last executing test programs: 11.375375573s ago: executing program 1 (id=3250): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f000000f0c0), r0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f000000f400)={0x0, 0x0, &(0x7f000000f3c0)={&(0x7f000000f340)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000084}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0xfff6}, {0x1, 0xe}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x37}], {0x95, 0x0, 0x700}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 11.118411198s ago: executing program 1 (id=3255): syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x4, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_LABELS_MASK={0x24, 0x17, [0xac, 0x6, 0x8, 0x6, 0x4, 0x4, 0x2, 0x5]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48004}, 0x840) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r2, 0x800, 0x70bd2d, 0xbf18, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x3e}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3a}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x16}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000001040)={{0xffffffffffffffff, &(0x7f0000000680)='\xff\xff\xff\xff\xff\xff', 0x80800, &(0x7f00000006c0)={@align=0x9, {0x800, 0xdf5, 0x5, 0x5}}, 0xaf3b, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x7f}, 0x7, &(0x7f0000000f40)=[{0x0, 0x2, &(0x7f0000000780)='\xff\xff\xff\xff\xff\xff', &(0x7f00000007c0)="a650b7a9615fcf4608bae2881d5e0c494ca6e73a9e1b46ded9ffa967c93258e1d55a51c6e9ed3c523af29c4d41a1e9fb633aedd3572dfb235025ed2e167854c9aeaa4fb485c1a259f3efe1615c8a348b8fa4b808a2a76512d78ff3655d5c7b12f3fbff34589845f0f5ff792e7af676e68ba054aff11db639da698aecaf27ec928060b0b160508779bc451e7b3aea2e7ff2b3c7384310b873f90f29489a21fad1069e27776093f739", 0xa8, 0x28}, {0x2, 0xffffffff, &(0x7f0000000880)='{*(\xc1\'\x00', &(0x7f00000008c0)="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", 0xfb, 0x28}, {0x2, 0xffff, &(0x7f00000009c0)='\x00', &(0x7f0000000a00)="15a660c5d4a7db6dfa02464e73f0d7fe553fd83bea20514b101e7ed5cfb6debbf0c7f66d39334d298b7146e0a8ea0b581d19cd442802df55ae18583b91bbb510ecaffb4a8fee9ffebd63d9f2f3bd89e482540307b6bc8b60830701ca0f3822e48d97a9dc99125d3f4ea6b5f660f2358160d5a318d6210cfe04fa445c2ba7df4f9ec19dfdfb512b12e34ae1b4e005e6e3e0166871c0ed037ab6644fea36e0e544ea04692445b1ebb032728b5893cd7999cb7aae412210b7af3e741e82a586b3dcc3cf5304a5", 0xc5, 0x32}, {0x1, 0xffffffff, &(0x7f0000000b00)='\x00', &(0x7f0000000b40)="616233630f0093dec4bfb6c1252140283ff60569c5cdebc1e424c28a", 0x1c, 0x2}, {0x2, 0x4, &(0x7f0000000b80)='&\x00', &(0x7f0000000bc0)="3feffbe6ce79e20b2279a7e16b2a046b289fcfc167c3b7dda45459cbbec519a82471677e269523fb29ed1acffdaceed93504b32623aae030c9378244d288aeeb4c8dd24e3cae84f8f1acb97346805be6659ccd3214360842ec046389b07a92343421aad0a1849f35a7b45737d1aaec3935ea2eb746ae3fbf18de1c46b36028fc4c56856cb1cbedb20441937d7443ef67b9c49c09d1681a03a154933cdc8ce024b3b40a5e5128d318a2ed84aadceff8a2679757a57bc4fa4a3940f61bed6a92f0a36d99e56cf9e2067114d5a763686757704459cfe0", 0xd5, 0x20}, {0x2, 0x0, &(0x7f0000000cc0)='-.%]\'\x00', &(0x7f0000000d00)="4e20a66efe55ea82f87f91f8c336009930f464da4de524d9a5241e8c5fdc5659e9f23da4d34dcee339ff33bcc7f98525c911a8de48304b4097bdcb7095e2eaa7fd40457c34198f05e26eb21e3756689560521f6b2591989e554c1161792aa9a8863e4020a94a45d69abfa086ee83604626c0c1d31a686b6a5a2ba15bde1ecb0f107b885d424329c805067a1230979c5c5717536fd8fcc34dd8f897e6730bb088508cf735500658c6436bc07b589432eb22056c63cb5fc11977cd8f4d1dbc91777acd994d76df5d50ce45806d79b279c8f48f966c9dfb3c08538ea068eb107fdd2ce826f5db", 0xe5, 0x10}, {0x2, 0x2, &(0x7f0000000e00)='nl80211\x00', &(0x7f0000000e40)="6a1cddebfebfd60818af60f502b12f6d62d3356b7ebd596da24cf4b231ae524b8337b542965be84795be62473bed906bd25aa4d5c5d9382531f014efaf31169c0f3450a6be45db8a37c91f717042460183985b57c70e6987e5b193c920687c513d19673b785f4719b685573bd76ddd4447f82ff30cb5cb00e6218bd44fb0fe3a8e61eeb13a3eeb7b1a8c92e082148fcb9220827341c738fd95575aef3103fe09b9a136db77cd268f99984261aaaf9965cae6222190a87afd456a7cd1623f2be038f3908f9d74d72669f61345f1f64d997760eea15bc61e2e24d11f21cb9685b87437b427f238", 0xe6, 0x2a}]}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001100), r3) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f00000012c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x124, r6, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xce, 0xa8, @random="af935dd4c5a13b185f375d5f0403ae7c742c77eec80e82dd0a3a04f71db33305262f63f6273667da3c162f10f6e4077d4b18e70e4a015067d4a854acf4046a7c157d92fcd0a6d4864cf6a808a4b96f59b788b031f6555b74d7044f935a63bcde211ad25a3b28026c1a3e077d79ca71e9f41471b028f1f79e71d81f45fabe2adafffffbabc64410ccca16e7ba1defb5c1a7fcfecb662776f1d5c43598fa845e7fb04b21eff4567ebab16b41a78c671549e9d19d00caa4ce51844950354384d8e34afc32ec908719ca3e4f"}, @handle=@pci={{0x8}, {0x11}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000090) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001500)={{r3}, r7, 0x8, @unused=[0xffff, 0x4, 0x7a2, 0x1], @subvolid=0x3baa26fb}) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000002700)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000026c0)={&(0x7f0000002540)={0x17c, r2, 0x220, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x110, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x40}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xe}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x800}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3a3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfd1c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xac6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x565}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xa2a}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2e45}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x81}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8001}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40840}, 0x24000000) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r8, &(0x7f0000002740)={0xa, 0x4e20, 0x180, @local, 0x8}, 0x1c) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000002b00)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002ac0)={&(0x7f00000027c0)={0x2e8, r2, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1b}, @NL80211_ATTR_REG_RULES={0x54, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x275}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}]}]}, @NL80211_ATTR_REG_RULES={0x84, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9b}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2e6c}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x40}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9e4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffffe}]}]}, @NL80211_ATTR_REG_RULES={0x1cc, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xaa}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xa0000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x65484f9e}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x935}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8e1d}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7a7849b7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x20000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x40}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe21b}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff01}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000000}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc73}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc6fde72}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x54}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x880}, 0xc044) getsockopt$inet6_buf(r8, 0x29, 0xd3, &(0x7f0000002b40)=""/240, &(0x7f0000002c40)=0xf0) syz_genetlink_get_family_id$tipc2(&(0x7f0000002c80), r3) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r9, &(0x7f0000002cc0)=0xd13, r10, &(0x7f0000002d00)=0x7, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002d40)={'veth0_to_hsr\x00'}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000002dc0), r3) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x34, r11, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) syz_genetlink_get_family_id$tipc2(&(0x7f0000002ec0), r5) syz_emit_ethernet(0x11a, &(0x7f0000002f00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@mpls_uc={0x8847, {[{}, {0x5}, {0x8001, 0x0, 0x1}, {0x8}, {}, {0xba, 0x0, 0x1}, {0x1, 0x0, 0x1}], @ipv4=@tipc={{0x33, 0x4, 0x0, 0x1a, 0xf0, 0x66, 0x0, 0x30, 0x6, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x7, 0x5c, [@dev={0xac, 0x14, 0x14, 0x44}]}, @rr={0x7, 0x27, 0x79, [@empty, @multicast1, @private=0xa010102, @empty, @multicast2, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @ssrr={0x89, 0x13, 0xb6, [@multicast1, @private=0xa010102, @local, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x44, 0x5b, 0x3, 0xa, [{@private=0xa010100, 0x10}, {@local, 0xfffffffd}, {@private=0xa010101, 0x3}, {@empty, 0x9}, {@private=0xa010100, 0x3}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0xf}, 0xc}, {@private=0xa010101, 0xfffffc01}]}, @timestamp={0x44, 0x24, 0x25, 0x0, 0x0, [0xe5bb, 0x6, 0x2, 0x2, 0x8, 0x8b5b, 0xc41d, 0x200]}, @timestamp={0x44, 0x8, 0x20, 0x0, 0xa, [0x4]}]}}, @payload_direct={{{{0x24, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, 0x2, 0x5, 0x0, 0x2, 0x0, 0x3, 0x3, 0xa644, 0x100, 0x2, 0x4e23, 0x4e23}, 0x3, 0x1}}, [0x0, 0x0, 0x0, 0x0]}}}}}}, &(0x7f0000003040)={0x1, 0x2, [0xb24, 0x7ff, 0x79a, 0x3d1]}) 10.982255377s ago: executing program 1 (id=3256): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f00000000c0)=0x10) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 9.924979472s ago: executing program 1 (id=3269): r0 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20004080) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000980)=@newtaction={0x60, 0x30, 0x36eac49ec043b62f, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000009}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffff"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, r7, 0x25, 0x4, @void}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r8, r9, 0x4, r9}, 0x5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r10) r12 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r14, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r15, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r16, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2761ac248b0c060000", @ANYRES16=r11, @ANYBLOB="000325bd7000fbdbdf250f00000008000300", @ANYRES32=r16, @ANYBLOB="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"], 0x60c}, 0x1, 0x0, 0x0, 0x80}, 0x804) 9.36700185s ago: executing program 1 (id=3273): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xb}, {0x8, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c021}, 0x4048000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x20}, 0x8) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000400)=0x1e) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000380)={r6, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x25, 0x0, 0xbb, 0x20, 0x2, 0x8}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={r6, 0x10001}, &(0x7f0000000040)=0x8) 3.291285897s ago: executing program 3 (id=3342): socket(0x1a, 0x3, 0x633b260c) r0 = socket$kcm(0x28, 0x1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000011006bec9e3be35c6e17aa31076b87670d000000ba090000160af3653c001ac00400020208000400000001a12c000000eeb556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 2.975030911s ago: executing program 3 (id=3344): socketpair(0x2a, 0x6, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) recvmsg(r0, 0x0, 0x100) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bind$can_j1939(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r2, 0xc55b000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 2.753665643s ago: executing program 0 (id=3346): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x2, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r7, 0x1c}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c110c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141b", 0x3e}], 0x1}, 0x8bb3a301eb080b) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x80, 0x0, 0xff, r9}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.659054408s ago: executing program 2 (id=3347): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x10}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000000)={0x23, 0x20}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000000)={0x23, 0x20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sock_ops}, 0x94) 2.468380417s ago: executing program 2 (id=3349): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140)=0x5, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x20000000000001ef, &(0x7f0000000040)=[{0x5, 0xf9, 0x7f, 0x1000000}, {0x8b59, 0x1, 0xcc, 0xed11}, {0x2, 0x7, 0x40, 0x8000001}, {0x45, 0x9, 0x6, 0xa}, {0x6, 0x9, 0x6, 0x522}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002a529a95a0096f63d7fddbdf250100000006000a004e20000008000800ac14142e63339f0af1afc9903a296c0e6e44c95b62fd19bc32b8360487a9719881e2ad8b105944dee2da05113adf32a852155d3df037f3de41ca1890438e2ce6b07cb32381604c981dd6f88ef089581b44bd4c17635d641f87f2b993a1e2d4f73b6b1f8b897a1142f0a38909afbb7e868f71c99c258d4c02ec526230b7fe41efc962e597ae1603ef15a56478405a5e75bb6ccf83bf55d35a1160b00267579a159dc00ad97d53ef"], 0x24}, 0x1, 0x0, 0x0, 0x4048010}, 0x48804) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="681dab4746105dff56087d857f907e756f750c844a2dbceefbb1b9e94f665bedd95285108b6f33b11956486abc94e0a47e3094d88f6fc0f7d5b9e138b02f25f3154e1a1bef03b3b4264a23c5dd46edf7c08d8e0a7b212210b56ac7f130ac0bb1e14c44a29df12c15ba705ff9df6b674f7fcbb5656d78aced8b61acbf6cbbb8008a1215c3080fdc70dda860dcf6966461071150d82f2510fda94a0470df400b708c52c8669e2c180f1a7601f3dcbf83bebfae0658b78705b2cdfbe8f7844ac420a238d6c7e9a70c7749ca4472c269d6d9", 0xd0}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.231132385s ago: executing program 4 (id=3350): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071108500000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40091b30000000079110600000000e9ffffffff4893bec92f7a2d6a314b2e8cc21e40b4ffffff009500000c000000005914089cb106c4a0a19730ed630524944c41e1234e6355e9d3407c650d094547229fb76cfade7ebfa9af0c6755e84be394e1966e079f810270a47b5aad1ac34fc0c3cbbade7f10b667326ba71800ea375e4082ff47f0e4841fb4c2270583d612"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 2.205505956s ago: executing program 2 (id=3351): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRESHEX, @ANYRES32, @ANYBLOB="1f40f6c2b35fc47200007d036d1e00000000000000000000be54af9b48e6a747c2eb1e0f92e63b0000f3ff6255f941cf0fa00e88493c43671531d90fce4b1cdfdd"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x83, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1886dd60000000004d110120010000000000000000d2c400000001ff02000000000000000000000000000140000e22004d90"], 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff00000000000000114242"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0f0180c00000000800470000b0400000110011907800000000000000004e244e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c1d614883ad5c8c82b8af584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00000000000000000000000000000000bcfd1f6004dca2957c6456ea3b2222d70fbf31db5e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df6"], 0x0) recvmmsg(r4, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10300, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000100001009965efcdd3d11ae021d7dcb6c6f33c000000000000000000007400", @ANYRES32=r7, @ANYBLOB="00000000031201001c0012800b00010062726964676500000c00028005002b000b000000"], 0x3c}}, 0x48000) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x0, 0x0) bind$rxrpc(r8, &(0x7f0000000580)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00', 0x7ff}}, 0x24) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x103, 0x0) r10 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r10, 0x0, 0x2, 0x0, 0x0) connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.963602963s ago: executing program 4 (id=3352): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x0) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x40) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fafffffb00000000030000008500000036000000670000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f0000004ec0)={&(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000004e80)=[{&(0x7f0000000940)=""/170, 0xaa}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/209, 0xd1}], 0x4}, 0x100) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r6, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x50, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x37}, {[@lsrr={0x83, 0xf, 0xee, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2]}, @timestamp={0x44, 0x10, 0x31, 0x0, 0x5, [0x0, 0x3, 0x1]}]}}}}}}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000002f80)={'filter\x00', 0x6002, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x0, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7f, 'system_u:object_r:xconsole_device_t:s0\x00'}}}, {{@arp={@dev, @multicast2, 0x0, 0xff000000, 0x10, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'nicvf0\x00', {}, {}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @private, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2f8}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x518) sendmsg$nl_route_sched(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) sendmsg$kcm(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000000020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) 1.718994125s ago: executing program 0 (id=3353): r0 = gettid() r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x70bd2e, 0x25dfdbfe, {0x2, 0x0, 0x0, r5, 0x8, 0x10, 0x72748f52b8af0932}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x3c}}, 0x20024090) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r0}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 1.662629151s ago: executing program 3 (id=3354): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'erspan0\x00', r1, 0x10, 0x20, 0xd7e, 0x4, {{0x19, 0x4, 0x2, 0x15, 0x64, 0x65, 0x0, 0xfc, 0x4, 0x0, @broadcast, @multicast1, {[@cipso={0x86, 0x10, 0x3, [{0x6, 0x4, "9e34"}, {0x5, 0x2}, {0x0, 0x4, '~\r'}]}, @rr={0x7, 0xb, 0x99, [@multicast2, @multicast2]}, @timestamp_prespec={0x44, 0x34, 0x1b, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast2, 0xc94a}, {@private=0xa010102, 0xf}, {@multicast1, 0x81}, {@multicast2, 0x2}, {@private=0xa010101}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x8, 0x7, 0x0, 0x10, {{0x22, 0x4, 0x2, 0xe, 0x88, 0x64, 0x0, 0xe9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0xc, 0xd6, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x5}]}, @timestamp_addr={0x44, 0xc, 0x79, 0x1, 0xa, [{@broadcast, 0x8000}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x97, 0x3, 0x3, [{@multicast2}, {@loopback, 0x5}, {@remote, 0xfffff50d}, {@empty, 0x7}]}, @timestamp={0x44, 0x8, 0x75, 0x0, 0x8, [0xd71]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @ssrr={0x89, 0x1b, 0xc7, [@broadcast, @remote, @multicast1, @multicast2, @multicast2, @remote]}, @end, @ssrr={0x89, 0x7, 0xae, [@dev={0xac, 0x14, 0x14, 0x3c}]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @empty, @local}, &(0x7f0000000300)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', r1, 0x2f, 0x1, 0x7, 0x7, 0x0, @private1, @private2, 0x1, 0x3cd7e67397a72ba0, 0x2, 0x2}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x29c, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r2) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r10, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffc}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) sendmsg$nl_route(r2, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)=@getroute={0x14, 0x1a, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r11, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x44, r12, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x44}}, 0x10) r13 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r13, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c00)="d8086b391b60ffef8c0bfb3d33db4c8e77a3e6acb5c7d30ddb456ccaa320", 0x1e}], 0x1, &(0x7f0000000c80)=[@assoc={0x18, 0x117, 0x4, 0x5}], 0x18, 0x8000}], 0x1, 0x440d1) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6d8740b503b2c118, 0x4000010, r2, 0xf933a000) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r14, &(0x7f0000002280)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002240)={&(0x7f0000000dc0)={0x145c, r15, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x29}, @val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xe2, 0xc5, "8a44761a32c1f6e69c6cb579031932a6acac123f0e32d09cf4a20893bbaa43fd39fe34b180f41665b7044d63cb2b09d4b2fc1c2097029055151b3a38c7bfb271e51d7f5e58be83331bcd827824602e706caea876ca8abc86c1d6d4513625abdbff9a733b96cee6356707a33d38ac93ad8d800295b56d1112fa5c8dfdcdf13d831fd9cdc876c309040b0a8788f5f5353afeca25c26dff248ffa405e2803c35aafec837b2867429d40ec30a7aae263a3ff253b752127d0b098f8b7fd8169d78ca625ef207b6c91ee82487aee0be8973993250707cc638465fe8530c2049d18"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6c}, @NL80211_ATTR_VENDOR_DATA={0x79, 0xc5, "5c8ca9998e82db4a67948c0b39463053f55c965c3074ac28907f467c971c6ea5e1736d5ffe87128cae087f92ca012806958ce388fa4ac276f082c7c47629a7c61c450fb7511e59bbab3c8add851291d63deaae1c117ba5eed252e8484d394a4f79fea2b17c9a665dc18c11e0d3809c393be9cf4acb"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1ff}, @NL80211_ATTR_VENDOR_DATA={0x103, 0xc5, "09b053035792eb2bb27efb2329f5c87a6506392b58e31fc85ad471003ce05899fe2cdca1ea02d1d80007dacac7b04406e7893f408c81fffaa66577764922d33ad59ad2ac4df0e7a7bfa59c1a25a271f0c193d15e8d6be8bcc83016e1180c7ef418750d71bd4ab866e64c061ddd168a3edaa22c75140171b04474ffdf102deb3e29944bd265270b872d734a83fad5702c1c1d94c89e0d423cdc54f57b26fcba7c0df2b3e3b52ee70249947f306f33798f0a9853021d592a8ad07a50364dad75d75a8719f4184b1dfd8f5436dc838ef22361a1f36fa6485cad1d23cbac87d4fbd7b377472d044319cbaf5b5c435ef8c75ad69acee0e895e189da0569a6273709"}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_DATA={0xb7, 0xc5, "b3425ab31297e7e06a099fb2a361885a9b1a4cbe55fbc3df62f74474b4fa4660b38b2b9990ef0674251605cd0acbef78c6f289d8e20e316013e471e0f872cdad6854f887570260905547360852c0f317d12e2a6eef74f1013973b1123538e09de0dfe8e53584aa5460ddb591f3a763f79a4f62616d96ef0c6791466ba88db42e29a287744823db0437787478843643e5f136698781ed12b97f95bd6c1937c8932e5bd8e24d2ed9cadaa0d1dfb7a30f4c3c84fd"}, @NL80211_ATTR_VENDOR_DATA={0xf2, 0xc5, "ea7c0976f5c7d6f04cd65eee4e99d1d5ac8847d74b082707421efba4ad25f9416a1da8d7025ddd91079c1a5a4203b3e664d0851b63e3fde36c3d9a142ce8a4c09029739f27eb44854db12736f5be86b316d8ade979c102c9abce1d65d151b900f48b2ebaac5c16d94fe8d909458f202d7bf1658a162c600bd123c5eb0b5b7956c6bd1552543cb933a4d2a49e342203e411b09cd31d0a10565359782370d6a7f2de1ae20fa8c9e1199af397844a04a3faac51a67284fa40c25c19aedb57e05fa531fa9dfa45b36e96a97168da4f195d92ea713ec32f1e051ba3bcbaa081ffa4a7f191083e07f9649c446a18f52f0f"}, @NL80211_ATTR_VENDOR_DATA={0x9, 0xc5, "f1c014ae29"}]}, 0x145c}, 0x1, 0x0, 0x0, 0x4}, 0x800) getsockname$netlink(0xffffffffffffffff, &(0x7f00000022c0), &(0x7f0000002300)=0xc) r17 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r14, &(0x7f0000002440)={&(0x7f0000002340), 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x2c, r17, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000000) r18 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r18, 0x8933, &(0x7f0000002480)) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x5c, r15, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0xa3, 0x21}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8840}, 0x200041c4) 1.348061851s ago: executing program 0 (id=3355): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1406, 0x800, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x2400c000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r3, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000012c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @remote, @private=0xa010100, @remote, @multicast1}}}}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r12, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) 1.283187308s ago: executing program 4 (id=3356): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010) (async) 1.278898042s ago: executing program 3 (id=3357): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x20, 0x80, 0x9, 0xf, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x67, 0x0, 0x6, 0x2f, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0x1f, 0x5f, [@rand_addr=0x64010101, @empty, @remote, @local, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x1b}]}]}}}}}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) poll(&(0x7f0000000c80)=[{r5, 0x8284}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000640)=0x810005, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendto$packet(r7, &(0x7f00000006c0)="0b03feff4f00", 0x6, 0x24000814, &(0x7f00000002c0)={0x11, 0x0, r8}, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r10}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xe}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000c80), r13) sendmsg$TEAM_CMD_PORT_LIST_GET(r13, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000f40)=ANY=[@ANYBLOB="0700a016", @ANYRES16=0x0, @ANYBLOB="00022abd7000fddbdf250300000008000100", @ANYRES32=r14, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="30010000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf250d000000380001800800030002000000080003000100000008000100", @ANYRES32=r2, @ANYBLOB="14000200766c616e300000000000000000000000080003000100000014000180080003000100000008000100", @ANYRES32=r6, @ANYBLOB="780001801400020076657468305f766c616e000000000000080003000300000014000200767863616e310000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="080003000000000008000100", @ANYRES32=r10, @ANYBLOB="0800030003000000080003000300000008000100", @ANYRES32=r12, @ANYBLOB="140002006e657464657673696d300000000000002000018008000300010000001400020076657468315f746f5f687372000000001400018008000100", @ANYRES32=r14, @ANYBLOB="08000100"/16, @ANYRES32=0x0, @ANYBLOB="080003000500000008000300030000000800030007000000"], 0x130}, 0x1, 0x0, 0x0, 0x20048000}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000fe80000000000000001b186aa0fb996be150e36f1c340000000000000e4e200000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000d309000000000000ffffffff000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000000000000fdffffffb56b6e000000000000000000"], 0xb8}}, 0x0) bind$netlink(r11, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}}, 0x0) 1.168027995s ago: executing program 4 (id=3358): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000404000000000000000000000b010000000000000001000004000000010000000002000100020000000000"], 0x0, 0x4a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4006e560000000000007910900000000000070000000020000095000000003c"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/144, 0x90}], 0x1, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x408183, &(0x7f0000000080)={@align=0x46477617, {0x4, 0x3, 0x2}}, 0x9, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x3}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x2, 0x6, 0x660, 0x378, 0x378, 0xe0, 0x378, 0x468, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xff, 0xff, 0xff000000, 0xffffff00], 'batadv0\x00', 'rose0\x00', {}, {0xff}, 0xff, 0x3, 0x0, 0x26}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0xfffd, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0x138, 0x170, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@unspec=@rateest={{0x68}, {'pim6reg\x00', 'ip6_vti0\x00', 0x24, 0x0, 0x2, 0x2400000, 0x3, 0x8, {0x10000}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff, 0x0, 0x5}, {}, {0x87, 0x1, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x0, 0x0, 0x7ff}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="170928bd7000ffdbdf25010000000500070000000000080009000100000008000a0000000000060002000100000008001700", @ANYRES32, @ANYBLOB="6bac7739a87d34b6f8ece6d4d7b35b14c1b14b68fc64ead0ba35bfb62f33b7ec8a3e010597154cc2153f69b6e413130e71b7697982e8a7eee276e5432a0c63e8d54685ab7961917a7b5fad81d5aeecfe2037819c2dae58395eaf1b47ca368f6f8b35000000"], 0x3c}, 0x1, 0x620b}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x40}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfff8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000b860b37c605b8bbdea282df271d52467e2cf4c71015e0737070d0300000062de46485343a1fa0cc6e6e985d9c8b1ecb5b27d589e82", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x28200, 0x4) 994.777091ms ago: executing program 2 (id=3359): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xfce6, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}}, 0x4048840) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x34, r4, 0x201, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x20040080) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) (async, rerun: 64) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) (rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000002000010000200000fcdbdf250a8010000000000314000000080018004e204e2014000200fc00000000000000000000000000000407000000000000000000000000000000000000015fff5f6364ac1996a3be7552304e12f4d6f204b8a6b76e8a6e2f1568a8618c5fa98d40aec2663ce9b643f168533374"], 0x4c}, 0x1, 0x0, 0x0, 0x34004810}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc000013000000000000000000000001"], 0x5c}}, 0x0) (async, rerun: 32) r7 = socket(0x40000000015, 0x5, 0x0) (rerun: 32) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r7, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000007"], 0x20}, 0x0) (async, rerun: 32) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) (rerun: 32) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x8001, 0x4) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4}}}, &(0x7f0000000240)=0x90) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4) (async) getsockopt$inet_tcp_int(r8, 0x6, 0x7, 0x0, &(0x7f0000000180)) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="01000000000000000000010095a9"], 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES64=r11, @ANYRES32=0x0, @ANYBLOB="030002008d0d2812700a000100ff6c61fdc596a4bfe9c06396d52c5abce7546c67bba7fc59d22622b24411"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22eca2d415}, 0xc000041) (async) socket$netlink(0x10, 0x3, 0x0) 806.521034ms ago: executing program 4 (id=3360): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0xb, [@enum={0xb, 0x4, 0x0, 0x6, 0x4, [{0xc, 0x1}, {0xc, 0x401}, {0x10, 0x8}, {0xa, 0xfff}]}, @typedef={0x10, 0x0, 0x0, 0x8, 0x3}, @enum64={0xc, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x8, 0x1000, 0x3e}]}, @enum64={0xc, 0x5, 0x0, 0x13, 0x1, 0x3, [{0x4, 0xa4cf, 0x8}, {0xf, 0x9, 0x2}, {0x5, 0x7}, {0x3, 0xff, 0x4fd}, {0xd, 0x1, 0x4}]}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x5f, 0x2e, 0x30, 0x61, 0x0, 0x0]}}, &(0x7f0000000500)=""/107, 0xbb, 0x6b, 0x1}, 0x28) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x1000, 0x4, 0x14d8, 0xb37f, 0x2, 0x10001, 0x3, 0x9, 0xe65, 0x6, 0x2, 0x5}, 0x10, [0x0, 0x0]}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000004c0)={r2, 0x3, 0x3, "2a9a9e"}, 0xb) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 779.694928ms ago: executing program 3 (id=3361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x5, 0x6, 0x86}, 0x49}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00123c0ff000000000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00'}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000050a05000000000000000000020000060c00024000000000000000020b00070066696c74657200000c000240000000000000000108000b40000000040900010073797a30000000000900010073797a300000000020000000080a05000000000000000000020000000900010073797a30"], 0x1ce0}}, 0x40000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r5, 0x0, 0x30, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000070000000000000001800001911149000000c077e10a000000000000"], &(0x7f0000000c40)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 510.916226ms ago: executing program 2 (id=3362): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="d40000001b000301000000000000000000000000000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010008a"], 0xd4}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newnexthop={0x5c, 0x68, 0x20, 0x0, 0x10000, {0x2, 0x0, 0x0, 0x0, 0x2}, [@NHA_RES_GROUP={0x3c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1e0fea23}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x11}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x30e4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}]}, @NHA_OIF={0x8}]}, 0x5c}}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@can_delroute={0x38, 0x19, 0x4, 0x70bd28, 0x25dfdbfc, {0x1d, 0x1, 0x6}, [@CGW_FILTER={0xc, 0xb, {{0x2, 0x1}, {0x3, 0x1, 0x1, 0x1}}}, @CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x1}, 0x2, 0x0, 0x0, 0x0, "176f83a4f6415550"}, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8014}, 0x40040) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000140)=0x8) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf250200005c94ff888fd838f26de6f1fafcfc3600080004007f00000108"], 0x2c}, 0x1, 0x0, 0x0, 0x44014}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x11}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x68, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {0x9}, @broadcast, @device_b, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}]]}, 0x68}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@rand_addr, @dev, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c00000010003b0c00000058ca00000000000000", @ANYRES32=r9, @ANYBLOB="000000002dc8a8c60a000200bbbbbbbbbbbb0000"], 0x2c}}, 0x0) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r9, 0x3, {0x1, 0x1, 0x1}, 0xfe}, 0x18) 464.384744ms ago: executing program 4 (id=3363): r0 = socket(0x1e, 0x4, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x28, 0x2c, 0x0, @remote, @local, {[], {{0x4e21, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@generic={0x22, 0x2}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0xc5}]}}}}}}}}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req={0x1, 0x8, 0x5c, 0x6}, 0x10) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001000)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="120000005400012c000000000000000007"], 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) 330.443396ms ago: executing program 0 (id=3364): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f00000010c0)='*', 0x1}], 0x1, 0x1) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x10}, 0x8004) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x1e4}, 0x1, 0x0, 0x0, 0x10}, 0x8004) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x0) close(r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) (async) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) splice(r1, 0x0, r4, 0x0, 0x10000000000066, 0xa) (async) splice(r1, 0x0, r4, 0x0, 0x10000000000066, 0xa) socket$inet_udp(0x2, 0x2, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r9, 0x8935, &(0x7f00000016c0)={'batadv_slave_0\x00'}) 263.561366ms ago: executing program 2 (id=3365): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x6) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x17}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x81}]}}}]}, 0x4c}}, 0x0) getsockname(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000200)=0x80) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async) accept(r0, 0x0, 0x0) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x6) (async) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) (async) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x17}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x81}]}}}]}, 0x4c}}, 0x0) (async) getsockname(r2, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000200)=0x80) (async) 262.508924ms ago: executing program 3 (id=3366): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20) socketpair(0x2, 0x3, 0x400, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000500)={r3, 0x20, 0x30, 0x1, 0x4}, &(0x7f00000005c0)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000500)={r3, 0x20, 0x30, 0x1, 0x4}, &(0x7f00000005c0)=0x18) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000400)={r4, r4, 0x6, 0x0, 0x0, 0x9, 0x0, 0xc48, 0x7f, 0xc6, 0x1, 0x0, 'syz0\x00'}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r3, 0x3bad}, 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000180)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008000f"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008000f"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 64.222617ms ago: executing program 1 (id=3277): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=@newlink={0xcc, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_MAP={0x24, 0xe, {0x6, 0x9, 0x1, 0xbae, 0xe6, 0x98}}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8c847b1fe6934cf9ea26cc3f1264c19a"}]}, @IFLA_PHYS_SWITCH_ID={0x6, 0x24, "8aab"}, @IFLA_IFNAME={0x14, 0x3, 'wg2\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x2}, @IFLA_PHYS_SWITCH_ID={0x1f, 0x24, "54cec8f63561d8a609bc2cdde7cbf05a1172298e7e7f81f937e88a"}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0xcc}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x3a, "3b6f272e103d071f40a5fd2eedc6b134285761a6b63d662e0a8815da254411b96a0073cc43ae2b5900"/58}, &(0x7f0000000000)=0x5e) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 52.433369ms ago: executing program 0 (id=3367): r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007"], 0x24}}, 0x0) sendmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)="bdbf1ed84bbebc08ca429f5a855c880eee6d95df25bb34180a4ad9d28f0e017ee4f8016aacab04738aaaae3f04a8e0543efe683077737aadef92751e4d34bf62af25e2efc6105634aab48cae3856b095386de413d8c87b50af1195344682503264c8c4c1abd57ec4926112f55bfd836a5e0c407f1c", 0x75}, {&(0x7f0000000200)="3bf8f9c3dec6812a81b326353efaf24b295371378c93af11941d3878e12c2a6de779b8abfb41dc33c274084b53b38c41e861906fc0f86252832200fb86d218bb7077f2a0a31cae088ae0bd1650a1eab59ae5e786f624834708bd973c3d4870388a6ee9cf5bc8c773c7fdb5d0a8d6d17631f324807c183bc024d8e9843115c738aec57b60d895849ab510130e3dcaf78c9348406f125bc14c4dcd98b483253f654322e3a7f01af598a8d3ff7777", 0xad}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="99a5cc575cdbedb07c1405d049f0e4c4d5170d0d2c4b92f0", 0x18}, {&(0x7f0000000380)="1c7727e173cef95c575c332f919dfca470a04af07603b1531ccacedef986c4726629b075f0bc50f7c8b14e0e82e155e53a8ea8e0eb875112e5cbf4d00f2a3ecfa25e7cc3031440fd6d8d0229eb612ea93e859cc6ebc5ceb073740f9728a38add705781186acb3b2401db08b34672cfb0c558330f5fc2efe2217bf33c50f678a04b3755716d71f1a4640de49e4b8164af33667d4bdaca41", 0x97}, {&(0x7f0000000440)="3d87606a708916c988f7f394d4787ba1f7225546ce36b7cd905dd7fe0ce2f28249320448b0b8d1415893f2594c26b59ba0d14d8933752f8194612eb3ba7d8882d0d5c2a3c138448c5f88322b0630760b50ce96a49fe99ae8a85c1f03f04b0dcf18758bd98a2355ebbafd081f8e0633d4b9459e67f3714b2391402be27587d2151c5208dd5cb8ad3ae3e94afb5f3a620a3863be1f41f98a71738a487fcb5175adaa50782e8c5959c4385720f02f316723c95c01869db87c91f0f2e25148ff601db3e419b171", 0xc5}, {&(0x7f0000000540)="3a2875241c7e45ace1f3aa006b062d1f68174cb14d8c5766a4cc74f1484e7458b94604bac0734d808834bb6cbfa44d872f4f344c3773cee5c10ad4897c56fa5cb9ee83675ef0dd1de3760042969bf7fd4240a2efd6b0ac3e15006ea8fa5a78a02e21cd97f76e3475a5492e8a1ac87342b84b349575fb2f3f7b5de79e2b1d2ac9667be724d83dc5913f6712ffec3170cffb48578ef4cda33e08059e3e7b7060ccdbccdd9c1b2b0c31a802fabcee525b03b0365ee1b413a0e8e4cd54dc32ebfddf6bd1b03e3e37d420e3b5078b029b1ef05cc6913b1654d30add37db35663c40c1568c24ee4c22ae50", 0xe8}, {&(0x7f0000000640)="8d345da34aa8fd2c37fe3d5db2b5bad9dd1eb930a47364c0dbada05c944c44821656e22527d8b12b26773849148bdb7a6f73d22fde9558d39ca8163ea57427adcad782dd1d38a4cd55cda53e4151975efa3c6202ca4b33637549a500d10fad6c0232badc9722a5b45217d265ecb40b1a8a1f06f27916ad0cde13d78cb4f15c733e58c0b3abaf8ee4bd7a18ea28b1f540a62a6600c9b426bc2539d90913dec7de4c4d5e84a715414629f061030318a0d1838902faf9c6eedc2b07706e9b615d4c6d75323ef02ab3cbea7e0dae", 0xcc}], 0x8, &(0x7f00000007c0)=[{0x80, 0x114, 0x2, "af40b932578751626d91409a856bbcc7b9a4f6a558c8c347287d788ff1976b8d5f23d973dc7b1f0125e91e768f143959f2c7c6263457b089485e47b11dbb3d311117f85421cd4f6adcc1e59f47366280b578e65422dece031c081122ad8b61da42817849fabc68fd43a3"}], 0x80}}], 0x1, 0x0) 0s ago: executing program 0 (id=3368): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x6, 0xb1aa}, &(0x7f0000000040)=0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x4, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): evsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.064343][ T6114] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.194909][T12513] netlink: 'syz.1.1792': attribute type 4 has an invalid length. [ 239.439052][T12524] openvswitch: netlink: Message has 8 unknown bytes. [ 239.460376][T12524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.328598][T12572] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 240.686273][T12580] syz.0.1813 (12580) used greatest stack depth: 17440 bytes left [ 240.851153][T12598] __nla_validate_parse: 26 callbacks suppressed [ 240.851176][T12598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1818'. [ 241.185771][T12617] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1821'. [ 242.492470][T12623] tipc: Enabled bearer , priority 0 [ 242.731355][T12640] tipc: Disabling bearer [ 242.825879][T12646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1827'. [ 242.867658][T12647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1827'. [ 242.962518][T12647] netlink: 'syz.2.1827': attribute type 1 has an invalid length. [ 243.002057][T12646] netlink: 'syz.2.1827': attribute type 1 has an invalid length. [ 243.036124][T12659] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1830'. [ 243.284526][T12664] netlink: 'syz.3.1831': attribute type 21 has an invalid length. [ 243.310808][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1832'. [ 243.325637][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1831'. [ 243.346091][T12671] tipc: Enabled bearer , priority 0 [ 243.358749][T12672] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1832'. [ 243.366943][T12669] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 243.435640][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1831'. [ 243.453515][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1835'. [ 243.470093][T12664] syzkaller0: entered promiscuous mode [ 243.476020][T12664] syzkaller0: entered allmulticast mode [ 243.482874][T12664] tipc: Resetting bearer [ 243.532887][T12663] tipc: Resetting bearer [ 243.650169][T12679] openvswitch: netlink: Invalid VLAN frame [ 244.119907][T12686] netlink: 'syz.2.1839': attribute type 27 has an invalid length. [ 246.058685][T12663] tipc: Disabling bearer [ 246.335586][T12714] lo speed is unknown, defaulting to 1000 [ 246.363331][T12712] syzkaller0: entered promiscuous mode [ 246.380315][T12712] syzkaller0: entered allmulticast mode [ 246.410921][T12714] lo speed is unknown, defaulting to 1000 [ 246.583922][T12714] lo speed is unknown, defaulting to 1000 [ 246.622949][T12714] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 246.674247][T12714] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 246.831512][T12735] __nla_validate_parse: 2 callbacks suppressed [ 246.831531][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1848'. [ 246.915894][T12714] lo speed is unknown, defaulting to 1000 [ 246.998191][T12714] lo speed is unknown, defaulting to 1000 [ 247.019259][T12714] lo speed is unknown, defaulting to 1000 [ 247.034371][T12714] lo speed is unknown, defaulting to 1000 [ 247.056729][T12714] lo speed is unknown, defaulting to 1000 [ 247.187837][T12750] veth0: entered promiscuous mode [ 247.208063][T12750] veth0: left promiscuous mode [ 247.350460][T12758] netlink: 'syz.3.1855': attribute type 1 has an invalid length. [ 247.409505][T12760] netlink: 'syz.4.1857': attribute type 10 has an invalid length. [ 247.443607][T12760] netlink: 'syz.4.1857': attribute type 10 has an invalid length. [ 247.463090][T12760] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1857'. [ 247.842479][T12769] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1862'. [ 247.865901][T12770] netlink: 'syz.1.1861': attribute type 1 has an invalid length. [ 247.908334][T12772] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1862'. [ 248.144571][T12782] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1865'. [ 248.228340][T12784] erspan0: entered promiscuous mode [ 248.251606][T12784] erspan0: entered allmulticast mode [ 248.337166][T12787] gre2: entered promiscuous mode [ 248.545287][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1868'. [ 249.224446][T12823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.252916][T12828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1881'. [ 249.831992][T12859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1890'. [ 249.993307][T12872] netlink: 'syz.4.1893': attribute type 1 has an invalid length. [ 250.233400][T12882] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.1896'. [ 250.483915][T12891] netlink: 'syz.4.1899': attribute type 5 has an invalid length. [ 250.603408][T12905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1901'. [ 250.650148][T12873] syzkaller1: entered promiscuous mode [ 250.665695][T12873] syzkaller1: entered allmulticast mode [ 250.883897][T12912] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 251.773415][T12956] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 251.819188][T12954] openvswitch: netlink: Flow actions attr not present in new flow. [ 251.958029][T12969] __nla_validate_parse: 7 callbacks suppressed [ 251.958051][T12969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1922'. [ 252.295460][T12986] netlink: 'syz.2.1926': attribute type 3 has an invalid length. [ 252.331380][T12986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.557569][T13006] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1932'. [ 252.588740][T13010] netlink: 'syz.3.1934': attribute type 10 has an invalid length. [ 252.608379][T13009] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 252.617660][T13009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.684115][T13010] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1934'. [ 252.746531][T13019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1936'. [ 252.867144][T13025] netlink: 'syz.1.1937': attribute type 1 has an invalid length. [ 252.881256][T13024] syzkaller0: entered promiscuous mode [ 252.895205][T13024] syzkaller0: entered allmulticast mode [ 253.235578][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1942'. [ 253.444457][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 253.604418][T13063] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1950'. [ 253.626914][T13063] syzkaller0: entered promiscuous mode [ 253.643329][T13063] syzkaller0: entered allmulticast mode [ 253.650427][T13061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1947'. [ 253.694173][T13063] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.1950'. [ 253.732833][T13057] xt_CT: No such helper "pptp" [ 254.045790][T13083] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 254.333547][T13102] netlink: 'syz.0.1961': attribute type 1 has an invalid length. [ 254.456724][T13102] 8021q: adding VLAN 0 to HW filter on device bond7 [ 254.490340][T13104] bond7: (slave veth0_to_bond): making interface the new active one [ 254.500377][T13104] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 254.764313][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1965'. [ 254.795718][T13127] --map-set only usable from mangle table [ 255.057368][T13138] netlink: 'syz.3.1970': attribute type 2 has an invalid length. [ 255.492771][T13163] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 255.585216][T13165] 8021q: adding VLAN 0 to HW filter on device bond10 [ 255.850418][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.862668][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 255.902654][T13190] netlink: 'syz.3.1984': attribute type 2 has an invalid length. [ 256.409975][T13230] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.580067][T13235] syzkaller0: entered promiscuous mode [ 256.593517][T13235] syzkaller0: entered allmulticast mode [ 257.044553][T13263] __nla_validate_parse: 12 callbacks suppressed [ 257.044573][T13263] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2005'. [ 257.046439][T13264] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2005'. [ 257.334409][T13279] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2008'. [ 257.355028][T13279] 0: renamed from hsr_slave_1 (while UP) [ 257.371267][T13279] 0: entered allmulticast mode [ 257.376863][T13279] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 257.609428][T13301] netlink: 'syz.3.2017': attribute type 21 has an invalid length. [ 257.629450][T13301] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2017'. [ 257.631510][T13299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2016'. [ 257.648059][T13302] netlink: 'syz.0.2013': attribute type 1 has an invalid length. [ 257.658007][T13301] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2017'. [ 257.834192][T13314] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2019'. [ 257.844410][T13304] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 257.879985][T13304] team0 (unregistering): Port device team_slave_0 removed [ 257.895327][T13319] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2019'. [ 257.907396][T13320] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 257.927306][T13304] team0 (unregistering): Failed to send options change via netlink (err -105) [ 257.966298][T13304] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 258.006081][T13304] team0 (unregistering): Port device team_slave_1 removed [ 258.311440][T13344] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2024'. [ 258.340676][T13344] netlink: 'syz.1.2024': attribute type 2 has an invalid length. [ 258.363768][T13338] syzkaller0: entered promiscuous mode [ 258.380289][T13338] syzkaller0: entered allmulticast mode [ 258.403646][T13338] simple: basic_1 [ 258.571421][T13358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2030'. [ 258.594088][T13352] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 258.625122][T13364] netlink: 'syz.0.2031': attribute type 8 has an invalid length. [ 258.785280][T13369] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 259.163315][T13384] netlink: 'syz.2.2039': attribute type 2 has an invalid length. [ 259.179321][T13384] FAULT_INJECTION: forcing a failure. [ 259.179321][T13384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.205506][T13384] CPU: 1 UID: 0 PID: 13384 Comm: syz.2.2039 Not tainted syzkaller #0 PREEMPT(full) [ 259.205534][T13384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 259.205559][T13384] Call Trace: [ 259.205567][T13384] [ 259.205575][T13384] dump_stack_lvl+0xe8/0x150 [ 259.205610][T13384] should_fail_ex+0x412/0x560 [ 259.205643][T13384] _copy_to_user+0x31/0xb0 [ 259.205666][T13384] simple_read_from_buffer+0xe1/0x170 [ 259.205696][T13384] proc_fail_nth_read+0x1bb/0x230 [ 259.205726][T13384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.205756][T13384] ? rw_verify_area+0x2a6/0x4d0 [ 259.205784][T13384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.205811][T13384] vfs_read+0x20c/0xa70 [ 259.205845][T13384] ? __pfx___mutex_lock+0x10/0x10 [ 259.205872][T13384] ? __pfx_vfs_read+0x10/0x10 [ 259.205901][T13384] ? __fget_files+0x2a/0x420 [ 259.205931][T13384] ? __fget_files+0x3a0/0x420 [ 259.205953][T13384] ? __fget_files+0x2a/0x420 [ 259.205986][T13384] ksys_read+0x150/0x270 [ 259.206017][T13384] ? __pfx_ksys_read+0x10/0x10 [ 259.206055][T13384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.206077][T13384] do_syscall_64+0x15f/0xf80 [ 259.206108][T13384] ? trace_irq_disable+0x3b/0x140 [ 259.206129][T13384] ? clear_bhb_loop+0x40/0x90 [ 259.206152][T13384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.206172][T13384] RIP: 0033:0x7f8c39d5d04e [ 259.206190][T13384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 259.206208][T13384] RSP: 002b:00007f8c3ace3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.206228][T13384] RAX: ffffffffffffffda RBX: 00007f8c3ace46c0 RCX: 00007f8c39d5d04e [ 259.206243][T13384] RDX: 000000000000000f RSI: 00007f8c3ace40a0 RDI: 0000000000000009 [ 259.206255][T13384] RBP: 00007f8c3ace4090 R08: 0000000000000000 R09: 0000000000000000 [ 259.206266][T13384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.206277][T13384] R13: 00007f8c3a016038 R14: 00007f8c3a015fa0 R15: 00007fff04d9cb78 [ 259.206433][T13384] [ 260.050849][T13425] batadv0: entered promiscuous mode [ 260.071103][T13425] vlan1: entered promiscuous mode [ 260.359014][T13441] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 260.415542][T13445] netlink: 'syz.3.2062': attribute type 1 has an invalid length. [ 260.764365][T13472] netlink: 'syz.3.2068': attribute type 2 has an invalid length. [ 260.956306][T13474] geneve3: entered promiscuous mode [ 260.962578][T13474] geneve3: entered allmulticast mode [ 260.984941][ T6109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.997804][ T6109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.006632][ T6109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.090786][T13490] 8021q: adding VLAN 0 to HW filter on device bond10 [ 261.101674][T13490] bridge0: port 4(bond10) entered blocking state [ 261.109152][T13490] bridge0: port 4(bond10) entered disabled state [ 261.115965][T13490] bond10: entered allmulticast mode [ 261.123955][T13490] bond10: entered promiscuous mode [ 261.130318][T13490] bridge0: port 4(bond10) entered blocking state [ 261.136807][T13490] bridge0: port 4(bond10) entered forwarding state [ 261.254970][T13495] veth7: entered allmulticast mode [ 261.351849][T13503] netlink: 'syz.2.2075': attribute type 2 has an invalid length. [ 261.360822][T13503] netlink: 'syz.2.2075': attribute type 8 has an invalid length. [ 261.602199][ T6109] bridge0: port 4(bond10) entered disabled state [ 261.742772][T13515] netlink: 'syz.0.2079': attribute type 1 has an invalid length. [ 262.222724][T13545] __nla_validate_parse: 19 callbacks suppressed [ 262.222746][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2088'. [ 262.426208][T13567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2093'. [ 262.609484][T13583] netlink: 'syz.4.2098': attribute type 7 has an invalid length. [ 262.830319][T13603] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2103'. [ 263.150497][T13618] netlink: 'syz.3.2110': attribute type 8 has an invalid length. [ 263.300887][T13627] ip6gre3: entered allmulticast mode [ 263.376743][T13629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2114'. [ 263.412960][T13631] netlink: 'syz.0.2115': attribute type 9 has an invalid length. [ 263.465217][T13640] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2115'. [ 263.555364][T13645] sctp: [Deprecated]: syz.1.2119 (pid 13645) Use of int in max_burst socket option. [ 263.555364][T13645] Use struct sctp_assoc_value instead [ 263.867823][T13673] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2125'. [ 264.651664][T13719] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2138'. [ 264.663945][T13717] sch_fq: defrate 0 ignored. [ 264.686861][T13722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2139'. [ 265.099874][T13750] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 265.108443][T13751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'. [ 265.543118][T13767] netlink: 'syz.2.2151': attribute type 3 has an invalid length. [ 265.571570][T13767] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2151'. [ 265.949987][T13772] nbd0: detected capacity change from 0 to 63 [ 265.995078][ T5828] block nbd0: Receive control failed (result -32) [ 266.005077][ T5831] block nbd0: Receive control failed (result -32) [ 266.015776][ T5969] block nbd0: Send control failed (result -32) [ 266.024092][ T5969] block nbd0: Request send failed, requeueing [ 266.039726][ T5157] block nbd0: Dead connection, failed to find a fallback [ 266.052583][ T5157] block nbd0: shutting down sockets [ 266.058605][ T5157] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.069217][ T5157] Buffer I/O error on dev nbd0, logical block 0, async page read [ 266.081253][ T5969] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.092222][ T5969] Buffer I/O error on dev nbd0, logical block 1, async page read [ 266.101513][ T5969] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.112333][ T5969] Buffer I/O error on dev nbd0, logical block 2, async page read [ 266.120978][ T5969] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.130821][ T5969] Buffer I/O error on dev nbd0, logical block 3, async page read [ 266.139572][ T5969] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.149071][ T5969] Buffer I/O error on dev nbd0, logical block 0, async page read [ 266.159763][ T5969] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.169869][ T5969] Buffer I/O error on dev nbd0, logical block 1, async page read [ 266.178235][ T5969] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.188030][ T5969] Buffer I/O error on dev nbd0, logical block 2, async page read [ 266.199730][ T5969] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.209334][ T5969] Buffer I/O error on dev nbd0, logical block 3, async page read [ 266.218975][ T5969] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.228615][ T5969] Buffer I/O error on dev nbd0, logical block 0, async page read [ 266.236612][ T5969] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 266.246346][ T5969] Buffer I/O error on dev nbd0, logical block 1, async page read [ 266.260229][ T5969] ldm_validate_partition_table(): Disk read failed. [ 266.278558][ T5969] Dev nbd0: unable to read RDB block 0 [ 266.288799][ T5969] nbd0: unable to read partition table [ 266.313494][ T5969] ldm_validate_partition_table(): Disk read failed. [ 266.324297][ T5969] Dev nbd0: unable to read RDB block 0 [ 266.334379][ T5969] nbd0: unable to read partition table [ 266.434104][T13789] bond11: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 266.463868][T13789] bond11 (unregistering): Released all slaves [ 266.554620][T13801] tap0: tun_chr_ioctl cmd 2148553947 [ 266.596345][T13797] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 266.630919][T13804] netlink: 'syz.2.2162': attribute type 1 has an invalid length. [ 267.103550][T13836] netlink: 'syz.3.2171': attribute type 10 has an invalid length. [ 267.306660][T13848] __nla_validate_parse: 4 callbacks suppressed [ 267.306680][T13848] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2177'. [ 267.325775][T13851] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2177'. [ 267.326570][T13849] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2176'. [ 267.612079][T13864] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2182'. [ 267.634217][T13868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2183'. [ 267.941781][T13884] netlink: 'syz.0.2188': attribute type 1 has an invalid length. [ 268.202305][T13898] sock: sock_set_timeout: `syz.3.2193' (pid 13898) tries to set negative timeout [ 268.344153][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2194'. [ 268.564419][T13916] lo: entered promiscuous mode [ 268.590010][T13916] netlink: 'syz.0.2198': attribute type 2 has an invalid length. [ 268.613169][T13916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.643104][T13919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2198'. [ 268.755869][T13928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2200'. [ 268.766403][T13929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2199'. [ 269.596618][T13980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2207'. [ 269.597927][T13983] netlink: 'syz.0.2209': attribute type 4 has an invalid length. [ 269.656238][T13983] .`: renamed from bond0 (while UP) [ 269.735181][T13991] macvlan0: left promiscuous mode [ 269.765487][T13991] netlink: 'syz.0.2209': attribute type 1 has an invalid length. [ 269.791996][T13991] netlink: 'syz.0.2209': attribute type 2 has an invalid length. [ 269.992915][T14006] 8021q: adding VLAN 0 to HW filter on device bond11 [ 270.182607][T14020] netlink: 'syz.4.2219': attribute type 5 has an invalid length. [ 270.473660][T14035] bond0: (slave gre0): refused to change device type [ 271.062853][T14070] netlink: 'syz.2.2233': attribute type 1 has an invalid length. [ 271.166147][T14070] 8021q: adding VLAN 0 to HW filter on device bond11 [ 271.175332][T14075] bond0: entered promiscuous mode [ 271.180771][T14075] bond_slave_0: entered promiscuous mode [ 271.188472][T14075] bond_slave_1: entered promiscuous mode [ 272.886569][T14157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.236159][T14178] vlan2: entered allmulticast mode [ 273.255483][T14178] : entered allmulticast mode [ 273.268712][T14178] hsr_slave_0: entered allmulticast mode [ 273.355659][T14184] netlink: 'syz.0.2265': attribute type 15 has an invalid length. [ 273.368450][T14184] __nla_validate_parse: 15 callbacks suppressed [ 273.368471][T14184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2265'. [ 273.406135][T14184] netlink: 'syz.0.2265': attribute type 15 has an invalid length. [ 273.436746][T14186] xt_ecn: cannot match TCP bits for non-tcp packets [ 273.466347][T14184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2265'. [ 273.681059][T14208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2274'. [ 273.719197][T14208] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2274'. [ 273.788524][T14213] netlink: 'syz.2.2275': attribute type 10 has an invalid length. [ 273.948328][T14224] bond0: option fail_over_mac: invalid value (16) [ 274.019071][T14224] bond0 (unregistering): Released all slaves [ 274.096668][T14237] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2280'. [ 274.139943][T14225] bond0: option fail_over_mac: invalid value (16) [ 274.151402][T14225] bond0 (unregistering): Released all slaves [ 274.223802][T14246] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2280'. [ 274.270516][T14235] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2280'. [ 274.361679][T14244] lo speed is unknown, defaulting to 1000 [ 274.971604][T14273] SET target dimension over the limit! [ 275.169017][T14277] lo speed is unknown, defaulting to 1000 [ 275.588119][T14287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2291'. [ 275.905640][T14304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2297'. [ 275.918667][T14307] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 275.946217][T14307] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2298'. [ 275.966933][ T5900] IPVS: starting estimator thread 0... [ 275.972058][T14307] netlink: 'syz.1.2298': attribute type 2 has an invalid length. [ 275.999487][T14305] netlink: Unknown conntrack attr (type=2304, max=9) [ 276.077591][T14309] IPVS: using max 24 ests per chain, 57600 per kthread [ 276.174376][T14319] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 276.230540][T14324] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 276.648075][T14349] netlink: 'syz.3.2305': attribute type 32 has an invalid length. [ 276.963888][T14365] syzkaller0: entered promiscuous mode [ 277.036267][T14368] netlink: 'syz.0.2316': attribute type 3 has an invalid length. [ 277.135859][T14373] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20004 [ 277.560263][T14403] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 278.424898][T14453] __nla_validate_parse: 11 callbacks suppressed [ 278.424921][T14453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2343'. [ 278.448868][T14458] netlink: 'syz.3.2344': attribute type 1 has an invalid length. [ 278.502159][T14458] 8021q: adding VLAN 0 to HW filter on device bond12 [ 278.590527][T14458] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 278.606149][T14458] bond12: (slave batadv1): making interface the new active one [ 278.618726][T14458] bond12: (slave batadv1): Enslaving as an active interface with an up link [ 278.658868][T14469] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2347'. [ 278.670501][T14469] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2347'. [ 278.686503][T14469] netlink: 'syz.4.2347': attribute type 6 has an invalid length. [ 278.705667][T14469] netlink: 'syz.4.2347': attribute type 5 has an invalid length. [ 278.715119][T14469] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2347'. [ 278.921161][T14479] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 279.012125][T14481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2351'. [ 279.166158][T14492] netlink: 'syz.0.2354': attribute type 11 has an invalid length. [ 279.191020][T14492] netlink: 'syz.0.2354': attribute type 11 has an invalid length. [ 279.240038][T14492] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2354'. [ 279.289206][T14492] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2354'. [ 279.321356][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2356'. [ 279.340247][T14494] IPVS: sh: FWM 3 0x00000003 - no destination available [ 279.397345][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2356'. [ 279.444084][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2356'. [ 279.614409][T14513] netlink: 'syz.0.2358': attribute type 10 has an invalid length. [ 279.641022][T14517] netlink: 'syz.2.2359': attribute type 1 has an invalid length. [ 279.735070][T14522] Cannot find del_set index 49151 as target [ 279.803833][T14521] netlink: 'syz.4.2360': attribute type 1 has an invalid length. [ 280.645789][T14570] netdevsim netdevsim0: Direct firmware load for .. @ failed with error -2 [ 280.690598][T14570] netdevsim netdevsim0: Falling back to sysfs fallback for: .. @ [ 281.389171][T14619] block nbd1: server does not support multiple connections per device. [ 281.411956][T14619] block nbd1: shutting down sockets [ 281.656233][T14641] netlink: 'syz.4.2396': attribute type 8 has an invalid length. [ 281.713266][T14641] bond0: entered promiscuous mode [ 281.737136][T14641] bond_slave_0: entered promiscuous mode [ 281.758141][T14641] bond_slave_1: entered promiscuous mode [ 281.786051][T14641] bridge_slave_1: entered promiscuous mode [ 281.813256][T14641] bond0: left promiscuous mode [ 281.829873][T14641] bond_slave_0: left promiscuous mode [ 281.845300][T14641] bond_slave_1: left promiscuous mode [ 281.851913][T14641] bridge_slave_1: left promiscuous mode [ 281.889620][T14640] xfrm2: entered promiscuous mode [ 281.894968][T14640] xfrm2: entered allmulticast mode [ 281.901344][T14649] netlink: 'syz.3.2400': attribute type 2 has an invalid length. [ 282.162027][T14665] bridge8: entered promiscuous mode [ 282.194959][T14665] bridge8: entered allmulticast mode [ 282.232599][T14672] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 283.000289][T14718] netlink: 'syz.3.2417': attribute type 9 has an invalid length. [ 283.170477][T14731] netlink: 'syz.1.2422': attribute type 1 has an invalid length. [ 283.178583][T14734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.200251][T14733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.796702][T14774] __nla_validate_parse: 12 callbacks suppressed [ 283.796722][T14774] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2429'. [ 283.844124][T14774] netlink: 'syz.2.2429': attribute type 58 has an invalid length. [ 283.869869][T14774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2429'. [ 283.876849][T14772] tipc: Enabled bearer , priority 0 [ 283.906484][T14772] syzkaller0: entered promiscuous mode [ 283.926272][T14772] syzkaller0: entered allmulticast mode [ 284.023948][T14783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2432'. [ 284.051128][T14772] tipc: Resetting bearer [ 284.074318][T14769] tipc: Resetting bearer [ 284.081996][T14785] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2434'. [ 284.133948][T14769] tipc: Disabling bearer [ 284.161135][T14791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.193721][T14790] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2432'. [ 284.220196][T14794] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2436'. [ 284.397675][T14805] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2440'. [ 284.515352][T14811] netlink: 'syz.0.2443': attribute type 2 has an invalid length. [ 284.537779][T14813] netlink: 'syz.0.2443': attribute type 2 has an invalid length. [ 284.641555][T14822] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2447'. [ 284.661594][T14822] bridge: RTM_NEWNEIGH with invalid ether address [ 284.762507][T14825] SET target dimension over the limit! [ 284.780422][T14828] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 284.815996][T14832] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 284.877643][T14839] x9: renamed from bridge_slave_0 [ 285.389415][T14872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2456'. [ 285.428642][T14872] netlink: 'syz.3.2456': attribute type 3 has an invalid length. [ 285.503908][T14878] netem: incorrect gi model size [ 285.511155][T14878] netem: change failed [ 285.578262][T14880] syzkaller0: entered promiscuous mode [ 285.597704][T14880] syzkaller0: entered allmulticast mode [ 285.749616][T14880] netlink: 'syz.1.2461': attribute type 10 has an invalid length. [ 285.767747][T14889] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2464'. [ 285.798293][T14889] nbd: illegal input index 2958377 [ 285.836247][T14880] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 285.921686][T14898] netlink: 'syz.3.2466': attribute type 3 has an invalid length. [ 286.072432][T14911] netlink: 'syz.2.2471': attribute type 3 has an invalid length. [ 286.153300][T14918] team0: Port device dummy0 removed [ 286.183939][T14918] .`: (slave dummy0): Enslaving as an active interface with an up link [ 286.393421][T14929] bond13: (slave bond_slave_1): Device is not our slave [ 286.404772][T14929] bond13: option active_slave: invalid value (bond_slave_1) [ 286.430456][T14929] bond13 (unregistering): Released all slaves [ 286.811786][T14959] batadv0: entered allmulticast mode [ 286.956356][T14968] erspan0: left allmulticast mode [ 287.362130][T14993] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.375704][T14993] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.493739][T14993] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.512162][T14993] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.684908][T14993] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.701903][T14993] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.074197][T15040] IPv6: NLM_F_CREATE should be specified when creating new route [ 288.122725][T15040] validate_nla: 2 callbacks suppressed [ 288.122744][T15040] netlink: 'syz.1.2505': attribute type 1 has an invalid length. [ 288.405302][ T62] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.425798][ T62] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.467505][T15055] batadv1: entered allmulticast mode [ 288.556821][ T62] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.570355][ T62] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.696745][ T6961] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.731436][ T6961] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.795312][ T6962] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.805475][ T6962] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.070602][T15085] netlink: 'syz.3.2519': attribute type 11 has an invalid length. [ 289.078963][T15085] __nla_validate_parse: 38 callbacks suppressed [ 289.078984][T15085] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.2519'. [ 289.195679][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2521'. [ 289.367840][T15110] sock: sock_timestamping_bind_phc: sock not bind to device [ 289.419533][T15114] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 289.462660][T15114] netlink: 'syz.0.2525': attribute type 10 has an invalid length. [ 289.499414][T15114] .`: (slave batadv0): Error -22 calling dev_set_mtu [ 289.573447][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2529'. [ 289.695751][T15130] netlink: 'syz.1.2532': attribute type 1 has an invalid length. [ 289.855989][T15137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.876355][T15138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2535'. [ 289.966486][T15146] netlink: 'syz.1.2537': attribute type 1 has an invalid length. [ 289.983239][T15146] netlink: 'syz.1.2537': attribute type 4 has an invalid length. [ 290.002628][T15146] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2537'. [ 290.028264][T15151] netlink: 'syz.1.2537': attribute type 1 has an invalid length. [ 290.063330][T15151] netlink: 'syz.1.2537': attribute type 4 has an invalid length. [ 290.073113][T15151] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2537'. [ 290.222595][T15162] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 290.277710][T15162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2542'. [ 290.523763][T15177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2545'. [ 290.568581][T15177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.670663][T15182] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2547'. [ 291.041516][T15195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2551'. [ 291.052312][T15198] netlink: 'syz.3.2554': attribute type 10 has an invalid length. [ 291.155777][T15208] SET target dimension over the limit! [ 291.208627][T15206] lo: entered promiscuous mode [ 291.226258][T15206] tunl0: entered promiscuous mode [ 291.234418][T15206] gre0: entered promiscuous mode [ 291.247643][T15206] erspan0: left allmulticast mode [ 291.260978][T15206] ip_vti0: entered promiscuous mode [ 291.788591][T15246] netlink: 'syz.1.2567': attribute type 11 has an invalid length. [ 291.808723][T15246] netlink: 'syz.1.2567': attribute type 11 has an invalid length. [ 292.104730][T15256] bond10: option all_slaves_active: invalid value (222) [ 292.143393][T15256] bond10 (unregistering): Released all slaves [ 292.388562][T15284] sctp: [Deprecated]: syz.4.2576 (pid 15284) Use of int in maxseg socket option. [ 292.388562][T15284] Use struct sctp_assoc_value instead [ 292.673479][T15296] tipc: Enabled bearer , priority 0 [ 292.722244][T15295] tipc: Disabling bearer [ 292.901141][T15313] netlink: 'syz.1.2584': attribute type 1 has an invalid length. [ 292.995939][T15319] syzkaller1: entered allmulticast mode [ 293.517492][T15353] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20002 [ 293.565515][T15358] delete_channel: no stack [ 293.684350][T15369] IPv6: NLM_F_CREATE should be specified when creating new route [ 294.467375][T15428] __nla_validate_parse: 12 callbacks suppressed [ 294.467397][T15428] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2614'. [ 294.528767][T15428] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2614'. [ 294.801243][T15447] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2620'. [ 295.182365][T15470] sctp: [Deprecated]: syz.0.2628 (pid 15470) Use of int in max_burst socket option deprecated. [ 295.182365][T15470] Use struct sctp_assoc_value instead [ 295.245029][T15473] xt_hashlimit: size too large, truncated to 1048576 [ 295.354599][T15482] netlink: 'syz.4.2632': attribute type 7 has an invalid length. [ 295.365539][T15479] bridge_slave_0 (unregistering): left allmulticast mode [ 295.391474][T15482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2632'. [ 295.403066][T15483] netlink: 'syz.1.2629': attribute type 142 has an invalid length. [ 295.415354][T15479] bridge_slave_0 (unregistering): left promiscuous mode [ 295.433916][T15479] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.473406][T15482] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 296.414662][T15559] sctp: [Deprecated]: syz.2.2650 (pid 15559) Use of int in max_burst socket option deprecated. [ 296.414662][T15559] Use struct sctp_assoc_value instead [ 296.650087][T15569] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2652'. [ 296.666889][T15571] netlink: 'syz.0.2653': attribute type 2 has an invalid length. [ 296.689433][T15571] netlink: 'syz.0.2653': attribute type 10 has an invalid length. [ 296.725670][T15571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2653'. [ 296.893689][T15583] netlink: 'syz.0.2658': attribute type 1 has an invalid length. [ 296.923127][T15577] veth11: entered promiscuous mode [ 296.953633][T15582] syzkaller0: entered promiscuous mode [ 296.980633][T15582] syzkaller0: entered allmulticast mode [ 297.275572][T15592] syzkaller0: entered promiscuous mode [ 297.296904][T15592] syzkaller0: entered allmulticast mode [ 297.446168][T15603] netlink: 'syz.0.2667': attribute type 3 has an invalid length. [ 297.462269][T15602] netlink: 'syz.0.2667': attribute type 3 has an invalid length. [ 297.471568][T15602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2667'. [ 297.481869][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2667'. [ 297.562055][T15603] bond10: Invalid ad_actor_system MAC address. [ 297.568653][T15603] bond10: option ad_actor_system: invalid value (1) [ 297.582515][T15603] bond10 (unregistering): Released all slaves [ 297.621113][T15602] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 297.625807][T15611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2669'. [ 297.715575][T15615] netlink: 'syz.2.2670': attribute type 1 has an invalid length. [ 297.749718][T15615] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2670'. [ 298.132954][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 298.155800][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 298.538313][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 298.595571][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 298.641176][T15667] syzkaller0: entered promiscuous mode [ 298.664841][T15667] syzkaller0: entered allmulticast mode [ 298.741488][T15673] xt_hashlimit: size too large, truncated to 1048576 [ 299.141794][T15697] netlink: 'syz.1.2692': attribute type 10 has an invalid length. [ 299.166453][T15697] netlink: 'syz.1.2692': attribute type 1 has an invalid length. [ 299.185509][T15697] batadv0: entered promiscuous mode [ 299.205341][T15697] batadv0: entered allmulticast mode [ 299.219050][T15697] bridge0: port 1(batadv0) entered blocking state [ 299.246713][T15697] bridge0: port 1(batadv0) entered disabled state [ 299.263991][T15697] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 299.351538][T15707] tipc: Enabled bearer , priority 10 [ 299.513417][T15718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.586017][T15711] bond13: Invalid ad_actor_system MAC address. [ 299.602153][T15711] bond13: option ad_actor_system: invalid value (1) [ 299.624724][T15711] bond13 (unregistering): Released all slaves [ 299.780452][T15729] syzkaller0: entered promiscuous mode [ 299.803255][T15729] syzkaller0: entered allmulticast mode [ 299.830626][T15737] __nla_validate_parse: 6 callbacks suppressed [ 299.830648][T15737] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2702'. [ 299.847606][T15737] netlink: 47 bytes leftover after parsing attributes in process `syz.4.2702'. [ 300.870704][T15764] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2708'. [ 302.224259][ T24] tipc: Node number set to 2886997057 [ 302.384755][T15769] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2710'. [ 302.471656][T15781] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2712'. [ 302.797549][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2715'. [ 302.807739][T15799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2717'. [ 302.818494][T15799] Cannot find del_set index 1 as target [ 302.969343][T15804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'. [ 303.062282][T15809] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2719'. [ 303.095797][T15809] tipc: Started in network mode [ 303.103736][T15809] tipc: Node identity ac14140f, cluster identity 4711 [ 303.114066][T15809] tipc: New replicast peer: 255.255.255.255 [ 303.125769][T15809] tipc: Enabled bearer , priority 10 [ 303.157223][T15786] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2714'. [ 304.250198][ T24] tipc: Node number set to 2886997007 [ 304.397882][T15869] syzkaller1: entered promiscuous mode [ 304.421161][T15869] syzkaller1: entered allmulticast mode [ 304.745299][T15886] validate_nla: 4 callbacks suppressed [ 304.745318][T15886] netlink: 'syz.4.2744': attribute type 1 has an invalid length. [ 304.788048][T15888] bond10: option mode: invalid value (133) [ 304.807807][T15888] bond10 (unregistering): Released all slaves [ 305.013225][T15900] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 305.027074][T15897] netlink: 'syz.1.2747': attribute type 8 has an invalid length. [ 305.052462][T15900] syzkaller1: linktype set to 823 [ 305.350426][T15924] __nla_validate_parse: 4 callbacks suppressed [ 305.350450][T15924] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2752'. [ 305.763332][T15955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2758'. [ 305.869178][T15958] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2761'. [ 305.919105][T15958] netlink: 'syz.2.2761': attribute type 11 has an invalid length. [ 305.942551][T15958] netlink: 'syz.2.2761': attribute type 4 has an invalid length. [ 305.954370][T15958] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.2761'. [ 306.024213][T15967] netlink: 'syz.3.2765': attribute type 1 has an invalid length. [ 306.153711][T15967] bond13 (unregistering): Released all slaves [ 306.197530][T15980] netlink: 'syz.1.2767': attribute type 3 has an invalid length. [ 306.199196][T15976] netlink: 1024 bytes leftover after parsing attributes in process `syz.2.2768'. [ 306.206092][T15980] netlink: 'syz.1.2767': attribute type 3 has an invalid length. [ 306.390217][T15989] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 306.401051][T15987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2772'. [ 306.418845][T15989] syz.4.2771: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 306.457136][T15989] CPU: 1 UID: 0 PID: 15989 Comm: syz.4.2771 Not tainted syzkaller #0 PREEMPT(full) [ 306.457170][T15989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 306.457185][T15989] Call Trace: [ 306.457194][T15989] [ 306.457203][T15989] dump_stack_lvl+0xe8/0x150 [ 306.457243][T15989] warn_alloc+0x249/0x340 [ 306.457284][T15989] ? stack_trace_save+0xa9/0x100 [ 306.457313][T15989] ? __pfx_warn_alloc+0x10/0x10 [ 306.457355][T15989] ? kasan_save_track+0x4f/0x80 [ 306.457387][T15989] ? kasan_save_track+0x3e/0x80 [ 306.457416][T15989] ? __kasan_kmalloc+0x93/0xb0 [ 306.457435][T15989] ? __kmalloc_cache_noprof+0x31c/0x660 [ 306.457468][T15989] ? xskq_create+0x56/0x170 [ 306.457492][T15989] ? xsk_setsockopt+0x54c/0x990 [ 306.457512][T15989] ? do_sock_setsockopt+0x17c/0x1b0 [ 306.457544][T15989] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 306.457574][T15989] ? do_syscall_64+0x15f/0xf80 [ 306.457606][T15989] __vmalloc_node_range_noprof+0x132/0x1730 [ 306.457679][T15989] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 306.457721][T15989] ? __kasan_kmalloc+0x93/0xb0 [ 306.457748][T15989] vmalloc_user_noprof+0xad/0xe0 [ 306.457789][T15989] ? xskq_create+0xbf/0x170 [ 306.457814][T15989] xskq_create+0xbf/0x170 [ 306.457843][T15989] xsk_init_queue+0x8a/0xe0 [ 306.457870][T15989] xsk_setsockopt+0x54c/0x990 [ 306.457896][T15989] ? __pfx_xsk_setsockopt+0x10/0x10 [ 306.457918][T15989] ? __pfx_aa_sk_perm+0x10/0x10 [ 306.457952][T15989] ? aa_sock_opt_perm+0xff/0x1a0 [ 306.457986][T15989] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 306.458019][T15989] ? __pfx_xsk_setsockopt+0x10/0x10 [ 306.458044][T15989] do_sock_setsockopt+0x17c/0x1b0 [ 306.458082][T15989] __x64_sys_setsockopt+0x13d/0x1b0 [ 306.458119][T15989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.458143][T15989] do_syscall_64+0x15f/0xf80 [ 306.458170][T15989] ? trace_irq_disable+0x3b/0x140 [ 306.458193][T15989] ? clear_bhb_loop+0x40/0x90 [ 306.458221][T15989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.458243][T15989] RIP: 0033:0x7fde3579c819 [ 306.458264][T15989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.458285][T15989] RSP: 002b:00007fde3666a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 306.458309][T15989] RAX: ffffffffffffffda RBX: 00007fde35a15fa0 RCX: 00007fde3579c819 [ 306.458325][T15989] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 306.458338][T15989] RBP: 00007fde35832c91 R08: 0000000000000004 R09: 0000000000000000 [ 306.458352][T15989] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.458366][T15989] R13: 00007fde35a16038 R14: 00007fde35a15fa0 R15: 00007ffee31eab08 [ 306.458403][T15989] [ 306.458659][T15989] Mem-Info: [ 306.545693][T15992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2774'. [ 306.670263][T15989] active_anon:5722 inactive_anon:0 isolated_anon:0 [ 306.670263][T15989] active_file:3019 inactive_file:40020 isolated_file:0 [ 306.670263][T15989] unevictable:768 dirty:120 writeback:0 [ 306.670263][T15989] slab_reclaimable:12341 slab_unreclaimable:104872 [ 306.670263][T15989] mapped:29242 shmem:1364 pagetables:1254 [ 306.670263][T15989] sec_pagetables:0 bounce:0 [ 306.670263][T15989] kernel_misc_reclaimable:0 [ 306.670263][T15989] free:1320406 free_pcp:9048 free_cma:0 [ 306.800745][T15993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2774'. [ 306.811487][T15989] Node 0 active_anon:22888kB inactive_anon:0kB active_file:12076kB inactive_file:159884kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116968kB dirty:480kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14964kB pagetables:4888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 306.851393][T15989] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 306.934717][T15989] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 306.971541][T15989] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 306.980675][T16001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2777'. [ 307.011818][T15989] Node 0 DMA32 free:1330968kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22860kB inactive_anon:0kB active_file:12076kB inactive_file:159884kB unevictable:1536kB writepending:480kB zspages:0kB present:3129332kB managed:2551504kB mlocked:0kB bounce:0kB free_pcp:33908kB local_pcp:20960kB free_cma:0kB [ 307.078739][T15989] lowmem_reserve[]: 0 0 0 0 0 [ 307.095055][T15989] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 307.176002][T15989] lowmem_reserve[]: 0 0 0 0 0 [ 307.187157][T15989] Node 1 Normal free:3935280kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2012kB local_pcp:2012kB free_cma:0kB [ 307.244572][T15989] lowmem_reserve[]: 0 0 0 0 0 [ 307.251200][T15989] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 307.265140][T15989] Node 0 DMA32: 6176*4kB (UME) 3715*8kB (UME) 1804*16kB (UM) 165*32kB (UME) 99*64kB (UM) 291*128kB (UM) 407*256kB (UME) 241*512kB (UM) 170*1024kB (UM) 71*2048kB (UME) 159*4096kB (UM) = 1330488kB [ 307.286026][T15989] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 307.325616][T15989] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 1*128kB (M) 3*256kB (UM) 2*512kB (M) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3935280kB [ 307.395740][T15989] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 307.418813][T15989] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 307.449883][T15989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 307.484113][T16019] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 307.484401][T15989] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 307.521862][T15989] 44399 total pagecache pages [ 307.531580][T15989] 0 pages in swap cache [ 307.539356][T15989] Free swap = 124996kB [ 307.545537][T15989] Total swap = 124996kB [ 307.558659][T15989] 2097051 pages RAM [ 307.573585][T15989] 0 pages HighMem/MovableOnly [ 307.580703][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2783'. [ 307.592613][T15989] 427407 pages reserved [ 307.608929][T15989] 0 pages cma reserved [ 307.961463][T16014] dummy0: left allmulticast mode [ 307.996608][T16014] bridge0: port 2(dummy0) entered disabled state [ 308.078067][T16014] bond0: (slave bridge_slave_1): Releasing backup interface [ 308.110472][T16014] bond0: (slave bond_slave_0): Releasing backup interface [ 308.178660][T16014] bond0: (slave bond_slave_1): Releasing backup interface [ 308.236434][T16014] team0: Port device team_slave_0 removed [ 308.270980][T16014] team0: Port device team_slave_1 removed [ 308.285631][T16014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.303882][T16039] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 308.304437][T16014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.355727][T16014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.391223][T16014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.429275][T16014] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 308.596205][T16049] lo speed is unknown, defaulting to 1000 [ 308.846145][T16071] sch_fq: defrate 0 ignored. [ 308.985454][T16076] netlink: 'syz.1.2797': attribute type 1 has an invalid length. [ 309.127495][T16086] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 309.156796][T16077] bond9: (slave bridge9): Enslaving as a backup interface with an up link [ 309.221878][T16086] ip6erspan1: entered allmulticast mode [ 309.231942][T16090] netlink: 'syz.3.2800': attribute type 9 has an invalid length. [ 309.284726][T16091] openvswitch: netlink: Message has 1054 unknown bytes. [ 309.346397][T16093] netlink: 'syz.1.2801': attribute type 1 has an invalid length. [ 309.366426][T16093] netlink: 'syz.1.2801': attribute type 2 has an invalid length. [ 309.711594][T16110] xt_hashlimit: size too large, truncated to 1048576 [ 309.765920][T16117] validate_nla: 1 callbacks suppressed [ 309.765941][T16117] netlink: 'syz.0.2811': attribute type 4 has an invalid length. [ 310.278336][T16146] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 310.376715][T16153] netlink: 'syz.4.2824': attribute type 24 has an invalid length. [ 310.775539][T16181] : renamed from team_slave_1 [ 310.841518][T16186] __nla_validate_parse: 10 callbacks suppressed [ 310.841539][T16186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2831'. [ 311.043416][T16198] netlink: 'syz.2.2834': attribute type 2 has an invalid length. [ 311.079759][T16199] netlink: 'syz.0.2833': attribute type 1 has an invalid length. [ 311.110510][T16199] netlink: 'syz.0.2833': attribute type 3 has an invalid length. [ 311.128473][T16199] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2833'. [ 311.255762][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2837'. [ 311.298306][T16216] bond13: option mode: invalid value (8) [ 311.319240][T16210] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2837'. [ 311.330799][T16219] IPv6: NLM_F_REPLACE set, but no existing node found! [ 311.342768][T16216] bond13 (unregistering): Released all slaves [ 311.366454][T16217] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2839'. [ 311.405586][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2837'. [ 311.483021][T16216] bond13: option mode: invalid value (8) [ 311.491849][T16216] bond13 (unregistering): Released all slaves [ 311.551933][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2837'. [ 311.596371][T16226] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2840'. [ 311.669123][T16216] bond13: option mode: invalid value (8) [ 311.680680][T16216] bond13 (unregistering): Released all slaves [ 311.803249][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2837'. [ 313.929191][T16216] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 313.945175][T16254] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 314.133367][T16269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2851'. [ 314.194916][T16269] netlink: 'syz.1.2851': attribute type 7 has an invalid length. [ 314.263019][T16267] xt_l2tp: missing protocol rule (udp|l2tpip) [ 314.376509][T16282] netlink: 'syz.1.2854': attribute type 83 has an invalid length. [ 314.753305][T16308] netlink: 'syz.4.2862': attribute type 1 has an invalid length. [ 314.815898][T16313] openvswitch: netlink: Unknown key attributes 2 [ 314.864180][T16313] bond13: (slave bridge4): Enslaving as a backup interface with an up link [ 314.898539][T16317] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 314.923239][T16318] syzkaller0: entered promiscuous mode [ 314.946332][T16318] syzkaller0: entered allmulticast mode [ 315.250209][T16339] ksmbd: Daemon and kernel module version mismatch. ksmbd: 48, kernel module: 1. User-space ksmbd should terminate. [ 315.902350][T16373] __nla_validate_parse: 5 callbacks suppressed [ 315.902371][T16373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2877'. [ 315.917973][T16375] nftables ruleset with unbound set [ 315.923756][T16373] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2877'. [ 315.933855][T16373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2877'. [ 315.989442][T16373] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2877'. [ 316.231335][T16392] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2881'. [ 316.384937][T16399] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2882'. [ 316.448009][T16390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.463587][T16390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.496710][ T5900] lo speed is unknown, defaulting to 1000 [ 316.511057][ T5900] syz1: Port: 1 Link ACTIVE [ 316.668069][T16407] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.2886'. [ 316.700513][T16412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2888'. [ 316.981866][T16435] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2894'. [ 317.007750][T16435] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2894'. [ 317.292648][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.308895][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 317.375480][T16445] : entered promiscuous mode [ 317.619652][T16472] syzkaller0: entered promiscuous mode [ 317.797714][T16486] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 318.123952][T16504] netlink: 'syz.2.2912': attribute type 1 has an invalid length. [ 318.252871][T16504] bond14: entered promiscuous mode [ 318.281033][T16504] 8021q: adding VLAN 0 to HW filter on device bond14 [ 318.349580][T16514] 8021q: adding VLAN 0 to HW filter on device bond14 [ 318.383474][T16514] bond14: (slave vti0): The slave device specified does not support setting the MAC address [ 318.408054][T16514] bond14: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 318.449477][T16514] bond14: (slave vti0): making interface the new active one [ 318.489646][T16514] vti0: entered promiscuous mode [ 318.498847][T16516] xt_hashlimit: size too large, truncated to 1048576 [ 318.502465][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.519265][T16514] bond14: (slave vti0): Enslaving as an active interface with an up link [ 318.535467][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.546189][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.555358][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.566208][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.648691][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.662385][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.670359][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.684607][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.695733][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.934266][T16500] xt_l2tp: missing protocol rule (udp|l2tpip) [ 318.951110][T16517] lo speed is unknown, defaulting to 1000 [ 319.225175][ T6110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.237110][ T6110] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.448595][T16536] syzkaller0: entered promiscuous mode [ 319.454175][T16536] syzkaller0: entered allmulticast mode [ 319.499721][ T6110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.511493][ T6110] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.713643][T16564] netlink: 'syz.3.2928': attribute type 1 has an invalid length. [ 320.728063][ T5828] Bluetooth: hci5: command tx timeout [ 321.817796][ T6110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.837134][ T6110] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.158700][ T6110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.183447][ T6110] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.224262][T16578] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 322.249100][T16591] 8021q: adding VLAN 0 to HW filter on device .` [ 322.259280][T16591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.314947][T16592] __nla_validate_parse: 8 callbacks suppressed [ 322.314967][T16592] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2933'. [ 322.393400][T16598] bond10: Unable to set up delay as MII monitoring is disabled [ 322.403502][T16598] bond10 (unregistering): Released all slaves [ 322.465328][T16517] chnl_net:caif_netlink_parms(): no params data found [ 322.646393][T16517] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.654456][T16517] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.663135][T16517] bridge_slave_0: entered allmulticast mode [ 322.673436][T16517] bridge_slave_0: entered promiscuous mode [ 322.682443][T16517] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.690616][T16517] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.698022][T16517] bridge_slave_1: entered allmulticast mode [ 322.705655][T16517] bridge_slave_1: entered promiscuous mode [ 322.759229][ T6110] bridge_slave_1: left allmulticast mode [ 322.766052][ T6110] bridge_slave_1: left promiscuous mode [ 322.775434][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.807427][ T5828] Bluetooth: hci5: command tx timeout [ 322.962046][ T6110] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 323.046668][ T6110] bond6 (unregistering): (slave xfrm1): Releasing backup interface [ 323.342306][ T6110] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 323.350884][ T6110] bond2 (unregistering): (slave bridge3): the permanent HWaddr of slave - 12:3f:0a:a4:cc:e4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 323.369471][ T6110] bridge3 (unregistering): left promiscuous mode [ 323.376118][ T6110] bond2 (unregistering): (slave bridge4): making interface the new active one [ 323.385159][ T6110] bridge4 (unregistering): entered promiscuous mode [ 323.432486][ T6110] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 323.441021][ T6110] bridge4 (unregistering): left promiscuous mode [ 323.542376][ T6110] bond3 (unregistering): (slave bridge6): Releasing backup interface [ 323.550892][ T6110] bridge6 (unregistering): left promiscuous mode [ 323.557608][ T6110] bridge6 (unregistering): left allmulticast mode [ 323.706601][ T6110] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.718148][ T6110] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.728854][ T6110] .` (unregistering): Released all slaves [ 323.746373][ T6110] bond1 (unregistering): Released all slaves [ 323.763247][ T6110] bond2 (unregistering): Released all slaves [ 323.789313][ T6110] bond3 (unregistering): Released all slaves [ 323.806051][ T6110] bond4 (unregistering): (slave vxcan3): Releasing backup interface [ 323.820086][ T6110] bond4 (unregistering): (slave vxcan5): Releasing backup interface [ 323.832945][ T6110] bond4 (unregistering): Released all slaves [ 323.851590][ T6110] bond5 (unregistering): Released all slaves [ 323.867526][ T6110] bond6 (unregistering): Released all slaves [ 323.884457][ T6110] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 323.897890][ T6110] bond7 (unregistering): Released all slaves [ 323.915844][ T6110] bond8 (unregistering): Released all slaves [ 323.937643][ T6110] bond0 (unregistering): Released all slaves [ 323.953527][ T6110] bond9 (unregistering): Released all slaves [ 323.989869][T16517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.003163][T16517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.049988][T16517] team0: Port device team_slave_0 added [ 324.060797][T16517] team0: Port device team_slave_1 added [ 324.136662][ T6110] tipc: Disabling bearer [ 324.153115][ T6110] tipc: Left network mode [ 324.155047][T16517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.178215][T16517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.223710][T16517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.249142][T16517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.256244][T16517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.295437][T16517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.416873][T16517] hsr_slave_0: entered promiscuous mode [ 324.424035][T16517] hsr_slave_1: entered promiscuous mode [ 324.431323][T16517] debugfs: 'hsr0' already exists in 'hsr' [ 324.437695][T16517] Cannot create hsr debugfs directory [ 324.887057][ T5828] Bluetooth: hci5: command tx timeout [ 324.934293][ T5487] 8021q: adding VLAN 0 to HW filter on device eth1 [ 325.143371][ T6110] hsr_slave_0: left promiscuous mode [ 325.151528][ T6110] hsr_slave_1: left promiscuous mode [ 325.159619][ T6110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.168847][ T6110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.176321][ T6110] batadv0: mtu less than device minimum [ 325.185891][ T6110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 325.199356][ T6110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 325.211043][ T6110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 325.222702][ T6110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 325.234384][ T6110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 325.246171][ T6110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 325.259321][ T6110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 325.271021][ T6110] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 325.302009][ T6110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.310331][ T6110] batman_adv: batadv0: Interface deactivated: dummy0 [ 325.317289][ T6110] batman_adv: batadv0: Removing interface: dummy0 [ 325.344583][ T6110] veth1_macvtap: left promiscuous mode [ 325.352422][ T6110] veth0_macvtap: left promiscuous mode [ 325.358554][ T6110] veth1_vlan: left promiscuous mode [ 326.421973][T16517] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 326.431394][ T6110] IPVS: stop unused estimator thread 0... [ 326.454438][T16517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.478103][T16517] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 326.490027][T16517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.508385][T16517] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 326.542866][T16517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 326.561428][T16517] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 326.579756][T16517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 326.699855][T16517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.730622][T16517] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.745566][T15495] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.752739][T15495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.771377][ T6110] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.778700][ T6110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.967814][ T5828] Bluetooth: hci5: command tx timeout [ 327.061597][T16517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.119312][T16517] veth0_vlan: entered promiscuous mode [ 327.141033][T16517] veth1_vlan: entered promiscuous mode [ 327.185574][T16517] veth0_macvtap: entered promiscuous mode [ 327.202200][T16517] veth1_macvtap: entered promiscuous mode [ 327.229940][T16517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.246158][T16517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.272931][T15495] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.284448][T15495] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.316819][T15495] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.339421][T15495] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.432034][T15496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.446400][T15496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.494630][T15495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.504166][T15495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.649300][T16778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2937'. [ 347.074810][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.091787][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.100308][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.120280][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.136567][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.222247][T16801] lo speed is unknown, defaulting to 1000 [ 347.281784][T16806] bridge0: port 1(0x9) entered disabled state [ 347.340070][T16806] x9 (unregistering): left allmulticast mode [ 347.356475][T16806] x9 (unregistering): left promiscuous mode [ 347.364405][T16806] bridge0: port 1(0x9) entered disabled state [ 347.416147][T16814] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2946'. [ 347.668849][T16825] ipt_REJECT: TCP_RESET invalid for non-tcp [ 347.729851][T16831] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2950'. [ 347.783369][T15494] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.806642][T15494] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.835480][T16838] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2952'. [ 347.841807][T15494] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 348.017088][T15494] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.028869][T15494] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.045818][T15494] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 348.083698][T16846] syzkaller1: entered promiscuous mode [ 348.089930][T16846] syzkaller1: entered allmulticast mode [ 348.203621][T15494] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.235297][T15494] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.271902][T15494] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 348.381791][T15494] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.416902][T15494] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.430135][T15494] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 348.458133][T16861] netlink: 'syz.4.2959': attribute type 3 has an invalid length. [ 348.474790][T16801] chnl_net:caif_netlink_parms(): no params data found [ 348.486840][T16861] netlink: 'syz.4.2959': attribute type 3 has an invalid length. [ 348.534755][T16867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2961'. [ 348.546762][T16867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2961'. [ 348.568318][T16867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2961'. [ 348.613703][T16867] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 348.670364][T16867] team1: entered promiscuous mode [ 348.675671][T16867] team1: entered allmulticast mode [ 348.771659][T16871] netdevsim netdevsim1: Direct firmware load for .. @ failed with error -2 [ 348.802355][T16881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2965'. [ 348.818785][T16882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2965'. [ 348.827417][T16871] netdevsim netdevsim1: Falling back to sysfs fallback for: .. @ [ 348.972044][T16801] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.980050][T16801] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.988300][T16801] bridge_slave_0: entered allmulticast mode [ 348.997400][T16801] bridge_slave_0: entered promiscuous mode [ 349.040329][T16801] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.061006][T16801] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.071138][T16801] bridge_slave_1: entered allmulticast mode [ 349.091144][T16801] bridge_slave_1: entered promiscuous mode [ 349.207717][ T5828] Bluetooth: hci0: command tx timeout [ 349.220725][T16801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.245592][T16893] veth1_macvtap: left promiscuous mode [ 349.324668][T15494] x9: left allmulticast mode [ 349.338718][T15494] x9: left promiscuous mode [ 349.355708][T15494] bridge0: port 1(1x9) entered disabled state [ 349.410152][T16907] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2973'. [ 349.594532][T16911] netlink: 'syz.1.2974': attribute type 1 has an invalid length. [ 349.693395][T15494] bond6 (unregistering): (slave geneve2): Releasing active interface [ 349.823962][T15494] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 349.963677][T15494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.972840][T15494] bond_slave_0: left promiscuous mode [ 349.980534][T15494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.993435][T15494] bond_slave_1: left promiscuous mode [ 350.000255][T15494] bond0 (unregistering): Released all slaves [ 350.014352][T15494] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 350.024278][T15494] bond1 (unregistering): Released all slaves [ 350.041595][T15494] bond2 (unregistering): Released all slaves [ 350.058772][T15494] bond3 (unregistering): Released all slaves [ 350.075855][T15494] bond4 (unregistering): Released all slaves [ 350.104096][T15494] bond5 (unregistering): Released all slaves [ 350.124180][T15494] bond6 (unregistering): Released all slaves [ 350.141012][T15494] bond7 (unregistering): Released all slaves [ 350.161016][T15494] bond8 (unregistering): Released all slaves [ 350.221849][T15494] bond9 (unregistering): Released all slaves [ 350.241047][T15494] bond10 (unregistering): Released all slaves [ 350.263586][T15494] bond11 (unregistering): Released all slaves [ 350.281421][T15494] bond12 (unregistering): (slave batadv1): Releasing active interface [ 350.294996][T15494] bond12 (unregistering): Released all slaves [ 350.318221][T16801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.421265][T16921] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 350.573581][T16925] geneve4: entered promiscuous mode [ 350.583076][T16925] geneve4: entered allmulticast mode [ 350.661720][T16927] 8021q: adding VLAN 0 to HW filter on device bond14 [ 350.692888][T16801] team0: Port device team_slave_0 added [ 350.810210][T16801] team0: Port device team_slave_1 added [ 350.926510][T15494] tipc: Disabling bearer [ 350.948046][T15494] tipc: Left network mode [ 350.958932][T16801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.002269][T16801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.097399][T16801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.125581][T16801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.146676][T16801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.220665][T16801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.291024][ T5828] Bluetooth: hci0: command tx timeout [ 351.327317][T16953] bridge5: entered promiscuous mode [ 351.351872][T16953] bridge5: entered allmulticast mode [ 351.774015][T16962] syzkaller1: entered promiscuous mode [ 351.798503][T16962] syzkaller1: entered allmulticast mode [ 351.925223][T16801] hsr_slave_0: entered promiscuous mode [ 351.945098][T16801] hsr_slave_1: entered promiscuous mode [ 351.977589][T16801] debugfs: 'hsr0' already exists in 'hsr' [ 351.990288][T16801] Cannot create hsr debugfs directory [ 352.022739][T15494] IPVS: stopping master sync thread 6087 ... [ 352.137179][T10959] IPVS: starting estimator thread 0... [ 352.230117][T16984] IPVS: using max 32 ests per chain, 76800 per kthread [ 352.423133][T16992] __nla_validate_parse: 3 callbacks suppressed [ 352.423153][T16992] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2990'. [ 352.472758][T16995] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2990'. [ 352.598606][T16996] net_ratelimit: 11 callbacks suppressed [ 352.598627][T16996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.098712][ T5487] 8021q: adding VLAN 0 to HW filter on device eth1 [ 353.379818][ T5828] Bluetooth: hci0: command tx timeout [ 353.568023][T17043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3001'. [ 353.726174][T17050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3001'. [ 354.075149][T17061] netlink: 'syz.1.3004': attribute type 4 has an invalid length. [ 354.261321][T17072] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 354.307267][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3006'. [ 354.526699][T15494] hsr_slave_0: left promiscuous mode [ 354.552062][T15494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.583294][T15494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.096165][T17106] netlink: 'syz.4.3008': attribute type 4 has an invalid length. [ 355.241644][ T29] lo speed is unknown, defaulting to 1000 [ 355.254590][ T29] syz1: Port: 1 Link DOWN [ 355.273509][T17116] "syz.2.3013" (17116) uses obsolete ecb(arc4) skcipher [ 355.332844][T17099] syzkaller0: entered promiscuous mode [ 355.344092][T17099] syzkaller0: entered allmulticast mode [ 355.379673][T17116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3013'. [ 355.448494][ T5828] Bluetooth: hci0: command tx timeout [ 355.470062][T17116] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3013'. [ 355.926141][T17132] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3016'. [ 356.219440][T15494] IPVS: stop unused estimator thread 0... [ 356.319417][T16801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 356.332063][T17145] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3020'. [ 356.363138][T16801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 356.418701][T16801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 356.439022][T16801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 356.468407][T16801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 356.515022][T16801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 356.531326][T16801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 356.564222][T16801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 356.677405][T17155] veth3: entered allmulticast mode [ 356.719090][T17168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3024'. [ 356.880742][T17182] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 357.517352][T17215] netlink: 'syz.4.3032': attribute type 75 has an invalid length. [ 358.070653][T17230] xt_TCPMSS: Only works on TCP SYN packets [ 359.862994][T17237] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 359.983085][T16801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.048407][T16801] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.056519][T17243] Bluetooth: MGMT ver 1.23 [ 360.081544][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.088821][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.144294][T16916] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.151654][T16916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.173697][T17257] __nla_validate_parse: 1 callbacks suppressed [ 360.173716][T17257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3040'. [ 360.218935][T17257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3040'. [ 360.321698][T17267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3042'. [ 360.382011][T17266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3042'. [ 360.814632][T17294] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3050'. [ 360.934962][T16801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.049709][T16801] veth0_vlan: entered promiscuous mode [ 361.084278][T16801] veth1_vlan: entered promiscuous mode [ 361.259771][T16801] veth0_macvtap: entered promiscuous mode [ 361.290671][T17306] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 361.321127][T16801] veth1_macvtap: entered promiscuous mode [ 361.435195][T16801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.461059][T16801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.483000][T17324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3056'. [ 361.498353][ T6117] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.512551][T17324] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3056'. [ 361.523874][T17324] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3056'. [ 361.534946][T17324] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3056'. [ 361.545051][ T6117] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.563759][ T6117] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.613491][ T6117] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.708378][T17330] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3059'. [ 364.132637][T17306] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.269049][ T6109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.293110][ T6109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.367722][ T6109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.380506][ T6109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.642740][T17362] xt_socket: unknown flags 0xe4 [ 364.688647][T17362] netlink: 'syz.0.3068': attribute type 8 has an invalid length. [ 365.157695][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 365.171705][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 365.185105][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 365.195544][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 365.206336][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 365.357017][T17385] __nla_validate_parse: 3 callbacks suppressed [ 365.357036][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'. [ 367.288208][ T5828] Bluetooth: hci3: command tx timeout [ 368.012338][ T5825] bridge0: port 3(syz_tun) entered disabled state [ 368.039542][ T5825] syz_tun (unregistering): left allmulticast mode [ 368.046082][ T5825] syz_tun (unregistering): left promiscuous mode [ 368.054423][ T5825] bridge0: port 3(syz_tun) entered disabled state [ 368.256083][T15495] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.272874][T15495] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.365931][T17417] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3082'. [ 368.399102][T15495] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.422673][T15495] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.503820][T17428] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 368.582272][T15495] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.596670][T15495] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.642978][T17379] chnl_net:caif_netlink_parms(): no params data found [ 368.693260][T15495] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.703758][T15495] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.724387][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3089'. [ 368.760944][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3089'. [ 368.792410][T17440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3089'. [ 368.910108][T17379] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.929511][T17379] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.935463][T17446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'. [ 368.946607][T17379] bridge_slave_0: entered allmulticast mode [ 368.957642][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'. [ 368.971006][T17379] bridge_slave_0: entered promiscuous mode [ 368.979940][T17445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3091'. [ 368.995558][T17379] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.004900][T17379] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.012831][T17379] bridge_slave_1: entered allmulticast mode [ 369.021843][T17379] bridge_slave_1: entered promiscuous mode [ 369.173354][ T6109] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.183189][ T6109] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.299968][T17456] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 369.327908][T17456] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 369.339061][T17456] gretap1: entered promiscuous mode [ 369.344630][T17456] gretap1: entered allmulticast mode [ 369.353476][ T6109] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.368332][ T5828] Bluetooth: hci3: command tx timeout [ 369.381475][T17379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.483012][T17466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3097'. [ 369.503607][ T6109] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.511934][T17466] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3097'. [ 369.531193][T17379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.817294][T17379] team0: Port device team_slave_0 added [ 369.843279][T17379] team0: Port device team_slave_1 added [ 369.950617][T15495] bridge_slave_0: left allmulticast mode [ 369.966366][T15495] bridge_slave_0: left promiscuous mode [ 369.974179][T15495] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.267886][T15495] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 370.419764][T15495] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 370.543568][T15495] bond13 (unregistering): (slave bridge4): Releasing backup interface [ 370.638413][T15495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.650464][T17507] netlink: 'syz.2.3105': attribute type 4 has an invalid length. [ 370.661563][T15495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.677430][T15495] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 370.687759][T15495] bond0 (unregistering): Released all slaves [ 370.700467][T15495] bond1 (unregistering): Released all slaves [ 370.716295][T15495] bond2 (unregistering): Released all slaves [ 370.734270][T15495] bond3 (unregistering): Released all slaves [ 370.751476][T15495] bond4 (unregistering): Released all slaves [ 370.775784][T15495] bond5 (unregistering): Released all slaves [ 370.793063][T15495] bond6 (unregistering): Released all slaves [ 370.815324][T15495] bond7 (unregistering): Released all slaves [ 370.831644][T15495] bond8 (unregistering): Released all slaves [ 370.853197][T15495] bond9 (unregistering): Released all slaves [ 370.869729][T15495] bond10 (unregistering): Released all slaves [ 370.896482][T15495] bond11 (unregistering): Released all slaves [ 370.914123][T15495] bond12 (unregistering): Released all slaves [ 370.931420][T15495] bond13 (unregistering): Released all slaves [ 370.955599][T15495] bond14 (unregistering): Released all slaves [ 371.004978][T17379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.034367][T17379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.110523][T17379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.159482][T17379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.170561][T17379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.201014][T17379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.350246][T17518] netlink: 'syz.1.3108': attribute type 1 has an invalid length. [ 371.403022][T17518] netlink: 'syz.1.3108': attribute type 3 has an invalid length. [ 371.424284][T17518] netlink: 'syz.1.3108': attribute type 1 has an invalid length. [ 371.444906][T15495] tipc: Disabling bearer [ 371.451430][ T5828] Bluetooth: hci3: command tx timeout [ 371.458672][T15495] tipc: Left network mode [ 371.503844][T17379] hsr_slave_0: entered promiscuous mode [ 371.554249][T17379] hsr_slave_1: entered promiscuous mode [ 371.577811][T17379] debugfs: 'hsr0' already exists in 'hsr' [ 371.596219][T17379] Cannot create hsr debugfs directory [ 371.612999][T17522] netlink: 'syz.1.3108': attribute type 3 has an invalid length. [ 371.646490][T17521] __nla_validate_parse: 2 callbacks suppressed [ 371.646513][T17521] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3109'. [ 372.044801][T17546] netlink: 'syz.3.3114': attribute type 10 has an invalid length. [ 372.344136][T17555] netlink: 'syz.3.3117': attribute type 3 has an invalid length. [ 372.402352][T17555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3117'. [ 372.470429][T17562] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3118'. [ 372.501697][T17555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3117'. [ 372.724539][T15495] hsr_slave_0: left promiscuous mode [ 372.751713][T15495] hsr_slave_1: left promiscuous mode [ 372.877280][T17577] openvswitch: netlink: Actions may not be safe on all matching packets [ 373.470561][ T5487] 8021q: adding VLAN 0 to HW filter on device eth1 [ 373.489017][T17601] IPVS: Error connecting to the multicast addr [ 373.531364][ T5828] Bluetooth: hci3: command tx timeout [ 374.236199][T17621] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3131'. [ 374.454084][T17634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3132'. [ 374.520199][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3132'. [ 374.707790][T17634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3132'. [ 374.844320][T15495] IPVS: stop unused estimator thread 0... [ 374.963419][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3139'. [ 375.118741][T17675] syzkaller0: entered promiscuous mode [ 375.124355][T17675] syzkaller0: entered allmulticast mode [ 375.299477][T17682] openvswitch: netlink: IPv4 tunnel dst address is zero [ 375.389349][T17379] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 375.430511][T17379] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 375.468252][T17379] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 375.522326][T17379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 375.557798][T17379] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 375.600531][T17379] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 375.631354][T17379] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 375.688423][T17379] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 375.792354][T17700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3147'. [ 376.261727][T17379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.342343][T17379] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.370864][ T6110] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.378137][ T6110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.427080][T17743] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.447448][T17743] bridge_slave_1: left allmulticast mode [ 376.453209][T17743] bridge_slave_1: left promiscuous mode [ 376.470694][T17743] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.506013][T17743] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 376.603801][ T6110] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.611176][ T6110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.849255][T17756] netlink: 'syz.1.3157': attribute type 10 has an invalid length. [ 376.915454][T17756] bond0: (slave wlan1): Opening slave failed [ 376.940670][T17756] netlink: 'syz.1.3157': attribute type 10 has an invalid length. [ 376.971868][T17756] bond0: (slave wlan1): Opening slave failed [ 376.997751][T17756] netlink: 'syz.1.3157': attribute type 10 has an invalid length. [ 377.018509][T17756] bond0: (slave wlan1): Opening slave failed [ 377.032975][T17756] netlink: 'syz.1.3157': attribute type 10 has an invalid length. [ 377.043593][T17756] bond0: (slave wlan1): Opening slave failed [ 377.059642][T17756] netlink: 'syz.1.3157': attribute type 10 has an invalid length. [ 377.078752][T17756] bond0: (slave wlan1): Opening slave failed [ 377.087544][T17756] netlink: 'syz.1.3157': attribute type 10 has an invalid length. [ 377.114697][T17756] bond0: (slave wlan1): Opening slave failed [ 377.140496][T17756] netlink: 'syz.1.3157': attribute type 10 has an invalid length. [ 377.168138][T17756] bond0: (slave wlan1): Opening slave failed [ 377.190006][T17756] netlink: 'syz.1.3157': attribute type 10 has an invalid length. [ 377.214179][T17756] bond0: (slave wlan1): Opening slave failed [ 377.244792][T17756] netlink: 'syz.1.3157': attribute type 10 has an invalid length. [ 377.293661][T17756] bond0: (slave wlan1): Opening slave failed [ 377.303093][T17756] netlink: 'syz.1.3157': attribute type 10 has an invalid length. [ 377.329870][T17756] bond0: (slave wlan1): Opening slave failed [ 377.355036][T17756] bond0: (slave wlan1): Opening slave failed [ 377.393623][T17756] bond0: (slave wlan1): Opening slave failed [ 377.429456][T17756] bond0: (slave wlan1): Opening slave failed [ 377.475582][T17756] bond0: (slave wlan1): Opening slave failed [ 377.672024][T17756] bond0: (slave wlan1): Opening slave failed [ 377.755569][T17379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.845690][T17792] __nla_validate_parse: 3 callbacks suppressed [ 377.845710][T17792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3163'. [ 377.864561][ T5487] veth0_macvtap: left promiscuous mode [ 378.170169][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3166'. [ 378.433817][T17819] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3167'. [ 378.618161][T17379] veth0_vlan: entered promiscuous mode [ 378.636767][T17379] veth1_vlan: entered promiscuous mode [ 378.710420][T17379] veth0_macvtap: entered promiscuous mode [ 378.735593][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.746169][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 378.775144][T17379] veth1_macvtap: entered promiscuous mode [ 378.879523][T17379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.931025][T17379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.962783][ T6113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.988344][ T6113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.025795][ T6113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.049178][ T6113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.267399][T17843] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 379.411441][ T6110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.413602][T17851] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3173'. [ 379.453351][ T6110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.513957][T17851] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3173'. [ 379.536183][ T6113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.548834][T17853] syzkaller0: entered promiscuous mode [ 379.554409][T17853] syzkaller0: entered allmulticast mode [ 379.566236][ T6113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.602158][T17861] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3175'. [ 379.951385][T17878] raw_sendmsg: syz.4.3070 forgot to set AF_INET. Fix it! [ 380.148460][T17885] bridge3: entered promiscuous mode [ 380.168742][T17885] bridge3: entered allmulticast mode [ 380.550905][T17904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3184'. [ 380.571380][T17895] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.603087][T17904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3184'. [ 380.675829][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 380.693954][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 380.706831][T17895] bridge_slave_0 (unregistering): left allmulticast mode [ 380.734700][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 380.740087][T17895] bridge_slave_0 (unregistering): left promiscuous mode [ 380.758247][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.767160][T17895] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.777155][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 381.000980][T17915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3186'. [ 381.785758][T17960] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3191'. [ 381.882527][T17957] bond1 (unregistering): Released all slaves [ 382.093008][T17907] chnl_net:caif_netlink_parms(): no params data found [ 382.887156][ T5828] Bluetooth: hci2: command tx timeout [ 383.158569][T18010] __nla_validate_parse: 5 callbacks suppressed [ 383.158591][T18010] netlink: 212320 bytes leftover after parsing attributes in process `syz.3.3203'. [ 383.334382][T17907] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.341963][T17907] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.349791][T17907] bridge_slave_0: entered allmulticast mode [ 383.358909][T17907] bridge_slave_0: entered promiscuous mode [ 383.370672][T18002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.477706][T18002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.556766][T18005] vlan2: entered allmulticast mode [ 383.571683][T18005] bond0: entered allmulticast mode [ 383.584125][T18005] bond_slave_0: entered allmulticast mode [ 383.599459][T18005] bond_slave_1: entered allmulticast mode [ 383.622607][T18007] tipc: Started in network mode [ 383.629066][T18007] tipc: Node identity aeb2482b076, cluster identity 4711 [ 383.637620][T18007] tipc: Enabled bearer , priority 0 [ 383.793267][T18008] syzkaller0: entered promiscuous mode [ 383.799096][T18008] syzkaller0: entered allmulticast mode [ 383.805513][T18008] tipc: Resetting bearer [ 383.816164][T17907] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.834300][T17907] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.857213][T17907] bridge_slave_1: entered allmulticast mode [ 383.873275][T17907] bridge_slave_1: entered promiscuous mode [ 383.894067][T18001] tipc: Resetting bearer [ 384.976787][ T5828] Bluetooth: hci2: command tx timeout [ 387.052001][ T5828] Bluetooth: hci2: command tx timeout [ 387.185615][T18001] tipc: Disabling bearer [ 387.237534][T18028] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3209'. [ 387.248275][T18028] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3209'. [ 387.260049][T10959] tipc: Node number set to 2849130539 [ 387.348226][T17907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.392075][T17907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.507719][T17907] team0: Port device team_slave_0 added [ 387.530612][T17907] team0: Port device team_slave_1 added [ 387.619039][T18049] tc_dump_action: action bad kind [ 387.634124][T17907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.668144][T17907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.707007][T17907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.776468][T17907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.791851][T17907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.826315][T18062] validate_nla: 8 callbacks suppressed [ 387.826334][T18062] netlink: 'syz.0.3218': attribute type 39 has an invalid length. [ 387.842674][T18054] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 387.867025][T17907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.969997][T18062] hsr_slave_1 (unregistering): left promiscuous mode [ 388.203548][T17907] hsr_slave_0: entered promiscuous mode [ 388.226425][T17907] hsr_slave_1: entered promiscuous mode [ 388.251763][T17907] debugfs: 'hsr0' already exists in 'hsr' [ 388.270736][T17907] Cannot create hsr debugfs directory [ 388.280381][T18079] netlink: 284 bytes leftover after parsing attributes in process `syz.1.3220'. [ 388.703576][T18100] netlink: 'syz.4.3224': attribute type 2 has an invalid length. [ 388.749330][T18103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3225'. [ 388.912104][T17907] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 388.939807][T17907] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 388.971853][T17907] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.005191][T17907] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 389.127640][ T5828] Bluetooth: hci2: command tx timeout [ 389.152203][T17907] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 389.164079][T17907] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 389.176056][T17907] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.186333][T17907] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 389.243367][T17907] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 389.253981][T17907] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 389.272968][T17907] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.290353][T17907] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 389.380840][T17907] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 389.391987][T17907] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 389.403011][T17907] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.415330][T17907] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 389.597147][T18134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3234'. [ 389.685539][T18138] netlink: 'syz.0.3234': attribute type 3 has an invalid length. [ 389.706757][T18138] netlink: 'syz.0.3234': attribute type 1 has an invalid length. [ 389.740918][T18138] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3234'. [ 389.835509][T18134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.846009][T18134] bond1: (slave bond2): Enslaving as an active interface with an up link [ 389.956566][T18158] netlink: 'syz.0.3240': attribute type 23 has an invalid length. [ 390.080760][ T30] audit: type=1107 audit(1776824084.734:2): pid=18159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 390.163989][T17907] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 390.188700][T17907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 390.293766][T18173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3245'. [ 390.314815][T18174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3244'. [ 390.323961][T18174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3244'. [ 392.632546][T17907] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 392.642716][T17907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.689074][T18177] tipc: Enabled bearer , priority 10 [ 392.708337][T17907] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 392.762630][T17907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.788250][T17907] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 392.819429][T17907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 393.004934][T18207] netlink: 'syz.4.3252': attribute type 30 has an invalid length. [ 393.043300][T17907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.139323][T17907] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.173558][T16916] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.180812][T16916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.227212][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.234450][ T6109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.630395][T17907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.714343][T18242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3261'. [ 393.730882][T17907] veth0_vlan: entered promiscuous mode [ 393.743069][T18242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3261'. [ 393.762104][T17907] veth1_vlan: entered promiscuous mode [ 393.843038][T17907] veth0_macvtap: entered promiscuous mode [ 393.875316][T17907] veth1_macvtap: entered promiscuous mode [ 393.912845][T17907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.949058][T17907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.993759][T15495] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.022139][T15495] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.118155][T15495] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.131777][T18261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3267'. [ 394.142000][T15495] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.177555][T18258] netlink: 'syz.3.3265': attribute type 3 has an invalid length. [ 394.352948][T18255] bond1: option lp_interval: invalid value (0) [ 394.361239][T18255] bond1: option lp_interval: allowed values 1 - 2147483647 [ 394.381819][T18255] bond1 (unregistering): Released all slaves [ 394.581107][T18270] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3269'. [ 394.761823][T18274] syzkaller1: entered promiscuous mode [ 394.770936][T18274] syzkaller1: entered allmulticast mode [ 394.788046][ T6109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.798886][ T6109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.944630][T18287] sctp: [Deprecated]: syz.1.3273 (pid 18287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.944630][T18287] Use struct sctp_sack_info instead [ 394.973746][T18289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.983375][T18289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.077408][T16916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.088109][T16916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.372490][T18305] netlink: 'syz.2.3279': attribute type 1 has an invalid length. [ 395.542321][T18309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3280'. [ 395.570895][T18309] netlink: 'syz.0.3280': attribute type 7 has an invalid length. [ 395.614282][T18309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3280'. [ 395.659516][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 395.674369][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 395.685637][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 395.703476][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 395.711695][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 396.002104][T18326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3283'. [ 396.225996][T18333] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3283'. [ 396.276475][T18344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3287'. [ 396.324435][T18348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3286'. [ 396.441331][T18340] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 396.753556][T18317] chnl_net:caif_netlink_parms(): no params data found [ 396.763870][T18359] xt_TPROXY: Can be used only with -p tcp or -p udp [ 396.954605][T18373] xt_CT: You must specify a L4 protocol and not use inversions on it [ 397.027741][T18317] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.044164][T18317] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.053189][T18317] bridge_slave_0: entered allmulticast mode [ 397.065252][T18317] bridge_slave_0: entered promiscuous mode [ 397.075504][T18317] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.083750][T18317] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.093299][T18317] bridge_slave_1: entered allmulticast mode [ 397.103037][T18317] bridge_slave_1: entered promiscuous mode [ 397.194214][T18317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.219799][T18317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.230032][T18386] netlink: 'syz.4.3298': attribute type 1 has an invalid length. [ 397.293325][T18386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.428023][T18391] bond1: (slave veth3): Enslaving as an active interface with a down link [ 397.447693][T18317] team0: Port device team_slave_0 added [ 397.470136][T18317] team0: Port device team_slave_1 added [ 397.512095][T18386] bond1: (slave dummy0): making interface the new active one [ 397.529802][T18386] dummy0: entered promiscuous mode [ 397.535483][T18386] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 397.580403][T18400] bond1: (slave dummy0): Releasing active interface [ 397.600558][T18400] dummy0 (unregistering): left promiscuous mode [ 397.676226][T18317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.691434][T18317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.719004][T18317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.750457][T18317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.762247][T18317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.800417][ T5828] Bluetooth: hci4: command tx timeout [ 397.817174][T18317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.003716][T18317] hsr_slave_0: entered promiscuous mode [ 398.017595][T18317] hsr_slave_1: entered promiscuous mode [ 398.024221][T18317] debugfs: 'hsr0' already exists in 'hsr' [ 398.033806][T18317] Cannot create hsr debugfs directory [ 398.255565][T18438] xt_CT: You must specify a L4 protocol and not use inversions on it [ 398.338661][T18437] ieee802154 phy0 wpan0: encryption failed: -90 [ 398.547198][T18317] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.563731][T18442] IPVS: Scheduler module ip_vs_sip not found [ 398.576381][T18317] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.743565][T18440] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.084402][T18473] sctp: [Deprecated]: syz.3.3322 (pid 18473) Use of int in maxseg socket option. [ 399.084402][T18473] Use struct sctp_assoc_value instead [ 399.141661][T18317] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.172469][T18317] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.202152][T15495] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.230548][T18481] __nla_validate_parse: 11 callbacks suppressed [ 399.230569][T18481] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.3322'. [ 399.231752][T15495] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.264377][T18481] netlink: 'syz.3.3322': attribute type 11 has an invalid length. [ 399.288016][T18481] netlink: 189 bytes leftover after parsing attributes in process `syz.3.3322'. [ 399.311999][T15495] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.322219][T18482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3324'. [ 399.409042][T18317] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.425427][T18486] openvswitch: netlink: IP tunnel dst address not specified [ 399.432929][T18317] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.470798][T15495] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.504114][ T6113] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 399.516683][ T6113] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 399.528449][ T5900] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 399.574034][T18317] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.584550][T18317] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.631569][T18492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3327'. [ 399.643707][T18492] syzkaller0: entered promiscuous mode [ 399.657560][T18492] syzkaller0: entered allmulticast mode [ 399.849023][ T5828] Bluetooth: hci4: command tx timeout [ 399.921920][T18497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3329'. [ 400.083098][T18501] netlink: 'syz.2.3330': attribute type 1 has an invalid length. [ 400.092621][T18503] netlink: 'syz.2.3330': attribute type 1 has an invalid length. [ 400.163020][T18317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 400.193600][T18317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.218616][T18501] netlink: 'syz.2.3330': attribute type 14 has an invalid length. [ 400.239164][T18317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 400.241955][T18507] netlink: 'syz.2.3330': attribute type 14 has an invalid length. [ 400.261134][T18501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3330'. [ 400.274005][T18507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3330'. [ 400.294555][T18317] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.325083][T18511] xt_cgroup: path and classid specified [ 400.325659][T18317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 400.353967][T18317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.408251][ T5900] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 400.420334][ T5900] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 400.433088][T18514] sit1: entered promiscuous mode [ 400.446597][T18514] sit1: entered allmulticast mode [ 400.455343][T15495] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.465560][T15495] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.483644][T18514] netlink: 'syz.3.3335': attribute type 1 has an invalid length. [ 400.498159][T18514] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3335'. [ 400.507843][T18317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 400.529002][T18317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.550280][T15495] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.571973][T15495] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.795960][T18541] macvlan0: entered promiscuous mode [ 400.903282][T18317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.996484][T18317] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.049723][ T6113] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.057103][ T6113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.078985][T18555] IPv6: addrconf: prefix option has invalid lifetime [ 401.137512][T16916] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.144766][T16916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.171684][T18558] netlink: 'syz.2.3343': attribute type 1 has an invalid length. [ 401.282320][T18564] netlink: 'syz.3.3344': attribute type 4 has an invalid length. [ 401.440358][T18570] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3345'. [ 401.479250][T18571] delete_channel: no stack [ 401.542378][T18574] netlink: 208 bytes leftover after parsing attributes in process `syz.4.3345'. [ 401.685737][T18578] syzkaller0: entered promiscuous mode [ 401.930558][ T5828] Bluetooth: hci4: command tx timeout [ 402.736425][T18317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.885722][T18317] veth0_vlan: entered promiscuous mode [ 402.938724][T18317] veth1_vlan: entered promiscuous mode [ 403.078296][T18317] veth0_macvtap: entered promiscuous mode [ 403.113839][T18317] veth1_macvtap: entered promiscuous mode [ 403.122422][T18644] IPv6: NLM_F_CREATE should be specified when creating new route [ 403.191884][T18648] Cannot find map_set index 65533 as target [ 403.225678][T18317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.274235][T18317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.315716][ T6110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.352753][ T6110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.374093][ T6110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.415450][ T6110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.650645][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.685402][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.727290][T18664] syzkaller0: entered promiscuous mode [ 403.741007][T18664] syzkaller0: entered allmulticast mode [ 403.756661][T18666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.822108][ T6113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.833587][ T6113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.927226][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 403.969139][T18672] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 403.983213][T18672] bond3 (unregistering): Released all slaves [ 404.007970][ T5828] Bluetooth: hci4: command tx timeout [ 404.084020][T18681] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 404.126263][T18684] bridge1: entered promiscuous mode [ 404.146686][T18684] bridge1: entered allmulticast mode [ 404.186289][T18680] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005e: 0000 [#1] SMP KASAN PTI [ 404.198252][T18680] KASAN: null-ptr-deref in range [0x00000000000002f0-0x00000000000002f7] [ 404.206726][T18680] CPU: 0 UID: 0 PID: 18680 Comm: syz.3.3366 Not tainted syzkaller #0 PREEMPT(full) [ 404.216155][T18680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 404.226263][T18680] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 404.231695][T18680] Code: 20 35 49 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3e 12 00 00 83 3d 70 68 94 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 56 5e 7c f6 4d 39 64 24 58 0f 85 6a 11 00 [ 404.251387][T18680] RSP: 0018:ffffc900026277c0 EFLAGS: 00010202 [ 404.257504][T18680] RAX: 000000000000005e RBX: 0000000000000000 RCX: ffffffff9a493503 [ 404.265510][T18680] RDX: 0000000000000000 RSI: ffffffff8e22a622 RDI: 00000000000002f0 [ 404.273505][T18680] RBP: ffffc90002627980 R08: ffffc900026278e7 R09: 0000000000000000 [ 404.281522][T18680] R10: ffffc900026278c0 R11: fffff520004c4f1d R12: 0000000000000298 [ 404.289524][T18680] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920004c4f10 [ 404.297531][T18680] FS: 00007f1d537f66c0(0000) GS:ffff888125243000(0000) knlGS:0000000000000000 [ 404.306499][T18680] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.313118][T18680] CR2: 00007fa0dc793d58 CR3: 000000007a8a0000 CR4: 00000000003526f0 [ 404.321117][T18680] Call Trace: [ 404.324458][T18680] [ 404.327412][T18680] ? wake_up_q+0x99/0xd0 [ 404.331703][T18680] ? preempt_schedule_thunk+0x16/0x30 [ 404.337099][T18680] ? preempt_schedule_common+0x82/0xd0 [ 404.342583][T18680] ? l2cap_unregister_user+0x36/0x170 [ 404.347991][T18680] ? __pfx___mutex_lock+0x10/0x10 [ 404.353065][T18680] ? __up_read+0x2fe/0x6b0 [ 404.357665][T18680] ? __pfx___up_read+0x10/0x10 [ 404.362465][T18680] ? hidp_session_find+0xce/0x100 [ 404.367635][T18680] l2cap_unregister_user+0x36/0x170 [ 404.372873][T18680] hidp_connection_del+0xb0/0x170 [ 404.377926][T18680] hidp_sock_ioctl+0x3ab/0x650 [ 404.382724][T18680] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 404.388055][T18680] ? do_vfs_ioctl+0x1166/0x1530 [ 404.392933][T18680] sock_do_ioctl+0x101/0x320 [ 404.397547][T18680] ? __pfx_sock_do_ioctl+0x10/0x10 [ 404.402677][T18680] ? do_futex+0x333/0x420 [ 404.407042][T18680] sock_ioctl+0x5c6/0x7f0 [ 404.411417][T18680] ? __pfx_sock_ioctl+0x10/0x10 [ 404.416309][T18680] ? __fget_files+0x2a/0x420 [ 404.420943][T18680] ? __fget_files+0x3a0/0x420 [ 404.425654][T18680] ? __fget_files+0x2a/0x420 [ 404.430269][T18680] ? bpf_lsm_file_ioctl+0x9/0x20 [ 404.435233][T18680] ? __pfx_sock_ioctl+0x10/0x10 [ 404.440102][T18680] __se_sys_ioctl+0xfc/0x170 [ 404.444712][T18680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.450804][T18680] do_syscall_64+0x15f/0xf80 [ 404.455432][T18680] ? trace_irq_disable+0x3b/0x140 [ 404.460483][T18680] ? clear_bhb_loop+0x40/0x90 [ 404.465192][T18680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.471112][T18680] RIP: 0033:0x7f1d5559c819 [ 404.475549][T18680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.495186][T18680] RSP: 002b:00007f1d537f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.503634][T18680] RAX: ffffffffffffffda RBX: 00007f1d55815fa0 RCX: 00007f1d5559c819 [ 404.511628][T18680] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000009 [ 404.519624][T18680] RBP: 00007f1d55632c91 R08: 0000000000000000 R09: 0000000000000000 [ 404.527619][T18680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 404.535616][T18680] R13: 00007f1d55816038 R14: 00007f1d55815fa0 R15: 00007ffd82355d38 [ 404.543621][T18680] [ 404.546662][T18680] Modules linked in: [ 404.552742][T18680] ---[ end trace 0000000000000000 ]--- [ 404.564103][T18690] netlink: 'syz.0.3368': attribute type 21 has an invalid length. [ 404.572490][T18690] netlink: 'syz.0.3368': attribute type 22 has an invalid length. [ 404.574433][T18680] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 404.580400][T18690] netlink: 'syz.0.3368': attribute type 23 has an invalid length. [ 404.580421][T18690] __nla_validate_parse: 7 callbacks suppressed [ 404.580475][T18690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3368'. [ 404.586093][T18680] Code: 20 35 49 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3e 12 00 00 83 3d 70 68 94 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 56 5e 7c f6 4d 39 64 24 58 0f 85 6a 11 00 [ 404.629293][T18680] RSP: 0018:ffffc900026277c0 EFLAGS: 00010202 [ 404.635454][T18680] RAX: 000000000000005e RBX: 0000000000000000 RCX: ffffffff9a493503 [ 404.663852][T18680] RDX: 0000000000000000 RSI: ffffffff8e22a622 RDI: 00000000000002f0 [ 404.681306][T18680] RBP: ffffc90002627980 R08: ffffc900026278e7 R09: 0000000000000000 [ 404.693688][T18680] R10: ffffc900026278c0 R11: fffff520004c4f1d R12: 0000000000000298 [ 404.709900][T18680] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920004c4f10 [ 404.718336][T18680] FS: 00007f1d537f66c0(0000) GS:ffff888125343000(0000) knlGS:0000000000000000 [ 404.730912][T18680] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.737903][T18680] CR2: 0000000000000000 CR3: 000000007a8a0000 CR4: 00000000003526f0 [ 404.746048][T18680] Kernel panic - not syncing: Fatal exception [ 404.752330][T18680] Kernel Offset: disabled [ 404.756667][T18680] Rebooting in 86400 seconds..