last executing test programs: 3.145145449s ago: executing program 3 (id=1990): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0xd66771a5e8224ded, 0x0, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x24}}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe9b, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0xfffffffffffffd00}, 0x48) 2.775956744s ago: executing program 3 (id=1996): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0xba54}]}, 0x10) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0xff07, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) shutdown(r3, 0x0) sendmmsg$inet(r3, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000ac0)="e0e8e74e575d1264eb09d7130700008ec9cdcde60dd72a0b84c4f3eeee20a8f724d58768ac3a97ae53c7bd5660e18ecbf8c745459cb3d22e52a54012b4349b4cfb8950312455e506b2000000000000a8a38b8b4730d85094298b62d85632c91209a52439c093f46388d7f441d812974045baee79b1381f8552e3593c99d0d24cfe2e26cdc8a0acf6c027210e5a5fdbf6bfe79e0cac016feaf630cea4e6", 0x9d}], 0x1, 0x0, 0xfffffffffffffe71}}, {{0x0, 0x0, &(0x7f0000000240)}}, {{&(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000240)="ac8dda20e119b4de95406784dfbd5747721fe8e639e0608235eb1dcca2dd30d6a370edae335acbc43868de311f3fbadb0d6463437bc908d0e0faf73700eee36fff1ddbfa0d03a77ebe988b05e06b8cda393eef6083e444deb2213dc511dab45b", 0x60}], 0x1}}], 0x3, 0x4000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8000f28, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000004000026e99e2d503ef4ae48781d0389cd4f1800"/34, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r6, @ANYRES8=r0, @ANYRES64, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ffffbfff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="dd1e00"/28], 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ffc55600"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="02000000000000000100"/28], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r9) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x20, 0xa, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000070000000574fcff930e0000182a0000", @ANYRES32, @ANYBLOB="0000000007000000186000de060000000000000008000000186500001000000000000000070000009500000008000000a577aebf1b9c6a15d52a3fb8be8a4bbd64e785f52e4c9b", @ANYRESDEC=r2, @ANYRESOCT=r7], &(0x7f0000000300)='GPL\x00', 0x775, 0x2a, &(0x7f0000000340)=""/42, 0x41000, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x10, 0x8, 0x3}, 0x10, 0x0, r2, 0x3, &(0x7f0000000940)=[r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8, r9], &(0x7f0000000980)=[{0x3, 0x1, 0x10, 0x7}, {0x2, 0x4, 0x2, 0x63c47811abfef577}, {0x4, 0x1, 0x8, 0xc}], 0x10, 0x100}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB='\a\x00'/20, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRES16=r3], 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="08000800072b002000456f002d00660000401190780a01010100000020c1963bf57e73e3279f00"/59], 0x3b) 2.500880131s ago: executing program 1 (id=1999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x1c2, 0x4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}}, 0x94) 2.394806234s ago: executing program 1 (id=2001): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0xeb, "a23593cd9b6567f9177acf86df0a43aaf9985cf84087277418aee1ad968b835d20a30b673425352370eed21e9b3c6a8f0521891ad0c5031b5b7200767451ec86b8372b9942d84f49980c377440dcc70490cb077fd8132fc0da08240ef735bf41a3664bbcebfaa3d885ae880c08d9f45e79559acf92b31793e8c7ae953f01a40483e5f2f28e7f9d838a494406e71c42365bdb2cec48a9338271c36dc8127ac4ca4e7f746d8fe2a0324b1b82adf10a43c0c22706af0251cac6c06b93dc7d2a4311027e534f55d35fbaf805fcc71bb329ce9f075694ae10c41cb0ee6c347b75203e5184595435cd0e5e02f5e2"}, &(0x7f0000000180)=0xf3) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x5, 0xfff3, 0x0, 0x9, 0x81, 0x200, 0x8, 0x8, r1}, &(0x7f0000000200)=0x20) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, &(0x7f00000002c0)=0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x2, 0x2, 0x8, 0x2, 0x1}, 0x20) setsockopt$inet6_buf(r3, 0x29, 0x3d, &(0x7f0000000340)="45b69089b63813b35da81baa30451f3c585f25a0b7e16a6132d44e023253540578c2de3aa4259d1159172c2ebc3b4ac23c230e80892bc426b6ee99c3aef3e78a2d2c6692c2a1f134a1ca11e37041d05d163a4ecbab93a34bb90f56d6d3be5d2246968a2276935f7a", 0x68) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000003c0)={@local, 0x3, 0x2, 0x3, 0x0, 0x2, 0x8}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000400)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "fcede35891bd5a"}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000001400)={r4, 0x4}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000002400)={0xffffffffffffffff}) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000002480)=0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000024c0)={'bridge_slave_1\x00', 0x2000}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000002500)={0x8, 0x8200, 0x9, 0x8001, r2}, &(0x7f0000002540)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000002580)={r7, 0xb2f9, 0x20}, &(0x7f00000025c0)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000002600)=@assoc_value={r8, 0x800}, 0x8) close(r5) sendmsg$nl_route_sched(r5, &(0x7f0000002780)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002740)={&(0x7f0000002680)=@deltaction={0xb8, 0x31, 0xa8e1be8dc79898a2, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x58cf}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc0000}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff00}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0xc080}, 0x4000000) getsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f00000027c0), &(0x7f0000002800)=0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000002840)={0xb597, 0x7, 0x72b}, 0xc) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000002880)=0x0) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000002980)={0x0, 0x8, 0x2}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000002d80)={{r5}, r9, 0x12, @inherit={0x90, &(0x7f00000028c0)={0x0, 0x9, 0x101, 0x0, {0x0, 0x8, 0x3, 0x0, 0x1}, [0x401, 0x5d7, 0x9, 0x7, 0x6, 0x1d, 0x3, 0x3ff, 0x9]}}, @devid=r10}) r11 = socket$rxrpc(0x21, 0x2, 0xa) tee(r11, r5, 0x1, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003dc0), r5) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000003f00)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x2440a218}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e00)={0x84, r13, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7b}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x36, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @device_a, @initial, {0x8, 0xff}, @value=@ver_80211n={0x0, 0x40, 0x1}}, @sp_mp_open={0xf, 0x1, {0x8d8, {0x1, 0x8, [{0x4}, {0x49}, {0xb}, {0x4}, {0x5}, {0x16, 0x1}, {0x16, 0x1}, {0xb, 0x1}]}, @val={0x72, 0x6}, @void}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x73}]]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x40810) 1.443564336s ago: executing program 1 (id=2014): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x1e}]}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x3e, 0x0, 0x2}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x4c8, 0x2f8, 0x0, 0x2f8, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x80000001, 'system_u:object_r:tty_device_t:s0\x00'}}}, {{@arp={@empty, @local, 0xff000000, 0x0, 0xa, 0xa, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0x7f]}}, 0x1, 0x1, 0x69b, 0x1, 0x8000, 0x2ec, 'bridge_slave_1\x00', 'wg1\x00', {0xff}, {}, 0x0, 0x54}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x24}, @remote, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0x3, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000240)={r4, @in={{0x2, 0x4e20, @broadcast}}, [0xc691, 0x5, 0x6, 0x9, 0xffffffff, 0x10001, 0x10000, 0x4, 0x7, 0x80000000, 0x98, 0x9, 0x7fff, 0x0, 0x9]}, &(0x7f0000000340)=0x100) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES8], 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000005) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x7) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000100)={0x3, 0x1}) 1.398684193s ago: executing program 0 (id=2015): syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b001142"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c0000000000010000090500010007000000aa46374ebf53e5b0455e892f76b5ce30baf783876c58dde040f8914db51db2a139d78c13c2b56815cfabb5f78e60a1534a"], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x0) (async) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000800) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="f78d9c63b9dc5e0c00c529e38fff4800bf52163448412ba8", 0x18}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863fff5cfe6cb55b5bb9fa6935849e604fe035bb", 0xffffff9a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4bb3766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721192af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48", 0xbd}], 0x3, 0x0, 0x0, 0x20004000}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x43) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00}, 0x94) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000001000)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r8, 0x25, 0x4, @void}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) (async, rerun: 32) r12 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r12, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="28000000020801080000000007000000020000060900010073797a30000000000500030088000000050da8f05812785548b90ac3636a39136e49216a91daefea79cde2fec038cb6afbd0c20d404503bfff6e2c4f5adf8bd90f0930356800000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4040045) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0xfff2, 0x10}}}, 0x24}}, 0x0) (async) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000a00)={@initdev, 0x0}, &(0x7f0000000a40)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000c00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ec0)=ANY=[@ANYRESOCT, @ANYRES16=r5, @ANYBLOB="00042bbd7000fbdbdf25060000004400018014000200766c616e30000000000000000000000008000300030000000800030001000000080003000300000014000200767863616e31000000000000000000000c00018008000100", @ANYRES32=r8, @ANYBLOB="040001800c00018008000300010000000c000180080003000200000020000180080003000300000014000200766972745f77696669300000000000006400018008000100", @ANYRES32=r9, @ANYBLOB="080003000300000008000100", @ANYRES32=r10, @ANYBLOB="1400020069705f7674693000000000000000000008000100", @ANYRES32=r11, @ANYRES16=r8, @ANYRES64=r6, @ANYBLOB="080001006beac4bf21d5c33e3ed7cadc4f049c18421bf07309f957ee8c09ccfd7221306af32cd8b4cec24fb4731021f1079d73", @ANYRES32=r15, @ANYBLOB="14000200697036746e6c30000000000000000000"], 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x20044841) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.294633203s ago: executing program 1 (id=2017): r0 = socket(0x32, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x5ee}], 0x1}, 0x4011) r6 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffff000000000300000085000000410000001800000000000000000000000400000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x13, 0x0, &(0x7f0000000180)="5488c6000066b0b3f3f5031e81007468a297fa", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x9}, 0x50) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x5, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000000000)={0x7, 'veth0_to_bond\x00', {0x3ff}, 0x8}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x9, 0xa, 0x1, 0x6, 0x6}}, {0x4}}]}]}, 0x64}}, 0x4000010) 1.231912582s ago: executing program 0 (id=2019): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0xa1, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x7c}}, 0x488c1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000002c40), 0x0, 0x200000c0) 1.14828568s ago: executing program 2 (id=2020): socket$alg(0x26, 0x5, 0x0) r0 = socket(0x10, 0x803, 0x2) r1 = epoll_create1(0x80000) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000000d}) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0xe0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x4000) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r5) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x2c, r7, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004891}, 0x8048004) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000440)=[{&(0x7f0000001900)="de", 0x1}], 0x1) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) close(r3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x20000008}) shutdown(r2, 0x0) close(r1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r9, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES32=r9, @ANYBLOB="eb91"], 0x40c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) 1.1477395s ago: executing program 4 (id=2021): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair(0x22, 0x2, 0x4, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) sendmsg$sock(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000003c0)=@in={0x2, 0x4e20, @remote}, 0x80, 0x0}, 0x890) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x36, 0xfffffeb2, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000000000010000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xfe33) (async) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xfe33) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0), 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000)={0x396}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x2d, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6c9d, 0x0, 0x0, 0x0, 0xc31}, {}, {}, [@jmp={0x5, 0x0, 0x5, 0x6, 0x4, 0x50, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}, @map_val={0x18, 0xd1441c6fa6e67309, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xef41}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @alu={0x7, 0x0, 0x7, 0x8, 0x5, 0x40, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x6, 0xe5, &(0x7f00000006c0)=""/229, 0x41100, 0xc, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x2, 0x7a, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x2d, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6c9d, 0x0, 0x0, 0x0, 0xc31}, {}, {}, [@jmp={0x5, 0x0, 0x5, 0x6, 0x4, 0x50, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}, @map_val={0x18, 0xd1441c6fa6e67309, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xef41}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @alu={0x7, 0x0, 0x7, 0x8, 0x5, 0x40, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x6, 0xe5, &(0x7f00000006c0)=""/229, 0x41100, 0xc, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x2, 0x7a, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@fallback=r3, 0x12, 0x0, 0x4, &(0x7f0000000900)=[0x0], 0x1, 0x0, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="31032fbd7000fddbdf", @ANYRES32=r9], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000ac0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a80)={@ifindex=r9, r5, 0xa, 0x2000, 0x0, @value=r10, @void, @void, @void, r6}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a80)={@ifindex=r9, r5, 0xa, 0x2000, 0x0, @value=r10, @void, @void, @void, r6}, 0x20) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) socket$inet6(0xa, 0x2, 0x0) (async) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r12, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) bind$inet6(r12, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r12, 0x1, 0x31, &(0x7f0000001600), 0x4) (async) setsockopt$sock_int(r12, 0x1, 0x31, &(0x7f0000001600), 0x4) 1.115349354s ago: executing program 0 (id=2022): r0 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0x4, 0x4, 0x560, 0xffffffff, 0x128, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x490, 0x490, 0x490, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x84d3], 0x0, 0xa, 0x2}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@private0, @local, [0xffffffff, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xff, 0xffffffff], 'veth0\x00', 'dummy0\x00', {}, {0xff}, 0x87, 0xf, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"a82b"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x228, 0x270, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast2, [0xffffff00, 0xffffffff, 0xffffff, 0xff000000], @ipv4=@private=0xa010102, [0x0, 0xffffff00, 0xff000000, 0xffffff00], 0x4d5, 0x3502, 0x3b, 0x0, 0x1a, 0x2}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffffff, 0x0, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0xff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d6, 0x3501, 0x0, 0x1, 0x8, 0x5}, {@ipv6=@mcast2, [0xff000000, 0xff, 0xffffff00, 0xffffffff], @ipv6=@mcast2, [0xffffff, 0xff000000, 0xff, 0xff000000], 0x4d5, 0x3504, 0x8, 0x0, 0x4, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0x0, 0xff, 0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1a}, [0xffffff00, 0xffffff00, 0xff], 0x4d4, 0x3505, 0x4, 0x1, 0xf, 0x4}], 0xb}}, @common=@ipv6header={{0x28}, {0x77, 0x4}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x161b060f1436d4f2}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f00000005c0), 0x10) read(r2, &(0x7f00000027c0)=""/4073, 0xfe9) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000580)=0x2, 0x4) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "eb778610de7e3023"}, 0x10}}, 0x4000040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000500002c3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020c000b4000000000000000bb08000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a310000000009000100100000800c00018006000100d1030000140000001100010000000000000000000100000a00"/164], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x80c0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000015c0)=@newtaction={0x1b4, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x1a0, 0x1, [@m_ctinfo={0xdc, 0x1, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x35}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x101}]}, {0x9e, 0x6, "aaafd39d51f8da1f1a2c0134e4479b79ed814eaf8f1a4b10567a34232e60b974227194d49d3f84957c0f1ba23969cdc6f9ebdc582fb74e4cf7e3fd575bc8a9fb37e8c13d3df6601cd671d5e5bd60386da653b836e6d798d733d395e8bfe1b07edccea6716e564325c75a0f1459601ccf271e8692911ae85ec26d3c6f7c35c6e2abb1b26387d15ade8d06b17797558950f0120de8b3f31ef2632e"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_pedit={0xc0, 0x0, 0x0, 0x0, {{0xa}, {0x84, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x80, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x11, 0x6, "6bff6d61806db5939fa0fb9ff8"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r7) ioctl$XFS_IOC_EXCHANGE_RANGE(r2, 0x40285881, 0x0) recvfrom(r9, 0x0, 0x0, 0x40002062, 0x0, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r10, &(0x7f0000007a80)={0x0, 0x0, 0x0}, 0x10000) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x34) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) 1.067182685s ago: executing program 1 (id=2023): r0 = socket$alg(0x26, 0x5, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000c80), &(0x7f0000000d00)=0x6e) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80800) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f0000000000)) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140087b105000000dbdf25000000000000000000b8c318c9d93e9353d3e52f1cb9178281531f9551f7e13c80894b30346a350c5f488c5ceaa23703b63e15de083b7116d08a28076aa12b984ac781403ed906303056fc426535ca8182194ac171151f47bee7566025eedb0077655f6554baf3fd28eb871c1309bc641136b03e32cf579ccc5cee2f0f821d3fc7bdf72412d6c2a57f1b7dc8045e14eb"], 0x14}, 0x1, 0x0, 0x0, 0x45844}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000c40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xe8, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x21ad}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x100}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x100}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20040040}, 0x5) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000000)={0x2b, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x200, @mcast1, 0xffffffff}}}, 0x108) getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) setsockopt$inet6_buf(r5, 0x29, 0x32, &(0x7f0000000440)="763d04e808620b6a6c6ef273ed8a66d3f408d68ab8", 0x15) r7 = accept4$tipc(r2, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x0) recvmsg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000680)=""/240, 0xf0}, {&(0x7f00000008c0)=""/101, 0x65}, {&(0x7f0000000940)=""/202, 0xca}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/94, 0x5e}, {&(0x7f0000002580)=""/250, 0xfa}, {&(0x7f0000000340)=""/35, 0x23}, {&(0x7f00000026c0)=""/249, 0xf9}, {&(0x7f00000027c0)=""/127, 0x7f}, {&(0x7f0000002840)=""/43, 0x2b}], 0xa, &(0x7f0000000780)=""/259, 0x103}, 0x2003) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/97, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0xfffffffffffffefd}, 0x0) 889.54547ms ago: executing program 0 (id=2024): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r2, 0x8993, &(0x7f0000000300)={'bond0\x00', @ifru_settings={0x200, 0xe7a, @fr_pvc=0x0}}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'bond_slave_0\x00', @random="0134013590ff"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt(r3, 0x84, 0x81, &(0x7f0000000300)="1a00000002000000", 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) 888.410091ms ago: executing program 2 (id=2025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0xffffffff}, 0x50) (async) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) recvmsg(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x140) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000500)="e87a0e9ad61304a8b59000957bb26569908190442261bd645dc4107d26b7c92a738b761561ce44df2ced095748dc743e5c9200e5999a78d91c85eb4107ae76b32d299f377fd2cfcf553d7e0d9edf717c1decca77dce55fc276f7f81cab7e69bd368f1972184d9d3c26e00c5f7394c9a2b598817e62bf28986cf7eca20c29fa8b95b42e8969613d54ee6dc69cbda7fc7b75737a08ad6faddaf4d1e6d8e9c3be42eb8a33b7e8da0d0e64977b5f43a106a6602ed862b1dea23b09ec303af4", 0xbd) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x480, 0x0, 0x310, 0xfeffffff, 0x240, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x0, 0x100], 0x0, 0x40}}, @common=@inet=@multiport={{0x50}, {0x1, 0x1, [0x4e20, 0x4e22, 0x4e20, 0x4e20, 0x4e24, 0x4e20, 0x4e24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e24, 0x4e22], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3]}}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000208000b400000000070000480340001800b000100657874686472000024000280080001400000000c0800034000000002080004400000002205000200070000003800018008000100636d70002c00028018000380090001009c979b32261fbabdae20b34f870e0000080001400000000208000240000000000900010073797a30"], 0x10c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$inet6(0xa, 0x80002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001880)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r7, @ANYRES8=r7], 0x1c}}, 0x24024080) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r8, 0x1) (async) unshare(0x20000400) (async) pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x5, 0x3, 0xffffffc, 0x1, 0x0, 0xfffffffffffffffa}, &(0x7f0000000000)={0x18, 0x8, 0x1ff, 0x0, 0x7ff, 0x400000, 0x0, 0x92}, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="67000000000000006afc7b9fccbd3e76db7af846cd8c426bf6254f52c70700fffa3ec12c7eedd44554ad479f17ed2e57852430cbe09bc04b9b3da908d800b2922c0a775babb0042653c54145a335903e1ee127c73cb041a03900ae733641f4979c3e093bc3c913b9c98bb42f7d04bd2e4cf53097f7fdee09613782be5b1627687c1f80d1258d48f2"], 0x8) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r9, 0xffffffffffffffff}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x1d, &(0x7f0000000940)=ANY=[@ANYBLOB="180500000800000000000000f7ffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70400000800000085e5995530000000b7080000000000007b8af8ff0083a7fd3e033d3c2f4beec875f5a64b2b000000b7080000020000007b8af0ff00000000bfa100000000000000010000f8ffffffbfa400000000000007040000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r11, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0xfffffd2d, 0x0, 0x0}, 0x50) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r11, 0x4058587a, &(0x7f0000000340)={{r10, &(0x7f00000000c0)='\x00', 0x0, &(0x7f00000006c0)={@_ha_fsid={[0x9, 0xf8]}, {0x2, 0x2, 0x80000001, 0x1}}, 0x4da, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0x8}, {[0xb, 0x4, 0x7, 0x28f]}, 0x4, 0x6d, &(0x7f0000000280)=""/109}) 885.001557ms ago: executing program 4 (id=2026): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)="0ecabff79a705d3689746d2ca5966d30179474d75489ac1d2a917286290a9eb989d09b6d2e7bbaf567be155543a47a361cdffca2a0e11d00f17729662ddc8779c042e76d8951b0cf4cbaabf9691e206d328b55c02ab7fbf40413232ff81b1ccf235f460c7016f4a7b1b3a0c57ea50563fd676e152e61213ab8cdfe05785a243ca59d9132120729e5b40507b40f1c5b962bb2ccafcd61fd5dfcd0ecd82d4b7c13a750788c99e4512dcff70b2a8fee6e2bef5535d25103b43faf4cbc0baed6131fa13b4d", 0xc3}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRES16=r0, @ANYRES16=r6, @ANYBLOB="010000000000000000003a0000000e0001006e65746465ff73696d0000000f00020754657464657673696d300000cf398487fbc4860c420ebac94cccc941cda18d44aea839508db08090c34bc46bba064a3bfd9af7fa21e522e435f0a65f7ecd5a0ed7cfff83c9bb493a4fc66ef4cbe39d9cb971c1921d81ca4cc0c13847b1dacb83096049a3c30eec35341d4afcb1db2625fd891a415c7e82447322feb39b3e6a01338f93e7a2129d134f4f647cf42668acf13ef86dfe2522528b0e9c67da15c4a223539f814e3e508e86f5dd1621db1f43c7df7b78b8fb62b9add488d8acb5ffb881c998b1f0833e1a108fce9301caedc7aded33bd"], 0x34}}, 0x0) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000240)=0x7, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800f000057051d0028"], 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000003000000000000000000000b0000000000000000000000090200000000000000000900000000"], 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r7, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x11, 0x16, &(0x7f0000000600)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdb9, r8, r1}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0xa0, r11, 0x1, 0x0, 0xffffffff, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0xa0}, 0x2, 0x34005}, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x3ffd, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x6}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bind$alg(r12, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="08002bbd7000fbdbdf2506000000080004000a01016f626a6563745f723a7368656c6c5f657865635f743a773039000008000400e000000114000200ff01cfd0e90987f7ef699e34d1e30b52d1000000000000400000000000000100"/105], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0xe0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000040a030000000000000000000a00000a0900010073797a3100000000090003"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newaddr={0x50, 0x14, 0x5a3, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x64, 0xfe, r2}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x8a}, @IFA_LABEL={0x14, 0x3, 'ip6tnl0\x00'}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_CACHEINFO={0x14, 0x6, {0x200, 0xffff, 0x7, 0x10}}]}, 0x50}}, 0x8000) sendmsg$inet(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 804.952336ms ago: executing program 3 (id=2027): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$xdp(0x2c, 0x3, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000380)="613200000000000000ff194d5de31f769d8b405de46245a9b865677d171b3bffdd5c8138bd39ec75982a44390ddf1b5c219b7dcca1deb0e789d5c19861f95fd24872844ece969f40c32cbbb87d02c98e46cca3bfacb9c88b6631736ea7a3aa66ca61795f05fa00ea91c078b092f2f8ea6398b99b860f243e67107485b67ac060357d63ea554f76545104f92e7d11f4d9989fe0cf7cf24f2b4e5f82bce1e8d6045d81af5bb22288a4dc1c8245d703310f3e54b44cbb5fb8c5aed9a82502f3599a182b8c66ce4764add1b64d3d56791cadd7d4a983de4f3b258748a0fb71c16cc2f6e9861afeff4c44bf91b6b21e7bca63d1d04da9c174fb8505cd4c88cce45d095fc306a7bbd44bd84ea2579c8c5b0078e8f1c4391257b8af19fb2a4d0d66e76cf9e953ac21b0a1", 0x127}], 0x1, 0x9) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f00000004c0)='GPL\x00', 0x4, 0x5, &(0x7f0000000500)=""/5, 0x40f00, 0x29, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7429}, 0x94) 760.868878ms ago: executing program 2 (id=2028): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x101, 0xf83, 0x5}, 0x1c) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b923, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6, 0xb}, {0x5, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x48031}, 0x40040) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYRES32=0x0, @ANYRESOCT], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) (async) r7 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r7, 0x0, 0x0, 0x1000) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "83f7cb1659ef276c", "9ad0e96e1d263075c49a277d7de1cdbcf7259f24419753e5b38b95d40e7e8dea", "a4fcb10f", "3258d1ea8beadef2"}, 0x38) (async) r8 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd700000000000360000000e0001006e65746465760669020000000f0002006e507464657673696d534c6697c70c6f323a9872c8ed2f300001"], 0x34}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r10, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1e, 0x10001, @l2={'eth', 0x3a, 'vlan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x404c000) 728.556487ms ago: executing program 3 (id=2029): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd4, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000140), &(0x7f00000001c0), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYRES32=r0], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x69}, 0x94) (async, rerun: 32) r2 = socket(0xa, 0x3, 0x3a) (rerun: 32) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x0) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = getpid() ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r4) (async) sendmsg$nl_route(r2, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=@dellinkprop={0x68, 0x6d, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, 0x22000, 0x38220}, [@IFLA_PHYS_PORT_ID={0xf, 0x22, "ecc8c76e62d90afc46807c"}, @IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x62a79}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x443ef}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_NET_NS_FD={0x8}, @IFLA_MTU={0x8, 0x4, 0x9}, @IFLA_WEIGHT={0x8, 0xf, 0x1000}]}, 0x68}, 0x1, 0x0, 0x0, 0x24004851}, 0x4008080) 728.190355ms ago: executing program 0 (id=2030): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socket(0x1f, 0x3, 0xc1b) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 588.590647ms ago: executing program 3 (id=2031): r0 = socket(0x2, 0x80805, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)='\x00', 0x1}], 0x1}}], 0x2, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000700)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r2, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r2, 0xf, "1643c8a10567be744b5aef0b85f87d"}, &(0x7f00000001c0)=0x17) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="7f38c43dcf9e553300805d00", @ANYRES32=0x0, @ANYRES64=r2, @ANYRESOCT=r3], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, 0x0, &(0x7f0000000100)=""/7}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfa", 0x7e}, {&(0x7f0000000380)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed46d29590a42ac6143c5c90c1622c769dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593641b95ee00afe0816b3c6e7d2cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb7f752d7b5b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf", 0xbe}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e", 0x44}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d603", 0x45}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f9069", 0x2f}, {&(0x7f0000000580)="8f966bd94d169820f6b8", 0xa}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x30}}], 0x2, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000680)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0xfffffffffffffe35) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3c5cfe6cb55b5bb9fa6935849e6098ed884e7cbd1726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000800)=""/97, 0x61}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[], 0x6f4}, 0x1, 0x0, 0x0, 0x481d0}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000540)={{0xfffffffc, 0xff}, 0x100, './file1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x0, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x100, 0x2000000a, 0x7, 0xd4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000051421eaffffff000000000008000100000000000800030000000000"], 0x20}}, 0x0) 586.06964ms ago: executing program 1 (id=2032): epoll_create(0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x40, 0xf, 0x51, @private0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x700, 0x8, 0x1}}) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6a}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x4c010) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000780)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000300", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, @ipv4={'\x00', '\xff\xff', @local}, [@srh={0x2c, 0x0, 0x4, 0x0, 0x4}, @hopopts={0x3c}]}}}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000001500)={'dummy0\x00', &(0x7f00000014c0)=@ethtool_rxfh={0x46, 0xe7c9, 0x7, 0x7, 0xf9, "a20513", 0x4}}) accept4$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, &(0x7f00000001c0)=0x1c, 0x800) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001c00010028bd7000fddbdf2507000000", @ANYRES32=r1, @ANYBLOB="080004086959008b6142e667ff5a779c35d6fc7b72e748336b603271ff9786dfc3aae456fdacb4cbf3081086537e3b89d2ecf102a73252f13d39677da705de605ea35604b58bb48dd7088c9bba7ee9083d6f40dcb4318dd85ffa1783a4d5aa23a479ab0667ec23a6f7acbf810c13f6703fabfdb12d9e90ad518919ce988418bd6c397a796155ce4ddfa26e8a9394"], 0x1c}}, 0x0) 532.171308ms ago: executing program 4 (id=2033): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@in={0x2, 0x4e23, @local}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x10b8}, 0x20048000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x290, 0xc8, 0x8, 0x0, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xff], [0xff000000, 0xff000000, 0xff, 0x1fe0000ff], 'bridge0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x89, 0x3, 0x0, 0x12}, 0x0, 0x228, 0x290, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@hashlimit3={{0x158}, {'veth1_macvtap\x00', {0xeb98, 0x101, 0x7a, 0xfffd, 0x4, 0x9, 0x0, 0x7f, 0x8, 0x78}, {0xaa}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x7, 0x2, 0x563, 'netbios-ns\x00', 'syz1\x00', {0x6}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0xf0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, [0xffffffff, 0x0, 0xff, 0xffffff00], [0xff000000, 0x0, 0x0, 0xff000000], 'pim6reg\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x11, 0x2, 0x3, 0x40}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) bind$alg(0xffffffffffffffff, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, 0x0, 0xc100) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x855) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000040) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0xffffff07, &(0x7f0000000180)="0400d876d5620064d082778c3938adfc73342d7335a2c8807c6b14fcd634fee8b9af4c33956bdf18f076e3e588829d65ddc4825e1d13e9522736f20832e770322fc9addbb11eea2ae8f216ce86e35590b900bf5a7ecd89cbfeb1f2148b8138c4a79d8f8866d037343ae64f2b4f35455364fda4e89c96a72ecee8a784d6f6f03f1d769342ad53ce8fce4e5402d1745ffa69b1edf60fc36226", &(0x7f0000000380)=""/85, 0x600, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0xf}, 0x28) socket$inet_sctp(0x2, 0x1, 0x84) socket$l2tp(0x2, 0x2, 0x73) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 460.266309ms ago: executing program 2 (id=2034): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$unix(0x1, 0x2, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x48, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x10001, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x24044804) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) r7 = socket(0x2b, 0x80801, 0x1) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x8001}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f00000000c0)) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfa", 0x7e}, {&(0x7f0000000380)}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65c", 0xbe}, {0x0}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d531", 0x4e}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a", 0x1d}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95", 0x24}, {&(0x7f0000000580)="8f966bd94d169820f6b8", 0xa}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x30}}], 0x2, 0x20000044) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async, rerun: 64) r9 = accept4(r8, 0x0, 0x0, 0x800) (rerun: 64) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c3aa00fef100000071101a000000000095"], &(0x7f0000000480)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x20}, 0x94) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0xe8, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x8, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0xcb, 0x3, 0x0, 0x1, [@nested={0x60, 0x1, 0x0, 0x1, [@nested={0x59, 0x12f, 0x0, 0x1, [@typed={0x8, 0x74, 0x0, 0x0, @pid}, @typed={0x8, 0xfe, 0x0, 0x0, @u32=0x4}, @typed={0x4, 0x4c}, @typed={0x8, 0x148, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @generic="92557b1db244ab351d2a49c5d3353e8ea7c863b7a4e97cf78a6d05ab3f777541105a53fedb265cb159b9b4fff991db173d"]}]}, @typed={0x4, 0xdb}, @generic="6fbf19734b1cdba2c8622e21c82835e31a63b9eda6cd5afcf7d09d6c35db1f3455cea6e21829a8ff488d88ef4d77892be7211d9bbaa724fafb6253858450c60056518155ecfa7e5d2f00a7394cab8c3dd121484859bc94b7a936aa", @typed={0x8, 0x65, 0x0, 0x0, @uid}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) (async, rerun: 32) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (rerun: 32) bind$bt_l2cap(r13, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x4}, 0xe) 374.70216ms ago: executing program 2 (id=2035): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0e10840dc34286dd60081f2000103afffe800000000000000000000000000020fdd357010000000000000000000000018600907800f006000100000000000000"], 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$kcm(0x11, 0x3, 0x0) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) socket$tipc(0x1e, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xa8, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x74, 0x2, [@TCA_MATCHALL_ACT={0x70, 0x2, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0xfffffffc, 0x5, 0x7fff, 0xb}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r12, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r14, 0x3e}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="ca4034a4a033c023", 0x300}], 0x2}, 0x5) 252.317672ms ago: executing program 4 (id=2036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x60) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f0000000300)={0xffffffffffffb442, 0x0, 0x32, 0x7ff, 0x8}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) (async) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100030000000032c0fdb00000000000000000a0020050900010073797a31000000000900030073797a30000000000400cf92da930c00140000001105010000000000004bfb00"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000540)) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x13, &(0x7f0000000680)=ANY=[@ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000440)="0000000000000060145b4ebeada5", 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 245.627071ms ago: executing program 0 (id=2037): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x23, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000340)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_create1(0x80000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x9, &(0x7f0000000080), 0x4) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$inet6_sctp(0xa, 0x1, 0x84) 222.503809ms ago: executing program 4 (id=2038): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x9, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES8=r2], 0x38}}, 0x0) recvmsg(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/23, 0x17}], 0x1}, 0x142) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000000)='O', 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x34, 0x0, "230e1020eac14c90279e939261bb62bbd14cbd2ff115a91093bf248f2ef833cafdcfc967d3aaa234cf1d47f2b5e7df3f3926eb5492918df4e31896b6eb70da94e9522855eaf48e43f2aba9c6319f9294"}, 0xd8) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x31}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="384000001000370400"/20, @ANYRES32=r8, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRESDEC=r5, @ANYBLOB], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000100039040000000000000040000003e4", @ANYRES32=r8, @ANYBLOB="00000000000000001800127908000100736974000c0002800800030064010100"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) 113.059802ms ago: executing program 3 (id=2039): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000003280), r2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2017be01}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x40000000}) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000080)={0x8b, 0xcf, 0x40, 0x480, 0x7f, 0x0, 0x2}) 496.834µs ago: executing program 2 (id=2040): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(r0, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffee9}, 0x48) 0s ago: executing program 4 (id=2041): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x57, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500), 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x1, 0x8}, 0xc) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x4, 0xf, 0x2, 0x428, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000880)={{0xffffffffffffffff, &(0x7f0000000740)='*\x00', 0x0, &(0x7f0000000780)={@_ha_fsid={[0xe73]}, {0x0, 0x1, 0xe, 0x8}}, 0x2, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0xee}, {[0x5, 0xffff, 0x2, 0x6]}, 0x2, 0x0, &(0x7f0000000840)}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0xe, 0x5, 0x5, 0x2, 0x8006, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xd, &(0x7f0000000040)=@raw=[@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f00000000c0)='syzkaller\x00', 0xc, 0x5, &(0x7f0000000100)=""/5, 0x40f00, 0x40, '\x00', r1, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r4, 0x3, &(0x7f0000000980)=[r5, r6, r7, r8, r9, r10, 0x1, 0x1, r11], &(0x7f00000009c0)=[{0x2, 0x2, 0x5, 0xb}, {0x4, 0x2, 0x4, 0x7}, {0x0, 0x2, 0x2, 0x6}], 0x10, 0x2}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000b00)={0x0, 0x10, &(0x7f0000000ac0)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000000b40)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000c40)={r13, 0xa0, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}, 0x9}, @in6={0xa, 0x4e20, 0x3, @loopback, 0x1}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e22, 0x24000000, @local, 0x7}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e20, 0x5, @local, 0x9}]}, &(0x7f0000000c80)=0x10) ioctl$NILFS_IOCTL_GET_BDESCS(r10, 0xc0186e87, &(0x7f0000000d80)={&(0x7f0000000cc0)=[{0x9, 0x1, 0xa2, 0x3e4c, 0xfffffffd}, {0x80000001, 0x7, 0x8, 0x8, 0xd144}, {0x0, 0x4, 0xa, 0x100000000, 0x2}, {0x0, 0x3, 0x2, 0x4, 0xe0}], 0x4, 0x28, 0x8}) writev(r9, &(0x7f0000000e00)=[{&(0x7f0000000dc0)="b9533ce402c0d25497ea0612fc3e0e81dae765cbd242ca3da6ed6495bbd25d596f1df0e9c88a4a1acec9d2b8369c", 0x2e}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000e40)={r12, r2, 0x25, 0xc, @void}, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ec0), r10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x88, r14, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x11, 0x3, "6eaad6297e3820bc1c45223032"}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x77a}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb4db}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff1a11}]}, @TIPC_NLA_NET={0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x9, 0xd0d, 0x0, 0xa, 0x300, r11, 0x7, '\x00', r2, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) ioctl$XFS_IOC_FSGROWFSLOG(r8, 0x4008586f, &(0x7f00000010c0)={0x56, 0x7}) syz_80211_join_ibss(&(0x7f0000001100)='wlan0\x00', &(0x7f0000001140)=@default_ibss_ssid, 0x6, 0x0) syz_emit_ethernet(0x44d, &(0x7f0000001180)={@empty, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "cd89be", 0x417, 0x3a, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3a}, {[@fragment={0x24, 0x0, 0xa8, 0x0, 0x0, 0x4, 0x66}, @srh={0x3c, 0x4, 0x4, 0x2, 0xaf, 0x78, 0xfff7, [@local, @dev={0xfe, 0x80, '\x00', 0xa}]}, @hopopts={0x62, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x1ff}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xe}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}], @dest_unreach={0x1, 0x0, 0x0, 0x6, '\x00', {0xd, 0x6, "2030c4", 0x0, 0x8, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, [@dstopts={0x11, 0x1d, '\x00', [@pad1, @generic={0x4, 0xc2, "0c9a112ac1e32b2c7035cd3f35c7c1af3bf0e4fed27d1440aeaf03990a4873f82e93f4397a30c240416e7066a6751d3dab9e7f1b193edf782f16bb6a5438d070c6921db02d624641a42d6c2cdef79298ef01db4d4062c324fb08d403e30d120689dce562bb4755f2714ae3a04e7ad1f14355ca38989b8f8a2f305dd4b6dd6f85f1a25c488701732cddfe0092230b4a6ed17d8ef3853ddf70be475367476d17106e6e69ef58ee1994e27b765c43462c98059fa86269f2eaee12083873c4d949937605"}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2}, @enc_lim={0x4, 0x1, 0xd}, @pad1]}, @routing={0x3a, 0xa, 0x1, 0x7f, 0x0, [@loopback, @remote, @dev={0xfe, 0x80, '\x00', 0x41}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x41}]}, @dstopts={0x1, 0x25, '\x00', [@generic={0x2, 0x8c, "c21c5d178a10b379698e9c3830ef74abed5acfae0af7b6f0a930cabe036a23ef53718074bfa5000a069c537c59f31fc8f221c744988f705706ec3581a382eab48b241bd8e9d4be69b0c5b83723ed725c32cbf785a3f53825d5239e6bd491e1915f3c04d7fe688ab37767cbcfd96219ba20a62bf86c21dbce318ff9123062669fa331da5a38f1fe33b1102652"}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x30, {0x2, 0xa, 0x3, 0x6, [0x4, 0x800, 0x9, 0x80000001, 0x2]}}, @enc_lim={0x4, 0x1, 0x1}, @calipso={0x7, 0x18, {0x1, 0x4, 0x5, 0x7, [0xc, 0x40]}}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x2, 0x8, 0x6, 0x4, [0x4, 0xbb, 0x83d4, 0x1]}}]}], "c2a03ceb005d008e73146304b869428095dcb10320dd6ae5e687afc402713bc985002188c23ae038f289f50df697424d00396a9531b53ff23363a0fd5f4286ad1724c1f15a0eb1956ea5a0aab609a101b30be1cf9090eb6931546918d8e6045422d3cdad6b7d7486c75f16e6e6e9184292e93762954da4f24b94c3aca94093a9a744d19d073830839623b3eb749241afd83092114beadc5be7e73183a9012098942ee8b0a5cb1df633d61b4e343c5388f78c24a0ede0e33716a83aebec1b913a949dff2d23b45afe9bc21fb6d191accdcd886781170cc86f46e22225a8191d848b6091791079e6535ec665d8e0a1fb46a275158edd0773"}}}}}}}, &(0x7f0000001600)={0x1, 0x2, [0x545, 0x7b3, 0x525, 0xcb]}) write$6lowpan_enable(r10, &(0x7f0000001640)='0', 0x1) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000001680)=0x0) syz_open_procfs$namespace(r15, &(0x7f00000016c0)='ns/pid\x00') ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000001780)={&(0x7f0000001700)=""/70, 0x46, 0x7ff, 0xf4bb}) r16 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f00000017c0)={'wlan1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000001800)=0x20, 0x4) kernel console output (not intermixed with test programs): 'syz.4.453': attribute type 4 has an invalid length. [ 110.352033][ T7540] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.453'. [ 110.528561][ T6240] IPVS: starting estimator thread 0... [ 110.534547][ T7547] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 110.604054][ T7553] netlink: 'syz.1.458': attribute type 1 has an invalid length. [ 110.633128][ T7551] IPVS: using max 42 ests per chain, 100800 per kthread [ 110.651164][ T7544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.681157][ T7544] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.717711][ T7544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.819229][ T7544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.846146][ T7544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.860090][ T7544] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.873148][ T7544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.888823][ T7544] veth1_vlan: left promiscuous mode [ 110.898457][ T7544] veth0_vlan: left promiscuous mode [ 110.904799][ T7544] veth0_vlan: entered promiscuous mode [ 110.914123][ T7544] veth1_vlan: entered promiscuous mode [ 110.932425][ T7544] veth1_macvtap: left promiscuous mode [ 110.940173][ T7544] veth0_macvtap: left promiscuous mode [ 110.949009][ T7544] veth0_macvtap: entered promiscuous mode [ 110.956456][ T7544] veth1_macvtap: entered promiscuous mode [ 110.969384][ T7544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.978606][ T7544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.988507][ T7544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.996905][ T7544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.006086][ T7544] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 111.043139][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.050368][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.069445][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.076595][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.135648][ T172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.145260][ T172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.154667][ T7580] netlink: 'syz.0.465': attribute type 13 has an invalid length. [ 111.162445][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 111.172533][ T7582] netlink: 'syz.0.465': attribute type 13 has an invalid length. [ 111.181934][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 111.206254][ T172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.225227][ T172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.329445][ T7591] netlink: 'syz.2.466': attribute type 12 has an invalid length. [ 111.347810][ T7591] netlink: 'syz.2.466': attribute type 29 has an invalid length. [ 111.365410][ T7591] netlink: 148 bytes leftover after parsing attributes in process `syz.2.466'. [ 111.380084][ T7591] netlink: 59 bytes leftover after parsing attributes in process `syz.2.466'. [ 111.460982][ T7586] 8021q: adding VLAN 0 to HW filter on device bond12 [ 111.473191][ T7600] netlink: 48 bytes leftover after parsing attributes in process `syz.0.469'. [ 111.516208][ T7585] bond12: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 111.536003][ T7585] bond12: option resend_igmp: invalid value (277) [ 111.544642][ T7585] bond12: option resend_igmp: allowed values 0 - 255 [ 111.745418][ T7622] macsec0: entered promiscuous mode [ 111.770775][ T7622] macsec0 (unregistering): left promiscuous mode [ 111.844732][ T7626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.520240][ T7656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.681378][ T7667] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.747930][ T7672] bond2: (slave geneve2): making interface the new active one [ 112.792437][ T7672] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 112.804802][ T7676] sctp: [Deprecated]: syz.4.490 (pid 7676) Use of int in max_burst socket option. [ 112.804802][ T7676] Use struct sctp_assoc_value instead [ 112.835780][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.856012][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.880393][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.900918][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.015656][ T7687] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 113.094791][ T7692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.118719][ T7697] vlan2: entered promiscuous mode [ 113.171841][ T7697] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 113.192653][ T7697] SET target dimension over the limit! [ 113.201420][ T7697] sctp: [Deprecated]: syz.2.497 (pid 7697) Use of int in maxseg socket option. [ 113.201420][ T7697] Use struct sctp_assoc_value instead [ 113.423036][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.441092][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.497677][ T7716] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 113.695957][ T7730] dummy0: entered promiscuous mode [ 113.783336][ T5352] af_packet: tpacket_rcv: packet too big, clamped from 90 to 4294967286. macoff=82 [ 113.804602][ T7742] vlan2: entered promiscuous mode [ 113.815175][ T7742] bridge0: entered promiscuous mode [ 113.908611][ T7747] syzkaller0: entered promiscuous mode [ 113.914328][ T7747] syzkaller0: entered allmulticast mode [ 114.130508][ T7766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.398820][ T7778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.410613][ T7778] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.426832][ T7778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.497068][ T7778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.516459][ T7778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.547361][ T7778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.573684][ T7778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.625238][ T7778] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 114.635370][ T7778] veth1_vlan: left promiscuous mode [ 114.642193][ T7778] veth0_vlan: left promiscuous mode [ 114.654882][ T7778] veth0_vlan: entered promiscuous mode [ 114.675791][ T7778] veth1_vlan: entered promiscuous mode [ 114.700206][ T7778] veth1_macvtap: left promiscuous mode [ 114.709406][ T7778] veth0_macvtap: left promiscuous mode [ 114.723735][ T7778] veth0_macvtap: entered promiscuous mode [ 114.737712][ T7778] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.768968][ T7778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.787640][ T7778] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.798686][ T7778] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 115.014942][ T7778] macvlan2: left promiscuous mode [ 115.056189][ T7812] __nla_validate_parse: 67 callbacks suppressed [ 115.056210][ T7812] netlink: 32 bytes leftover after parsing attributes in process `syz.2.526'. [ 115.074373][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.081861][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.118460][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.125741][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.233879][ T7834] netlink: 60 bytes leftover after parsing attributes in process `syz.4.525'. [ 115.574744][ T7813] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 115.662055][ T7813] bond2 (unregistering): Released all slaves [ 115.685846][ T7848] netlink: 44 bytes leftover after parsing attributes in process `syz.0.530'. [ 115.745790][ T7842] veth0: entered promiscuous mode [ 115.776111][ T6248] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 115.812094][ T7842] veth0: left promiscuous mode [ 115.951433][ T7857] netlink: 152 bytes leftover after parsing attributes in process `syz.1.533'. [ 116.125512][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 116.134869][ T2141] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 116.343071][ T6248] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 116.381767][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 116.841179][ T7899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.546'. [ 117.021847][ T7917] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.146079][ T7917] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.215205][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 117.253488][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 117.315044][ T7917] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.406768][ T7917] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.510665][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 117.896590][ T5352] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 118.140785][ T7954] validate_nla: 6 callbacks suppressed [ 118.140806][ T7954] netlink: 'syz.1.560': attribute type 58 has an invalid length. [ 118.182589][ T7954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.560'. [ 118.321112][ T7956] openvswitch: netlink: Key type 30 is not supported [ 118.427218][ T7958] syzkaller0: entered promiscuous mode [ 118.439824][ T7958] syzkaller0: entered allmulticast mode [ 118.779507][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.565'. [ 119.229378][ T7974] syzkaller0: entered promiscuous mode [ 119.256931][ T7974] syzkaller0: entered allmulticast mode [ 119.290184][ T7974] batadv_slave_1: entered promiscuous mode [ 119.349303][ T7973] batadv_slave_1: left promiscuous mode [ 119.471423][ T7984] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 119.496855][ T7984] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 119.521303][ T7984] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 119.546698][ T7984] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 119.585835][ T7984] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 119.600210][ T7983] netlink: 'syz.1.571': attribute type 1 has an invalid length. [ 119.636318][ T7984] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 119.676004][ T7984] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 119.706492][ T7984] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 119.729095][ T7984] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 121.063687][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 121.669987][ T8069] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 121.762147][ T8069] bond2: (slave lo): Enslaving as an active interface with an up link [ 121.795798][ T8080] veth0_macvtap: Caught tx_queue_len zero misconfig [ 121.996984][ T8093] vlan3: entered allmulticast mode [ 122.029822][ T8093] bond0: entered allmulticast mode [ 122.053950][ T8093] bond_slave_0: entered allmulticast mode [ 122.081927][ T8093] bond_slave_1: entered allmulticast mode [ 122.379672][ T8109] netlink: 'syz.1.596': attribute type 11 has an invalid length. [ 122.431312][ T8109] __nla_validate_parse: 4 callbacks suppressed [ 122.431332][ T8109] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.596'. [ 122.585294][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.610366][ T7830] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.704491][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.745617][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.776465][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 122.847460][ T8121] netlink: 'syz.4.600': attribute type 1 has an invalid length. [ 122.888575][ T8127] bridge2: entered promiscuous mode [ 122.902670][ T8127] bridge2: entered allmulticast mode [ 122.933958][ T8127] team0: Port device bridge2 added [ 122.963123][ T8121] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.979219][ T9] IPVS: starting estimator thread 0... [ 123.031585][ T8135] bond3: (slave veth5): Enslaving as an active interface with a down link [ 123.073772][ T8146] IPVS: using max 40 ests per chain, 96000 per kthread [ 123.158068][ T9] IPVS: starting estimator thread 0... [ 123.229114][ T8140] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 123.255478][ T8140] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 123.263242][ T8156] IPVS: using max 39 ests per chain, 93600 per kthread [ 123.309818][ T8127] bridge3: entered promiscuous mode [ 123.324615][ T8127] bridge3: entered allmulticast mode [ 123.340025][ T8127] team0: Port device bridge3 added [ 123.349149][ T8150] syzkaller0: entered promiscuous mode [ 123.367394][ T8150] syzkaller0: entered allmulticast mode [ 123.436515][ T8158] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 123.462478][ T8158] bond3: (slave batadv1): making interface the new active one [ 123.516132][ T8158] batadv1: entered promiscuous mode [ 123.542231][ T8158] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 123.599380][ T8162] netlink: 'syz.2.607': attribute type 12 has an invalid length. [ 123.620862][ T9] net_ratelimit: 62 callbacks suppressed [ 123.620880][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.635212][ T6249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.660312][ T6249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.674599][ T130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.683134][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.693026][ T5733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.704663][ T8162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.607'. [ 123.716736][ T6249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.740870][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.758875][ T6249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.781064][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.787808][ T8162] veth1_macvtap: left promiscuous mode [ 123.863850][ T8174] netlink: 'syz.3.610': attribute type 9 has an invalid length. [ 123.882948][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 123.912006][ T8174] gretap0: entered promiscuous mode [ 123.919517][ T8174] macvlan2: entered promiscuous mode [ 123.936229][ T8174] macvlan2: entered allmulticast mode [ 123.957775][ T8174] gretap0: entered allmulticast mode [ 124.087114][ T8181] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.612'. [ 124.149655][ T8185] ip6tnl1: entered allmulticast mode [ 124.168240][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 124.197590][ T6240] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 124.207904][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 124.305862][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.614'. [ 124.693613][ T6240] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 124.807431][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'. [ 124.902981][ T6240] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 125.210691][ T8224] netlink: 'syz.3.625': attribute type 1 has an invalid length. [ 125.251387][ T8224] netlink: 2080 bytes leftover after parsing attributes in process `syz.3.625'. [ 125.404416][ T8239] netlink: 'syz.2.629': attribute type 16 has an invalid length. [ 125.414588][ T8239] netlink: 'syz.2.629': attribute type 3 has an invalid length. [ 125.426583][ T8239] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.629'. [ 125.555293][ T8243] netlink: 20 bytes leftover after parsing attributes in process `syz.4.631'. [ 125.601601][ T8243] bridge2: entered promiscuous mode [ 125.923693][ T8254] macsec1: entered promiscuous mode [ 126.629095][ T8261] lo: Caught tx_queue_len zero misconfig [ 127.121456][ T8276] netlink: 'syz.4.638': attribute type 1 has an invalid length. [ 127.590099][ T8270] bond4: (slave gretap1): making interface the new active one [ 127.645943][ T8270] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 127.700485][ T8275] macvlan2: entered promiscuous mode [ 127.707123][ T8275] macvlan2: entered allmulticast mode [ 127.718305][ T8275] bond4: entered promiscuous mode [ 127.729801][ T8275] gretap1: entered promiscuous mode [ 127.737413][ T8275] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 127.751954][ T8275] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 127.772282][ T8275] bond4: left promiscuous mode [ 127.778140][ T8275] gretap1: left promiscuous mode [ 127.868486][ T8295] netlink: 'syz.0.643': attribute type 12 has an invalid length. [ 128.067223][ T8307] netlink: 'syz.4.645': attribute type 3 has an invalid length. [ 128.096353][ T8307] netlink: 'syz.4.645': attribute type 3 has an invalid length. [ 128.122472][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.645'. [ 128.183001][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 128.252493][ T8311] netlink: 'syz.1.646': attribute type 13 has an invalid length. [ 128.393178][ T8315] netlink: 84 bytes leftover after parsing attributes in process `syz.1.646'. [ 128.449841][ T8315] nbd: must specify an index to disconnect [ 128.599075][ T8318] bond5: entered promiscuous mode [ 128.612081][ T8318] 8021q: adding VLAN 0 to HW filter on device bond5 [ 128.644041][ T8325] validate_nla: 1 callbacks suppressed [ 128.644065][ T8325] netlink: 'syz.3.649': attribute type 29 has an invalid length. [ 128.688672][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 128.710412][ T8320] 8021q: adding VLAN 0 to HW filter on device bond6 [ 128.720757][ T8320] bond5: (slave bond6): making interface the new active one [ 128.729926][ T8320] bond6: entered promiscuous mode [ 128.736038][ T8320] bond5: (slave bond6): Enslaving as an active interface with an up link [ 128.754584][ T8323] tipc: Enabled bearer , priority 0 [ 128.773746][ T8322] tipc: Disabling bearer [ 128.831432][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 128.865715][ T8327] xt_hashlimit: size too large, truncated to 1048576 [ 128.926072][ T8337] netlink: 10 bytes leftover after parsing attributes in process `syz.3.652'. [ 128.979760][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 129.063210][ T8345] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.654'. [ 129.073955][ T8340] bond0: Unable to set up delay as MII monitoring is disabled [ 129.223283][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 129.253810][ T7830] net_ratelimit: 30 callbacks suppressed [ 129.253832][ T7830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.310701][ T8353] netlink: 'syz.1.656': attribute type 8 has an invalid length. [ 129.486331][ T8362] netlink: 'syz.0.658': attribute type 1 has an invalid length. [ 129.527742][ T8365] netlink: 'syz.0.658': attribute type 1 has an invalid length. [ 129.549051][ T8362] netlink: 'syz.0.658': attribute type 3 has an invalid length. [ 129.569122][ T8365] netlink: 'syz.0.658': attribute type 3 has an invalid length. [ 129.597832][ T8362] netlink: 224 bytes leftover after parsing attributes in process `syz.0.658'. [ 129.613391][ T8372] lo: entered promiscuous mode [ 129.629544][ T8365] netlink: 224 bytes leftover after parsing attributes in process `syz.0.658'. [ 129.652541][ T8372] tunl0: entered promiscuous mode [ 129.663907][ T8378] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.662'. [ 129.700948][ T8372] gre0: entered promiscuous mode [ 129.779777][ T8372] gretap0: entered promiscuous mode [ 129.822270][ T8372] erspan0: entered promiscuous mode [ 129.840096][ T8372] ip_vti0: entered promiscuous mode [ 129.862179][ T8372] ip6_vti0: entered promiscuous mode [ 129.869610][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.869770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.869919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.870062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.870203][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.870337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.870466][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.056605][ T8372] sit0: entered promiscuous mode [ 130.078481][ T8372] ip6tnl0: entered promiscuous mode [ 130.109841][ T8372] ip6gre0: entered promiscuous mode [ 130.122939][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.140053][ T8372] syz_tun: entered promiscuous mode [ 130.149675][ T8372] ip6gretap0: entered promiscuous mode [ 130.207857][ T8372] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.215452][ T8372] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.228974][ T8372] vcan0: entered promiscuous mode [ 130.236576][ T8372] bond0: entered promiscuous mode [ 130.248260][ T8372] bond_slave_0: entered promiscuous mode [ 130.260333][ T8372] bond_slave_1: entered promiscuous mode [ 130.282404][ T8372] team0: entered promiscuous mode [ 130.296406][ T8372] team_slave_0: entered promiscuous mode [ 130.303043][ T8372] team_slave_1: entered promiscuous mode [ 130.375572][ T8372] dummy0: entered promiscuous mode [ 130.392373][ T8372] nlmon0: entered promiscuous mode [ 130.400958][ T8372] vxcan0: entered promiscuous mode [ 130.407286][ T8372] vxcan1: entered promiscuous mode [ 130.413714][ T8372] veth0: entered promiscuous mode [ 130.420810][ T8372] veth1: entered promiscuous mode [ 130.429095][ T8372] wg0: entered promiscuous mode [ 130.436211][ T8372] wg1: entered promiscuous mode [ 130.443200][ T8372] wg2: entered promiscuous mode [ 130.450636][ T8372] veth0_to_bridge: entered promiscuous mode [ 130.462266][ T8372] veth1_to_bridge: entered promiscuous mode [ 130.474322][ T8372] veth0_to_bond: entered promiscuous mode [ 130.484632][ T7820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.494956][ T8372] veth1_to_bond: entered promiscuous mode [ 130.510336][ T8372] veth0_to_team: entered promiscuous mode [ 130.519688][ T8372] veth1_to_team: entered promiscuous mode [ 130.530933][ T8372] veth0_to_batadv: entered promiscuous mode [ 130.539859][ T8372] batadv_slave_0: entered promiscuous mode [ 130.548264][ T8372] veth1_to_batadv: entered promiscuous mode [ 130.557243][ T8372] batadv_slave_1: entered promiscuous mode [ 130.565569][ T8372] xfrm0: entered promiscuous mode [ 130.575082][ T8372] veth0_to_hsr: entered promiscuous mode [ 130.584437][ T8372] veth1_to_hsr: entered promiscuous mode [ 130.598586][ T8372] hsr0: entered promiscuous mode [ 130.651566][ T8372] veth1_virt_wifi: entered promiscuous mode [ 130.763932][ T8372] veth0_virt_wifi: entered promiscuous mode [ 130.777303][ T8372] virt_wifi0: entered promiscuous mode [ 130.799766][ T8372] vlan1: entered promiscuous mode [ 130.805575][ T8372] macvlan0: entered promiscuous mode [ 130.816173][ T8372] macvlan1: entered promiscuous mode [ 130.825174][ T8372] ipvlan0: entered promiscuous mode [ 130.830660][ T8372] ipvlan1: entered promiscuous mode [ 130.840062][ T8372] macvtap0: entered promiscuous mode [ 130.849161][ T8372] macsec0: entered promiscuous mode [ 130.858269][ T8372] geneve0: entered promiscuous mode [ 130.866089][ T8372] geneve1: entered promiscuous mode [ 130.873690][ T8372] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 130.885160][ T8372] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 130.896084][ T8372] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 130.905853][ T8372] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 130.919067][ T8372] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 130.931576][ T8372] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 130.954992][ T8372] vcan1: entered promiscuous mode [ 130.962409][ T8372] veth2: entered promiscuous mode [ 130.968365][ T8372] veth3: entered promiscuous mode [ 130.973849][ T8372] sit1: entered promiscuous mode [ 130.981414][ T8372] syztnl0: entered promiscuous mode [ 130.987235][ T8372] ipip0: entered promiscuous mode [ 130.994356][ T8372] bridge1: entered promiscuous mode [ 131.001938][ T8372] gre1: entered promiscuous mode [ 131.008409][ T8372] gtp0: entered promiscuous mode [ 131.014020][ T8372] bond1: entered promiscuous mode [ 131.019301][ T8372] bond1: left allmulticast mode [ 131.025847][ T8372] mac80211_hwsim hwsim13 wlan2: entered promiscuous mode [ 131.033635][ T8372] syztnl2: entered promiscuous mode [ 131.039193][ T8372] sit2: entered promiscuous mode [ 131.045938][ T8372] bridge2: left allmulticast mode [ 131.052604][ T8372] bridge3: left allmulticast mode [ 131.059335][ T8372] mac80211_hwsim hwsim14 wlan3: entered promiscuous mode [ 131.069504][ T8372] mac80211_hwsim hwsim15 wlan4: entered promiscuous mode [ 131.149302][ T8408] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 131.183252][ T8408] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 131.209903][ T7820] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.248785][ T7820] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.287547][ T7820] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.337374][ T7820] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.416750][ T8423] netlink: 'syz.2.671': attribute type 1 has an invalid length. [ 131.456202][ T8424] sit0: entered promiscuous mode [ 131.471995][ T8424] netlink: 'syz.4.668': attribute type 1 has an invalid length. [ 131.528854][ T8431] bond13: (slave geneve4): making interface the new active one [ 131.551095][ T8431] bond13: (slave geneve4): Enslaving as an active interface with an up link [ 131.572151][ T7820] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 131.604740][ T7820] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 131.613848][ T7820] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 131.623487][ T7820] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 131.860811][ T8454] netlink: 'syz.4.680': attribute type 4 has an invalid length. [ 131.894753][ T8458] macvtap1: entered promiscuous mode [ 132.046808][ T8474] erspan1: entered allmulticast mode [ 133.063906][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.161764][ T8537] __nla_validate_parse: 7 callbacks suppressed [ 133.161785][ T8537] netlink: 36 bytes leftover after parsing attributes in process `syz.1.704'. [ 133.189821][ T8544] netlink: 'syz.2.705': attribute type 1 has an invalid length. [ 133.198203][ T8544] netlink: 64547 bytes leftover after parsing attributes in process `syz.2.705'. [ 133.308831][ T8552] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 134.943124][ T7820] net_ratelimit: 8 callbacks suppressed [ 134.943146][ T7820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.983054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.162873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.624172][ T6245] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.053406][ T7830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.192858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.262879][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 136.316286][ T8562] syzkaller0: entered promiscuous mode [ 136.321964][ T8562] syzkaller0: entered allmulticast mode [ 136.402963][ T7820] batadv1: left promiscuous mode [ 136.651977][ T8588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.717'. [ 136.683590][ T8593] validate_nla: 1 callbacks suppressed [ 136.683611][ T8593] netlink: 'syz.2.715': attribute type 4 has an invalid length. [ 136.752260][ T8593] netlink: 'syz.2.715': attribute type 8 has an invalid length. [ 136.790018][ T8593] netlink: 'syz.2.715': attribute type 1 has an invalid length. [ 136.819233][ T8604] syzkaller0: entered promiscuous mode [ 136.820930][ T8601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.719'. [ 136.830080][ T8604] syzkaller0: entered allmulticast mode [ 136.845100][ T8593] netlink: 172 bytes leftover after parsing attributes in process `syz.2.715'. [ 136.863760][ T8601] openvswitch: netlink: Flow key attr not present in new flow. [ 136.880549][ T8593] NCSI netlink: No device for ifindex 0 [ 136.914031][ T8609] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 136.958926][ T8611] netlink: 72 bytes leftover after parsing attributes in process `syz.0.721'. [ 136.969407][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.721'. [ 136.991978][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'. [ 137.034341][ T8612] netlink: 44 bytes leftover after parsing attributes in process `syz.0.721'. [ 137.183236][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.222836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.358242][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 137.756946][ T8634] netlink: 'syz.4.727': attribute type 13 has an invalid length. [ 137.774074][ T8634] netlink: 'syz.4.727': attribute type 13 has an invalid length. [ 138.323234][ T7830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.202936][ C0] net_ratelimit: 1 callbacks suppressed [ 140.202963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.543162][ T7830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.222884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.653191][ T130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.263016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.663937][ T7820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.752996][ T7820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.853113][ T7830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.582960][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 144.953021][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.242932][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.052989][ T130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.262927][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.163011][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.302983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.784165][ T130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.263072][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.363159][ T130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.282930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.472974][ T7820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.302902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.583172][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.622934][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 151.632621][ T6272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.342989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.635600][ T8655] __nla_validate_parse: 4 callbacks suppressed [ 152.635620][ T8655] netlink: 68 bytes leftover after parsing attributes in process `syz.1.733'. [ 152.672669][ T8669] netlink: 'syz.2.734': attribute type 4 has an invalid length. [ 152.675524][ T8658] xt_nfacct: accounting object `\$9ZM#E|^c\F9YⳈ' does not exist [ 152.703696][ T7820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.719650][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 152.735201][ T8669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.734'. [ 152.764051][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 153.177829][ T8701] netlink: 32 bytes leftover after parsing attributes in process `syz.1.743'. [ 153.245671][ T5632] block nbd0: Receive control failed (result -32) [ 153.273797][ T8706] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.344878][ T8706] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.409860][ T8706] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.440242][ T8711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.747'. [ 153.459251][ T8706] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.476487][ T8711] syzkaller0: entered promiscuous mode [ 153.492483][ T8711] syzkaller0: entered allmulticast mode [ 153.544544][ T7820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.585552][ T7830] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.625781][ T7830] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.647468][ T7820] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.688340][ T7820] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.833264][ T7830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.883541][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 153.909572][ T5719] IPVS: starting estimator thread 0... [ 154.025682][ T8741] IPVS: using max 44 ests per chain, 105600 per kthread [ 154.236338][ T8757] netlink: 298 bytes leftover after parsing attributes in process `syz.2.760'. [ 154.273834][ T8757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.349010][ T8759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.987347][ T8790] Cannot find add_set index 0 as target [ 154.993352][ T8791] Cannot find add_set index 0 as target [ 155.000144][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 155.091012][ T8807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.770'. [ 155.322907][ C0] net_ratelimit: 1 callbacks suppressed [ 155.322927][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.411638][ T8820] tap0: tun_chr_ioctl cmd 1074025677 [ 155.466183][ T8820] tap0: linktype set to 787 [ 155.545767][ T8845] gre1: entered allmulticast mode [ 155.635308][ T8852] netlink: 'syz.2.781': attribute type 1 has an invalid length. [ 155.733130][ T8852] 8021q: adding VLAN 0 to HW filter on device bond14 [ 155.861074][ T8862] netlink: 'syz.1.786': attribute type 1 has an invalid length. [ 155.869533][ T8862] netlink: 'syz.1.786': attribute type 2 has an invalid length. [ 155.914830][ T8864] netlink: 'syz.4.784': attribute type 1 has an invalid length. [ 155.956445][ T8868] lo: Caught tx_queue_len zero misconfig [ 156.063039][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.240983][ T8889] netlink: 'syz.3.793': attribute type 1 has an invalid length. [ 156.275547][ T8889] bond4: entered promiscuous mode [ 156.287460][ T8889] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.298944][ T8890] lo: left promiscuous mode [ 156.326846][ T8890] tunl0: left promiscuous mode [ 156.340816][ T8890] gre0: left promiscuous mode [ 156.352843][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.377283][ T8890] gretap0: left promiscuous mode [ 156.397194][ T8890] erspan0: left promiscuous mode [ 156.410319][ T8890] ip_vti0: left promiscuous mode [ 156.431769][ T8890] ip6_vti0: left promiscuous mode [ 156.444769][ T8890] sit0: left promiscuous mode [ 156.455819][ T8890] ip6tnl0: left promiscuous mode [ 156.462404][ T8890] ip6gre0: left promiscuous mode [ 156.474049][ T8890] syz_tun: left promiscuous mode [ 156.483380][ T8890] ip6gretap0: left promiscuous mode [ 156.495615][ T8890] vcan0: left promiscuous mode [ 156.512533][ T8890] bond0: left promiscuous mode [ 156.527921][ T8890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.548232][ T8890] team0: left promiscuous mode [ 156.565752][ T8890] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.575050][ T8890] dummy0: left promiscuous mode [ 156.582220][ T8890] nlmon0: left promiscuous mode [ 156.589993][ T8890] veth0: left promiscuous mode [ 156.596904][ T8890] veth1: left promiscuous mode [ 156.605093][ T8890] wg0: left promiscuous mode [ 156.613937][ T8890] wg1: left promiscuous mode [ 156.621602][ T8890] wg2: left promiscuous mode [ 156.627945][ T8890] veth0_to_bridge: left promiscuous mode [ 156.636680][ T8890] veth1_to_bridge: left promiscuous mode [ 156.645504][ T8890] veth0_to_bond: left promiscuous mode [ 156.652312][ T8890] bond_slave_0: left promiscuous mode [ 156.658934][ T8890] veth1_to_bond: left promiscuous mode [ 156.665593][ T8890] bond_slave_1: left promiscuous mode [ 156.671869][ T8890] veth0_to_team: left promiscuous mode [ 156.678595][ T8890] team_slave_0: left promiscuous mode [ 156.685507][ T8890] veth1_to_team: left promiscuous mode [ 156.693527][ T8890] team_slave_1: left promiscuous mode [ 156.700457][ T8890] veth0_to_batadv: left promiscuous mode [ 156.707958][ T8890] batadv_slave_0: left promiscuous mode [ 156.716088][ T8890] veth1_to_batadv: left promiscuous mode [ 156.731382][ T8890] batadv_slave_1: left promiscuous mode [ 156.744852][ T8890] xfrm0: left promiscuous mode [ 156.751965][ T8890] veth0_to_hsr: left promiscuous mode [ 156.787438][ T8890] veth1_to_hsr: left promiscuous mode [ 156.828816][ T8890] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.900946][ T8890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.911525][ T8890] hsr0: left promiscuous mode [ 156.917820][ T8890] veth1_virt_wifi: left promiscuous mode [ 156.925111][ T8890] veth0_virt_wifi: left promiscuous mode [ 156.932114][ T8890] virt_wifi0: left promiscuous mode [ 156.939483][ T8890] veth1_vlan: left promiscuous mode [ 156.948524][ T8890] vlan0: left promiscuous mode [ 156.954210][ T8890] vlan1: left promiscuous mode [ 156.959690][ T8890] veth1_vlan: entered promiscuous mode [ 156.965513][ T8890] macvlan0: left promiscuous mode [ 156.972110][ T8890] macvlan1: left promiscuous mode [ 156.978761][ T8890] ipvlan0: left promiscuous mode [ 156.985392][ T8890] ipvlan1: left promiscuous mode [ 156.992472][ T8890] veth1_macvtap: left promiscuous mode [ 156.999551][ T8890] veth0_macvtap: left promiscuous mode [ 157.007592][ T8890] veth0_macvtap: entered promiscuous mode [ 157.013786][ T8890] macvtap0: left promiscuous mode [ 157.020375][ T8890] veth1_macvtap: entered promiscuous mode [ 157.026932][ T8890] macsec0: left promiscuous mode [ 157.033530][ T8890] geneve0: left promiscuous mode [ 157.040935][ T8890] geneve1: left promiscuous mode [ 157.057837][ T8890] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 157.074611][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 157.084472][ T8890] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 157.092676][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.103526][ T8890] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 157.110954][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 157.120207][ T8890] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 157.127655][ T8890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 157.136186][ T8890] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 157.144197][ T8890] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 157.151880][ T8890] vcan1: left promiscuous mode [ 157.158926][ T8890] veth2: left promiscuous mode [ 157.164915][ T8890] veth3: left promiscuous mode [ 157.170445][ T8890] sit1: left promiscuous mode [ 157.176194][ T8890] syztnl0: left promiscuous mode [ 157.182159][ T8890] ipip0: left promiscuous mode [ 157.187957][ T8890] bridge1: left promiscuous mode [ 157.194831][ T8890] gre1: left promiscuous mode [ 157.200470][ T8890] gtp0: left promiscuous mode [ 157.206604][ T8890] bond1: left promiscuous mode [ 157.211740][ T8890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.219778][ T8890] mac80211_hwsim hwsim13 wlan2: left promiscuous mode [ 157.228612][ T8890] vlan2: left promiscuous mode [ 157.234329][ T7820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.243305][ T8890] syztnl2: left promiscuous mode [ 157.249379][ T8890] sit2: left promiscuous mode [ 157.269604][ T8890] bridge2: left promiscuous mode [ 157.276119][ T8890] bridge3: left promiscuous mode [ 157.282517][ T8890] mac80211_hwsim hwsim14 wlan3: left promiscuous mode [ 157.291576][ T8890] mac80211_hwsim hwsim15 wlan4: left promiscuous mode [ 157.300711][ T8890] macvtap1: left promiscuous mode [ 157.323627][ T8895] bond4: (slave veth3): making interface the new active one [ 157.331022][ T8895] veth3: entered promiscuous mode [ 157.339098][ T8895] bond4: (slave veth3): Enslaving as an active interface with an up link [ 157.380195][ T7823] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.387427][ T7823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.394982][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.430427][ T5718] hid (null): report_id 22031 is invalid [ 157.436780][ T7823] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.443995][ T7823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.444852][ T5718] hid (null): unknown global tag 0xe [ 157.457975][ T5718] hid (null): unknown global tag 0xb5 [ 157.464024][ T5718] hid (null): unknown global tag 0x82 [ 157.469542][ T5718] hid (null): report_id 2249716457 is invalid [ 157.476314][ T5718] hid (null): report_id 0 is invalid [ 157.481876][ T5718] hid (null): unknown global tag 0x23 [ 157.487838][ T5718] hid (null): bogus close delimiter [ 157.494091][ T5718] hid (null): invalid report_count -2086072527 [ 157.500637][ T5718] hid (null): report_id 3086525844 is invalid [ 157.508363][ T5718] hid (null): unknown global tag 0xc [ 157.514162][ T5718] hid (null): unknown global tag 0xc [ 157.519595][ T5718] hid (null): unknown global tag 0xd [ 157.525650][ T5718] hid (null): invalid report_size 59840 [ 157.531337][ T5718] hid (null): invalid report_count 48154 [ 157.537527][ T5718] hid (null): report_id 0 is invalid [ 157.543421][ T5718] hid (null): report_id 0 is invalid [ 157.548836][ T5718] hid (null): invalid report_count 1396157766 [ 157.559116][ T5718] hid (null): report_id 0 is invalid [ 157.568103][ T5718] hid (null): unknown global tag 0xc [ 157.581586][ T5718] hid (null): unknown global tag 0xc [ 157.597138][ T5718] hid (null): unknown global tag 0xc5 [ 157.607245][ T5718] hid (null): unknown global tag 0xe [ 157.616519][ T5718] hid (null): report_id 2757596722 is invalid [ 157.626733][ T5718] hid-generic 0005:DBED:0002.0001: unknown main item tag 0x6 [ 157.626843][ T8917] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 157.636018][ T5718] hid-generic 0005:DBED:0002.0001: report_id 22031 is invalid [ 157.660106][ T5718] hid-generic 0005:DBED:0002.0001: item 0 2 1 8 parsing failed [ 157.663246][ T8917] syzkaller1: Refused to change device type [ 157.674143][ T8930] block nbd1: server does not support multiple connections per device. [ 157.687614][ T8920] tunl0: Caught tx_queue_len zero misconfig [ 157.693944][ T8930] block nbd1: shutting down sockets [ 157.695457][ T5718] hid-generic 0005:DBED:0002.0001: probe with driver hid-generic failed with error -22 [ 157.742830][ T172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.778722][ T8929] ip6gre1: entered promiscuous mode [ 157.799649][ T8929] ip6gre1: entered allmulticast mode [ 157.817759][ T172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.829454][ T172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.879909][ T172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.006966][ T8946] 8021q: VLANs not supported on sit0 [ 158.024213][ T8946] __nla_validate_parse: 6 callbacks suppressed [ 158.024233][ T8946] netlink: 132 bytes leftover after parsing attributes in process `syz.0.806'. [ 158.261597][ T8957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.279906][ T8959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.304891][ T8957] bond2: (slave lo): Releasing backup interface [ 158.327782][ T8957] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 158.371088][ T8957] bridge_slave_0: left allmulticast mode [ 158.392170][ T8957] bridge_slave_0: left promiscuous mode [ 158.418835][ T8957] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.456395][ T8957] bridge_slave_1: left allmulticast mode [ 158.471074][ T8957] bridge_slave_1: left promiscuous mode [ 158.485938][ T8957] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.516064][ T8957] bond0: (slave bond_slave_1): Releasing backup interface [ 158.534625][ T8980] netlink: 14 bytes leftover after parsing attributes in process `syz.1.811'. [ 158.556541][ T8957] team0: Port device team_slave_0 removed [ 158.577299][ T8957] team0: Port device team_slave_1 removed [ 158.594415][ T8957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.612351][ T8957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.632777][ T8957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.652275][ T8957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.676330][ T8984] netlink: 16 bytes leftover after parsing attributes in process `syz.3.812'. [ 158.689609][ T8957] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 158.727139][ T8975] vlan3: entered allmulticast mode [ 158.743165][ T8975] bond0: entered allmulticast mode [ 158.759323][ T8975] bond_slave_0: entered allmulticast mode [ 158.765699][ T8975] bond_slave_1: entered allmulticast mode [ 158.882171][ T8980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.974725][ T8980] bond_slave_0: left allmulticast mode [ 159.083816][ T8980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.109030][ T8980] bond_slave_1: left allmulticast mode [ 159.137058][ T8980] bond0 (unregistering): Released all slaves [ 159.327177][ T9020] netlink: 'syz.2.817': attribute type 4 has an invalid length. [ 159.338788][ T9018] tipc: Started in network mode [ 159.352356][ T9018] tipc: Node identity 080211000001, cluster identity 4711 [ 159.367038][ T9011] can: request_module (can-proto-5) failed. [ 159.369079][ T9021] netlink: 'syz.2.817': attribute type 4 has an invalid length. [ 159.381443][ T9018] tipc: Enabled bearer , priority 0 [ 159.409446][ T9023] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 159.418616][ T9020] netlink: 'syz.2.817': attribute type 4 has an invalid length. [ 159.428159][ T9023] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 159.441042][ T9024] hmac(sha224): entered promiscuous mode [ 159.460194][ T9018] tipc: Resetting bearer [ 159.465139][ T9025] netlink: 'syz.2.817': attribute type 4 has an invalid length. [ 159.488189][ T9021] netlink: 48 bytes leftover after parsing attributes in process `syz.2.817'. [ 159.776061][ T9043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.823'. [ 159.789205][ T9045] netlink: 'syz.4.824': attribute type 1 has an invalid length. [ 159.858714][ T9049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.825'. [ 159.882025][ T9049] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 159.914572][ T9049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.234122][ T9073] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.831'. [ 160.316137][ T9076] hmac(sha224: entered promiscuous mode [ 160.441979][ T9083] netlink: 'syz.4.834': attribute type 1 has an invalid length. [ 160.451620][ T9083] netlink: 'syz.4.834': attribute type 6 has an invalid length. [ 160.459960][ T9083] netlink: 'syz.4.834': attribute type 3 has an invalid length. [ 160.474530][ T6245] tipc: Node number set to 134418688 [ 160.589841][ T9089] netlink: 'syz.0.835': attribute type 1 has an invalid length. [ 160.613508][ T9089] netlink: 'syz.0.835': attribute type 1 has an invalid length. [ 160.623544][ T9089] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.835'. [ 160.696764][ T9094] pimreg: entered allmulticast mode [ 161.019942][ T9118] netlink: 64 bytes leftover after parsing attributes in process `syz.1.838'. [ 161.249495][ T9139] netlink: 48 bytes leftover after parsing attributes in process `syz.3.841'. [ 161.287595][ T9134] tipc: New replicast peer: 255.255.255.255 [ 161.339821][ T9134] tipc: Enabled bearer , priority 10 [ 161.357070][ T9142] xt_hashlimit: size too large, truncated to 1048576 [ 161.511480][ T9146] bond0: entered promiscuous mode [ 161.524047][ T9146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.532540][ T9158] sctp: [Deprecated]: syz.4.846 (pid 9158) Use of int in max_burst socket option. [ 161.532540][ T9158] Use struct sctp_assoc_value instead [ 161.566533][ T9140] syzkaller1: entered promiscuous mode [ 161.572845][ T9153] xt_hashlimit: size too large, truncated to 1048576 [ 161.581771][ T9150] openvswitch: netlink: Flow actions attr not present in new flow. [ 161.590114][ T9140] syzkaller1: entered allmulticast mode [ 161.598843][ T9153] xt_hashlimit: max too large, truncated to 1048576 [ 161.608835][ T9134] bond0: entered allmulticast mode [ 161.652454][ T9143] bond0: (slave bridge5): making interface the new active one [ 161.678442][ T9143] bridge5: entered promiscuous mode [ 161.688311][ T9143] bridge5: entered allmulticast mode [ 161.695416][ T9143] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 162.127963][ T9187] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.198719][ T9186] vlan3: entered allmulticast mode [ 162.246362][ T9186] bond3: entered allmulticast mode [ 162.497815][ T5718] tipc: Node number set to 1355887548 [ 162.592098][ T9225] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 162.782603][ T9235] syzkaller0: entered promiscuous mode [ 162.789801][ T9235] syzkaller0: entered allmulticast mode [ 163.140949][ T9266] __nla_validate_parse: 12 callbacks suppressed [ 163.140972][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.879'. [ 163.180586][ T9266] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.323851][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'. [ 163.344699][ T9279] team0: Device xfrm0 is of different type [ 163.420863][ T9283] bond7: Unable to set up delay as MII monitoring is disabled [ 163.431388][ T9283] bond7 (unregistering): Released all slaves [ 163.535823][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'. [ 163.596376][ T9235] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 163.879791][ T9306] bond2: entered promiscuous mode [ 163.888961][ T9306] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.901032][ T9308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.918372][ T9315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.889'. [ 163.932014][ T9315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.889'. [ 164.046427][ T9314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.066598][ T9314] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 164.077633][ T9314] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 164.114320][ T9321] xt_NFQUEUE: number of total queues is 0 [ 164.123148][ T9314] bond2: (slave xfrm1): making interface the new active one [ 164.140745][ T9314] xfrm1: entered promiscuous mode [ 164.156251][ T9314] xfrm1: left promiscuous mode [ 164.358012][ T9336] macvtap0: entered promiscuous mode [ 164.372242][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.897'. [ 164.415070][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.897'. [ 164.468434][ T9344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.898'. [ 164.753618][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.903'. [ 164.835440][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.906'. [ 164.866864][ T9367] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 164.881385][ T9367] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 164.923898][ T9367] validate_nla: 7 callbacks suppressed [ 164.923918][ T9367] netlink: 'syz.3.906': attribute type 30 has an invalid length. [ 165.169396][ T9388] ip6t_srh: unknown srh invflags 4000 [ 165.242537][ T9390] sit0: left promiscuous mode [ 165.425261][ T9390] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 165.432573][ T9390] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 165.440874][ T9390] vlan2: left promiscuous mode [ 165.445827][ T9390] geneve1: left promiscuous mode [ 165.451021][ T9390] vlan2: left allmulticast mode [ 165.456721][ T9390] geneve1: left allmulticast mode [ 165.465302][ T9390] bridge2: left promiscuous mode [ 165.472299][ T9390] bond5: left promiscuous mode [ 165.478064][ T9390] bond6: left promiscuous mode [ 165.491301][ T64] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.521082][ T64] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 165.530286][ T64] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.539334][ T64] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 165.548587][ T64] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.560518][ T64] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 165.569924][ T64] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.579007][ T64] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 165.720817][ T9418] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 165.744421][ T9422] netlink: 'syz.2.917': attribute type 11 has an invalid length. [ 165.753669][ T9418] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 165.944179][ T9437] geneve5: entered promiscuous mode [ 165.959169][ T9437] geneve5: entered allmulticast mode [ 166.189438][ T9446] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 166.291255][ T9457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.897955][ T9479] netlink: 'syz.4.933': attribute type 4 has an invalid length. [ 166.942127][ T9482] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20001 [ 166.990584][ T9486] netlink: 'syz.1.936': attribute type 12 has an invalid length. [ 167.189315][ T9500] netlink: 'syz.4.940': attribute type 1 has an invalid length. [ 167.425020][ T5632] block nbd2: Receive control failed (result -32) [ 167.783546][ T9542] netlink: 'syz.3.951': attribute type 8 has an invalid length. [ 168.296808][ T9585] tipc: Started in network mode [ 168.308897][ T9585] tipc: Node identity 6eba6cef7e4a, cluster identity 4711 [ 168.335679][ T9585] tipc: Enabled bearer , priority 0 [ 168.358917][ T9591] __nla_validate_parse: 19 callbacks suppressed [ 168.358938][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.966'. [ 168.376988][ T9592] syzkaller0: entered promiscuous mode [ 168.382902][ T9592] syzkaller0: entered allmulticast mode [ 168.422367][ T9585] tipc: Resetting bearer [ 168.442553][ T9591] xt_hashlimit: size too large, truncated to 1048576 [ 168.526330][ T9586] bridge39: entered allmulticast mode [ 168.652662][ T9596] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 168.688459][ T9584] tipc: Resetting bearer [ 168.710009][ T9584] tipc: Disabling bearer [ 168.731367][ T9605] syzkaller0: entered promiscuous mode [ 168.737682][ T9605] syzkaller0: entered allmulticast mode [ 169.182431][ T9630] netlink: 112 bytes leftover after parsing attributes in process `syz.1.974'. [ 169.185772][ T9629] netlink: 'syz.2.973': attribute type 3 has an invalid length. [ 169.204745][ T9631] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 169.227558][ T9630] xt_TCPMSS: Only works on TCP SYN packets [ 169.234507][ T9631] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 169.274827][ T9628] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y [ 169.274827][ T9628] 3UH5rBn [ 169.652269][ T9628] netlink: 40 bytes leftover after parsing attributes in process `syz.3.976'. [ 169.885160][ T9651] sctp: [Deprecated]: syz.4.980 (pid 9651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.885160][ T9651] Use struct sctp_sack_info instead [ 170.057220][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.981'. [ 170.102643][ T9659] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 170.157799][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.197146][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.224836][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.274711][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.306446][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'. [ 170.357455][ T9672] netlink: 'syz.1.986': attribute type 13 has an invalid length. [ 170.366485][ T9672] netlink: 'syz.1.986': attribute type 12 has an invalid length. [ 170.378361][ T9675] netlink: 152 bytes leftover after parsing attributes in process `syz.4.987'. [ 170.419643][ T9676] netlink: 72 bytes leftover after parsing attributes in process `syz.0.988'. [ 170.447533][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.988'. [ 170.473958][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.989'. [ 170.476700][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 170.507719][ T9679] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 170.539067][ T9683] bridge0: entered allmulticast mode [ 171.016890][ T9709] xt_hashlimit: size too large, truncated to 1048576 [ 171.087133][ T9719] netlink: 'syz.3.1001': attribute type 5 has an invalid length. [ 171.600770][ T9745] syzkaller0: entered promiscuous mode [ 171.614585][ T9745] syzkaller0: entered allmulticast mode [ 171.676640][ T9748] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 171.692493][ T9748] bond4 (unregistering): Released all slaves [ 172.249323][ T9784] Cannot find add_set index 1 as target [ 172.677850][ T9802] netlink: 'syz.2.1026': attribute type 14 has an invalid length. [ 172.709714][ T9802] bond15: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 172.724019][ T9802] bond15 (unregistering): Released all slaves [ 173.021412][ T9827] netlink: 'syz.1.1035': attribute type 2 has an invalid length. [ 173.111947][ T9832] netlink: 'syz.2.1036': attribute type 1 has an invalid length. [ 173.221364][ T9835] netlink: 'syz.2.1036': attribute type 3 has an invalid length. [ 173.230258][ T9840] syzkaller1: entered promiscuous mode [ 173.236262][ T9840] syzkaller1: entered allmulticast mode [ 173.774335][ T9835] 8021q: adding VLAN 0 to HW filter on device bond16 [ 173.786687][ T9835] bond15: (slave bond16): making interface the new active one [ 173.794978][ T9835] bond15: (slave bond16): Enslaving as an active interface with an up link [ 173.815690][ T9845] xt_cgroup: xt_cgroup: no path or classid specified [ 173.967959][ T9859] __nla_validate_parse: 23 callbacks suppressed [ 173.967979][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1042'. [ 174.014996][ T9863] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.023914][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 174.198386][ T9874] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20004 [ 174.220647][ T9874] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1049'. [ 174.300699][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 174.343204][ T9886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1050'. [ 174.687663][ T9902] geneve3: entered promiscuous mode [ 174.704782][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.721146][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.748654][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.772241][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.888525][ T9913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1057'. [ 175.917002][T10000] geneve3: entered promiscuous mode [ 175.948714][ T7832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.971613][ T7832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.085997][T10004] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1073'. [ 176.174405][T10005] block nbd4: not configured, cannot reconfigure [ 176.191565][T10005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.279151][T10025] Cannot find add_set index 2 as target [ 176.389994][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 176.399468][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1080'. [ 176.411451][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 176.421485][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1080'. [ 176.444997][T10030] netlink: 'syz.3.1080': attribute type 4 has an invalid length. [ 176.565900][T10032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.574904][T10032] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 176.838296][T10037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.068559][T10054] bond3: option lacp_rate: invalid value (128) [ 177.076492][T10054] bond3 (unregistering): Released all slaves [ 177.248221][T10069] x_tables: duplicate underflow at hook 2 [ 177.408641][ T8750] udevd[8750]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 177.449842][ T8750] udevd[8750]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 177.640382][T10100] netlink: 'syz.3.1099': attribute type 2 has an invalid length. [ 177.730044][T10110] netlink: 'syz.1.1100': attribute type 1 has an invalid length. [ 177.848641][T10121] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 177.920924][T10124] bridge40: port 1(vlan4) entered blocking state [ 177.927913][T10124] bridge40: port 1(vlan4) entered disabled state [ 177.934805][T10124] vlan4: entered allmulticast mode [ 177.940095][T10124] bridge0: entered allmulticast mode [ 177.947406][T10124] vlan4: entered promiscuous mode [ 177.954563][T10124] bridge40: port 1(vlan4) entered blocking state [ 177.961087][T10124] bridge40: port 1(vlan4) entered forwarding state [ 177.977807][T10126] veth0: Caught tx_queue_len zero misconfig [ 178.130690][T10134] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 178.171522][T10134] bond4 (unregistering): Released all slaves [ 178.257985][T10142] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 178.512419][T10161] veth1_macvtap: left promiscuous mode [ 178.549697][T10172] tipc: Can't bind to reserved service type 2 [ 178.795640][T10185] netlink: 'syz.1.1122': attribute type 2 has an invalid length. [ 178.849312][T10187] netlink: 'syz.0.1123': attribute type 10 has an invalid length. [ 179.135649][ T8406] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 179.378959][T10229] __nla_validate_parse: 22 callbacks suppressed [ 179.378981][T10229] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1135'. [ 179.428571][T10229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1135'. [ 179.789547][T10265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1144'. [ 179.818861][T10265] tipc: Invalid UDP bearer configuration [ 179.818910][T10265] tipc: Enabling of bearer rejected, failed to enable media [ 179.842174][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 179.866499][T10272] netlink: 'syz.1.1147': attribute type 1 has an invalid length. [ 179.870793][T10270] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1147'. [ 179.895400][T10272] netlink: 'syz.1.1147': attribute type 1 has an invalid length. [ 180.103666][ T8406] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 180.410227][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1154'. [ 180.439408][T10305] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1154'. [ 180.640173][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 180.671488][T10316] r: entered promiscuous mode [ 180.694639][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1156'. [ 180.719055][T10316] openvswitch: r: Dropping previously announced user features [ 180.742599][T10321] sctp: [Deprecated]: syz.4.1158 (pid 10321) Use of int in max_burst socket option. [ 180.742599][T10321] Use struct sctp_assoc_value instead [ 180.761580][T10320] xt_hashlimit: size too large, truncated to 1048576 [ 181.074212][ T29] audit: type=1804 audit(1782423735.800:4): pid=10331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1161" name="/newroot/188/cgroup.controllers" dev="tmpfs" ino=984 res=1 errno=0 [ 181.101550][ T29] audit: type=1800 audit(1782423735.820:5): pid=10331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1161" name="cgroup.controllers" dev="tmpfs" ino=984 res=0 errno=0 [ 181.128167][T10332] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1160'. [ 181.153329][T10331] pimreg: entered allmulticast mode [ 181.192265][T10331] pimreg: left allmulticast mode [ 181.240042][T10330] syzkaller1: entered promiscuous mode [ 181.252848][T10330] syzkaller1: entered allmulticast mode [ 181.271800][T10334] netlink: 'syz.1.1162': attribute type 21 has an invalid length. [ 181.429067][T10338] xfrm0: entered allmulticast mode [ 181.702960][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 182.006879][T10374] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 182.179859][T10377] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 182.381903][T10397] sctp: [Deprecated]: syz.4.1176 (pid 10397) Use of int in max_burst socket option. [ 182.381903][T10397] Use struct sctp_assoc_value instead [ 182.600379][T10412] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 182.694208][T10418] ipt_ECN: cannot use operation on non-tcp rule [ 182.725417][T10418] tipc: Resetting bearer [ 182.731477][T10418] tipc: Resetting bearer [ 182.858422][T10423] netlink: 'syz.2.1185': attribute type 13 has an invalid length. [ 182.931493][T10425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.185088][T10444] IPv6: sit1: Disabled Multicast RS [ 183.381707][T10470] tipc: Enabling of bearer rejected, already enabled [ 183.418279][T10455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.600772][T10484] bond3: ARP target 9.0.0.0 is already present [ 183.608051][T10484] bond3: option arp_ip_target: invalid value (9) [ 183.617765][T10484] bond3 (unregistering): Released all slaves [ 183.641831][T10487] openvswitch: netlink: Flow actions attr not present in new flow. [ 183.725996][T10491] openvswitch: netlink: Duplicate or invalid key (type 0). [ 183.734598][T10491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.923749][T10503] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.401085][T10544] __nla_validate_parse: 16 callbacks suppressed [ 184.401107][T10544] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1218'. [ 184.465486][T10548] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1220'. [ 184.653471][T10559] netlink: 'syz.3.1223': attribute type 6 has an invalid length. [ 184.715350][T10561] xt_hashlimit: size too large, truncated to 1048576 [ 184.774210][T10564] netlink: 'syz.2.1224': attribute type 1 has an invalid length. [ 184.801097][T10564] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1224'. [ 184.831897][T10564] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1224'. [ 185.302857][ T5630] Bluetooth: hci4: command 0x0405 tx timeout [ 191.463711][ T4936] Bluetooth: hci3: command 0x0406 tx timeout [ 191.464390][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 191.469889][ T4936] Bluetooth: hci1: command 0x0406 tx timeout [ 194.504282][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.143001][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1233'. [ 204.481936][T10640] syzkaller0: entered promiscuous mode [ 204.487814][T10640] syzkaller0: entered allmulticast mode [ 204.505748][T10652] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1238'. [ 204.515181][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1238'. [ 204.535115][T10652] netlink: 'syz.0.1238': attribute type 3 has an invalid length. [ 204.544728][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'. [ 204.641889][T10662] netlink: 'syz.3.1241': attribute type 4 has an invalid length. [ 204.660418][T10662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.775879][T10666] geneve3: entered promiscuous mode [ 204.969874][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1243'. [ 205.006684][T10694] netlink: 2860 bytes leftover after parsing attributes in process `syz.3.1248'. [ 205.274612][T10710] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1254'. [ 205.603017][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1263'. [ 205.641602][T10740] netlink: 'syz.2.1263': attribute type 3 has an invalid length. [ 205.675840][T10747] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 205.849233][T10753] gretap1: entered allmulticast mode [ 206.028416][T10773] ipvlan0: Caught tx_queue_len zero misconfig [ 206.794255][T10822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1285'. [ 206.931268][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1287'. [ 206.971151][T10829] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 207.027370][T10833] syzkaller0: entered promiscuous mode [ 207.060675][T10833] syzkaller0: entered allmulticast mode [ 207.464601][T10857] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 207.523183][T10859] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 207.880683][T10879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.188951][T10899] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 208.335784][T10899] bridge_slave_0: Caught tx_queue_len zero misconfig [ 208.498663][T10911] tipc: Resetting bearer [ 209.151250][T10942] syzkaller0: entered promiscuous mode [ 209.160200][T10955] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 209.176510][T10942] syzkaller0: entered allmulticast mode [ 209.188607][T10955] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 209.209643][T10955] __nla_validate_parse: 4 callbacks suppressed [ 209.209666][T10955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1322'. [ 209.367118][T10962] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1325'. [ 209.395751][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1326'. [ 209.418769][T10965] netlink: 'syz.2.1326': attribute type 2 has an invalid length. [ 209.614795][T10976] netlink: 'syz.1.1329': attribute type 1 has an invalid length. [ 209.633588][T10978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1330'. [ 209.639578][T10976] netlink: 'syz.1.1329': attribute type 4 has an invalid length. [ 209.667763][T10976] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1329'. [ 209.707931][T10980] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1331'. [ 209.734149][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1331'. [ 210.117670][T11000] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 210.133951][T11004] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 210.146142][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1337'. [ 210.184267][T11005] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 210.245886][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1340'. [ 210.564442][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'. [ 210.586896][T11016] tc action pedit offset 1073741824 out of bounds [ 210.593518][T11016] tc action pedit offset 1073741824 out of bounds [ 210.599995][T11016] tc action pedit offset 1073741824 out of bounds [ 210.606573][T11016] tc action pedit offset 1073741824 out of bounds [ 210.613051][T11016] tc action pedit offset 1073741824 out of bounds [ 210.619516][T11016] tc action pedit offset 1073741824 out of bounds [ 210.625989][T11016] tc action pedit offset 1073741824 out of bounds [ 210.632444][T11016] tc action pedit offset 1073741824 out of bounds [ 210.638934][T11016] tc action pedit offset 1073741824 out of bounds [ 210.645414][T11016] tc action pedit offset 1073741824 out of bounds [ 210.651892][T11016] TC_ACT_REPEAT abuse ? [ 211.464047][T11065] netlink: 'syz.0.1355': attribute type 7 has an invalid length. [ 211.507626][T11065] netlink: 'syz.0.1355': attribute type 8 has an invalid length. [ 211.535957][T11071] IPVS: Unknown mcast interface: veth0_to_bond [ 211.548048][T11069] IPVS: Unknown mcast interface: veth0_to_bond [ 211.579843][T11065] ip6gretap0: entered promiscuous mode [ 211.594072][T11065] syz_tun: entered promiscuous mode [ 211.618639][T11065] ip6gretap0: left promiscuous mode [ 211.643452][T11065] syz_tun: left promiscuous mode [ 211.676441][T11071] xt_CT: No such helper "snmp_trap" [ 211.696993][T11069] xt_CT: No such helper "snmp_trap" [ 212.119512][T11110] netlink: 'syz.3.1364': attribute type 13 has an invalid length. [ 212.303146][ T6245] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 212.466458][T11128] syzkaller1: entered promiscuous mode [ 212.481704][T11128] syzkaller1: entered allmulticast mode [ 212.561979][T11135] syzkaller0: entered promiscuous mode [ 212.570577][T11135] syzkaller0: entered allmulticast mode [ 212.626346][T11139] netlink: 'syz.1.1374': attribute type 1 has an invalid length. [ 213.131923][T11159] netlink: 'syz.1.1381': attribute type 11 has an invalid length. [ 213.151752][T11159] netlink: 'syz.1.1381': attribute type 11 has an invalid length. [ 213.233130][ T5805] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 213.375277][T11176] syzkaller1: entered promiscuous mode [ 213.404762][T11176] syzkaller1: entered allmulticast mode [ 213.690774][T11190] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 213.727617][T11188] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 213.829446][T11184] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.891494][T11201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.936355][T11184] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.022247][T11184] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.223021][T11210] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.231152][T11210] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.258633][T11210] bridge40: port 1(vlan4) entered disabled state [ 214.368875][T11210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.387444][T11210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.530005][T11210] dummy0: left promiscuous mode [ 214.563129][T11224] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 214.563750][T11228] __nla_validate_parse: 16 callbacks suppressed [ 214.563768][T11228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1394'. [ 214.606384][T11228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1394'. [ 214.618814][ T7832] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.653578][T11184] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.678922][ T7832] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.698642][ T7832] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.734047][ T7832] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.760894][ T7832] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.786122][T11233] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1397'. [ 214.800672][ T7832] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.817955][ T7832] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.837819][ T7832] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.854723][T11236] netlink: 'syz.0.1399': attribute type 1 has an invalid length. [ 214.955974][T11236] bond4: entered promiscuous mode [ 214.970194][T11236] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.982512][T11242] tipc: Enabling of bearer rejected, failed to enable media [ 215.377214][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'. [ 215.404695][T11272] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1405'. [ 215.493189][T11276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1410'. [ 215.553902][T11276] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 215.649878][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1413'. [ 215.736071][T11292] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1414'. [ 215.999001][T11307] batadv_slave_0: Caught tx_queue_len zero misconfig [ 216.075944][T11309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1418'. [ 216.648202][T11331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.940293][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 216.968621][T11360] x_tables: duplicate underflow at hook 1 [ 217.028074][T11364] netlink: 'syz.2.1434': attribute type 5 has an invalid length. [ 217.038622][T11364] netlink: 'syz.2.1434': attribute type 8 has an invalid length. [ 217.051558][T11364] geneve7: entered promiscuous mode [ 217.066511][T11364] geneve7: entered allmulticast mode [ 217.089056][ T7828] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 32846 - 0 [ 217.102963][ T7828] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 32846 - 0 [ 217.121604][ T7828] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 32846 - 0 [ 217.154597][ T7828] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 32846 - 0 [ 217.362314][T11382] ipip1: entered promiscuous mode [ 217.753518][T11391] syzkaller0: entered promiscuous mode [ 217.774227][T11391] syzkaller0: entered allmulticast mode [ 217.814751][T11414] syzkaller0: mtu less than device minimum [ 218.038221][T11421] bond0: Caught tx_queue_len zero misconfig [ 218.585455][T11440] ipvlan2: entered promiscuous mode [ 218.615898][T11446] macvlan2: entered allmulticast mode [ 218.621358][T11446] veth1_to_team: entered allmulticast mode [ 218.628279][T11443] netlink: 'syz.0.1456': attribute type 12 has an invalid length. [ 218.918488][ T4936] Bluetooth: hci4: link tx timeout [ 218.925306][ T4936] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 219.579426][T11492] bond17: entered promiscuous mode [ 219.586045][T11492] 8021q: adding VLAN 0 to HW filter on device bond17 [ 219.787759][T11503] tipc: Resetting bearer [ 219.814953][T11503] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 219.823897][T11503] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 219.848490][T11503] geneve3: left promiscuous mode [ 219.874536][T11503] veth1_to_team: left allmulticast mode [ 219.880958][T11503] macvlan2: left allmulticast mode [ 219.905138][ T172] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.920812][ T172] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.034487][T11509] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 220.042222][T11509] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 220.065987][T11517] openvswitch: netlink: Multiple metadata blocks provided [ 220.085223][ T172] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.136597][ T172] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.319476][T11526] __nla_validate_parse: 10 callbacks suppressed [ 220.319522][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 220.368614][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1477'. [ 220.858544][T11541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.899078][T11550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1481'. [ 220.934042][T11541] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.983290][ T4936] Bluetooth: hci4: command 0x0405 tx timeout [ 221.021734][T11541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.151379][T11541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.189973][T11541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.235509][T11541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.248062][T11541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.265201][T11541] veth1_vlan: left promiscuous mode [ 221.271576][T11541] veth0_vlan: left promiscuous mode [ 221.278349][T11541] veth0_vlan: entered promiscuous mode [ 221.287059][T11541] veth1_vlan: entered promiscuous mode [ 221.304157][T11541] veth0_macvtap: left promiscuous mode [ 221.312103][T11541] veth0_macvtap: entered promiscuous mode [ 221.321053][T11541] geneve0: entered promiscuous mode [ 221.334536][T11541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.458870][T11541] dummy0: entered promiscuous mode [ 221.469527][T11541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.480688][T11541] 8021q: adding VLAN 0 to HW filter on device eth0 [ 221.490940][T11541] 8021q: adding VLAN 0 to HW filter on device eth1 [ 221.501090][T11541] 8021q: adding VLAN 0 to HW filter on device eth2 [ 221.511665][T11541] 8021q: adding VLAN 0 to HW filter on device eth3 [ 221.526214][T11541] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.538509][T11541] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 221.588828][ T7833] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.596046][ T7833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.621531][ T7833] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.628777][ T7833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.681640][ T172] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.691247][ T172] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.725912][ T996] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 221.744755][ T172] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.761942][ T7833] bridge40: port 1(vlan4) entered blocking state [ 221.769058][ T7833] bridge40: port 1(vlan4) entered forwarding state [ 221.794495][ T172] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.896206][T11560] pimreg: left allmulticast mode [ 222.123487][T11577] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1491'. [ 222.188239][T11576] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.225658][T11576] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.244967][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1490'. [ 222.278707][T11585] netlink: 'syz.1.1490': attribute type 5 has an invalid length. [ 222.306619][T11585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1490'. [ 222.363972][T11585] geneve3: entered promiscuous mode [ 222.369946][T11585] geneve3: entered allmulticast mode [ 222.381328][ T172] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 42836 - 0 [ 222.434779][T11576] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.495782][T11576] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.549432][ T172] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 42836 - 0 [ 222.667187][ T7832] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 222.696243][T11606] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1495'. [ 222.748759][ T8406] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 222.803511][T11611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1496'. [ 222.818733][T11611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1496'. [ 222.981486][T11622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1497'. [ 223.056136][T11622] bond18: Unable to set down delay as MII monitoring is disabled [ 223.076144][T11622] bond18 (unregistering): Released all slaves [ 223.139336][T11630] bond0: Unable to set down delay as MII monitoring is disabled [ 223.625496][T11655] tipc: Enabling of bearer rejected, already enabled [ 223.668154][T11655] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 223.686838][T11655] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 223.696860][T11655] tipc: Resetting bearer [ 223.723965][ T7828] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 223.744317][ T7828] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 223.756538][T11655] sch_tbf: burst 14 is lower than device syzkaller0 mtu (313) ! [ 223.790423][T11664] : renamed from team_slave_1 (while UP) [ 224.157364][T11576] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.190331][T11576] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.201591][T11576] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 42836 - 0 [ 224.281983][T11576] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.326666][T11576] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.354966][T11576] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 42836 - 0 [ 224.391594][T11692] syzkaller0: entered promiscuous mode [ 224.402899][T11692] syzkaller0: entered allmulticast mode [ 224.476607][T11690] ip6erspan0: entered promiscuous mode [ 224.565871][T11689] ip6erspan0: left promiscuous mode [ 224.583878][ T996] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 224.584520][ T2141] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.620676][ T2141] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 42836 - 0 [ 224.646963][ T2141] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 224.682232][ T2141] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.699522][ T2141] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 42836 - 0 [ 224.712567][ T2141] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 224.761955][ T2141] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.788646][ T2141] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 42836 - 0 [ 224.800334][ T2141] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 224.813132][T11708] bond0: Caught tx_queue_len zero misconfig [ 224.850232][ T2141] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.878934][ T2141] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 42836 - 0 [ 224.897519][ T2141] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 225.018318][T11723] veth1_to_batadv: entered promiscuous mode [ 225.024865][T11723] veth1_to_batadv: entered allmulticast mode [ 225.494149][T11745] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 225.567619][T11745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.781333][T11762] __nla_validate_parse: 4 callbacks suppressed [ 225.781353][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 225.817969][T11762] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 226.809917][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1539'. [ 226.883038][T11792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1541'. [ 226.957951][T11792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1541'. [ 227.125187][T11807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1543'. [ 227.146838][T11810] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 227.161149][ T6272] team_slave_0: entered promiscuous mode [ 227.166953][ T6272] team_slave_1: entered promiscuous mode [ 227.274303][T11810] netlink: 'syz.2.1545': attribute type 10 has an invalid length. [ 227.300014][T11815] netlink: 'syz.1.1546': attribute type 2 has an invalid length. [ 227.310729][T11815] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1546'. [ 227.335692][T11810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.357697][T11810] team0: Port device netdevsim1 added [ 227.366003][T11810] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 227.374632][T11815] syzkaller1: tun_chr_ioctl cmd 35313 [ 227.386938][T11820] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1547'. [ 227.462911][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 227.632563][T11827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.670087][T11834] ip6tnl0: Caught tx_queue_len zero misconfig [ 227.740462][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1552'. [ 227.810662][T11842] netlink: 'syz.3.1553': attribute type 1 has an invalid length. [ 227.825598][T11838] 8021q: adding VLAN 0 to HW filter on device bond7 [ 227.899324][T11842] bond5: entered promiscuous mode [ 227.914438][T11842] 8021q: adding VLAN 0 to HW filter on device bond5 [ 227.966670][T11851] syzkaller1: entered promiscuous mode [ 227.972272][T11851] syzkaller1: entered allmulticast mode [ 228.166199][T11863] netlink: 'syz.3.1559': attribute type 1 has an invalid length. [ 228.233082][T11863] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.348542][T11865] "syz.0.1558" (11865) uses obsolete ecb(arc4) skcipher [ 228.436762][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1561'. [ 228.721527][T11890] netlink: 'syz.1.1564': attribute type 1 has an invalid length. [ 228.776222][T11893] "syz.1.1564" (11893) uses obsolete ecb(arc4) skcipher [ 228.849655][T11895] netlink: 824 bytes leftover after parsing attributes in process `syz.4.1566'. [ 228.861720][T11895] ip6t_srh: unknown srh match flags 4000 [ 229.141819][T11905] netlink: 'syz.3.1569': attribute type 1 has an invalid length. [ 229.225075][T11905] 8021q: adding VLAN 0 to HW filter on device bond7 [ 229.251015][T11905] macvlan3: entered promiscuous mode [ 229.256887][T11905] macvlan3: entered allmulticast mode [ 229.264035][T11905] bond7: entered promiscuous mode [ 229.269857][T11905] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 229.279045][T11905] bond7: left promiscuous mode [ 229.306423][T11919] syzkaller0: entered promiscuous mode [ 229.340665][T11919] syzkaller0: entered allmulticast mode [ 229.485688][T11921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.535290][T11923] syzkaller0: renamed from batadv_slave_1 (while UP) [ 229.701682][T11932] block nbd4: not configured, cannot reconfigure [ 230.996124][T11991] __nla_validate_parse: 6 callbacks suppressed [ 230.996162][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1593'. [ 231.013853][T11991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1593'. [ 231.201980][T11998] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1595'. [ 231.488239][T12019] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1601'. [ 231.548802][T12019] bond18: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 231.592094][T12019] bond18 (unregistering): Released all slaves [ 231.658192][T12031] netlink: 'syz.0.1602': attribute type 1 has an invalid length. [ 231.685480][T12032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1603'. [ 231.713108][T12031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.763115][T12023] batadv_slave_1: entered promiscuous mode [ 231.809263][T12042] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1603'. [ 231.835393][T12018] batadv_slave_1: left promiscuous mode [ 232.083663][T12052] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 232.119123][T12052] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1608'. [ 232.151260][T12052] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 232.186309][T12052] netlink: 638 bytes leftover after parsing attributes in process `syz.1.1608'. [ 232.216161][T12052] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1608'. [ 232.308315][T12050] 8021q: adding VLAN 0 to HW filter on device bond2 [ 232.327041][T12050] 8021q: adding VLAN 0 to HW filter on device eth0 [ 232.336282][T12050] 8021q: adding VLAN 0 to HW filter on device eth1 [ 232.348020][T12050] 8021q: adding VLAN 0 to HW filter on device eth2 [ 232.366370][T12050] 8021q: adding VLAN 0 to HW filter on device eth3 [ 232.571443][T12060] syzkaller0: Caught tx_queue_len zero misconfig [ 232.594888][T12066] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1612'. [ 232.770792][T12082] debugfs: 'netdev:nicvf0' already exists in 'phy13' [ 232.811718][T12083] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 232.860346][T12087] xt_l2tp: unknown flags: 51 [ 233.194526][T12092] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.202884][T12092] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.240363][T12092] team_slave_0: left promiscuous mode [ 233.251549][T12092] team_slave_1: left promiscuous mode [ 233.346268][T12092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.365469][T12092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.508342][T12093] bond8: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 233.537071][T12093] bond8 (unregistering): Released all slaves [ 233.567356][ T7833] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.581997][ T7833] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 233.600657][ T7833] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 32846 - 0 [ 233.617339][ T7833] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.638769][ T7833] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 233.652848][ T7833] netdevsim netdevsim2 netdevsim1: unset [1, 2] type 2 family 0 port 32846 - 0 [ 233.671518][ T7833] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.701236][ T7833] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 233.740754][ T7833] netdevsim netdevsim2 netdevsim2: unset [1, 2] type 2 family 0 port 32846 - 0 [ 233.779808][ T7833] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.805151][ T7833] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 233.826575][ T7833] netdevsim netdevsim2 netdevsim3: unset [1, 2] type 2 family 0 port 32846 - 0 [ 233.839493][T12124] IPv6: NLM_F_CREATE should be specified when creating new route [ 233.954638][ T172] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 234.101388][T12139] xt_hashlimit: size too large, truncated to 1048576 [ 234.240348][T12144] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048) [ 234.435007][T12155] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.478860][T12155] gretap1: entered allmulticast mode [ 234.532081][T12155] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 234.577442][T12162] bond5 (unregistering): (slave gretap1): Releasing backup interface [ 234.588641][T12170] netlink: 'syz.4.1637': attribute type 18 has an invalid length. [ 234.626345][T12162] bond5 (unregistering): Released all slaves [ 234.822847][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 235.107681][T12191] netlink: 'syz.1.1642': attribute type 89 has an invalid length. [ 235.498966][T12218] nbd: must specify a size in bytes for the device [ 235.738760][T12240] 8021q: adding VLAN 0 to HW filter on device bond8 [ 235.780206][T12245] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 235.859861][T12247] bond9: entered allmulticast mode [ 235.865818][T12247] 8021q: adding VLAN 0 to HW filter on device bond9 [ 236.066944][T12256] __nla_validate_parse: 14 callbacks suppressed [ 236.066964][T12256] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1664'. [ 236.147489][T12260] xt_limit: Overflow, try lower: 324382443/0 [ 236.355038][T12274] tipc: Enabling of bearer rejected, failed to enable media [ 236.720041][T12300] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 236.855120][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1681'. [ 236.869419][T12307] ipvlan3: entered allmulticast mode [ 236.875580][T12307] batadv0: entered allmulticast mode [ 236.882522][T12307] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 236.911719][T12309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1681'. [ 236.934232][T12309] ipvlan3: entered allmulticast mode [ 236.941679][T12309] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 236.956272][T12312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1683'. [ 236.974353][T12312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1683'. [ 236.983948][T12312] netlink: 58 bytes leftover after parsing attributes in process `syz.2.1683'. [ 237.002284][T12312] team0 (unregistering): Port device team_slave_0 removed [ 237.010844][T12312] team0 (unregistering): Port device team_slave_1 removed [ 237.019519][T12312] team0 (unregistering): Port device netdevsim1 removed [ 237.529315][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1692'. [ 237.539039][T12348] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.547379][T12348] IPv6: Can't replace route, no match found [ 237.562991][T12348] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1692'. [ 237.707563][T12353] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1695'. [ 237.984135][T12356] tipc: Resetting bearer [ 238.133199][T12381] netlink: 'syz.1.1700': attribute type 16 has an invalid length. [ 238.169410][T12381] netlink: 'syz.1.1700': attribute type 3 has an invalid length. [ 238.197972][T12381] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.1700'. [ 238.672330][T12415] netlink: 'syz.3.1708': attribute type 4 has an invalid length. [ 238.723288][T12416] netlink: 'syz.3.1708': attribute type 4 has an invalid length. [ 238.890057][T12429] sctp: [Deprecated]: syz.3.1712 (pid 12429) Use of int in max_burst socket option. [ 238.890057][T12429] Use struct sctp_assoc_value instead [ 238.994997][T12425] syzkaller0: entered promiscuous mode [ 239.020897][T12425] syzkaller0: entered allmulticast mode [ 239.030004][T12441] netlink: 'syz.4.1714': attribute type 1 has an invalid length. [ 239.117072][T12449] netlink: 'syz.0.1717': attribute type 29 has an invalid length. [ 239.279796][T12441] macvlan3: entered promiscuous mode [ 239.294100][T12441] macvlan3: entered allmulticast mode [ 239.312184][T12441] bond10: entered promiscuous mode [ 239.325040][T12441] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 239.342127][T12441] bond10: left promiscuous mode [ 239.390135][T12451] syzkaller0: entered promiscuous mode [ 239.403523][T12451] syzkaller0: entered allmulticast mode [ 239.454153][T12459] bond3: entered promiscuous mode [ 239.465324][T12459] bond3: entered allmulticast mode [ 239.479624][T12459] 8021q: adding VLAN 0 to HW filter on device bond3 [ 239.492487][T12463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.532548][T12471] Bluetooth: MGMT ver 1.23 [ 239.596132][T12463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.817156][T12493] sctp: [Deprecated]: syz.1.1727 (pid 12493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.817156][T12493] Use struct sctp_sack_info instead [ 240.388532][T12523] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 240.406508][ T29] audit: type=1800 audit(1782423795.130:6): pid=12477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1722" name="memory.events" dev="tmpfs" ino=1686 res=0 errno=0 [ 240.462465][T12523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.500748][T12518] tipc: Enabling of bearer rejected, failed to enable media [ 241.098553][T12565] netlink: 'syz.0.1745': attribute type 3 has an invalid length. [ 241.119078][T12565] __nla_validate_parse: 15 callbacks suppressed [ 241.119098][T12565] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1745'. [ 241.161071][T12572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1743'. [ 241.199616][ T172] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.225312][ T172] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.241450][ T172] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.269704][ T172] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.389186][T12592] netlink: 'syz.4.1750': attribute type 10 has an invalid length. [ 241.616202][T12612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1755'. [ 241.821408][T12625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1759'. [ 241.908430][T12625] 8021q: adding VLAN 0 to HW filter on device bond18 [ 242.048536][T12635] bond4: option all_slaves_active: invalid value (127) [ 242.057236][T12635] bond4 (unregistering): Released all slaves [ 242.074539][T12631] bond18: option ad_select: unable to set because the bond device is up [ 242.109556][T12650] ipip0: entered promiscuous mode [ 242.322083][T12668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1767'. [ 242.501959][T12682] veth0: entered promiscuous mode [ 242.544760][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1772'. [ 242.647316][T12693] bond19: entered promiscuous mode [ 242.812589][T12701] erspan0: entered promiscuous mode [ 242.837491][T12701] netlink: 'syz.1.1778': attribute type 2 has an invalid length. [ 242.857378][T12701] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1778'. [ 242.867059][T12706] bond11: Unable to set up delay as MII monitoring is disabled [ 242.877640][T12706] bond11 (unregistering): Released all slaves [ 243.081166][T12727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1785'. [ 243.109220][T12727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1785'. [ 243.158633][T12727] geneve4: entered promiscuous mode [ 243.446820][T12745] xt_ipcomp: unknown flags 1D [ 243.461134][T12745] netlink: 'syz.1.1788': attribute type 23 has an invalid length. [ 243.492861][T12745] netlink: 'syz.1.1788': attribute type 21 has an invalid length. [ 243.500934][T12745] IPv6: NLM_F_CREATE should be specified when creating new route [ 243.541705][T12745] pim6reg0: tun_chr_ioctl cmd 35111 [ 243.594032][T12745] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1788'. [ 244.308330][T12798] lo speed is unknown, defaulting to 1000 [ 244.325045][T12798] lo speed is unknown, defaulting to 1000 [ 244.346606][T12800] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 244.373028][T12798] lo speed is unknown, defaulting to 1000 [ 244.392479][T12798] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 244.407077][T12798] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 244.424600][T12798] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 244.436483][T12798] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 244.450993][T12798] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 244.487478][T12800] bond4: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 244.533653][T12800] bond4 (unregistering): Released all slaves [ 244.640226][T12798] lo speed is unknown, defaulting to 1000 [ 244.685235][T12798] lo speed is unknown, defaulting to 1000 [ 244.708509][T12806] veth6: entered allmulticast mode [ 244.729825][T12798] lo speed is unknown, defaulting to 1000 [ 244.741966][T12798] lo speed is unknown, defaulting to 1000 [ 244.750867][T12798] lo speed is unknown, defaulting to 1000 [ 244.759942][T12798] lo speed is unknown, defaulting to 1000 [ 244.783972][T12806] veth6: entered allmulticast mode [ 244.806720][T12812] syzkaller0: entered promiscuous mode [ 244.822915][T12812] syzkaller0: entered allmulticast mode [ 244.954041][T12820] netlink: 'syz.4.1807': attribute type 3 has an invalid length. [ 245.057402][T12828] netlink: 'syz.1.1808': attribute type 1 has an invalid length. [ 245.159516][ T7832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.175244][ T7832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.270538][T12840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.321982][T12845] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 245.640801][T12866] bond4: option lacp_rate: invalid value (3) [ 245.648791][T12866] bond4 (unregistering): Released all slaves [ 245.702826][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 245.773602][T12872] lo: Caught tx_queue_len zero misconfig [ 245.781418][T12872] netlink: 'syz.3.1822': attribute type 2 has an invalid length. [ 246.289979][T12904] netlink: 'syz.0.1829': attribute type 4 has an invalid length. [ 246.304647][T12904] netlink: 'syz.0.1829': attribute type 4 has an invalid length. [ 246.309693][T12900] __nla_validate_parse: 10 callbacks suppressed [ 246.309733][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1828'. [ 246.486309][T12912] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1833'. [ 246.526808][T12912] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1833'. [ 246.820128][T12933] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1838'. [ 247.350465][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1844'. [ 247.373001][T12958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.407157][T12958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.521039][T12964] lo: entered promiscuous mode [ 247.533672][T12964] lo: entered allmulticast mode [ 247.671725][T12982] debugfs: '1^!Y [ 247.671725][T12982] 3UH5rBn\' already exists in 'ieee80211' [ 247.846283][T12986] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 248.040527][T12992] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1852'. [ 248.050529][T12992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1852'. [ 248.421684][T13018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1858'. [ 248.455523][T13018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1858'. [ 248.465997][T13018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1858'. [ 248.701524][T13041] erspan0: default FDB implementation only supports local addresses [ 248.799399][T13040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.903243][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 248.920455][T13057] netlink: 'syz.0.1871': attribute type 1 has an invalid length. [ 249.031795][T13057] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 249.291876][T13076] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20002 [ 249.675121][T13093] geneve8: entered promiscuous mode [ 249.681766][ T7833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.690853][ T7833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.701307][ T7833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.711238][ T7833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.043103][T13116] NCSI netlink: No device for ifindex 566712438 [ 250.154629][T13122] geneve4: entered promiscuous mode [ 250.426686][T13140] syzkaller0: entered promiscuous mode [ 250.432264][T13140] syzkaller0: entered allmulticast mode [ 250.440500][T13141] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 250.450160][T13141] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 250.649828][T13149] netlink: 'syz.4.1899': attribute type 10 has an invalid length. [ 251.213793][T13163] syzkaller1: entered promiscuous mode [ 251.228702][T13163] syzkaller1: entered allmulticast mode [ 251.381812][T13174] netlink: 'syz.0.1909': attribute type 1 has an invalid length. [ 251.396034][T13174] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 251.426549][T13180] __nla_validate_parse: 11 callbacks suppressed [ 251.426571][T13180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1906'. [ 251.495851][T13180] netlink: 'syz.1.1906': attribute type 1 has an invalid length. [ 251.503986][T13180] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1906'. [ 251.524823][T13180] netlink: 'syz.1.1906': attribute type 1 has an invalid length. [ 251.555234][T13180] netlink: 638 bytes leftover after parsing attributes in process `syz.1.1906'. [ 251.593385][T13180] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1906'. [ 251.866714][T13210] lo speed is unknown, defaulting to 1000 [ 251.912222][T13212] batadv_slave_0: Caught tx_queue_len zero misconfig [ 252.200167][T13229] syzkaller0: entered promiscuous mode [ 252.205946][T13229] syzkaller0: entered allmulticast mode [ 252.216281][ T9941] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.227124][ T9941] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.316548][ T9941] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.333614][ T172] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.448342][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1924'. [ 252.662538][T13238] 8021q: adding VLAN 0 to HW filter on device bond4 [ 252.722945][T13242] batadv_slave_0: Caught tx_queue_len zero misconfig [ 252.744939][T13248] syzkaller0: entered promiscuous mode [ 252.766857][T13248] syzkaller0: entered allmulticast mode [ 252.886846][T13253] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1930'. [ 252.920881][ T2141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.929633][ T2141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.938473][T13254] netlink: 'syz.3.1930': attribute type 3 has an invalid length. [ 253.038758][T13256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.076471][T13258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1932'. [ 253.204696][T13260] syzkaller0: entered promiscuous mode [ 253.222763][T13260] syzkaller0: entered allmulticast mode [ 253.236855][T13263] ip6tnl0: Caught tx_queue_len zero misconfig [ 253.712017][T13276] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1938'. [ 253.907600][T13294] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 253.920264][T13295] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 253.948719][T13295] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 254.157719][T13289] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 254.178854][T13289] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 254.457235][T13187] Set syz1 is full, maxelem 65536 reached [ 254.583884][T13328] netlink: 'syz.1.1951': attribute type 1 has an invalid length. [ 254.615024][T13328] netlink: 'syz.1.1951': attribute type 10 has an invalid length. [ 254.629036][T13328] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1951'. [ 254.639547][T13328] dummy0: entered promiscuous mode [ 254.660141][ T2141] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 254.725024][T13334] ip6gre2: entered promiscuous mode [ 254.740299][T13334] ip6gre2: entered allmulticast mode [ 254.748343][ T2141] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 254.755486][T13334] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 254.772088][ T2141] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 254.780203][ T6245] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 254.796277][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1953'. [ 255.149654][T13361] 8021q: adding VLAN 0 to HW filter on device bond11 [ 255.156821][ T6272] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 255.183087][T13361] bond11: (slave veth11): Enslaving as an active interface with an up link [ 255.216652][T13361] bond11: (slave bridge0): Enslaving as an active interface with an up link [ 255.274298][T13321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.357077][T13369] netlink: 'syz.3.1959': attribute type 39 has an invalid length. [ 255.511097][T13375] syzkaller0: entered promiscuous mode [ 255.518484][T13375] syzkaller0: entered allmulticast mode [ 255.704650][ T6272] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 255.813843][T13401] netlink: 'syz.0.1968': attribute type 5 has an invalid length. [ 255.944519][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.188159][T13417] ip6gretap0: entered promiscuous mode [ 256.198776][T13417] syz_tun: entered promiscuous mode [ 256.209638][T13417] debugfs: 'hsr1' already exists in 'hsr' [ 256.221060][T13417] Cannot create hsr debugfs directory [ 256.737338][T13417] __nla_validate_parse: 9 callbacks suppressed [ 256.737360][T13417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1972'. [ 256.776065][T13426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1972'. [ 256.793711][T13426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1972'. [ 257.190666][T13437] sctp: [Deprecated]: syz.4.1977 (pid 13437) Use of int in maxseg socket option. [ 257.190666][T13437] Use struct sctp_assoc_value instead [ 257.254246][T13436] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 257.273011][T13436] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 257.309401][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1981'. [ 257.522346][T13452] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1982'. [ 257.758183][ T5630] block nbd3: Receive control failed (result -32) [ 257.765327][ T4936] block nbd3: Receive control failed (result -32) [ 257.907757][T13473] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1985'. [ 258.064150][T13460] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.071701][T13460] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.196690][T13460] dummy0: left promiscuous mode [ 258.634813][T13460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.651762][T13460] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 258.662713][T13460] syzkaller0: left promiscuous mode [ 258.668244][T13460] syzkaller0: left allmulticast mode [ 258.678415][T13460] xfrm0: left allmulticast mode [ 258.745162][T13460] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 258.751981][T13460] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 258.766795][T13460] bond2: left promiscuous mode [ 258.773785][T13460] vlan2: left promiscuous mode [ 258.778925][T13460] geneve2: left promiscuous mode [ 258.790223][T13460] vlan3: left allmulticast mode [ 258.795403][T13460] bond0: left allmulticast mode [ 258.800366][T13460] bond_slave_0: left allmulticast mode [ 258.806206][T13460] bond_slave_1: left allmulticast mode [ 258.812054][T13460] gretap0: left allmulticast mode [ 258.817573][T13460] macvlan2: left promiscuous mode [ 258.822884][T13460] macvlan2: left allmulticast mode [ 258.824010][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 258.833848][T13460] ip6tnl1: left allmulticast mode [ 258.842908][T13460] bond4: left promiscuous mode [ 258.847815][T13460] veth3: left promiscuous mode [ 258.855725][T13460] ip6gre1: left promiscuous mode [ 258.860808][T13460] ip6gre1: left allmulticast mode [ 258.870133][T13460] geneve3: left promiscuous mode [ 258.896820][T13460] gretap1: left allmulticast mode [ 258.905603][T13460] bond5: left promiscuous mode [ 258.918219][T13460] ipip0: left promiscuous mode [ 258.945166][T13466] syzkaller0: entered promiscuous mode [ 258.950785][T13466] syzkaller0: entered allmulticast mode [ 258.957540][T13466] batman_adv: batadv0: Interface activated: syzkaller0 [ 259.004624][ T7832] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.039140][ T7832] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.054511][ T7832] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.082456][ T7832] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.099893][ T7832] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.123775][ T7832] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.140301][T13488] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 259.157935][T13488] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 259.166183][ T7832] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.179422][ T7832] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.356306][T13500] tipc: Enabled bearer , priority 0 [ 259.356338][ T5632] block nbd4: Receive control failed (result -32) [ 259.482623][T13499] tipc: Disabling bearer [ 259.581514][T13504] lo speed is unknown, defaulting to 1000 [ 259.617337][T13517] syzkaller1: entered promiscuous mode [ 259.630096][T13517] syzkaller1: entered allmulticast mode [ 259.946557][T13543] sctp: [Deprecated]: syz.1.2001 (pid 13543) Use of int in max_burst socket option. [ 259.946557][T13543] Use struct sctp_assoc_value instead [ 260.140108][T13556] bond0: entered promiscuous mode [ 260.145676][T13556] bond_slave_0: entered promiscuous mode [ 260.151697][T13556] bond_slave_1: entered promiscuous mode [ 260.160639][T13556] bond0: left promiscuous mode [ 260.171084][T13556] bond_slave_0: left promiscuous mode [ 260.177860][T13556] bond_slave_1: left promiscuous mode [ 260.687158][T13590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2010'. [ 260.725051][T13593] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2011'. [ 260.830623][T13604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2013'. [ 261.042595][T13620] syzkaller0: entered promiscuous mode [ 261.053364][T13620] syzkaller0: entered allmulticast mode [ 261.222410][T13624] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2020'. [ 261.260202][T13624] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 261.452376][T13647] : renamed from bond_slave_0 (while UP) [ 261.587663][T13659] netlink: 'syz.0.2030': attribute type 1 has an invalid length. [ 261.654932][T13659] bond5: entered promiscuous mode [ 261.669882][T13659] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.729553][T13659] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 261.758793][T13659] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 261.769559][T13659] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 261.808071][T13664] bond5: (slave bridge44): making interface the new active one [ 261.818439][T13664] bridge44: entered promiscuous mode [ 261.830238][T13664] bond5: (slave bridge44): Enslaving as an active interface with an up link [ 261.897913][T13681] __nla_validate_parse: 5 callbacks suppressed [ 261.897934][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2035'. [ 262.058185][T13677] lo speed is unknown, defaulting to 1000 [ 262.085109][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 262.251849][ T7823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.263491][ T7823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.271017][ T7823] Oops: general protection fault, probably for non-canonical address 0xdffffc000000069f: 0000 [#1] SMP KASAN PTI [ 262.282940][ T7823] KASAN: probably user-memory-access in range [0x00000000000034f8-0x00000000000034ff] [ 262.292593][ T7823] CPU: 0 UID: 0 PID: 7823 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 262.302104][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 262.312203][ T7823] Workqueue: events_unbound cfg80211_wiphy_work [ 262.318591][ T7823] RIP: 0010:__ieee80211_get_radio_mask+0xa1/0x420 [ 262.325068][ T7823] Code: 04 00 00 00 00 eb 1e e8 ed 06 9f f6 49 89 de 49 83 fc 0e 0f 84 71 03 00 00 e8 db 06 9f f6 48 83 c5 08 49 ff c4 48 8b 44 24 30 <42> 0f b6 04 38 84 c0 0f 85 f6 02 00 00 48 8b 44 24 08 44 0f b7 28 [ 262.344723][ T7823] RSP: 0018:ffffc90003636fb8 EFLAGS: 00010202 [ 262.350835][ T7823] RAX: 000000000000069f RBX: 0000000000000ec0 RCX: ffff8880276f8000 [ 262.358849][ T7823] RDX: 0000000000000330 RSI: 0000000000000000 RDI: 0000000000000ec0 [ 262.366870][ T7823] RBP: 0000000000003480 R08: ffff888079520ad7 R09: 1ffff1100f2a415a [ 262.374882][ T7823] R10: dffffc0000000000 R11: ffffffff8b26ee80 R12: 0000000000000000 [ 262.382982][ T7823] R13: ffff888079520020 R14: 0000000000000ed0 R15: dffffc0000000000 [ 262.390995][ T7823] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 262.400012][ T7823] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.406643][ T7823] CR2: 00002000001d4000 CR3: 0000000052412000 CR4: 00000000003526f0 [ 262.414667][ T7823] Call Trace: [ 262.417990][ T7823] [ 262.420962][ T7823] ? __pfx_ieee80211_get_radio_mask+0x10/0x10 [ 262.427083][ T7823] cfg80211_iter_combinations+0x260/0x1c90 [ 262.432956][ T7823] ? desc_read+0x194/0x3f0 [ 262.437420][ T7823] ? __pfx_ieee80211_iter_max_chans+0x10/0x10 [ 262.443550][ T7823] ieee80211_max_num_channels+0x186/0x250 [ 262.449341][ T7823] ? __pfx_ieee80211_max_num_channels+0x10/0x10 [ 262.455664][ T7823] ieee80211_can_create_new_chanctx+0x1df/0x270 [ 262.461972][ T7823] ieee80211_find_or_create_chanctx+0x4e2/0x7b0 [ 262.468269][ T7823] ? __pfx_ieee80211_find_or_create_chanctx+0x10/0x10 [ 262.475122][ T7823] ? __pfx_ieee80211_check_combinations_ext+0x10/0x10 [ 262.481956][ T7823] ? cfg80211_chandef_valid_control_freq+0x274/0x410 [ 262.488697][ T7823] ? cfg80211_get_end_freq+0xff/0x1b0 [ 262.494138][ T7823] _ieee80211_link_use_channel+0x4fd/0xcb0 [ 262.500012][ T7823] ? __pfx__ieee80211_link_use_channel+0x10/0x10 [ 262.506401][ T7823] ? cfg80211_get_end_freq+0xff/0x1b0 [ 262.511839][ T7823] ? __pfx_cfg80211_chandef_dfs_required+0x10/0x10 [ 262.518414][ T7823] ? __ieee80211_sta_join_ibss+0x48d/0x1660 [ 262.524365][ T7823] __ieee80211_sta_join_ibss+0x6a4/0x1660 [ 262.530145][ T7823] ? irq_work_queue+0xc3/0x140 [ 262.535008][ T7823] ? __pfx___ieee80211_sta_join_ibss+0x10/0x10 [ 262.541218][ T7823] ? vprintk_emit+0x4eb/0x560 [ 262.545945][ T7823] ? __pfx_vprintk_emit+0x10/0x10 [ 262.551021][ T7823] ? _printk+0xdd/0x130 [ 262.555244][ T7823] ? __pfx__printk+0x10/0x10 [ 262.559893][ T7823] ? _printk+0xdd/0x130 [ 262.564102][ T7823] ? ieee80211_sta_create_ibss+0x156/0x480 [ 262.569978][ T7823] ieee80211_sta_create_ibss+0x300/0x480 [ 262.575685][ T7823] ? __pfx_ieee80211_sta_create_ibss+0x10/0x10 [ 262.581915][ T7823] ieee80211_ibss_work+0xd99/0x1060 [ 262.587196][ T7823] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 262.592970][ T7823] ? trace_irq_enable+0x3b/0x140 [ 262.598152][ T7823] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 262.604032][ T7823] ? skb_dequeue+0x124/0x160 [ 262.608679][ T7823] ? ieee80211_iface_work+0xd15/0x1010 [ 262.614207][ T7823] ? ieee80211_iface_work+0xf64/0x1010 [ 262.619727][ T7823] ? rcu_is_watching+0x15/0xb0 [ 262.624549][ T7823] cfg80211_wiphy_work+0x29e/0x420 [ 262.629718][ T7823] ? process_scheduled_works+0xa20/0x14e0 [ 262.635496][ T7823] process_scheduled_works+0xa8e/0x14e0 [ 262.641134][ T7823] ? __pfx_process_scheduled_works+0x10/0x10 [ 262.647172][ T7823] ? do_raw_spin_lock+0x12b/0x2f0 [ 262.652265][ T7823] ? assign_work+0x3cf/0x5d0 [ 262.656922][ T7823] worker_thread+0xa47/0xfb0 [ 262.661570][ T7823] kthread+0x388/0x470 [ 262.665665][ T7823] ? __pfx_worker_thread+0x10/0x10 [ 262.670838][ T7823] ? __pfx_kthread+0x10/0x10 [ 262.675453][ T7823] ret_from_fork+0x514/0xb70 [ 262.680071][ T7823] ? __pfx_ret_from_fork+0x10/0x10 [ 262.685206][ T7823] ? __switch_to+0xc89/0x1420 [ 262.689911][ T7823] ? __pfx_kthread+0x10/0x10 [ 262.694553][ T7823] ret_from_fork_asm+0x1a/0x30 [ 262.699355][ T7823] [ 262.702392][ T7823] Modules linked in: [ 262.707790][ T7823] ---[ end trace 0000000000000000 ]--- [ 262.707929][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 262.722624][ T7823] RIP: 0010:__ieee80211_get_radio_mask+0xa1/0x420 [ 262.730130][ T7823] Code: 04 00 00 00 00 eb 1e e8 ed 06 9f f6 49 89 de 49 83 fc 0e 0f 84 71 03 00 00 e8 db 06 9f f6 48 83 c5 08 49 ff c4 48 8b 44 24 30 <42> 0f b6 04 38 84 c0 0f 85 f6 02 00 00 48 8b 44 24 08 44 0f b7 28 [ 262.758249][ T7823] RSP: 0018:ffffc90003636fb8 EFLAGS: 00010202 [ 262.768216][ T7823] RAX: 000000000000069f RBX: 0000000000000ec0 RCX: ffff8880276f8000 [ 262.778974][ T7823] RDX: 0000000000000330 RSI: 0000000000000000 RDI: 0000000000000ec0 [ 262.788891][ T7823] RBP: 0000000000003480 R08: ffff888079520ad7 R09: 1ffff1100f2a415a [ 262.798829][ T7823] R10: dffffc0000000000 R11: ffffffff8b26ee80 R12: 0000000000000000 [ 262.808213][ T7823] R13: ffff888079520020 R14: 0000000000000ed0 R15: dffffc0000000000 [ 262.817305][ T7823] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 262.828675][ T7823] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.836919][ T7823] CR2: 00002000004f9000 CR3: 0000000084fec000 CR4: 00000000003526f0 [ 262.847966][ T7823] Kernel panic - not syncing: Fatal exception [ 262.854698][ T7823] Kernel Offset: disabled [ 262.859036][ T7823] Rebooting in 86400 seconds..