last executing test programs: 3m10.745397799s ago: executing program 4 (id=2578): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3m10.166523631s ago: executing program 4 (id=2586): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4800) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$SIOCX25SENDCALLACCPT(r5, 0x89e9) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@getchain={0x3c, 0x11, 0x100, 0x70bd27, 0x25dedbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xa}, {0xfff3, 0xfff2}, {0xfff2}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x87aa}, {0x8, 0xb, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x34008011) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010b00000000000000000600000020000180140002007665746831000000ab5f0000000000000800030004"], 0x34}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000000000002e0000000a0001007770616e3100000005002e007f0000000c0005000201aada92afc3aa05002b"], 0x3c}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000740)=0xffffffbf, 0x4) 3m9.4758291s ago: executing program 4 (id=2597): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0xf, 0x3, 0x2f54, 0x20, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x7, 0xa0, 0x7f}}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="48010000100013070000000000000000fe880000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14142800000000000000000000000000000000330000002001000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023500000200000000000000000000000c001c00", @ANYRES32=r3, @ANYBLOB="060000004c00140073686131000000000000774d41945c534a96000000000000000000000000f7ff00000000000000000000feffffffffffffff00"/80], 0x148}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @private, @multicast2}, &(0x7f0000000300)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x700, 0x10, 0x1000, 0x400, {{0x11, 0x4, 0x0, 0xf, 0x44, 0x68, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xe}, {[@rr={0x7, 0xb, 0xbb, [@private=0xa010101, @broadcast]}, @noop, @cipso={0x86, 0x21, 0x1, [{0x5, 0x10, "51503143c56512b5de192db4ee34"}, {0x1, 0xb, "e51b54bface650cba9"}]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1e0, r0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8004}, 0x20040801) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000680)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x6, @mcast1, 0x3}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in6={0xa, 0x4e23, 0x79c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}, @in6={0xa, 0x4e20, 0xac, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}], 0x94) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000a34fd86f3f6c689b0aba3ebcca742bd40f3ed250a598f477cd1397d96c2e95259d7a7b5c", @ANYRES16=r8, @ANYBLOB="00012dbd7000fcdbdf252d00000005002e000600000005002e00040000000c000500000000000000000005002e000600000008002c0002000000"], 0x40}, 0x1, 0x0, 0x0, 0x1010}, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) 3m9.255914675s ago: executing program 4 (id=2599): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0), 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept4$unix(r2, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x800) r4 = socket$inet6(0xa, 0x3, 0x88) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r8 = accept$netrom(r1, &(0x7f0000001240)={{0x3, @default}, [@bcast, @bcast, @null, @netrom, @default, @netrom, @bcast, @netrom]}, &(0x7f00000012c0)=0x48) getsockopt$netrom_NETROM_N2(r8, 0x103, 0x3, &(0x7f0000001300), &(0x7f0000001340)=0x4) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) poll(&(0x7f00000001c0)=[{r7}], 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f00000013c0)={0x0, 0xc4, "43abe1dbc56bc36b053827eb9c9670513aaa6a4031deb95517af9fe5037d5b8f2b21b58b7b79adaf734b8f08214e14faf209dc8b8ce28bc606000000133f0cdb92e938b42d9795f09c75ef03d7abfbeb430deb2c15bad9a911cafdbc39365d57fa91b0864ecf2367078604b8931aa78788489fc4853bf609907885ba72d198d6b6873e1a625d1bd949ff3361291d3d712674d3f9e26d57cfebeb656a960e022b31a9cab3d4c2e530568e6e2327cb8af7ffffffffffffffc0fe1680894edda739413d4844"}, &(0x7f0000001380)=0xcc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) accept4$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c, 0x800) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={r10, 0x871e}, 0x8) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES8=r3, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 3m8.157223585s ago: executing program 4 (id=2613): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300, 0x0, 0xc090}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b05, &(0x7f0000000880)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000010101020000000000000000020000000c001980"], 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b0000000c0000000c0000000300000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, &(0x7f0000000040), 0x0}, 0x20) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f917a3c92b", 0x14}], 0x1}, 0x0) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newrule={0x30, 0x18, 0x300, 0x0, 0xfffffffe, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="caacaefdd067cd2cf6df86c0502e2b9c6af049a0350fd5fd89d5309ccb5775c8d1dd94906b28e872f4d1084e0c2eb162700ae5f25ba530d14cd6702766f1ddc4dff911f7b596c09f4ef0eb7c74ca7d8b", @ANYBLOB="139d0b", @ANYBLOB="0fd52461ced6", @ANYRESHEX=r3, @ANYRES8=r3, @ANYBLOB="56669cef7124c137da1866b04a3c0e11f98ba0ceffd9535a534a4c949e0e14bab7c467c122181efe36c98ec325874bb9b70c09abe878493ebd13d5218413f045bc999598607559b70a483a41bcc1858327543a87633aaacf9e06cad0521836b659edf5e6ea25da234bbeb1170a308cb4e10e085e731bf9033df33354428b71b7f0b78595f2eff0887b70094870401b899958b1d3ff6ea4f82e28e1faf4b219046a5f44f433678b8d26dbfd971d2c8e2ae01ee72fa26f0ecb42", @ANYRES8, @ANYRES64=r5], 0x38}, 0x1, 0x300, 0x0, 0x20000000}, 0x0) 3m8.04921827s ago: executing program 4 (id=2616): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r3 = socket(0x1e, 0x5, 0x0) getsockname$packet(r3, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000030000000000000000000000000a28000000000a0101000000005e1affd5020000000000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a00000000000000000073797a3200000000140000001100010000000000000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x78}}, 0x20000080) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="08002600b409000008002700b0"], 0x3c}}, 0x44000) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x9}, 0x8) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r7, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1b, 0x13, [{0x1b}, {0x6, 0x1}, {0x24, 0x1}, {0x2}, {0x6c, 0x1}, {0x48}, {0xb, 0x1}, {0xc, 0x1}, {0x6c}, {0x30, 0x1}, {0xc, 0x1}, {0x48, 0x1}, {0x18, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5}, {0x48}, {0x24}, {0x2, 0x1}, {0x60, 0x1}, {0x36, 0x1}, {0x48, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 2m3.323027398s ago: executing program 32 (id=2616): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r0, 0x0, 0x1}, 0x18) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) r3 = socket(0x1e, 0x5, 0x0) getsockname$packet(r3, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000030000000000000000000000000a28000000000a0101000000005e1affd5020000000000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a00000000000000000073797a3200000000140000001100010000000000000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x78}}, 0x20000080) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="08002600b409000008002700b0"], 0x3c}}, 0x44000) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x9}, 0x8) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r7, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1b, 0x13, [{0x1b}, {0x6, 0x1}, {0x24, 0x1}, {0x2}, {0x6c, 0x1}, {0x48}, {0xb, 0x1}, {0xc, 0x1}, {0x6c}, {0x30, 0x1}, {0xc, 0x1}, {0x48, 0x1}, {0x18, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5}, {0x48}, {0x24}, {0x2, 0x1}, {0x60, 0x1}, {0x36, 0x1}, {0x48, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 5.240376285s ago: executing program 1 (id=4179): r0 = socket$kcm(0x21, 0x2, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000000)=0x8, 0x4) close(0x4) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x18, r3, 0x1, 0x81}, 0x14) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x8, 0x3, 0x0) poll(&(0x7f0000000000)=[{r5, 0x8a20}, {r4, 0x1a0}], 0x2, 0xf72) r6 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x10010, r6, 0x100000) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x7, &(0x7f0000000000), 0xa0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000000000003a00000000000000ef0a000000000000100100091e000000025f0dc3590000008474d982ff926d6851e28fd4f24849046531a24f9be8362f5d732dd44d8e7b92c2c28d0ce2ee996a4fac052712db648f7401d34b794755fa100f37ac240ddaaac8b10000"], 0x28}, 0x0) 3.092287502s ago: executing program 3 (id=4201): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1}, &(0x7f0000000140), 0x0}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000060000000d00000002000004000000000000080003000001000000000b00000005000000100000000000000b0500000005f7000000000008040000000c0000000000000c04000000002e2e005f00"], &(0x7f00000003c0)=""/223, 0x66, 0xdf, 0x1, 0x1000}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0x20, &(0x7f0000000c40)={&(0x7f0000000a40)=""/203, 0xcb, 0x0, &(0x7f0000000b40)=""/212, 0xd4}}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c45001280656300000c00028005000b0001000000086f9cba00000000008000", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.849203237s ago: executing program 3 (id=4204): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'bridge0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x100, 0x7, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "a8bd"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x100, 0x7, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "a8bd"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.492636985s ago: executing program 3 (id=4207): r0 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{&(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{&(0x7f0000001b00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000037c0)=[@ip_ttl={{0x10, 0x0, 0x2, 0x10001}}], 0x10}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc4}}], 0x3, 0x40000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xfc41}], 0x1}, 0x40000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x9, 0x2, 0x3, 0x8, 0x4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000006a000769000200000000000000000005"], 0x18}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1261}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x6081}, 0x4048005) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x16, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x80811501, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0x2, @in6=@private1, 0x0, 0x4}, {{@in6=@loopback, 0x0, 0x6c}, 0xa}]}]}, 0x13c}}, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00010000000000000000d531000000040005"], 0x18}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) 2.491331875s ago: executing program 1 (id=4208): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001cc0), &(0x7f0000001d00)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x16, 0x701, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x854) 2.439512024s ago: executing program 3 (id=4209): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xff80}}]}]}}}}}}}, 0x0) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0x10}, {0xffff}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8003, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x40) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 2.384845049s ago: executing program 1 (id=4210): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x48, r3, 0x5, 0x3, 0x0, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x3, 0x1, 0x0, {0xff, 0x1956, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x9}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) (async) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) r8 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100ffffffff0000000001000000bd8aa95e8313a8898e879098f704000780fff50000000000"], 0x2c}}, 0x20000000) (async, rerun: 32) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010027bd902447ae36faf99a00000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) (async, rerun: 32) setsockopt$inet_buf(r8, 0x0, 0x2a, &(0x7f0000003080)="28410f027a06a5ec90280f53f23a7f83e89ae02572e77804255d41ae923840199f820b50b7a8200fe36c04a7f9846e98d94c6d400af60a16e7858f350311a523d8f8627a3bf6f76b65a3d9aef34055bccc9ed63f4a635bca3586318901a0a3dcced16905b57d8506273df696dfbee4936517a58c1a1555a17179675619f980e8e434a813b4bb5e41b26f71", 0x8b) (async) sendto$inet6(r7, &(0x7f0000000040)="aa", 0x1, 0x4048084, &(0x7f0000000100)={0xa, 0x0, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010105}, 0x2}, 0x1c) bind$bt_l2cap(r6, &(0x7f0000000180)={0x1f, 0x1, @any, 0x3c}, 0xe) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) socket$inet_udp(0x2, 0x2, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x408c0}, 0x8000) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) 2.271793454s ago: executing program 1 (id=4211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) (async) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x10) (async) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd608bb78c000c2f00fc0000000000000000000000000000002f57dcff0200000000000000f8ff00000000010000883e000c907801000000"], 0x0) 2.16530716s ago: executing program 3 (id=4213): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x1, 0x28e, [0x0, 0x200000000080, 0x2000000000b0, 0x2000000000e0], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x9, 0x53, 0x2, 'vxcan1\x00', 'veth1_virt_wifi\x00', 'team_slave_1\x00', 'bond_slave_1\x00', @random="9e52c26e7163", [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff, 0xff], 0x9e, 0x9e, 0x1ce, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0xfffc, 0x2}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3eb7, 'system_u:object_r:vhost_device_t:s0\x00'}}}}]}]}, 0x306) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x5, 0xb, 0x3, 0x8, 0x5}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 2.103553966s ago: executing program 3 (id=4215): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="140007"], 0x38}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket(0xa, 0x3, 0x3a) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r4 = socket(0x8, 0x3, 0x0) socket(0x28, 0x800, 0x3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28004}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x6180, 0x0) syz_genetlink_get_family_id$gtp(0x0, r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x23, 0x2, 0x1eb6, &(0x7f0000000100)={0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x40, r9, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40890}, 0x894) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a40)={0x1108, r9, 0x8, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x7f, 0x3, "e2a1b5cd5f7c1e3224718513b8a521b57575992467aecaf24a719b0b2674b32a5707d8d511caf8aedb21863df16ba7a2e93fb2d2e95b7f368da7ba9d58fba84914d3633c258cae62660a413ef334c80fb1a4ed20fdfc4b8d8eb62cd89be9e874f5537c7a198ada4f3e9216581a787619388ab996939ae1da2582e9"}, @ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}, @ETHTOOL_A_WOL_SOPASS={0x70, 0x3, "9f232714a8950dba7e4f6b73b9b58e8d91b3621395c8855500d5b2b091b954ecfaf45b59e73d1692d8a4a363c3bac2301726ae5aca1bf2d288d3c604c515ff5b605646fcda4b0479f3776998b84e4a7ddaccbb24ba8aff067075dbf2066b835c2c38222f298fd17c419875ad"}]}, 0x1108}, 0x1, 0x0, 0x0, 0x800}, 0x4005) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendto$packet(r4, 0x0, 0x0, 0x240080c0, 0x0, 0x0) setsockopt$MRT6_FLUSH(r3, 0x29, 0x24, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r8, &(0x7f00000009c0), 0x0, 0x2400804d) 1.653194811s ago: executing program 2 (id=4220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r1, &(0x7f0000000d40), 0x0}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) r5 = socket$kcm(0x29, 0x5, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r5, r6, 0x0, 0xffffffff000) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x97c8e91314550ade, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x5, 0x1e, 0x0, &(0x7f0000000500)="259a53f271a76d2608fff74588a80a3888a82f15a781bd944c21f3697c56", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) bind$netlink(r4, &(0x7f0000000180)={0x10, 0x0, 0x25dfdc03, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES64=r2], 0xa8}}, 0x0) 1.607942995s ago: executing program 5 (id=4221): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x80000000) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f00000000c0)={0x1a, 0x201, 0x35, 0x4, 0xf, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x19c}) r3 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000000180)=""/199, &(0x7f0000000280)=0xc7) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000002c0)={0x0, 'pim6reg1\x00', {0x2}, 0xfffa}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xb}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc044011}, 0x4000801) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000480)={0x1, 0x3}) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000004c0), &(0x7f0000000500)=0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r6, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x53}, @void, @val={0xc, 0x99, {0x6, 0x29}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80c0}, 0x40080) syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) accept(r3, &(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000700)=0x80) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000740)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r7, 0x5000943a, &(0x7f0000000800)={{r2}, r8, 0x4, @inherit={0x58, &(0x7f0000000780)={0x0, 0x2, 0x6, 0xffffffff, {0x5, 0x1, 0x4, 0x7ff, 0x5f9}, [0x100000001, 0x3]}}, @subvolid=0x8}) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000001800)=0x1) r9 = accept4(0xffffffffffffffff, &(0x7f0000001840)=@sco, &(0x7f00000018c0)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, &(0x7f0000001900), &(0x7f0000001940)=0x4) close(0xffffffffffffffff) syz_genetlink_get_family_id$team(&(0x7f0000001980), r5) r10 = accept$ax25(r7, &(0x7f00000019c0)={{0x3, @null}, [@default, @bcast, @remote, @rose, @default, @netrom, @bcast, @null]}, &(0x7f0000001a40)=0x48) ioctl$SIOCAX25DELFWD(r10, 0x89eb, &(0x7f0000001a80)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null}) 1.481238469s ago: executing program 5 (id=4222): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x30, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {0x4}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0x100, 0x32}, @in=@private=0xa010100, {0xfffffffffffffffe, 0x0, 0x0, 0x9, 0x100000000, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {0x0, 0x0, 0x2}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x2, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e24, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x54, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x54}}, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000001c0)) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) socket$key(0xf, 0x3, 0x2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) socket(0x10, 0x3, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x30, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {0x4}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) (async) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0x100, 0x32}, @in=@private=0xa010100, {0xfffffffffffffffe, 0x0, 0x0, 0x9, 0x100000000, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {0x0, 0x0, 0x2}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x2, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e24, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) (async) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x54, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x54}}, 0x0) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000001c0)) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) (async) 1.412190783s ago: executing program 2 (id=4223): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)={0x4}, 0x8) (async) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000600)={'filter\x00', 0x0, 0x3, 0x4b, [0x10, 0x9, 0x0, 0x5, 0x5, 0x1], 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=""/75}, &(0x7f00000003c0)=0x78) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000002040)=0x8, 0x4) (async) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffb, @mcast2, 0x5}, 0x31) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="81cee23e9cac80db89", 0x9}], 0x1}}], 0x1, 0x4001c00) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, 0x16, 0xa01, 0x0, 0x0, {0x1e}, [@typed={0x4}, @typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x20}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$TUNSETLINK(r5, 0x400454cd, 0x108) (async) recvfrom$packet(r0, &(0x7f0000000000)=""/24, 0x18, 0x2000, &(0x7f0000000040)={0x11, 0x12, r4, 0x1, 0xc, 0x6, @random="ffde8d30e1f7"}, 0x14) (async) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20004086) 1.366587554s ago: executing program 5 (id=4224): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ea}, [], {0x14, 0x3f9}}, 0x28}}, 0x0) (async) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3200000010000000", @ANYRES32, @ANYBLOB="1e07bb4a39ff242f228ddce38d538c1b8e8516209172b5312bea551de5689da053f131ea26501dce1f6305ef69296887329a39224c2d80657f7ef4b5a4d5f40099fdfcde515a040000001dd573c86d138c5c440a4d92e68486eef93b856403c1e3885ccf5eefb3ebac85e76df7d294f67957004b3be019bcf8768404259128aab8bf7df9059a92da23444caaceac7ea4d2937e362a7778467f55f98e37a309a2e230f5b9e6148912639c2b0959614540f15421ad35ef49dc56850d1af760e5d732d93e68c3a00b53d20350b9722f58e59e3c99db1a7e894f07a59c91", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), 0xffffffffffffffff) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000480)="00e88a79f76008c77f19ee3a8a898217187ebc0aa050c397794998615839e716f8d25c5395c8156963ad36d87a63a54d23d4868e24a7ff2b491038482ee5c8795658243cea3072be48479232c7f76cedcb210e82519f6a885a9fe4a8", 0x5c}, {&(0x7f0000000500)="909dcb6b2ff63f57b07f672dd7a3ca8b94227a5c618d5a442da9c1e9a442c27321f5690de8053f3945c9ae744d1f385c3a6c65eaf1ca23a0da70e987b202e2de5dac48a8d6839fa5855b5aeb3473e85dd24db36da7695c187d21f4fa3f08324826ad75aa3f35876eab89b25ebc0c987d9fc7de06b8a712fc6643ffc6e1193a9c0653273f83a0832322f32ea812d1a5a97dc19fed1b38018a3bbca96d642f7b25fcaa872f01bb2d6756223aefe8dc84d30cb58461e67906e255cae3d12a6daba59ca4a7e78146c0737a2a35d202d51ee336d51bd4b2a8c00633c35ef6363ca3b4254e9ce8864727af", 0xe8}, {&(0x7f0000000600)="88a22f8ecda9f23526d39762eee1bb0086a5d54bea96a65c449935941023bde325bcd633d048b5c2a72be87108dc41c931a107940b0c6ba129cb1f2ea089c3ad6a6329faae8ec8088d925589a5cb", 0x4e}, {&(0x7f0000000680)="ad5768f024e33b50048a9cdacedfaca0af29385f5674304f99f2ae9d42956a8a8371ed5b427af6f5a867b75ce75fa4d95b2b9b9de567f0ac25936c35b153ff6b1535d058adcea62e5502d5171e327d86acaae098213cbea0822bef709bb8be92b2ad526cba98caf02bafc4e7b6d9", 0x6e}, {&(0x7f0000000780)}], 0x5}, 0x20000000) 1.355668377s ago: executing program 1 (id=4225): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2b, 0x2, 0x0, 0x9, 0xe0, 0x0, 0x0, 0xff}, 0xe) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf000000000000040000", @ANYRES32=r3, @ANYBLOB="3c0030803800018008000100000000000c00050008000000000000000c000500d7000000000000001400038008000200030000000600010003000000"], 0x58}}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r6, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000012c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24004000}, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB="4ad800", @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf25010000000800340004000000050030000000000005002f000000000008003a0008000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004084}, 0x24001) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xf, 0x0, &(0x7f0000000700)="a498812dcc59a7470a16d3e5158013", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) recvfrom(r9, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000015c0)=@setlink={0x228, 0x13, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x44c21, 0x21008}, [@IFLA_VFINFO_LIST={0x1f8, 0x16, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @broadcast}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x85f, 0x9}}]}, {0xb0, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xeb, 0x4, 0x7f}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x81}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x100, 0x4}}, @IFLA_VF_TRUST={0xc, 0x9, {0xac, 0x400}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0x2aa, 0xe693}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x7}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8000, 0x337, 0x58, 0x88a8}}, {0x14, 0x1, {0x6, 0xba0, 0xc, 0x88a8}}, {0x14, 0x1, {0x1000, 0xf7c, 0x9, 0x8100}}, {0x14, 0x1, {0x3, 0xbad, 0x89900000, 0x88a8}}]}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x21, 0x7, 0x88a8}}, {0x14, 0x1, {0x0, 0x140, 0x8, 0x88a8}}, {0x14, 0x1, {0x7, 0x36b, 0x200, 0x88a8}}]}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0xc5}}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x52c3}}, @IFLA_VF_VLAN={0x10, 0x2, {0xcf7, 0x473, 0x8}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0xe5d, 0xfffffff6}}, @IFLA_VF_RATE={0x10, 0x6, {0x7f7, 0xb, 0x10}}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8, 0x200000}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0xb}}, @IFLA_VF_RATE={0x10, 0x6, {0x8, 0x4, 0x9}}, @IFLA_VF_TRUST={0xc, 0x9, {0xfff, 0x8001}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x200, 0xf26}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x40, 0x1}}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x8000, 0x3}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x6, 0x2}}]}]}, @IFLA_EVENT={0x8, 0x2c, 0xc}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x228}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)=@gettfilter={0x5c, 0x2e, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x6, 0xfff1}, {0xb, 0x8}, {0xffff, 0xffe0}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0xff}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x99c}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0xc040085) socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000035c0)=""/4108, 0x100c}], 0x1}, 0x40000300) 1.229464304s ago: executing program 5 (id=4226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240b4af260fef3eb2fac3398173e69e000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x2000c000) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x20000800) 1.060292797s ago: executing program 5 (id=4228): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/mnt\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000500000000000000000080200000000400050000000008000f"], 0x2c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f00000052c0)={0x0, @default, @netrom={'nr', 0x0}, 0x743, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x10, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r6, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x64, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x64}}, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x22, 0x0, 0x0) setsockopt(r1, 0xbe8, 0xad7, &(0x7f0000000000)="3fd9bcf19ead0dc5f516c83f9294f9fe9a9a5047f762f2628fbfadadf77c0c61bb20d95a5f1d122f3792e88dc56a874d34d0ce6a5d4d43e8fb1761615c247e9b77daf9dab3547faeff275bfeb4dc20989dd868b04dac8a8ef5124bde2f472527cff9f4e6b228d73df48242c3ce7471b08141a74e80f8c4520104a0f33dc7a41e92dd0bfaca23a17a944d87c3e81712ae469815c68cc5", 0x96) 1.009080827s ago: executing program 2 (id=4229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x1) close(0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x600}, @void, @ipv6=@udp={0x6, 0x6, "55e6fb", 0x94, 0x11, 0x0, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, {[@dstopts={0x87, 0xa, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1, @ra={0x5, 0x2, 0x9}, @generic={0x4, 0x3a, "0f62bbc2eb9483c95578f50f07e74b89ace318df356dd0c3f3f18a47969ccb4fdaacc58c82eb5633d4c74dadbe363e86aaa31bc1813df4753339"}]}, @fragment={0x27, 0x0, 0x1, 0x0, 0x0, 0x1c, 0x64}], {0x4e20, 0x4e21, 0x34, 0x0, @gue={{0x2, 0x0, 0x2, 0x0, 0x100}, "47f268e09a06dfdce5b0cd3ace4486abf38a896619c7e96ab81fd6f4ff15e1f7075606be"}}}}}, 0xc0) (async, rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) (async) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r4, 0x10c, 0x4, &(0x7f0000000000), 0x4) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="e8a51b48480bfda000", 0x9) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@can_newroute={0x154, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xff, 0x0, 0x0, 0x0, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x8}}]}, 0x154}}, 0x49080) (async) r6 = accept4(r3, 0x0, 0x0, 0x800) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpeername(r7, &(0x7f00000001c0)=@sco={0x1f, @fixed}, &(0x7f0000000240)=0x80) writev(r6, 0x0, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x11, 0x34, @random="5633e5bde725f2b28b44e0b849"}]}, 0x40}}, 0x4000) (async) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, @null, @bpq0, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0xc) (async) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd0903280005003000000060000000122811"], 0xfdef) 955.922369ms ago: executing program 5 (id=4231): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000040376e08de02000000e891e75c0000002300000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x24000044) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4106(gcm(aes)))\x00'}, 0x58) close(0x3) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000380), &(0x7f00000000c0)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r6, 0x89e2, &(0x7f0000000140)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3fab00000000000000002e00"], 0x50}}, 0x80) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0xd0, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x16, 0xc}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x9}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa83}, {0x6, 0x16, 0x3}, {0x5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000850}, 0x10) sendmmsg$inet(r5, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df", 0x69}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfccbec448bc6ce5c139c2095da22c9d7edf7bfa1392c76ab0dddf4db130420df295ea16aa3e841d50dc813025315eea3990c2de68e835c4fec57e2dd70f47b58472c2f915de1a58a32d021d", 0xd3}, {&(0x7f0000000cc0)="91ebffffff7f7d8625547e6fdcfb96c1d9b461ad7581ce705ad7203fb9e00e70512c27e5d5980dbbdb9d8dd381060e0f5bd279f6b8d9109f8e5b1ad6402331e7e4ba5a0300ee40f4ed347c7997c0c822b355f310b659f42003566ffc26878858a5f20373da0b75bed8465da60f840979b6b18d0cbeb297ce3e1e34d46e9e28b416e60e9f9dceb059bd608a506d563315b1a9c536f6ca7ec68acd35c32cdace2471dce1452c62550a9bf975bb6adf889077c111c77030761c0f5d6baccf58dd38bdc0889b55669170d96224c8fd12762ad7f2a635040cde08fb0cdfb05e646af483235ca7dab9", 0xe6}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc", 0xc2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="d5469d85d0d60f65e265272f992fe2e860cf294713d9aa59e6978c40ef94aad6795a8b5065a21b9f87e5554281240542a4b35f", 0x33}, {&(0x7f00000003c0)="3af5df09729c0dad9e050ab7691842d7d6d9173cd72bb9b8a156f7924f50eeb536fc29376a021f6804dcf16d4b821dbccfe9992371133d2089132c01a18d96c6df3abaaed308811b0fdc043529aee9c1cdf28b72abeddcf6a58579a61707a0aabc", 0x61}, {&(0x7f0000000680)="08ce454517ca124225c41ab87e94f80f1a901164f50f2467332973df3f70a604bcd21cd340fd", 0x26}], 0x3}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)="33ca667d023ea8f11964db8d", 0xc}, {&(0x7f0000001a80)="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", 0x29c}], 0x2}}], 0x4, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000060007000300000004000000"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110000000000ffffffff0f00000008000300b6ac8261b6a4b27bd215ec03e5bfabb5b7482638603a4c75d5a26628d50bbe65dec886a8f1ae42cef910d8f7939483a80fea7506b05b0b849787758295407a1ab9c46ffda79880f615bf3216b2a85a24ffb0251fa93eafa50453569caf5f7b9e651789fc570928ef75", @ANYRES32=r4, @ANYBLOB="fbf277c21ad5a000"], 0x24}}, 0x0) 843.896709ms ago: executing program 0 (id=4232): r0 = socket$kcm(0x10, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x30, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r7, {0xd, 0x9}, {0x4}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) r8 = accept(r2, &(0x7f00000000c0)=@xdp, &(0x7f0000000040)=0x80) r9 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r8, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="2890cc72163464e8000000a79cb51cc2df938504662dc32ab3b2cb0f5277777a31dc946b36c6d137cab83c766a86635ae34a6ea9827d36cd346757ffde530bb81fac500bc26e36a735ece469d76b366c5b481a539ebb76db1734fccf8ad8becc86cfa52afeba525359ba938866dcadbbebd019641739a0278a8024aaa2bce54a9fb293110d0a4bdd9c1129ab5b720549bd92266cfd79c7d675247b2bc703680f4416e655a4a29893c611bf215fc714b97bca6dbd9045840010f171bd4971eefbca47370eb3a67317", @ANYRES16=r9, @ANYBLOB="000425bd7000ffdbdf250200000006000a004e24000004000500080006007f000001"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x840) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000104000000000000000000000500", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r2, @ANYRES32], 0x40}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r10, &(0x7f0000000500), &(0x7f0000000280)=@udp=r2}, 0x20) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20050800) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) 689.106342ms ago: executing program 2 (id=4233): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x1c0, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x190, 0x2, {{0x4, [0x6, 0xc, 0xc, 0x8, 0xd, 0xd, 0x6, 0x10, 0xf, 0x2, 0x6, 0x7, 0x8, 0xc, 0x3, 0x8], 0x1, [0x3, 0x18, 0x3, 0x9, 0x0, 0xf, 0x200, 0x6, 0x1, 0x4, 0x8, 0x3, 0x4, 0xfffd, 0xfff, 0x1000], [0x8, 0x0, 0x7, 0x101, 0x7f, 0xffe0, 0xf820, 0x0, 0xc2, 0xb7, 0xe000, 0x1, 0x1, 0x401, 0x1, 0x6]}, [@TCA_MQPRIO_MIN_RATE64={0x64, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x6}, {0xc, 0x3, 0x8000000000000001}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0xae5}, {0xc, 0x3, 0xec87}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x5}]}, @TCA_MQPRIO_MIN_RATE64={0x70, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x2}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x10000}, {0xc, 0x3, 0x483e}, {0xc}, {0xc, 0x3, 0x100000000}, {0xc, 0x3, 0xe}, {0xc, 0x3, 0x8}]}, @TCA_MQPRIO_MAX_RATE64={0x64, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x80}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0xe35c}, {0xc, 0x4, 0x8}]}]}}}]}, 0x1c0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x33, 0x1, 0x70bd29, 0x25dfdbfb, {0x7}}, 0x14}}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000f54deedf00128067726574617000000c00028006000200202030000000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x1c0, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x190, 0x2, {{0x4, [0x6, 0xc, 0xc, 0x8, 0xd, 0xd, 0x6, 0x10, 0xf, 0x2, 0x6, 0x7, 0x8, 0xc, 0x3, 0x8], 0x1, [0x3, 0x18, 0x3, 0x9, 0x0, 0xf, 0x200, 0x6, 0x1, 0x4, 0x8, 0x3, 0x4, 0xfffd, 0xfff, 0x1000], [0x8, 0x0, 0x7, 0x101, 0x7f, 0xffe0, 0xf820, 0x0, 0xc2, 0xb7, 0xe000, 0x1, 0x1, 0x401, 0x1, 0x6]}, [@TCA_MQPRIO_MIN_RATE64={0x64, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x6}, {0xc, 0x3, 0x8000000000000001}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0xae5}, {0xc, 0x3, 0xec87}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x5}]}, @TCA_MQPRIO_MIN_RATE64={0x70, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x2}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x10000}, {0xc, 0x3, 0x483e}, {0xc}, {0xc, 0x3, 0x100000000}, {0xc, 0x3, 0xe}, {0xc, 0x3, 0x8}]}, @TCA_MQPRIO_MAX_RATE64={0x64, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x80}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0xe35c}, {0xc, 0x4, 0x8}]}]}}}]}, 0x1c0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x33, 0x1, 0x70bd29, 0x25dfdbfb, {0x7}}, 0x14}}, 0x4) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000f54deedf00128067726574617000000c00028006000200202030000000000000"], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 664.477417ms ago: executing program 0 (id=4234): socket$inet6(0xa, 0x5, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x5, 0x2, 0x1}, &(0x7f0000000100)=0x10) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e4ff000000000000000000630100000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 576.314843ms ago: executing program 2 (id=4235): r0 = socket(0x2a, 0x2, 0x0) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x3f9, 0x10, 0x70bd28, 0x25dfdbfb, {0x1, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x40041}, 0x8000) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) (async) accept4$netrom(r0, 0x0, &(0x7f0000000000), 0x80800) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000000380)={@null, 0x801ffff, 'veth0_vlan\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 497.241057ms ago: executing program 0 (id=4236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000140)=0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0xe6, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) (async) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000140)=0x8) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) bind$packet(r5, &(0x7f0000000180)={0x11, 0xe6, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (async) 444.272357ms ago: executing program 2 (id=4237): socket(0x1e, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') listen(r3, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) r4 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0) 357.687931ms ago: executing program 1 (id=4238): sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6d}}}}, ["", "", "", ""]}, 0x20}}, 0x200480c5) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004000}, 0x10) r2 = accept(r0, 0x0, &(0x7f00000002c0)) getsockopt(r2, 0xd, 0xfff, &(0x7f0000000300)=""/193, &(0x7f0000000400)=0xc1) bind$802154_raw(r2, &(0x7f0000000440)={0x24, @none={0x0, 0x3}}, 0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r3, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x2d}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x781}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x4084) r5 = openat$cgroup_ro(r0, &(0x7f0000000600)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000640)='memory.events\x00', 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000680)) r7 = accept$phonet_pipe(r0, &(0x7f00000006c0), &(0x7f0000000700)=0x10) ioctl$SIOCPNENABLEPIPE(r7, 0x89ed, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000740)={0x18, 0x0, {0x0, @remote, 'veth0_to_hsr\x00'}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'ip6gre0\x00', r9, 0x0, 0x8, 0x6, 0xfffffffc, 0x2, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x40, 0x1, 0x7}}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan4\x00', 0x0}) r13 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, r11, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r13}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4844}, 0x4040800) recvfrom(r6, &(0x7f0000000a00)=""/223, 0xdf, 0x20, &(0x7f0000000b00)=@ethernet={0x306}, 0x80) r14 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000c40)={r14, r7, 0x1, 0xbe, &(0x7f0000000b80)="06964e90abc0ade1db957a1175b3d912eb5af71917be63f77161eae80d4223c138f922215fffcbf8ea31c54e4422dbebf187f9e13da51a825e27973313ab7f7a6efb288576c53eb310c0b82c7ec118c5408a9079c397a1131511d284f25bde6fa81f8a361f085d2cb8859d6544e8db9d8dc24ba53f651bcabe7113db2606d6af4fa805c01399e1c792cfbd95a710268a5eace99c7f7f970c179799c19d3aa927ae2674434cf906b649a9a0bc8553aa25eca7d479f455dc1adf7e3aab2a8d", 0x2, 0x9, 0xd, 0x101, 0x7, 0x2, 0x38babe2e, 'syz1\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) getsockname$tipc(r5, &(0x7f0000000d00)=@id, &(0x7f0000000d40)=0x10) 272.562045ms ago: executing program 0 (id=4239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) 184.20889ms ago: executing program 0 (id=4240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) 0s ago: executing program 0 (id=4241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r1, 0x118, 0x2b, 0x0, &(0x7f00000003c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x8c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) (async) getsockopt$inet_buf(r1, 0x118, 0x2b, 0x0, &(0x7f00000003c0)) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x8c}}, 0x0) (async) kernel console output (not intermixed with test programs): callbacks suppressed [ 374.654382][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 374.774286][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 374.883844][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 374.993875][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 375.104089][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 375.225023][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 375.333950][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 375.444171][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 375.553890][ T8608] bond2: (slave macvlan4): failed to get link speed/duplex [ 375.664182][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 379.734168][ T8610] net_ratelimit: 36 callbacks suppressed [ 379.734192][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 379.853818][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 379.963964][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 380.074175][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 380.183788][T10220] bond2: (slave macvlan4): failed to get link speed/duplex [ 380.293906][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 380.404330][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 380.513900][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 380.623794][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 380.733977][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 384.834217][ T8610] net_ratelimit: 36 callbacks suppressed [ 384.834241][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 384.953698][ T8608] bond2: (slave macvlan4): failed to get link speed/duplex [ 385.074300][ T8608] bond2: (slave macvlan4): failed to get link speed/duplex [ 385.195172][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 385.305059][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 385.413905][ T8608] bond2: (slave macvlan4): failed to get link speed/duplex [ 385.524215][ T8608] bond2: (slave macvlan4): failed to get link speed/duplex [ 385.633711][ T8608] bond2: (slave macvlan4): failed to get link speed/duplex [ 385.743962][T10220] bond2: (slave macvlan4): failed to get link speed/duplex [ 385.854192][ T8608] bond2: (slave macvlan4): failed to get link speed/duplex [ 386.424637][ T8610] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 389.934329][ T8597] net_ratelimit: 36 callbacks suppressed [ 389.934352][ T8597] bond2: (slave macvlan4): failed to get link speed/duplex [ 390.054285][ T8597] bond2: (slave macvlan4): failed to get link speed/duplex [ 390.163737][ T8597] bond2: (slave macvlan4): failed to get link speed/duplex [ 390.273688][ T8597] bond2: (slave macvlan4): failed to get link speed/duplex [ 390.384304][ T8597] bond2: (slave macvlan4): failed to get link speed/duplex [ 390.493654][ T8597] bond2: (slave macvlan4): failed to get link speed/duplex [ 390.603857][ T8597] bond2: (slave macvlan4): failed to get link speed/duplex [ 390.714185][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 390.824156][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 390.933669][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 395.034659][T10220] net_ratelimit: 36 callbacks suppressed [ 395.034685][T10220] bond2: (slave macvlan4): failed to get link speed/duplex [ 395.154065][ T8608] bond2: (slave macvlan4): failed to get link speed/duplex [ 395.264423][T10220] bond2: (slave macvlan4): failed to get link speed/duplex [ 395.373700][T10220] bond2: (slave macvlan4): failed to get link speed/duplex [ 395.483796][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 395.594288][ T8608] bond2: (slave macvlan4): failed to get link speed/duplex [ 395.704220][T10220] bond2: (slave macvlan4): failed to get link speed/duplex [ 395.823907][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 395.933759][ T8597] bond2: (slave macvlan4): failed to get link speed/duplex [ 396.044205][ T8597] bond2: (slave macvlan4): failed to get link speed/duplex [ 399.223789][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 400.124488][ T8610] net_ratelimit: 36 callbacks suppressed [ 400.124513][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 400.243911][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 400.354073][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 400.463725][T10220] bond2: (slave macvlan4): failed to get link speed/duplex [ 400.573834][T10220] bond2: (slave macvlan4): failed to get link speed/duplex [ 400.683713][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 400.794300][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 400.903848][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 401.013819][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 401.124185][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 405.205302][ T1098] net_ratelimit: 36 callbacks suppressed [ 405.205327][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 405.324568][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 405.433865][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 405.543948][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 405.654577][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 405.763982][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 405.873944][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 405.983905][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 406.093678][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 406.204375][ T8608] bond2: (slave macvlan4): failed to get link speed/duplex [ 410.284326][ T8597] net_ratelimit: 36 callbacks suppressed [ 410.284352][ T8597] bond2: (slave macvlan4): failed to get link speed/duplex [ 410.405121][ T8597] bond2: (slave macvlan4): failed to get link speed/duplex [ 410.515069][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 410.624248][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 410.734590][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 410.843916][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 410.954163][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 411.074612][ T8597] bond2: (slave macvlan4): failed to get link speed/duplex [ 411.183855][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 411.293727][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 414.583772][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 415.039027][T16578] __nla_validate_parse: 1 callbacks suppressed [ 415.039047][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2787'. [ 415.104689][T16578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2787'. [ 415.500231][T16605] netlink: 'syz.0.2792': attribute type 10 has an invalid length. [ 415.508339][T16605] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2792'. [ 415.519624][ T8608] net_ratelimit: 36 callbacks suppressed [ 415.519646][ T8608] bond2: (slave macvlan4): failed to get link speed/duplex [ 415.567504][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.585980][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.595934][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.618075][T16605] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 415.634798][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 415.657599][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 415.683306][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 415.955654][ T8608] bond2: (slave macvlan4): failed to get link speed/duplex [ 416.174934][T16633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2802'. [ 416.214602][T10220] bond2: (slave macvlan4): failed to get link speed/duplex [ 416.331885][T16606] chnl_net:caif_netlink_parms(): no params data found [ 416.521688][ T5950] syz_tun: tun_net_xmit 86 [ 416.591345][T16606] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.591416][T16644] syz_tun: tun_net_xmit 86 [ 416.598831][T16606] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.611033][T16606] bridge_slave_0: entered allmulticast mode [ 416.620487][T16606] bridge_slave_0: entered promiscuous mode [ 416.630256][T16606] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.638343][T16606] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.646246][T16606] bridge_slave_1: entered allmulticast mode [ 416.661111][T16606] bridge_slave_1: entered promiscuous mode [ 416.757408][T16651] syzkaller1: entered promiscuous mode [ 416.776787][T16651] syzkaller1: entered allmulticast mode [ 416.817871][T16657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2809'. [ 416.857125][T16606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.870454][T16606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.962506][T16606] team0: Port device team_slave_0 added [ 416.980563][T16606] team0: Port device team_slave_1 added [ 417.038878][T16663] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3944. macoff=96 [ 417.048875][T16663] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2811'. [ 417.059559][T16663] netlink: 'syz.1.2811': attribute type 1 has an invalid length. [ 417.068446][T16663] netlink: 'syz.1.2811': attribute type 2 has an invalid length. [ 417.080818][T16606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.088868][T16606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.115576][T16606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.128404][T16606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.137086][T16606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.171467][T16606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.191311][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 417.244339][T16668] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2813'. [ 417.282470][T16672] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2813'. [ 417.308155][T16606] hsr_slave_0: entered promiscuous mode [ 417.329369][T16606] hsr_slave_1: entered promiscuous mode [ 417.346920][T16606] debugfs: 'hsr0' already exists in 'hsr' [ 417.352717][T16606] Cannot create hsr debugfs directory [ 417.619401][T10220] bond2: (slave macvlan4): failed to get link speed/duplex [ 417.626970][ C0] syz_tun: tun_net_xmit 86 [ 417.713292][ T5854] Bluetooth: hci0: command tx timeout [ 417.804543][T16689] sctp: [Deprecated]: syz.3.2820 (pid 16689) Use of int in maxseg socket option. [ 417.804543][T16689] Use struct sctp_assoc_value instead [ 417.858803][T16689] sctp: [Deprecated]: syz.3.2820 (pid 16689) Use of int in maxseg socket option. [ 417.858803][T16689] Use struct sctp_assoc_value instead [ 417.894963][T10220] bond2: (slave macvlan4): failed to get link speed/duplex [ 418.113338][T16606] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 418.128507][T16606] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 418.152235][T16606] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 418.178961][T16606] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 418.273726][T10220] bond2: (slave macvlan4): failed to get link speed/duplex [ 418.284571][T16717] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2828'. [ 418.426180][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 418.434423][T10220] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 418.603644][T16606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.663862][ C0] syz_tun: tun_net_xmit 86 [ 418.676653][T16606] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.698060][ T8608] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.705324][ T8608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.782334][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.789586][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.850524][T16735] tipc: Enabling not permitted [ 418.864794][T16735] tipc: Enabling of bearer rejected, failed to enable media [ 418.901285][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2835'. [ 419.214159][T16752] netlink: 'syz.3.2839': attribute type 11 has an invalid length. [ 419.474341][T16606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.487255][T16769] netlink: 'syz.1.2843': attribute type 10 has an invalid length. [ 419.793775][ T5854] Bluetooth: hci0: command tx timeout [ 420.594983][ T8610] net_ratelimit: 10 callbacks suppressed [ 420.595003][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 420.651188][T16809] __nla_validate_parse: 1 callbacks suppressed [ 420.651210][T16809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2851'. [ 420.736534][T16809] pimreg: entered allmulticast mode [ 420.754903][T10220] bond2: (slave macvlan4): failed to get link speed/duplex [ 420.864497][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 420.921275][T16822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2855'. [ 420.981671][ T9384] bond2: (slave macvlan4): failed to get link speed/duplex [ 421.007852][T16822] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2855'. [ 421.017510][T16830] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2856'. [ 421.050174][T16832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.076009][T16824] netlink: 'syz.2.2855': attribute type 10 has an invalid length. [ 421.103666][ T8597] bond2: (slave macvlan4): failed to get link speed/duplex [ 421.198388][T16606] veth0_vlan: entered promiscuous mode [ 421.241443][T16606] veth1_vlan: entered promiscuous mode [ 421.402290][T16606] veth0_macvtap: entered promiscuous mode [ 421.439595][T16846] netlink: 'syz.2.2860': attribute type 1 has an invalid length. [ 421.450913][T16847] veth7: entered allmulticast mode [ 421.525556][T16853] netlink: 'syz.0.2863': attribute type 11 has an invalid length. [ 421.548632][T16846] 8021q: adding VLAN 0 to HW filter on device bond9 [ 421.558934][T16606] veth1_macvtap: entered promiscuous mode [ 421.583664][T16851] bond9: (slave gretap2): making interface the new active one [ 421.594070][T16851] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 421.603019][T16856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2864'. [ 421.613388][T16856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2864'. [ 421.643980][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 421.761927][T16606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.799579][T16606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.823053][ T8610] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.836579][ T8610] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.858089][ T8610] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.874849][ T5854] Bluetooth: hci0: command tx timeout [ 421.890951][ T8610] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.944407][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 422.049606][T16879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2869'. [ 422.108202][T16879] veth0: entered promiscuous mode [ 422.130338][T16879] netlink: 'syz.3.2869': attribute type 4 has an invalid length. [ 422.165708][T16878] veth0: left promiscuous mode [ 422.182899][ T8610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.195294][ T8608] bond2: (slave macvlan4): failed to get link speed/duplex [ 422.208573][ T8610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.281571][T16884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2871'. [ 422.297392][T16884] tipc: Enabling of bearer rejected, failed to enable media [ 422.318978][ T9384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.328811][ T8597] bond2: (slave macvlan4): failed to get link speed/duplex [ 422.343724][ T9384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.351175][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'. [ 422.538780][T16895] gtp2: entered promiscuous mode [ 422.567052][T16895] gtp2: entered allmulticast mode [ 422.585974][T16903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2873'. [ 423.358423][T16927] team0: Device gtp3 is up. Set it down before adding it as a team port [ 423.735463][ T5846] syz_tun (unregistering): left allmulticast mode [ 423.758692][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 423.769668][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 423.778164][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 423.786478][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 423.796466][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 423.937341][ T8610] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.950411][ T5854] Bluetooth: hci0: command tx timeout [ 424.135975][ T8610] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.252505][T16965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.331587][ T8610] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.479012][ T8610] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.769650][T17000] netlink: 'syz.0.2903': attribute type 1 has an invalid length. [ 425.153857][ C0] syz_tun: tun_net_xmit 54 [ 425.159897][T16946] chnl_net:caif_netlink_parms(): no params data found [ 425.196448][ T8610] bridge_slave_0: left allmulticast mode [ 425.224834][ T8610] bridge_slave_0: left promiscuous mode [ 425.244598][ T8610] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.307418][ T8610] vlan0: left promiscuous mode [ 425.312365][ T8610] veth1: left promiscuous mode [ 425.319148][ T8610] bridge5: port 2(vlan0) entered disabled state [ 425.331359][ T8610] veth0_to_bond: left allmulticast mode [ 425.337987][ T8610] veth0_to_bond: left promiscuous mode [ 425.344229][ T8610] bridge5: port 1(veth0_to_bond) entered disabled state [ 425.355345][ T8610] vlan3: left promiscuous mode [ 425.360439][ T8610] bridge6: port 1(vlan3) entered disabled state [ 425.663687][ C0] syz_tun: tun_net_xmit 54 [ 425.738376][ T8610] bond0 (unregistering): (slave gretap1): Releasing active interface [ 425.760804][ T8610] bond4 (unregistering): (slave gretap2): Releasing backup interface [ 425.864687][ T5854] Bluetooth: hci4: command tx timeout [ 425.983818][T17044] netlink: 51 bytes leftover after parsing attributes in process `syz.5.2909'. [ 426.434425][ T8610] bond0 (unregistering): Released all slaves [ 426.559117][ T8610] bond1 (unregistering): Released all slaves [ 426.657862][ T8610] bond2 (unregistering): Released all slaves [ 426.675058][ T8610] bond3 (unregistering): Released all slaves [ 426.773050][ T8610] bond4 (unregistering): Released all slaves [ 426.873538][ T8610] bond5 (unregistering): Released all slaves [ 426.890048][ T8610] bond6 (unregistering): Released all slaves [ 426.989624][ T8610] bond7 (unregistering): Released all slaves [ 427.086588][ T8610] bond8 (unregistering): Released all slaves [ 427.115145][T17031] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2907'. [ 427.153843][ C1] syz_tun: tun_net_xmit 54 [ 427.449237][ T8610] tipc: Disabling bearer [ 427.464501][ T8610] tipc: Left network mode [ 427.564384][ C1] syz_tun: tun_net_xmit 54 [ 427.694563][T17071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2915'. [ 427.740379][T17071] netlink: 'syz.0.2915': attribute type 8 has an invalid length. [ 427.908054][T16946] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.919791][T16946] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.927449][T16946] bridge_slave_0: entered allmulticast mode [ 427.944959][ T5854] Bluetooth: hci4: command tx timeout [ 427.948752][T16946] bridge_slave_0: entered promiscuous mode [ 428.150832][T16946] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.161954][T16946] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.172143][T16946] bridge_slave_1: entered allmulticast mode [ 428.180972][T16946] bridge_slave_1: entered promiscuous mode [ 428.420195][T17087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2918'. [ 428.572263][T17099] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2923'. [ 428.580757][T16946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.615188][T17087] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 428.646421][T17087] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 428.749067][ T8610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.764410][ T8610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.815584][ T8610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.828403][T17113] netlink: 'syz.5.2924': attribute type 33 has an invalid length. [ 428.851698][ T8610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.910999][T17117] sctp: [Deprecated]: syz.5.2924 (pid 17117) Use of int in maxseg socket option. [ 428.910999][T17117] Use struct sctp_assoc_value instead [ 428.943378][ T8610] veth1_macvtap: left promiscuous mode [ 428.967633][T17126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2930'. [ 428.970066][ T8610] veth0_macvtap: left promiscuous mode [ 428.988656][T17117] netlink: 'syz.5.2924': attribute type 10 has an invalid length. [ 429.006745][T17128] netlink: 'syz.0.2928': attribute type 10 has an invalid length. [ 429.039684][T17127] netlink: 'syz.5.2924': attribute type 10 has an invalid length. [ 429.066158][T17131] netlink: 'syz.1.2931': attribute type 6 has an invalid length. [ 429.082831][T17133] netlink: 'syz.1.2931': attribute type 6 has an invalid length. [ 429.136141][T17135] net_ratelimit: 8 callbacks suppressed [ 429.136160][T17135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.189075][ T8610] pim6reg (unregistering): left allmulticast mode [ 429.696741][T16946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.747470][T17117] team0: Port device dummy0 added [ 429.760036][T17127] team0: Port device dummy0 removed [ 429.772327][T17127] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 429.788269][ T9384] bond2: (slave macvlan4): failed to get link speed/duplex [ 429.907705][T16946] team0: Port device team_slave_0 added [ 429.927735][T10220] bond2: (slave macvlan4): failed to get link speed/duplex [ 429.952206][T16946] team0: Port device team_slave_1 added [ 430.035200][ T5854] Bluetooth: hci4: command tx timeout [ 430.138378][T16946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.154178][T16946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.181861][T16946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.210252][T17151] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2936'. [ 430.228996][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 430.251738][T16946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.270409][T17153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2937'. [ 430.291558][T16946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.346731][T16946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.390665][T17157] TCP: TCP_TX_DELAY enabled [ 430.411051][T17157] netlink: 'syz.5.2938': attribute type 1 has an invalid length. [ 430.462060][T17160] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2938'. [ 430.589484][T16946] hsr_slave_0: entered promiscuous mode [ 430.599608][T16946] hsr_slave_1: entered promiscuous mode [ 430.611616][T16946] debugfs: 'hsr0' already exists in 'hsr' [ 430.617975][T16946] Cannot create hsr debugfs directory [ 430.724560][T10220] bond2: (slave macvlan4): failed to get link speed/duplex [ 430.726059][ T8610] IPVS: stop unused estimator thread 0... [ 431.214987][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 431.343413][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 431.419429][T17194] IPVS: set_ctl: invalid protocol: 1 172.30.0.1:20003 [ 431.446341][T17196] syz.2.2950: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 431.462076][T17196] CPU: 0 UID: 0 PID: 17196 Comm: syz.2.2950 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 431.462108][T17196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 431.462130][T17196] Call Trace: [ 431.462140][T17196] [ 431.462153][T17196] dump_stack_lvl+0x189/0x250 [ 431.462185][T17196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.462209][T17196] ? __pfx__printk+0x10/0x10 [ 431.462236][T17196] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 431.462261][T17196] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 431.462288][T17196] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 431.462317][T17196] warn_alloc+0x214/0x310 [ 431.462339][T17196] ? stack_depot_save_flags+0x40/0x900 [ 431.462375][T17196] ? __pfx_warn_alloc+0x10/0x10 [ 431.462400][T17196] ? kasan_save_track+0x4f/0x80 [ 431.462430][T17196] ? xskq_create+0x56/0x170 [ 431.462457][T17196] ? xsk_init_queue+0xb0/0x110 [ 431.462480][T17196] ? xsk_setsockopt+0x4dc/0x8d0 [ 431.462504][T17196] ? do_sock_setsockopt+0x179/0x1b0 [ 431.462522][T17196] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 431.462547][T17196] ? do_syscall_64+0xfa/0x3b0 [ 431.462577][T17196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.462631][T17196] __vmalloc_node_range_noprof+0x125/0x12f0 [ 431.462691][T17196] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 431.462715][T17196] ? xskq_create+0x56/0x170 [ 431.462747][T17196] ? __kasan_kmalloc+0x93/0xb0 [ 431.462784][T17196] vmalloc_user_noprof+0xad/0xf0 [ 431.462806][T17196] ? xskq_create+0xbf/0x170 [ 431.462836][T17196] xskq_create+0xbf/0x170 [ 431.462869][T17196] xsk_init_queue+0xb0/0x110 [ 431.462902][T17196] xsk_setsockopt+0x4dc/0x8d0 [ 431.462944][T17196] ? __pfx_xsk_setsockopt+0x10/0x10 [ 431.462972][T17196] ? __pfx_aa_sk_perm+0x10/0x10 [ 431.463006][T17196] ? aa_sock_opt_perm+0x74/0x110 [ 431.463038][T17196] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 431.463063][T17196] ? __pfx_xsk_setsockopt+0x10/0x10 [ 431.463093][T17196] do_sock_setsockopt+0x179/0x1b0 [ 431.463122][T17196] __x64_sys_setsockopt+0x13f/0x1b0 [ 431.463152][T17196] do_syscall_64+0xfa/0x3b0 [ 431.463183][T17196] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.463214][T17196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.463236][T17196] ? clear_bhb_loop+0x60/0xb0 [ 431.463264][T17196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.463286][T17196] RIP: 0033:0x7f1c0278ebe9 [ 431.463314][T17196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.463334][T17196] RSP: 002b:00007f1c036b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 431.463367][T17196] RAX: ffffffffffffffda RBX: 00007f1c029b5fa0 RCX: 00007f1c0278ebe9 [ 431.463385][T17196] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 431.463398][T17196] RBP: 00007f1c02811e19 R08: 0000000000000004 R09: 0000000000000000 [ 431.463412][T17196] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.463426][T17196] R13: 00007f1c029b6038 R14: 00007f1c029b5fa0 R15: 00007fff07d6ddf8 [ 431.463461][T17196] [ 431.529747][ T9384] bond2: (slave macvlan4): failed to get link speed/duplex [ 431.589024][T17196] Mem-Info: [ 431.779723][T17196] active_anon:4686 inactive_anon:0 isolated_anon:0 [ 431.779723][T17196] active_file:1270 inactive_file:39930 isolated_file:0 [ 431.779723][T17196] unevictable:768 dirty:95 writeback:0 [ 431.779723][T17196] slab_reclaimable:12290 slab_unreclaimable:116428 [ 431.779723][T17196] mapped:29072 shmem:1423 pagetables:1017 [ 431.779723][T17196] sec_pagetables:0 bounce:0 [ 431.779723][T17196] kernel_misc_reclaimable:0 [ 431.779723][T17196] free:1312989 free_pcp:13052 free_cma:0 [ 431.834442][T17196] Node 0 active_anon:18744kB inactive_anon:0kB active_file:5080kB inactive_file:159520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116288kB dirty:380kB writeback:0kB shmem:4156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13640kB pagetables:3884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 431.846567][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 431.876334][T17196] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 431.909586][T17196] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 431.959485][T17196] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 431.970763][T17196] Node 0 DMA32 free:1334828kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18596kB inactive_anon:0kB active_file:5080kB inactive_file:157680kB unevictable:1536kB writepending:376kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:34688kB local_pcp:13520kB free_cma:0kB [ 432.006106][T17196] lowmem_reserve[]: 0 0 1 1 1 [ 432.008449][ T9384] bond2: (slave macvlan4): failed to get link speed/duplex [ 432.031066][T17196] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 432.115007][ T5854] Bluetooth: hci4: command tx timeout [ 432.143231][T17196] lowmem_reserve[]: 0 0 0 0 0 [ 432.163738][T17196] Node 1 Normal free:3901764kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17956kB local_pcp:8384kB free_cma:0kB [ 432.211437][T17196] lowmem_reserve[]: 0 0 0 0 0 [ 432.218720][T17196] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 432.294413][T17196] Node 0 DMA32: 1167*4kB (UM) 660*8kB (UM) 247*16kB (UME) 262*32kB (UME) 40*64kB (UM) 15*128kB (UM) 60*256kB (UM) 45*512kB (UM) 33*1024kB (UME) 12*2048kB (UM) 296*4096kB (UM) = 1335948kB [ 432.323306][T16946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 432.351401][T17196] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 432.370228][T16946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 432.388686][T17196] Node 1 Normal: 177*4kB (UE) 46*8kB (UME) 35*16kB (UME) 119*32kB (UME) 34*64kB (UME) 9*128kB (UME) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3901764kB [ 432.395308][T17211] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20001 [ 432.418777][T16946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 432.438198][T17196] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 432.463629][T16946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 432.496197][T17196] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 432.510645][T17217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2957'. [ 432.525744][T17196] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 432.536605][T17196] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 432.553108][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2957'. [ 432.573075][T17217] netlink: 'syz.1.2957': attribute type 3 has an invalid length. [ 432.583725][T17196] 42596 total pagecache pages [ 432.588460][T17196] 0 pages in swap cache [ 432.592639][T17196] Free swap = 124996kB [ 432.622562][T17196] Total swap = 124996kB [ 432.646052][T17196] 2097051 pages RAM [ 432.663007][T17196] 0 pages HighMem/MovableOnly [ 432.688046][T17196] 424872 pages reserved [ 432.692303][T17196] 0 pages cma reserved [ 432.875624][T16946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.895345][T17237] netlink: 'syz.0.2961': attribute type 1 has an invalid length. [ 432.943263][T16946] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.035974][T17237] 8021q: adding VLAN 0 to HW filter on device bond5 [ 433.096292][T17245] veth11: entered promiscuous mode [ 433.112203][T17245] bond5: (slave veth11): Enslaving as an active interface with a down link [ 433.164490][ T8610] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.171714][ T8610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.235778][ T8610] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.242956][ T8610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.331195][T16946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.621142][T17261] tipc: Started in network mode [ 433.653632][T17261] tipc: Node identity e6e39496274, cluster identity 4711 [ 433.675520][T17261] tipc: Enabled bearer , priority 0 [ 433.735263][T17264] syzkaller0: entered promiscuous mode [ 433.765214][T17264] syzkaller0: entered allmulticast mode [ 433.833017][T17268] block nbd0: Unsupported socket: shutdown callout must be supported. [ 433.875856][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2971'. [ 433.894968][T17264] tipc: Resetting bearer [ 433.911199][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2971'. [ 434.017028][T17260] tipc: Resetting bearer [ 434.062239][T17260] tipc: Disabling bearer [ 434.188738][ T5854] Bluetooth: hci4: command tx timeout [ 434.204848][T16946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.240234][T17281] netlink: 'syz.1.2976': attribute type 1 has an invalid length. [ 434.256132][ T8610] net_ratelimit: 9 callbacks suppressed [ 434.256151][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 434.406647][T17281] 8021q: adding VLAN 0 to HW filter on device bond5 [ 434.428650][T17279] tipc: Enabled bearer , priority 0 [ 434.438201][T17291] syzkaller0: entered promiscuous mode [ 434.445033][T17291] syzkaller0: entered allmulticast mode [ 434.539230][T17285] 8021q: adding VLAN 0 to HW filter on device bond5 [ 434.578989][T17285] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 434.621422][T17285] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 434.646751][T17293] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2976'. [ 434.658345][T17293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2976'. [ 434.669315][T17293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2976'. [ 434.770280][T17295] tipc: Resetting bearer [ 434.792709][T17278] tipc: Resetting bearer [ 434.839496][T17278] tipc: Disabling bearer [ 434.874855][ T8591] bond2: (slave macvlan4): failed to get link speed/duplex [ 434.942408][T16946] veth0_vlan: entered promiscuous mode [ 434.969766][T16946] veth1_vlan: entered promiscuous mode [ 435.007808][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 435.134645][ T8608] bond2: (slave macvlan4): failed to get link speed/duplex [ 435.161890][T16946] veth0_macvtap: entered promiscuous mode [ 435.208156][T16946] veth1_macvtap: entered promiscuous mode [ 435.269490][T17327] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2989'. [ 435.327269][T17335] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2989'. [ 435.330159][T17327] gretap0: entered promiscuous mode [ 435.379282][T17334] veth0: entered promiscuous mode [ 435.387193][ T8610] bond2: (slave macvlan4): failed to get link speed/duplex [ 435.410127][T17335] 0ªî{X¹¦: renamed from gretap0 [ 435.422551][T17335] 0ªî{X¹¦: left promiscuous mode [ 435.428736][T17335] 0ªî{X¹¦: entered allmulticast mode [ 435.441826][T17335] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 435.458576][T17341] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2991'. [ 435.484591][T16946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.511449][T16946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.542315][T17333] veth0: left promiscuous mode [ 435.569942][ T8610] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.606701][ T8610] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.720361][ T8610] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.795436][T17349] bridge2: port 1(vlan1) entered disabled state [ 435.886020][T17349] vlan1 (unregistering): left promiscuous mode [ 435.892346][T17349] bridge0 (unregistering): left promiscuous mode [ 435.900408][T17349] bridge2: port 1(vlan1) entered disabled state [ 435.981904][ T8610] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.005127][T17363] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 436.176758][ T9384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.194183][ T9384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.264681][ T9384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.273845][ T8608] bond2: (slave macvlan4): failed to get link speed/duplex [ 436.282796][ T9384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.381320][T17375] netlink: 'syz.5.3002': attribute type 10 has an invalid length. [ 436.394930][T17376] netlink: 'syz.1.3004': attribute type 64 has an invalid length. [ 436.407195][T17375] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.416064][T17375] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.442412][T17375] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.449679][T17375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.457285][T17375] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.464563][T17375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.482187][T17375] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 436.537442][ T1098] bond2: (slave macvlan4): failed to get link speed/duplex [ 436.654084][ T8608] bond2: (slave macvlan4): failed to get link speed/duplex [ 436.795004][ T8608] bond2: (slave macvlan4): failed to get link speed/duplex [ 436.810967][T17392] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 437.425227][T17409] netlink: 'syz.3.3016': attribute type 7 has an invalid length. [ 437.630666][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 437.641352][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 437.655635][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 437.667151][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 437.676957][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 437.755115][T10220] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.769986][T10220] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.868836][T10220] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.880998][T10220] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.988569][T10220] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.000865][T10220] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.122466][T10220] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.134524][T10220] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.371850][T17417] chnl_net:caif_netlink_parms(): no params data found [ 438.562366][T10220] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 438.950806][T17470] netlink: 'syz.2.3029': attribute type 1 has an invalid length. [ 438.959762][T17470] __nla_validate_parse: 12 callbacks suppressed [ 438.959784][T17470] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3029'. [ 439.280141][T10220] bond2 (unregistering): (slave macvlan4): Removing an active aggregator [ 439.291007][T10220] bond2 (unregistering): (slave macvlan4): Releasing backup interface [ 439.309007][T10220] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 439.324890][T10220] bond0 (unregistering): Released all slaves [ 439.342657][T10220] bond1 (unregistering): Released all slaves [ 439.453896][T10220] bond2 (unregistering): Released all slaves [ 439.559468][T10220] bond3 (unregistering): (slave veth7): Releasing active interface [ 439.569624][T10220] bond3 (unregistering): Released all slaves [ 439.586282][T10220] bond4 (unregistering): Released all slaves [ 439.698718][T10220] bond5 (unregistering): (slave veth11): Releasing active interface [ 439.710391][T10220] bond5 (unregistering): Released all slaves [ 439.717279][ T5854] Bluetooth: hci3: command tx timeout [ 439.732992][T10220] bond6 (unregistering): Released all slaves [ 439.760414][T17461] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3027'. [ 439.962236][T10220] tipc: Disabling bearer [ 439.970125][T10220] tipc: Left network mode [ 440.161459][T17490] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3034'. [ 440.322475][T17491] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3033'. [ 440.337726][T17496] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3035'. [ 440.367625][T17417] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.380904][T17500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3036'. [ 440.391159][T17417] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.425735][T17417] bridge_slave_0: entered allmulticast mode [ 440.451263][T17417] bridge_slave_0: entered promiscuous mode [ 440.473179][T17417] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.496368][T17417] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.505294][T17417] bridge_slave_1: entered allmulticast mode [ 440.516742][T17417] bridge_slave_1: entered promiscuous mode [ 440.636298][T17501] netlink: 'syz.5.3035': attribute type 4 has an invalid length. [ 440.657462][T17501] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3035'. [ 440.711660][T17507] 0ªî{X¹¦: left allmulticast mode [ 440.765260][T17507] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.772677][T17507] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.876967][T17507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.891979][T17507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.108758][T17417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.140132][T17515] vlan1: entered allmulticast mode [ 441.151450][T17515] bond0: entered allmulticast mode [ 441.182413][ T8610] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.224289][T17417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.255033][ T8610] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.277253][ T8610] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.296454][ T9384] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.468892][T17417] team0: Port device team_slave_0 added [ 441.478798][T17417] team0: Port device team_slave_1 added [ 441.559670][T17417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.570242][T17417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.597516][T17417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.610043][T17537] sch_fq: defrate 0 ignored. [ 441.663345][T10220] hsr_slave_0: left promiscuous mode [ 441.699480][T10220] hsr_slave_1: left promiscuous mode [ 441.727767][T17542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3046'. [ 441.738582][T17542] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3046'. [ 441.796098][T10220] veth1_macvtap: left promiscuous mode [ 441.799382][ T5854] Bluetooth: hci3: command tx timeout [ 441.801885][T10220] veth0_macvtap: left promiscuous mode [ 441.813303][T10220] veth1_vlan: left promiscuous mode [ 442.153764][T10220] pimreg3 (unregistering): left allmulticast mode [ 442.890125][T17417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.897490][T17417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.924582][T17417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.260827][T17417] hsr_slave_0: entered promiscuous mode [ 443.268851][T17417] hsr_slave_1: entered promiscuous mode [ 443.277271][T17417] debugfs: 'hsr0' already exists in 'hsr' [ 443.283214][T17417] Cannot create hsr debugfs directory [ 443.431530][T17577] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3056'. [ 443.466692][T17577] netlink: 'syz.2.3056': attribute type 1 has an invalid length. [ 443.552417][T17591] netlink: 'syz.3.3060': attribute type 27 has an invalid length. [ 443.552633][T17577] bond10: entered promiscuous mode [ 443.572936][T17577] 8021q: adding VLAN 0 to HW filter on device bond10 [ 443.657736][T17587] 8021q: adding VLAN 0 to HW filter on device bond11 [ 443.667979][T17587] bond10: (slave bond11): making interface the new active one [ 443.675827][T17587] bond11: entered promiscuous mode [ 443.682444][T17587] bond10: (slave bond11): Enslaving as an active interface with an up link [ 443.865108][ T5854] Bluetooth: hci3: command tx timeout [ 444.300494][T17623] nbd: couldn't find a device at index -373156329 [ 444.603670][T17633] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3070'. [ 444.681495][T17637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3071'. [ 445.005414][T17417] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 445.046814][T17417] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 445.100759][T17417] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 445.226425][T17417] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 445.587000][T17417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.611573][T17417] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.636764][ T8597] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.644064][ T8597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.704836][ T8608] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.712095][ T8608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.726561][T17679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3082'. [ 445.944754][ T5854] Bluetooth: hci3: command tx timeout [ 446.037636][ T8610] tipc: Subscription rejected, illegal request [ 446.347542][T10220] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 446.374272][T17694] "syz.3.3086" (17694) uses obsolete ecb(arc4) skcipher [ 446.395807][T10220] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 446.428468][T10220] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 446.560427][T17694] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.593210][T10220] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 446.605772][T17706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3088'. [ 446.784491][T17694] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.935141][T17719] netlink: 163948 bytes leftover after parsing attributes in process `syz.2.3092'. [ 446.979482][T17694] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.025562][T17724] netlink: 'syz.5.3094': attribute type 1 has an invalid length. [ 447.058610][T17417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.109961][T17728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3094'. [ 447.121041][T17728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3094'. [ 447.146352][T17694] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.175869][T17731] atomic_op ffff88814c3da198 conn xmit_atomic 0000000000000000 [ 447.186943][T17731] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3096'. [ 447.332293][T17417] veth0_vlan: entered promiscuous mode [ 447.412109][T17736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3099'. [ 447.434057][T17736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3099'. [ 447.452631][ T8597] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.461830][ T8597] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.490735][T17417] veth1_vlan: entered promiscuous mode [ 447.498972][ T8597] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.573124][T10220] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.717637][T17417] veth0_macvtap: entered promiscuous mode [ 447.746435][T17417] veth1_macvtap: entered promiscuous mode [ 447.818435][T17417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.847932][T17417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.901515][ T1098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.922575][ T1098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.942791][ T1098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.974700][ T1098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.083298][T17758] netlink: 'syz.2.3106': attribute type 1 has an invalid length. [ 448.109114][T17758] netlink: 'syz.2.3106': attribute type 11 has an invalid length. [ 448.213987][T10220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.238731][T10220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.334527][ T8583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.363207][ T8583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.551692][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 449.572123][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 449.595831][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 449.615126][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 449.637776][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 449.703237][T17803] __nla_validate_parse: 4 callbacks suppressed [ 449.703258][T17803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3120'. [ 449.736397][ T8608] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.809163][ T8608] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.880154][ T8608] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.890785][T17807] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3121'. [ 449.995572][ T8608] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.149169][T17814] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3123'. [ 450.510640][T17829] netlink: 'syz.3.3127': attribute type 3 has an invalid length. [ 451.171271][ T8608] bond1 (unregistering): Released all slaves [ 451.279153][ T8608] bond2 (unregistering): Released all slaves [ 451.387066][ T8608] bond3 (unregistering): Released all slaves [ 451.490289][ T8608] bond4 (unregistering): Released all slaves [ 451.587152][ T8608] bond0 (unregistering): Released all slaves [ 451.689798][ T8608] bond5 (unregistering): Released all slaves [ 451.703673][ T5847] Bluetooth: hci5: command tx timeout [ 451.730021][T17833] tipc: Enabling of bearer rejected, failed to enable media [ 451.744193][T17798] chnl_net:caif_netlink_parms(): no params data found [ 452.285638][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3135'. [ 452.306223][T17863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3135'. [ 452.497781][T17798] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.519986][T17798] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.528029][T17798] bridge_slave_0: entered allmulticast mode [ 452.543955][T17798] bridge_slave_0: entered promiscuous mode [ 452.645614][T17798] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.679248][T17798] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.699564][T17798] bridge_slave_1: entered allmulticast mode [ 452.719777][T17798] bridge_slave_1: entered promiscuous mode [ 452.779727][T17887] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3140'. [ 452.889667][T17798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.913043][T17890] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3142'. [ 452.926975][T17798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.160463][T17798] team0: Port device team_slave_0 added [ 453.338389][ T8608] pimreg (unregistering): left allmulticast mode [ 453.484834][T17928] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3146'. [ 453.789647][ T5847] Bluetooth: hci5: command tx timeout [ 453.918852][T17798] team0: Port device team_slave_1 added [ 454.148563][T17798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.164906][T17798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.198524][T17798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.241891][T17798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.280953][T17942] net_ratelimit: 10 callbacks suppressed [ 454.280974][T17942] openvswitch: netlink: Message has 62 unknown bytes. [ 454.303497][T17798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.358329][T17798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.549705][T17798] hsr_slave_0: entered promiscuous mode [ 454.560890][T17798] hsr_slave_1: entered promiscuous mode [ 454.598091][T17954] netlink: 'syz.3.3157': attribute type 11 has an invalid length. [ 454.606230][T17954] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3157'. [ 454.829764][T17960] netlink: 'syz.2.3159': attribute type 3 has an invalid length. [ 455.135023][T17970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3162'. [ 455.412487][T17798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 455.422932][T17798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 455.435354][T17798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 455.445590][T17798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 455.527453][T17798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.551386][T17798] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.572156][ T8583] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.579400][ T8583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.601900][T10220] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.609102][T10220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.863734][ T5847] Bluetooth: hci5: command tx timeout [ 455.960304][T17798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.017814][T17798] veth0_vlan: entered promiscuous mode [ 456.030711][T17798] veth1_vlan: entered promiscuous mode [ 456.063786][T17798] veth0_macvtap: entered promiscuous mode [ 456.073249][T17798] veth1_macvtap: entered promiscuous mode [ 456.094687][T17798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.110299][T17798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.124835][T10220] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.135913][T10220] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.150846][T10220] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.159818][T10220] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.237005][T10220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.250927][T10220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.288340][T10220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.296746][T10220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.841333][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3165'. [ 456.939231][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3167'. [ 456.989610][T17997] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 457.043656][T17997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.172178][T18011] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3171'. [ 457.333945][T18019] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 457.344446][T18019] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 457.358313][T18017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3174'. [ 457.412951][T18017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3174'. [ 457.555602][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 457.572271][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 457.581007][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 457.590350][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 457.599133][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 457.730086][T18031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3177'. [ 457.739263][T18031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3177'. [ 457.749797][T18031] netlink: 'syz.5.3177': attribute type 21 has an invalid length. [ 457.772913][T18031] netlink: 'syz.5.3177': attribute type 1 has an invalid length. [ 457.943664][ T5847] Bluetooth: hci5: command tx timeout [ 458.180246][T18023] chnl_net:caif_netlink_parms(): no params data found [ 458.216863][T18049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3183'. [ 458.295549][T18051] geneve2: entered promiscuous mode [ 458.301328][T18051] geneve2: entered allmulticast mode [ 458.328850][T18053] netlink: 208 bytes leftover after parsing attributes in process `syz.5.3184'. [ 458.413141][T18055] netlink: 'syz.0.3185': attribute type 2 has an invalid length. [ 458.446670][T18055] netlink: 'syz.0.3185': attribute type 1 has an invalid length. [ 458.562062][T18063] bridge2: entered promiscuous mode [ 458.567672][T18063] bridge2: entered allmulticast mode [ 458.578696][T18023] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.591064][T18023] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.608948][T18023] bridge_slave_0: entered allmulticast mode [ 458.625667][T18023] bridge_slave_0: entered promiscuous mode [ 458.644855][T18023] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.664832][T18023] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.679990][T18023] bridge_slave_1: entered allmulticast mode [ 458.710572][T18023] bridge_slave_1: entered promiscuous mode [ 458.776811][T18023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.811950][T18023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.911011][T18023] team0: Port device team_slave_0 added [ 458.929172][T18023] team0: Port device team_slave_1 added [ 459.014194][T18023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.021309][T18023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.071553][T18023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.101124][T18023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.108785][T18023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.137011][T18023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.453744][T18102] netlink: 'syz.5.3198': attribute type 83 has an invalid length. [ 459.717578][ T5847] Bluetooth: hci2: command tx timeout [ 460.911600][T18023] hsr_slave_0: entered promiscuous mode [ 460.919119][T18023] hsr_slave_1: entered promiscuous mode [ 460.927194][T18023] debugfs: 'hsr0' already exists in 'hsr' [ 460.933057][T18023] Cannot create hsr debugfs directory [ 461.042515][T18114] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 461.052308][T18116] netlink: set zone limit has 8 unknown bytes [ 461.206441][T18123] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 461.216879][T16491] IPVS: starting estimator thread 0... [ 461.243188][T18121] dvmrp1: entered allmulticast mode [ 461.281121][T18121] __nla_validate_parse: 6 callbacks suppressed [ 461.281143][T18121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3205'. [ 461.301805][T18127] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3207'. [ 461.323633][T18124] IPVS: using max 29 ests per chain, 69600 per kthread [ 461.465286][T18133] netlink: 'syz.0.3209': attribute type 9 has an invalid length. [ 461.473167][T18133] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.3209'. [ 461.579022][T18023] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.600737][T18023] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.793506][ T5847] Bluetooth: hci2: command tx timeout [ 461.886410][T18023] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.896534][T18023] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.006275][T18023] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.029548][T18150] netlink: 'syz.1.3215': attribute type 1 has an invalid length. [ 462.039920][T18150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3215'. [ 462.043778][T18023] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.193419][T18023] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.203414][T18023] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.252833][T18158] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3217'. [ 462.447459][T18164] tipc: Started in network mode [ 462.452660][T18164] tipc: Node identity b2373de85df3, cluster identity 4711 [ 462.460510][T18164] tipc: Enabled bearer , priority 0 [ 462.468848][T18164] syzkaller0: entered promiscuous mode [ 462.475883][T18164] syzkaller0: entered allmulticast mode [ 462.534538][T18164] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 462.602793][T18164] tipc: Resetting bearer [ 462.623055][T18163] tipc: Resetting bearer [ 462.661878][T18163] tipc: Disabling bearer [ 462.826626][T18023] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 462.854584][T18023] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 462.879749][T18023] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 462.922880][T18023] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 463.018865][T18184] : renamed from hsr0 [ 463.191349][T18023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.257686][T18023] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.307434][ T8583] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.314764][ T8583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.350310][T18202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3230'. [ 463.355577][ T8610] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.367054][ T8610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.727567][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3237'. [ 463.867226][ T5847] Bluetooth: hci2: command tx timeout [ 463.983054][T18235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3240'. [ 464.021100][T18235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3240'. [ 464.066606][T18235] chnl_net:caif_netlink_parms(): no params data found [ 464.307523][T18249] netlink: 'syz.5.3242': attribute type 6 has an invalid length. [ 464.370365][T18023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.494965][T18023] veth0_vlan: entered promiscuous mode [ 464.540058][T18023] veth1_vlan: entered promiscuous mode [ 464.614691][T18023] veth0_macvtap: entered promiscuous mode [ 464.628901][T18023] veth1_macvtap: entered promiscuous mode [ 464.657403][T18023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.670386][T18023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.719369][ T8608] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.747038][ T8608] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.761938][ T8608] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.833658][ T8608] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.879354][T18265] netlink: 'syz.5.3248': attribute type 3 has an invalid length. [ 464.902219][T18268] netlink: 'syz.1.3249': attribute type 10 has an invalid length. [ 464.943009][T18268] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.953966][T18268] bridge_slave_1: left allmulticast mode [ 464.966097][T18269] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 464.980048][T18269] netlink: 'syz.1.3249': attribute type 10 has an invalid length. [ 465.000311][T18268] bridge_slave_1: left promiscuous mode [ 465.019055][T18268] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.051060][T18268] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 465.130872][ T8610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.151619][ T8610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.237541][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e3cf800: rx timeout, send abort [ 465.246335][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804e3cf800: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 465.326599][T18283] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3251'. [ 465.421639][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.453788][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.456637][T18290] netlink: 'syz.0.3253': attribute type 13 has an invalid length. [ 465.528260][T18292] netlink: 'syz.0.3253': attribute type 13 has an invalid length. [ 465.541651][T18290] veth0_macvtap: left promiscuous mode [ 465.561114][T18290] macvtap0: entered allmulticast mode [ 465.589216][T18290] macvtap0: refused to change device tx_queue_len [ 465.620354][T18292] macvtap0: refused to change device tx_queue_len [ 465.650506][T18296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.943920][ T5847] Bluetooth: hci2: command tx timeout [ 465.973367][T18314] openvswitch: netlink: IPv4 tun info is not correct [ 466.647021][T18319] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 466.775447][T18324] netlink: 'syz.0.3266': attribute type 22 has an invalid length. [ 466.806273][T18324] __nla_validate_parse: 3 callbacks suppressed [ 466.806296][T18324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3266'. [ 466.906852][T18324] netlink: 'syz.0.3266': attribute type 22 has an invalid length. [ 466.933655][ T8610] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.942631][T18324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3266'. [ 466.949029][ T8610] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.051041][ T8597] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.093134][ T8597] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.114974][T18346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3272'. [ 467.212667][T18350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3274'. [ 467.371412][T18359] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 467.806522][T18384] IPVS: set_ctl: invalid protocol: 47 172.30.0.1:20000 [ 467.822561][T18383] tipc: Started in network mode [ 467.839528][T18383] tipc: Node identity 1ee495cd13c7, cluster identity 4711 [ 467.881780][T18383] tipc: Enabled bearer , priority 0 [ 467.899308][T18393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3284'. [ 467.919766][T18391] syzkaller0: entered promiscuous mode [ 467.926008][T18391] syzkaller0: entered allmulticast mode [ 468.036384][T18393] netlink: 'syz.3.3284': attribute type 2 has an invalid length. [ 468.063785][T18383] tipc: Enabling of bearer rejected, already enabled [ 468.116886][T18381] tipc: Resetting bearer [ 468.170421][T18381] tipc: Disabling bearer [ 468.229983][T18404] bond1: entered promiscuous mode [ 468.235133][T18404] bond1: entered allmulticast mode [ 468.240691][T18404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 468.409695][T18417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3292'. [ 468.601507][T18423] veth0: entered promiscuous mode [ 468.639320][T18423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.647476][T18423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.667560][T18423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.696690][T18423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.881632][T18422] veth0: left promiscuous mode [ 469.042509][T18445] team0: Device gtp0 is of different type [ 469.159420][T18446] syz.3.3300 (18446) used greatest stack depth: 17864 bytes left [ 469.261076][T18457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3305'. [ 469.310257][T18459] delete_channel: no stack [ 469.413361][ T8591] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 469.461709][T18470] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.469332][T18470] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.548597][T18470] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 470.145504][T18461] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.195118][T18483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3313'. [ 470.433627][T18496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3319'. [ 470.462190][T18493] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 470.554714][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3320'. [ 470.962432][T18528] netlink: 'syz.0.3330': attribute type 1 has an invalid length. [ 471.040641][T18528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 471.070542][T18534] vlan2: entered promiscuous mode [ 471.081614][T18534] bond2: entered promiscuous mode [ 471.088665][T18534] vlan2: entered allmulticast mode [ 471.096353][T18534] bond2: entered allmulticast mode [ 471.137822][T18528] bond2: (slave gretap1): making interface the new active one [ 471.149095][T18528] gretap1: entered promiscuous mode [ 471.155151][T18528] gretap1: entered allmulticast mode [ 471.163205][T18528] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 471.375201][T18556] netlink: 'syz.3.3335': attribute type 1 has an invalid length. [ 471.391623][T18556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.669758][T18566] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 471.680312][T18566] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 472.246904][T18585] __nla_validate_parse: 4 callbacks suppressed [ 472.246926][T18585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3346'. [ 472.487776][T18594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3348'. [ 472.508795][T18603] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2 [ 472.537345][T18603] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€ [ 472.891479][T18619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3354'. [ 473.182899][T18627] netlink: 'syz.2.3357': attribute type 2 has an invalid length. [ 473.345224][T18634] netlink: 'syz.3.3360': attribute type 1 has an invalid length. [ 473.383612][T18634] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3360'. [ 473.392710][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3360'. [ 473.469916][T18637] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3361'. [ 473.509053][T18637] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3361'. [ 473.536620][T18637] netlink: 'syz.1.3361': attribute type 6 has an invalid length. [ 473.569633][T18645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3361'. [ 473.583639][T18637] netlink: 'syz.1.3361': attribute type 5 has an invalid length. [ 473.632391][T18637] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3361'. [ 473.850224][T18658] veth0: entered promiscuous mode [ 473.862209][T18657] veth0: left promiscuous mode [ 473.967885][T18665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3371'. [ 473.979535][T18665] netlink: 'syz.3.3371': attribute type 2 has an invalid length. [ 473.989119][T18665] netlink: 'syz.3.3371': attribute type 1 has an invalid length. [ 474.763080][T18712] tipc: Started in network mode [ 474.770797][T18712] tipc: Node identity ac14140f, cluster identity 4711 [ 474.784030][T18712] tipc: New replicast peer: 255.255.255.255 [ 474.790650][T18712] tipc: Enabled bearer , priority 10 [ 475.176502][T18742] openvswitch: netlink: Message has 4 unknown bytes. [ 475.318489][T18748] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 475.525812][T18754] bond1: entered promiscuous mode [ 475.551664][T18754] bond1: entered allmulticast mode [ 475.576707][T18754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 475.738186][T18766] syzkaller1: entered promiscuous mode [ 475.753153][T18766] syzkaller1: entered allmulticast mode [ 475.811867][T18770] : entered promiscuous mode [ 475.825316][T18740] infiniband syz!: set active [ 475.830332][T18740] infiniband syz!: added team_slave_0 [ 475.913536][ T5897] tipc: Node number set to 2886997007 [ 475.940566][T18740] RDS/IB: syz!: added [ 475.946433][T18740] smc: adding ib device syz! with port count 1 [ 475.952962][T18740] smc: ib device syz! port 1 has pnetid [ 476.334648][T18791] netlink: 'syz.2.3411': attribute type 83 has an invalid length. [ 476.597414][T18797] 8021q: adding VLAN 0 to HW filter on device bond2 [ 476.620261][T18804] veth3: entered allmulticast mode [ 476.680989][T18799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.763134][T18797] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 477.640689][T18832] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 477.648242][T18837] netlink: 'syz.5.3427': attribute type 5 has an invalid length. [ 477.649766][ T5897] IPVS: starting estimator thread 0... [ 477.698955][T18836] __nla_validate_parse: 18 callbacks suppressed [ 477.698978][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3426'. [ 477.770483][T18836] netlink: 'syz.1.3426': attribute type 1 has an invalid length. [ 477.771193][T18839] IPVS: using max 24 ests per chain, 57600 per kthread [ 478.678612][T18867] unknown channel width for channel at 909000KHz? [ 478.686574][T18867] unknown channel width for channel at 909000KHz? [ 478.693024][T18867] unknown channel width for channel at 909000KHz? [ 478.786221][T18875] tipc: Can't bind to reserved service type 0 [ 478.951184][T18880] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3438'. [ 478.976177][T18885] netlink: 'syz.2.3439': attribute type 27 has an invalid length. [ 478.987311][T18883] netlink: 'syz.2.3439': attribute type 27 has an invalid length. [ 479.250496][T18893] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3443'. [ 479.273257][T18893] 8021q: VLANs not supported on ip6_vti0 [ 479.738998][T18913] netlink: 'syz.1.3449': attribute type 142 has an invalid length. [ 479.767601][T18913] netlink: 'syz.1.3449': attribute type 142 has an invalid length. [ 479.781700][T18913] netlink: 'syz.1.3449': attribute type 142 has an invalid length. [ 479.792695][T18913] netlink: 'syz.1.3449': attribute type 142 has an invalid length. [ 479.804085][T18913] netlink: 'syz.1.3449': attribute type 142 has an invalid length. [ 479.812449][T18913] netlink: 'syz.1.3449': attribute type 142 has an invalid length. [ 479.832300][T18913] netlink: 'syz.1.3449': attribute type 142 has an invalid length. [ 479.841549][T18913] netlink: 'syz.1.3449': attribute type 142 has an invalid length. [ 480.437495][T18941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3457'. [ 480.569940][T18946] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3460'. [ 480.581625][T18946] Bluetooth: MGMT ver 1.23 [ 480.849310][T18957] syzkaller1: entered promiscuous mode [ 480.866556][T18957] syzkaller1: entered allmulticast mode [ 481.212784][T18973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3468'. [ 481.222976][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3468'. [ 481.315178][ T8602] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.339233][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3468'. [ 481.361524][T18973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3468'. [ 481.386315][T18976] vlan3: entered allmulticast mode [ 481.401756][T18976] bond0: entered allmulticast mode [ 481.422752][T18976] bond_slave_0: entered allmulticast mode [ 481.437983][T18976] bond_slave_1: entered allmulticast mode [ 481.455555][ T8602] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.483940][T10220] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.502955][T10220] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.126046][T19000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3478'. [ 483.371680][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3490'. [ 483.757211][T19063] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3493'. [ 484.046702][T19075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.126464][T19075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.210145][T19075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.276046][T19083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3500'. [ 484.293070][T19083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3500'. [ 484.406360][T19094] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3502'. [ 484.417063][T19094] Bluetooth: MGMT ver 1.23 [ 484.739785][T19112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3506'. [ 484.769485][T19112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3506'. [ 485.127796][T19130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3511'. [ 485.132963][T19133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.290631][T19143] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 485.501312][T19161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3519'. [ 485.585764][T19163] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3520'. [ 485.620424][T19163] veth3: entered promiscuous mode [ 486.250397][T19205] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 486.278483][T19205] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 486.576756][T19231] validate_nla: 64 callbacks suppressed [ 486.576776][T19231] netlink: 'syz.3.3539': attribute type 16 has an invalid length. [ 486.591413][T19231] netlink: 'syz.3.3539': attribute type 17 has an invalid length. [ 486.692277][T19231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 486.858261][T19245] syzkaller1: entered promiscuous mode [ 486.868521][T19245] syzkaller1: entered allmulticast mode [ 487.119317][T19258] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 487.127911][ T5897] IPVS: starting estimator thread 0... [ 487.241065][T19263] netlink: 'syz.2.3551': attribute type 10 has an invalid length. [ 487.251325][T19263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.255478][T19261] IPVS: using max 26 ests per chain, 62400 per kthread [ 487.269525][T19263] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 487.297420][T19268] netlink: 'syz.5.3552': attribute type 39 has an invalid length. [ 488.581688][T19318] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 488.747554][T19322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 488.848289][T19327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.854053][T19325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.867080][T19327] __nla_validate_parse: 15 callbacks suppressed [ 488.867099][T19327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'. [ 488.883998][T19328] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 488.909484][T19327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'. [ 489.077536][T19335] netlink: 'syz.1.3573': attribute type 4 has an invalid length. [ 489.104391][T19334] netlink: 'syz.1.3573': attribute type 4 has an invalid length. [ 489.750399][T19353] netlink: 'syz.5.3578': attribute type 1 has an invalid length. [ 489.765099][T19353] veth0: entered promiscuous mode [ 489.772536][T19352] veth0: left promiscuous mode [ 490.004797][T19360] netlink: 'syz.3.3581': attribute type 1 has an invalid length. [ 490.044540][T19360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.052602][T19362] netlink: 'syz.1.3582': attribute type 10 has an invalid length. [ 490.071823][T19362] batman_adv: batadv0: Adding interface: team0 [ 490.078362][T19362] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.106745][T19362] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 490.192852][T19371] netlink: 'syz.1.3584': attribute type 4 has an invalid length. [ 490.408876][T19383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3590'. [ 490.462170][T19383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3590'. [ 490.489856][T19385] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3589'. [ 490.530369][T19393] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3589'. [ 491.388018][T19448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3606'. [ 491.433264][T19454] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3608'. [ 491.459701][T19455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3607'. [ 491.504962][T19455] syzkaller1: entered allmulticast mode [ 491.513711][T19455] syzkaller1: left allmulticast mode [ 491.709921][T19463] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.3611'. [ 491.726201][T19463] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 492.124088][T19489] hsr0 speed is unknown, defaulting to 1000 [ 492.138513][T19489] hsr0 speed is unknown, defaulting to 1000 [ 492.164021][T19489] hsr0 speed is unknown, defaulting to 1000 [ 492.195229][T19493] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 492.224826][T19489] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 492.242592][T19493] validate_nla: 4 callbacks suppressed [ 492.242611][T19493] netlink: 'syz.2.3620': attribute type 1 has an invalid length. [ 492.271627][T19495] netlink: 'syz.3.3621': attribute type 9 has an invalid length. [ 492.301749][T19489] hsr0 speed is unknown, defaulting to 1000 [ 492.310934][T19489] hsr0 speed is unknown, defaulting to 1000 [ 492.329157][T19489] hsr0 speed is unknown, defaulting to 1000 [ 492.345720][T19489] hsr0 speed is unknown, defaulting to 1000 [ 492.365158][T19489] hsr0 speed is unknown, defaulting to 1000 [ 492.381961][T19489] hsr0 speed is unknown, defaulting to 1000 [ 492.395615][T19489] hsr0 speed is unknown, defaulting to 1000 [ 492.541703][T19508] tipc: Enabled bearer , priority 0 [ 492.698529][T19508] syzkaller0: entered promiscuous mode [ 492.704263][T19508] syzkaller0: entered allmulticast mode [ 492.714162][T19508] tipc: Resetting bearer [ 492.752358][T19503] tipc: Resetting bearer [ 493.596166][ T5950] tipc: Node number set to 3248723094 [ 494.308426][T19503] tipc: Disabling bearer [ 494.318983][T19520] netlink: 'syz.1.3628': attribute type 4 has an invalid length. [ 494.328232][T19520] __nla_validate_parse: 8 callbacks suppressed [ 494.328253][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3628'. [ 494.484281][T19523] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.492121][T19523] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.501402][T19542] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3633'. [ 494.605377][T19523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.619808][T19523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.854092][T19523] mac80211_hwsim hwsim33 wlan1: left allmulticast mode [ 494.866984][T19523] bridge2: left promiscuous mode [ 494.871966][T19523] bridge2: left allmulticast mode [ 494.962862][T10220] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.004770][T10220] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.038211][T10220] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.108673][T10220] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.144172][T19561] lo: entered allmulticast mode [ 495.230679][T19568] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 495.252734][T19570] netlink: 'syz.1.3641': attribute type 10 has an invalid length. [ 495.270177][T19570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3641'. [ 495.353317][T19570] team0: Port device geneve0 added [ 495.477444][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3645'. [ 495.487073][T19587] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 495.502675][T19587] openvswitch: netlink: Flow key attribute not present in set flow. [ 495.512374][T19587] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3647'. [ 495.522637][T19589] netlink: 'syz.5.3646': attribute type 1 has an invalid length. [ 495.537072][T19589] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3646'. [ 495.570295][T19590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3646'. [ 495.601841][T19590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3646'. [ 495.861139][T19613] xt_socket: unknown flags 0x50 [ 495.878916][T19613] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3654'. [ 495.927411][T19613] netlink: 'syz.1.3654': attribute type 2 has an invalid length. [ 495.996872][T19618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3655'. [ 496.702027][T19652] netlink: 'syz.3.3664': attribute type 11 has an invalid length. [ 496.723231][T19660] netlink: 'syz.3.3664': attribute type 11 has an invalid length. [ 497.098080][T19685] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 497.942086][T19723] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 34 [ 498.212900][T19741] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 498.306252][T19741] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 498.405472][T19741] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 498.508628][T19741] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 498.731054][ T8583] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 498.824158][T10220] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 498.868201][ T8583] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 498.893844][ T8583] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 499.598698][T19812] __nla_validate_parse: 9 callbacks suppressed [ 499.598717][T19812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3706'. [ 499.631229][T19815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3709'. [ 499.666623][T19815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3709'. [ 499.781827][T19821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.808621][T19820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3710'. [ 499.851089][T19820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3710'. [ 500.010672][T19836] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 [ 500.239729][T19848] netlink: 'syz.1.3720': attribute type 1 has an invalid length. [ 500.247910][T19848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3720'. [ 500.263102][T19848] netlink: 'syz.1.3720': attribute type 5 has an invalid length. [ 500.354528][T19851] netlink: 'syz.5.3721': attribute type 1 has an invalid length. [ 500.391446][T19851] netlink: 'syz.5.3721': attribute type 3 has an invalid length. [ 500.401582][T19851] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3721'. [ 500.510234][T19858] netlink: 'syz.3.3724': attribute type 2 has an invalid length. [ 500.589199][T19861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3725'. [ 500.781368][T19867] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3728'. [ 501.820919][T19918] netlink: 'syz.0.3742': attribute type 1 has an invalid length. [ 501.884044][T19928] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.3743'. [ 501.900318][T19927] netlink: 'syz.5.3746': attribute type 1 has an invalid length. [ 501.910225][T19918] bond4: (slave bridge3): making interface the new active one [ 501.930035][T19918] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 502.056891][T19937] FAULT_INJECTION: forcing a failure. [ 502.056891][T19937] name failslab, interval 1, probability 0, space 0, times 1 [ 502.089881][T19937] CPU: 1 UID: 0 PID: 19937 Comm: syz.1.3747 Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 502.089924][T19937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 502.089939][T19937] Call Trace: [ 502.089948][T19937] [ 502.089958][T19937] dump_stack_lvl+0x189/0x250 [ 502.089988][T19937] ? __pfx____ratelimit+0x10/0x10 [ 502.090021][T19937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.090043][T19937] ? __pfx__printk+0x10/0x10 [ 502.090067][T19937] ? netlink_unicast+0x82c/0x9e0 [ 502.090097][T19937] ? ___sys_sendmsg+0x21f/0x2a0 [ 502.090118][T19937] ? do_syscall_64+0xfa/0x3b0 [ 502.090164][T19937] should_fail_ex+0x414/0x560 [ 502.090205][T19937] should_failslab+0xa8/0x100 [ 502.090229][T19937] kmem_cache_alloc_noprof+0x73/0x3c0 [ 502.090261][T19937] ? skb_clone+0x212/0x3a0 [ 502.090291][T19937] skb_clone+0x212/0x3a0 [ 502.090320][T19937] __netlink_deliver_tap+0x404/0x850 [ 502.090367][T19937] ? netlink_deliver_tap+0x2e/0x1b0 [ 502.090401][T19937] netlink_deliver_tap+0x19c/0x1b0 [ 502.090436][T19937] netlink_sendskb+0x68/0x140 [ 502.090468][T19937] netlink_unicast+0x397/0x9e0 [ 502.090494][T19937] ? __asan_memcpy+0x40/0x70 [ 502.090529][T19937] ? __pfx_netlink_unicast+0x10/0x10 [ 502.090570][T19937] netlink_rcv_skb+0x28c/0x470 [ 502.090603][T19937] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 502.090640][T19937] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 502.090686][T19937] ? netlink_deliver_tap+0x2e/0x1b0 [ 502.090728][T19937] netlink_unicast+0x82c/0x9e0 [ 502.090768][T19937] ? __pfx_netlink_unicast+0x10/0x10 [ 502.090800][T19937] ? netlink_sendmsg+0x642/0xb30 [ 502.090830][T19937] ? skb_put+0x11b/0x210 [ 502.090855][T19937] netlink_sendmsg+0x805/0xb30 [ 502.090913][T19937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.090951][T19937] ? aa_sock_msg_perm+0x94/0x160 [ 502.090983][T19937] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 502.091008][T19937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.091043][T19937] __sock_sendmsg+0x21c/0x270 [ 502.091075][T19937] ____sys_sendmsg+0x505/0x830 [ 502.091105][T19937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.091140][T19937] ? import_iovec+0x74/0xa0 [ 502.091176][T19937] ___sys_sendmsg+0x21f/0x2a0 [ 502.091202][T19937] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.091268][T19937] ? __fget_files+0x2a/0x420 [ 502.091288][T19937] ? __fget_files+0x3a0/0x420 [ 502.091322][T19937] __x64_sys_sendmsg+0x19b/0x260 [ 502.091349][T19937] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 502.091383][T19937] ? __pfx_ksys_write+0x10/0x10 [ 502.091412][T19937] ? rcu_is_watching+0x15/0xb0 [ 502.091453][T19937] ? do_syscall_64+0xbe/0x3b0 [ 502.091490][T19937] do_syscall_64+0xfa/0x3b0 [ 502.091519][T19937] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.091551][T19937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.091572][T19937] ? clear_bhb_loop+0x60/0xb0 [ 502.091599][T19937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.091619][T19937] RIP: 0033:0x7f615cd8ebe9 [ 502.091640][T19937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.091659][T19937] RSP: 002b:00007f615dc98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.091684][T19937] RAX: ffffffffffffffda RBX: 00007f615cfb5fa0 RCX: 00007f615cd8ebe9 [ 502.091700][T19937] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 502.091714][T19937] RBP: 00007f615dc98090 R08: 0000000000000000 R09: 0000000000000000 [ 502.091728][T19937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.091741][T19937] R13: 00007f615cfb6038 R14: 00007f615cfb5fa0 R15: 00007ffebbfcb388 [ 502.091777][T19937] [ 502.542491][T19945] netlink: 'syz.0.3749': attribute type 9 has an invalid length. [ 502.909375][T19976] netlink: 'syz.1.3758': attribute type 4 has an invalid length. [ 502.912405][T19964] tipc: Started in network mode [ 502.949445][T19964] tipc: Node identity 925f7372427b, cluster identity 4711 [ 502.958170][T19964] tipc: Enabled bearer , priority 0 [ 502.996036][T19979] syzkaller0: entered promiscuous mode [ 503.013894][T19979] syzkaller0: entered allmulticast mode [ 503.067515][T19964] tipc: Resetting bearer [ 503.076730][T19964] netlink: 'syz.2.3756': attribute type 1 has an invalid length. [ 503.103245][T19971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.117137][T19980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.128899][T19960] tipc: Resetting bearer [ 503.199096][T19960] tipc: Disabling bearer [ 503.365809][T19986] tipc: Enabled bearer , priority 10 [ 503.900368][T20012] vcan0: entered allmulticast mode [ 504.170613][ T8602] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d [ 504.440642][T20037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.483599][T16479] tipc: Node number set to 4022615528 [ 504.529174][T20040] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 505.134160][T20054] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 505.662355][T20086] validate_nla: 3 callbacks suppressed [ 505.662373][T20086] netlink: 'syz.0.3792': attribute type 1 has an invalid length. [ 505.688262][T20090] netlink: 'syz.5.3794': attribute type 4 has an invalid length. [ 505.767221][T20086] 8021q: adding VLAN 0 to HW filter on device bond5 [ 505.809977][T20094] bond5: (slave wlan0): Enslaving as an active interface with a down link [ 505.870140][T20086] vlan4: entered allmulticast mode [ 505.884881][T20100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.899031][T20086] veth1: entered allmulticast mode [ 505.906564][T20086] veth1: entered promiscuous mode [ 505.917190][T20086] veth1: left promiscuous mode [ 505.930620][T20086] bond5: (slave vlan4): making interface the new active one [ 505.961078][T20086] veth1: entered promiscuous mode [ 505.974739][T20086] vlan4: entered promiscuous mode [ 505.976682][T20102] __nla_validate_parse: 13 callbacks suppressed [ 505.976707][T20102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3796'. [ 505.980729][T20086] bond5: (slave vlan4): Enslaving as an active interface with an up link [ 506.388904][T20117] sch_tbf: peakrate 13 is lower than or equals to rate 2542 ! [ 506.510025][T20118] IPVS: set_ctl: invalid protocol: 43 172.30.0.3:20000 [ 506.569255][T20131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3803'. [ 506.640476][T16491] IPVS: starting estimator thread 0... [ 506.644104][T20127] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 506.744570][T20133] IPVS: using max 24 ests per chain, 57600 per kthread [ 506.850274][T20138] !: renamed from dummy0 (while UP) [ 506.939672][T20121] hsr0 speed is unknown, defaulting to 1000 [ 507.130317][T20145] netlink: 'syz.0.3810': attribute type 1 has an invalid length. [ 507.194763][T20145] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3810'. [ 507.233867][T20155] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 508.091824][T20194] netlink: 'syz.5.3825': attribute type 1 has an invalid length. [ 508.129242][T20194] netlink: 'syz.5.3825': attribute type 1 has an invalid length. [ 508.275008][T20206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3827'. [ 508.358863][T20206] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3827'. [ 508.397005][T20208] netlink: 'syz.1.3829': attribute type 4 has an invalid length. [ 508.590597][T20222] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3831'. [ 508.673586][T20220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3833'. [ 508.704076][T20225] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3834'. [ 508.718279][T20225] netlink: 'syz.1.3834': attribute type 8 has an invalid length. [ 508.895036][T20232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3836'. [ 508.915830][T20234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3836'. [ 509.081372][T20214] hsr0 speed is unknown, defaulting to 1000 [ 509.438799][T20263] netlink: 'syz.2.3845': attribute type 8 has an invalid length. [ 509.726271][T20275] openvswitch: netlink: Key 0 has unexpected len 20 expected 0 [ 509.809452][T20274] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 509.845478][T20278] bridge_slave_0: left allmulticast mode [ 509.861503][T20278] bridge_slave_0: left promiscuous mode [ 509.882224][T20278] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.918287][T20278] bridge_slave_1: left allmulticast mode [ 509.941697][T20278] bridge_slave_1: left promiscuous mode [ 509.949318][T20278] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.006311][T20278] bond0: (slave bond_slave_0): Releasing backup interface [ 510.032675][T20278] bond0: (slave bond_slave_1): Releasing backup interface [ 510.056633][T20278] team0: Port device team_slave_0 removed [ 510.065128][T20278] team0: Port device team_slave_1 removed [ 510.071575][T20278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.082160][T20278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.121805][T20281] team0: Mode changed to "loadbalance" [ 510.597977][T20310] team0: Device ip6gre1 is of different type [ 511.291076][T20354] tipc: Enabled bearer , priority 0 [ 511.300467][T20354] syzkaller0: entered promiscuous mode [ 511.320529][T20354] syzkaller0: entered allmulticast mode [ 511.340453][T20354] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 511.391125][T20354] tipc: Resetting bearer [ 511.421445][T20354] __nla_validate_parse: 4 callbacks suppressed [ 511.421465][T20354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3875'. [ 511.471488][T20353] tipc: Resetting bearer [ 511.477977][T20365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3878'. [ 511.499462][T20353] tipc: Disabling bearer [ 511.622481][T20365] hsr_slave_0 (unregistering): left promiscuous mode [ 511.659497][T20371] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3880'. [ 511.767419][T20373] netlink: 'syz.0.3881': attribute type 10 has an invalid length. [ 511.796727][T20373] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 511.820448][T20373] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 511.832888][T20373] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 511.848502][T20377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3884'. [ 511.952908][T20383] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3884'. [ 512.148488][T20391] mac80211_hwsim hwsim31 ÿ: renamed from wlan1 [ 512.215358][T20371] hsr0 speed is unknown, defaulting to 1000 [ 512.550295][T20412] netlink: 'syz.2.3895': attribute type 1 has an invalid length. [ 512.562368][T20412] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3895'. [ 512.574398][T20412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3895'. [ 512.579385][T20414] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3896'. [ 512.583729][T20412] netlink: 'syz.2.3895': attribute type 1 has an invalid length. [ 512.600557][T20412] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3895'. [ 512.689320][T20412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3895'. [ 512.735038][T20412] netlink: 'syz.2.3895': attribute type 1 has an invalid length. [ 512.785275][T20412] netlink: 'syz.2.3895': attribute type 1 has an invalid length. [ 512.811239][T20412] netlink: 'syz.2.3895': attribute type 1 has an invalid length. [ 512.848719][T20412] netlink: 'syz.2.3895': attribute type 1 has an invalid length. [ 512.892010][T20412] netlink: 'syz.2.3895': attribute type 1 has an invalid length. [ 512.920675][T20412] netlink: 'syz.2.3895': attribute type 1 has an invalid length. [ 512.957010][T20412] netlink: 'syz.2.3895': attribute type 1 has an invalid length. [ 513.634836][T20437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.667013][T20437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.704621][T20437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.732576][T20437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.787759][T20455] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 513.808720][T20437] bond0: (slave batadv0): Releasing backup interface [ 514.220831][T20476] lo speed is unknown, defaulting to 1000 [ 514.240753][T20476] lo speed is unknown, defaulting to 1000 [ 514.248337][T20476] lo speed is unknown, defaulting to 1000 [ 514.466679][T20489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.476951][T20489] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.489807][T20489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.604100][T20476] infiniband syz0: set active [ 514.608906][ T8858] lo speed is unknown, defaulting to 1000 [ 514.609769][T20476] infiniband syz0: added lo [ 514.616191][ T8858] syz0: Port: 1 Link ACTIVE [ 514.660333][T20476] RDS/IB: syz0: added [ 514.665221][T20476] smc: adding ib device syz0 with port count 1 [ 514.671525][T20476] smc: ib device syz0 port 1 has pnetid [ 514.682957][ T8858] lo speed is unknown, defaulting to 1000 [ 514.689470][T20476] lo speed is unknown, defaulting to 1000 [ 514.884943][T20476] lo speed is unknown, defaulting to 1000 [ 515.208986][T20476] lo speed is unknown, defaulting to 1000 [ 515.229740][T20505] : renamed from bridge_slave_0 [ 515.586147][T20476] lo speed is unknown, defaulting to 1000 [ 515.616470][T20524] bridge0: port 3(hsr0) entered blocking state [ 515.623330][T20524] bridge0: port 3(hsr0) entered disabled state [ 515.630587][T20524] hsr0: entered allmulticast mode [ 515.638924][T20524] hsr_slave_0: entered allmulticast mode [ 515.654035][T20524] hsr_slave_1: entered allmulticast mode [ 515.661900][T20524] hsr0: entered promiscuous mode [ 515.675143][T20524] bridge0: port 3(hsr0) entered blocking state [ 515.681848][T20524] bridge0: port 3(hsr0) entered forwarding state [ 515.726843][T20524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.930486][T20476] lo speed is unknown, defaulting to 1000 [ 516.197238][T20476] lo speed is unknown, defaulting to 1000 [ 516.488546][T20547] veth1_macvtap: left promiscuous mode [ 516.494860][T20547] macsec0: entered promiscuous mode [ 516.500112][T20547] macsec0: entered allmulticast mode [ 516.526873][T20547] macsec0: left promiscuous mode [ 516.532651][T20547] macsec0: left allmulticast mode [ 516.556121][T20550] __nla_validate_parse: 71 callbacks suppressed [ 516.556144][T20550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3935'. [ 516.557979][T20476] lo speed is unknown, defaulting to 1000 [ 516.636656][T20551] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 516.968883][T20565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3941'. [ 516.977168][T20564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3941'. [ 517.026046][T20565] geneve2: entered promiscuous mode [ 517.209711][T20564] geneve2: entered promiscuous mode [ 517.393671][ T8591] vlan4: left promiscuous mode [ 517.651558][T20598] lo: entered promiscuous mode [ 517.726245][T20598] validate_nla: 25 callbacks suppressed [ 517.726267][T20598] netlink: 'syz.0.3950': attribute type 2 has an invalid length. [ 517.763725][T20598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.988211][T20611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3954'. [ 518.017859][T20611] netlink: 'syz.0.3954': attribute type 9 has an invalid length. [ 518.064645][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3954'. [ 518.299314][T20628] macvlan0: entered allmulticast mode [ 518.312163][T16479] IPVS: starting estimator thread 0... [ 518.450243][T20631] IPVS: using max 24 ests per chain, 57600 per kthread [ 518.542940][T20643] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 518.549929][T20643] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 518.608674][T20623] syzkaller1: entered promiscuous mode [ 518.621870][T20623] syzkaller1: entered allmulticast mode [ 518.631960][T20646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.648736][T20646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3964'. [ 518.843224][T20656] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3967'. [ 518.909500][T20664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3969'. [ 518.973185][T20667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3970'. [ 519.129105][T20678] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3974'. [ 519.778852][T20715] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 520.526553][T20757] netlink: 'syz.5.4000': attribute type 1 has an invalid length. [ 520.546148][T20757] netlink: 'syz.5.4000': attribute type 2 has an invalid length. [ 520.728065][T20783] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 520.902180][T20798] sctp: [Deprecated]: syz.1.4009 (pid 20798) Use of int in max_burst socket option. [ 520.902180][T20798] Use struct sctp_assoc_value instead [ 521.707270][T20844] __nla_validate_parse: 7 callbacks suppressed [ 521.709593][T20844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4022'. [ 521.829497][T20851] netlink: 'syz.0.4025': attribute type 1 has an invalid length. [ 521.871417][T20855] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4026'. [ 521.914275][T20857] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 521.966286][T20857] veth4: entered promiscuous mode [ 522.111887][T20866] tipc: Enabled bearer , priority 0 [ 522.124741][T20868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4030'. [ 522.166834][T20866] syzkaller0: entered promiscuous mode [ 522.172860][T20866] syzkaller0: entered allmulticast mode [ 522.191212][T20868] netlink: 'syz.1.4030': attribute type 1 has an invalid length. [ 522.212773][T20869] tipc: Resetting bearer [ 522.333278][T20873] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.345436][T20873] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.365095][T20878] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4032'. [ 522.380739][T20865] tipc: Resetting bearer [ 522.397048][T20865] tipc: Disabling bearer [ 522.465818][T20873] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.477250][T20873] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.586147][T20873] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.613077][T20873] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.623041][T20889] netlink: 'syz.5.4036': attribute type 10 has an invalid length. [ 522.642419][T20889] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4036'. [ 522.679067][T20889] team0: Port device geneve0 added [ 522.692278][ T1098] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 522.738797][T20873] bond0: (slave netdevsim0): Releasing backup interface [ 522.751821][T20873] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 522.764333][T20873] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.783623][T20873] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.850822][ T1098] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 522.860019][ T1098] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 522.891489][ T1098] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 522.949349][T20898] lo: entered allmulticast mode [ 522.960837][T20898] lo: left allmulticast mode [ 523.007169][ T8610] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.020321][T20898] netlink: 348 bytes leftover after parsing attributes in process `syz.5.4040'. [ 523.023253][ T8610] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.090940][T10220] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.144143][T10220] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.246579][ T8591] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.268802][ T8591] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.309347][ T8591] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 523.344146][ T8591] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.383050][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4043'. [ 523.500172][T20922] netlink: 'syz.5.4044': attribute type 1 has an invalid length. [ 523.638028][T20930] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4047'. [ 523.648517][T20930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4047'. [ 523.666144][T20929] netlink: 'syz.5.4046': attribute type 12 has an invalid length. [ 523.704925][T20929] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4046'. [ 524.177177][T20955] netlink: 'syz.5.4054': attribute type 5 has an invalid length. [ 524.241966][T20955] netlink: 'syz.5.4054': attribute type 3 has an invalid length. [ 524.260799][T20959] netlink: 'syz.2.4055': attribute type 21 has an invalid length. [ 524.373185][T20963] netlink: 'syz.2.4057': attribute type 11 has an invalid length. [ 524.398778][T20963] netlink: 'syz.2.4057': attribute type 11 has an invalid length. [ 524.577218][T20978] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 524.737550][T20985] netlink: 'syz.1.4064': attribute type 1 has an invalid length. [ 524.838869][T20988] : left allmulticast mode [ 524.850147][T20988] : left promiscuous mode [ 524.855057][T20988] bridge0: port 1() entered disabled state [ 524.868842][T20988] bridge_slave_1: left allmulticast mode [ 524.875269][T20988] bridge_slave_1: left promiscuous mode [ 524.881343][T20988] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.905352][T20988] bond0: (slave bond_slave_0): Releasing backup interface [ 524.919384][T20988] bond0: (slave bond_slave_1): Releasing backup interface [ 524.941325][T20988] team0: Port device team_slave_0 removed [ 524.955835][T20988] team0: Port device team_slave_1 removed [ 524.988636][T20989] macvlan2: entered promiscuous mode [ 524.999347][T20989] macvlan2: entered allmulticast mode [ 525.009758][T20989] bond2: entered promiscuous mode [ 525.016126][T20989] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 525.030159][T20989] bond2: left promiscuous mode [ 525.089438][ T5950] hsr0 speed is unknown, defaulting to 1000 [ 525.144189][T20982] hsr0 speed is unknown, defaulting to 1000 [ 525.163291][T20982] lo speed is unknown, defaulting to 1000 [ 525.492497][T21009] netlink: 'syz.5.4072': attribute type 3 has an invalid length. [ 525.502026][T21009] netlink: 'syz.5.4072': attribute type 3 has an invalid length. [ 525.749928][T21003] hsr0 speed is unknown, defaulting to 1000 [ 525.761131][T21003] lo speed is unknown, defaulting to 1000 [ 526.561393][T16490] hid (null): global environment stack underflow [ 526.575769][T16490] hid (null): unknown global tag 0xe [ 526.648205][T16490] hid-generic 0005:0B57:000F.0002: reserved main item tag 0xe [ 526.669735][T16490] hid-generic 0005:0B57:000F.0002: global environment stack underflow [ 526.699892][T16490] hid-generic 0005:0B57:000F.0002: item 0 1 1 11 parsing failed [ 526.737265][T16490] hid-generic 0005:0B57:000F.0002: probe with driver hid-generic failed with error -22 [ 526.974881][T21060] __nla_validate_parse: 5 callbacks suppressed [ 526.974915][T21060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4088'. [ 527.156858][T21065] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4089'. [ 527.177696][T21065] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4089'. [ 527.585898][T21082] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4096'. [ 527.606945][T21082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4096'. [ 527.617060][T21082] netlink: 31 bytes leftover after parsing attributes in process `syz.5.4096'. [ 527.647220][T21082] netlink: 31 bytes leftover after parsing attributes in process `syz.5.4096'. [ 527.790406][T21089] xt_socket: unknown flags 0xe4 [ 527.880004][T21094] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 528.311017][T21113] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4106'. [ 528.963047][T21127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4111'. [ 529.072031][T21138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4114'. [ 529.829148][T21166] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.022965][T21175] tipc: Enabled bearer , priority 0 [ 530.045854][T21175] syzkaller0: entered promiscuous mode [ 530.051468][T21175] syzkaller0: entered allmulticast mode [ 530.102314][T21175] sch_tbf: burst 127 is lower than device veth1_to_bond mtu (1514) ! [ 530.180832][T21175] tipc: Resetting bearer [ 530.195162][T21174] tipc: Resetting bearer [ 530.231165][T21174] tipc: Disabling bearer [ 530.594842][T21209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.736809][T21222] validate_nla: 3 callbacks suppressed [ 530.736829][T21222] netlink: 'syz.5.4141': attribute type 2 has an invalid length. [ 531.024752][T21232] veth3: entered allmulticast mode [ 532.114005][T21182] Bluetooth: hci2: command 0x0405 tx timeout [ 532.221301][T21303] netlink: 'syz.0.4167': attribute type 1 has an invalid length. [ 532.259215][T21300] tipc: Enabling of bearer rejected, failed to enable media [ 532.470841][T21313] bond7 (unregistering): Released all slaves [ 532.548097][T21326] __nla_validate_parse: 11 callbacks suppressed [ 532.548116][T21326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4170'. [ 532.611582][T21325] ip6tnl1: entered promiscuous mode [ 532.625090][T21325] ip6tnl1: entered allmulticast mode [ 532.805943][T21332] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4172'. [ 532.904436][T21338] netlink: 'syz.1.4175': attribute type 2 has an invalid length. [ 532.933528][T21338] netlink: 'syz.1.4175': attribute type 1 has an invalid length. [ 533.142112][T21355] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4182'. [ 533.154916][T21351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4183'. [ 533.171326][T21352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4183'. [ 533.211171][T21355] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4182'. [ 533.258438][T21357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4181'. [ 533.326274][T21355] openvswitch: netlink: Flow actions attr not present in new flow. [ 533.559370][T21349] hsr0 speed is unknown, defaulting to 1000 [ 533.567487][T21349] lo speed is unknown, defaulting to 1000 [ 534.688100][T21397] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 534.704139][T21399] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4192'. [ 534.861336][T21415] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4195'. [ 534.883849][T21411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4196'. [ 535.419815][T21438] netlink: 'syz.5.4203': attribute type 11 has an invalid length. [ 535.742633][T21455] netlink: 'syz.3.4207': attribute type 7 has an invalid length. [ 536.223323][T21478] netlink: 'syz.3.4215': attribute type 7 has an invalid length. [ 536.955462][T21522] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 536.962187][T21522] syzkaller0: linktype set to 264 [ 537.036600][T21487] hsr0 speed is unknown, defaulting to 1000 [ 537.059046][T21487] lo speed is unknown, defaulting to 1000 [ 537.500572][T21549] gtp0: entered promiscuous mode [ 537.524035][T21549] gtp0: entered allmulticast mode [ 537.558777][T21552] __nla_validate_parse: 8 callbacks suppressed [ 537.558797][T21552] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4233'. [ 537.592466][T21552] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4233'. [ 537.607787][T21554] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4233'. [ 537.618720][T21552] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4233'. [ 537.746627][T21558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4235'. [ 537.756016][T21558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4235'. [ 538.137570][ T8608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.150914][ T8608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.204628][T10220] bond5: (slave wlan0): failed to get link speed/duplex [ 538.247478][ C0] ------------[ cut here ]------------ [ 538.253003][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 538.264318][ C0] WARNING: CPU: 0 PID: 16606 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 538.274502][ C0] Modules linked in: [ 538.278464][ C0] CPU: 0 UID: 0 PID: 16606 Comm: syz-executor Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 538.290449][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 538.300606][ C0] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 538.307066][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 80 c9 ad 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 c2 f4 9c f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 538.326761][ C0] RSP: 0018:ffffc90000007758 EFLAGS: 00010246 [ 538.332889][ C0] RAX: 42b1dfbf705ded00 RBX: 000000000000000c RCX: ffff888020331e00 [ 538.340942][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 538.348999][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 538.357061][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: ffff8880666a8028 [ 538.365127][ C0] R13: 0000000000000000 R14: ffff88807cd88e40 R15: ffff88807cd8b0d8 [ 538.373150][ C0] FS: 000055558ce58500(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 538.382181][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 538.388873][ C0] CR2: 00007ffe6dcee70c CR3: 0000000032bdc000 CR4: 00000000003526f0 [ 538.396939][ C0] Call Trace: [ 538.400254][ C0] [ 538.403151][ C0] rate_control_send_low+0x194/0x7a0 [ 538.408535][ C0] rate_control_get_rate+0x20b/0x5d0 [ 538.413919][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 538.419795][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 538.426231][ C0] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 538.431843][ C0] ? __ieee80211_beacon_get+0xce1/0x1880 [ 538.437576][ C0] __ieee80211_beacon_get+0xd3d/0x1880 [ 538.443090][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 538.448744][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 538.454318][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 538.460450][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 538.466098][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 538.473361][ C0] __iterate_interfaces+0x2a8/0x590 [ 538.478664][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 538.484823][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 538.492081][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 538.498260][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 538.505382][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 538.510638][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 538.516553][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 538.521837][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 538.527653][ C0] ? read_tsc+0x9/0x20 [ 538.531768][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 538.537679][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 538.542834][ C0] handle_softirqs+0x283/0x870 [ 538.547706][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 538.552540][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 538.557946][ C0] __irq_exit_rcu+0xca/0x1f0 [ 538.562600][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 538.567992][ C0] irq_exit_rcu+0x9/0x30 [ 538.572286][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 538.578008][ C0] [ 538.580971][ C0] [ 538.583969][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 538.589990][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x90 [ 538.596934][ C0] Code: 20 e9 8c f9 b2 09 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 14 25 08 00 9a 92 65 8b 0d 68 4c da 10 81 e1 00 01 ff 00 [ 538.616719][ C0] RSP: 0018:ffffc9000b277748 EFLAGS: 00000246 [ 538.622846][ C0] RAX: ffffffff8b6bf6fa RBX: 0000000000000025 RCX: ffff888020331e00 [ 538.630912][ C0] RDX: 0000000000000000 RSI: 0000000000000025 RDI: 0000000000000000 [ 538.638966][ C0] RBP: ffffffff8bdc2bc0 R08: ffff888020331e00 R09: 0000000000000002 [ 538.647018][ C0] R10: 0000000000000025 R11: 0000000000000000 R12: ffffffff8bdc2bc5 [ 538.655075][ C0] R13: ffffc9000b2777f8 R14: 0000000000000000 R15: ffffffff8bdc2bc0 [ 538.663103][ C0] ? format_decode+0xca/0xe30 [ 538.667973][ C0] format_decode+0xca/0xe30 [ 538.672524][ C0] ? kasan_save_track+0x3e/0x80 [ 538.677505][ C0] ? __kasan_slab_free+0x62/0x70 [ 538.682497][ C0] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 538.688955][ C0] vsnprintf+0x102/0xf00 [ 538.693282][ C0] tomoyo_supervisor+0x133/0x1480 [ 538.698436][ C0] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 538.704001][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.709271][ C0] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 538.715168][ C0] ? tomoyo_check_path_acl+0xec/0x1d0 [ 538.720589][ C0] ? tomoyo_check_acl+0x386/0x400 [ 538.725693][ C0] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 538.731545][ C0] tomoyo_path_permission+0x25a/0x380 [ 538.737005][ C0] tomoyo_path_perm+0x392/0x4b0 [ 538.741904][ C0] ? tomoyo_path_perm+0x1e3/0x4b0 [ 538.747050][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 538.752497][ C0] ? __might_fault+0xb0/0x130 [ 538.757327][ C0] ? __might_fault+0xb0/0x130 [ 538.762060][ C0] security_inode_getattr+0x12f/0x330 [ 538.767513][ C0] vfs_fstatat+0xb1/0x170 [ 538.771890][ C0] __x64_sys_newfstatat+0x116/0x190 [ 538.777268][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 538.783065][ C0] ? __pfx___x64_sys_umount+0x10/0x10 [ 538.788541][ C0] ? do_syscall_64+0xbe/0x3b0 [ 538.793279][ C0] do_syscall_64+0xfa/0x3b0 [ 538.797866][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.803115][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.809291][ C0] ? clear_bhb_loop+0x60/0xb0 [ 538.814056][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.819992][ C0] RIP: 0033:0x7f544598d3fa [ 538.824483][ C0] Code: 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 0b 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 [ 538.844171][ C0] RSP: 002b:00007ffe6dcee638 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 538.852642][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f544598d3fa [ 538.860709][ C0] RDX: 00007ffe6dcee640 RSI: 00007f5445a4ed42 RDI: 0000000000000003 [ 538.868789][ C0] RBP: 00007ffe6dcee640 R08: 0000000000000000 R09: 0000000000000000 [ 538.876850][ C0] R10: 0000000000001000 R11: 0000000000000206 R12: 00007ffe6dcef840 [ 538.884922][ C0] R13: 00007f5445a11c05 R14: 0000000000083628 R15: 00007ffe6dcef880 [ 538.892959][ C0] [ 538.896081][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 538.903397][ C0] CPU: 0 UID: 0 PID: 16606 Comm: syz-executor Not tainted 6.16.0-syzkaller-06619-gd942fe13f72b #0 PREEMPT(full) [ 538.915589][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 538.925665][ C0] Call Trace: [ 538.928961][ C0] [ 538.931813][ C0] dump_stack_lvl+0x99/0x250 [ 538.936416][ C0] ? __asan_memcpy+0x40/0x70 [ 538.941029][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.946237][ C0] ? __pfx__printk+0x10/0x10 [ 538.950853][ C0] panic+0x2db/0x790 [ 538.954788][ C0] ? __pfx_panic+0x10/0x10 [ 538.959247][ C0] __warn+0x31b/0x4b0 [ 538.963242][ C0] ? __rate_control_send_low+0x5df/0x820 [ 538.968887][ C0] ? __rate_control_send_low+0x5df/0x820 [ 538.974532][ C0] report_bug+0x2be/0x4f0 [ 538.978882][ C0] ? __rate_control_send_low+0x5df/0x820 [ 538.984530][ C0] ? __rate_control_send_low+0x5df/0x820 [ 538.990172][ C0] ? __rate_control_send_low+0x5e1/0x820 [ 538.995814][ C0] handle_bug+0x84/0x160 [ 539.000066][ C0] exc_invalid_op+0x1a/0x50 [ 539.004582][ C0] asm_exc_invalid_op+0x1a/0x20 [ 539.009456][ C0] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 539.015794][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 80 c9 ad 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 c2 f4 9c f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 539.035411][ C0] RSP: 0018:ffffc90000007758 EFLAGS: 00010246 [ 539.041497][ C0] RAX: 42b1dfbf705ded00 RBX: 000000000000000c RCX: ffff888020331e00 [ 539.049475][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 539.057485][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 539.065531][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: ffff8880666a8028 [ 539.073518][ C0] R13: 0000000000000000 R14: ffff88807cd88e40 R15: ffff88807cd8b0d8 [ 539.081613][ C0] ? __rate_control_send_low+0x5de/0x820 [ 539.087362][ C0] rate_control_send_low+0x194/0x7a0 [ 539.092753][ C0] rate_control_get_rate+0x20b/0x5d0 [ 539.098058][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 539.103895][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 539.110261][ C0] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 539.115830][ C0] ? __ieee80211_beacon_get+0xce1/0x1880 [ 539.121910][ C0] __ieee80211_beacon_get+0xd3d/0x1880 [ 539.127383][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 539.132948][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 539.138467][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 539.144556][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 539.150203][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 539.157415][ C0] __iterate_interfaces+0x2a8/0x590 [ 539.162629][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 539.168706][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 539.175919][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 539.182022][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 539.189071][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 539.194297][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 539.200130][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 539.205366][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 539.211102][ C0] ? read_tsc+0x9/0x20 [ 539.215228][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 539.221058][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 539.226181][ C0] handle_softirqs+0x283/0x870 [ 539.231054][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 539.235840][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 539.241256][ C0] __irq_exit_rcu+0xca/0x1f0 [ 539.245863][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 539.251105][ C0] irq_exit_rcu+0x9/0x30 [ 539.255370][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 539.261034][ C0] [ 539.263977][ C0] [ 539.266925][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 539.272913][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x90 [ 539.279690][ C0] Code: 20 e9 8c f9 b2 09 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 14 25 08 00 9a 92 65 8b 0d 68 4c da 10 81 e1 00 01 ff 00 [ 539.299310][ C0] RSP: 0018:ffffc9000b277748 EFLAGS: 00000246 [ 539.305393][ C0] RAX: ffffffff8b6bf6fa RBX: 0000000000000025 RCX: ffff888020331e00 [ 539.313383][ C0] RDX: 0000000000000000 RSI: 0000000000000025 RDI: 0000000000000000 [ 539.321375][ C0] RBP: ffffffff8bdc2bc0 R08: ffff888020331e00 R09: 0000000000000002 [ 539.329354][ C0] R10: 0000000000000025 R11: 0000000000000000 R12: ffffffff8bdc2bc5 [ 539.337332][ C0] R13: ffffc9000b2777f8 R14: 0000000000000000 R15: ffffffff8bdc2bc0 [ 539.345341][ C0] ? format_decode+0xca/0xe30 [ 539.350041][ C0] format_decode+0xca/0xe30 [ 539.354560][ C0] ? kasan_save_track+0x3e/0x80 [ 539.359438][ C0] ? __kasan_slab_free+0x62/0x70 [ 539.364391][ C0] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 539.370218][ C0] vsnprintf+0x102/0xf00 [ 539.374480][ C0] tomoyo_supervisor+0x133/0x1480 [ 539.379535][ C0] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 539.385022][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.390255][ C0] ? tomoyo_realpath_from_path+0x598/0x5d0 [ 539.396081][ C0] ? tomoyo_check_path_acl+0xec/0x1d0 [ 539.401467][ C0] ? tomoyo_check_acl+0x386/0x400 [ 539.406509][ C0] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 539.412334][ C0] tomoyo_path_permission+0x25a/0x380 [ 539.417721][ C0] tomoyo_path_perm+0x392/0x4b0 [ 539.422592][ C0] ? tomoyo_path_perm+0x1e3/0x4b0 [ 539.427635][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 539.433040][ C0] ? __might_fault+0xb0/0x130 [ 539.437747][ C0] ? __might_fault+0xb0/0x130 [ 539.442444][ C0] security_inode_getattr+0x12f/0x330 [ 539.447831][ C0] vfs_fstatat+0xb1/0x170 [ 539.452187][ C0] __x64_sys_newfstatat+0x116/0x190 [ 539.457405][ C0] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 539.463157][ C0] ? __pfx___x64_sys_umount+0x10/0x10 [ 539.468576][ C0] ? do_syscall_64+0xbe/0x3b0 [ 539.473272][ C0] do_syscall_64+0xfa/0x3b0 [ 539.477790][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.483006][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.489191][ C0] ? clear_bhb_loop+0x60/0xb0 [ 539.493880][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.499779][ C0] RIP: 0033:0x7f544598d3fa [ 539.504207][ C0] Code: 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 0b 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 [ 539.523921][ C0] RSP: 002b:00007ffe6dcee638 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 539.532353][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f544598d3fa [ 539.540329][ C0] RDX: 00007ffe6dcee640 RSI: 00007f5445a4ed42 RDI: 0000000000000003 [ 539.548311][ C0] RBP: 00007ffe6dcee640 R08: 0000000000000000 R09: 0000000000000000 [ 539.556293][ C0] R10: 0000000000001000 R11: 0000000000000206 R12: 00007ffe6dcef840 [ 539.564277][ C0] R13: 00007f5445a11c05 R14: 0000000000083628 R15: 00007ffe6dcef880 [ 539.572276][ C0] [ 539.575654][ C0] Kernel Offset: disabled [ 539.579986][ C0] Rebooting in 86400 seconds..