last executing test programs: 9m7.776310904s ago: executing program 0 (id=275): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000200)=@qipcrtr, 0x80, 0x0}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xc4}}, {}, [], {{}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0x7fff}, 0x80, 0x0}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x20000006, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) shutdown(r8, 0x1) ioctl$sock_inet_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1c) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000000)={r11, 0xfffffffa}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000340)={0x6dbf, 0xfff8, 0x4, 0x2, 0x800, 0x6, 0x0, 0x2, r11}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x2, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000840) 9m7.514490433s ago: executing program 0 (id=279): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3401000017000100000000000000000000000000000000000000ffffffffffff0000000000000000ac141400000000000000000000000000fe8000000000000000000000000000bbac1414bb00"/104, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES64, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000289c62833e5e259c44c9913ad9"], 0x134}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x88d4}, 0x800) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x24}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000052c0)={0x0, @default, @netrom={'nr', 0x0}, 0x743, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x10, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 9m7.359016421s ago: executing program 0 (id=281): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x19, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000000), 0x3}, 0x28) 9m7.127095493s ago: executing program 0 (id=286): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x8800, &(0x7f00000000c0)={0xa, 0x0, 0xd, @local, 0x9}, 0x1c) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) 9m6.209326119s ago: executing program 0 (id=305): getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x128, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @mcast1, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8001, @private2, 0x1ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb9ba}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8c}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3e}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000300)=0x8, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETSGCNT_IN6(r4, 0x89e1, &(0x7f0000000380)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0xaa}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xff}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3ff}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4020}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40014}, 0x44000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x250, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x24b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x401}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x91}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0xfffffffffffffffc}, {0xc, 0x90, 0x800}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x5}}]}, 0x250}, 0x1, 0x0, 0x0, 0x94}, 0x24000080) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x10, 0x3f6, 0x800, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x28000804) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)=r4}, 0x20) pipe(&(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x11, 0x1d, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x31}, [@alu={0x7, 0x1, 0x5, 0x1, 0x8, 0x18}, @ldst={0x1, 0x3, 0x6, 0x2, 0xb, 0x8, 0x4}, @generic={0x80, 0x5, 0x2, 0x9, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffdc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x9}]}, &(0x7f0000000d00)='syzkaller\x00', 0xdb20, 0x88, &(0x7f0000000d40)=""/136, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000e40)={0x1, 0xd, 0xc, 0xcbc}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000f80)=[r0, r10, r4, r11], &(0x7f0000000fc0)=[{0x0, 0x3, 0x10, 0x5}], 0x10, 0x8000}, 0x94) r13 = accept4$x25(r11, &(0x7f00000010c0), &(0x7f0000001100)=0x12, 0x800) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000001180)={0x1, &(0x7f0000001140)=[{0x0, 0x5, 0x9, 0x4}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000011c0)={'dummy0\x00', @multicast}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r12) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x68, r14, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x43}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}]}, 0x68}}, 0x8000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003380)={r12, &(0x7f0000001380)="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", &(0x7f0000002380)=""/4096}, 0x20) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r15, &(0x7f0000003480)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x40, r14, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x48}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x398}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd6d}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x20008800) 9m5.870289548s ago: executing program 0 (id=311): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6d}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 9m5.60181737s ago: executing program 32 (id=311): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6d}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 4m10.406920838s ago: executing program 5 (id=3302): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x20000001) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)) (async) bind(r0, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x64fb}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000300)={r3, 0x7, 0x1, [0x3]}, &(0x7f0000000340)=0xa) (async, rerun: 64) r5 = accept4$rose(0xffffffffffffffff, &(0x7f0000000380)=@short={0xb, @remote, @netrom, 0x1, @bcast}, &(0x7f00000003c0)=0x1c, 0x80000) (rerun: 64) ioctl$SIOCRSGCAUSE(r5, 0x89e0, &(0x7f0000000400)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000440)={r4, @in={{0x2, 0x4e21, @broadcast}}, 0x7, 0x4}, 0x90) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000500)={'veth1_to_batadv\x00'}) (async) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000001540)={r0, r6, 0x1, 0x1000, &(0x7f0000000540)="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", 0xb, 0x2, 0x3, 0xfff3, 0x9, 0x1, 0x2e28, 'syz1\x00'}) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x30, r1, 0x200, 0x8, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x57}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xea, 0x56}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$SIOCRSSCAUSE(r5, 0x89e1, &(0x7f0000001700)=0x1) (async) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000001740)) pipe(&(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f00000017c0)={0x11, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x7}]}, 0x18) (async) setsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, &(0x7f0000001800)=0x8, 0x2) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r7) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000001a00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000019c0)={&(0x7f00000018c0)={0xe8, r10, 0x10, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x20, 0x24, [{0x36}, {0x48, 0x1}, {0x6c, 0x1}, {0x1b, 0x1}, {0x18, 0x1}, {0x24}, {0x6, 0x1}, {0x6c}, {0x15, 0x1}, {0x16, 0x1}, {0xc}, {0x2, 0x1}, {0x48, 0x1}, {0x16}, {0x1, 0x1}, {0x16, 0x1}, {0x18}, {0x66, 0x1}, {0x22}, {0x36}, {0x0, 0x1}, {0x36, 0x1}, {0x18}, {0x4, 0x1}, {0x30, 0x1}, {0x1, 0x1}, {0x24, 0x1}, {0x36}]}, @NL80211_ATTR_IE={0x2f, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @ibss={0x6, 0x2, 0x6}, @prep={0x83, 0x1f, {{}, 0x6, 0x9, @device_b, 0xffff, @void, 0x100, 0x10, @broadcast, 0x81}}, @dsss={0x3, 0x1, 0x3f701975c93e8e68}]}, @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x5, 0x4, '+'}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d75b828c44"}]}]}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xe}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffb1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffd2}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x5}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x3ff}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xa5}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x8000}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) (async, rerun: 64) r11 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000001a40)={0x1, 0x8620, 0x4, 0x9, 0x40, 0x4, 0x800, 0xfff, r4}, &(0x7f0000001a80)=0x20) (async) bind$inet6(r7, &(0x7f0000001ac0)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80000001}, 0x1c) (async) setsockopt$inet6_tcp_int(r7, 0x6, 0x11, &(0x7f0000001b00)=0x4, 0x4) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000001b40)={'veth1_to_team\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x97c847f130a3cc1c}}) 4m10.184296567s ago: executing program 5 (id=3304): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e00010400000000000000000a0000003f00000000000000080001"], 0x24}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x8, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001e00010400000000000000000a0000003f00000000000000080001"], 0x24}}, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x8, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) (async) 4m10.049705977s ago: executing program 5 (id=3307): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x7ea1, 0x9, 0xa, 0x4, 0x8, 0x5, 0x3c4, 0x9, r5}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e24, 0x92, @mcast1, 0x2}}, 0xd, 0x10}, &(0x7f0000000000)=0x90) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x5, 0x300, 0x200}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) close(0x4) 4m9.03492873s ago: executing program 5 (id=3322): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x8, 0x1, [@m_bpf={0x0, 0xe, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x8}, @TCA_ACT_BPF_PARMS={0x0, 0x2, {0xf0fb, 0x2, 0xffffffffffffffff, 0x24d08b19, 0x2}}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}]}, {0x0, 0x6, "1a92489209cef3f97c7be00f90fa4e1b05d10b554c74c65d0597c50ae1988209462148eb2911cb23d6196fa6443aa922d87becb3c702c8c41df87746a8"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4840}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb8100000086dd60fec00000353a00fc000000000000000000000000000000ff02000000050000000000000000000102009078000000006018b08800000000fe8000000000000000000000000000aafe8000000000000000000000000000aafafb17c133"], 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 4m8.947481596s ago: executing program 5 (id=3325): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14000000130001000000000000fdffff02"], 0x14}], 0x1}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x1, @remote, 0x7}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) sendto(r3, 0x0, 0x0, 0x4008044, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14000000130001000000000000fdffff02"], 0x14}], 0x1}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x1, @remote, 0x7}, 0x1c) (async) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) (async) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) (async) sendto(r3, 0x0, 0x0, 0x4008044, 0x0, 0x0) (async) 4m0.606601767s ago: executing program 5 (id=3330): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r2 = socket$kcm(0x10, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000007000000180100002020752500000000002020207b1af8ff00000000bfa101000000010007010000f8ffffffb702000008000000b703000000eb00edc3d8e5fd6530650095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) 4m0.293690848s ago: executing program 33 (id=3330): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r2 = socket$kcm(0x10, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000007000000180100002020752500000000002020207b1af8ff00000000bfa101000000010007010000f8ffffffb702000008000000b703000000eb00edc3d8e5fd6530650095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) sendmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) 6.18442029s ago: executing program 6 (id=6381): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x88, 0x1403, 0x1, 0x70bd26, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x2, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8001}, 0x44014) 5.958174625s ago: executing program 6 (id=6387): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) 5.691018997s ago: executing program 6 (id=6391): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno\x00', 0xb) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x26, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="08de356ff2323988e2c846f4795a3b2cfdfac1fcfc7015f0f6602b8a3f8251aca4b42d62a5db0c410528831c49655e956492f80ff58a22e1f33c8b392946de5283702c785fefeda8164ec598292ea5208baa9d3218fad7045e0cc30aec1d9672ae96dc39d3bd500093463a0d3b872391c515e65ab75f8d8a2871839144245b98484d9c018beb4a288fae52df50b5bea617698557be091336b8d640ebf33ce3c4347a61e902de7e06a8ef12d0bd2bd48d37685e305b788088a43cf230ffac86a4fad5b6be6829a10eac3a5bdcb52392add86ed55cec8d9b466848ac342143284fbf23", 0xe2, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0xc1800) sendmsg$alg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x305) socket(0x2, 0x80003, 0x1000) 5.2017101s ago: executing program 6 (id=6396): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x40009) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) unshare(0x24020400) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)={0x38, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x18, 0x38, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@typed={0x4, 0xd9}, @nested={0x4, 0xc7}, @nested={0x4, 0x77}, @nested={0x4, 0xc7}]}]}, @nested={0x8, 0x3ffe, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x4, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 4.24345991s ago: executing program 6 (id=6397): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x28, r2, 0x1, 0x70bd23, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x4008040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000200)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) readv(r5, &(0x7f00000003c0)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) 3.058418807s ago: executing program 6 (id=6400): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) (async, rerun: 64) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}, 0x0, 0x1}, 0x90) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400163bd2c80c6db3c86b532100009abd000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a8008000280040001800800028004000180"], 0x34}, 0x1, 0x2}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_BEACON(r2, 0xffffffffffffffff, 0xc0c0) (rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="0d80c2000000000000000000819b000000004500002400000000007390780000000000000000fffc0000001090780200000000000000905610557724d4a628e1afe2751b9bf970c96180c1316d2fdfac64b35fa7ddd84500723e12856dd9fc0ad5ec7c03b443cfb2f82b05f02807c3b056ffbc54d7984c5250ffdc6552519c386f5992a44bbd2d4eaaff7a416f8e221fbcc1a642a56c88b981"], 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xb0}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0xa) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r7, 0x6, 0x21, &(0x7f0000000440)=""/132, &(0x7f0000000140)=0x84) sendmmsg$inet(r6, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000180)}}], 0x1, 0x20040041) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) (async) sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="38030000", @ANYRES16=r8, @ANYBLOB="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"], 0x338}}, 0x0) 2.939016448s ago: executing program 2 (id=6401): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000540)={0x0, 0x3, 0x0, [0x9b, 0x3, 0xd03, 0xda18, 0x9], [0x0, 0x2, 0x38, 0x0, 0x4, 0x3, 0x3, 0x7, 0x5, 0x3, 0x8000, 0xbc2, 0x8, 0x101, 0x5, 0x100000000, 0x6, 0xff, 0x1ff, 0x3, 0x5, 0x10000, 0x6, 0x100, 0x6, 0x4, 0x56, 0x4, 0x10000, 0x9, 0x8, 0x4, 0x9, 0x8, 0x7fff, 0xec63, 0x1, 0x8001, 0x6c2, 0x3, 0x6, 0x3, 0x5d, 0x1b6, 0xc0000000000000, 0xa, 0x2, 0x7f, 0xb, 0x74, 0x2, 0x6, 0x3f, 0x8, 0x8, 0x7a, 0x1, 0x3, 0x5, 0x0, 0xd, 0x10001, 0x4, 0x401, 0x4, 0x3a5e, 0x8, 0x4, 0x2, 0x9, 0x2, 0xc, 0x77ed, 0x0, 0x80000000, 0x3, 0x1000, 0x8, 0x4, 0xffff, 0x2, 0x800, 0xfffffffffffffff8, 0x1, 0xf, 0x2, 0x7, 0x2, 0x8, 0x80000001, 0x100000000, 0x0, 0x5, 0x465cb5, 0x0, 0x1000, 0x400, 0x9d, 0x2, 0x48, 0x7fffffff, 0xd, 0x7af3, 0x1, 0xfffffffffffffffb, 0x2, 0x6, 0x5, 0xfffffffffffffffa, 0x7, 0xdf4, 0x5, 0x1, 0x6, 0x80, 0xffffffffffffffff, 0x7, 0x2, 0x7fffffffffffffff, 0x3, 0x1]}) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff5, 0x9, 0x6, 0x6, 0xb87}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2000080d}, 0x24000000) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.684238835s ago: executing program 2 (id=6405): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) socket(0x14, 0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c000000100003042dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="150200000000000008000a00", @ANYRES32=0x0, @ANYBLOB="5f3c050b", @ANYRES32=r3, @ANYBLOB="2c00128009000100766c616e000000001c0002800600010000000000100004800c0001000300000008000000"], 0x5c}, 0x1, 0xba01}, 0x4000040) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) 2.64752783s ago: executing program 4 (id=6407): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000070000000000000055090100000000009500000000000000bf91fa0000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.334252154s ago: executing program 4 (id=6410): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44040) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40080c0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x1e, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) r3 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4) connect$inet6(r3, &(0x7f00000000c0), 0x1c) 2.13507011s ago: executing program 3 (id=6411): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async) listen(r0, 0x10ef32) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x20000000, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffc}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@const={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2, 0x0, 0x0, 0x12}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x42, 0x0, 0x1}, 0x20) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000001c0)=ANY=[@ANYRES16=r4], &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x2, '\x00', r6, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) (async) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x10, 0x1e, 0x505}, 0x10}], 0x1}, 0x0) 2.119926471s ago: executing program 4 (id=6412): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x9}, &(0x7f00000000c0)=0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x9}, &(0x7f00000000c0)=0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) (async) 1.990252409s ago: executing program 1 (id=6413): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') (async) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') close(r0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1409, 0x1, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x80810}, 0x4040) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1409, 0x1, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x80810}, 0x4040) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000140), 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff1, 0xffff}, {0xb, 0xf}}}, 0x24}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000248797385590e37", @ANYRES32=r14, @ANYBLOB="0500180130000000050019010c0000000800260085160000"], 0x34}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)={0x33c, r12, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc4, 0x84, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xdb}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="757cc53edf3f"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfffff800}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x101}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffb}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x14, 0x1, @random="766c6a162fe9fdaffc0eb15859b3daf5"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6a9c}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x24c, 0x84, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7e4}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7ff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="92170cfa82aa6e01d14c5ca3b36dc6b79889ea5d72e316c0"}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x23, 0x1, @random="e25ba758291850bb2b53b69f3607bf6a5955800fa26561097afc8136754119"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x40000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x40}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x80000001}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x800}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}]}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0xc14}, @NL80211_BAND_LC={0x8, 0x5, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7f}, @NL80211_BAND_LC={0x8, 0x5, 0x1000}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7fffffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xef6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xb08a}, @NL80211_BAND_LC={0x8, 0x5, 0x2}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x81}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xfffffffe}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x81}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xb}]}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x33c}}, 0x40) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x40, r15, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x40084) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x40, r15, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x40084) r17 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x40004) (async) sendmsg$nl_route_sched(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {}, {0x4, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x40004) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206030000000000000000000000280005000100070000000900020073797a31000000000c00078005001400750000000500050002000000050004000000000011000300686173683a69702c706f7274"], 0x58}}, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 1.906018267s ago: executing program 4 (id=6414): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x7, 0x1, 0x7, 0x1}, {0xfff, 0x7, 0xfd}, {0x7, 0x2, 0x5, 0x3}, {0x2, 0x0, 0x7, 0x1}, {0x0, 0x5, 0xff, 0x1}, {0x6, 0x3, 0x3, 0x4}, {0x6, 0x73, 0x2, 0x9}, {0x4, 0xa, 0x9, 0xb}]}, 0x10) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x5, 0xff, 0x0, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, 0x0, 0x4}, 0x20) r2 = socket$kcm(0x2, 0x1, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)={0x34, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}]}, 0x34}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x85, &(0x7f0000000ac0), 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0xfffffffe, 0x20}, 0x10}, 0x94) 1.738285437s ago: executing program 4 (id=6415): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113c00000000008510e65002000000850000007600000095005122000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = epoll_create1(0x80000) sendfile(r4, r3, 0x0, 0x1) write$cgroup_int(r3, &(0x7f0000000080)=0x8, 0x12) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@ipmr_getroute={0x1c, 0x1a, 0x800, 0x70bd27, 0x25dfdbfb, {0x80, 0x10, 0x10, 0x3, 0xfe, 0x4, 0xc8, 0x1, 0x800}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1.647850621s ago: executing program 3 (id=6416): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x80, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10017}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e22}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 1.374850007s ago: executing program 3 (id=6417): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES16=r2], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}, @TCA_NETEM_RATE={0x14}]}}}]}, 0x8c}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001300f5d100"/20, @ANYRES32=r9, @ANYBLOB="000000000000000008000d0000000000180016801400218010000200050000001e060000fcffffff0800290000000100a670ddb20d25b8b1df25fbc3c41a2ce400"/75], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r10, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NBD_CMD_STATUS(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r13, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x810) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r13, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24008804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00'}) 1.367239487s ago: executing program 1 (id=6418): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000028f}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x138, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x100, 0x3b}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x3, 0x0, {0x8, 0x2, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0xa4b, 0x7f}}, @NL80211_ATTR_KEYS={0xd4, 0x51, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x14, 0x4, "2f074fb6c3860141442d037f6acf3710"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a51a66b5d6"}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9e621d0922b08879103c0f8973"}, @NL80211_KEY_DEFAULT={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_SEQ={0x9, 0x4, "2be5ace890"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x138}, 0x1, 0x0, 0x0, 0x20048810}, 0x30000801) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x2, 0x0, 0x4003}, 0x10) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'macvlan1\x00', &(0x7f0000000040)=@ethtool_test={0x1a, 0x5, 0x9, 0x3, [0x0, 0x4, 0x4]}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="320500000000000071104be5cd4898ce2ba5b74aeb141d1b0471051d000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) socket$kcm(0x29, 0x2, 0x0) 1.322186638s ago: executing program 2 (id=6419): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)={0x44, r1, 0x615, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0xc040) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000150001002bbd7000ffdbdf250a80bffd", @ANYRES32=r3, @ANYBLOB="1400020000040000000000000000f9ffffff0001"], 0x2c}, 0x1, 0x0, 0x0, 0x44044}, 0x4040800) 1.075052164s ago: executing program 3 (id=6420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x1100, 0x2}}]}, 0x24}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x1, &(0x7f0000000100)=@raw=[@alu={0x7, 0x0, 0x2, 0x0, 0xe, 0x1, 0x10}], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0x9, 0xfffffff7, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000200)=[{0x2, 0x2, 0x9}, {0x0, 0x4, 0xe, 0x9}, {0x3, 0x5, 0x3, 0x7}, {0x4, 0x2, 0x3, 0xc}], 0x10, 0x80000001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1d, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc9, &(0x7f0000000000)=""/201, 0x0, 0x1, '\x00', 0x0, @lsm=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x1100, 0x2}}]}, 0x24}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x1, &(0x7f0000000100)=@raw=[@alu={0x7, 0x0, 0x2, 0x0, 0xe, 0x1, 0x10}], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0x9, 0xfffffff7, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f00000001c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000200)=[{0x2, 0x2, 0x9}, {0x0, 0x4, 0xe, 0x9}, {0x3, 0x5, 0x3, 0x7}, {0x4, 0x2, 0x3, 0xc}], 0x10, 0x80000001}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1d, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc9, &(0x7f0000000000)=""/201, 0x0, 0x1, '\x00', 0x0, @lsm=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) 1.072539026s ago: executing program 2 (id=6421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4000004) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x76, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r12) r13 = socket$unix(0x1, 0x1, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 1.046649419s ago: executing program 1 (id=6422): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:cron_log_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apt_lock_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004010}, 0x40040) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmmsg$sock(r1, &(0x7f0000000540)=[{{&(0x7f0000000200)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="35271279325b894fe40cd345a0937e61719eb02943d1db8cfaf2ee76bb958473", 0x20}, {&(0x7f00000002c0)="6e2616ce8fd27b3dfba1", 0xa}, {&(0x7f0000000300)="9879439c4062b76f1c087867cb3b10d5189ece470f3ed1b306d137047dabe0b1c8bc906a73441c9f814c02bc531812b06a10cc6cb05fada5fe6afb370ac350c55c3631dc4ef7e4297a7b9443dd65a0490732889759b45c0e89b8a5ee47608647ab24131c4cd64407b1383c6bda92699455aa9b8bc24cae7f3d354cf5cf40053fd8f4394a136eb1f1fa22347004a70b07dcefe23fb0eaf8c582", 0x99}, {&(0x7f00000003c0)="661b22840a7e61df41e36f190489eebcb8d58514588d90d0019d591ed21c3202ce0547a39a15752f", 0x28}, {&(0x7f0000000400)="826dc198abdc0edda4ad3ebefaa10e65", 0x10}], 0x5, &(0x7f00000004c0)=[@timestamping={{0x14, 0x1, 0x25, 0xfffff24e}}, @timestamping={{0x14, 0x1, 0x25, 0xa3}}, @timestamping={{0x14, 0x1, 0x25, 0xb88}}], 0x48}}], 0x1, 0x4000000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000005c0)=0x14) bind$can_j1939(r2, &(0x7f0000000600)={0x1d, r3, 0x1, {}, 0x3}, 0x18) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000640)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}, 0x24) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0xb, &(0x7f0000000680)="9fa948ff5b3766c71759a60240252014f89782df4bab6877f965cde9aa895bcf2cc5b621342783f29d0bf6f3961bc44d9e735283b6dafe85c54073d6ee4f7861aaed72480540da85cb56c615f2ed7efe88f2209af98b3a05873fbc88c020cc1b0b9821b6f73e1becd39db31aaa185a5c42c5bed3db2f27b05e8c0f0357f9fc4691b0aeb897f692eb8c304d9a8a3050534b9825ba7467c1f616132ffa2e838f9a3eedeea945d4d89cb45e1812c9ca6497f95018a071bbd91fdea313d5fa5d4dff5412a7a44bb076328a8313616ba5785c", 0xd0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={@remote, 0x0, 0x0, 0x40, 0x0, [{@dev}, {}, {@private}, {@multicast2}]}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000840)={'xfrm0\x00', @random="83675ad40728"}) sendmsg$inet(r5, &(0x7f0000000bc0)={&(0x7f0000000880)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000a40)=[{&(0x7f00000008c0)="8f742bc6bdb04bb27f2bed64435fe66959e56aa56994aeca9dc11e133f6d5fcbfed7b0be5e494393db70dbff993bfdf79ee03968184645195ebf8f1028619f70f9aa26909ea09641e2", 0x49}, {&(0x7f0000000940)="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", 0xfc}], 0x2, &(0x7f0000000a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x89}}, @ip_retopts={{0x10c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0x70, 0x1, 0xa, [{@multicast2, 0x3e5e}, {@empty, 0x3}, {@loopback, 0x5}, {@private=0xa010102}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast1, 0x2}, {@empty, 0x7}]}, @ssrr={0x89, 0x1f, 0xff, [@loopback, @private=0xa010101, @rand_addr=0x64010102, @private=0x3, @loopback, @empty, @local]}, @timestamp_prespec={0x44, 0x54, 0x9b, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0xd}, 0xf}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x9}, {@multicast2, 0x5}, {@remote, 0x1}, {@remote, 0x20}, {@remote, 0x7}, {@private=0xa010102, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x4000000}]}, @timestamp_addr={0x44, 0x14, 0x42, 0x1, 0x4, [{@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @ssrr={0x89, 0x17, 0xb8, [@local, @remote, @private=0xa010100, @loopback, @rand_addr=0x64010100]}, @lsrr={0x83, 0x13, 0x24, [@remote, @loopback, @private=0xa010100, @rand_addr=0x64010102]}, @ssrr={0x89, 0x7, 0xd, [@multicast2]}]}}}], 0x128}, 0x40) sendmmsg(r4, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000c00)="3b68fda6e545eafd019bce4d3081359653ba677037ea055c5ba7d0b16886e6b24c47eb7dac9c264916bd33622f5802c1adee848d40af3ca0eec8c0e9b718dfe8f4df86c22bfd528d24d30686e57e729a784e1e6c8c24ac4507988bf69e5232e706da03aba90fbb85f6253814e19968034c9f467968e71e596d97bbe96c24c13c24e6c1e8b03aa1f7dc3a0939f7", 0x8d}, {&(0x7f0000000cc0)="6e3f2330e7eaade4252c1a42c28a3be9c9c5ae0be85ba1e5e13878ef8ca2149f9720a766a170a6c26fcdb593f5b6c06cc2f06a403e3c47bf55d9457b4af9eec4af718a2afff3a41b7658374517e6910226c95d3e0753ca16dcbcd6948e3e93ee848beb922870a13f7cff5dae4de582b91aa192e2aab7a8514c15125866bf53ee7b81ffacc7c06cd1b1510723d866fbb11315c696ed8de70ce85190c1128a8f72fe03e05645b466ea2bbee88f33b824a7218b80cdf598a44a3c976db38d4c0148523f364239c83239e1e653d27f72e71021e390b657cfd171643163d4a7cbfed456397c5eff321847e7c2d14db1fff2845e3da30d3f8de33964cea6bcfe9ce9f31fcbd2cb1aaa71d06091447d9b1a8d5fb5edce2bc9bc80121efc8a4e0488f9fdc1713a00d4303f8e7119f2d04f63f9dfa1d9fdd258dd2673511da6c980674585efde3e6805e505e91005cd8eb614bf993d9483338551e6beb36c86de423b6a4d04e1c6ea70692f705c44a58abb38713eec0c9ef3d1bb74ae72be477f36067d3d4e2f44bd4ea88ad312479f4378d16314b77d0702bab39a6b6922ffbcbdf678e60991710dc36182c44ddc61c0f78d0a598d5ae2da5f7db5dad69d04b4834623666d7da1bd30f09098c0235e2708d1da3db150e61b8723c534d5af348453b5093acb8853c7a05c2b2d1834e2cc5a8e7e4a1b41b728fb257b2f041a2501a5b4c09f72e2cbe3bd7b2dd10124b75dd4dd84ded2a68efdc86c3896a366172afc0db505add45a5a50760187abaaf329a1376f00d7c51de4108fb636b4a92ed369b767467fe75266ba7737930a0c0712ee42a46a6bb1c6efa3a7dde223193ec40bb2492ed960c46b1e33350ceaceaf48697e243413b2ecaf46114e10a9d533312dcfd8085f94724064777ee47b27513c36f6733f2db87083fa9567dfac57c2ea3d6695138642a706f65fce10c4a06816a24ef89eaf67d078618d775f802470effe8b7b8fe478ec0b4a01bd32d9334b519905ff3e07005f4c74d841dcadd27cc4e65cbf55bfb0fdaddcf4f57786dcd30deb4f671d50921e41558769137fa9f6f556e9007c4efb97fcdc6110a6eeedaa58b9ca5be22bf3b0c07c61c56a696ed845aad626d71d09e8c7c6fba5197df739979de31ed7e93e8bb12a22e766b90f7e9bf49f0bc53a54241c1629d69df886f6e0d25c3cc58422f592f39db09c61b1c905afd736c4353d7de19a15773e736797d9df9812ff1ba78c8e289e465408741cb4d1627ce6a54eb3c0e085a0c02a9ba5839526af7ae25d66cb1e8aebcf0222f0d2a47b7b621d6c217569ff7e77e579e679fefc00d3a70a762d57dc1d827d4b7fab520d9cfc80765140e290fed4a325ae2b2770ca689b836cbec7bfb02ff021b3825816434e6d4cbeadf4feab54244d16f4964a7177d2c6b3b86076605e9985989003633571aec29fe1a2d74bb7efe06aee8261428ed731d6f77a923be644f2a12d9edc30c95fcdb1e0b00cf9858ec795e0168414d828042470ea8b307ac9b27b8d4ca61eea603d062b0e554fff9b9cdbd82972ea2707f17d1f419258dbb81e879c9493fcafa84f05b20e216eb1c1180f9de334b6096ac43b464dd2ab1aa58b9194e7959ec0d47502dc042a26f1fefc9ebdeb416354abc333c35096bc5469586f0e3bfc6c2e6235c32143551df6dc0935df1448e5e714e45cc41d46e2a191243ef12c482ad9336c7694608de808502d94e8297741afae6d25985131a1a7a9d757dbfb007829fc0ec3d03545a42c57415ee979cb567007decfb8435cde58abe737535b2c5df7ba79cda9172f8624ff029c3bdffb02e4d87e3b016e1a36ccdb5fcf6979fef02707c43c20f937c415198f443b339e1b38cabf1925b8f2e9a7580a8c7c3dd5dad38825b10164df02b6579dbf67dcb4c36e7c7e7e5bb37769cea9919231c229ef38229fee5980513846c863764067f07527a2580f8113d38bd820995eba740a0cd312538c0141f3ec2911de222e77066c87fe5f262cffeb90e0017c97925df7079da8cfdf49ec2733b5da6039416a77c2f05057c7b6bef3f17ea7a50fe4b74b0c1b2591c5f6da9485560929fe1e8a3f484681c0fb9e33a7e2f17d6de1654aa65de7fe612d051df2f1cb424e5aec02ab7a5b8663dae15b2015a64e48130264f52e73dd285439b8c1d4c4d2926136505bff050130a7258635b2046f7eadef487bf8825b2abe1d916deedaf2898bf7d943678caa738204e0a967b436cc119d5276ec8985886d0e2464460df46efe22c6ae4cac9a3cdd1277c43e9c3cef2ec3ca112571311c602132ff2e58ae137f159304b7c769f99768ebbb377d396a91141d98bad4f45338c08d0d59199fb67a743f89e235d837c3768d716eb5db8d6b6fd595f0ccc4058b34824eeb2c7ddc54c005471e0f8f25ef20dc4502ecd362fdced466266a3f560ad5d72da5b397b643f2196d5477e061d713c985af2ae19bbde6b328ff1dbb839dffc85a99e0ed1b2bcca6aefa09aa31257e9cda475b24b15d95e86ed9dc9049841d377816f1af8327284a4adc435839ed71809a6365e810848d7f7b35337277c508b36e3d02310367d766892ba6ef80c2104f321498b1496587f7516c639b6e44b74984d5bef694b58b68a8e7f3675541b06b03bcf2f52cc25a4e24a6062667e6f542fee83e9ed82b0dbecdf6fdef6c1dcf3b69cb0ab87d7cf813832cbe8ba61991a0b0d1510c7ea6c4b339d085940e79f1b276b4b2232c33b74a195d6a5b893828569028c5529af4482398046d4b42603eaceb1c94bd0f0e16eaf58041ae7d7f6f72158ccb4f49a364bf498ec8c24fd81ea96305c64cf570b7fc264166ca6c631906b5aec10904c935ec1fb0fe7de2b09cea593a9a5d84ae88c4ad4ca3d9897a11a5d08f22bb5df3c80caa5f2a345700421128f7bd96bf68de73576602d51d30c70605f06c8fe62f0fcdc7c1b6f36d16f9af955fbb701269b27dc47029081d86e00341fe56e60b36683271adf3c6764f9fd85f2a24060a971a80971cc51cbb8ef9723fc78f84566313b64e29a837ce8d6c2af40258bd4cc77389b74f5128ae8aae3c2a43be944474553c7a10d7320eaafa3b0764081e1e1bf83b9fc2560d011c9e56f984a921224efa6696c6f7a7399cafec952d64b5805dbf5a49093589ac63933ddb44cba73c24a11ba2bce93a46e66b2baa92c536e05ec1fc7a1e821cfb10662b027ca57dc66aaf41df5b199d8ee3f18b746a894f75739fcbddec7403081633ead585b776b145b4cfe2bcdbc8c8aa5656a8bc6284b82cc72f33149f803e2dd770b7dc8f74d9b2814cc8ce4663ad31f94db630d2074dcce237cce57d3a906cde5348754dd69bdf0f6077cd1a5a2e9b23ba4a9c220844a11fd70c4e3d3c4a938718ee50daa72e32e2655cda74fe092d0f94d6a5afa009e3e28feb819b20fdd640da68f7335b24242efdb45d3fd2eabed9e151c3f508facc6ca7a8deac4576c5f47e11c65a9cd3a984a1239329ab4fb287a113eb79d5e37d9d1e0c9ded5f8d2edeadd5d4cc3de08e1c8c5147f9a2a67c9ffc09e5fc49233538254861489054d7861bfcfb9e43dca511facdffb29095ecc3dde0b5a0d2b07eb4c99e4ab6a3d6b63a81b43abd2443bd9737d04b38b76447c31e076942c784c830a950246b5948371c6ce3740cac281deb11bdfcd7ef595cd63a767d2884e591afa88e2e99b2c7c637aefc7839d6d183b902e7cb625fea2c57388ee2d2d28523a3bdac1ba7a4d53f41f3496d5880fb0caeca363682953d8da5b00face7990f0da639cb5faf922fd1331485423496cf18b0aa50a2740836f685d53a236746c4d6a1f26ddd665c59cbc11bdfa8a9013e62fede549ca42295169e54a935cd6434ee291bbee8afe53a4825c768a270cf38f733eb47b4d5bbecfa59d2b02e9118055417d3dca26fa72c55b9ca40c87941be7971b3351f94563b4e138d800419bd5fd5e1b1bc230db4ad3342bc6189d6c321aae44b8f96f1f03f85a2cfae18f03e820317e04106d4e41bf7859e62d2117feb25e4d2663a5eb23fb463c6fea8aaec0ae91965304018d2ffbf87d9b71cfaefef95d28e04a7cc2795b852ac1986c7ae49704e97ee5ccf6a761d172cbd4659841839f3867a88e46f4e2c96eaafacf211acc33ce1dfd6b7c1c214fe5c8c9e20c14b915a6e0811c35cc3281fea45574a8163b1507d8fcddc05751549cd4b88fa0225d43719bf883894f87c850cb702b0eea25d390a2c91d9efb61c2e8ca584dcfb97165386f632e7b91249dcfb6c18427ab31b861f6ce3d4d2912cd5c1c9e389b63c3351cb311b755a6606370a8d35d0730d2a201a91e2650b1c30cd2454dba1ed67e3760444e6cf5c6735d455a8db5fba40bec9f1e97cf67f1e1e3378a47a56d0cc9f8f68273aa87b60bbf38f845f1c35b5234a2d34aecab38ac6cf5fc19cec86921ce3e664e3d0adbfc29c688e57eeab6ea35e71d8ba4ba2ddcf3a06e6d6aa0b6ce1a81ee2271333b2393c1f96000ddd4d48e343aae6e12ca76a98795ebc581a2e98d5f9ddb6c5101d994f74d9b4230552fb39e89da1c48a23fbd71b627e2d1c051db43849f12dc732cc4dd8b01e5a7f25c992e334662c0dd43a6fcf7a0f82acfa50277041af26167d5bcd3e398c1dec093e4f1ee5a5c5168b465e623ea0ae119264c5d7c1e1ec0ac916020fe530294e8dde25bfa99878cf25282216b237360fd60c0874b73605fb21ba847759213fd5db91ff34edf4cc0aa48dfc3df819ab98b173aa11a5be37e37978f1e4a636935c25e3726b0b97e2d5d01a853357fea0daae27d6804cc80405019d545064db5a4b5b73cda00a71987ee1017ffef1641a0f5653eeed07c9ab8b28809fe91fd7152d0e83c1e924b70b2f2a38d89ef2a880f803321b497d099821e00a31962209a9620347fd0539f688c4cfa5720791d4a4129a25893d906ac85a4275a7f1a1292d778c53b4a394185ca3e549f90b1e09a373b918500c6c18d67b3a6b251f7b6c212f7037320646f870e92b7bb859dc594d697d63ad5830a802893faa30a3b9892212c3e3e254a59ee6622013e44d98df334f23c4f7e547e12d714baa34d9186226d86d0f1735069025bc184f4729fb351cd7eb2e18f567d4aedf54818968563a935fb3379316f47a91c9104e39bbc730ecd08f76afa48781f148dc072413692872ae04cf426863b2d32035cfc1a82b06c8c22ed2781287daceffb3b65727d9511e5ace1f44d76afd48c9a95cf9436475a7e1cc9eebe923cd326cea1ec75cfe0edd351c4e5f4ff847bc22e8b06af3330e8f3b7fe72e62e80aa448876c0d015f808012b5f99661f8db0da6297c7c8ec84c359959347297caa84c0edc2168900c2be7f0bb9c5cfaf24e457de5d3e583dbd3864fc7453010bd0b098d827bf0910d005fa064b74b4af9f433268417c69322e7a5272f771b2b46d265182e6deb956bf35f5818b5a82c4c74ef02acbb79aee99b0f2029957f58e42da6a318e58d80b5192125153b4dfd9b2deb3926b3e3c809054c26c3790f55f8e1855bdf125e1fecf17f7aaeb535583c00501670fe1ed64b9f3748ba0c44f99e68aef5daba461ac96bdca4532e06650754e5728db0f4504084e9d0ce7830ea96a2e0c2419b409f7af7d1ccc43f09f78106a3038670521f5b9fe88c5cf3cfac18fc4dbebf3c01cfce8e5aebae4d8839d480898549066aff66798fd665a4e79e2ba3673526c9659b65dd7a431c1b1e974ed5d77746b5c05a388c24eb23d6e6d9048b6f26881669078c85368a97c54a6a0646d0", 0x1000}, {&(0x7f0000001cc0)="828266b212fac5eef5dbb4c24e759c2c0968bd505f327be41baf44a2754b622779099f0e66187168c2144522ef2a6dd1dbf51b0aca7f585c9cc6515516d11fd03e6ada03839f88c3937ea69eb62be457579d512c170f09a6ceb4f3df43a56ec460f6fe1f41a33ea69b7d396a719bc1a5d837397178a457d1424b89c424c64521e34250e642c8d26b236e3ab53339f416194a8ad4e49d08618f2564286bf0107b5608d066c7614374e39178724f7f0aab84bb47cd4dec5c9f5b325fec1d838e80e42cd5975089bd275f0f14a2803d3ca12d445084d45ef5a97c529b746d10921f0dc9110dbe46e1080542648142c2950e11be6816c2", 0xf5}, {&(0x7f0000001dc0)="26df21c1ad58d7f3099d161cc0b572c6273375ab8e574540f6e102e6c4c8f45c4fedb7c16978f218bbd1b5f2e9b867ed7ce55890b1526ccab7853486ff21b5cd63b5628aa0d5fd5355b7c8a25a92c4886c59d15ae2994c10624c6a3aa3e856d40d8d72d9c43b43abea7a85f753478724d2148659f771135959cbe95d775a58e7d2e7", 0x82}], 0x4}}], 0x1, 0x4) bind$802154_raw(r1, &(0x7f0000001f00)={0x24, @none={0x0, 0x3}}, 0x14) r7 = socket$alg(0x26, 0x5, 0x0) listen(r7, 0xe) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000001f40)={0x3, {{0x2, 0x4e21, @empty}}, 0x1, 0x4, [{{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e20, @rand_addr=0x64010100}}, {{0x2, 0x4e24, @rand_addr=0x64010102}}, {{0x2, 0x4e22, @private=0xa010102}}]}, 0x290) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000002480)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002440)={&(0x7f0000002280)={0x1bc, r9, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x16, 0xa9, @random="597123f89ca76840d2b029ec675be23cff2d"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xa6, 0xa8, @random="33168ecf92c8fe7d3469d64bb0c250c14f61684c13a7cae429cf2ba2d417b7fca45a998c63f8da5076e9c31bfb170ae153daef323070cc9dc8eafed69d7b7c8f01870dea3d7c9cde11951c979e105d5252d4b044752f4e67e6044ee5cbaa66498ff10f636599623cf21f1cb2f5068a03644b655560bb41d3246dd93ceb21bfbfd426192017eb95da7a0e0fda33c71c97320924077a7c42add85d05664bf83a606d46"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xf3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7fffffffffffffff}, @DEVLINK_ATTR_RATE_NODE_NAME={0x9c, 0xa8, @random="6f7bf9c696620a139f343c6d798cf491e130f0b3d3e92d96eeff2f8ab04f22c52f6d75180fd8c7e94cfdf29d0719ec8e06d599aba61f7bc829ee2a871df60471fefcb49fb77f43691f2dfa785685b095afc24528c525396784b93a4279231dc899b39d91bca7872ca8694e11245112977fda712bb626d05da2abb7512d44e9f912262f8d736b2f6fd55f284e976f37a8b63fc66769292511"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x37}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x101}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80}, 0x4c894) sendmsg$DEVLINK_CMD_SB_GET(r8, &(0x7f0000002640)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002600)={&(0x7f0000002500)={0xd4, r9, 0x200, 0x70bd25, 0x3, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xe0}, 0x4800) ioctl$BTRFS_IOC_ADD_DEV(r8, 0x5000940a, &(0x7f0000002680)={{r2}, "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"}) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000003700)={{&(0x7f0000003680)=""/48, 0x30}, &(0x7f00000036c0), 0xb}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$netlink(r8, &(0x7f0000003740)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc) sendto$packet(0xffffffffffffffff, &(0x7f0000003780)="ab97f55bc4d4ced27238753d4e6afdbe3de1f1326023df1d14745be0c21f11dd24d3e2bf110c2495ac251e3ba732104d1dc946a77e555c610fc2a73e965722e74846a578cf613a6eaa493a1468cf32fd770408ac6a1f22bde3280e02f32e433b43a71b5a41b4a9db35a1de85956e387df2f5edb086ab4508c66e5d82174ae66b39b4737f7ab52e35", 0x88, 0x4000000, &(0x7f0000003840)={0x11, 0x1a, r3, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) 892.675216ms ago: executing program 3 (id=6423): ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000000)) r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote, @null, 0x1, @null}, &(0x7f0000000080)=0x1c, 0x800) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r0, 0xfffffffffffffffd, 0xa, 0x6}) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000100)) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000500), &(0x7f0000000540)=0x4) r2 = accept$unix(r1, 0x0, &(0x7f0000000580)) recvmmsg$unix(r1, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/27, 0x1b}], 0x1, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000740)=""/65, 0x41}, {&(0x7f00000007c0)=""/56, 0x38}, {&(0x7f0000000800)=""/210, 0xd2}, {&(0x7f0000000900)=""/118, 0x76}], 0x4}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000009c0)=""/41, 0x29}, {&(0x7f0000000a00)=""/42, 0x2a}], 0x2, &(0x7f0000000a80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/121, 0x79}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/86, 0x56}, {&(0x7f0000002c80)=""/47, 0x2f}, {&(0x7f0000002cc0)=""/31, 0x1f}, {&(0x7f0000002d00)=""/42, 0x2a}], 0x7, &(0x7f0000002dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}}], 0x4, 0x40000000, &(0x7f0000002f40)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000002f80)={{0x0, 0x5, 0x8, 0x6, 0x6, 0x2, 0x0, 0x46eb, 0x2, 0x8, 0xffffffff, 0x5, 0x5, 0x433, 0xff}}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000003f80)={0x0, 0x4}, &(0x7f0000003fc0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000004000)={r10, 0x3, 0xd0a}, 0x8) recvmmsg$unix(r7, &(0x7f00000042c0)=[{{&(0x7f0000004040), 0x6e, &(0x7f0000004280)=[{&(0x7f00000040c0)=""/242, 0xf2}, {&(0x7f00000041c0)=""/135, 0x87}], 0x2}}], 0x1, 0x10002, &(0x7f0000004300)={0x0, 0x3938700}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000004340)={r1}) sendmsg$NFT_BATCH(r11, &(0x7f0000004500)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000044c0)={&(0x7f00000043c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0x3c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x54, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0xdaac9da2af7b7551}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}], {0x14}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004010) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r12, &(0x7f0000004540)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0xd}, 0x1c) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000004580)={@loopback, @local, 0x0}, &(0x7f00000045c0)=0xc) setsockopt$inet6_IPV6_PKTINFO(r13, 0x29, 0x32, &(0x7f0000004600)={@private2, r14}, 0x14) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000004640)={0x0, 0x8, 0x6}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000004a40)={r15, 0x40, 0x1, [0xc, 0x8, 0x200, 0x265, 0x5], [0x1, 0x1, 0x7, 0x6e, 0x10, 0x82d, 0x3, 0x8001, 0xe6ec, 0x5, 0x8, 0x5, 0xffffffffffffffa9, 0x0, 0xfffffffffffffff9, 0x7, 0x7, 0x9, 0xfffffffeffffffff, 0x9, 0x3000, 0x6, 0x3ff, 0x310, 0x6, 0x6, 0x3ff, 0x6, 0xb038, 0x3ff, 0x4, 0x7, 0x1, 0x2, 0x7, 0x0, 0x5, 0x101, 0x0, 0x4, 0xffffffffffff3983, 0xd33, 0x5e, 0x64, 0x4, 0x8000, 0x7, 0x6, 0x3, 0x6, 0x7, 0x80000001, 0x1, 0x2a, 0x3, 0x1, 0x1, 0x3, 0x1, 0x3, 0xb4ab, 0x1ff, 0x7fffffffffffffff, 0x19, 0x2, 0x9, 0x80000001, 0x0, 0x9, 0x0, 0x7fff, 0xa4, 0x82, 0x4, 0x8000, 0x4, 0xff, 0x9, 0x7, 0xe60, 0x2e18, 0x6, 0x2, 0x0, 0x0, 0x6, 0x1, 0x4, 0xbc5, 0x2df, 0xb9, 0x7, 0x7, 0x800, 0x80000000, 0xf, 0xa73c, 0x5, 0xe, 0x6, 0x7460, 0x15e47857, 0x9, 0x1600000000000, 0x13d54032, 0x1, 0x1, 0x4, 0x3725, 0x9, 0x8, 0xd1, 0x8, 0x232, 0x1, 0xfffffffffffffffb, 0x1, 0x0, 0xffffffffffffffff, 0x2]}) r16 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000004e80)={r10, 0x8c, "c940a01074481a03423b91474790ff9366d08d9523c1cd09a335347d9c417f0c9711324bf156148db35a7603d4ce511db3ae35944b2175c3a3bf846165f595e080c8f41299ab57efd665b0345ea47be4bfe803624a40d97a32b757d561047b32125769617cdc9b5c45488fa409e8df090d5e2c323d8abd594365fc184b27f4cc6a5b6a96cad75ba6ec0e84b9"}, &(0x7f0000004f40)=0x94) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r16, 0x84, 0xa, &(0x7f0000004f80)={0xfdfd, 0xe3, 0x8002, 0x2, 0x80000000, 0x8001, 0x69940000, 0x2, r17}, &(0x7f0000004fc0)=0x20) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) getsockopt$CAN_RAW_LOOPBACK(r9, 0x65, 0x3, &(0x7f0000005000), &(0x7f0000005040)=0x4) r18 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000005080)={r17, 0x1}, &(0x7f00000050c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r18, 0x84, 0x10, &(0x7f0000005100)=@sack_info={r19, 0x3, 0x5}, 0xc) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r9, &(0x7f0000005200)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005180)={0x40, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xcce, 0x27}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0x854}, 0x40) 889.6211ms ago: executing program 4 (id=6424): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000003400017000000000006ef244ed2151630a00000000000000"], 0x1c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0x5, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x2c, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x12}, @TCA_PIE_TARGET={0x8, 0x1, 0x4}, @TCA_PIE_TARGET={0x8}, @TCA_PIE_TARGET={0x8, 0x1, 0x6}, @TCA_PIE_TARGET={0x8, 0x1, 0x3}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}, @TCA_U32_INDEV={0x14, 0x8, 'wlan1\x00'}]}}]}, 0x88}}, 0x20000000) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001114010028bd7000000000000800010000000000080003000100000008004a000200000008004b001300000008004f0000000000008913000100000008003e0001000000"], 0x48}, 0x1, 0x0, 0x0, 0x4004880}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0x10, r7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r10, 0x4}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r8, 0x0, r9}, 0x60) r11 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x5e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4000101}, 0x1c) getsockname$packet(r11, 0x0, &(0x7f0000000240)) 766.979898ms ago: executing program 1 (id=6425): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000000)=""/106, 0x6a}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}]}}}]}, 0x44}}, 0x0) 736.639517ms ago: executing program 3 (id=6426): socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000044, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a31000000000800"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4c002) r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x1, {0x0, 0xff, 0x1}, 0xfd}, 0x18) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @local, 0xb}, 0x1c) listen(r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000d00)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000d80)=[@iv={0xf8, 0x117, 0x2, 0xe2, "43c91bd3ceaf92cf8a7bfbaaabf4d243295f28dca8b1d655383ae7d553c4009f2b72bc2ed2111f4e8a279ddf0e2463da698c9e5a838c41072d418e0afe2d26e269ced4afce31b82d91b7882c1b63ba2cc43b9669c7b8a980899a5b29b4207980a6c81cf5c39b31d1a829f84fb693e1d1e9b895a5cb043aa634273fa7e70075978323400de473e45ca9a1988beab4c93dbafbf3a451c540d783321b03a0eb5c9841e10384b49aabbbc5681bd9b28b9e1a519183bbd5225eed9405fad114d9e45c26859d74f2244dac96bb4fa18cacf038cbf7d150668bea57b7c928077045355f04cf"}], 0xf8}, {0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000740)="b3e61afa154e23d076b139f149510e36f7be5674d61efaca67dde2e59b6c0c77b999486057c3c3490376ddfe138baa45810d611e54fdeb1c613b293d4555d754affb67f82d4145ef3954136c2caf02ffdeba8f09cf726e0cbaf3e0e179542fa6eac78932e4bbed2fd926382428248c1f9e59dfa46465e68a09d4ae3ab8a84678bce3effa269a3fc10f5020851c82a738e463c4844130622b975af58fbee6c474ff8fce6abc591f574d93cb313b2f5ddf3596c2650a893c9c3bc759d475f33bc883e3f11ec67c669671ac26b5622e7916ca9e865304f55482609fb9abd66baf1aa6ecac6f72b5c803ff04648951", 0xed}, {&(0x7f00000002c0)="d7", 0x1}, {&(0x7f0000000840)="8abb411e11afbd848c19cf11df41927ac2018550d917fbebfde9c135f1f0ee9dbf977ae31f44c1a1715d4ce22607c1cca4c650ad4276393d", 0x38}, {&(0x7f0000000880)="b4fd9ea84e54739a8553a8", 0xb}, {&(0x7f00000008c0)="716ac244cbcf1620db4a9ae549e4d7bb6c091bf3f291380b49c3b41853fea1f15c15dd95c4043ecf93d6a1653bf25e0eea8854a6bca0c5ec2ac6950fa10acdb5931f82a8638e945e8a45ae81b1a87fb7663633f3a6224d3ebf7ff6dc5eb851e36cb96bd02e545256a40f11946a2c06db71d35a77d20a5f610cb0a87116d1a64c8632fe23bad9f4b7a85a655eb29c85b6e2cbda786b401de9", 0x98}, {&(0x7f0000000980)="1a4edf82414b4d7262bd927fc3dfdf843e0237035a19863c38387b3c32787ede589c116b538fdf19c4def8c652d755c5819d84e99b95", 0x36}, {&(0x7f00000009c0)="df46eb274fdf9fc9c5805625a6c6592185fb394ca27891cf986a91a1ef27c558ec20ca86ca4654fdf7ce6bbb", 0x2c}, {&(0x7f0000000a00)="15fdca0a5c1a7d9193764748d46cc1011db917d3fb60e10e770b511280da5abc010eeca7872e193966524447f2ff930c9bec38db5cca5d3d7e47218eca1a6141eeee1cf889af73c90ceda01e595fd9a18f0982e2914aa6a6e9abeeedd48fbae52f5b9f4f8e83aeb94befcae400e56b97265f3724c5c4b0ca04744ba55b0a18bd220104ee1b4e3b89ceaa3bf9cad9a6d157025e3e599d3264390ced542d", 0x9d}], 0x8, &(0x7f0000000b40)=[@iv={0x80, 0x117, 0x2, 0x66, "67b82989fb873ad3fc04e98432d62741d4af260a76de3391f5e91e8e85cb06a3389652cfcc7223ce4c9bb16e15b0874402508e73908cda72f9dcd75de9f71dfe0d678ee6514bef7be2849ebd91f8a8d9ff2fa025d831884441fc5009ceb1045b92804fcd4558"}, @op={0xfffffffffffffe50}, @iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1ff}, @op={0x18, 0x117, 0x3, 0x1}], 0x110, 0x40000}], 0x2, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0xf, 0x2, 0x6, 0xd, 0x40}]}}}}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000600)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0xb3, "305d4f36c49749f18ed262dfae69d2d1114cb3ed9502d27a91f64f56881ac83edb1a4b03a044844331519ed128c177d52ce16dd89eb0e85d2cca016fcf83dc325c8ce91ef94bf3f4f96fdbe92fbba29849ae431b8c1d918e90c205c816549d0d07ca3d5cbdc307fbea194c9a83628cd52b17094c441bff0458ac8cdd1979ec685a39a9dd98ec930a4baee2e017eb7826d0007dca7875c51809b9257f034fb458317efa999161ff2c620dc60af60e229fa1a1d4"}]}, 0xeb) 344.225284ms ago: executing program 2 (id=6427): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x4}, 0x80, 0x0}, 0x80) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2040, 0x0) 146.994641ms ago: executing program 1 (id=6428): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd, 0x2, 0xfe, 0x0, 0x8}, 0xe) shutdown(0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000340)=""/231, 0xe7, 0x0, &(0x7f0000000440)=""/240, 0xf0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r5], 0x448}}, 0x0) sendmsg$can_bcm(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmmsg$inet(r5, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000600)="eab4f4c929da20907018a728994cbaac1b24ab09b98be7cd81984325d68d5fe42653d3f6386b4ab3653764b86746c531ddebad7c6d43fd0a356fa3f638a728228530963721c9736e79bd7d3536cdd004297fcf6c54e502e65281f45e0890f6188b1f3856d7feed2c511e4461938add8a1dbbfc6a33ab400f1b8298792d18dceb92bb68731ae20bc22ca764fced621a2470da86cfcad09c990b5022684e4145959dcd4ac49a317f2fb50c3596f8797da31c52a12c46e09a84b146184ac45be69de83ceb0b129038f4770b584a9fedcc0229141734071c958b2efb9d98722a7e1b858ff9e151af7801bde767e334eb427300f5a7b557d15f4d67dd", 0xfa}, {&(0x7f0000000700)="a9fac573244d21ce8ea5f0ffc08ce43477cb32b7c08d4ade346a62e5fa726f12cbc6cd6488840edc0931a9ab8647edf6ab35b3b45361a5de6d34d056059ad0faa1c6db81b7cbbf64aa1cc7c677cd31df4d93e34600c5ac9522eeb07da2e16af42c228d5d566eb3059a21d29ce324e2ccdefdfb40650b1a9bc92e8600bee4e78cfb5aa8d3bf576ca2b531ddb7e28d926fbec5de95b64e92f500beb5f97b81792f0bbc5123b255d358adebd6b8c61306d64b2685527363c958f419c61fb13d79b1ebeec4d09be64db4438d928450f4611f828edb0a30cf8ab9abe1090c957527fa9657317db7d9b34aba8c8cb57d042e02db", 0xf1}, {&(0x7f0000000800)="4fc9b83472ffdc49d48e6efb7158816b200eeb27ccc2c29ee1b0a0d2e4f868e5ea8fd426c7a41d0368c94e4ac0b5ed7c61f5d098a24fe16bece9ecf79e1615ff3dbe4d139a8ed0e5f67f76cb71298eec36ff3afba2f9fb408619b3a251ce29d1d66770ce784662877d379e1ee9487d973bc9ef87b6b35fc925cb7ab6aed93eb10860283eec68a36be008fa702cc3244e135b4486e67d93be64764b2d522d3893813bc5af9fc0664d5bd9c63a97e04b0f2cee6f5c696e377277b1b747ff0fe5d0f31eaab85b943e57", 0xc8}, {&(0x7f0000000300)="97cc63b1a48ac93ac845206ae56312d1038f750b80cc0619f8f553a8", 0x1c}, {&(0x7f0000000900)="227afc6d209772a3e96dc56e0eb17092628a15bbc70b0387a383e75398ddd7e5526f48705efb121464eab3a1b4e87f6b86e7781474d30c4d54cbc2507309b62c74fcb881e1a5d1f5a1645ebc1b285bb2683c16c3de019395fdec2d2d7ddc09855c1675b99ca5f91f10fc8c9c4bb74ddab3620ee52a8494ec570c5bf061d979d00a5c9c16424d1ef736fe7469462313626b16e91bff3e2486a824f11898593b95dd467c7b3ec736173d3170961329b3cdfea6a5df7877b0b939b1bab7d499583471edf42daeef5e40a0", 0xc9}, {&(0x7f0000000a00)="86de1a8cb813cd7a274bd5d884924a19ecd953e1a5e4698d6d3c3fa62344d92d30227b90f2fb95c7a417b0a46504f6cc2128c94a9fcd5e3749cbd739a8cf29d30a8aa2af39e040db03d7e50599e92b7a678a32eac26d4766df7961d7df516fbd0c5ff0debc9e96", 0x67}], 0x6}}, {{&(0x7f0000000b00)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000b40)="9858", 0x2}], 0x1, &(0x7f0000000bc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x2c, 0x0, 0x1, [0xcc7, 0x7, 0x7]}, @noop]}}}], 0x40}}, {{&(0x7f0000000c00)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000c40)="81eb6fb15383fc68e62046bbd525bb8f504b927f1323ce1e8e43891aa2ee5505fc2cddf21efea3916caeec62ac2ccbd6986133f51e4a73d2848543278d7b5c927b7b85842ad7bf417b0aa9299970d033ccae76eab4dcabb6f75bb20bd7c2bc1efe8557cf0f18b52eee0415b9aba25c4b126315c45f3a45a9e312a4ce9754bda73e759c67e510ad7c99102b76001ebeba16b872f42a4c82898b859f1578f1fa97caca07", 0xa3}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000000000000000000007000000440aea2fc55561025862000000000000140000004d0000000000000002000000f8ffffff00000010110000000000000000000000010000000100000000000000"], 0x50}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000dc0)="0d76880148724d9c99a5b2796d5f2478f8fcace7e1bdb116d352f7eb0169f28d20924764ab2bfeb45fc874bb54193943000ec2bb5b53441d7ecac70a1198bae034a7d0a9369e9400d39b0724b051658ccda24d3930635d98e64ad6734127456ffe165b7036abcd227e577cbabfb9c761559ec2efaad82cf630e24c77f1af8d0a9f3d0235", 0x84}, {&(0x7f0000000e80)="9a9680b7730bf9c9e45c8ca855fbb7609bcef710cc0c8f712cbd6774d9fe6b1d7d8ece8382fb51026781cf94be5c8937e9bde85153dd031ea7821513cffc6e758dd99856a6c0a64cdd2a1da5fe3631c671aca5e5035623e3ba10036d1fa886290ba70cb4af166e3bf21c7cb74ce8d7bf0749e7ac", 0x74}, {&(0x7f0000000f00)="41bfe0ce9b4fea687679bc50696915d0904977080c50a65f22f1029d9b7f9a96296f17c55be330ac95eabfa37ccbf68c0ca2c700d222678210034d49", 0x3c}, {&(0x7f0000000f40)="df4c23056e55289bd5b41bfdcf3a84177089989cd23d9d6c08fc716c2c9e81e616785d", 0x23}, {&(0x7f0000000f80)="8b1e401db79b7ea32a4905255dbaf5a1effc482028d1cc9de48370574b0e54320a3040b373d6e85b0659eb91c592d715a6b6e4a725ee197d20592b3f84b9824838a64649e0aef1c52e5b4f188bcfabbc7ad52a48109b8c7114eeaa3e6413ae9b6b57bdbd2c07085c24d863464634fe71a54b77f4f9b8b158", 0x78}, {&(0x7f0000001000)="4f76779aeed9cbe5a8b12688519bfab2d5ee91d3bf8b1e2dddf91ac0c2e39d1a84f49ebfd9025e4bec8467842c56ff57e10f57358c428e6005de5fccfde60225fc074a96c7c6665ed2171c4e20250a20363fe809bff2aefbb432d307320ceb5cf0748c98c15e0d974865654fa156dd011a3655c7eb815f6d6dc0ab38b4e899d1f5960f25d48610b9a595161ea50ce10a8e705a56265949d057f10a936aa4943b9245f002594d1afafd7ff14687f2fdbcb35859d0108d5e755d323d9df36c9f14ccc56d63814b454be57bc1", 0xcb}, {&(0x7f0000001100)="71beb80c2607bc789b03df302a85640755a0be16a22a1cf325a34cc767174730ceb60b9303d69d454483b4ee0e", 0x2d}], 0x7, &(0x7f00000011c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}], 0x38}}], 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="4606090047929eae9951000000001c00128009010100766c616e000000000c000280060001000100000008000500", @ANYRES32=r6, @ANYBLOB="08001f0009000000"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) connect$802154_dgram(r0, &(0x7f00000002c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40081}, 0x804) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 145.951779ms ago: executing program 2 (id=6429): syz_emit_ethernet(0x2b, &(0x7f0000000340)=ANY=[@ANYBLOB="72f15120660e0180c200000088f7f3135582e29841bc34b78487fef60593c9b707458f679afedb4182412d"], 0x0) syz_extract_tcp_res(&(0x7f0000000300), 0x3, 0x1ff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x8000000000000001, 0x3, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x1000, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r1 = accept$packet(r0, 0x0, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'syztnl0\x00', 0x0, 0x2f, 0x4d, 0xf, 0x0, 0x14, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x40, 0xeb669e}}) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x6}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000a80)={'ip6gre0\x00', &(0x7f0000000a00)={'ip6gre0\x00', 0x0, 0x29, 0xe, 0x9, 0x7, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x7800, 0x80, 0xfffffffc, 0x6}}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000dc0)={@multicast2, @remote, 0x0}, &(0x7f0000000e00)=0xc) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000500)=[{&(0x7f00000003c0)="80b2477c9c9ec645d6b3e92c1cd90fa876c550a8284e77d1e4bfb740333d6749a91f1980af7ab7261590ae2250e9357babbf0318f6309c98c81feb8206d02f22ceed90d6b5e63b55de06139411bfce51fca6750d7c10e5875d016cadb7bd9725495a92a9cef06099369f7a1a3a85853bd3c0827d9f77e0071a6cc3e5a081d4e1e290eeaa47f288cdbd8e84", 0x8b}, {&(0x7f0000000480)="ec756d140693791e3993cbfcd11c287a61351a1cf0c2037c5e3aea7e19582a3103b87c700ae98967d27685c16ec318a7d7a4162e73946c9f44fa3a66f4eb98555035a6eced76cd572948535a1b078a9c868808010183d9f920e4fc48f0134b949f97e178803fe5ca1aef5adafba15b997de7", 0x72}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="fad14089686d8292f388934a8d805462be1e005f8295f85e58a0d0e4514ca571ee9808a62b50eeffc36cea0087e7961505ab626658a91b6e9607edb2c63689b49ebfa473c1d249584a72e38eafc804b161584d89d58185edcbaa87096d6e2c984dccaf02aaa11971387d04dd9bb6c71aef87c595d2e0cec27b7ffac242273f7343c7c67282aaefa01356d5c0330c87", 0x8f}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010102, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}], 0x38}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000006c0)="831eb1dc9cbd54591d022bf8d02b5ea20c33065e23a78a8aa100f6e3458cd26899c0ab86cb336bca958707106f800b4620074d582cdd7f9c28b6dc096af0087cddc5cb48079075a28ccf2bece0aaf5019d37bb442d82b061e0e00b6e8f43fc291f55ea1c9f54e34a84e8dcab94539201cd7c35f4fae47b8b181dcff64066b607baa30f8ea9f8b130c830ccd9f4ffbb26213b79e536e3ca1dd51530bee6d4d8fdba602b4e8f4988144179a6af912e6490fb3032bce5fe7c0d83ef35e708631b5896848d166eed307f36e7e5bc15496e3b8312b872c4d83b62b3487852d9116f00e7ab751a47dc17b09fd1985e90021b87", 0xf0}, {&(0x7f00000007c0)="dc1f9583eb060f9af470eed7ff78ddb04b2d5de4cef5f0ca1fa4a4cd097300bd28bca4d7c11d03a2acccb10eee91b77bf8e6f164180e1f5b68d0bbf9e76f2c3acac05fff679bb1b08172a59a2737e30bcab667c8fdb580e00e0d236d7887c64e331a7e1536114fe8d2c384c1237432a45b8928bc1655cb7961bec5e9e91696224246e7a73e668b7378321d5c940351562f14dee0c37c2c696495d8472e88fa89daa999538c2b6a", 0xa7}, {&(0x7f0000000880)="db44a4c9f3db287430b50aa63e82b250d95d6c4747e080b04d688974c40f9f0de9cf34754d7cd72dd49685b3af4023e6cccf05591e6c242b739992e58f91012aab505bed4a4942276297e0d6741bc2aa2484538f967379", 0x57}], 0x3, &(0x7f0000000ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @private=0xa010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010100, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xbb25}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast2, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}], 0xf0}}, {{&(0x7f0000000bc0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000c00)="004c56c6735b3c5ef704e4b1cf37918c8861c847250a7c8256368e81dfcd06391111d6e7a807d2aeb09d27f938c840ff2caa8081640004f8cd466d22af61df686fe7a288585e43a849e77adfc1c06cde21afcc9739c286013241de121a7f5bad7319d0f4f63de2a2c40f33272aec6afd4b8c94370d8c50f5b07002a470bae3c65dab5ecc0cf3d4374d2f93447c6bb90b9119921f9c80e3868f17ef47f77ea5cbcd03786b14b339662bd70b3113744bc137d9b86ae11e8ad0ce2a6a2e", 0xbc}, {&(0x7f0000000cc0)="771246ec69967f172fd50bbeee3f78b6425e7724c7441e8ed36c1458936e8515e177247c781028bd0ab9a4fc8b78bfd4abe9808cfd95234dcfbba436d9412cadb7fc8f1d68f55a7b97f0f62d7edf2095033f0fd56f8ee2f6ac0d751b78cc31a2f8dbe98e1fcd4fb12e5c9163fe8313968938e4dd6d94cacd4cf22657fc4c9f3e5b1e0fdee11805c381f538b86db9bc92c8d761a0ab78d8836723", 0x9a}], 0x2, &(0x7f0000000e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfff}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0x2c, 0x1, 0x2, [{@local}, {@rand_addr=0x64010100, 0x80}, {@private=0xa010101}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x1000}, {@loopback, 0xffffffff}, {@loopback, 0x1}, {@rand_addr=0x64010100, 0x1ff}, {@remote, 0x1c}]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010100, @empty}}}], 0x90}}, {{&(0x7f0000000f00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x6}}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000f40)="ea44d8d1f3841c72c1d38a7437e4e249aeb40792bf772ea57f9ade911357c0431cfd9a6e46c6c90d52a6dc15374daa7909fc2e69ae9be4d5bb7ded2f203a38095b3d8bf4714e578d6f8d6b6dda52b64a24176467f13d2bfc0f5f29527893152e281407b4377a6c0712c4bf3e44f3f346ad938ea900e8f916af29af038b099cb6082cb854e15c1f34fb655f914acb21095d94becfd58ddd7753e408c3a13feab9203cea1ce37f094fcd3f1986a467abc2188cdba0c63860738daffcfce29c7722402699da0580f75f632adde1b2a05e131d094b37edea4b579c2007dbe891ca1028ac934da68c5de8cf5fef71a3dfea", 0xef}], 0x1, &(0x7f0000001080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @broadcast, @local}}}], 0x20}}], 0x5, 0x40810) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a300000000008000a4000000004"], 0x250}}, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x20, r11, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x8844) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001240), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)={0xf4, r13, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x99}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbd2}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8084}, 0x4010) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) connect$packet(r1, &(0x7f0000000200)={0x11, 0x16, r14, 0x1, 0x6, 0x6, @broadcast}, 0x14) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r15 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r15, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) 0s ago: executing program 1 (id=6430): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r3 = socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000200)={0x89, @local, 0x4e23, 0x3, 'wlc\x00', 0x3, 0x0, 0x19}, 0x2c) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x60, 0x0, &(0x7f0000000f00)) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0xf, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003bc0)=ANY=[], 0x18}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c357825577583a5fde8a3427cc42f7d63c6cf", 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRES64=r10, @ANYRESDEC=r9, @ANYRES8=r1], 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x0) getsockopt$SO_COOKIE(r9, 0x1, 0x39, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): family 0 port 8472 - 0 [ 510.074322][T22599] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.090691][T22599] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 510.192351][T22599] bond0: (slave netdevsim0): Releasing backup interface [ 510.216194][T22599] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.227991][T22599] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.251530][T22599] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 510.340263][T22658] syzkaller0: entered promiscuous mode [ 510.346927][T22658] syzkaller0: entered allmulticast mode [ 510.586785][ T7434] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.596895][ T7434] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.615215][ T7434] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 510.618034][ C1] vcan0: j1939_tp_rxtimer: 0xffff888074d45c00: rx timeout, send abort [ 510.632653][T21027] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.655155][T21027] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.670821][T21027] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 510.690258][T21027] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.699368][T21027] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.710281][T21027] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 510.732580][T21027] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.754542][T21027] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.770397][T21027] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 510.981630][T22687] macsec0: entered promiscuous mode [ 510.983172][T22688] __nla_validate_parse: 10 callbacks suppressed [ 510.983190][T22688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4769'. [ 510.994194][T22687] macsec0: entered allmulticast mode [ 511.011029][T22687] veth1_macvtap: entered allmulticast mode [ 511.017294][T22687] bridge0: port 3(macsec0) entered blocking state [ 511.028711][T22687] bridge0: port 3(macsec0) entered disabled state [ 511.041457][T22687] bridge0: port 3(macsec0) entered blocking state [ 511.048075][T22687] bridge0: port 3(macsec0) entered forwarding state [ 511.113131][T22693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4770'. [ 511.126360][T22693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4770'. [ 511.135980][ C1] vcan0: j1939_tp_rxtimer: 0xffff888074d45c00: abort rx timeout. Force session deactivation [ 511.389090][T22704] macvtap1: entered allmulticast mode [ 511.422746][T22704] veth0_macvtap: entered allmulticast mode [ 511.478821][T22707] tipc: Enabling of bearer rejected, failed to enable media [ 511.698034][T22719] validate_nla: 5 callbacks suppressed [ 511.698051][T22719] netlink: 'syz.2.4778': attribute type 7 has an invalid length. [ 512.096433][T22730] bond0: entered promiscuous mode [ 512.101521][T22730] bond_slave_0: entered promiscuous mode [ 512.149952][T22730] bond_slave_1: entered promiscuous mode [ 512.184653][T22730] geneve1: entered promiscuous mode [ 512.222491][T22730] bond0: left promiscuous mode [ 512.253288][T22730] bond_slave_0: left promiscuous mode [ 512.300552][T22730] bond_slave_1: left promiscuous mode [ 512.333448][T22730] geneve1: left promiscuous mode [ 512.405872][T22732] veth0: entered promiscuous mode [ 512.420097][T22745] IPv6: Can't replace route, no match found [ 512.615957][T22752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4786'. [ 512.747018][T22754] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4787'. [ 512.811155][T22757] erspan0: entered promiscuous mode [ 512.820011][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4789'. [ 512.824446][T22757] erspan0: entered allmulticast mode [ 512.899995][T22759] bridge0: entered promiscuous mode [ 512.921966][T22759] bridge0: entered allmulticast mode [ 512.952328][T22731] veth0: left promiscuous mode [ 512.993198][T22707] wg1 speed is unknown, defaulting to 1000 [ 513.041102][T22766] netlink: 'syz.6.4790': attribute type 29 has an invalid length. [ 513.069266][T22766] netlink: 'syz.6.4790': attribute type 29 has an invalid length. [ 513.090727][T22766] netlink: 'syz.6.4790': attribute type 29 has an invalid length. [ 513.112986][T22766] netlink: 'syz.6.4790': attribute type 29 has an invalid length. [ 513.463485][T22788] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4797'. [ 513.480230][T22787] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4797'. [ 513.611155][T22792] netlink: 'syz.6.4799': attribute type 10 has an invalid length. [ 513.641263][T22792] team0: Device hsr_slave_0 failed to register rx_handler [ 513.716092][T22799] netlink: 'syz.2.4802': attribute type 1 has an invalid length. [ 513.872986][T22799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.976481][T22821] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 514.028554][T22807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.088497][T22818] veth5: entered promiscuous mode [ 514.099520][T22818] veth5: entered allmulticast mode [ 514.613445][T22844] netlink: 'syz.1.4812': attribute type 8 has an invalid length. [ 514.885290][T22858] tipc: New replicast peer: 0.0.0.0 [ 514.891338][T22858] tipc: Enabled bearer , priority 10 [ 514.901431][T22858] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 514.953174][T22864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4817'. [ 515.491545][T22894] netlink: 'syz.1.4828': attribute type 2 has an invalid length. [ 515.540180][T22890] bridge_slave_0: left allmulticast mode [ 515.551060][T22890] bridge_slave_0: left promiscuous mode [ 515.569247][T22890] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.595874][T22890] bridge_slave_1: left allmulticast mode [ 515.612738][T22890] bridge_slave_1: left promiscuous mode [ 515.642882][T22890] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.686082][T22890] bond0: (slave bond_slave_0): Releasing backup interface [ 515.707164][T22890] bond0: (slave bond_slave_1): Releasing backup interface [ 515.721637][T22890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.730634][T22890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.746973][T22890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.754846][T22890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.769168][T22890] bond0: (slave geneve1): Releasing backup interface [ 515.782481][T22890] bond2: (slave wlan0): Releasing active interface [ 515.789394][T22890] bond2: (slave wlan0): the permanent HWaddr of slave - 08:02:11:00:00:00 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 515.811936][T22890] vlan2: entered promiscuous mode [ 515.843573][T22890] bond2: (slave vlan2): Releasing active interface [ 515.851129][T22890] vlan2: left promiscuous mode [ 515.862367][T22890] veth1: left promiscuous mode [ 515.874090][T22890] bond3: (slave geneve2): Releasing active interface [ 515.890662][T22890] bond4: (slave gretap1): Releasing active interface [ 515.908668][T22890] bond7: (slave bond8): Releasing backup interface [ 515.919477][ T48] wg1 speed is unknown, defaulting to 1000 [ 515.919635][T22887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4825'. [ 515.998044][T22918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4833'. [ 516.051782][T21026] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 516.075296][T21026] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 516.306148][T22921] nbd: must specify a device to reconfigure [ 518.132931][T22918] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 518.133506][T21026] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 518.151396][T21026] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 518.202447][T22927] nbd: socks must be embedded in a SOCK_ITEM attr [ 518.230344][T22928] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4835'. [ 518.258301][T22927] netlink: 'syz.1.4835': attribute type 1 has an invalid length. [ 518.288721][T22934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.377800][T22927] bond6: entered promiscuous mode [ 518.407860][T22927] 8021q: adding VLAN 0 to HW filter on device bond6 [ 518.509587][T22928] 8021q: adding VLAN 0 to HW filter on device bond6 [ 518.519849][T22928] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 518.530637][T22928] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 518.549880][T22928] bond6: (slave wireguard0): making interface the new active one [ 518.569832][T22928] wireguard0: entered promiscuous mode [ 518.577366][T22928] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 518.616139][T22938] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address [ 518.626226][T22961] netlink: 'syz.3.4842': attribute type 313 has an invalid length. [ 518.652454][T22938] bond6: (slave wireguard1): Enslaving as a backup interface with an up link [ 518.723782][T22966] digital: digital_start_poll: Unknown protocol [ 518.987335][T22980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 518.994641][T22980] IPv6: NLM_F_CREATE should be set when creating new route [ 519.027134][T22985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4850'. [ 519.138155][T22994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4850'. [ 519.160721][T22988] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 519.170541][T22988] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 519.343534][T22998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4855'. [ 519.393718][T23000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4855'. [ 519.771649][T23027] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4863'. [ 519.919982][T23034] pim6reg1: entered promiscuous mode [ 519.943880][T23034] pim6reg1: entered allmulticast mode [ 519.985707][T23034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4865'. [ 519.995242][T23034] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4865'. [ 520.122080][T23047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4870'. [ 520.268067][T23052] nbd: must specify a size in bytes for the device [ 520.620856][T23072] netlink: 'syz.1.4875': attribute type 30 has an invalid length. [ 520.644787][T23072] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 520.660691][T23072] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 521.269801][T23104] tipc: Enabling of bearer rejected, failed to enable media [ 521.282482][T23104] tipc: Enabling of bearer rejected, failed to enable media [ 521.437119][T23116] sctp: [Deprecated]: syz.4.4888 (pid 23116) Use of int in max_burst socket option. [ 521.437119][T23116] Use struct sctp_assoc_value instead [ 521.476222][T23123] __nla_validate_parse: 3 callbacks suppressed [ 521.476243][T23123] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4885'. [ 521.513286][T23123] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4885'. [ 521.577485][T23131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4887'. [ 521.606546][T23130] batman_adv: batadv0: Adding interface: ipvlan2 [ 521.613164][T23130] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.658351][T23130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.688286][T23130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.700082][T23130] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 521.881996][T23145] netlink: 'syz.1.4895': attribute type 1 has an invalid length. [ 521.897804][T23145] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4895'. [ 521.907913][T23145] netlink: 'syz.1.4895': attribute type 1 has an invalid length. [ 521.987636][T23148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4896'. [ 522.049128][ T5926] wg1 speed is unknown, defaulting to 1000 [ 522.088036][ T5926] syz2: Port: 1 Link DOWN [ 522.259006][T23162] tipc: Enabled bearer , priority 0 [ 522.279883][T23162] ipvlan1: entered promiscuous mode [ 522.286342][T23162] ipvlan1: entered allmulticast mode [ 522.291840][T23162] veth0_vlan: entered allmulticast mode [ 522.312815][T23162] tipc: Resetting bearer [ 522.350910][T23160] tipc: Disabling bearer [ 522.393777][T23170] nftables ruleset with unbound chain [ 522.519339][T23180] nbd: device at index 3 is going down [ 522.583307][T23188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4907'. [ 522.654007][T23188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4907'. [ 522.803480][T23200] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4911'. [ 522.889511][T23209] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 522.902893][T23209] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 522.912725][T23200] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 522.922205][T23211] netlink: 'syz.2.4913': attribute type 11 has an invalid length. [ 522.931955][T23211] netlink: 'syz.2.4913': attribute type 11 has an invalid length. [ 522.940036][T23211] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4913'. [ 522.953881][T23213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4914'. [ 522.960025][T23200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.968474][T23213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.382754][T23235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.395867][T23235] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.485543][ T5875] Bluetooth: hci4: command tx timeout [ 523.516282][T23235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.527074][T23235] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.675285][T23254] netlink: 'syz.6.4926': attribute type 1 has an invalid length. [ 523.688621][T23235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.711172][T23235] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.826395][T23235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.837103][T23235] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.037395][T23273] netlink: 'syz.2.4931': attribute type 1 has an invalid length. [ 524.091428][T21026] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.116083][T21026] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.227113][T21021] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.247389][T23282] netlink: 'syz.1.4932': attribute type 1 has an invalid length. [ 524.259969][T21021] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.395892][T23282] bond7: entered promiscuous mode [ 524.420135][T23282] 8021q: adding VLAN 0 to HW filter on device bond7 [ 524.512332][T23288] 8021q: adding VLAN 0 to HW filter on device bond8 [ 524.522856][T23288] bond7: (slave bond8): making interface the new active one [ 524.534224][T23288] bond8: entered promiscuous mode [ 524.541696][T23288] bond7: (slave bond8): Enslaving as an active interface with an up link [ 524.550750][T21027] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.561333][T21027] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.599487][T23301] sctp: [Deprecated]: syz.2.4936 (pid 23301) Use of struct sctp_assoc_value in delayed_ack socket option. [ 524.599487][T23301] Use struct sctp_sack_info instead [ 524.665067][T21027] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.673664][T21027] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.181935][T23336] lo: entered allmulticast mode [ 525.387281][T23335] lo: left allmulticast mode [ 525.999854][T23341] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20002 [ 526.021198][T23379] netlink: 'syz.2.4960': attribute type 10 has an invalid length. [ 526.101400][T23381] tipc: Enabled bearer , priority 0 [ 526.129885][T23381] syzkaller0: entered promiscuous mode [ 526.163329][T23381] syzkaller0: entered allmulticast mode [ 526.261518][T23376] tipc: Resetting bearer [ 526.273977][T23393] netlink: 'syz.2.4964': attribute type 2 has an invalid length. [ 526.713580][T23374] tipc: Resetting bearer [ 526.831524][T23423] sctp: [Deprecated]: syz.1.4971 (pid 23423) Use of int in maxseg socket option. [ 526.831524][T23423] Use struct sctp_assoc_value instead [ 527.009346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.154615][ T48] tipc: Node number set to 1082790612 [ 527.634044][T23374] tipc: Disabling bearer [ 527.842290][T23440] __nla_validate_parse: 15 callbacks suppressed [ 527.842311][T23440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4978'. [ 527.948189][T23454] 8021q: VLANs not supported on caif0 [ 528.012313][T23457] C: renamed from lo [ 528.071105][T23460] netlink: 'syz.3.4984': attribute type 10 has an invalid length. [ 528.079988][T23460] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4984'. [ 528.093805][T23460] dummy0: entered promiscuous mode [ 528.102010][T23464] netlink: 360 bytes leftover after parsing attributes in process `syz.2.4985'. [ 528.115221][T23460] bridge0: port 1(dummy0) entered blocking state [ 528.136808][T23460] bridge0: port 1(dummy0) entered disabled state [ 528.154793][T23460] dummy0: entered allmulticast mode [ 528.172850][T23460] bridge0: port 1(dummy0) entered blocking state [ 528.179447][T23460] bridge0: port 1(dummy0) entered forwarding state [ 528.203026][T23468] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4987'. [ 528.363735][T23477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.441017][T23484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.463622][T23480] erspan0: left promiscuous mode [ 528.665695][T23494] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4993'. [ 528.695968][T23494] netlink: 'syz.2.4993': attribute type 1 has an invalid length. [ 528.696040][T23497] netlink: 'syz.6.4997': attribute type 10 has an invalid length. [ 528.712226][T23497] batman_adv: batadv0: Interface deactivated: dummy0 [ 528.726237][T23497] batman_adv: batadv0: Removing interface: dummy0 [ 528.759076][T23497] team0: Port device dummy0 added [ 528.768312][T23504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4999'. [ 528.786779][T23506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4998'. [ 528.809730][T23507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4993'. [ 528.856997][T23494] 8021q: adding VLAN 0 to HW filter on device bond2 [ 528.936834][T23503] veth9: entered promiscuous mode [ 528.949420][T23503] bond2: (slave veth9): Enslaving as an active interface with a down link [ 529.121857][T23521] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 529.515426][T23550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5011'. [ 529.549178][T23550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5011'. [ 529.652849][T23555] geneve2: entered promiscuous mode [ 529.659008][T23555] geneve2: entered allmulticast mode [ 529.750813][T21027] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 529.765791][T21027] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 529.790576][T23548] veth0_macvtap: left promiscuous mode [ 529.920189][T21027] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 529.943208][T21027] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 529.977207][T23577] netlink: 'syz.6.5019': attribute type 19 has an invalid length. [ 530.330767][T23605] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 530.348898][T23600] netlink: 'syz.1.5024': attribute type 1 has an invalid length. [ 530.361034][T23600] netlink: 'syz.1.5024': attribute type 1 has an invalid length. [ 530.362811][T23599] sctp: [Deprecated]: syz.2.5023 (pid 23599) Use of struct sctp_assoc_value in delayed_ack socket option. [ 530.362811][T23599] Use struct sctp_sack_info instead [ 530.370307][T23600] netlink: 'syz.1.5024': attribute type 2 has an invalid length. [ 530.547362][T23614] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 530.555479][T23614] mac80211_hwsim hwsim27 syzkaller0: left allmulticast mode [ 530.711949][T23625] openvswitch: netlink: IP tunnel dst address not specified [ 530.838833][T23631] netlink: 'syz.1.5037': attribute type 1 has an invalid length. [ 531.073219][T23644] wg1: entered promiscuous mode [ 531.136488][T23647] netlink: 'syz.1.5043': attribute type 1 has an invalid length. [ 531.303070][T23655] bond9: (slave geneve2): making interface the new active one [ 531.332678][T23655] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 531.478722][ T59] netdevsim netdevsim1 : set [1, 1] type 2 family 0 port 20004 - 0 [ 531.527504][ T59] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 531.620156][T21025] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 531.665049][T23655] pim6reg1: entered promiscuous mode [ 531.670514][T23655] pim6reg1: entered allmulticast mode [ 531.692272][T21025] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 531.707987][T23677] netlink: 'syz.4.5050': attribute type 64 has an invalid length. [ 531.766841][T23677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.812354][T23677] ip6gre2: entered allmulticast mode [ 532.100551][T23694] tipc: Enabled bearer , priority 0 [ 532.108737][T23694] syzkaller0: entered promiscuous mode [ 532.114230][T23694] syzkaller0: entered allmulticast mode [ 532.150970][T23694] tipc: Resetting bearer [ 532.634156][T23723] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 532.889497][T23737] __nla_validate_parse: 11 callbacks suppressed [ 532.889515][T23737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5068'. [ 532.907074][T23693] tipc: Resetting bearer [ 532.965957][T23693] tipc: Disabling bearer [ 533.011676][T23744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5068'. [ 533.063742][T23749] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5070'. [ 533.121793][T23749] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5070'. [ 533.145503][T23751] netlink: 204 bytes leftover after parsing attributes in process `syz.6.5071'. [ 533.328386][T23756] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5073'. [ 533.598891][T23782] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.634856][T23782] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.690066][T23784] gtp3: entered promiscuous mode [ 533.695975][T23784] gtp3: entered allmulticast mode [ 533.716352][T23794] openvswitch: netlink: Message has 4 unknown bytes. [ 533.718062][T23782] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.758647][T23782] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.846578][T23782] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.879592][T23782] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.983628][T23807] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5090'. [ 534.009960][T23782] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.047600][T23782] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.102082][T23807] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5090'. [ 534.124008][T23812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5093'. [ 534.149389][T23807] netlink: 'syz.6.5090': attribute type 1 has an invalid length. [ 534.222979][T23807] bond7: entered promiscuous mode [ 534.232209][T23807] 8021q: adding VLAN 0 to HW filter on device bond7 [ 534.278657][T23825] netlink: 'syz.1.5095': attribute type 1 has an invalid length. [ 534.297470][T23825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5095'. [ 534.341499][T23815] 8021q: adding VLAN 0 to HW filter on device bond8 [ 534.357525][T23815] bond7: (slave bond8): making interface the new active one [ 534.371527][T23815] bond8: entered promiscuous mode [ 534.378980][T23815] bond7: (slave bond8): Enslaving as an active interface with an up link [ 534.505529][T23830] netlink: 'syz.2.5096': attribute type 8 has an invalid length. [ 534.513715][T21019] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.538492][T21019] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.612946][T21027] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.621638][T21027] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.645952][T23847] IPVS: length: 136 != 8 [ 534.674855][T21027] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.715627][T21027] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.728301][T21027] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.744241][T21027] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.798420][T23853] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 534.831815][T23853] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 534.842805][T23852] tipc: Enabled bearer , priority 0 [ 534.887319][T23859] tipc: Resetting bearer [ 535.306452][T23879] netlink: 'syz.1.5111': attribute type 32 has an invalid length. [ 535.320099][T23879] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 535.384741][T23886] xt_socket: unknown flags 0xe4 [ 535.706005][T23910] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:20003 [ 535.871113][ T5926] tipc: Node number set to 932407497 [ 536.156774][T23947] netlink: 'syz.3.5130': attribute type 1 has an invalid length. [ 536.202323][T23947] netlink: 'syz.3.5130': attribute type 1 has an invalid length. [ 536.214874][T23947] netlink: 'syz.3.5130': attribute type 1 has an invalid length. [ 536.259261][T23949] netlink: 'syz.2.5132': attribute type 8 has an invalid length. [ 536.365233][T23955] netlink: 'syz.6.5134': attribute type 1 has an invalid length. [ 536.398287][T23955] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 536.432608][T23963] netlink: 'syz.2.5136': attribute type 1 has an invalid length. [ 536.509998][T23963] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 536.614018][T23968] bridge0: entered promiscuous mode [ 536.638693][T23968] macsec2: entered promiscuous mode [ 536.655894][T23968] macsec2: entered allmulticast mode [ 536.673623][T23968] bridge0: entered allmulticast mode [ 536.681063][T23968] bridge0: port 1(macsec2) entered blocking state [ 536.700391][T23968] bridge0: port 1(macsec2) entered disabled state [ 536.738950][T23968] bridge0: left allmulticast mode [ 536.759128][T23968] bridge0: left promiscuous mode [ 537.266361][T24006] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 537.270778][T23999] syzkaller1: entered promiscuous mode [ 537.314919][T23999] syzkaller1: entered allmulticast mode [ 537.380587][T23999] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 537.499001][T23999] batman_adv: batadv0: Removing interface: virt_wifi0 [ 538.224554][T24049] __nla_validate_parse: 25 callbacks suppressed [ 538.224572][T24049] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5158'. [ 538.253627][T24058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.268953][T24058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5161'. [ 538.419372][T24068] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5163'. [ 538.495343][T24071] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5166'. [ 538.511711][T24066] syzkaller0: entered promiscuous mode [ 538.528298][T24066] syzkaller0: entered allmulticast mode [ 538.572004][T24066] 8021q: VLANs not supported on nlmon0 [ 539.411446][T24101] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 539.668318][T24117] validate_nla: 5 callbacks suppressed [ 539.668337][T24117] netlink: 'syz.1.5177': attribute type 14 has an invalid length. [ 539.674714][T24118] netlink: 'syz.2.5178': attribute type 1 has an invalid length. [ 539.702833][T24117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5177'. [ 539.882070][T24124] bond3: (slave gretap2): making interface the new active one [ 539.894196][T24124] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 539.908174][T24118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5178'. [ 539.913180][T24117] netlink: 'syz.1.5177': attribute type 14 has an invalid length. [ 539.917623][T21025] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 539.926556][T24117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5177'. [ 539.945886][T24132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5182'. [ 539.955596][T24132] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5182'. [ 539.994789][T24118] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 540.034556][T24118] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5178'. [ 540.073277][T21025] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.113519][T21025] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.155114][T21025] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.323090][T24150] netlink: 'syz.3.5188': attribute type 1 has an invalid length. [ 540.577786][T24145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.592851][T24145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.607816][T24145] bond0 (unregistering): Released all slaves [ 540.898674][T24176] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 540.908509][T24176] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 540.990269][T24183] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 541.443239][T24213] batadv_slave_1: entered promiscuous mode [ 541.549592][T24213] batadv_slave_1: left promiscuous mode [ 541.638633][T24233] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 541.680511][T24235] netlink: 'syz.2.5215': attribute type 10 has an invalid length. [ 541.762207][T24235] geneve3: entered promiscuous mode [ 541.771320][T24235] geneve3: entered allmulticast mode [ 541.833592][T24246] bridge0: entered promiscuous mode [ 541.839701][T24246] macvtap2: entered allmulticast mode [ 541.846939][T24246] bridge0: entered allmulticast mode [ 541.853232][T24246] bridge0: port 1(macvtap2) entered blocking state [ 541.860397][T24246] bridge0: port 1(macvtap2) entered disabled state [ 541.876719][T24246] bridge0: left allmulticast mode [ 541.888596][T24246] bridge0: left promiscuous mode [ 542.020950][T24260] netlink: 'syz.2.5220': attribute type 4 has an invalid length. [ 542.053087][T24260] netlink: 'syz.2.5220': attribute type 4 has an invalid length. [ 542.359355][T24276] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 542.563037][T24286] netlink: 'syz.2.5229': attribute type 21 has an invalid length. [ 542.847554][T24310] vlan2: entered promiscuous mode [ 542.904724][T24319] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 542.905138][T24316] IPVS: stopping master sync thread 24319 ... [ 543.748522][T24358] netlink: 'syz.4.5251': attribute type 2 has an invalid length. [ 543.902028][T24379] __nla_validate_parse: 15 callbacks suppressed [ 543.902047][T24379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5258'. [ 543.935657][T24371] netlink: 108 bytes leftover after parsing attributes in process `syz.6.5257'. [ 544.076125][T24386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5259'. [ 544.121652][T24386] bridge0: mtu less than device minimum [ 544.129359][T24391] tipc: Enabling of bearer rejected, failed to enable media [ 544.200392][T24386] IPv4: Oversized IP packet from 127.202.26.0 [ 544.209061][T24386] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 544.365660][T24407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5266'. [ 544.366046][T24408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.707331][T21019] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 544.827337][T24432] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5272'. [ 545.166228][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 545.360428][T24429] netlink: 'syz.6.5271': attribute type 1 has an invalid length. [ 545.368638][T24429] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5271'. [ 545.597368][T24457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5280'. [ 545.723806][T24463] netlink: 'syz.1.5281': attribute type 24 has an invalid length. [ 545.910316][T24469] tipc: Enabled bearer , priority 0 [ 545.924932][T24469] syzkaller0: entered promiscuous mode [ 545.930680][T24469] syzkaller0: entered allmulticast mode [ 545.972547][T24469] tipc: Resetting bearer [ 545.988037][T24468] tipc: Resetting bearer [ 546.073093][T24468] tipc: Disabling bearer [ 546.505634][T24483] netlink: 'syz.1.5290': attribute type 4 has an invalid length. [ 546.626356][T24491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5294'. [ 546.637406][T24491] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 546.784002][T24497] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5296'. [ 546.960503][T24514] tipc: Enabling of bearer rejected, already enabled [ 547.002812][T24517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5302'. [ 547.324762][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 547.452269][T24541] veth0: entered promiscuous mode [ 547.457617][T21026] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.477607][T21026] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.516739][T24541] veth0 (unregistering): left promiscuous mode [ 547.637707][T21026] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.678909][T21026] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.853072][T24565] vlan2: entered allmulticast mode [ 547.858421][T24565] hsr0: entered allmulticast mode [ 547.863464][T24565] hsr_slave_0: entered allmulticast mode [ 547.887527][T24565] hsr_slave_1: entered allmulticast mode [ 548.978948][T24637] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 548.999373][T24639] __nla_validate_parse: 6 callbacks suppressed [ 548.999391][T24639] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5337'. [ 549.123038][T24644] TCP: TCP_TX_DELAY enabled [ 549.321588][T24660] bridge_slave_0: entered promiscuous mode [ 549.485354][T24668] syzkaller0: entered promiscuous mode [ 549.493961][T24668] syzkaller0: entered allmulticast mode [ 549.502146][T24667] tipc: Enabled bearer , priority 0 [ 549.556595][T24673] tipc: Resetting bearer [ 549.624390][T24673] tipc: Disabling bearer [ 549.630330][T24678] sctp: [Deprecated]: syz.2.5347 (pid 24678) Use of int in max_burst socket option deprecated. [ 549.630330][T24678] Use struct sctp_assoc_value instead [ 550.220666][T24719] rdma_rxe: rxe_newlink: failed to add lo [ 550.288667][T24715] lo speed is unknown, defaulting to 1000 [ 550.361501][T24724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5355'. [ 550.436793][T24726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5355'. [ 550.438330][T24715] lo speed is unknown, defaulting to 1000 [ 550.505948][T24715] lo speed is unknown, defaulting to 1000 [ 550.540623][T24721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.799189][T24737] tipc: Enabled bearer , priority 0 [ 550.836427][T24737] syzkaller0: entered promiscuous mode [ 550.864651][T24737] syzkaller0: entered allmulticast mode [ 550.881453][T24737] netlink: 'syz.2.5360': attribute type 1 has an invalid length. [ 551.009541][T24737] tipc: Resetting bearer [ 551.046732][T24736] tipc: Resetting bearer [ 551.073702][T24759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5366'. [ 551.104833][T24759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5366'. [ 551.172424][T24736] tipc: Disabling bearer [ 551.197291][T24715] infiniband syz0: set active [ 551.202086][T24715] infiniband syz0: added lo [ 551.208821][T24715] syz0: rxe_create_cq: returned err = -12 [ 551.214751][T24715] infiniband syz0: Couldn't create ib_mad CQ [ 551.222806][T24715] infiniband syz0: Couldn't open port 1 [ 551.231111][ T5926] lo speed is unknown, defaulting to 1000 [ 551.287010][T24715] RDS/IB: syz0: added [ 551.291098][T24715] smc: adding ib device syz0 with port count 1 [ 551.317070][T24715] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 551.345819][ T48] lo speed is unknown, defaulting to 1000 [ 551.355342][T24715] lo speed is unknown, defaulting to 1000 [ 551.441988][T24776] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5371'. [ 551.675809][T24793] netlink: 'syz.6.5374': attribute type 33 has an invalid length. [ 551.698370][T24793] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.5374'. [ 551.971474][T24815] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5380'. [ 551.977087][T24715] lo speed is unknown, defaulting to 1000 [ 551.999499][T24815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5380'. [ 552.039094][T24815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5380'. [ 552.355480][T24833] netlink: 'syz.1.5386': attribute type 7 has an invalid length. [ 552.401918][T24715] lo speed is unknown, defaulting to 1000 [ 552.488768][T24837] netlink: 'syz.1.5388': attribute type 83 has an invalid length. [ 552.773461][T24850] sctp: [Deprecated]: syz.2.5392 (pid 24850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 552.773461][T24850] Use struct sctp_sack_info instead [ 552.900270][T24715] lo speed is unknown, defaulting to 1000 [ 553.609359][T24872] bridge_slave_1: left promiscuous mode [ 553.664255][T24872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.681849][T24872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.781309][T24872] gretap2: left promiscuous mode [ 553.788186][T24872] vlan0: left allmulticast mode [ 553.793065][T24872] veth0_vlan: left allmulticast mode [ 553.798648][T24872] vlan0: left promiscuous mode [ 553.803855][T24872] macvtap1: left promiscuous mode [ 553.858735][T24715] lo speed is unknown, defaulting to 1000 [ 553.880611][ T7434] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.915319][ T7434] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.934601][ T7434] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.942985][ T7434] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.080019][ T7434] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.105540][ T7434] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.114269][ T7434] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.144459][ T7434] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.039214][T24904] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 556.041158][T24715] lo speed is unknown, defaulting to 1000 [ 556.168327][T24922] __nla_validate_parse: 9 callbacks suppressed [ 556.168346][T24922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5410'. [ 556.682578][T24715] lo speed is unknown, defaulting to 1000 [ 556.750352][T24954] netlink: 'syz.4.5419': attribute type 1 has an invalid length. [ 556.812070][T24954] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 557.190657][T24715] lo speed is unknown, defaulting to 1000 [ 557.426367][T24976] syzkaller1: entered promiscuous mode [ 557.434609][T24976] syzkaller1: entered allmulticast mode [ 557.550602][T24988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5428'. [ 557.763583][T24994] hsr0: entered promiscuous mode [ 557.812967][T24992] tipc: Enabled bearer , priority 0 [ 557.821806][T24992] syzkaller0: entered promiscuous mode [ 557.827841][T24992] syzkaller0: entered allmulticast mode [ 557.845148][T24992] tipc: Resetting bearer [ 557.988158][T24991] tipc: Resetting bearer [ 558.060060][T24991] tipc: Disabling bearer [ 558.292965][T25032] tipc: Enabled bearer , priority 0 [ 558.335737][T25032] syzkaller0: entered promiscuous mode [ 558.350014][T25032] syzkaller0: entered allmulticast mode [ 558.370119][T25035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5440'. [ 558.457947][T25032] tipc: Resetting bearer [ 558.475650][T25031] tipc: Resetting bearer [ 558.509228][T25031] tipc: Disabling bearer [ 558.850615][ T5926] IPVS: starting estimator thread 0... [ 558.861210][T25069] IPVS: Error connecting to the multicast addr [ 558.932760][T25071] syzkaller0: entered promiscuous mode [ 558.946080][T25072] IPVS: using max 30 ests per chain, 72000 per kthread [ 558.958745][T25071] syzkaller0: entered allmulticast mode [ 559.039062][T25082] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5456'. [ 559.406563][T25102] nbd: must specify at least one socket [ 559.475627][T25104] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5461'. [ 559.538877][T25106] pimreg3: entered allmulticast mode [ 559.756250][T25083] lo speed is unknown, defaulting to 1000 [ 560.423375][T25146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5470'. [ 560.754218][T25159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5473'. [ 560.814254][T25165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5474'. [ 560.985678][T25170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5476'. [ 561.031548][T25169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5475'. [ 561.300910][T25182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.314109][T25182] batadv_slave_0: entered promiscuous mode [ 561.323946][T25185] netlink: 'syz.2.5480': attribute type 6 has an invalid length. [ 561.415397][T25188] netlink: 'syz.3.5481': attribute type 1 has an invalid length. [ 561.465585][T25191] __nla_validate_parse: 1 callbacks suppressed [ 561.465605][T25191] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5482'. [ 561.512022][T25188] 8021q: adding VLAN 0 to HW filter on device bond10 [ 561.525261][T25191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5482'. [ 561.608199][T25196] bond10: (slave veth11): Enslaving as an active interface with a down link [ 561.783891][T25188] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 561.924887][T25204] bond10: (slave veth13): Enslaving as an active interface with a down link [ 562.036356][T25218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5489'. [ 562.078533][ T5875] Bluetooth: hci4: link tx timeout [ 562.086163][ T5875] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 562.105072][T25227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5490'. [ 562.155801][T25232] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5494'. [ 562.267740][T25235] netlink: 'syz.6.5494': attribute type 2 has an invalid length. [ 562.292357][T25235] netlink: 'syz.6.5494': attribute type 2 has an invalid length. [ 562.330750][T25242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5497'. [ 562.353842][T25242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5497'. [ 562.473407][T25249] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 562.502120][T25249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5498'. [ 562.515812][T25251] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 562.523961][T25249] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 562.539823][T25249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.608736][T25253] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 562.756128][T25263] netlink: 'syz.6.5504': attribute type 15 has an invalid length. [ 562.780824][T25263] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5504'. [ 562.822619][T25265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5505'. [ 563.009752][T25280] netlink: 'syz.1.5508': attribute type 4 has an invalid length. [ 563.019315][T25288] netlink: 'syz.1.5508': attribute type 4 has an invalid length. [ 563.291605][T25301] netlink: 'syz.4.5514': attribute type 58 has an invalid length. [ 563.331828][T25300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 563.755611][T25330] netlink: 'syz.3.5519': attribute type 13 has an invalid length. [ 563.792479][T25330] veth0_macvtap: left promiscuous mode [ 563.825243][T25330] macvtap0: entered allmulticast mode [ 563.880638][T25330] macvtap0: refused to change device tx_queue_len [ 564.128978][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 564.174722][T25361] syzkaller1: entered allmulticast mode [ 564.294117][T25359] 8021q: adding VLAN 0 to HW filter on device bond4 [ 564.350144][T25363] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 564.505748][T25376] netlink: 'syz.3.5532': attribute type 1 has an invalid length. [ 564.569030][T25381] netlink: 'syz.2.5534': attribute type 5 has an invalid length. [ 564.728397][T25384] 8021q: adding VLAN 0 to HW filter on device bond12 [ 564.737675][T25384] bond11: (slave bond12): making interface the new active one [ 564.749097][T25384] bond11: (slave bond12): Enslaving as an active interface with an up link [ 564.771413][T25376] bond11: entered promiscuous mode [ 564.777453][T25376] bond12: entered promiscuous mode [ 564.783042][T25376] bond11: entered allmulticast mode [ 564.788781][T25376] bond12: entered allmulticast mode [ 564.802001][T25376] 8021q: adding VLAN 0 to HW filter on device bond11 [ 564.837954][T25357] lo speed is unknown, defaulting to 1000 [ 565.228106][T25419] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 565.255950][T25419] tipc: Enabled bearer , priority 10 [ 565.578780][T25445] netlink: 'syz.2.5553': attribute type 21 has an invalid length. [ 565.978713][T25463] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 566.002080][T25463] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 566.374499][ T10] tipc: Node number set to 2886997162 [ 566.569795][T25487] __nla_validate_parse: 24 callbacks suppressed [ 566.569814][T25487] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5565'. [ 566.617928][T25487] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5565'. [ 566.715733][T25494] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 566.789468][T25497] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5568'. [ 566.798532][T25497] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5568'. [ 566.989033][T25507] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5572'. [ 567.118483][T25516] netlink: 'syz.6.5575': attribute type 11 has an invalid length. [ 567.129896][T25516] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5575'. [ 567.431801][T25526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5578'. [ 567.644486][T25553] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5583'. [ 567.845162][T25566] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 567.964198][T25572] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 567.975388][T25572] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 568.068163][T25576] validate_nla: 6 callbacks suppressed [ 568.068183][T25576] netlink: 'syz.6.5590': attribute type 4 has an invalid length. [ 568.083619][T25577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.353190][T25594] netlink: 'syz.2.5596': attribute type 21 has an invalid length. [ 568.379119][T25596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5595'. [ 568.427340][T25592] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.440285][T25592] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.451908][T25598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5595'. [ 568.552509][T25601] Bluetooth: MGMT ver 1.23 [ 568.631127][T25592] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.647014][T25592] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.813999][T25592] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.825236][T25592] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.303619][T21027] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.318566][T21027] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.340000][T25582] lo speed is unknown, defaulting to 1000 [ 569.398484][T21025] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.414120][T21025] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.427884][T25633] netlink: 'syz.2.5607': attribute type 10 has an invalid length. [ 569.447575][T21025] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.462834][T21025] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.528540][T21025] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.560939][T21025] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.897856][T25647] openvswitch: netlink: Key type 784 is out of range max 32 [ 570.219833][T25662] IPVS: Unknown mcast interface: vcan0 [ 570.538886][T25679] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 570.723458][T25687] netlink: 'syz.1.5624': attribute type 7 has an invalid length. [ 570.736146][T25687] netlink: 'syz.1.5624': attribute type 8 has an invalid length. [ 571.693178][T25726] __nla_validate_parse: 10 callbacks suppressed [ 571.693262][T25726] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5634'. [ 571.720023][T25726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5634'. [ 572.042568][T25750] netlink: 'syz.6.5640': attribute type 4 has an invalid length. [ 572.068284][T25750] netlink: 'syz.6.5640': attribute type 4 has an invalid length. [ 572.156615][T25744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5638'. [ 572.185616][T25744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5638'. [ 572.682060][T25772] pim6reg1: entered promiscuous mode [ 572.688649][T25772] pim6reg1: entered allmulticast mode [ 572.843378][T25795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5650'. [ 572.867639][T25790] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 572.934249][T25797] ip6gre2: entered allmulticast mode [ 572.996877][T25807] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5653'. [ 573.030401][T25808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5652'. [ 573.041170][T25807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5653'. [ 573.060376][T25807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5653'. [ 573.074084][T25808] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5652'. [ 573.661974][T25839] netlink: 'syz.2.5660': attribute type 5 has an invalid length. [ 574.861121][T25908] netlink: 'syz.2.5679': attribute type 21 has an invalid length. [ 574.910321][T25908] netlink: 'syz.2.5679': attribute type 4 has an invalid length. [ 574.922321][T25908] netlink: 'syz.2.5679': attribute type 5 has an invalid length. [ 574.935461][T25911] netlink: 'syz.2.5679': attribute type 21 has an invalid length. [ 574.991318][T25911] netlink: 'syz.2.5679': attribute type 4 has an invalid length. [ 575.014508][T25911] netlink: 'syz.2.5679': attribute type 5 has an invalid length. [ 575.047691][T25916] pim6reg1: entered promiscuous mode [ 575.054676][T25916] pim6reg1: entered allmulticast mode [ 575.292288][T25932] netlink: 'syz.6.5687': attribute type 1 has an invalid length. [ 576.415422][T25996] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 576.498430][ T48] lo speed is unknown, defaulting to 1000 [ 576.671961][T26020] sctp: [Deprecated]: syz.3.5712 (pid 26020) Use of struct sctp_assoc_value in delayed_ack socket option. [ 576.671961][T26020] Use struct sctp_sack_info instead [ 576.712313][T26020] __nla_validate_parse: 16 callbacks suppressed [ 576.712334][T26020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5712'. [ 576.764244][T26022] sctp: [Deprecated]: syz.6.5713 (pid 26022) Use of int in max_burst socket option deprecated. [ 576.764244][T26022] Use struct sctp_assoc_value instead [ 576.836486][T26024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5714'. [ 576.982346][T26036] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5718'. [ 577.136204][T26047] netlink: 'syz.4.5720': attribute type 1 has an invalid length. [ 577.142794][T26044] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5722'. [ 577.167915][T26048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5721'. [ 577.182273][T26044] macvtap2: entered allmulticast mode [ 577.190383][T26049] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 577.204268][T26047] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 577.236188][T26054] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 577.358281][T21021] tipc: Subscription rejected, illegal request [ 577.418719][T26065] smc: net device erspan0 erased user defined pnetid SYZ0 [ 577.442800][T26065] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ1 [ 577.523404][T26076] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5726'. [ 577.593262][T26081] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 577.792468][T26091] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5733'. [ 578.250113][T26115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5742'. [ 578.419060][T26125] netlink: 'syz.6.5745': attribute type 12 has an invalid length. [ 578.446158][T26125] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5745'. [ 578.558888][T26133] nbd: socks must be embedded in a SOCK_ITEM attr [ 578.820838][T26147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5750'. [ 580.850951][T21029] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.885807][T21029] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.926482][T21029] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 580.931680][T26217] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 580.937898][T21029] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.989301][T21029] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.028028][T21029] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 581.088971][T21029] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.115418][T21029] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.142292][T21029] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 581.171628][T21029] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.195675][T21029] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.226842][T21029] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 581.261686][T26213] syzkaller1: entered promiscuous mode [ 581.268018][T26213] syzkaller1: entered allmulticast mode [ 582.056762][T26274] __nla_validate_parse: 35 callbacks suppressed [ 582.056781][T26274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5779'. [ 582.100386][T26274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5779'. [ 582.294000][T26285] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 582.330250][T26289] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 582.375165][T26285] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5783'. [ 582.415115][T26293] netlink: 'syz.3.5787': attribute type 1 has an invalid length. [ 582.429594][T26293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5787'. [ 582.586368][T26304] tipc: Enabled bearer , priority 0 [ 582.599494][T26304] syzkaller0: entered promiscuous mode [ 582.611587][T26304] syzkaller0: entered allmulticast mode [ 582.695654][T26304] tipc: Resetting bearer [ 582.757858][T26315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5795'. [ 582.776534][T26304] tipc: Disabling bearer [ 583.013610][T26329] netlink: 'syz.4.5799': attribute type 11 has an invalid length. [ 583.329936][ T48] IPVS: starting estimator thread 0... [ 583.351852][T26359] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5808'. [ 583.358534][T26357] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5809'. [ 583.372643][T26357] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 583.403459][T26348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 583.416155][T26361] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 583.428906][T26363] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5810'. [ 583.438381][T26358] IPVS: using max 33 ests per chain, 79200 per kthread [ 583.581468][T26374] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5813'. [ 583.595078][T26374] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5813'. [ 584.352020][T26415] tipc: Enabling of bearer rejected, already enabled [ 584.363841][T26419] tipc: Enabled bearer , priority 0 [ 584.375656][T26419] syzkaller0: entered promiscuous mode [ 584.383261][T26419] syzkaller0: entered allmulticast mode [ 584.419167][T26419] tipc: Resetting bearer [ 584.653205][T26417] tipc: Resetting bearer [ 584.723798][T26417] tipc: Disabling bearer [ 584.923954][T26446] netlink: 'syz.6.5833': attribute type 1 has an invalid length. [ 585.003194][T26447] xfrm1: entered promiscuous mode [ 585.016798][T26447] xfrm1: entered allmulticast mode [ 585.404042][T26476] xt_policy: neither incoming nor outgoing policy selected [ 585.415814][T26464] syzkaller0: entered promiscuous mode [ 585.421330][T26464] syzkaller0: entered allmulticast mode [ 585.429169][T26471] tipc: Enabled bearer , priority 0 [ 585.437869][T26464] netlink: 'syz.4.5838': attribute type 4 has an invalid length. [ 585.458993][T26464] tipc: Resetting bearer [ 585.475642][T26461] tipc: Resetting bearer [ 587.436599][T26461] tipc: Disabling bearer [ 587.447682][T26480] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 587.531989][T26496] __nla_validate_parse: 10 callbacks suppressed [ 587.532011][T26496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5849'. [ 587.619597][T26502] netlink: 'syz.2.5851': attribute type 1 has an invalid length. [ 587.632947][T26502] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5851'. [ 587.755289][T26511] IPv6: sit1: Disabled Multicast RS [ 587.771984][T26511] sit1: entered allmulticast mode [ 587.853797][T26521] openvswitch: netlink: Missing valid actions attribute. [ 587.861596][T26521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.985960][T26533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5860'. [ 588.207786][T26549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.223814][T26549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.243788][T26549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.265725][T26549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.302442][T26549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.337418][T26549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.363392][T26549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.381132][T26549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.480836][T26555] netlink: 'syz.3.5866': attribute type 2 has an invalid length. [ 588.502249][T26558] netlink: 'syz.3.5866': attribute type 2 has an invalid length. [ 588.512158][T26561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5869'. [ 588.752795][T26573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5874'. [ 588.930604][T26584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5879'. [ 588.949395][T26584] ip_vti0: entered promiscuous mode [ 588.963960][T26584] ip_vti0: entered allmulticast mode [ 588.971524][T26584] netlink: 'syz.2.5879': attribute type 1 has an invalid length. [ 588.975175][T26585] syzkaller0: entered promiscuous mode [ 588.986874][T26585] syzkaller0: entered allmulticast mode [ 588.995928][T26584] netlink: 'syz.2.5879': attribute type 1 has an invalid length. [ 589.004027][T26579] tipc: Enabled bearer , priority 0 [ 589.016635][T26584] netlink: 'syz.2.5879': attribute type 1 has an invalid length. [ 589.084282][T26579] tipc: Resetting bearer [ 589.125700][T26579] tipc: Disabling bearer [ 589.151316][T26584] veth13: entered promiscuous mode [ 589.515480][T26608] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.567976][T26609] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5885'. [ 589.593714][T26615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5888'. [ 589.621617][T26609] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5885'. [ 589.711969][T26622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5890'. [ 590.853779][T26696] netlink: 'syz.1.5910': attribute type 4 has an invalid length. [ 590.903404][T26671] lo speed is unknown, defaulting to 1000 [ 591.137623][T26704] netlink: 'syz.4.5914': attribute type 7 has an invalid length. [ 591.146420][T26704] netlink: 'syz.4.5914': attribute type 8 has an invalid length. [ 591.439623][T26718] netlink: 'syz.2.5918': attribute type 1 has an invalid length. [ 593.121815][T26704] gretap0: entered promiscuous mode [ 593.127975][T26704] batadv_slave_1: entered promiscuous mode [ 593.134883][T26704] erspan0: entered promiscuous mode [ 593.141150][T26704] debugfs: 'hsr1' already exists in 'hsr' [ 593.148630][T26704] Cannot create hsr debugfs directory [ 593.154248][T26704] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 593.166153][T26704] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 593.176855][T26704] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network [ 593.593066][T26739] __nla_validate_parse: 9 callbacks suppressed [ 593.593083][T26739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5924'. [ 593.612999][T26739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5924'. [ 593.657953][T26739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5924'. [ 593.692142][T26743] sit0: entered promiscuous mode [ 593.768354][T26743] netlink: 'syz.3.5925': attribute type 1 has an invalid length. [ 593.834164][T26743] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5925'. [ 594.191192][T26769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5931'. [ 594.221740][T26769] net_ratelimit: 25 callbacks suppressed [ 594.221758][T26769] openvswitch: netlink: Actions may not be safe on all matching packets [ 594.338709][T26775] netlink: 'syz.2.5934': attribute type 4 has an invalid length. [ 594.355582][T26775] netlink: 'syz.2.5934': attribute type 4 has an invalid length. [ 596.548697][T26786] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 596.630221][T26806] netlink: 'syz.4.5941': attribute type 10 has an invalid length. [ 596.661838][T26806] team0: Device ipvlan1 failed to register rx_handler [ 596.810582][T26816] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5944'. [ 596.973014][T26823] netlink: 'syz.3.5948': attribute type 1 has an invalid length. [ 597.062259][T26820] syzkaller0: entered promiscuous mode [ 597.088591][T26820] syzkaller0: entered allmulticast mode [ 597.107223][T26823] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 597.149876][T26826] tipc: Enabled bearer , priority 0 [ 597.239542][T26826] syzkaller0: entered promiscuous mode [ 597.246176][T26826] syzkaller0: entered allmulticast mode [ 597.305284][T26826] tipc: Resetting bearer [ 597.352638][T26824] tipc: Resetting bearer [ 597.397785][T26842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5952'. [ 597.442133][T26824] tipc: Disabling bearer [ 597.470658][T26842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5952'. [ 597.471567][T26848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5951'. [ 597.496011][T26848] netlink: 'syz.3.5951': attribute type 5 has an invalid length. [ 597.534164][T26848] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5951'. [ 597.584956][T26848] geneve4: entered promiscuous mode [ 597.600980][T26848] geneve4: entered allmulticast mode [ 597.620499][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 597.631125][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 597.638310][T21025] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 597.654662][T21025] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 597.663228][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 597.683960][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 597.692159][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 597.875990][T21025] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 597.884144][T21025] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 598.005627][T26865] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 599.712982][T26875] batadv_slave_0: entered promiscuous mode [ 599.808961][ T5875] Bluetooth: hci3: command tx timeout [ 599.816311][T26874] team0: Port device dummy0 removed [ 599.824182][T26874] bridge_slave_0: left allmulticast mode [ 599.850066][T26874] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.908852][T26874] bridge_slave_1: left allmulticast mode [ 599.958322][T26874] bridge_slave_1: left promiscuous mode [ 599.975546][T26874] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.026536][T26874] team0: Port device team_slave_0 removed [ 600.052852][T26874] team0: Port device team_slave_1 removed [ 600.060360][T26874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.073108][T26874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.080851][T26874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.097030][T26874] bridge0: port 3(macsec0) entered disabled state [ 600.112163][T26874] bond1: (slave gretap1): Releasing active interface [ 600.121649][T26874] gretap1: left promiscuous mode [ 600.128101][T26874] gretap1: left allmulticast mode [ 600.147614][T26874] bond2: (slave veth3): Releasing active interface [ 600.160751][T26874] vlan3: left promiscuous mode [ 600.165988][T26874] veth0_to_bond: left promiscuous mode [ 600.171741][T26874] bridge2: port 1(vlan3) entered disabled state [ 600.182303][T26874] bond4: (slave bond5): Releasing backup interface [ 600.199073][T26874] batman_adv: batadv0: Removing interface: ipvlan2 [ 600.210059][T26874] bond7: (slave bond8): Releasing backup interface [ 600.217751][T26874] bond8: left promiscuous mode [ 600.331098][T26888] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 600.419805][T26850] lo speed is unknown, defaulting to 1000 [ 600.425895][T26892] netlink: 'syz.3.5960': attribute type 1 has an invalid length. [ 600.444977][T26872] batadv_slave_0: left promiscuous mode [ 600.465965][T26901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5962'. [ 600.647255][T26913] netlink: 'syz.1.5965': attribute type 1 has an invalid length. [ 600.690413][T26913] dvmrp0: entered allmulticast mode [ 600.969077][T26925] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.5966'. [ 601.719933][T26927] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 601.766079][T26927] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5969'. [ 601.778480][T26932] delete_channel: no stack [ 601.817746][T26929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 601.885135][ T5875] Bluetooth: hci3: command tx timeout [ 602.032572][T26947] netlink: 165 bytes leftover after parsing attributes in process `syz.4.5972'. [ 602.043267][T26947] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5972'. [ 602.088077][T26850] chnl_net:caif_netlink_parms(): no params data found [ 602.141067][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5973'. [ 602.319466][T26961] tipc: Enabled bearer , priority 0 [ 602.331181][T26961] tipc: Resetting bearer [ 602.342760][T26960] tipc: Disabling bearer [ 602.388770][T26850] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.406596][T26850] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.419897][T26850] bridge_slave_0: entered allmulticast mode [ 602.438986][T26850] bridge_slave_0: entered promiscuous mode [ 602.466802][T26850] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.486758][T26850] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.494103][T26850] bridge_slave_1: entered allmulticast mode [ 602.506587][T26850] bridge_slave_1: entered promiscuous mode [ 602.661037][T26850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.703499][T26850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.897225][T26850] team0: Port device team_slave_0 added [ 602.924022][T26850] team0: Port device team_slave_1 added [ 602.996875][T26996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5984'. [ 603.048569][T26850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.064812][T26850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.098314][T26850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.180610][T26850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.200315][T26850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.232909][T26850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.470581][T26850] hsr_slave_0: entered promiscuous mode [ 603.485652][T26850] hsr_slave_1: entered promiscuous mode [ 603.494120][T26850] debugfs: 'hsr0' already exists in 'hsr' [ 603.509665][T26850] Cannot create hsr debugfs directory [ 603.520599][T27031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5995'. [ 603.543740][T27033] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5996'. [ 603.590262][T27038] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5998'. [ 603.678011][T27036] tipc: Enabling of bearer rejected, already enabled [ 603.690167][T27036] mac80211_hwsim hwsim27 syzkaller0: left promiscuous mode [ 603.967077][ T5875] Bluetooth: hci3: command tx timeout [ 604.152458][T27070] netlink: 'syz.1.6007': attribute type 1 has an invalid length. [ 604.387828][T27074] syzkaller0: create flow: hash 1490788594 index 1 [ 604.448546][T27078] netlink: 'syz.6.6011': attribute type 11 has an invalid length. [ 604.568760][T27068] syzkaller0: delete flow: hash 1490788594 index 1 [ 606.044630][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 606.050238][ T51] Bluetooth: hci3: command tx timeout [ 606.460031][T27089] tipc: Enabling of bearer rejected, failed to enable media [ 606.572043][T27107] netlink: 'syz.4.6015': attribute type 1 has an invalid length. [ 606.821265][T27107] 8021q: adding VLAN 0 to HW filter on device bond11 [ 606.831226][T26850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 606.843647][T27122] __nla_validate_parse: 4 callbacks suppressed [ 606.843687][T27122] netlink: 160 bytes leftover after parsing attributes in process `syz.6.6018'. [ 606.895607][T27130] tipc: Enabled bearer , priority 0 [ 606.907139][T26850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 606.932517][T27134] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6021'. [ 606.951259][T27134] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 606.958559][T26850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 606.993775][T26850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 607.050446][T27128] tipc: Disabling bearer [ 607.270855][T27153] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6024'. [ 607.311083][T27153] tipc: Invalid UDP bearer configuration [ 607.311143][T27153] tipc: Enabling of bearer rejected, failed to enable media [ 607.411243][T26850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.566908][T27168] veth15: entered promiscuous mode [ 607.629908][T27172] veth0_to_team: entered promiscuous mode [ 607.640148][T27172] veth0_to_team: entered allmulticast mode [ 607.718003][T26850] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.756738][ T7434] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.763898][ T7434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.840037][ T7434] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.847258][ T7434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.070309][T27187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6033'. [ 608.347011][T27196] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6036'. [ 608.520301][T27209] netlink: 'syz.6.6041': attribute type 83 has an invalid length. [ 608.552732][T26850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.581950][T27209] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6041'. [ 608.613550][T27209] tipc: Enabling of bearer rejected, failed to enable media [ 608.636549][T27209] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6041'. [ 608.801168][T26850] veth0_vlan: entered promiscuous mode [ 608.846242][T27167] lo speed is unknown, defaulting to 1000 [ 608.885178][T26850] veth1_vlan: entered promiscuous mode [ 608.971098][T27227] tipc: Failed to remove unknown binding: 66,1,1/932407497:1751029610/1751029612 [ 609.052855][T26850] veth0_macvtap: entered promiscuous mode [ 609.099312][T26850] veth1_macvtap: entered promiscuous mode [ 609.182892][T26850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.271740][T26850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.333115][T21029] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.344918][T21029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.353664][T21029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.469605][T21029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.575674][T27246] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6050'. [ 609.584079][ T7434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.593390][ T7434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.653340][T27248] syzkaller1: entered promiscuous mode [ 609.659858][T27248] syzkaller1: entered allmulticast mode [ 609.770617][T27252] netlink: 'syz.1.6051': attribute type 29 has an invalid length. [ 609.780697][T27252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6051'. [ 609.791784][T21019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.793019][T27252] netlink: 'syz.1.6051': attribute type 29 has an invalid length. [ 609.801221][T21019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.816577][T27252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6051'. [ 610.408664][T27279] macvlan0: entered promiscuous mode [ 610.419362][T27279] macvlan0: entered allmulticast mode [ 610.798564][T27299] tipc: Enabled bearer , priority 0 [ 610.859861][T27299] tipc: Disabling bearer [ 611.010042][T27307] netlink: 'syz.3.6065': attribute type 2 has an invalid length. [ 611.036485][T27307] nbd: must specify at least one socket [ 611.084055][T27312] tipc: Enabled bearer , priority 10 [ 611.111794][T27312] tipc: Enabled bearer , priority 0 [ 611.322358][T27312] syzkaller0: entered promiscuous mode [ 611.339798][T27312] syzkaller0: entered allmulticast mode [ 611.351735][T27312] tipc: Resetting bearer [ 611.384922][T27323] tipc: MTU too low for tipc bearer [ 611.450665][T27310] tipc: Resetting bearer [ 611.840675][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 611.863247][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 611.875525][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 611.901135][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 611.910976][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 613.783248][T27310] tipc: Disabling bearer [ 613.795291][T27331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.910468][T27338] netlink: 'syz.2.6075': attribute type 11 has an invalid length. [ 613.964519][ T5875] Bluetooth: hci0: command tx timeout [ 614.147606][T27347] __nla_validate_parse: 12 callbacks suppressed [ 614.147624][T27347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6077'. [ 614.222208][T27359] netlink: 'syz.1.6078': attribute type 1 has an invalid length. [ 614.282964][T27357] veth7: entered promiscuous mode [ 614.333469][T27359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6078'. [ 614.368686][T27362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6078'. [ 614.431319][T27365] netlink: 232 bytes leftover after parsing attributes in process `syz.2.6080'. [ 614.550364][T27371] netlink: 'syz.6.6081': attribute type 33 has an invalid length. [ 614.657330][T27333] lo speed is unknown, defaulting to 1000 [ 614.713257][T27376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6083'. [ 614.741938][T27376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6083'. [ 614.752266][T27376] netlink: 50 bytes leftover after parsing attributes in process `syz.1.6083'. [ 615.002514][T27397] netlink: 'syz.1.6087': attribute type 5 has an invalid length. [ 615.049091][T27399] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6088'. [ 615.071562][T27399] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6088'. [ 615.178767][T27403] netlink: 'syz.1.6090': attribute type 1 has an invalid length. [ 615.256660][T27403] 8021q: adding VLAN 0 to HW filter on device bond11 [ 615.298588][T27403] bond11: (slave wlan0): Enslaving as an active interface with a down link [ 615.317428][T27410] netlink: 340 bytes leftover after parsing attributes in process `syz.1.6090'. [ 615.374821][T27403] vlan2: entered allmulticast mode [ 615.386362][T27403] veth1: entered allmulticast mode [ 615.400950][T27403] veth1: entered promiscuous mode [ 615.407585][T27403] veth1: left promiscuous mode [ 615.417868][T27403] bond11: (slave vlan2): making interface the new active one [ 615.425617][T27403] bond11: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 615.443972][T27403] veth1: entered promiscuous mode [ 615.485489][T27403] vlan2: entered promiscuous mode [ 615.491386][T27403] bond11: (slave vlan2): Enslaving as an active interface with an up link [ 615.546422][T27421] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 615.941826][T27333] chnl_net:caif_netlink_parms(): no params data found [ 616.045808][ T5875] Bluetooth: hci0: command tx timeout [ 616.228517][T27333] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.242514][T27333] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.249914][T27333] bridge_slave_0: entered allmulticast mode [ 616.258739][T27333] bridge_slave_0: entered promiscuous mode [ 616.267412][T27333] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.274884][T27333] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.282086][T27333] bridge_slave_1: entered allmulticast mode [ 616.292625][T27333] bridge_slave_1: entered promiscuous mode [ 616.338316][T27333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.358860][T27333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.417986][T27333] team0: Port device team_slave_0 added [ 616.432487][T27333] team0: Port device team_slave_1 added [ 616.571025][T27333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.587366][T27333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.651894][T27333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.668486][T27333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.683096][T27333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.747053][T27333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.886124][T27333] hsr_slave_0: entered promiscuous mode [ 616.896355][T27333] hsr_slave_1: entered promiscuous mode [ 616.911624][T27333] debugfs: 'hsr0' already exists in 'hsr' [ 616.921662][T27333] Cannot create hsr debugfs directory [ 617.880716][T27528] netlink: 'syz.1.6122': attribute type 9 has an invalid length. [ 617.894046][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 617.917439][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 617.936485][T27333] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 617.988191][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 618.007738][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 618.023916][T27333] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 618.038406][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 618.053456][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 618.065093][T27333] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 618.082192][T27333] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 618.109981][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 618.123519][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 618.124551][ T5875] Bluetooth: hci0: command tx timeout [ 618.151020][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 618.175812][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 618.189789][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 618.201968][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 618.221069][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 618.233853][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 618.246973][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 618.259471][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 618.303235][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 618.317188][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 618.328657][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 618.340315][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 618.363333][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 618.378439][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 618.391124][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 618.428332][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 618.490762][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 618.515055][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 618.550625][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 618.571456][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 618.611870][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 618.635373][T27529] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 618.821947][T27333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.874223][T27577] netlink: 'syz.1.6134': attribute type 21 has an invalid length. [ 618.890108][T27333] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.893111][T27577] IPv6: NLM_F_CREATE should be specified when creating new route [ 618.920101][T27577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 618.927425][T27577] IPv6: NLM_F_CREATE should be set when creating new route [ 618.932531][T21019] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.934694][T27577] IPv6: NLM_F_CREATE should be set when creating new route [ 618.941801][T21019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.948905][T27577] IPv6: NLM_F_CREATE should be set when creating new route [ 619.033533][T21019] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.040744][T21019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.094023][T27583] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 619.247106][T27591] netlink: 'syz.6.6141': attribute type 58 has an invalid length. [ 619.262630][T27592] __nla_validate_parse: 12 callbacks suppressed [ 619.262648][T27592] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6140'. [ 619.299002][T27591] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6141'. [ 619.582686][T27605] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6144'. [ 619.634078][T27610] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 619.661080][T27616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6147'. [ 619.706650][T27616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6147'. [ 619.710300][T27333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.732981][T27610] netlink: 248 bytes leftover after parsing attributes in process `syz.2.6145'. [ 619.755870][T27610] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6145'. [ 620.206629][ T5875] Bluetooth: hci0: command tx timeout [ 620.373389][T27655] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 620.414275][T27333] veth0_vlan: entered promiscuous mode [ 620.441583][T27333] veth1_vlan: entered promiscuous mode [ 620.513950][T27333] veth0_macvtap: entered promiscuous mode [ 620.553263][T27333] veth1_macvtap: entered promiscuous mode [ 620.603832][T27333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.631312][T27333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.682998][T21029] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.703192][T27665] netlink: 'syz.1.6163': attribute type 1 has an invalid length. [ 620.711090][T27665] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6163'. [ 620.727741][T27665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6163'. [ 620.734494][T21029] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.779988][T21029] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.802589][T21029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.923033][T27674] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6168'. [ 620.993645][ T7434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.038663][ T7434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.102708][ T7434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.121154][ T7434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.156918][T27683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.196932][T27685] tipc: Enabled bearer , priority 0 [ 621.227234][T27685] syzkaller0: entered promiscuous mode [ 621.252760][T27685] syzkaller0: entered allmulticast mode [ 621.288496][T27685] tipc: Resetting bearer [ 621.337000][T27684] tipc: Resetting bearer [ 621.378988][T27684] tipc: Disabling bearer [ 621.416707][T27699] nbd5: detected capacity change from 0 to 63 [ 621.467630][ T5875] block nbd5: Receive control failed (result -32) [ 621.689831][T27714] netlink: 'syz.6.6178': attribute type 17 has an invalid length. [ 621.700461][T27718] veth0_to_bridge: mtu greater than device maximum [ 621.819830][T27720] dummy0: left allmulticast mode [ 621.835564][T27720] bridge0: port 1(dummy0) entered disabled state [ 622.207350][T27737] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 622.443159][T27749] netlink: 'syz.4.6190': attribute type 1 has an invalid length. [ 622.626171][T27756] netlink: 'syz.3.6192': attribute type 16 has an invalid length. [ 622.640563][T27754] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001 [ 622.671684][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 622.686991][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 622.689254][T27756] netlink: 'syz.3.6192': attribute type 17 has an invalid length. [ 622.703991][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 622.718429][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 622.728807][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 622.731260][T27752] bond1 (unregistering): Released all slaves [ 622.845772][T27756] sit0: left promiscuous mode [ 622.887356][T27756] dummy0: left promiscuous mode [ 622.902605][T27756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 623.056450][ T5940] IPVS: starting estimator thread 0... [ 623.145551][T27771] IPVS: using max 27 ests per chain, 64800 per kthread [ 623.357837][T27759] lo speed is unknown, defaulting to 1000 [ 623.422020][T27786] netlink: 'syz.4.6199': attribute type 1 has an invalid length. [ 623.431758][T27786] netlink: 'syz.4.6199': attribute type 1 has an invalid length. [ 623.458769][T27786] netlink: 'syz.4.6199': attribute type 1 has an invalid length. [ 623.536721][T27792] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 623.804982][ T8522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.978510][T27815] bridge0: port 3(batadv1) entered blocking state [ 623.986260][T27815] bridge0: port 3(batadv1) entered disabled state [ 623.993432][T27815] batadv1: entered allmulticast mode [ 624.000978][T27815] batadv1: entered promiscuous mode [ 624.370982][T27831] Bluetooth: MGMT ver 1.23 [ 624.428488][T27759] chnl_net:caif_netlink_parms(): no params data found [ 624.491538][T21019] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 624.501430][T21019] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 624.718433][T27759] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.726589][T27759] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.738030][T27759] bridge_slave_0: entered allmulticast mode [ 624.759924][T27759] bridge_slave_0: entered promiscuous mode [ 624.796481][T27759] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.819986][T27759] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.837433][T27759] bridge_slave_1: entered allmulticast mode [ 624.845666][ T5875] Bluetooth: hci1: command tx timeout [ 624.863584][T27759] bridge_slave_1: entered promiscuous mode [ 624.878999][T27863] netlink: 'syz.2.6220': attribute type 7 has an invalid length. [ 624.964227][T27759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.040946][T27759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.165481][T27759] team0: Port device team_slave_0 added [ 625.189233][T27759] team0: Port device team_slave_1 added [ 625.309507][T27759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.316778][T27759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.358550][T27759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.379802][T27759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.390986][T27862] __nla_validate_parse: 10 callbacks suppressed [ 625.391006][T27862] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6217'. [ 625.430651][T27759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.480301][T27759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.496615][T27886] netlink: 'syz.6.6225': attribute type 1 has an invalid length. [ 625.524990][T27886] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6225'. [ 625.599410][T27893] netlink: 'syz.3.6226': attribute type 4 has an invalid length. [ 625.599410][T27892] netlink: 'syz.3.6226': attribute type 4 has an invalid length. [ 625.636146][T27886] netlink: 'syz.6.6225': attribute type 1 has an invalid length. [ 625.651232][T27897] netlink: 'syz.3.6226': attribute type 4 has an invalid length. [ 625.654421][T27886] nbd: error processing sock list [ 625.681385][T27886] block nbd6: shutting down sockets [ 625.767358][T27759] hsr_slave_0: entered promiscuous mode [ 625.774169][T27759] hsr_slave_1: entered promiscuous mode [ 625.806228][T27759] debugfs: 'hsr0' already exists in 'hsr' [ 625.822792][T27759] Cannot create hsr debugfs directory [ 625.834019][T26205] lo speed is unknown, defaulting to 1000 [ 625.850779][T27904] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6229'. [ 625.994135][T26205] lo speed is unknown, defaulting to 1000 [ 626.004850][T27898] syzkaller1: entered promiscuous mode [ 626.010410][T27898] syzkaller1: entered allmulticast mode [ 626.037232][T27896] xt_limit: Overflow, try lower: 604147548/4200216962 [ 626.117018][T26208] lo speed is unknown, defaulting to 1000 [ 626.288116][T27928] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 626.551204][T27947] tipc: Started in network mode [ 626.564419][T27947] tipc: Node identity 469afe99eed4, cluster identity 4711 [ 626.572108][T27947] tipc: Enabled bearer , priority 0 [ 626.642161][T27953] syzkaller0: entered promiscuous mode [ 626.648826][T27953] syzkaller0: entered allmulticast mode [ 626.838076][T27953] tipc: Resetting bearer [ 626.847387][T21019] vlan2: left promiscuous mode [ 626.884724][T27945] tipc: Resetting bearer [ 626.930066][ T5875] Bluetooth: hci1: command tx timeout [ 626.945355][T27945] tipc: Disabling bearer [ 626.976566][T27968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6245'. [ 627.071173][T27759] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.101147][T27759] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.119052][T27759] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 627.325255][T28001] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20001 [ 627.356786][T27759] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.395195][T27759] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.425886][T27759] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 627.482675][T28008] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6255'. [ 627.579039][T27759] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.592029][T28011] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6255'. [ 627.619216][T27759] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.638166][T27759] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 627.732944][T27759] netdevsim netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.764125][T27759] netdevsim netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.788849][T27759] netdevsim netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 627.979536][T28035] IPVS: Error connecting to the multicast addr [ 628.177386][T27759] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 628.232393][T27759] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 628.250023][T27759] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 628.279445][T28051] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6269'. [ 628.289149][T28051] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6269'. [ 628.300138][T27759] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 628.528886][T28069] netlink: 360 bytes leftover after parsing attributes in process `syz.3.6273'. [ 628.538304][T28070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6272'. [ 628.593167][T27759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.664178][T28075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.704261][T27759] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.763023][T21025] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.770233][T21025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.803561][T21025] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.810825][T21025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.951174][T27759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 629.005117][ T5875] Bluetooth: hci1: command tx timeout [ 629.118210][T28099] IPVS: Error connecting to the multicast addr [ 629.338911][T28109] tipc: Enabled bearer , priority 0 [ 629.379269][T28109] syzkaller0: entered promiscuous mode [ 629.398295][T28109] syzkaller0: entered allmulticast mode [ 629.423354][T28112] netem: unknown loss type 0 [ 629.429669][T28112] netem: change failed [ 629.488139][T27759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.497626][T28109] tipc: Resetting bearer [ 629.518444][T28106] syzkaller1: entered promiscuous mode [ 629.524065][T28106] syzkaller1: entered allmulticast mode [ 629.539465][T28107] tipc: Resetting bearer [ 629.561008][T28107] tipc: Disabling bearer [ 629.784575][T27759] veth0_vlan: entered promiscuous mode [ 629.817432][T27759] veth1_vlan: entered promiscuous mode [ 629.919689][T27759] veth0_macvtap: entered promiscuous mode [ 629.973959][T28135] 8021q: VLANs not supported on ip6tnl0 [ 629.994116][T27759] veth1_macvtap: entered promiscuous mode [ 630.051888][T27759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.073412][T27759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.107272][T21029] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.128791][T21029] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.188074][T21029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.200005][T21029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.433363][T21029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.449769][T21029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.516307][T21029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.548105][T21029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.768038][T28169] __nla_validate_parse: 2 callbacks suppressed [ 630.768057][T28169] netlink: 198220 bytes leftover after parsing attributes in process `syz.6.6302'. [ 630.788850][T28168] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6180'. [ 630.983879][T28174] bridge_slave_0: left allmulticast mode [ 631.056006][T28174] bridge_slave_0: left promiscuous mode [ 631.061848][T28174] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.084832][ T5875] Bluetooth: hci1: command tx timeout [ 631.203034][T28174] bridge_slave_1: left allmulticast mode [ 631.215363][T28174] bridge_slave_1: left promiscuous mode [ 631.223383][T28174] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.287851][T28174] bond0: (slave bond_slave_0): Releasing backup interface [ 631.319024][T28174] bond0: (slave bond_slave_1): Releasing backup interface [ 631.371774][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 631.374131][T28174] team0: Port device team_slave_0 removed [ 631.391236][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 631.411200][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 631.422511][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 631.436465][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 631.436716][T28174] team0: Port device team_slave_1 removed [ 631.488814][T28174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.505177][T28174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.513742][T28174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.524115][T28174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.599062][T28190] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 631.631436][T28190] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 631.846806][T28199] tipc: Enabling of bearer rejected, failed to enable media [ 631.998193][T28205] veth1_macvtap: left allmulticast mode [ 632.018225][T28205] veth1_macvtap: left promiscuous mode [ 632.023739][T28205] macsec0: left promiscuous mode [ 632.057636][T28205] macsec0: left allmulticast mode [ 632.077348][T28210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6317'. [ 632.108667][T28210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6317'. [ 632.176898][T28187] lo speed is unknown, defaulting to 1000 [ 632.322186][T28220] openvswitch: netlink: Actions may not be safe on all matching packets [ 632.663284][T28229] netlink: 'syz.2.6324': attribute type 1 has an invalid length. [ 633.008738][T28244] netlink: 'syz.2.6327': attribute type 1 has an invalid length. [ 633.011020][T28246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6326'. [ 633.036811][T28187] chnl_net:caif_netlink_parms(): no params data found [ 633.042719][T28244] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.6327'. [ 633.106091][T28252] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 633.164851][T28258] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6330'. [ 633.355851][T28187] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.363897][T28187] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.384232][T28187] bridge_slave_0: entered allmulticast mode [ 633.417297][T28187] bridge_slave_0: entered promiscuous mode [ 633.449033][T28187] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.474964][T28187] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.503333][T28187] bridge_slave_1: entered allmulticast mode [ 633.526307][T28187] bridge_slave_1: entered promiscuous mode [ 633.567656][ T5875] Bluetooth: hci5: command tx timeout [ 633.581757][ T7434] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 633.611647][T28187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.639501][T28187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.700504][T28187] team0: Port device team_slave_0 added [ 633.710972][T28187] team0: Port device team_slave_1 added [ 633.758279][T28289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6336'. [ 633.800233][T28187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.808108][T28187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.839613][T28187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.892732][T28187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.907281][T28187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.935018][T28187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.067970][T28280] lo speed is unknown, defaulting to 1000 [ 634.085697][T28187] hsr_slave_0: entered promiscuous mode [ 634.108021][T28187] hsr_slave_1: entered promiscuous mode [ 634.125378][T28187] debugfs: 'hsr0' already exists in 'hsr' [ 634.131158][T28187] Cannot create hsr debugfs directory [ 634.279047][T28283] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6335'. [ 634.446567][T28300] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 634.738148][T28187] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.761369][T28187] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 635.011450][T28187] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.024434][T28187] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 635.185832][T28187] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.204961][T28187] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 635.252633][T28320] netlink: 'syz.1.6342': attribute type 1 has an invalid length. [ 635.380177][T28187] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.395434][T28187] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 635.645524][ T5875] Bluetooth: hci5: command tx timeout [ 635.949330][T28187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 636.013199][T28187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 636.091557][T28187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 636.160788][T28187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 636.210808][T28342] batman_adv: batadv0: Adding interface: ipvlan0 [ 636.237162][T28342] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.263711][T28342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.275274][T28342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.298975][T28342] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 636.371194][T28343] syzkaller0: entered promiscuous mode [ 636.380691][T28343] syzkaller0: entered allmulticast mode [ 636.620219][T28361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6357'. [ 636.650312][T28368] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6360'. [ 636.779904][T28187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.823254][T28187] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.843726][T21025] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.850947][T21025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.868559][T21025] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.875791][T21025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.884742][T28375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6361'. [ 636.959841][T28383] netlink: 'syz.6.6364': attribute type 1 has an invalid length. [ 637.111885][T28187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 637.300162][T28404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6371'. [ 637.415344][T28408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6372'. [ 637.478253][T28408] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 637.486546][T28413] netlink: 'syz.6.6372': attribute type 11 has an invalid length. [ 637.486568][T28413] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6372'. [ 637.606787][T28408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.620707][T28420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6376'. [ 637.643780][T28187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.684062][T28420] netlink: 'syz.4.6376': attribute type 1 has an invalid length. [ 637.721278][T28420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6376'. [ 637.735045][ T5875] Bluetooth: hci5: command tx timeout [ 637.782464][T28420] syzkaller0: entered promiscuous mode [ 637.814151][T28420] syzkaller0: entered allmulticast mode [ 637.865126][T28427] tipc: Started in network mode [ 637.880071][T28427] tipc: Node identity 82d2faec31a5, cluster identity 4711 [ 637.928341][T28427] tipc: Enabled bearer , priority 0 [ 637.983249][T28427] tipc: Resetting bearer [ 638.019821][T28418] tipc: Resetting bearer [ 638.066939][T28418] tipc: Disabling bearer [ 638.146513][T28187] veth0_vlan: entered promiscuous mode [ 638.174135][T28187] veth1_vlan: entered promiscuous mode [ 638.254197][T28187] veth0_macvtap: entered promiscuous mode [ 638.291497][T28187] veth1_macvtap: entered promiscuous mode [ 638.331271][T28187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.416326][T28452] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6381'. [ 638.418363][T28450] : entered promiscuous mode [ 638.528136][T28187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.629084][T28461] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6387'. [ 638.651031][T21030] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.683626][T21030] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.734783][T21030] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.773573][T21030] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.094139][T21025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.113614][T21025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.162576][T28486] tipc: Enabled bearer , priority 0 [ 639.172753][T28486] syzkaller0: entered promiscuous mode [ 639.183628][T28486] syzkaller0: entered allmulticast mode [ 639.190485][T28486] tipc: Resetting bearer [ 639.290902][T28496] netlink: 'syz.2.6395': attribute type 4 has an invalid length. [ 639.345981][T28494] netlink: 'syz.2.6395': attribute type 4 has an invalid length. [ 639.805224][ T5875] Bluetooth: hci5: command tx timeout [ 640.188606][ T8521] tipc: Node number set to 3010984684 [ 641.208729][ T59] tipc: Resetting bearer [ 641.219564][T28500] tipc: Resetting bearer [ 641.272200][T28482] tipc: Resetting bearer [ 641.291823][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.301201][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.311903][T28482] tipc: Resetting bearer [ 641.352691][T28482] tipc: Disabling bearer [ 641.479917][T28507] netlink: 'syz.1.6398': attribute type 1 has an invalid length. [ 641.489167][T28507] netlink: 'syz.1.6398': attribute type 1 has an invalid length. [ 641.997282][T28537] __nla_validate_parse: 1 callbacks suppressed [ 641.997303][T28537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6407'. [ 642.542996][T28550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6411'. [ 642.583386][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 642.600187][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 642.615562][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 642.641043][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 642.651231][T28564] netlink: 'syz.4.6414': attribute type 27 has an invalid length. [ 642.661883][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 642.678542][T28561] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6413'. [ 642.771344][T28569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6415'. [ 642.843397][T28569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6415'. [ 643.125221][T28579] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6417'. [ 643.154851][T28579] netem: invalid attributes len -24 [ 643.160097][T28579] netem: change failed [ 643.205421][T28582] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 643.510158][T28589] tipc: Enabled bearer , priority 0 [ 643.541193][T28589] syzkaller0: entered promiscuous mode [ 643.575187][T28589] syzkaller0: entered allmulticast mode [ 643.586691][T28594] Unsupported ieee802154 address type: 0 [ 643.655896][T28589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6421'. [ 643.707114][T28589] tipc: Resetting bearer [ 643.730304][T28557] lo speed is unknown, defaulting to 1000 [ 643.731710][T28589] tipc: Enabling of bearer rejected, already enabled [ 643.905737][T28588] tipc: Resetting bearer [ 643.991832][T28588] tipc: Disabling bearer [ 644.184170][T28618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6424'. [ 644.204800][T28618] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6424'. [ 644.348941][T28623] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6428'. [ 644.385699][T28625] netlink: 'syz.2.6429': attribute type 11 has an invalid length. [ 644.669496][T28557] chnl_net:caif_netlink_parms(): no params data found [ 644.768257][ T5875] Bluetooth: hci2: command tx timeout [ 644.910443][T28654] netlink: 'syz.4.6436': attribute type 1 has an invalid length. [ 644.923775][T28654] netlink: 'syz.4.6436': attribute type 2 has an invalid length. [ 644.944039][T28557] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.952831][T28557] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.961996][T28557] bridge_slave_0: entered allmulticast mode [ 644.973531][T28557] bridge_slave_0: entered promiscuous mode [ 644.998327][T28557] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.007123][T28557] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.014492][T28557] bridge_slave_1: entered allmulticast mode [ 645.023940][T28557] bridge_slave_1: entered promiscuous mode [ 645.091477][T28557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.116043][T28557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.158799][T28557] team0: Port device team_slave_0 added [ 645.170375][T28557] team0: Port device team_slave_1 added [ 645.205955][T28557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.212931][T28557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.241142][T28557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.255530][T28557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.262496][T28557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.289701][T28557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.357714][T28557] hsr_slave_0: entered promiscuous mode [ 645.364186][T28557] hsr_slave_1: entered promiscuous mode [ 645.371606][T28557] debugfs: 'hsr0' already exists in 'hsr' [ 645.378918][T28557] Cannot create hsr debugfs directory [ 645.517457][T28557] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.529017][T28557] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.595306][T28557] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.616525][T28557] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.743355][T28557] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.759265][T28557] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.850242][T28557] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.860257][T28557] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.007840][T28557] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 646.018767][T28557] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 646.031919][T28557] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 646.042868][T28557] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 646.148209][T28557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.173836][T28557] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.192200][T21028] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.199397][T21028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.210456][T21028] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.217642][T21028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.433196][T28557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.693141][T28557] veth0_vlan: entered promiscuous mode [ 646.710264][T28557] veth1_vlan: entered promiscuous mode [ 646.742416][T28557] veth0_macvtap: entered promiscuous mode [ 646.753382][T28557] veth1_macvtap: entered promiscuous mode [ 646.765322][T22635] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] SMP KASAN PTI [ 646.776824][T28557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.777236][T22635] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] SYZFAIL: failed to recv rpc [ 646.789931][T28557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.792806][T22635] CPU: 0 UID: 0 PID: 22635 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 646.806012][T21027] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.809400][T22635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 646.828096][T22635] Workqueue: events l2cap_info_timeout [ 646.833576][T22635] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 646.839473][T22635] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 d0 d1 59 09 cc 66 66 66 66 66 66 2e [ 646.859070][T22635] RSP: 0018:ffffc90012c1f7a8 EFLAGS: 00010206 [ 646.865136][T22635] RAX: dffffc0000000000 RBX: ffffffff895a4928 RCX: 07abd1d0365aa400 [ 646.873110][T22635] RDX: 0000000000000000 RSI: ffffffff895a4928 RDI: 000000000000004b [ 646.881075][T22635] RBP: ffffffff8a839855 R08: 0000000000000001 R09: 0000000000000000 [ 646.889032][T22635] R10: dffffc0000000000 R11: ffffffff8a839810 R12: 0000000000000000 [ 646.896988][T22635] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 646.904942][T22635] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 646.913853][T22635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 646.920422][T22635] CR2: 00007fe72ecb0e9c CR3: 0000000054f8a000 CR4: 00000000003526f0 [ 646.928381][T22635] Call Trace: [ 646.931646][T22635] [ 646.934557][T22635] __kasan_check_byte+0x12/0x40 [ 646.939398][T22635] lock_acquire+0x8d/0x360 [ 646.943800][T22635] ? lockdep_hardirqs_on+0x9c/0x150 [ 646.948985][T22635] ? __cancel_work+0x254/0x2e0 [ 646.953731][T22635] lock_sock_nested+0x48/0x100 [ 646.958488][T22635] ? l2cap_sock_ready_cb+0x45/0x140 [ 646.963669][T22635] l2cap_sock_ready_cb+0x45/0x140 [ 646.968697][T22635] l2cap_conn_start+0x76d/0xe50 [ 646.973546][T22635] ? __pfx_l2cap_conn_start+0x10/0x10 [ 646.978905][T22635] ? __lock_acquire+0xab9/0xd20 [ 646.983740][T22635] ? __pfx___mutex_lock+0x10/0x10 [ 646.988761][T22635] ? process_scheduled_works+0x9ef/0x17b0 [ 646.994481][T22635] l2cap_info_timeout+0x68/0xa0 [ 646.999334][T22635] ? process_scheduled_works+0x9ef/0x17b0 [ 647.005037][T22635] process_scheduled_works+0xae1/0x17b0 [ 647.010660][T22635] ? __pfx_process_scheduled_works+0x10/0x10 [ 647.016629][T22635] worker_thread+0x8a0/0xda0 [ 647.021219][T22635] kthread+0x70e/0x8a0 [ 647.025269][T22635] ? __pfx_worker_thread+0x10/0x10 [ 647.030358][T22635] ? __pfx_kthread+0x10/0x10 [ 647.034932][T22635] ? _raw_spin_unlock_irq+0x23/0x50 fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 647.040113][T22635] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.045297][T22635] ? __pfx_kthread+0x10/0x10 [ 647.049868][T22635] ret_from_fork+0x3fc/0x770 [ 647.054442][T22635] ? __pfx_ret_from_fork+0x10/0x10 [ 647.059533][T22635] ? __switch_to_asm+0x39/0x70 [ 647.064279][T22635] ? __switch_to_asm+0x33/0x70 [ 647.069034][T22635] ? __pfx_kthread+0x10/0x10 [ 647.073607][T22635] ret_from_fork_asm+0x1a/0x30 [ 647.078360][T22635] [ 647.081375][T22635] Modules linked in: [ 647.087068][T22635] ---[ end trace 0000000000000000 ]--- [ 647.092932][ T5875] Bluetooth: hci2: command tx timeout [ 647.099819][T22635] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 647.106985][T22635] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 d0 d1 59 09 cc 66 66 66 66 66 66 2e [ 647.113831][T21027] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.128224][T22635] RSP: 0018:ffffc90012c1f7a8 EFLAGS: 00010206 [ 647.142745][T22635] RAX: dffffc0000000000 RBX: ffffffff895a4928 RCX: 07abd1d0365aa400 [ 647.150864][T22635] RDX: 0000000000000000 RSI: ffffffff895a4928 RDI: 000000000000004b [ 647.155150][T21027] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.159877][T22635] RBP: ffffffff8a839855 R08: 0000000000000001 R09: 0000000000000000 [ 647.176663][T22635] R10: dffffc0000000000 R11: ffffffff8a839810 R12: 0000000000000000 [ 647.242279][T22635] R13: 0000000000000258 R14: 0000000000000258 R15: 0000000000000001 [ 647.251526][T21027] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.264423][T22635] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 647.278234][T22635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 647.288090][T22635] CR2: 00007f7ac14f7d60 CR3: 000000000df36000 CR4: 00000000003526f0 [ 647.290579][T28557] ieee80211 phy62: Selected rate control algorithm 'minstrel_ht' [ 647.300566][T22635] Kernel panic - not syncing: Fatal exception [ 647.305064][T22635] Kernel Offset: disabled