last executing test programs: 7.092617478s ago: executing program 4 (id=2503): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a", 0x6c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000a80)=""/77, 0x4d}, {&(0x7f0000000b80)=""/89, 0x59}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x2) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 6.131655244s ago: executing program 4 (id=2515): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0xcb15, {{0x2, 0x4, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x20, r5, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='gre0\x00'}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000880)=[{{&(0x7f0000000140)=@x25, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000380)=""/136, 0x88}, {&(0x7f00000001c0)=""/80, 0x50}, {&(0x7f0000000440)=""/29, 0x1d}, {&(0x7f0000000900)=""/216, 0xd8}, {&(0x7f0000000a00)=""/147, 0x93}, {&(0x7f0000000480)=""/22, 0x16}, {&(0x7f0000000ac0)=""/67, 0x43}, {&(0x7f0000000c00)=""/144, 0x90}], 0x8, &(0x7f0000000d80)=""/99, 0x63}, 0x3}], 0x1, 0x40000140, &(0x7f0000000e00)={0x77359400}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201e5ff9e584eb1aa3d10e3dff9f8e583de3a48e95f3b1ef28da212fb3a0d2e2bba5a83d454726fe5a16e3c020146d24c8d98140213c50401c64c9d2e58c8e5858e", 0x6e}], 0x1}, 0x48000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) recvmsg$kcm(r3, &(0x7f00000012c0)={&(0x7f0000000e40)=@hci, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000ec0)=""/70, 0x46}, {&(0x7f0000000f40)=""/186, 0xba}, {&(0x7f0000001000)=""/13, 0x3a}, {&(0x7f0000001040)=""/144, 0x90}, {&(0x7f0000001100)=""/27, 0x1b}, {&(0x7f0000001140)=""/73, 0x49}], 0x6, &(0x7f0000001240)=""/94, 0x5e}, 0x40) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff004) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x4, 0x18}, 0xc) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000004c0)='%pB \x00'}, 0x20) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3161fd51, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ldst={0x1, 0x3, 0x2, 0xc, 0xe, 0xc, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xb, 0x7fffffff, 0xff}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[r10, r11, r12, r13, r14, 0xffffffffffffffff], &(0x7f0000000600)=[{0x0, 0x1, 0x1, 0x3}, {0x2, 0x1, 0xe}, {0x3, 0x4, 0xb, 0x1}, {0x0, 0x5, 0x6, 0x2}, {0x4, 0x4, 0x4, 0xb}], 0x10, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 5.860665535s ago: executing program 4 (id=2518): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r8, &(0x7f0000000480)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @empty}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000240)="c63a271cd1dac763f57b8136d22b0e9af362afa2aaeb2951bf17d00950bdf70b887e5d1eba08b159c41cf7ec75281a59ea5cc1908ef6", 0x36}, {&(0x7f00000007c0)="2941442897638924cf3b3997084c01b8730e1708d5854a7a2293d9bd0c21bcc82b9095742947434d5abacc800990411d9dc776cdb3988de238440f444dd86ab07a9e43462b808dfd2fa141f4a6d18c91b4dbec746bb2c34eb9fb786ea5d3e574893f37435635036dc2938d8a99ce72b8997a67696bec2e8f00c1556c61e299023e5121cedb25fd94b87cec9e67ca4f54d1cea2c1308412c435a16dfa654f5e926bc5b099a5879957ec882224bddaa450ed951c72f1e38f071e2958788fe9dedce64868b7d9b73ef72e1217b467027758faade14897cbcef908279c35e6713246f99e88bec1c1923c2702658d830b", 0xee}, {&(0x7f0000000280)="6976160bcc1733b3348b2b06b49e8ba44339249d373d97fd34", 0x19}, {&(0x7f00000008c0)="a7a87d2ef54736a748bc0f28f3ac020f8ada097ca6df3414b51ed7c05e8c6841be0a55f420c094707b240f30a202ad2da1382f51c4500c9375172ac706c32e97203a3561e2f7105e4df804c8730680dcba8734cb746fca16d23142470488ebcdd2faba6687a7361a65d63f7a1774c6aa1577beeda2d3", 0x76}, {&(0x7f0000000940)="2da331b6940f00459ceaa9cd9e2e649c42b88422795c372f26eccb75c77625b3978ed8fa8568e1a483d7520e20fff3aafd338922ef15f1ea89ecbbe174faad536be9e33d9b5cb7a3076e2ce4cb091f620b4ed41c58c68b00c86a65f8f51694cef75846ee638fa3af5dc1e8ad7c95819c96", 0x71}, {&(0x7f0000000a00)="13c899d99d2d5fe17a5cef9d531cc05766a11b1c23ea5200ebd1cee19ea83d4ffd819b8bf3a33f57c3b3fade0ff63744c587c97380558ab2790b42afa8808762097791937d2125fd717d8c7b04a2", 0x4e}], 0x6, 0x0, 0x0, 0x4000}, 0x4000) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0xac, r9, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$int_in(r3, 0x5452, &(0x7f0000000580)=0x78) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 4.852071895s ago: executing program 4 (id=2525): syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@loopback}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000200)='}\f\xea&#v\'\x99\\/\x00', 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000085100000060000002d25f0ff040000006608000000000000180000000000000000000000000000009500000000000082160a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2a2, 0x0, 0x0, 0x0, 0x8}, 0x94) 4.789556031s ago: executing program 1 (id=2526): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0xffffffc3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={r2, 0x98, 0x1, 'M'}, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="285e1b0585090007024345", @ANYRES32=0x0, @ANYBLOB="8cff01800c0004800800020013000000"], 0x28}}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r8 = accept4$x25(r6, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x80000) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00100000000000003400128009000100626f6e6400000000240002800500010004000000080018"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) ioctl$SIOCX25SDTEFACILITIES(r8, 0x89eb, &(0x7f0000000200)={0x3, 0x0, 0x6, 0xf8, 0x6, 0x1e, 0x20, "95e90e3982a1727a5854c46620ed396d42f8f8f4", "d7abce0713b13f4b1e382fe792852366e4d32566"}) 4.748187343s ago: executing program 4 (id=2527): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)={0x20, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x76, 0x0, 0x0, @u32=0x9}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x112}]}]}, 0x20}], 0x1}, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x6, 0x2, 0x2, 0xd, 0xffff0e25}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x9}, &(0x7f0000000380)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x1000000, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7, 0xd, 0x81, 0xa1, 0x3, 0x7, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0xfffffffffffffd50}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@mpls_delroute={0x108, 0x19, 0x800, 0x70bd2b, 0x25dfdbfc, {0x1c, 0x80, 0x80, 0x40, 0x2, 0x2, 0x0, 0x2, 0x900}, [@RTA_DST={0x8, 0x1, {0xd, 0x0, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0xffff, 0x3, 0x7, r2}}, @RTA_VIA={0x14, 0x12, {0x21, "07c9c4190a44ee53a879a6567d3c"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}, @RTA_NEWDST={0x84, 0x13, [{0x2}, {0x101, 0x0, 0x1}, {0x8}, {0x3b}, {0x7, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0xd}, {0x100, 0x0, 0x1}, {}, {}, {0xffff}, {0x3, 0x0, 0x1}, {0x9}, {0x46547}, {0x7ff, 0x0, 0x1}, {0x6}, {0x3, 0x0, 0x1}, {0x9}, {0x1}, {0x3, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x8}, {0xd, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x7}, {0xffff9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x6}, {0x6}, {0x465}, {0x8, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x1a, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}, @RTA_VIA={0x14, 0x12, {0x26, "b4e749b6749169df6b88c73b673f"}}, @RTA_VIA={0x14, 0x12, {0x11, "c7ff5239b1decc4672d5385250fe"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x24048815}, 0x0) 4.590504156s ago: executing program 3 (id=2530): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4f24, @broadcast}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="180000008f00001f00000000d641000018110000", @ANYRES32=r1, @ANYRESOCT=r0], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0xff0, &(0x7f0000000cc0)=""/4080, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000340)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x80}, 0x8) setsockopt(0xffffffffffffffff, 0xeffffff7, 0x30b9, &(0x7f0000000080)="1a000000020000caf57c5c7727eaafcfd1000000000000", 0x17) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, 0xffff, 0x2, 0x400, 0x7, 0x8, 0x97b, 0x20}, &(0x7f0000000380)=0x9c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000500)={r7, 0x0, 0x1, [0x7]}, 0xa) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="e973d93ae685e03ed7fadf0ce3cf27609f5a2d17c50890faf673292cd620d868c2208f57c361f7c7ec8a6c0674ccd113a5b7e9a5ad64539e420be5ef0fd6c55ce00bc6389b946b00d8a50000000000000000000000bb46246fc27f15e34cb64dddcee95adbba49335708dbc37723171e94cdee47b348d65917238ed80e167a658ad4e574a1c4a3e2321eeeaa9d2a663b386601142418052d645687b3518385f8", @ANYRES16=r8, @ANYBLOB="030c29bd7000fbdbdf252e000000"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x9}, 0x15, 0x3, 'wlc\x00', 0x1, 0x4, 0x800008}, 0x2c) r10 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.30024624s ago: executing program 4 (id=2534): pipe(0x0) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0x80002005}) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x3b}]}}]}, 0xa4}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000020000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x34}, 0x1, 0x0, 0x0, 0x4046814}, 0x2404c880) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000016000000b40000000300000000000000", @ANYRES32, @ANYBLOB="05000000001800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x8}, [], {0x95, 0x0, 0x0, 0x2000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xfc, &(0x7f0000000840)=""/252, 0x0, 0x5}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvlan1\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x2, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x994}, 0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000000f5ff000000000000000000000004f4ffffffffffff00000000000000000000000000000a00000a00000000000000", @ANYRES32=r7, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x8859}}, 0x1000, 0x0, 0x0, 0x0, 0xb2, 0x5, 0xff}, 0x9c) shutdown(r9, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, @in6={0xa, 0x4e22, 0x1, @loopback, 0x68}], 0x2c) 3.45230782s ago: executing program 1 (id=2535): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7585, @private2={0xfc, 0x2, '\x00', 0x1}, 0x13ff, 0x2}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x508, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r2, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x7fffffff, 0x6}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x5c}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000001000000002"], 0x48) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80200003f0007012cbd700000000000037c000004004280a00201809902108014000d"], 0x2b8}, 0x1, 0x0, 0x0, 0x4040016}, 0xc000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="e9ff378c4a7935d47eb33b37de0a10a47d874a0129540000101b0000000020007f4ae6f5d8a0c1bf00000014afdda8bd3f4000002793e7ecfdb255198463ad63fcfe54a3e7a0c1c29ca9464d2e189b07a0e3fda7901807060000000000000081f6c292e769ff943c23cc4f7e8187fd39b200734dcd50d8590fc52750297b377588e1f082fd75dbc39ceb8b578552e7f71d912e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$802154_dgram(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x2004c004}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000001000)=""/16, 0x1030000, 0x1000, 0x5}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) (async) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7585, @private2={0xfc, 0x2, '\x00', 0x1}, 0x13ff, 0x2}, 0x20) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x508, @empty}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) bind$rose(r2, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x7fffffff, 0x6}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x5c}}, 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000001000000002"], 0x48) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80200003f0007012cbd700000000000037c000004004280a00201809902108014000d"], 0x2b8}, 0x1, 0x0, 0x0, 0x4040016}, 0xc000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="e9ff378c4a7935d47eb33b37de0a10a47d874a0129540000101b0000000020007f4ae6f5d8a0c1bf00000014afdda8bd3f4000002793e7ecfdb255198463ad63fcfe54a3e7a0c1c29ca9464d2e189b07a0e3fda7901807060000000000000081f6c292e769ff943c23cc4f7e8187fd39b200734dcd50d8590fc52750297b377588e1f082fd75dbc39ceb8b578552e7f71d912e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$802154_dgram(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x2004c004}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000001000)=""/16, 0x1030000, 0x1000, 0x5}, 0x20) (async) 3.075875591s ago: executing program 1 (id=2537): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) clock_gettime(0xfffffffb, 0x0) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000051421060001000000000000080001"], 0x20}}, 0x0) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000180)=""/89, 0x59}], 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0800d907000000000000", 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 2.985950529s ago: executing program 0 (id=2538): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.810509404s ago: executing program 0 (id=2539): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$caif_stream(0x25, 0x1, 0x4) connect$caif(r1, &(0x7f0000000040)=@rfm={0x25, 0x5, "888527a0df0d45c352c4d153e25e93aa"}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2, 0x7}]}, &(0x7f0000000180)=0x10) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e20, 0x0, @empty, 0xa9c2}}, 0x27c0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x55, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000080000100851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000003c080000000000001800000000000000000000000000000095000000000000009500000000000500"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="063eff0743ffff20925dd7357c3df63301d68fc7cf7e6731f192bc430a907f27c0c0f78e61f50ec4cca639a77563c928f35e40d2470413e2a7eeb5bd763764d1dff29d93cdb94df485f9ba06b1cb1bdd1c2b394fe59d681317a6229603e656259d1592905a69593cf9bf623870533596f64f9c39f9c4e194ce0182b3f1f7421c5b98a3e9ab0f8685d53be2473be8cf0e5773e54ea29ef19990c7dc8753d26166f64f4068dcbd7b5e16b72323c9f1"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = epoll_create1(0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x20}}, 0x4040054) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a00"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, 0x0) write$tun(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaa"], 0x72) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x20000008}) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r4, &(0x7f0000000000)="05000000010001", 0x7) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x9005}, 0x4) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @empty, @val={@void}, {@ipv4={0x6000, @tipc={{0x5, 0x4, 0x0, 0x1, 0x40, 0x68, 0x0, 0x0, 0x6, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x1, 0xb}, 0x0, 0x2}}}}}}}}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="6d9311000000f8dbdf25010000000c0003000300000000000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) 2.620108185s ago: executing program 3 (id=2540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) 2.55576425s ago: executing program 0 (id=2541): syz_emit_ethernet(0xac, &(0x7f0000000240)={@remote, @empty, @void, {@x25={0x805, {0x3, 0x1, 0x1f, "4632383ab176c63e4a2126a9bd37fad676d45d350e64f381e55ffb6946f63985554d65cf53998c0712bd8762bbc57cee848190b20f237b4c58a8de169b461cc064e77bb0c6c8d0721a7a6ca45230904006c81b276f4fecf0391b21b520f871e73a16313cfe8d035cdc6a1af6c59820b603978fc8cca7846dca5b24c9e9b10f0666a7d50852b37c3935656cd702423cccd6f04c5c338404f3030808"}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) socket$inet6(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x26020480) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x401}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="611570000000000061136c0000000000bfa000000000000014000000ee0016055e03010000000000160500000001000069163e0000000000bf07000000000000260507000fff07206706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x128, 0x2, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFCTH_TUPLE={0x98, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x759}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x128}}, 0x40) 2.492867576s ago: executing program 3 (id=2542): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 2.266104618s ago: executing program 3 (id=2544): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000005, 0x6e073, 0xffffffffffffffff, 0x2000) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x2d) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40840}, 0x800) (async) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}], 0x1, 0x24040800) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r8}, 0x10) (async) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$NFT_MSG_GETRULE(r6, 0x0, 0x24040080) (async, rerun: 64) connect$llc(r9, 0x0, 0x0) (async, rerun: 64) recvmmsg(r9, 0x0, 0x0, 0x2, 0x0) 2.236248326s ago: executing program 0 (id=2545): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000030c0)=ANY=[@ANYBLOB="28000000120001000000008100000000100000000c0035000000000000000000080031"], 0x28}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40054}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{r1}, 0x3, 0x2, 0x1}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000012c0)={0x684, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x52}}}}, [@NL80211_ATTR_TX_RATES={0x1e8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8, 0x2, 0x32, 0xff, 0xe, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x2, 0x4}, {0x7, 0x8}, {0x0, 0x4}, {}, {0x0, 0xa}, {0x4, 0x6}, {0x7, 0xa}, {0x6}, {0x3, 0x5}, {0x4, 0x5}, {0x5, 0x4}, {0x5, 0xa}, {0x1, 0x9}, {0x0, 0x1}, {0x7, 0x7}, {0x3, 0x8}, {}, {0x6, 0x3}, {0x0, 0x3}, {0x0, 0x1}, {0x7, 0x9}, {0x2, 0x3}, {0x4, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x7}, {0x4, 0x8}, {0x0, 0x5}, {0x1, 0x1}, {0x6, 0x2}, {0x0, 0x1}, {0x0, 0x9}, {0x7, 0x16}, {0x0, 0x1}, {0x7, 0xa}, {0x4, 0x3}, {0x3, 0x7}, {0x1, 0x8}, {0x3, 0xa}, {0x5, 0x5}, {0x1, 0x2}, {0x7, 0x6}, {0x5, 0x3}, {0x1, 0x1}, {0x6, 0x4}, {0x0, 0x9}, {0x1, 0x5}, {0x4, 0x6}, {0x3, 0x7}, {0x4, 0x4}, {0x4, 0x9}, {0x1, 0x6}, {0x7, 0x4}, {0x1, 0x9}, {0x0, 0x7}, {0x2}, {0x6, 0x8}, {0x1, 0x8}, {0x0, 0xa}, {0x0, 0x2}, {0x2, 0x4}, {0x6, 0x4}, {0x1, 0x5}, {0x6, 0x4}, {0x4, 0x2}, {0x5, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3b13, 0x8000, 0x40, 0xdb, 0x8, 0xa4f, 0xd7]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xc, 0x2e, 0x71e09259938ab7f9, 0x18, 0xb, 0x6c, 0x4, 0xbb8f3072544b4fb1, 0x5, 0x48, 0x12, 0x2, 0xc, 0xb, 0xb, 0xc, 0x1b, 0x1, 0x12, 0x3, 0x0, 0x2]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x3}, {0x0, 0x1}, {0x7, 0x1}, {0x1, 0x8}, {0x0, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x1, 0x8}, {0x2, 0x8}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0xa}, {0x3, 0x5}, {0x4, 0x4}, {0x6, 0x1}, {0x0, 0x9}, {0x6, 0x6}, {0x0, 0xa}, {0x4, 0x2}, {0x3, 0x3}, {0x1, 0x5}, {0x7, 0xa}, {0x4, 0x8}, {0x7}, {0x2, 0x9}, {0x5, 0x9}, {0x7, 0x6}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x8001, 0x3, 0x7f, 0x1ff, 0xf, 0x46]}}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x5}, {0x4, 0x9}, {0x5, 0x9}, {0x1, 0xa}, {0x2, 0x6}, {0x3, 0x2}, {0x7, 0x2}, {0x6, 0x4}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x7}, {0x7, 0x1a}, {0x4, 0x6}, {0x5, 0x6}, {0x3, 0xa}, {0x5, 0x6}, {0x5, 0x9}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x8}, {0x3, 0x2}, {0x7}, {0x1, 0x3}, {0x1, 0x1c}, {0x3, 0x1}, {0x1, 0x2}, {0x5, 0x6}, {0x4, 0x9}, {0x4, 0x1}, {0x0, 0x8}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x5}, {0x6, 0x3}, {0x3, 0x4}, {0x2}, {0x5, 0x5}, {0x7, 0x9}, {0x1}, {0x7, 0xa}, {0x4, 0x6}, {0x0, 0x1}, {0x1, 0x2}, {0x5, 0x7}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x8}, {0x5, 0xa}, {0x5, 0x5}, {}, {0x5}, {0x2, 0x1}, {0x2}, {0x6, 0x3}, {0x5, 0x8}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x4}, {0x7, 0x3}, {0x6, 0x5}, {0x1, 0x8}, {0x7, 0x5}, {0x7, 0x8}, {0x7, 0x8}, {0x0, 0x6}, {0x3, 0x8}, {0x2, 0x4}, {0x5, 0x4}, {0x5, 0x7}, {0x1, 0x3}, {0x1, 0x2}, {0x0, 0x7}, {0x5, 0x2}, {0x1, 0x9}, {0x7, 0x4}, {0x3, 0x5}, {0x5, 0x1}, {0x7, 0x8}, {0x2, 0xa}, {0x3, 0xa}, {0x4, 0x4}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x0, 0x2}, {0x7, 0x9}, {0x5, 0x5}, {0x6, 0x6}, {0x5, 0x8}, {0x4, 0x1}, {0x6, 0x4}, {0x4, 0x5}, {0x2, 0x2}, {0x6, 0xa}, {0x7, 0x6}, {}, {0x5, 0x7}, {}, {0x2, 0x3}, {0x2, 0x5}, {0x2, 0x4}, {0x3, 0x4}, {0x0, 0x2}, {0x7, 0x9}, {0x4, 0x2}, {0x7, 0x8}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{}, {0x6, 0x1}, {0x4, 0x8}, {0x2, 0x6}, {0x0, 0x2}, {0x4, 0x5}, {0x0, 0x1}, {0x6, 0x5}, {0x6}, {0x3}, {}, {0x2}, {0x4, 0x7}, {0x3, 0x2}, {0x5, 0x6}, {0x5, 0x4}, {0x1, 0x6}, {0x1}, {0x6, 0x2}, {0x2, 0x6}, {0x7, 0x5}, {0x1, 0xa}, {0x2, 0x7}, {0x3, 0x4}, {0x6, 0x6}, {0x6, 0x6}, {0x5, 0x7}, {0x2, 0xa}, {0x1, 0x3}, {0x5, 0x7}, {0x4, 0xa}, {0x3, 0x7}, {0x2, 0x1}, {}, {0x6, 0x4}, {0x0, 0x1}, {0x2, 0x9}, {0x3, 0x5}, {0x1, 0x9}, {0x6, 0x2}, {0x5, 0x4}, {0x1, 0x3}, {0x1, 0xa}, {}, {0x1, 0x7}, {0x6, 0x2}, {0x3, 0x8}, {0x4, 0x8}, {0x2, 0x2}, {0x3, 0x2}, {0x5}, {0x0, 0x5}, {0x2, 0x5}, {0x5, 0x2}, {0x5, 0x1}, {0x6, 0xa}, {0x4, 0x6}, {0x5, 0x8}, {0x0, 0x2}, {0x5, 0x3}, {0x3, 0x7}, {0x2, 0x3}, {0x0, 0x7}, {0x5, 0x9}, {0x7, 0x3}, {0x4, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x8, 0x7, 0x60, 0x8, 0x2, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x0, 0x4, 0x620b, 0x9, 0xc62, 0x7fff]}}]}]}, @NL80211_ATTR_TX_RATES={0x2dc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x9, 0x401, 0x8, 0x5, 0xfff, 0x1000]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x9}, {0x1, 0x8}, {0x2, 0x1}, {0x7, 0x9}, {0x4, 0xa}, {0x6, 0x9}, {0x5, 0x6}, {0x3, 0x7}, {0x0, 0xa}, {0x3, 0x6}, {0x1, 0x3}, {0x3, 0x8}, {0x4, 0x2}, {0x7, 0x7}, {0x0, 0xa}, {}, {0x6, 0x1}, {0x7, 0x8}, {0x2, 0x5}, {0x3, 0xa}, {0x5, 0x1}, {0x1}, {0x0, 0x9}, {0x1, 0x6}, {0x1, 0x6}, {0x5, 0x5}, {0x0, 0x2}, {0x7, 0x9}, {0x3, 0x6}, {0x4, 0x9}, {0x2, 0x1}, {0x7}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x7, 0x4}, {0x4, 0x7}, {0x2, 0x8}, {0x0, 0x3}, {0x3, 0x6}, {0x1, 0x1}, {0x1, 0x7}, {0x4, 0x4}, {0x6, 0x4}, {0x3, 0x3}, {0x0, 0x6}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0x2}, {0x4, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x0, 0x8}, {0x7, 0x1}, {0x3, 0x7}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x2}, {0x6, 0x1}, {0x7, 0x2}, {0x1, 0x8}, {0x4, 0xa}, {0x4, 0x7}, {0x6, 0x8}, {0x0, 0x4}, {0x2, 0x5}, {0x5, 0xa}, {0x5, 0x8}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x3, 0x8}, {0x1, 0x6}, {0x1, 0x1}, {0x7, 0x9}, {0x2, 0x5}, {0x0, 0x1}, {0x3, 0x6}, {0x0, 0x8}, {0x7, 0x2}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x7}, {0x2, 0x5}, {0x0, 0x4}, {0x2, 0x3}, {0x6, 0x3}, {0x6, 0x6}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0xa}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x5}, {0x5}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x3}, {0x2, 0x2}, {0x3, 0xa}, {0x1, 0xa}, {0x6, 0x9}, {0x1, 0x3}, {0x1, 0x3}, {0x5, 0x9}, {0x4, 0x9}, {0x0, 0x5}, {0x4, 0xa}, {0x6}, {0x4, 0x7}, {0x4}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x0, 0x9}, {0x1}, {0x3, 0xa}, {0x7, 0x4}, {0x1, 0x5}, {0x6, 0xa}, {0x4, 0x8}, {0x0, 0x2}, {0x0, 0x9}, {0x4, 0x9}, {0x0, 0x9}, {0x6, 0x3}, {0x6, 0x3}, {0x6, 0x8}, {0x3, 0x7}, {0x3, 0x4}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1d2, 0x738, 0x9, 0x7, 0x180, 0x6, 0x5fa8, 0x1b]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1516, 0xc, 0x8, 0x4, 0x8, 0x0, 0x7]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x4, 0x7}, {0x6, 0x3}, {0x4, 0xa}, {0x4, 0x4}, {0x1}, {0x6, 0x7}, {0x3, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x7, 0xa}, {0x4, 0x3}, {0x3, 0x7}, {0x4, 0x1}, {0x7, 0x3}, {0x4, 0x9}, {0x1, 0x7}, {0x3, 0x3}, {0x5, 0xa}, {0x4, 0x3}, {0x0, 0xa}, {0x5, 0x9}, {0x0, 0x7}, {0x7}, {0x1, 0x7}, {0x5, 0x3}, {0x5, 0x3}, {0x7, 0x6}, {0x1, 0x7}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x3}, {0x3, 0x9}, {0x0, 0x9}, {0x3, 0x7}, {0x2, 0x4}, {0x6, 0x5}, {0x5, 0x9}, {0x6, 0x3}, {0x5, 0x6}, {0x0, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x5, 0x6}, {0x0, 0x9}, {0x3}, {0x0, 0x4}, {0x2}, {0x4, 0x1}, {0x6, 0x6}, {0x6, 0x1}, {0x1, 0x1}, {0x4, 0x8}, {0x3, 0x2}, {0x2, 0x7}, {0x0, 0x4}, {0x1, 0x6}, {0x5, 0x1}, {0x0, 0x4}, {0x5, 0x7}, {0x4, 0x3}, {0x7, 0x9}, {0x6, 0x5}, {0x1, 0x7}, {0x5}, {0x0, 0x4}, {0x5, 0x5}, {0x6, 0x2}, {0x1, 0x7}]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0xf, 0x3ff, 0xc, 0x20, 0xffff, 0xfffe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2f01, 0x4, 0x3, 0xe4, 0x7, 0xfff8, 0x0, 0x8]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x7, 0x8000, 0xab, 0x0, 0x88, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x5, 0xd, 0x6, 0x9, 0x2, 0x800, 0x2]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x3, 0xb, 0x7e, 0x30, 0x48, 0x9, 0x36, 0x4, 0x3, 0x9, 0x30, 0xb, 0x5f10f9f645a220b5, 0x48, 0x9, 0x48, 0x6, 0x2, 0x48, 0x12, 0x48, 0xc, 0x3, 0x1b, 0x48, 0x6, 0x36, 0xb, 0x6, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6, 0x3, 0x12, 0x3, 0x36, 0x3, 0x16, 0x12, 0x24, 0x6, 0x1b, 0x9, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x2, 0x4}, {0x6, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x4, 0x3}, {0x3, 0x1}, {0x5, 0x5}, {0x5, 0x1}, {0x7, 0x1}, {0x2}, {0x6, 0x7}, {0x1}, {0x0, 0x7}, {0x4, 0x1}, {0x2, 0x3}, {0x1, 0x8}, {0x3, 0x1}, {0x5, 0x7}, {0x4, 0x3}, {0x7, 0x8}, {}, {0x4, 0x4}, {0x5, 0xa}, {0x5, 0x9}, {0x6, 0x3}, {0x0, 0x9}, {0x1, 0x7}, {0x6, 0x7}, {0x7, 0xa}, {0x5, 0x7}, {0x7, 0x9}, {0x0, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x6, 0x8}, {0x1, 0x6}, {0x1, 0x6}, {0x2, 0x2}, {0x1, 0x9}, {0x4, 0x1}, {0x1, 0x9}, {0x0, 0x4}, {0x0, 0x7}, {0x1, 0x3}, {0x5, 0x6}, {0x4, 0x2}, {0x4}, {0x0, 0x7}, {0x1, 0x6}, {0x6, 0x6}, {0x6, 0x3}, {0x6, 0x1}]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x2}, {0x0, 0x6}, {0x7, 0x4}, {0x6, 0x2}, {0x6}, {0x1, 0x9}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0x4}, {0x6, 0x7}, {0x6}, {0x7}, {0x7, 0x1}, {0x0, 0x7}, {0x2, 0x9}, {0x5, 0x4}, {0x4, 0x3}, {0x2, 0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x7, 0x9}, {0x4, 0x8}, {0x0, 0xa}, {0x4}, {0x3, 0x5}, {0x6, 0x7}, {0x0, 0x1}, {0x0, 0x4}, {0x3, 0xa}, {0x2, 0x5}, {0x6, 0x8}, {0x2, 0x4}, {0x5, 0x4}, {0x1, 0x7}, {0x5, 0x1}, {0x3, 0x5}, {0x4, 0x5}, {0x4}, {0x1, 0x9}, {0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x1, 0x9}, {0x4, 0xa}, {0x0, 0x3}, {0x1, 0xa}, {0x5, 0x8}, {0x6, 0x7}, {0x7, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_TX_RATES={0x180, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x892b, 0x8, 0x6, 0x5, 0x92f, 0x7d, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff2, 0x7, 0xbc, 0x6, 0x2, 0x0, 0x7f9, 0x4]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6, 0x4, 0x18, 0x9, 0x1, 0x6c, 0x18, 0x4, 0x25, 0x6, 0x3, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x100, 0x401, 0x2, 0x2, 0x8, 0x4, 0xf3]}}]}, @NL80211_BAND_60GHZ={0xfc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x5, 0x9}, {0x5}, {0x6, 0xa}, {0x6, 0xa}, {0x0, 0x6}, {0x7, 0x1}, {0x0, 0x3}, {0x4, 0x4}, {0x3, 0x5}, {0x5, 0x3}, {0x0, 0x9}, {0x7, 0x5}, {0x4}, {0x0, 0x6}, {0x6, 0x9}, {0x2, 0xa}, {0x5, 0x3}, {0x0, 0x6}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x60, 0x48, 0x1, 0x9, 0x60, 0x18, 0x36, 0x5a, 0x24, 0x5, 0xb, 0x24, 0x36, 0x2, 0x16, 0x2, 0x6c, 0x12, 0x7e, 0x6c, 0x1, 0x48, 0x24, 0x24, 0x9, 0x36, 0x2, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x6, 0x8, 0x2, 0x8, 0x1000, 0xa1d]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x3, 0x1}, {0x5, 0x5}, {0x1, 0x5}, {0x0, 0x4}, {0x0, 0x7}, {0x7, 0x1}, {0x5, 0x8}, {0x5, 0x9}, {0x7, 0x9}, {0x0, 0x3}, {0x1, 0x5}, {0x6, 0xa}, {0x7}, {0x3, 0x8}, {0x1, 0x6}, {0x2, 0x6}, {0x2, 0x6}, {0x0, 0x3}, {0x4, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x0, 0x1}, {0x6, 0x6}, {0x1, 0xa}, {0x5, 0x9}, {0x4, 0x1}, {0x1}, {0x6, 0x9}, {0x7, 0x7}, {0x1, 0x1}, {0x6}, {0x5, 0x2}, {0x7, 0x5}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x7}, {0x3, 0x9}, {0x3, 0x5}, {0x1, 0x9}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x8}, {0x4}, {0x0, 0x4}, {0x1, 0x4}, {0x3, 0x4}, {0x0, 0x7}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0x4}, {0x1}, {0x1, 0x5}, {0x1}, {0x7, 0x1}, {0x6, 0x3}, {0x7, 0x2}, {0x5, 0x6}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x5}, {0x1, 0x4}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7}, {0x3, 0x7}, {0x0, 0x1}, {0x6, 0x7}, {0x6, 0x6}, {0x4, 0x9}, {0x2, 0x4}, {0x0, 0x6}, {0x4}, {0x3, 0x3}, {0x2}, {0x1, 0x8}, {0x6}, {0x3, 0x7}, {0x4, 0x3}, {0x7, 0x7}, {0x5, 0x6}, {0x4, 0x9}, {0x6, 0x8}, {0x1, 0x7}, {0x5, 0x2}, {0x4, 0x1}, {0x1, 0x7}, {0x7, 0x6}, {0x1, 0x3}, {0x5, 0x18}, {0x1, 0x7}, {0x7, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x3, 0x6}, {0x6}, {0x6, 0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x8}, {0x3}, {0x3, 0x5}, {0x0, 0x4}, {0x4, 0x9}, {0x2, 0x7}, {0x1}, {0x6, 0x3}, {0x2, 0x9}, {0x3, 0xa}, {0x2, 0x9}, {0x7, 0x7}, {0x2, 0x9}, {0x7, 0xa}, {0x2, 0x2}, {0x0, 0x9}, {0x4, 0xa}, {0x7, 0x7}, {0x6, 0x6}, {0x4, 0x6}, {0x5}, {0x7, 0xa}, {0x6, 0x1}, {0x4, 0x2}, {0x6, 0x6}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0x7}, {0x6, 0x5}, {0x1, 0x6}, {0x5, 0x6}, {0x7, 0x4}, {0x4, 0x5}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x8, 0x5, 0xe9, 0x4, 0x5, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7}]}]}]}, 0x684}, 0x1, 0x0, 0x0, 0x24000400}, 0x4) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000000)={0x4ea5, {0x24, 0x8000, 0x4, 0x80, 0x400}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x340, 0x340, 0x0, 0x340, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x240008d0}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec1d39e537c4c3060c60100106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) r9 = socket$kcm(0x29, 0x2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x14, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}}, 0x4084) sendmmsg$inet(r9, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x11, 0x2, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x3, 0x100}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, r1}, 0x94) 2.068076692s ago: executing program 1 (id=2547): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) 1.863796354s ago: executing program 0 (id=2548): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='mm_lru_insertion\x00', r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000040)={0x6, @local, 0x4e20, 0x3, 'sh\x00', 0x5, 0xa69e, 0x53}, 0x2c) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 1.579788362s ago: executing program 0 (id=2550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req={0x2, 0xb, 0x187700, 0x4}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x6c0800, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r5, 0x29, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x1, 0x3}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x36, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20) r7 = socket$inet6(0xa, 0x3, 0x81) setsockopt$inet6_MCAST_LEAVE_GROUP(r7, 0x29, 0x2d, &(0x7f0000001840)={0x3, {{0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x106}}}, 0x88) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) write$rfkill(r1, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1.391189159s ago: executing program 2 (id=2551): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x400, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x4, 0x8, 0xfffff018}, {0x6, 0x9, 0x0, 0x80}]}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000000)="0a000200010078", 0x7) 1.201812956s ago: executing program 2 (id=2552): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8000}, 0x1c) sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0xfdff) sendmmsg$unix(r4, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)="c478cbcda6d4acaef30a37850313764486f571303658991df01c26b81065dfc322239acbc42692144ab23a3330ed2d5ff7653c5b714e479c75fcc8e3a2e49328529c9152ac9f63403550a64ddf14ac85a9610df39b3d81ea65e63edda6574f7f702fdfe7a0413f6b50ac066129cadc211e780971a72f4d15f7ccdade40e3eaa4f204e2fd1caa64733900a8cf04c1ff7ce23043c3a73c4275628af4699409ae97b2111c8b255bcece1db7c0556e3f50f074b5dcb5a13bad48dce0a82e245b39", 0xbf}, {&(0x7f0000000580)="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", 0xff}], 0x2, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='\x00I\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x40}}, {{&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000d40)=[{&(0x7f00000007c0)="8e99e1feffb3e4f062c684133232a0fffc89ec8de01908202e7e495fbba849d8b4c14f13b0976bab0ad2038e142d1cc2e6aa3b6998103a1a7e1cc8349de159a55dedd5fb7df40142550c92f81508a72425b1a791d964815ac5b41fd7ab0f4bc752999ac90ac1384e6d2275c74a0f0d523bbf", 0x72}, {&(0x7f0000000840)="4dfb3ed0411f35d894ab3d576280fa8883f26954b02a0164e18afebf", 0x1c}, {&(0x7f0000000880)="a6d97e341d46ea5895c0f08ba351a78f012b08a0464b04543b19f04940ce3b4e3d024e77def452d2bd70f194a6bb75eb1c6477eef83f89eba4139b893f269194830632741f623bfb0bf5e55756b4f9593b9222b20ed61fe00d0035a62d521754e17d7b024505dfbebca26d94974b615d381d09a2cc004c6e505929ab7c3c3194101b3e0a4c3094a1cbf2880f3f4c796143bdcfaa5cdbc7263f63d66d34ed8bbb124181da6b8b7c6c79308bd6954ffb76d3c3bfc13c5f7c3bff4210abfb9b2d659f8c5e457e57c20815d06873426d86ea05f35517939d078724b2b52a", 0xdc}, {&(0x7f0000000a00)="32775e50ec3f3e3ea776a26ac2e35c89fcd28ce21e8441523c54ca9f3696ced691d260cc9cb42b640af6312d9cc7080282dd2bb3ae2dbfab6cf6fb910af84598b9276d411ca74a760df776819e551d4a800fac620dfa1c0eeeff40c80f19939f0d1a795f72bd7bd5fee3e820c2b0f8f7270600004f87ae4f5f8ffb4a2d44c1b866ab08a0ee50e8056a8a261aed000000000000", 0x93}, {&(0x7f0000000ac0)="72a96271337c84d906b8e18bd9c74152be202d344101bca09158e0e3f961d9f78f8426f97e5fe6790f02114d9c57b4451cec7ca6ad3ee095ca263af9dc2246ef47760b0806d7bb0f57d5bbce537d984825e1fb16b49e44dc9a2c19837dc10c026af53bb5cf64fc2ffa67030e148396dcfcc2306d8a6aebe21044cae3a8dd5fe6ac986f6efe3b75db9f2fde10ac507d95d1520dbe973292c632fbfff87382a85900188b8550d960d55085d1785656bf955849656912d3a9462b17bc545d5c22b58f5a29a0f149d9e8438f0b7613cf2508569a45a3350c3f5013d80aa1b8b43f250beb", 0xe2}, {&(0x7f0000000bc0)="2bc94dd650aac7271a2e3586da81a9f24e59487d51130d0bd0711f415189dffd9d3df4772f8a9e239b0067b52f195305d938f9c5231c5979d206ca3e6233c9be81284e34145e125818c315f29a790b51d513e0d24b943400aa2dd42629edb24ddb90f8eaaba4b5fb212825ae0318799c9e221c6d90f2c5701f7ee4b7763b24c130db7571aa47588ec9f2a0a435e8c3c40e", 0x91}, {&(0x7f0000000c80)="3d24d3b8705f5d033c2606dbbf57779e23854cbe1368dc5225c9fa45938b715173f29ed1e9affad0d1951d6993cebf2cd1875e3ef2da6b6216e8f4f89246e6bf56782690e9f4c61d7cfb1b93a5cf3d79a3148fe13f7aa6f7e2967d6b917f70b61920ddd7df6cda33bb8c19482543bd5a0a09383d7fbc42a8e917daf7beea75bacc4b3cd19e9bcc8ba32402b89fb06643", 0x90}, {&(0x7f0000000980)='\fK', 0x2}], 0x8, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x68, 0x10000010}}], 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r3, 0x8503}], 0x1, 0x0, 0x0, 0x0) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@gettfilter={0x4c, 0x2e, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0x6, 0xf}, {0xb, 0x7}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}, {0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x8}]}, 0x4c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1, 0x0, 0x1f}, 0x10) 1.083922171s ago: executing program 1 (id=2553): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffedf}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) socket(0x1, 0x803, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000040)) 1.083317357s ago: executing program 3 (id=2554): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x9, 0x3, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008000) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xdc, 0x13, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0xbb, 0x8, "192c1f79c1150fc96319f51dadb51b7001b3bc662a380c3019f75443b7cb06b6bda36a199996274a483e1ab475b2272b96afc2b375359b34c8d0c2760afd0a592b2d701e678d3e201cefd7a1c31c7dcfdc2641d33d0d1864cb94324b3a685b2a048f4346f2b42e5385acf18d464323650554232835110a5cc21b11ae662f6e361bea2f0e788c0c91b8cefdadb35aa99b6c515ed5ad273ebd883c7dcca312f04856366fdfc6fb5aad12dfb5c090841f867c766f9a3fc8d3"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xf4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x60400ac}, 0x0) 983.958337ms ago: executing program 2 (id=2555): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r1, &(0x7f0000000040)="9882340731b5122a8856700eb6df7d3f2f148a9e4a15ec2eb86462000000000000000064de099ca6403ec90f39c2317b5fdcbe7a749e59de47e48e55697e866eb36ae52faec6f85576f6c61b3d450df6dd6bb8926e975211e99ccb5f5d92fce928ffcb9fe2ca1aa212dbdb0ac49bef89b5120bba3692badc54", 0x79) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x4e22, @multicast2=0xe0000001}}}, 0x88) close(0x3) socket$netlink(0x10, 0x3, 0x12) 846.430771ms ago: executing program 3 (id=2556): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000002c80)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x1000, 0x5, 0x5, 0x401, 0x8}, &(0x7f00000008c0)=0x98) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="4800000014e8756c00190d9ebdeb75fd0d8c46806b0a8d9d6e4610736c90dad62c84753ab3207a800c00090f0000b11ac301901c5a6f24212103ca00000f7f89000000200000004a2471083ec6811778581acb6c0101", 0x56}], 0x1) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x1800, 0xf90d, 0x1}, 0x20) 759.81704ms ago: executing program 2 (id=2557): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x1, 0x70bd2b, 0x25dfdbf4, {0x0, 0x0, 0x0, r3, 0x20011, 0x1923b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1000a7a}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, &(0x7f0000000200)={0x2, @none={0x300, 0xffff}}, 0x14) 594.210156ms ago: executing program 2 (id=2558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xfc, 0x6, 0xa, 0x401, 0x0, 0xffffffff, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xd0, 0x4, 0x0, 0x1, [{0xbc, 0x1, 0x0, 0x1, @target={{0x9}, @val={0xac, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x95, 0x3, "c80573363d249bc6f03767ac999199972449921a3ca3499b5fd16c96923b3e9549952a62db79382630de7d7f71a0c740e994cc05eb283717cad04831cadad920bca360acae0b79c755d40968ad3fd7c80a4a87f0a6670ad7a53e5aaddf0b5041a557ec7b744930318058c5987b2893df31413cdd32ccbf907f81b8b7e99410877fe3e0f55c4f2f953cf10fdbb88ac88d44"}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x124}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 97.62694ms ago: executing program 1 (id=2559): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000080)={@rand_addr, @multicast1, @private}, &(0x7f0000000100)=0xc) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r2, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x10, &(0x7f0000000000)=r6, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1, &(0x7f0000000140)=@raw=[@alu={0x7, 0x1, 0x3, 0x3, 0x9, 0xc, 0x10}], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x25, r6, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x4, 0x9, 0x2000000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0xe, 0xb}], 0x10, 0x1}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd28, 0x1ff, {0x0, 0x0, 0x0, r2, {0xfff2}, {0xb, 0xffff}, {0x3, 0xfff1}}}, 0x24}}, 0x20000010) 0s ago: executing program 2 (id=2560): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x6}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r1 = socket(0x18, 0x80000, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) readv(r2, &(0x7f0000000740)=[{&(0x7f0000000280)=""/155, 0x9b}], 0x1) sendfile(r3, r2, 0x0, 0xf03a0005) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)={@private=0xa010100, @multicast1, 0x1, 0x1, [@empty]}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYRES8=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x10, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x6}, 0x94) kernel console output (not intermixed with test programs): 662][ T8079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.534'. [ 180.917838][ T8063] tipc: Resetting bearer [ 180.953975][ T8063] tipc: Disabling bearer [ 181.200624][ T8091] netlink: 'syz.4.542': attribute type 3 has an invalid length. [ 181.224706][ T52] Bluetooth: hci4: link tx timeout [ 181.230771][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 181.241808][ T8091] netlink: 'syz.4.542': attribute type 1 has an invalid length. [ 181.253657][ T8091] NCSI netlink: No device for ifindex 0 [ 181.357576][ T8103] wg1 speed is unknown, defaulting to 1000 [ 181.644372][ T8108] wg1 speed is unknown, defaulting to 1000 [ 182.396452][ T8147] netlink: 'syz.3.554': attribute type 1 has an invalid length. [ 182.574557][ T8108] netlink: 'syz.1.546': attribute type 6 has an invalid length. [ 183.011840][ T8169] netlink: 'syz.2.559': attribute type 1 has an invalid length. [ 183.122753][ T8169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.170466][ T8161] ipvlan2: entered allmulticast mode [ 183.176133][ T8161] bond3: entered allmulticast mode [ 183.264234][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 183.369086][ T8169] bond3: (slave gretap1): making interface the new active one [ 183.376840][ T8169] gretap1: entered allmulticast mode [ 183.390459][ T8169] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 183.472544][ T8185] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 183.684612][ T8195] IPVS: set_ctl: invalid protocol: 15 172.20.20.187:20004 [ 183.706743][ T8193] wg1 speed is unknown, defaulting to 1000 [ 183.894661][ T30] audit: type=1800 audit(1760789671.572:3): pid=8202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.569" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 183.898993][ T8202] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 183.935407][ T8202] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 183.946851][ T8202] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 183.979400][ T8204] bond4: option arp_all_targets: invalid value (3) [ 184.000652][ T8204] bond4 (unregistering): Released all slaves [ 184.047720][ T8212] netlink: 'syz.3.571': attribute type 1 has an invalid length. [ 184.111201][ T8212] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.168943][ T8215] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.176900][ T8215] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 184.196568][ T8215] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 184.276269][ T8212] veth3: entered promiscuous mode [ 184.292624][ T8212] bond2: (slave veth3): Enslaving as an active interface with a down link [ 184.307693][ T8226] __nla_validate_parse: 4 callbacks suppressed [ 184.307713][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 184.335665][ T8228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 184.419876][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 184.487491][ T8232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.573'. [ 184.595004][ T8226] team0: Port device team_slave_0 removed [ 184.618724][ T7104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.642685][ T7104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.751059][ T8232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.573'. [ 184.764238][ T8235] netlink: 244 bytes leftover after parsing attributes in process `syz.1.573'. [ 184.945805][ T8239] netlink: 200 bytes leftover after parsing attributes in process `syz.4.576'. [ 185.689886][ T8271] netlink: 'syz.1.587': attribute type 1 has an invalid length. [ 185.887538][ T8281] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 185.899853][ T8281] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 185.919653][ T8281] bond1: (slave vti0): making interface the new active one [ 185.939752][ T8281] bond1: (slave vti0): Enslaving as an active interface with an up link [ 186.009421][ T5936] IPVS: starting estimator thread 0... [ 186.044311][ T8292] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 186.076458][ T8292] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 186.077192][ T8293] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 186.100466][ T8293] bond4 (unregistering): Released all slaves [ 186.145367][ T8303] IPVS: using max 26 ests per chain, 62400 per kthread [ 187.117452][ T8341] netlink: 'syz.4.600': attribute type 1 has an invalid length. [ 187.118724][ T8340] netlink: 'syz.4.600': attribute type 1 has an invalid length. [ 188.010912][ T8341] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 188.017034][ T8340] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 188.199087][ T8350] tipc: Enabled bearer , priority 0 [ 188.237273][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.603'. [ 188.268646][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.603'. [ 188.269692][ T8347] tipc: Resetting bearer [ 188.296191][ T1103] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.305957][ T8347] netlink: 72 bytes leftover after parsing attributes in process `syz.0.602'. [ 188.326631][ T1103] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.392869][ T146] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.467893][ T146] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.557783][ T8366] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 188.632286][ T8350] tipc: Disabling bearer [ 188.703554][ T8349] tipc: Enabled bearer , priority 0 [ 189.023829][ T8390] geneve3: entered promiscuous mode [ 189.069893][ T1103] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.177531][ T8348] tipc: Disabling bearer [ 189.249167][ T1103] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.275922][ T1103] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.297705][ T1103] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.352527][ T8407] wg1 speed is unknown, defaulting to 1000 [ 189.393316][ T8414] netlink: 'syz.0.616': attribute type 13 has an invalid length. [ 189.744895][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.752932][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.789466][ T8424] __nla_validate_parse: 2 callbacks suppressed [ 189.789488][ T8424] netlink: 32 bytes leftover after parsing attributes in process `syz.1.617'. [ 190.269190][ T8414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.315665][ T8414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.653163][ T8424] netlink: 48 bytes leftover after parsing attributes in process `syz.1.617'. [ 190.676804][ T8424] netlink: 48 bytes leftover after parsing attributes in process `syz.1.617'. [ 190.693632][ T146] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.712943][ T146] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.753857][ T146] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.772127][ T146] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.043175][ T8442] netlink: 40 bytes leftover after parsing attributes in process `syz.1.622'. [ 191.260237][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.628'. [ 191.498672][ T8469] wg1 speed is unknown, defaulting to 1000 [ 192.229958][ T8483] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 192.303517][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.635'. [ 192.348683][ T8489] bridge0: entered promiscuous mode [ 192.354459][ T8489] macsec2: entered allmulticast mode [ 192.414609][ T8489] bridge0: entered allmulticast mode [ 192.438979][ T8495] netlink: 'syz.1.636': attribute type 1 has an invalid length. [ 192.458552][ T8495] NCSI netlink: No device for ifindex 0 [ 192.461254][ T8489] bridge0: port 3(macsec2) entered blocking state [ 192.491889][ T8489] bridge0: port 3(macsec2) entered disabled state [ 192.518997][ T8499] sctp: [Deprecated]: syz.2.637 (pid 8499) Use of int in max_burst socket option. [ 192.518997][ T8499] Use struct sctp_assoc_value instead [ 192.539590][ T8496] netlink: 44 bytes leftover after parsing attributes in process `syz.1.636'. [ 192.551113][ T8489] bridge0: left allmulticast mode [ 192.560654][ T8495] netlink: 44 bytes leftover after parsing attributes in process `syz.1.636'. [ 192.567700][ T8489] bridge0: left promiscuous mode [ 192.659974][ T8483] wg1 speed is unknown, defaulting to 1000 [ 192.856236][ T8508] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 192.987957][ T8512] vlan2: entered allmulticast mode [ 193.108981][ T7103] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.256186][ T8525] netlink: 'syz.0.644': attribute type 58 has an invalid length. [ 193.264101][ T8525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.644'. [ 193.368262][ T8533] netlink: 'syz.4.646': attribute type 1 has an invalid length. [ 193.417122][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 193.436891][ T8535] tipc: Enabling of bearer rejected, failed to enable media [ 193.442355][ T8533] netlink: 'syz.4.646': attribute type 1 has an invalid length. [ 193.689524][ T8533] bond4: entered promiscuous mode [ 193.712301][ T8533] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.931585][ T8569] netlink: 'syz.3.653': attribute type 28 has an invalid length. [ 194.250754][ T8586] netlink: 'syz.1.658': attribute type 39 has an invalid length. [ 194.354145][ T8590] netlink: 'syz.4.660': attribute type 10 has an invalid length. [ 194.386685][ T8590] team0: entered promiscuous mode [ 194.401390][ T8590] team_slave_0: entered promiscuous mode [ 194.429209][ T8590] team_slave_1: entered promiscuous mode [ 194.447689][ T8590] bridge0: port 3(team0) entered blocking state [ 194.454139][ T8590] bridge0: port 3(team0) entered disabled state [ 194.467400][ T8590] team0: entered allmulticast mode [ 194.472998][ T8590] team_slave_0: entered allmulticast mode [ 194.478935][ T8590] team_slave_1: entered allmulticast mode [ 194.492016][ T8590] bridge0: port 3(team0) entered blocking state [ 194.498511][ T8590] bridge0: port 3(team0) entered forwarding state [ 194.530593][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.537365][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.071504][ T8619] __nla_validate_parse: 9 callbacks suppressed [ 195.071525][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 195.628801][ T8619] team0 (unregistering): Port device team_slave_0 removed [ 195.656746][ T8619] team0 (unregistering): Port device team_slave_1 removed [ 195.742839][ T8624] syzkaller1: entered promiscuous mode [ 195.752182][ T8624] syzkaller1: entered allmulticast mode [ 196.013844][ T8633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.671'. [ 196.143187][ T8641] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 196.316902][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.676'. [ 196.329954][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.676'. [ 196.510930][ T8659] netlink: 6 bytes leftover after parsing attributes in process `syz.1.678'. [ 196.560229][ T8659] nbd: must specify at least one socket [ 196.599553][ T8655] netlink: 6 bytes leftover after parsing attributes in process `syz.1.678'. [ 196.647045][ T8655] nbd: must specify at least one socket [ 196.991913][ T8677] netlink: 'syz.2.685': attribute type 21 has an invalid length. [ 197.219836][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.688'. [ 197.327483][ T8691] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.405497][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 197.532746][ T30] audit: type=1800 audit(1760789685.202:4): pid=8697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.689" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=776 res=0 errno=0 [ 197.988081][ T8718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.695'. [ 198.312054][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.320286][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.919234][ T8711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.974629][ T8711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.870957][ T8717] netlink: 24 bytes leftover after parsing attributes in process `syz.3.694'. [ 199.947920][ T812] wg1 speed is unknown, defaulting to 1000 [ 199.948215][ T7103] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.956954][ T812] syz0: Port: 1 Link DOWN [ 199.988163][ T7103] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.007897][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.698'. [ 200.017530][ T7103] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.035296][ T7103] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.078011][ T7103] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.097520][ T7103] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.119705][ T7103] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.144406][ T7103] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.160188][ T8723] wg1 speed is unknown, defaulting to 1000 [ 200.166676][ T8744] netlink: 'syz.4.699': attribute type 4 has an invalid length. [ 200.201359][ T8746] syzkaller0: entered promiscuous mode [ 200.221669][ T8746] syzkaller0: entered allmulticast mode [ 200.354368][ T8746] tipc: Enabled bearer , priority 0 [ 200.455003][ T8745] tipc: Resetting bearer [ 200.569130][ T8745] tipc: Disabling bearer [ 201.253040][ T8799] netlink: 'syz.3.720': attribute type 12 has an invalid length. [ 201.282468][ T8805] netlink: 'syz.0.716': attribute type 1 has an invalid length. [ 201.479474][ T8814] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 201.490927][ T8814] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 201.745838][ T8805] vlan2: entered allmulticast mode [ 201.773657][ T8805] bond1: (slave vlan2): Opening slave failed [ 202.416470][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 202.455002][ T8874] bridge0: port 3(team0) entered disabled state [ 202.525141][ T8881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.734'. [ 202.600018][ T8884] netlink: 'syz.1.735': attribute type 1 has an invalid length. [ 202.675374][ T8874] team0 (unregistering): left allmulticast mode [ 202.682462][ T8874] team_slave_0: left allmulticast mode [ 202.688743][ T8874] team_slave_1: left allmulticast mode [ 202.694813][ T8874] bridge0: port 3(team0) entered disabled state [ 202.706693][ T8874] team_slave_0: left promiscuous mode [ 202.717344][ T8874] team0 (unregistering): Port device team_slave_0 removed [ 202.728160][ T8874] team_slave_1: left promiscuous mode [ 202.739014][ T8874] team0 (unregistering): Port device team_slave_1 removed [ 202.804235][ T8889] netlink: 200 bytes leftover after parsing attributes in process `syz.2.736'. [ 202.814082][ T8889] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 202.822316][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 202.965644][ T8898] netlink: 15 bytes leftover after parsing attributes in process `syz.2.737'. [ 203.403443][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.746'. [ 203.440785][ T8925] ip6gretap2: entered promiscuous mode [ 203.457498][ T8925] ip6gretap2: entered allmulticast mode [ 203.864534][ T8945] netlink: 'syz.0.754': attribute type 46 has an invalid length. [ 204.128277][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.758'. [ 204.227814][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 204.258610][ T8970] dummy0: entered promiscuous mode [ 204.279428][ T8970] dummy0: left promiscuous mode [ 204.301020][ T8973] netlink: 132 bytes leftover after parsing attributes in process `syz.1.760'. [ 204.363044][ T8976] erspan0: entered promiscuous mode [ 204.370341][ T8972] erspan0: left promiscuous mode [ 204.469731][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 204.668464][ T8987] syz.1.765 (8987) used greatest stack depth: 16056 bytes left [ 204.917690][ T9007] tipc: Enabled bearer , priority 0 [ 205.037119][ T9013] syzkaller0: entered promiscuous mode [ 205.077288][ T9013] syzkaller0: entered allmulticast mode [ 205.167401][ T9013] tipc: Resetting bearer [ 205.266038][ T9027] netdevsim netdevsim4: Direct firmware load for þ failed with error -2 [ 205.272771][ T9023] wg1 speed is unknown, defaulting to 1000 [ 205.284569][ T9027] netdevsim netdevsim4: Falling back to sysfs fallback for: þ [ 205.497485][ T9038] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 205.720976][ T9006] tipc: Resetting bearer [ 205.772880][ T9006] tipc: Disabling bearer [ 205.917687][ T9058] netlink: 'syz.2.782': attribute type 9 has an invalid length. [ 206.015667][ T9055] wg1 speed is unknown, defaulting to 1000 [ 206.045450][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.831313][ T9107] tipc: Enabling of bearer rejected, failed to enable media [ 206.848346][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 206.856245][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 206.862752][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 207.231379][ T9134] tipc: Enabling of bearer rejected, failed to enable media [ 207.252512][ T9134] netlink: 'syz.0.799': attribute type 28 has an invalid length. [ 207.298128][ T9134] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.343528][ T9142] tipc: Enabled bearer , priority 0 [ 207.404112][ T9142] syzkaller0: entered promiscuous mode [ 207.410292][ T9142] syzkaller0: entered allmulticast mode [ 207.493242][ T9153] sctp: [Deprecated]: syz.0.805 (pid 9153) Use of int in max_burst socket option. [ 207.493242][ T9153] Use struct sctp_assoc_value instead [ 207.502456][ T9149] wg1 speed is unknown, defaulting to 1000 [ 207.532870][ T9142] tipc: Resetting bearer [ 207.587294][ T9145] __nla_validate_parse: 20 callbacks suppressed [ 207.587316][ T9145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.803'. [ 207.685683][ T9139] tipc: Resetting bearer [ 207.710438][ T9160] x_tables: duplicate underflow at hook 1 [ 207.724808][ T9139] tipc: Disabling bearer [ 208.370941][ T812] IPVS: starting estimator thread 0... [ 208.375861][ T9195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.405423][ T9189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.499140][ T9199] IPVS: using max 23 ests per chain, 55200 per kthread [ 208.667015][ T9213] netlink: 'syz.4.815': attribute type 13 has an invalid length. [ 208.685511][ T9213] netlink: 'syz.4.815': attribute type 17 has an invalid length. [ 208.686618][ T9214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.869028][ T9220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.174091][ T9213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.414027][ T9217] wg1 speed is unknown, defaulting to 1000 [ 209.491501][ T9230] syzkaller0: entered promiscuous mode [ 209.505563][ T9230] syzkaller0: entered allmulticast mode [ 209.528161][ T9230] xt_connbytes: Forcing CT accounting to be enabled [ 209.592793][ T9239] IPVS: set_ctl: invalid protocol: 12 10.1.1.0:20004 [ 209.676683][ T9241] macvtap1: entered promiscuous mode [ 209.687938][ T9241] batadv0: entered promiscuous mode [ 209.707667][ T9241] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 209.723766][ T9241] batadv0: left promiscuous mode [ 209.914766][ T9252] netlink: 152 bytes leftover after parsing attributes in process `syz.2.826'. [ 209.992554][ T9259] netlink: 'syz.0.827': attribute type 4 has an invalid length. [ 210.101849][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'. [ 210.196663][ T9267] netlink: 56 bytes leftover after parsing attributes in process `syz.4.830'. [ 210.210031][ T9266] netlink: 40 bytes leftover after parsing attributes in process `syz.0.829'. [ 210.219739][ T9267] netlink: 19 bytes leftover after parsing attributes in process `syz.4.830'. [ 210.240679][ T9271] netlink: 40 bytes leftover after parsing attributes in process `syz.2.831'. [ 210.241678][ T9267] netlink: 19 bytes leftover after parsing attributes in process `syz.4.830'. [ 210.381657][ T9271] netlink: 48 bytes leftover after parsing attributes in process `syz.2.831'. [ 210.427667][ T9277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.434699][ T9274] wg1 speed is unknown, defaulting to 1000 [ 210.441819][ T9271] openvswitch: netlink: Message has 16 unknown bytes. [ 210.868811][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'. [ 210.882875][ T9292] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 210.892275][ T9292] netlink: 'syz.3.836': attribute type 1 has an invalid length. [ 210.917258][ T9293] netlink: 'syz.2.837': attribute type 21 has an invalid length. [ 211.272096][ T9318] xt_TCPMSS: Only works on TCP SYN packets [ 211.776226][ T9339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.689051][ T9381] netlink: 'syz.1.858': attribute type 13 has an invalid length. [ 212.747735][ T9382] netlink: 'syz.1.858': attribute type 13 has an invalid length. [ 212.867292][ T9386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.082954][ T9393] __nla_validate_parse: 4 callbacks suppressed [ 213.082977][ T9393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.862'. [ 213.146685][ T9404] netlink: 'syz.4.863': attribute type 1 has an invalid length. [ 213.155022][ T9404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.378672][ T9413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 213.389894][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 213.402564][ T9413] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 213.410692][ T9413] netlink: 'syz.1.867': attribute type 2 has an invalid length. [ 213.589386][ T9432] syzkaller1: entered promiscuous mode [ 213.606603][ T9432] syzkaller1: entered allmulticast mode [ 213.630998][ T9430] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 213.662428][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'. [ 213.697256][ T9430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.872'. [ 213.760227][ T9440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.875'. [ 214.315836][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.879'. [ 214.325348][ T9458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.879'. [ 214.573141][ T9466] netlink: 28 bytes leftover after parsing attributes in process `syz.4.883'. [ 214.598057][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.883'. [ 214.953196][ T9474] @0Ù: renamed from bond_slave_1 [ 215.204399][ T9481] sctp: [Deprecated]: syz.0.887 (pid 9481) Use of int in max_burst socket option. [ 215.204399][ T9481] Use struct sctp_assoc_value instead [ 215.654182][ T9505] wg1 speed is unknown, defaulting to 1000 [ 215.660998][ T9509] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 215.671421][ T9509] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 215.702181][ T9506] wg1 speed is unknown, defaulting to 1000 [ 215.847865][ T9522] netlink: 'syz.2.896': attribute type 2 has an invalid length. [ 216.130564][ T9530] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 216.141741][ T9530] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 216.150635][ T9532] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 216.627996][ T9532] netlink: 'syz.3.898': attribute type 2 has an invalid length. [ 216.913603][ T9549] bridge0: entered promiscuous mode [ 216.934133][ T9549] tipc: Enabling of bearer rejected, failed to enable media [ 217.032676][ T9551] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.040227][ T9551] IPv6: NLM_F_CREATE should be set when creating new route [ 217.103530][ T9555] netlink: 'syz.0.907': attribute type 1 has an invalid length. [ 217.285835][ T9566] vlan2: entered promiscuous mode [ 217.315354][ T9566] macvtap0: entered promiscuous mode [ 217.512447][ T9578] wg1 speed is unknown, defaulting to 1000 [ 217.866611][ T9589] wg1 speed is unknown, defaulting to 1000 [ 218.183964][ T9621] __nla_validate_parse: 10 callbacks suppressed [ 218.184027][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'. [ 219.960193][ T9644] sctp: [Deprecated]: syz.0.928 (pid 9644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.960193][ T9644] Use struct sctp_sack_info instead [ 220.002459][ T9637] wg1 speed is unknown, defaulting to 1000 [ 220.169760][ T9653] netlink: 'syz.4.932': attribute type 1 has an invalid length. [ 220.189330][ T9653] netlink: 184 bytes leftover after parsing attributes in process `syz.4.932'. [ 220.579519][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.934'. [ 220.680854][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.939'. [ 221.021644][ T9698] tipc: Enabled bearer , priority 0 [ 221.087914][ T9703] tipc: Resetting bearer [ 221.193989][ T9708] netlink: 24 bytes leftover after parsing attributes in process `syz.1.947'. [ 221.331976][ T9697] tipc: Disabling bearer [ 221.363333][ T9723] xt_cgroup: xt_cgroup: no path or classid specified [ 221.573853][ T9732] syzkaller0: entered promiscuous mode [ 221.580479][ T9732] syzkaller0: entered allmulticast mode [ 221.938757][ T9749] netlink: 'syz.2.956': attribute type 1 has an invalid length. [ 222.108918][ T9750] ip6_vti0: entered promiscuous mode [ 222.126312][ T9750] ip6_vti0: entered allmulticast mode [ 222.241238][ T9767] netlink: 'syz.2.961': attribute type 1 has an invalid length. [ 222.271600][ T9761] wg1 speed is unknown, defaulting to 1000 [ 222.306158][ T9770] netlink: 'syz.0.962': attribute type 1 has an invalid length. [ 222.319522][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'. [ 222.363450][ T9767] 8021q: adding VLAN 0 to HW filter on device bond4 [ 222.450387][ T9766] 8021q: adding VLAN 0 to HW filter on device bond4 [ 222.469198][ T9780] rdma_op ffff88807a22a9f0 conn xmit_rdma 0000000000000000 [ 222.478479][ T9766] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 222.492222][ T9766] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 222.601606][ T9772] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 222.614464][ T9772] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 222.685403][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 222.805273][ T9784] wg1 speed is unknown, defaulting to 1000 [ 222.951519][ T9807] IPVS: set_ctl: invalid protocol: 0 172.30.0.5:20003 [ 223.019297][ T9794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.969'. [ 223.230205][ T9792] netlink: 48 bytes leftover after parsing attributes in process `syz.1.966'. [ 224.010131][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'. [ 224.020651][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'. [ 224.082963][ T7104] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.127436][ T7104] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.146885][ T7104] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.169983][ T7104] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.610536][ T9852] netlink: 'syz.2.985': attribute type 10 has an invalid length. [ 224.625734][ T9852] netlink: 156 bytes leftover after parsing attributes in process `syz.2.985'. [ 224.728350][ T9855] Bluetooth: hci0: unsupported parameter 512 [ 224.743355][ T9855] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 224.798555][ T9857] netlink: 48 bytes leftover after parsing attributes in process `syz.2.987'. [ 224.822042][ T9857] netlink: 40 bytes leftover after parsing attributes in process `syz.2.987'. [ 225.786819][ T9891] syzkaller1: entered promiscuous mode [ 225.846172][ T9891] syzkaller1: entered allmulticast mode [ 226.251877][ T9904] netlink: 60 bytes leftover after parsing attributes in process `syz.1.996'. [ 226.343973][ T9907] netlink: 36 bytes leftover after parsing attributes in process `syz.1.996'. [ 226.359985][ T9909] netlink: 'syz.2.999': attribute type 4 has an invalid length. [ 226.411588][ T9909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.999'. [ 226.567507][ T9914] team0: Device ipip0 is of different type [ 227.129551][ T9937] veth3: entered allmulticast mode [ 227.501305][ T9950] ipvlan0: entered promiscuous mode [ 227.532433][ T9950] ipvlan0: left promiscuous mode [ 227.562320][ T9955] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1011'. [ 227.670987][ T9960] netlink: 'syz.3.1012': attribute type 9 has an invalid length. [ 228.106795][ T9982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.343529][T10010] __nla_validate_parse: 2 callbacks suppressed [ 228.343550][T10010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1023'. [ 228.382774][T10012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1024'. [ 228.414809][T10010] netlink: 'syz.2.1023': attribute type 12 has an invalid length. [ 228.424253][T10010] netlink: 'syz.2.1023': attribute type 29 has an invalid length. [ 228.432772][T10010] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1023'. [ 228.598514][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'. [ 228.618766][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'. [ 228.740281][T10033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1030'. [ 228.811660][T10030] "syz.1.1029" (10030) uses obsolete ecb(arc4) skcipher [ 229.756035][T10069] wg1 speed is unknown, defaulting to 1000 [ 229.909087][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'. [ 229.959448][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'. [ 230.103089][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1047'. [ 230.152466][T10086] netlink: 'syz.4.1047': attribute type 20 has an invalid length. [ 230.158396][T10088] IPv6: sit2: Disabled Multicast RS [ 230.189294][T10090] xt_TCPMSS: Only works on TCP SYN packets [ 230.850297][T10106] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1052'. [ 231.092225][T10113] openvswitch: netlink: Message has 2851 unknown bytes. [ 231.105863][T10113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.315825][T10103] wg1 speed is unknown, defaulting to 1000 [ 231.456567][T10115] wg1 speed is unknown, defaulting to 1000 [ 231.787371][T10147] netlink: 'syz.0.1059': attribute type 1 has an invalid length. [ 231.993881][T10147] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 232.276448][T10177] netlink: 'syz.4.1069': attribute type 46 has an invalid length. [ 232.450883][T10183] netlink: 'syz.1.1071': attribute type 1 has an invalid length. [ 232.498132][T10183] bond3: entered promiscuous mode [ 232.503892][T10183] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.529941][T10183] bond3: entered allmulticast mode [ 232.566610][T10191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.574751][T10191] IPv6: NLM_F_CREATE should be set when creating new route [ 232.651020][T10183] bond3: (slave bridge3): making interface the new active one [ 232.689438][T10183] bridge3: entered promiscuous mode [ 232.710297][T10183] bridge3: entered allmulticast mode [ 232.728429][T10183] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 232.851317][T10205] openvswitch: netlink: Flow actions attr not present in new flow. [ 232.869084][T10204] wg1 speed is unknown, defaulting to 1000 [ 233.356805][T10227] __nla_validate_parse: 3 callbacks suppressed [ 233.356826][T10227] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1083'. [ 233.427810][T10227] 0ªX¹¦D: renamed from gretap0 (while UP) [ 233.470329][T10227] 0ªX¹¦D: entered allmulticast mode [ 233.507076][T10231] netlink: 'syz.3.1080': attribute type 28 has an invalid length. [ 233.525447][T10227] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 233.640728][T10220] wg1 speed is unknown, defaulting to 1000 [ 234.305706][T10256] tipc: Enabling of bearer rejected, failed to enable media [ 235.089438][T10284] ipt_REJECT: TCP_RESET invalid for non-tcp [ 235.238752][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1101'. [ 235.268603][T10293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.338318][T10298] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1103'. [ 235.348766][T10298] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1103'. [ 235.360516][T10298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1103'. [ 235.499927][T10307] netlink: 'syz.0.1105': attribute type 83 has an invalid length. [ 235.660808][T10314] x_tables: duplicate underflow at hook 1 [ 235.701376][T10314] netlink: 'syz.0.1107': attribute type 21 has an invalid length. [ 235.715440][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1107'. [ 236.027685][T10326] tipc: Started in network mode [ 236.034086][T10326] tipc: Node identity 6a396ec3b15c, cluster identity 4711 [ 236.052099][T10326] tipc: Enabled bearer , priority 0 [ 236.060891][T10326] syzkaller0: entered promiscuous mode [ 236.078010][T10326] syzkaller0: entered allmulticast mode [ 236.133890][T10326] tipc: Resetting bearer [ 236.151097][T10325] tipc: Resetting bearer [ 236.157603][T10332] netlink: 'syz.0.1113': attribute type 1 has an invalid length. [ 236.183241][T10325] tipc: Disabling bearer [ 236.216827][T10335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1113'. [ 236.232000][T10332] bond2: entered promiscuous mode [ 236.237925][T10332] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.270028][T10335] bond2: entered allmulticast mode [ 236.279549][T10330] wg1 speed is unknown, defaulting to 1000 [ 236.334053][T10332] bond2: (slave bridge1): making interface the new active one [ 236.359417][T10335] netlink: 'syz.0.1113': attribute type 1 has an invalid length. [ 236.391620][T10332] bridge1: entered promiscuous mode [ 236.398267][T10332] bridge1: entered allmulticast mode [ 236.406354][T10332] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 236.417028][T10340] netlink: 'syz.4.1114': attribute type 12 has an invalid length. [ 236.426250][T10340] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1114'. [ 236.786842][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 236.884204][T10366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1119'. [ 236.981885][T10358] wg1 speed is unknown, defaulting to 1000 [ 237.292641][T10383] wg1 speed is unknown, defaulting to 1000 [ 238.711243][T10436] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 238.922577][T10451] __nla_validate_parse: 4 callbacks suppressed [ 238.922598][T10451] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1142'. [ 239.000283][T10455] syzkaller0: entered promiscuous mode [ 239.015475][T10455] syzkaller0: entered allmulticast mode [ 239.182081][T10457] wg1 speed is unknown, defaulting to 1000 [ 239.313957][T10478] dvmrp1: entered allmulticast mode [ 240.068959][T10502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1158'. [ 240.087411][T10503] netlink: 'syz.0.1156': attribute type 21 has an invalid length. [ 240.164689][T10506] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1160'. [ 240.185512][T10503] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1156'. [ 240.309141][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1160'. [ 240.319231][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1160'. [ 240.480194][T10515] Bluetooth: hci0: invalid length 39, exp 2 for type 17 [ 240.549677][T10520] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1164'. [ 240.764416][T10526] netlink: 'syz.3.1165': attribute type 12 has an invalid length. [ 241.247919][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'. [ 241.343774][T10550] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 241.353766][T10550] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 241.668333][T10564] IPVS: set_ctl: invalid protocol: 136 100.1.1.1:20002 [ 241.890227][T10571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1176'. [ 241.998618][T10576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1178'. [ 242.126425][T10576] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 242.820916][T10593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.910572][T10593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.947446][T10593] bond0 (unregistering): Released all slaves [ 243.354008][T10617] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.480697][T10617] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.554924][T10640] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 243.650213][T10617] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.772827][T10617] team0: Port device netdevsim0 removed [ 243.794733][T10617] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.970069][T10637] wg1 speed is unknown, defaulting to 1000 [ 243.972424][T10651] netlink: 'syz.0.1195': attribute type 1 has an invalid length. [ 244.003860][T10651] netlink: 'syz.0.1195': attribute type 1 has an invalid length. [ 244.017852][T10651] __nla_validate_parse: 3 callbacks suppressed [ 244.017872][T10651] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1195'. [ 244.442288][ T146] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.475336][T10669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1200'. [ 244.499293][T10669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1200'. [ 244.534355][T10669] netlink: 'syz.2.1200': attribute type 1 has an invalid length. [ 244.561405][ T1103] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.572828][T10669] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1200'. [ 244.626667][ T7104] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.791286][ T7102] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.801125][T10683] xt_policy: too many policy elements [ 244.845561][T10684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.949282][T10686] netlink: 'syz.0.1205': attribute type 1 has an invalid length. [ 244.969997][T10686] netlink: 'syz.0.1205': attribute type 1 has an invalid length. [ 244.983484][T10686] netlink: 'syz.0.1205': attribute type 1 has an invalid length. [ 244.993555][T10686] netlink: 'syz.0.1205': attribute type 1 has an invalid length. [ 245.064518][T10688] wg1 speed is unknown, defaulting to 1000 [ 245.097341][T10690] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1206'. [ 245.194164][T10700] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1206'. [ 245.577136][T10715] IPv6: NLM_F_CREATE should be specified when creating new route [ 245.613835][T10715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.621518][T10715] IPv6: NLM_F_CREATE should be set when creating new route [ 245.710269][T10721] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.085045][T10744] wg1 speed is unknown, defaulting to 1000 [ 246.266022][T10758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1222'. [ 246.283426][T10758] netlink: 'syz.2.1222': attribute type 1 has an invalid length. [ 246.726787][T10788] netlink: 'syz.3.1231': attribute type 16 has an invalid length. [ 246.785285][T10788] netlink: 'syz.3.1231': attribute type 17 has an invalid length. [ 246.980454][T10803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1234'. [ 247.034498][ T146] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.061831][T10803] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.111665][ T146] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.151521][ T146] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.197191][ T146] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.224003][T10803] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.322059][T10803] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.454264][T10803] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.489987][T10823] wg1 speed is unknown, defaulting to 1000 [ 247.706612][T10833] netlink: 'syz.0.1242': attribute type 1 has an invalid length. [ 247.715982][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1242'. [ 247.870101][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1245'. [ 248.171324][ T7104] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.189446][ T7105] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.216182][ T7104] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.326492][ T7105] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.485342][T10859] nbd3: detected capacity change from 0 to 63 [ 248.504623][T10862] block nbd3: NBD_DISCONNECT [ 248.526537][T10862] block nbd3: Disconnected due to user request. [ 248.556883][T10862] block nbd3: shutting down sockets [ 248.584278][T10859] bond4: entered promiscuous mode [ 248.609300][T10859] bond4: entered allmulticast mode [ 248.636553][T10859] 8021q: adding VLAN 0 to HW filter on device bond4 [ 249.283979][T10909] __nla_validate_parse: 5 callbacks suppressed [ 249.284000][T10909] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1264'. [ 249.301726][T10909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.485330][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 249.659733][T10930] netlink: 'syz.1.1269': attribute type 10 has an invalid length. [ 249.669117][T10930] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1269'. [ 249.761498][T10940] wg1 speed is unknown, defaulting to 1000 [ 250.253443][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1275'. [ 250.303314][T10966] bridge0: entered promiscuous mode [ 250.676631][T10987] syzkaller0: entered promiscuous mode [ 250.683589][T10987] syzkaller0: entered allmulticast mode [ 250.787405][T11002] netlink: 'syz.4.1284': attribute type 39 has an invalid length. [ 250.811594][T11002] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1284'. [ 250.900194][T11006] netlink: 'syz.0.1286': attribute type 1 has an invalid length. [ 251.003727][T11006] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 251.231048][T11015] raw_sendmsg: syz.3.1289 forgot to set AF_INET. Fix it! [ 252.988175][T11050] bond4 (unregistering): Released all slaves [ 253.029528][T11053] tipc: Enabling of bearer rejected, failed to enable media [ 253.062590][T11055] tipc: New replicast peer: 0.0.0.0 [ 253.073829][T11055] tipc: Enabled bearer , priority 10 [ 253.082869][T11055] tipc: New replicast peer: 255.255.255.255 [ 253.091645][T11055] netlink: 'syz.3.1298': attribute type 58 has an invalid length. [ 253.102739][T11055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1298'. [ 253.168962][T11060] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 253.957818][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1311'. [ 253.957979][T11111] tipc: Enabling of bearer rejected, failed to enable media [ 254.187026][ T5825] tipc: Node number set to 704770685 [ 254.240005][T11118] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 254.441832][T11131] syzkaller0: entered promiscuous mode [ 254.448406][T11131] syzkaller0: entered allmulticast mode [ 254.457265][T11134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'. [ 255.325412][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.971006][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.980122][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.380434][T11168] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 256.482462][T11174] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 256.513500][T11174] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 256.565052][T11179] tipc: Enabled bearer , priority 0 [ 256.587497][T11179] syzkaller0: entered promiscuous mode [ 256.594624][T11179] syzkaller0: entered allmulticast mode [ 256.632297][T11179] tipc: Resetting bearer [ 256.642441][T11185] xt_policy: too many policy elements [ 256.652137][T11185] netlink: 'syz.3.1331': attribute type 30 has an invalid length. [ 256.661528][T11175] tipc: Resetting bearer [ 256.679697][T11175] tipc: Disabling bearer [ 256.706591][T11184] netlink: 'syz.4.1332': attribute type 10 has an invalid length. [ 256.749847][T11184] dummy0: entered promiscuous mode [ 256.988809][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1334'. [ 257.101863][T11211] dvmrp1: entered allmulticast mode [ 257.164406][T11211] wg1 speed is unknown, defaulting to 1000 [ 257.211876][T11214] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 257.419087][T11218] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.517081][T11218] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.738112][T11229] tipc: Enabled bearer , priority 0 [ 257.780907][T11235] syz.2.1342 (11235) used obsolete PPPIOCDETACH ioctl [ 257.798718][T11218] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.835747][T11231] syzkaller0: entered promiscuous mode [ 257.841402][T11231] syzkaller0: entered allmulticast mode [ 257.903897][T11229] tipc: Resetting bearer [ 257.930160][T11218] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.010206][T11241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'. [ 258.044541][T11241] syz_tun (unregistering): left promiscuous mode [ 258.058682][T11229] tipc: Resetting bearer [ 258.091313][T11229] tipc: Disabling bearer [ 258.101019][T11243] netlink: 'syz.4.1345': attribute type 13 has an invalid length. [ 258.111001][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1345'. [ 258.172131][ T7102] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.247363][ T7105] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.328260][ T7100] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.342250][T11252] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1349'. [ 258.354710][T11252] netlink: 'syz.0.1349': attribute type 3 has an invalid length. [ 258.379604][ T7102] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.410456][T11250] tipc: Enabling of bearer rejected, failed to enable media [ 258.511208][T11260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1351'. [ 258.705684][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1354'. [ 258.718294][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1355'. [ 258.810456][T11273] tipc: Enabled bearer , priority 0 [ 258.834620][T11273] tipc: Resetting bearer [ 258.935021][T11272] tipc: Disabling bearer [ 259.108634][T11288] netlink: 'syz.3.1358': attribute type 21 has an invalid length. [ 259.121644][T11291] xt_nat: multiple ranges no longer supported [ 259.136551][T11288] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1358'. [ 259.621915][T11319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1368'. [ 259.665738][T11319] tipc: Enabled bearer , priority 0 [ 259.674107][T11319] syzkaller0: entered promiscuous mode [ 259.716789][T11319] syzkaller0: entered allmulticast mode [ 259.750753][T11319] tipc: Resetting bearer [ 259.764706][T11318] tipc: Resetting bearer [ 259.797124][T11318] tipc: Disabling bearer [ 259.832741][T11324] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1370'. [ 260.312511][T11346] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1375'. [ 260.595393][T11351] netlink: 'syz.0.1377': attribute type 1 has an invalid length. [ 260.604241][T11351] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1377'. [ 261.079845][T11362] tipc: Enabled bearer , priority 0 [ 261.133607][T11362] tipc: Disabling bearer [ 261.174161][T11369] Bluetooth: MGMT ver 1.23 [ 261.201556][T11369] geneve2: entered promiscuous mode [ 261.257750][ T7102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.266151][T11369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1382'. [ 261.267008][ T7102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.290060][ T7102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.299201][ T7102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.470968][T11376] wg1 speed is unknown, defaulting to 1000 [ 262.188429][T11407] dvmrp12: entered allmulticast mode [ 262.206922][T11406] dvmrp12: left allmulticast mode [ 262.216830][T11410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1393'. [ 262.253725][T11376] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1384'. [ 262.311399][T11415] netlink: 'syz.1.1394': attribute type 3 has an invalid length. [ 262.348935][T11415] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1394'. [ 262.397855][T11418] macsec1: entered promiscuous mode [ 262.403470][T11418] batadv_slave_0: entered promiscuous mode [ 262.410560][T11418] macsec1: entered allmulticast mode [ 262.416815][T11418] batadv_slave_0: entered allmulticast mode [ 262.654450][T11420] bond4: option packets_per_slave: invalid value (65547) [ 262.662024][T11420] bond4: option packets_per_slave: allowed values 0 - 65535 [ 262.677391][T11420] bond4 (unregistering): Released all slaves [ 262.836792][T11420] bond4: option packets_per_slave: invalid value (65547) [ 262.844068][T11420] bond4: option packets_per_slave: allowed values 0 - 65535 [ 262.865067][T11420] bond4 (unregistering): Released all slaves [ 263.040059][T11441] wg1 speed is unknown, defaulting to 1000 [ 263.133132][T11449] xt_l2tp: missing protocol rule (udp|l2tpip) [ 263.221115][T11446] wg1 speed is unknown, defaulting to 1000 [ 263.251715][T11443] wg1 speed is unknown, defaulting to 1000 [ 263.338453][T11455] netlink: 'syz.0.1405': attribute type 1 has an invalid length. [ 263.409141][T11458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1405'. [ 263.424497][T11455] bond3: entered promiscuous mode [ 263.431016][T11455] 8021q: adding VLAN 0 to HW filter on device bond3 [ 263.536691][T11458] bond3: entered allmulticast mode [ 263.571854][T11469] netlink: 'syz.1.1407': attribute type 1 has an invalid length. [ 263.586212][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1407'. [ 263.676422][T11458] bond3: (slave bridge2): making interface the new active one [ 263.686700][T11458] bridge2: entered promiscuous mode [ 263.706562][T11458] bridge2: entered allmulticast mode [ 263.733785][T11458] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 264.012822][T11487] netlink: 'syz.1.1412': attribute type 1 has an invalid length. [ 264.031908][T11487] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 264.087772][T11493] IPVS: length: 233 != 24 [ 264.493315][T11522] tipc: Enabling of bearer rejected, failed to enable media [ 264.699363][T11532] __nla_validate_parse: 1 callbacks suppressed [ 264.699384][T11532] netlink: 320 bytes leftover after parsing attributes in process `syz.3.1422'. [ 264.764589][T11537] ipvlan0: entered allmulticast mode [ 264.790560][T11537] veth0_vlan: entered allmulticast mode [ 264.875953][T11540] IPVS: length: 185 != 8 [ 264.880851][T11522] syzkaller0: entered promiscuous mode [ 264.887534][T11522] syzkaller0: entered allmulticast mode [ 264.895053][T11537] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20004 [ 265.291055][T11560] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 265.351807][T11566] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1426'. [ 265.429214][T11560] bond0 (unregistering): Released all slaves [ 265.540826][T11574] netlink: 'syz.3.1430': attribute type 13 has an invalid length. [ 265.565877][T11574] netlink: 'syz.3.1430': attribute type 17 has an invalid length. [ 265.840140][T11574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.872501][T11574] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.984533][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1434'. [ 266.028113][T11573] wg1 speed is unknown, defaulting to 1000 [ 266.143892][T11599] veth0: entered promiscuous mode [ 266.150150][T11599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1436'. [ 266.269084][T11599] veth0 (unregistering): left promiscuous mode [ 266.289901][T11603] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1438'. [ 266.651534][T11611] wg1 speed is unknown, defaulting to 1000 [ 267.165680][T11638] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 267.187309][T11633] netdevsim netdevsim0: Direct firmware load for þ failed with error -2 [ 267.196845][T11639] netlink: 'syz.2.1447': attribute type 13 has an invalid length. [ 267.209170][T11633] netdevsim netdevsim0: Falling back to sysfs fallback for: þ [ 267.232685][T11639] netlink: 'syz.2.1447': attribute type 17 has an invalid length. [ 267.332810][T11643] netlink: 'syz.3.1448': attribute type 1 has an invalid length. [ 267.350267][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1448'. [ 267.371672][T11639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.381401][T11639] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.415502][T11639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.636965][T11653] --map-set only usable from mangle table [ 267.645641][T11653] IPv6: NLM_F_REPLACE set, but no existing node found! [ 267.844370][T11655] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1452'. [ 267.962367][T11658] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1454'. [ 268.106360][T11668] tipc: Enabled bearer , priority 0 [ 268.131468][T11668] syzkaller0: entered promiscuous mode [ 268.150962][T11668] syzkaller0: entered allmulticast mode [ 268.273553][T11668] tipc: Resetting bearer [ 268.281992][T11668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.290910][T11668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.373793][T11682] wg1 speed is unknown, defaulting to 1000 [ 268.384693][T11667] tipc: Resetting bearer [ 268.407378][T11667] tipc: Disabling bearer [ 268.781424][T11682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1460'. [ 268.849462][T11682] netlink: 'syz.1.1460': attribute type 1 has an invalid length. [ 269.189432][T11717] wg1 speed is unknown, defaulting to 1000 [ 269.264865][T11723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1468'. [ 269.274090][T11722] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 269.298056][T11724] xt_connbytes: Forcing CT accounting to be enabled [ 269.323889][T11724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.624262][T11735] tipc: Enabled bearer , priority 0 [ 269.633597][T11735] syzkaller0: entered promiscuous mode [ 269.639424][T11735] syzkaller0: entered allmulticast mode [ 269.670483][T11735] tipc: Resetting bearer [ 269.695786][T11734] tipc: Resetting bearer [ 269.737590][T11734] tipc: Disabling bearer [ 269.821235][T11739] macvtap1: entered promiscuous mode [ 269.833849][T11739] veth1_to_hsr: entered promiscuous mode [ 269.853325][T11739] macvtap1: entered allmulticast mode [ 269.860299][T11739] veth1_to_hsr: entered allmulticast mode [ 269.876368][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1475'. [ 270.468831][T11770] Cannot find set identified by id 0 to match [ 270.493538][T11770] netlink: 'syz.4.1483': attribute type 5 has an invalid length. [ 270.507956][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1484'. [ 270.851978][T11783] Bluetooth: hci0: unsupported parameter 512 [ 270.870278][T11783] Bluetooth: hci0: invalid length 11, exp 2 for type 20 [ 270.931379][T11788] wg1 speed is unknown, defaulting to 1000 [ 271.068526][T11787] wg1 speed is unknown, defaulting to 1000 [ 271.266292][T11801] netlink: 'syz.4.1491': attribute type 4 has an invalid length. [ 271.278094][T11801] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1491'. [ 271.489749][T11812] netlink: 'syz.3.1493': attribute type 1 has an invalid length. [ 271.499441][T11812] netlink: 'syz.3.1493': attribute type 1 has an invalid length. [ 271.769231][T11816] netlink: 'syz.3.1496': attribute type 41 has an invalid length. [ 271.993613][T11833] bond0: (slave bond_slave_0): Releasing backup interface [ 272.050713][T11833] bond0: (slave bond_slave_1): Releasing backup interface [ 272.078342][T11833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.107282][T11833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.111270][T11846] netlink: 'syz.3.1499': attribute type 10 has an invalid length. [ 272.123707][T11833] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 272.144490][T11847] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 272.159016][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1500'. [ 272.175745][T11847] Cannot find set identified by id 3 to match [ 272.246750][T11840] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 272.254648][T11840] ipvlan2: left allmulticast mode [ 272.260032][T11840] bond3: left allmulticast mode [ 272.265077][T11840] gretap1: left allmulticast mode [ 272.272054][T11840] ip6gretap2: left promiscuous mode [ 272.277566][T11840] ip6gretap2: left allmulticast mode [ 272.288498][T11840] veth3: left allmulticast mode [ 272.304966][T11840] batadv_slave_0: left allmulticast mode [ 272.311945][T11840] batadv_slave_0: left promiscuous mode [ 272.318215][T11840] macsec1: left promiscuous mode [ 272.323438][T11840] macsec1: left allmulticast mode [ 272.356560][T11846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.369169][T11846] bond0: (slave wlan1): Opening slave failed [ 272.420463][T11845] 8021q: adding VLAN 0 to HW filter on device bond5 [ 272.764388][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1503'. [ 272.933960][T11856] tipc: Enabled bearer , priority 0 [ 272.987404][T11858] syzkaller0: entered promiscuous mode [ 273.004771][T11858] syzkaller0: entered allmulticast mode [ 273.026542][T11873] bond_slave_1: entered allmulticast mode [ 273.071337][T11881] netlink: 'syz.0.1509': attribute type 4 has an invalid length. [ 273.102696][T11881] netlink: 'syz.0.1509': attribute type 4 has an invalid length. [ 273.196565][T11883] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1510'. [ 273.225601][T11883] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1510'. [ 273.234907][T11883] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1510'. [ 273.291947][T11854] tipc: Resetting bearer [ 273.323675][T11854] tipc: Disabling bearer [ 273.608205][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1517'. [ 273.744482][T11905] geneve2: entered promiscuous mode [ 273.760361][T11905] geneve2: entered allmulticast mode [ 273.858719][T11913] wg1 speed is unknown, defaulting to 1000 [ 273.923258][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1520'. [ 274.465036][T11943] 0ªX¹¦À: renamed from caif0 [ 274.510119][T11943] 0ªX¹¦À: entered allmulticast mode [ 274.530722][T11943] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 274.705720][T11961] tc_dump_action: action bad kind [ 274.749287][T11962] netlink: 'syz.2.1529': attribute type 3 has an invalid length. [ 274.784135][T11957] wg1 speed is unknown, defaulting to 1000 [ 274.789315][T11963] veth0: entered promiscuous mode [ 274.954053][T11970] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 274.976651][T11970] bond0 (unregistering): Released all slaves [ 275.283526][T11990] __nla_validate_parse: 4 callbacks suppressed [ 275.283546][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1536'. [ 275.397732][T11963] veth0: left promiscuous mode [ 275.458672][T11999] netlink: 'syz.2.1538': attribute type 29 has an invalid length. [ 275.555638][T11995] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 275.931710][T12024] syzkaller0: entered promiscuous mode [ 275.937743][T12024] syzkaller0: entered allmulticast mode [ 276.366517][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1549'. [ 277.198561][T12078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1556'. [ 277.430405][ T7099] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 277.439219][ T7099] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 277.461712][ T43] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 277.539327][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1560'. [ 277.577655][T12086] netlink: 'syz.1.1559': attribute type 2 has an invalid length. [ 277.898100][T12102] wg1 speed is unknown, defaulting to 1000 [ 277.988196][T12106] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1565'. [ 277.995555][ T43] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 278.366199][ T43] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 278.852597][T12128] xt_CT: You must specify a L4 protocol and not use inversions on it [ 278.855202][T12127] wg1 speed is unknown, defaulting to 1000 [ 278.899839][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1571'. [ 278.910213][T12131] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 278.964376][T12133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1571'. [ 278.999434][T12132] veth1_vlan: left allmulticast mode [ 279.015646][T12132] netlink: 'syz.4.1571': attribute type 1 has an invalid length. [ 279.042437][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1571'. [ 279.073613][T12133] netlink: 'syz.4.1571': attribute type 1 has an invalid length. [ 279.083726][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1571'. [ 279.364507][T12145] block nbd1: Unsupported socket: should be TCP or UNIX. [ 279.568347][T12154] SET target dimension over the limit! [ 279.673596][T12157] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1574'. [ 280.346482][T12176] netlink: 'syz.4.1581': attribute type 13 has an invalid length. [ 280.711364][T12176] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.719632][T12176] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.807915][T12172] Set syz1 is full, maxelem 6117 reached [ 280.916630][T12176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.956572][T12176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.210130][T12181] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 281.230506][ T7105] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.242794][ T7105] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.257537][ T7105] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.266753][ T7105] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.303882][ T7105] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.314529][ T7105] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.350634][ T1103] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.367900][ T1103] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.378538][T12204] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1587'. [ 281.405678][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 281.460318][T12216] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1592'. [ 281.513114][T12222] tipc: Enabled bearer , priority 0 [ 281.521841][T12222] syzkaller0: entered promiscuous mode [ 281.530261][T12222] syzkaller0: entered allmulticast mode [ 281.539348][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1594'. [ 281.591085][T12222] tipc: Resetting bearer [ 281.600105][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1594'. [ 281.643066][T12221] tipc: Resetting bearer [ 281.691758][T12221] tipc: Disabling bearer [ 281.751746][T12242] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1597'. [ 281.761655][T12241] netlink: 'syz.3.1598': attribute type 1 has an invalid length. [ 281.782967][T12241] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 281.895063][T12251] netlink: 'syz.4.1599': attribute type 1 has an invalid length. [ 281.917720][T12251] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1599'. [ 281.946594][T12255] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1599'. [ 281.955202][T12251] netlink: 'syz.4.1599': attribute type 1 has an invalid length. [ 282.099460][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1600'. [ 282.124424][T12270] wg1 speed is unknown, defaulting to 1000 [ 282.263154][T12272] wg1 speed is unknown, defaulting to 1000 [ 282.382777][T12258] wg1 speed is unknown, defaulting to 1000 [ 282.665053][T12294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1607'. [ 282.698889][T12295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1607'. [ 282.967059][T12301] pim6reg1: entered promiscuous mode [ 282.985037][T12301] pim6reg1: entered allmulticast mode [ 283.033840][T12309] : entered promiscuous mode [ 283.129266][T12313] 8021q: VLANs not supported on ipvlan1 [ 283.198737][T12313] macsec2: entered promiscuous mode [ 283.204109][T12313] macsec2: entered allmulticast mode [ 283.412994][T12326] xfrm1: entered promiscuous mode [ 283.418969][T12326] xfrm1: entered allmulticast mode [ 283.610294][T12335] xt_hashlimit: max too large, truncated to 1048576 [ 283.829269][T12342] wg1 speed is unknown, defaulting to 1000 [ 284.218946][T12368] xfrm1: entered promiscuous mode [ 284.224464][T12368] xfrm1: entered allmulticast mode [ 284.243386][T12370] xt_hashlimit: max too large, truncated to 1048576 [ 284.285754][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 284.407808][T12376] hsr_slave_0: left promiscuous mode [ 284.415412][T12376] hsr_slave_1: left promiscuous mode [ 284.752349][T12391] netlink: 'syz.2.1637': attribute type 1 has an invalid length. [ 285.108203][T12414] netlink: 'syz.4.1642': attribute type 1 has an invalid length. [ 285.301308][T12426] xfrm1: entered promiscuous mode [ 285.310142][T12426] xfrm1: entered allmulticast mode [ 285.656958][T12442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.857541][ T7103] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.907195][ T7102] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.991489][T12458] delete_channel: no stack [ 286.008286][ T7102] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.064034][ T7102] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.083154][T12458] syzkaller0: entered promiscuous mode [ 286.093423][T12458] syzkaller0: entered allmulticast mode [ 286.297125][T12469] wg1 speed is unknown, defaulting to 1000 [ 286.488289][T12474] wg1 speed is unknown, defaulting to 1000 [ 286.616441][T12478] netlink: 'syz.3.1661': attribute type 1 has an invalid length. [ 286.645349][T12478] netlink: 'syz.3.1661': attribute type 1 has an invalid length. [ 286.919877][T12460] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 286.998335][T12489] tipc: Enabled bearer , priority 0 [ 287.036109][T12489] syzkaller0: entered promiscuous mode [ 287.041771][T12489] syzkaller0: entered allmulticast mode [ 287.128787][T12494] __nla_validate_parse: 47 callbacks suppressed [ 287.128810][T12494] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1665'. [ 287.161335][T12484] tipc: Resetting bearer [ 287.170029][T12494] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1665'. [ 287.212711][T12484] tipc: Disabling bearer [ 287.250409][T12494] macvlan0: entered allmulticast mode [ 287.256183][T12494] veth1_vlan: entered allmulticast mode [ 287.306733][T12499] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1666'. [ 287.444628][T12501] wg1 speed is unknown, defaulting to 1000 [ 287.517707][ T30] audit: type=1804 audit(1760789775.202:5): pid=12503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1667" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=1766 res=1 errno=0 [ 287.635343][ T30] audit: type=1800 audit(1760789775.232:6): pid=12503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1667" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=1766 res=0 errno=0 [ 287.772288][T12515] netlink: 'syz.3.1669': attribute type 1 has an invalid length. [ 287.808058][T12515] netlink: 'syz.3.1669': attribute type 1 has an invalid length. [ 288.919925][T12565] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1680'. [ 289.245377][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 289.427815][T12589] pimreg: left allmulticast mode [ 289.760489][T12595] wg1 speed is unknown, defaulting to 1000 [ 290.225643][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1689'. [ 290.856737][T12667] sctp: [Deprecated]: syz.1.1692 (pid 12667) Use of int in max_burst socket option. [ 290.856737][T12667] Use struct sctp_assoc_value instead [ 290.948059][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1690'. [ 291.178880][T12680] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 291.198978][T12680] netlink: 'syz.2.1697': attribute type 1 has an invalid length. [ 291.225992][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1697'. [ 291.475847][T12702] bond6: option arp_all_targets: invalid value (3) [ 291.486981][T12702] bond6 (unregistering): Released all slaves [ 291.664313][T12709] vlan3: entered promiscuous mode [ 291.670079][T12709] geneve1: entered promiscuous mode [ 291.675963][T12709] vlan3: entered allmulticast mode [ 291.681657][T12709] geneve1: entered allmulticast mode [ 298.193710][T12756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1716'. [ 298.541760][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1722'. [ 298.689077][T12784] wg1 speed is unknown, defaulting to 1000 [ 298.783177][T12795] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1726'. [ 298.796878][T12790] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 299.202226][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1730'. [ 299.621430][T12844] bond0: option arp_validate: invalid value (18446744073491447809) [ 299.632765][T12844] bond0 (unregistering): Released all slaves [ 299.667972][T12848] netlink: 'syz.4.1736': attribute type 13 has an invalid length. [ 299.687705][T12845] wg1 speed is unknown, defaulting to 1000 [ 299.730462][ T7102] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.802479][ T7102] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.829658][ T7102] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.918793][T12847] wg1 speed is unknown, defaulting to 1000 [ 299.921446][T12825] netlink: 'syz.1.1731': attribute type 1 has an invalid length. [ 299.949980][ T7102] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.978021][T12825] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1731'. [ 300.124057][T12857] bond5: option all_slaves_active: invalid value (13) [ 300.136994][T12857] bond5 (unregistering): Released all slaves [ 300.941511][T12899] netlink: 'syz.2.1748': attribute type 1 has an invalid length. [ 300.961247][T12902] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 301.491275][T12928] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20002 [ 301.943194][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1756'. [ 302.437768][T12954] wg1 speed is unknown, defaulting to 1000 [ 302.633984][T12969] netlink: 'syz.1.1760': attribute type 13 has an invalid length. [ 302.849517][T12975] netlink: 'syz.3.1761': attribute type 12 has an invalid length. [ 302.853220][T12970] wg1 speed is unknown, defaulting to 1000 [ 303.562046][T12997] netlink: 'syz.3.1767': attribute type 1 has an invalid length. [ 303.584337][T12997] netlink: 'syz.3.1767': attribute type 1 has an invalid length. [ 303.955851][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1773'. [ 303.965434][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 304.130147][T13011] wg1 speed is unknown, defaulting to 1000 [ 304.389187][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1776'. [ 304.787189][T13046] wg1 speed is unknown, defaulting to 1000 [ 304.832841][T13054] tipc: Enabling of bearer rejected, failed to enable media [ 304.900752][T13033] wg1 speed is unknown, defaulting to 1000 [ 305.073665][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1784'. [ 306.079027][T13107] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0 [ 306.119431][T13106] syzkaller0: entered promiscuous mode [ 306.125639][T13106] syzkaller0: entered allmulticast mode [ 306.560317][T13125] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 306.792097][T13136] sctp: [Deprecated]: syz.4.1802 (pid 13136) Use of int in max_burst socket option deprecated. [ 306.792097][T13136] Use struct sctp_assoc_value instead [ 306.885170][T13136] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 307.038140][T13148] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1805'. [ 307.149920][T13154] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1806'. [ 307.169733][T13154] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1806'. [ 307.351070][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1809'. [ 307.364273][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'. [ 307.382215][T13162] team0: entered promiscuous mode [ 307.388220][T13162] team_slave_1: entered promiscuous mode [ 307.395502][T13162] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 307.414113][T13162] team0: left promiscuous mode [ 307.435210][T13162] team_slave_1: left promiscuous mode [ 307.443082][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1810'. [ 307.666499][T13179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1814'. [ 307.772333][T13166] bridge_slave_1: left allmulticast mode [ 307.786896][T13166] bridge_slave_1: left promiscuous mode [ 307.796254][T13166] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.817835][T13166] bridge_slave_0: left promiscuous mode [ 307.826204][T13166] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.283964][T13199] dummy0: left promiscuous mode [ 308.306586][T13199] veth3: left promiscuous mode [ 308.311799][T13199] bond1: left promiscuous mode [ 308.317522][T13199] bridge1: left promiscuous mode [ 308.324587][T13199] macsec1: left promiscuous mode [ 308.360623][T13199] bridge2: left promiscuous mode [ 308.373254][T13204] netlink: 'syz.1.1821': attribute type 1 has an invalid length. [ 308.382474][T13204] netlink: 'syz.1.1821': attribute type 3 has an invalid length. [ 308.392742][T13199] bond4: left promiscuous mode [ 308.490117][T13200] wg1 speed is unknown, defaulting to 1000 [ 308.628833][T13216] geneve2: entered promiscuous mode [ 308.647499][ T7103] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.657317][ T7103] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.699275][ T7103] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.709759][ T7103] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.966622][T13229] netdevsim netdevsim4: Direct firmware load for þ failed with error -2 [ 309.021449][T13229] netdevsim netdevsim4: Falling back to sysfs fallback for: þ [ 309.034674][T13235] wg1 speed is unknown, defaulting to 1000 [ 309.123092][T13245] netlink: 'syz.0.1835': attribute type 58 has an invalid length. [ 309.131676][T13245] __nla_validate_parse: 5 callbacks suppressed [ 309.131696][T13245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1835'. [ 309.767674][T13274] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1842'. [ 309.781233][T13274] nbd: illegal input index 65508 [ 309.788173][T13274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1842'. [ 309.854472][T13282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.898991][T13279] tipc: Enabling of bearer rejected, failed to enable media [ 309.908320][T13286] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.1847'. [ 310.151114][T13297] wg1 speed is unknown, defaulting to 1000 [ 310.204444][T13302] tipc: Enabled bearer , priority 0 [ 310.288709][T13302] syzkaller0: entered promiscuous mode [ 310.294541][T13302] syzkaller0: entered allmulticast mode [ 310.363430][T13302] tipc: Resetting bearer [ 310.527469][T13299] tipc: Resetting bearer [ 310.558791][T13299] tipc: Disabling bearer [ 310.833190][T13322] wg1 speed is unknown, defaulting to 1000 [ 310.914100][T13327] netlink: 'syz.0.1857': attribute type 29 has an invalid length. [ 311.050207][T13334] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1858'. [ 311.072198][T13336] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1858'. [ 311.290293][T13342] wg1 speed is unknown, defaulting to 1000 [ 311.415873][T13353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.698379][T13363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.758011][T13355] wg1 speed is unknown, defaulting to 1000 [ 311.794633][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1869'. [ 311.906443][T13377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1869'. [ 312.079424][T13388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1875'. [ 312.352102][T13397] tipc: Enabled bearer , priority 0 [ 312.384880][T13397] syzkaller0: entered promiscuous mode [ 312.410227][T13397] syzkaller0: entered allmulticast mode [ 312.546840][T13404] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1877'. [ 312.597941][T13397] tipc: Resetting bearer [ 312.655510][T13395] tipc: Resetting bearer [ 312.708259][T13395] tipc: Disabling bearer [ 312.950841][T13437] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 313.011740][T13440] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 313.256629][T13450] wg1 speed is unknown, defaulting to 1000 [ 313.543831][T13463] wg1 speed is unknown, defaulting to 1000 [ 314.148722][T13510] bond6: entered promiscuous mode [ 314.153800][T13510] bond6: entered allmulticast mode [ 314.159798][T13510] 8021q: adding VLAN 0 to HW filter on device bond6 [ 314.226855][T13513] sctp: [Deprecated]: syz.3.1905 (pid 13513) Use of int in max_burst socket option. [ 314.226855][T13513] Use struct sctp_assoc_value instead [ 314.592325][T13525] __nla_validate_parse: 5 callbacks suppressed [ 314.592346][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1909'. [ 314.844535][T13530] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1910'. [ 314.893400][T13534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1912'. [ 314.905940][T13536] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1910'. [ 314.926002][T13535] netlink: 'syz.3.1911': attribute type 1 has an invalid length. [ 315.000469][T13537] vlan4: entered allmulticast mode [ 315.033380][T13537] bridge1: entered allmulticast mode [ 315.067130][T13537] bridge1: port 1(vlan4) entered blocking state [ 315.115754][T13537] bridge1: port 1(vlan4) entered disabled state [ 315.357481][T13550] netlink: 'syz.1.1915': attribute type 1 has an invalid length. [ 315.370619][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1914'. [ 315.415765][T13550] 8021q: adding VLAN 0 to HW filter on device bond4 [ 315.442001][T13555] bond4: (slave wlan0): Enslaving as an active interface with a down link [ 315.483691][T13550] vlan5: entered allmulticast mode [ 315.505902][T13550] veth1: entered allmulticast mode [ 315.511962][T13550] veth1: entered promiscuous mode [ 315.519662][T13550] veth1: left promiscuous mode [ 315.528122][T13550] bond4: (slave vlan5): making interface the new active one [ 315.537695][T13550] bond4: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 315.556902][T13550] veth1: entered promiscuous mode [ 315.562916][T13550] vlan5: entered promiscuous mode [ 315.572155][T13550] bond4: (slave vlan5): Enslaving as an active interface with an up link [ 315.697351][T13563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1920'. [ 315.829069][T13567] wg1 speed is unknown, defaulting to 1000 [ 315.891864][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1916'. [ 315.915028][T13563] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 315.932719][T12650] IPVS: starting estimator thread 0... [ 316.051516][T13574] wg1 speed is unknown, defaulting to 1000 [ 316.055277][T13580] IPVS: using max 28 ests per chain, 67200 per kthread [ 316.448688][T13603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1927'. [ 316.478775][T13605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1931'. [ 317.101223][T13639] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1941'. [ 317.324807][T13650] netlink: 'syz.4.1944': attribute type 1 has an invalid length. [ 317.409690][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.416476][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.455621][T13662] netlink: 'syz.2.1948': attribute type 18 has an invalid length. [ 317.463768][T13662] netlink: 'syz.2.1948': attribute type 20 has an invalid length. [ 318.447204][T13703] macvlan2: entered promiscuous mode [ 318.466134][T13703] bridge0: entered promiscuous mode [ 318.474165][T13703] team0: Port device macvlan2 added [ 319.598907][T13763] wg1 speed is unknown, defaulting to 1000 [ 319.918746][T13777] syzkaller0: entered promiscuous mode [ 319.924581][T13777] syzkaller0: entered allmulticast mode [ 320.718436][T13796] netlink: 'syz.3.1986': attribute type 1 has an invalid length. [ 321.606598][T13804] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 321.614968][T13804] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 321.661614][T13798] wg1 speed is unknown, defaulting to 1000 [ 321.947860][T13817] x_tables: duplicate underflow at hook 3 [ 322.135556][T13828] FAULT_INJECTION: forcing a failure. [ 322.135556][T13828] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 322.152241][T13828] CPU: 0 UID: 0 PID: 13828 Comm: syz.2.1993 Not tainted syzkaller #0 PREEMPT(full) [ 322.152272][T13828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.152285][T13828] Call Trace: [ 322.152293][T13828] [ 322.152302][T13828] dump_stack_lvl+0x189/0x250 [ 322.152333][T13828] ? __pfx____ratelimit+0x10/0x10 [ 322.152365][T13828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.152386][T13828] ? __pfx__printk+0x10/0x10 [ 322.152408][T13828] ? __might_fault+0xb0/0x130 [ 322.152443][T13828] should_fail_ex+0x414/0x560 [ 322.152481][T13828] _copy_from_user+0x2d/0xb0 [ 322.152510][T13828] do_tcp_setsockopt+0x47d/0x1f40 [ 322.152539][T13828] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 322.152556][T13828] ? aa_sk_perm+0x81e/0x950 [ 322.152583][T13828] ? __pfx_aa_sk_perm+0x10/0x10 [ 322.152607][T13828] ? aa_sock_opt_perm+0xff/0x1b0 [ 322.152632][T13828] ? sock_common_setsockopt+0x36/0xc0 [ 322.152656][T13828] ? tcp_setsockopt+0x3d/0xe0 [ 322.152674][T13828] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 322.152711][T13828] do_sock_setsockopt+0x17c/0x1b0 [ 322.152746][T13828] __x64_sys_setsockopt+0x13f/0x1b0 [ 322.152782][T13828] do_syscall_64+0xfa/0xfa0 [ 322.152802][T13828] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.152822][T13828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.152842][T13828] ? clear_bhb_loop+0x60/0xb0 [ 322.152868][T13828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.152887][T13828] RIP: 0033:0x7f125898efc9 [ 322.152907][T13828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.152925][T13828] RSP: 002b:00007f1259870038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 322.152947][T13828] RAX: ffffffffffffffda RBX: 00007f1258be5fa0 RCX: 00007f125898efc9 [ 322.152962][T13828] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 322.152975][T13828] RBP: 00007f1259870090 R08: 0000000000000004 R09: 0000000000000000 [ 322.152987][T13828] R10: 0000200000001840 R11: 0000000000000246 R12: 0000000000000001 [ 322.153000][T13828] R13: 00007f1258be6038 R14: 00007f1258be5fa0 R15: 00007fff23a068d8 [ 322.153036][T13828] [ 322.525450][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.679028][T13840] xt_CT: You must specify a L4 protocol and not use inversions on it [ 322.728747][T13839] tipc: Enabled bearer , priority 0 [ 322.742731][T13842] syzkaller1: entered promiscuous mode [ 322.749426][T13839] netlink: 'syz.3.1997': attribute type 1 has an invalid length. [ 322.755497][T13842] syzkaller1: entered allmulticast mode [ 322.772981][T13844] vlan2: entered promiscuous mode [ 322.781519][T13844] team0: entered promiscuous mode [ 322.786960][T13844] team_slave_1: entered promiscuous mode [ 322.852053][T13845] D: renamed from syzkaller0 [ 322.860795][T13845] tipc: Disabling bearer [ 322.963076][T13847] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 323.316619][T13878] __nla_validate_parse: 7 callbacks suppressed [ 323.316641][T13878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2009'. [ 323.327056][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2007'. [ 323.334007][T13873] syzkaller0: entered promiscuous mode [ 323.341536][T13871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2007'. [ 323.368277][T13873] syzkaller0: entered allmulticast mode [ 323.608985][T13888] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 324.042652][T13909] veth1_to_bond: entered allmulticast mode [ 324.080970][T13909] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2017'. [ 324.102598][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2016'. [ 324.189343][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2017'. [ 324.328646][T13907] veth1_to_bond: left allmulticast mode [ 324.387090][T13925] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2019'. [ 324.563261][T13930] FAULT_INJECTION: forcing a failure. [ 324.563261][T13930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.586841][T13930] CPU: 0 UID: 0 PID: 13930 Comm: syz.0.2022 Not tainted syzkaller #0 PREEMPT(full) [ 324.586872][T13930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 324.586883][T13930] Call Trace: [ 324.586892][T13930] [ 324.586901][T13930] dump_stack_lvl+0x189/0x250 [ 324.586929][T13930] ? __pfx____ratelimit+0x10/0x10 [ 324.586961][T13930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.586983][T13930] ? __pfx__printk+0x10/0x10 [ 324.587004][T13930] ? __might_fault+0xb0/0x130 [ 324.587040][T13930] should_fail_ex+0x414/0x560 [ 324.587078][T13930] _copy_from_user+0x2d/0xb0 [ 324.587106][T13930] kstrtouint_from_user+0xc4/0x170 [ 324.587131][T13930] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 324.587175][T13930] proc_fail_nth_write+0x88/0x200 [ 324.587206][T13930] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 324.587244][T13930] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 324.587276][T13930] vfs_write+0x27e/0xb30 [ 324.587310][T13930] ? __pfx_vfs_write+0x10/0x10 [ 324.587333][T13930] ? __fget_files+0x2a/0x420 [ 324.587363][T13930] ? __fget_files+0x3a0/0x420 [ 324.587385][T13930] ? __fget_files+0x2a/0x420 [ 324.587420][T13930] ksys_write+0x145/0x250 [ 324.587445][T13930] ? __pfx_ksys_write+0x10/0x10 [ 324.587471][T13930] ? do_syscall_64+0xbe/0xfa0 [ 324.587496][T13930] do_syscall_64+0xfa/0xfa0 [ 324.587515][T13930] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.587536][T13930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.587555][T13930] ? clear_bhb_loop+0x60/0xb0 [ 324.587580][T13930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.587599][T13930] RIP: 0033:0x7f5bc5b8da7f [ 324.587618][T13930] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 324.587635][T13930] RSP: 002b:00007f5bc69da030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 324.587669][T13930] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5bc5b8da7f [ 324.587683][T13930] RDX: 0000000000000001 RSI: 00007f5bc69da0a0 RDI: 0000000000000004 [ 324.587695][T13930] RBP: 00007f5bc69da090 R08: 0000000000000000 R09: 0000000000000000 [ 324.587708][T13930] R10: 0000200000001840 R11: 0000000000000293 R12: 0000000000000001 [ 324.587719][T13930] R13: 00007f5bc5de6038 R14: 00007f5bc5de5fa0 R15: 00007fffe33b7f68 [ 324.587754][T13930] [ 324.882416][T13938] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2026'. [ 325.877672][T13971] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2033'. [ 326.241949][T13985] wg1 speed is unknown, defaulting to 1000 [ 326.637884][T13982] x_tables: duplicate underflow at hook 3 [ 326.654164][T14004] wg1 speed is unknown, defaulting to 1000 [ 327.039590][T14017] netlink: 'syz.1.2045': attribute type 1 has an invalid length. [ 327.055792][ T1103] vlan5: left promiscuous mode [ 327.168330][T14028] netlink: 'syz.0.2047': attribute type 1 has an invalid length. [ 327.218978][T14031] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2048'. [ 327.258506][T14026] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 327.281604][T14026] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 327.352101][T14028] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 327.434957][T14017] macvlan2: entered promiscuous mode [ 327.477628][T14017] macvlan2: entered allmulticast mode [ 327.501984][T14017] bond5: entered promiscuous mode [ 327.519462][T14017] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 327.556515][T14017] bond5: left promiscuous mode [ 327.626428][T14035] vlan2: entered allmulticast mode [ 328.074648][T14058] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 328.286643][T14072] netlink: 'syz.4.2059': attribute type 1 has an invalid length. [ 328.306490][T14070] tun0: tun_chr_ioctl cmd 1074025681 [ 328.647901][T14085] pim6reg1: entered promiscuous mode [ 328.653452][T14085] pim6reg1: entered allmulticast mode [ 328.713831][T14093] __nla_validate_parse: 4 callbacks suppressed [ 328.713854][T14093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2064'. [ 328.734729][T14086] wg1 speed is unknown, defaulting to 1000 [ 328.856198][T14099] openvswitch: netlink: Message has 2851 unknown bytes. [ 328.873883][T14099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.902248][T14099] netlink: 'syz.0.2066': attribute type 1 has an invalid length. [ 328.912665][T14099] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2066'. [ 329.276744][T14122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.287518][T14115] wg1 speed is unknown, defaulting to 1000 [ 329.294476][T14123] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 329.343435][T14120] wg1 speed is unknown, defaulting to 1000 [ 329.982615][T14150] wg1 speed is unknown, defaulting to 1000 [ 330.121877][T14154] wg1 speed is unknown, defaulting to 1000 [ 330.763265][T14176] wg1 speed is unknown, defaulting to 1000 [ 331.251558][T14192] Bluetooth: hci0: unsupported parameter 512 [ 331.268732][T14192] Bluetooth: hci0: invalid length 11, exp 2 for type 21 [ 331.314537][T14194] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2090'. [ 331.524983][T14199] bond0: entered promiscuous mode [ 331.541840][T14199] bond_slave_0: entered promiscuous mode [ 331.548645][T14199] bond_slave_1: entered promiscuous mode [ 331.572262][T14199] batadv0: entered promiscuous mode [ 331.586050][T14199] debugfs: 'hsr0' already exists in 'hsr' [ 331.598841][T14199] Cannot create hsr debugfs directory [ 331.617207][T14199] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 331.641235][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 331.650903][T14199] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 331.666629][T14207] netlink: 'syz.1.2094': attribute type 5 has an invalid length. [ 331.683403][T14199] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 331.695222][T14207] netlink: 'syz.1.2094': attribute type 8 has an invalid length. [ 331.723887][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2094'. [ 331.767975][T14207] geneve2: entered promiscuous mode [ 331.783823][T14207] geneve2: entered allmulticast mode [ 331.798630][ T7104] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 331.808816][ T7104] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 331.837149][ T7104] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 331.879512][ T146] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 331.891234][T14218] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2097'. [ 331.917916][T14218] dvmrp1: left allmulticast mode [ 332.019894][T14225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2100'. [ 332.125398][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 332.224401][T14240] netlink: 'syz.2.2103': attribute type 1 has an invalid length. [ 332.233023][T14240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2103'. [ 332.404887][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2107'. [ 332.808014][T14266] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2112'. [ 333.678090][T14302] wg1 speed is unknown, defaulting to 1000 [ 333.953849][T14312] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 333.967797][T14312] bond0 (unregistering): Released all slaves [ 334.299361][T14339] netlink: 'syz.2.2135': attribute type 29 has an invalid length. [ 334.314512][T14339] netlink: 'syz.2.2135': attribute type 29 has an invalid length. [ 334.326095][T14339] netlink: 'syz.2.2135': attribute type 29 has an invalid length. [ 334.334727][T14344] __nla_validate_parse: 2 callbacks suppressed [ 334.334746][T14344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2136'. [ 334.334838][T14339] netlink: 'syz.2.2135': attribute type 29 has an invalid length. [ 334.359451][T14339] netlink: 'syz.2.2135': attribute type 29 has an invalid length. [ 334.383970][T14339] netlink: 'syz.2.2135': attribute type 29 has an invalid length. [ 334.409342][T14339] netlink: 'syz.2.2135': attribute type 29 has an invalid length. [ 334.442509][T14339] netlink: 'syz.2.2135': attribute type 29 has an invalid length. [ 334.458511][T14339] netlink: 'syz.2.2135': attribute type 29 has an invalid length. [ 335.947590][T14441] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 335.960780][T14437] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2158'. [ 336.031533][T14444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2159'. [ 336.250855][T14452] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2160'. [ 336.342500][T14454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2161'. [ 336.876714][T14462] gretap1: entered promiscuous mode [ 336.892638][T14462] gretap1: entered allmulticast mode [ 337.083470][T14484] wg1 speed is unknown, defaulting to 1000 [ 337.167274][T14489] wg1 speed is unknown, defaulting to 1000 [ 337.449530][T14499] wg1 speed is unknown, defaulting to 1000 [ 337.626591][T14510] validate_nla: 32 callbacks suppressed [ 337.626612][T14510] netlink: 'syz.4.2173': attribute type 1 has an invalid length. [ 337.641043][T14510] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.2173'. [ 337.935357][T14523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2176'. [ 337.978438][T14523] netlink: 'syz.3.2176': attribute type 1 has an invalid length. [ 337.995169][T14523] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2176'. [ 338.649043][T14538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2180'. [ 338.968318][T14551] netlink: 'syz.3.2183': attribute type 1 has an invalid length. [ 338.976781][T14551] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2183'. [ 339.178098][T14566] netlink: 'syz.4.2187': attribute type 4 has an invalid length. [ 339.203074][T14564] wg1 speed is unknown, defaulting to 1000 [ 339.234331][T14566] netlink: 'syz.4.2187': attribute type 4 has an invalid length. [ 339.316538][T14570] FAULT_INJECTION: forcing a failure. [ 339.316538][T14570] name failslab, interval 1, probability 0, space 0, times 1 [ 339.325228][ T7104] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.349521][ T7104] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.359724][T14570] CPU: 1 UID: 0 PID: 14570 Comm: syz.1.2188 Not tainted syzkaller #0 PREEMPT(full) [ 339.359753][T14570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 339.359765][T14570] Call Trace: [ 339.359774][T14570] [ 339.359782][T14570] dump_stack_lvl+0x189/0x250 [ 339.359809][T14570] ? __pfx____ratelimit+0x10/0x10 [ 339.359840][T14570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.359861][T14570] ? __pfx__printk+0x10/0x10 [ 339.359885][T14570] ? __pfx___might_resched+0x10/0x10 [ 339.359912][T14570] ? fs_reclaim_acquire+0x7d/0x100 [ 339.359942][T14570] should_fail_ex+0x414/0x560 [ 339.359988][T14570] should_failslab+0xa8/0x100 [ 339.360016][T14570] __kmalloc_cache_noprof+0x6f/0x6f0 [ 339.360038][T14570] ? nft_pernet+0x23/0x240 [ 339.360056][T14570] ? nft_request_module+0x1c9/0x440 [ 339.360086][T14570] nft_request_module+0x1c9/0x440 [ 339.360120][T14570] ? __pfx_nft_request_module+0x10/0x10 [ 339.360170][T14570] nf_tables_expr_parse+0x4eb/0xa70 [ 339.360188][T14570] ? __kasan_kmalloc_large+0x85/0xa0 [ 339.360213][T14570] ? nf_tables_expr_parse+0x15a/0xa70 [ 339.360236][T14570] ? __pfx_nf_tables_expr_parse+0x10/0x10 [ 339.360256][T14570] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 339.360276][T14570] ? nft_pernet+0x23/0x240 [ 339.360301][T14570] ? nla_strcmp+0x106/0x140 [ 339.360329][T14570] nf_tables_newrule+0x12e5/0x28a0 [ 339.360373][T14570] ? __pfx_nf_tables_newrule+0x10/0x10 [ 339.360397][T14570] ? nfnl_pernet+0x23/0x240 [ 339.360435][T14570] ? __nla_parse+0x40/0x60 [ 339.360464][T14570] nfnetlink_rcv+0x11d9/0x2590 [ 339.360545][T14570] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 339.360592][T14570] ? ref_tracker_free+0x63a/0x7d0 [ 339.360650][T14570] ? __netlink_deliver_tap+0x807/0x850 [ 339.360679][T14570] ? netlink_deliver_tap+0x2e/0x1b0 [ 339.360730][T14570] netlink_unicast+0x82f/0x9e0 [ 339.360769][T14570] ? __pfx_netlink_unicast+0x10/0x10 [ 339.360797][T14570] ? netlink_sendmsg+0x642/0xb30 [ 339.360824][T14570] ? skb_put+0x11b/0x210 [ 339.360858][T14570] netlink_sendmsg+0x805/0xb30 [ 339.360900][T14570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.360934][T14570] ? aa_sock_msg_perm+0xf1/0x1d0 [ 339.360960][T14570] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.360986][T14570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.361016][T14570] __sock_sendmsg+0x21c/0x270 [ 339.361045][T14570] ____sys_sendmsg+0x505/0x830 [ 339.361074][T14570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.361118][T14570] ? import_iovec+0x74/0xa0 [ 339.361150][T14570] ___sys_sendmsg+0x21f/0x2a0 [ 339.361173][T14570] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.361239][T14570] ? __fget_files+0x2a/0x420 [ 339.361262][T14570] ? __fget_files+0x3a0/0x420 [ 339.361329][T14570] __x64_sys_sendmsg+0x19b/0x260 [ 339.361352][T14570] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.361385][T14570] ? __pfx_ksys_write+0x10/0x10 [ 339.361414][T14570] ? do_syscall_64+0xbe/0xfa0 [ 339.361440][T14570] do_syscall_64+0xfa/0xfa0 [ 339.361489][T14570] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.361523][T14570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.361544][T14570] ? clear_bhb_loop+0x60/0xb0 [ 339.361571][T14570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.361591][T14570] RIP: 0033:0x7f005d38efc9 [ 339.361619][T14570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.361636][T14570] RSP: 002b:00007f005e1a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.361659][T14570] RAX: ffffffffffffffda RBX: 00007f005d5e5fa0 RCX: 00007f005d38efc9 [ 339.361674][T14570] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 339.361688][T14570] RBP: 00007f005e1a9090 R08: 0000000000000000 R09: 0000000000000000 [ 339.361701][T14570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.361713][T14570] R13: 00007f005d5e6038 R14: 00007f005d5e5fa0 R15: 00007ffd02a25b18 [ 339.361751][T14570] [ 339.846162][ T7104] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.856627][ T7104] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.926505][T14578] __nla_validate_parse: 4 callbacks suppressed [ 339.926528][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2190'. [ 340.223013][T14591] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 340.250536][T14581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.267466][T14581] bond0: (slave rose0): Enslaving as an active interface with an up link [ 340.317901][T14594] netlink: 'syz.1.2194': attribute type 1 has an invalid length. [ 340.369680][T14597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2194'. [ 340.492258][T14594] macvlan2: entered promiscuous mode [ 340.498686][T14594] macvlan2: entered allmulticast mode [ 340.505913][T14594] bond6: entered promiscuous mode [ 340.512119][T14594] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 340.528838][T14594] bond6: left promiscuous mode [ 340.594085][T14602] geneve4: entered promiscuous mode [ 340.987948][T14624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2202'. [ 341.041891][T14628] block nbd1: Unsupported socket: should be TCP or UNIX. [ 341.043486][T14624] 8021q: adding VLAN 0 to HW filter on device bond7 [ 341.127401][T14630] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2202'. [ 341.224119][T14624] bond7 (unregistering): Released all slaves [ 341.436045][T14642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2207'. [ 341.523719][T14640] netlink: 'syz.0.2206': attribute type 14 has an invalid length. [ 341.617871][T14650] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2208'. [ 341.678226][T14653] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2209'. [ 341.703148][T14650] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 341.839150][T14667] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2211'. [ 341.928014][T14672] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 342.583949][T14701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2222'. [ 342.663150][T14699] wg1 speed is unknown, defaulting to 1000 [ 342.723758][T14713] netlink: 'syz.0.2223': attribute type 2 has an invalid length. [ 342.731842][T14713] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.2223'. [ 342.913763][T14723] bond7: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 342.931025][T14723] bond7 (unregistering): Released all slaves [ 343.079111][T14720] bond7: (slave bridge_slave_0): Device is not bonding slave [ 343.087824][T14720] bond7: option active_slave: invalid value (bridge_slave_0) [ 343.112497][T14720] bond7 (unregistering): Released all slaves [ 343.751633][T14765] bridge_slave_1: left allmulticast mode [ 343.765029][T14765] bridge_slave_1: left promiscuous mode [ 343.772326][T14765] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.784878][T14765] bridge_slave_0: left allmulticast mode [ 343.792351][T14765] bridge_slave_0: left promiscuous mode [ 343.798568][T14765] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.912403][T14765] bridge0 (unregistering): left promiscuous mode [ 343.937097][T14765] team0: Port device macvlan2 removed [ 344.344442][T14787] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 345.337332][T14834] __nla_validate_parse: 10 callbacks suppressed [ 345.337357][T14834] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2258'. [ 345.365555][T14834] unsupported nlmsg_type 40 [ 345.466092][T14838] wg1 speed is unknown, defaulting to 1000 [ 345.729034][T14846] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.2259'. [ 345.935198][T14853] wg1 speed is unknown, defaulting to 1000 [ 346.047429][T14865] netlink: 'syz.3.2266': attribute type 1 has an invalid length. [ 346.182911][T14859] wg1 speed is unknown, defaulting to 1000 [ 347.018613][T14895] tipc: Enabling of bearer rejected, failed to enable media [ 347.762824][T14920] netlink: 'syz.4.2281': attribute type 1 has an invalid length. [ 348.069216][T14928] bridge0: entered allmulticast mode [ 348.263678][T14942] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2287'. [ 348.295849][T14942] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2287'. [ 348.389826][T14941] wg1 speed is unknown, defaulting to 1000 [ 348.593211][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2289'. [ 349.071990][T14953] dummy0: entered promiscuous mode [ 349.082302][T14953] dummy0: left promiscuous mode [ 349.628948][T14974] wg1 speed is unknown, defaulting to 1000 [ 349.652580][T14977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2296'. [ 349.722060][T14980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2295'. [ 350.022363][T14987] wg1 speed is unknown, defaulting to 1000 [ 350.058299][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2298'. [ 350.163289][T15004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2300'. [ 351.388005][T15044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2307'. [ 351.407252][T15048] ip6gre1: entered allmulticast mode [ 351.601464][T15058] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2311'. [ 351.611602][T15058] 8021q: VLANs not supported on sit0 [ 351.621032][T15062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2312'. [ 351.650192][T15062] macvtap1: entered promiscuous mode [ 351.656556][T15062] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 352.035061][T15075] netlink: 'syz.4.2315': attribute type 13 has an invalid length. [ 352.393825][T15071] Set syz1 is full, maxelem 6117 reached [ 352.623493][T15099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2321'. [ 352.645422][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2321'. [ 352.777080][T15109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2325'. [ 352.941512][T15118] netlink: 7906 bytes leftover after parsing attributes in process `syz.0.2328'. [ 353.110645][T15124] netlink: 'syz.2.2331': attribute type 1 has an invalid length. [ 353.159852][T15126] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 353.171994][T15126] bond5 (unregistering): Released all slaves [ 353.210207][T15124] 8021q: adding VLAN 0 to HW filter on device bond7 [ 353.345700][T15143] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2336'. [ 353.670457][T15155] netlink: 'syz.3.2339': attribute type 1 has an invalid length. [ 353.678617][T15155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2339'. [ 354.361036][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2350'. [ 354.404314][T15190] team1: entered promiscuous mode [ 354.409671][T15190] team1: entered allmulticast mode [ 354.415849][T15190] 8021q: adding VLAN 0 to HW filter on device team1 [ 355.397458][T15248] netlink: 'syz.0.2362': attribute type 21 has an invalid length. [ 355.412682][T15248] netlink: 'syz.0.2362': attribute type 5 has an invalid length. [ 355.565017][T15256] netlink: 'syz.0.2364': attribute type 1 has an invalid length. [ 355.813411][T15265] tipc: Enabled bearer , priority 0 [ 355.842970][T15265] tipc: Resetting bearer [ 355.877131][T15264] tipc: Disabling bearer [ 356.214223][T15278] team0: Port device team_slave_0 removed [ 356.391158][T15292] vlan6: entered promiscuous mode [ 356.397597][T15292] vlan6: entered allmulticast mode [ 356.402753][T15292] hsr_slave_1: entered allmulticast mode [ 356.453310][T15292] __nla_validate_parse: 5 callbacks suppressed [ 356.453332][T15292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2375'. [ 356.490634][T15303] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2379'. [ 356.525735][T15306] netlink: 'syz.4.2377': attribute type 6 has an invalid length. [ 356.706248][T15307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2379'. [ 356.743303][T15303] wg1 speed is unknown, defaulting to 1000 [ 356.797982][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2381'. [ 356.911822][T15318] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2382'. [ 357.122176][T15318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2382'. [ 357.349838][T15329] wg1 speed is unknown, defaulting to 1000 [ 357.391792][T15332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2386'. [ 357.465755][T15331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2387'. [ 357.499148][T15333] bridge7: port 1(veth9) entered blocking state [ 357.519983][T15335] netlink: 10896 bytes leftover after parsing attributes in process `syz.0.2387'. [ 357.542387][T15333] bridge7: port 1(veth9) entered disabled state [ 357.560075][T15333] veth9: entered allmulticast mode [ 357.584716][T15333] veth9: entered promiscuous mode [ 357.721875][T15335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2387'. [ 357.750952][T15332] netlink: 'syz.1.2386': attribute type 7 has an invalid length. [ 357.770066][T15332] netlink: 'syz.1.2386': attribute type 8 has an invalid length. [ 357.994175][T15358] x_tables: duplicate underflow at hook 1 [ 358.396201][T15379] syzkaller0: entered promiscuous mode [ 358.404054][T15379] syzkaller0: entered allmulticast mode [ 358.417208][T15363] syzkaller1: entered promiscuous mode [ 358.422828][T15363] syzkaller1: entered allmulticast mode [ 359.043182][T15408] v: renamed from vlan0 [ 359.296668][T15412] vlan0: entered promiscuous mode [ 359.322671][T15412] macvtap0: entered promiscuous mode [ 359.363582][T15419] netlink: 'syz.4.2404': attribute type 6 has an invalid length. [ 360.150757][T15440] bond5: entered promiscuous mode [ 360.166442][T15440] bond5: entered allmulticast mode [ 360.196462][T15440] 8021q: adding VLAN 0 to HW filter on device bond5 [ 361.503472][T15505] __nla_validate_parse: 9 callbacks suppressed [ 361.503494][T15505] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2426'. [ 361.923767][T15518] Cannot find map_set index 0 as target [ 362.007715][T15521] dvmrp0: entered allmulticast mode [ 362.119419][T15529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2436'. [ 362.251332][T15529] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 362.286904][T15529] bond8 (unregistering): Released all slaves [ 362.382020][T15543] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 362.518715][T15534] wg1 speed is unknown, defaulting to 1000 [ 363.234077][T15563] netlink: 'syz.1.2444': attribute type 30 has an invalid length. [ 363.254633][T15564] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 363.803697][T15580] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20001 [ 363.995359][T15587] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2450'. [ 364.194674][T15593] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2453'. [ 364.230497][T15593] netlink: 'syz.4.2453': attribute type 1 has an invalid length. [ 364.351513][T15593] bond6: entered promiscuous mode [ 364.370828][T15593] 8021q: adding VLAN 0 to HW filter on device bond6 [ 364.414528][T15596] netlink: 'syz.1.2454': attribute type 1 has an invalid length. [ 364.430462][T15596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2454'. [ 364.582254][T15602] wg1 speed is unknown, defaulting to 1000 [ 365.056543][T15612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2456'. [ 365.086300][T15614] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 365.105779][T15612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2456'. [ 365.954390][T15648] syzkaller1: entered promiscuous mode [ 365.965802][T15648] syzkaller1: entered allmulticast mode [ 365.965906][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2470'. [ 365.996160][T15650] netlink: 'syz.0.2470': attribute type 21 has an invalid length. [ 366.102740][T15656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2473'. [ 366.403694][T15675] Bluetooth: hci0: invalid length 39, exp 2 for type 10 [ 366.415084][ T78] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20001 - 0 [ 366.423836][ T78] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20001 - 0 [ 366.424128][T15674] openvswitch: netlink: IP tunnel dst address not specified [ 366.439834][ T78] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20001 - 0 [ 366.457296][T15670] wg1 speed is unknown, defaulting to 1000 [ 366.457303][ T78] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20001 - 0 [ 366.590420][T15677] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2481'. [ 366.781465][T15687] netlink: 'syz.4.2482': attribute type 29 has an invalid length. [ 366.790947][T15680] wg1 speed is unknown, defaulting to 1000 [ 366.791076][T15686] netlink: 'syz.4.2482': attribute type 29 has an invalid length. [ 366.820225][T15687] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2482'. [ 367.139942][T15698] netlink: 'syz.1.2485': attribute type 5 has an invalid length. [ 367.489368][T15708] Bluetooth: hci0: unsupported parameter 512 [ 367.543113][T15708] Bluetooth: hci0: invalid length 11, exp 2 for type 20 [ 367.597296][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2489'. [ 367.712534][T15710] bridge6: entered allmulticast mode [ 368.039543][T15731] netlink: 14212 bytes leftover after parsing attributes in process `syz.2.2498'. [ 368.308476][T15735] wg1 speed is unknown, defaulting to 1000 [ 368.554974][T15746] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2501'. [ 368.582762][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2501'. [ 368.691527][T15751] netlink: 700 bytes leftover after parsing attributes in process `syz.2.2502'. [ 368.724374][T15751] netlink: 700 bytes leftover after parsing attributes in process `syz.2.2502'. [ 369.147119][T15769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2507'. [ 369.224935][T15771] wg1 speed is unknown, defaulting to 1000 [ 369.546139][T15789] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2511'. [ 369.585871][T15789] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 369.801489][T15803] bond0: (slave gre0): Error: Device type is different from other slaves [ 369.822314][T15803] netlink: 'syz.4.2515': attribute type 39 has an invalid length. [ 369.873316][T15806] wg1 speed is unknown, defaulting to 1000 [ 369.919544][T15808] veth0: entered promiscuous mode [ 370.282363][T15806] netlink: 'syz.0.2516': attribute type 16 has an invalid length. [ 370.310208][T15806] netlink: 'syz.0.2516': attribute type 17 has an invalid length. [ 370.351214][T15806] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 370.384539][T15808] veth0: left promiscuous mode [ 370.948066][T15835] xt_bpf: check failed: parse error [ 371.396797][T15852] netlink: 'syz.1.2526': attribute type 24 has an invalid length. [ 372.563647][T15884] openvswitch: netlink: IP tunnel attribute has 641 unknown bytes. [ 372.586720][T15883] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 372.615337][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 372.856968][T15892] __nla_validate_parse: 3 callbacks suppressed [ 372.856990][T15892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2537'. [ 372.899181][T15894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2538'. [ 372.916220][T15892] wg1 speed is unknown, defaulting to 1000 [ 372.922153][T15894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2538'. [ 372.937265][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2537'. [ 372.956924][T15892] netlink: 'syz.1.2537': attribute type 13 has an invalid length. [ 372.965060][T15892] netlink: 'syz.1.2537': attribute type 17 has an invalid length. [ 372.996850][T15892] 0ªX¹¦D: left allmulticast mode [ 373.019071][T15892] ip6_vti0: left promiscuous mode [ 373.027717][T15892] ip6_vti0: left allmulticast mode [ 373.078255][T15892] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 373.202779][T15897] netlink: 'syz.0.2539': attribute type 3 has an invalid length. [ 374.278534][T15927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2549'. [ 374.315484][T15927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2549'. [ 374.505669][T15934] Bluetooth: MGMT ver 1.23 [ 374.900473][T15945] ieee802154 phy0 wpan0: encryption failed: -90 [ 375.083476][T15951] bond0: option packets_per_slave: invalid value (16779898) [ 375.115483][T15951] bond0: option packets_per_slave: allowed values 0 - 65535 [ 375.245207][ T5828] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 375.646577][T15929] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 375.654388][T15929] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 375.693727][T15929] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 375.701983][T15929] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 375.727548][T15929] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 375.745375][T15929] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 375.780861][T15929] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 375.802266][T15929] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 375.829666][T15964] gtp2: entered promiscuous mode [ 375.876930][T15966] netlink: 'syz.2.2560': attribute type 1 has an invalid length. [ 375.887129][T15966] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2560'. [ 375.903116][T15929] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 375.915148][T15929] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 375.923595][T15929] CPU: 1 UID: 0 PID: 15929 Comm: syz.0.2550 Not tainted syzkaller #0 PREEMPT(full) [ 375.932998][T15929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 375.943178][T15929] RIP: 0010:klist_remove+0x14a/0x340 [ 375.948497][T15929] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 c9 36 e3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 aa 36 e3 f6 49 8b 44 24 58 48 89 44 24 08 [ 375.968155][T15929] RSP: 0018:ffffc90004007800 EFLAGS: 00010202 [ 375.974321][T15929] RAX: 000000000000000b RBX: ffff88807ad33c80 RCX: 0000000000000000 [ 375.982295][T15929] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 375.990530][T15929] RBP: ffffc90004007900 R08: ffffffff8f84c103 R09: 1ffffffff1f09820 [ 375.998689][T15929] R10: dffffc0000000000 R11: fffffbfff1f09821 R12: 0000000000000000 [ 376.006934][T15929] R13: 1ffff1100f7b9d8c R14: ffff88807bdcec60 R15: dffffc0000000000 [ 376.015085][T15929] FS: 00007f5bc69da6c0(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 376.024300][T15929] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.031082][T15929] CR2: 00005555561d9808 CR3: 0000000084e00000 CR4: 00000000003526f0 [ 376.039416][T15929] Call Trace: [ 376.042702][T15929] [ 376.045637][T15929] ? __pfx_klist_remove+0x10/0x10 [ 376.050846][T15929] ? __pfx_kobject_move+0x10/0x10 [ 376.055962][T15929] ? do_raw_spin_unlock+0x122/0x240 [ 376.061430][T15929] ? get_device_parent+0x366/0x3a0 [ 376.066637][T15929] device_move+0x193/0x700 [ 376.071500][T15929] hci_conn_del_sysfs+0xb8/0x170 [ 376.076823][T15929] hci_conn_del+0xc33/0x11b0 [ 376.081511][T15929] hci_conn_hash_flush+0x191/0x230 [ 376.086718][T15929] hci_dev_close_sync+0xaef/0x1330 [ 376.091839][T15929] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 376.097396][T15929] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 376.103310][T15929] hci_dev_do_close+0x2f/0x90 [ 376.107993][T15929] hci_rfkill_set_block+0x21d/0x2e0 [ 376.113288][T15929] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 376.119095][T15929] rfkill_set_block+0x1d2/0x440 [ 376.123953][T15929] rfkill_fop_write+0x44b/0x570 [ 376.128813][T15929] ? __pfx_rfkill_fop_write+0x10/0x10 [ 376.134271][T15929] ? security_kernfs_init_security+0x250/0x290 [ 376.140711][T15929] ? rw_verify_area+0x255/0x4d0 [ 376.145566][T15929] ? __lock_acquire+0xab9/0xd20 [ 376.150423][T15929] ? __pfx_rfkill_fop_write+0x10/0x10 [ 376.155910][T15929] vfs_write+0x27e/0xb30 [ 376.160167][T15929] ? __pfx_vfs_write+0x10/0x10 [ 376.164932][T15929] ? __fget_files+0x2a/0x420 [ 376.169530][T15929] ? __fget_files+0x2a/0x420 [ 376.174307][T15929] ? __fget_files+0x3a0/0x420 [ 376.179167][T15929] ? __fget_files+0x2a/0x420 [ 376.183769][T15929] ksys_write+0x145/0x250 [ 376.188113][T15929] ? __pfx_ksys_write+0x10/0x10 [ 376.192994][T15929] ? do_syscall_64+0xbe/0xfa0 [ 376.197704][T15929] do_syscall_64+0xfa/0xfa0 [ 376.202230][T15929] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.207432][T15929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.213500][T15929] ? clear_bhb_loop+0x60/0xb0 [ 376.218326][T15929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.224350][T15929] RIP: 0033:0x7f5bc5b8efc9 [ 376.228787][T15929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.248682][T15929] RSP: 002b:00007f5bc69da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 376.257141][T15929] RAX: ffffffffffffffda RBX: 00007f5bc5de5fa0 RCX: 00007f5bc5b8efc9 [ 376.265297][T15929] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000005 [ 376.273270][T15929] RBP: 00007f5bc5c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 376.281338][T15929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.289411][T15929] R13: 00007f5bc5de6038 R14: 00007f5bc5de5fa0 R15: 00007fffe33b7f68 [ 376.297496][T15929] [ 376.300635][T15929] Modules linked in: [ 376.305440][T15929] ---[ end trace 0000000000000000 ]--- [ 376.312684][T15929] RIP: 0010:klist_remove+0x14a/0x340 [ 376.318534][T15929] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 c9 36 e3 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 aa 36 e3 f6 49 8b 44 24 58 48 89 44 24 08 [ 376.339112][T15967] sctp: [Deprecated]: syz.1.2559 (pid 15967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.339112][T15967] Use struct sctp_sack_info instead [ 376.356346][T15929] RSP: 0018:ffffc90004007800 EFLAGS: 00010202 [ 376.363323][T15929] RAX: 000000000000000b RBX: ffff88807ad33c80 RCX: 0000000000000000 [ 376.372950][T15929] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 376.381430][T15929] RBP: ffffc90004007900 R08: ffffffff8f84c103 R09: 1ffffffff1f09820 [ 376.390010][T15929] R10: dffffc0000000000 R11: fffffbfff1f09821 R12: 0000000000000000 [ 376.399730][T15929] R13: 1ffff1100f7b9d8c R14: ffff88807bdcec60 R15: dffffc0000000000 [ 376.408540][T15929] FS: 00007f5bc69da6c0(0000) GS:ffff888125d0c000(0000) knlGS:0000000000000000 [ 376.418643][T15929] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.425670][T15929] CR2: 00007f005e167d58 CR3: 0000000084e00000 CR4: 00000000003526f0 [ 376.433902][T15929] Kernel panic - not syncing: Fatal exception [ 376.440234][T15929] Kernel Offset: disabled [ 376.444556][T15929] Rebooting in 86400 seconds..