] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 e9 5b b3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ca 5b b3 f6 49 8b 44 24 58 48 89 44 24 08 [ 295.233163][T17222] RSP: 0018:ffffc90003387a20 EFLAGS: 00010202 [ 295.241123][T17222] RAX: 000000000000000b RBX: ffff888054318000 RCX: 0000000000000000 [ 295.249329][T17222] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 295.257912][T17222] RBP: ffffc90003387b08 R08: ffffffff8f89fe83 R09: 1ffffffff1f13fd0 [ 295.266106][T17222] R10: dffffc0000000000 R11: fffffbfff1f13fd1 R12: 0000000000000000 [ 295.274233][T17222] R13: 1ffff1100b5be58c R14: ffff88805adf2c60 R15: dffffc0000000000 [ 295.282446][T17222] FS: 00007fa07698e6c0(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 295.292135][T17222] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.298879][T17222] CR2: 0000555575d2e808 CR3: 00000000302aa000 CR4: 00000000003526f0 [ 295.307086][T17222] Kernel panic - not syncing: Fatal exception [ 295.313357][T17222] Kernel Offset: disabled [ 295.317692][T17222] Rebooting in 86400 seconds..