last executing test programs: 27.871301132s ago: executing program 3 (id=3349): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) (rerun: 64) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async, rerun: 32) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4048001}, 0xc000) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r8}, 0x94) (async, rerun: 32) recvmsg$unix(r5, &(0x7f00000006c0)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/65, 0x41}], 0x2, &(0x7f00000005c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x12022) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@delchain={0x4c, 0x2c, 0xf31, 0x70bd2c, 0x2001, {0x0, 0x0, 0x0, r6, {0x1}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x9, 0x2, 0x0, 0x2, 0x7, 0x6, 0x8000, 0x4}}, @TCA_U32_CLASSID={0x8, 0x1, {0x2, 0xd}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 27.378126961s ago: executing program 3 (id=3354): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e676c65edff0b000100000000000000000000000000000000000000000005"], &(0x7f0000000100)=0x2d) syz_emit_ethernet(0x83, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60000610004d3a00fe8000000000000000000000000000bbff0200000000000000000000000000010400907800000000608bb91d00001100fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000401780000000000983864eee1fe71e030673c5d9f3726cc865ecde5a8e40d32"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000083cd000000000000fdfffdff850000000e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000007ffec00b703000000000000850000007000004095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01090000000000000400"/28], 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@dev, 0x0}, &(0x7f0000000240)=0x14) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r1, 0x0, 0x9, 0x9}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800733268000100030010000000008000000000000000000c00020002000000150000000c000c800800030007"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000000000000070c00000000030005000000000002004e20ac1e01010000000000000000010014"], 0x70}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r2, @ANYBLOB='\r\x00\x00\x00\x00Vf\x00'/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="03000000020000000100"/28], 0x50) sendmsg$nl_generic(r4, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x20008800) 27.120787767s ago: executing program 3 (id=3356): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0xffffffffffff7e38}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x4800) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x1ff, 0x0, 0x2, 0x0, 0x6, 0x7f}, &(0x7f00000001c0)=0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x200200, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1403, 0x100, 0x70bd28, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c001}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x140d, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0xa07e69b1c5b9931f) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x140c, 0x2, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8841}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x81) socketpair(0x2a, 0x2, 0x6, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, &(0x7f0000000700)=0x8, r1, &(0x7f0000000740)=0x5, 0xeee, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r3, 0x200, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xffff14e1, 0x25}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x80) connect$inet6(r1, &(0x7f00000008c0)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) accept4$packet(r4, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14, 0x800) r9 = accept$packet(r4, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x14) getsockname$packet(r9, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b80)=0x14) getsockopt$llc_int(r4, 0x10c, 0x5, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000f80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x270, r10, 0x501, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_OURS={0x244, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x45, 0x5, "3454dd397374fe97fdeb5685886c099cedcad8e700c47f5ab10fb08300c6f1a9ca78cb98b4ba332485ef29d96b2cca0f9d2fd2fb4ac8cbb35c0885e36a081d20bc"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x40, 0x4, "5a772d6d9ba2ef9fa6d922b7c20c404aeb2ece5b64da1bc6c50e8ab004d7d803f46177f2a5be5039359e85686fb06045e977b6400b7262adae28c499"}, @ETHTOOL_A_BITSET_VALUE={0xee, 0x4, "21708c12b8fb73f0f85cf1e4c19ff70e2ce68897125dda8d5752c06e6a9001dc0185cc393aaf3b29c8f0be0c3f3f5ba6d290540b219247ae7f02044473f8e23a38c9462a9c67a9c41a151a7a5bb2eed711e8a01722b3d99457dabfe4b8937cc2f5aea7c2ac5fd906bf21143089d365f6b2f5de77806500802a22d6d4c5815df91cbc33af35b2ec645a5aefc1e606e5143ff8470215bedd54cecfcde8d0f3ed19e23d3743b5607e322af30c457547a992282f4bbabaeb352404e813990e4ac77b3945d15713dff36107682b8762ebaa04d06b7b1abbd230a5851ae80546a460b5fcc728f88ee6880bcc9e"}, @ETHTOOL_A_BITSET_MASK={0xac, 0x5, "d9283fa0bc997de6277282bcaf7795afd8c177ab03bb0625bb902af5c3d33195e36225500be50074fdf83ae25902b56e119038563af4366d4c8915ee1a00d44fea54fdf37b7be3c1bd2f99a9a9a7ea07aea5b473401cc6386b454a53ee23736fb84f04ffeb90bf750a3ec1196f02bf7fd9b53544088e134e5401160e040a9b12809de8719c2011d056b8aa2318ed7c9fceef8665d81cc2384c90392eec6addc9d23e07ee21c1bbcb"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x270}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000fc0), 0x1) vmsplice(r0, &(0x7f00000011c0)=[{&(0x7f0000001000)="bf048f010ae4ac9bd14f2a863419a0aa7ec77b840114c9f314e9bf7287b6ed0e4bbd7b9167d224eaff3402178d7451369d53740195ed4e6e7e6d2cee321e4b5e027e0415efb2bf232bc0057b2d453084c9766a541dff03c11d5160eef10e62", 0x5f}, {&(0x7f0000001080)="134e2db01969292ddff9ef931fa047ba181720ee458bd17921a330340d95df4561bcfa5f80b8d1fb2283b86611eb65614d47a2e21b6ba01570809e06e79d974dd62320d84ad9c014c4e96374944f2f22faa7f720ca413b51d4ad27cfa415921968a356cb85d5e0fed72905549f4ebdc89792783604554c36ac1d1be7e33d13bc27ae1d77a284326927bd14fe4a3212", 0x8f}, {&(0x7f0000001140)="aea6909be067e24b82c1df4e847368d5365328bd4f17baf8fce542c4570706a5bfe7397b6b9f37fa79223382e8b60a30e57f47f3e6212e34b93048153d9677357c9cf729d213ce", 0x47}], 0x3, 0xc) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001240), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x40, r11, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x40814) 26.903661273s ago: executing program 3 (id=3358): r0 = epoll_create1(0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000d3ba423fa3e782759ad04ef621b0cb7b68ccc271671752648ae54da5e45fca4f484c804d0f9a074486dac5e6a5a846c03da06151f53b5362f479d2b0b7f5a4cd2baf5681fa5299fc45bdb4ee04a27b6e51dd5fa433685efa8b9dd31237b9d859befcc19adf5567479df67212482e4b0d00a45f70390704d254d7c1380ca8fd7a4781f854782d30babfdb96", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090000000000000000000100000000000080b4000000000000000500000000000000"], 0x128}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000340)={0x8, 0x0, 0xc9, 0x0, 0x7}) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000002c0)={&(0x7f0000000240)="f8ec906d0469e37f8a9026391b77ed6b2674ec3ecab2c2f8e15a8efde4dcdffc6f7bdbf29466ce858669ea5fb9f06cf507092510e288e4f0b1b83312feb0466ae33f35f0f31eb066f7", 0x49}, 0x1, 0x0, 0x0, 0x4040005}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xfffffff2, 0x80, 0x7, 0x3, 0x5, 0x3, 0xfffffffa, 0x3, 0x3, 0x7, 0x9, 0x1f, 0x18, 0x5, 0x3ff, 0x3}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008881}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) 26.27575794s ago: executing program 3 (id=3360): r0 = socket(0x1e, 0x5, 0x2) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) close(0x3) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x73, 0x0, &(0x7f0000000280)="6309004f9d80ea3a260880403d4e8ef003577dae1a35ace3ffada5ef7239fcada7e2f8477847fe6fdf342c1806f658886def0641e2d10950830bc5b841a60685216509a199d31961198e2894115a9d9021ecc6ee1af258f421fb38510621f7a5e7930bbbcdda6c01552bee95ef83725003f3d5", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) 26.051049842s ago: executing program 3 (id=3362): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r1 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, r1, 0xb2763000) 12.479929473s ago: executing program 0 (id=3424): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@local, @multicast1, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', r0, 0x7, 0x700, 0x4, 0x1, {{0x29, 0x4, 0x1, 0x4, 0xa4, 0x66, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x42}, {[@cipso={0x86, 0x44, 0x1, [{0x0, 0x3, "18"}, {0x0, 0x6, "d60556c9"}, {0x6, 0x5, "b9e645"}, {0x5, 0x8, "228b2e3a2f55"}, {0x2, 0xc, "8a4d8deebd53d611a2bb"}, {0x5, 0xa, "014700d48daa3e8f"}, {0x5, 0x12, "4bba4079e572a0415b634302dcc3b94a"}]}, @end, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0xba, [@multicast2, @dev={0xac, 0x14, 0x14, 0x18}, @rand_addr=0x64010100, @multicast1]}, @ssrr={0x89, 0x13, 0xee, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @loopback]}, @timestamp={0x44, 0x14, 0x84, 0x0, 0x2, [0x0, 0x1, 0x8, 0x6]}, @timestamp_addr={0x44, 0xc, 0x27, 0x1, 0x7, [{@local, 0x4}]}]}}}}}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'sit0\x00', r1, 0x8000, 0x8000, 0x6, 0x2, {{0x9, 0x4, 0x1, 0x1, 0x24, 0x66, 0x0, 0x0, 0x2b, 0x0, @remote, @local, {[@ssrr={0x89, 0xf, 0x34, [@multicast2, @private=0xa010102, @loopback]}]}}}}}) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000002c0)) (async) r5 = socket$alg(0x26, 0x5, 0x0) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, r6, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) (async) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x200c080}, 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r7, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x48}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400}, 0x1) (async) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r7, 0x210, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd74, 0x7b}}}}, [@NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x3, 0x7, 0x0, {0x9, 0xe, 0x0, 0x39d, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x400, 0x7, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40400d5}, 0x4) (async) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000880), &(0x7f00000008c0)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000900)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000940)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x32, r9}) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000002b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000000a00)={0x20e4, r10, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa112}]}, @TIPC_NLA_NODE={0x2060, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "f097045a38b62e59f7f5a31fb8d6c7a8cbac8e45b9a52eab30ce036612577aa8075733cee869f6c3f23b6bc8f02d6924db3ab89f1f5f87730610db91981b7117203570187baa2361c1026314267cabc0914e26fe4cd9c236f9a928ca342ec630b5869eeb2179525998327c2d8fa4b1d2e8e7064acaf74190a207b13d6878b775548e75bef677309e79416ea5999afae84eef3f90734f6e7481abb1085dfc3307e69f235a400d08d52fdc1cdd5a5fe82b4edaaea8ab8233924fa25bde47395c5816b65b6a2af826a372023b4a1f9a0d36d99dca5355947343f572cd7da24df1180d35032dd59e14c3c62be5820d95b73b9d18a22091125dab1496edc8bac8764174233a8645f97baf0cf0f46b215de3052c8c477885815f4ff43524825af1ed3a617d09445c2df1417a2d8df1532382e604f228a77677efbe63d0dbd493149a92c6840e3e135b0f5d52590e77c055dd8045b470a9b31054df123041f80b4998753bd2288c261c9b903cc994ea739fb79570fac0285a3d24613f9b749ce5c0e208ae60b333375fbdbbcbbe1e0f3f4f7a95e846a8e173d90719dcef333e83640def0f93f59631f84be84460614b81a3bad52142ec6fed5739a458cfa6744400dede5d277402d98a35a1b0acec5748f7394c3192e430b2cd8134035a7b6bc85cbaa09caffd2471b1025ccad298e4fc947a6ce5237144766dee27f155ac7d7d87ad3884ce5551e88fbaf75a0431204f0da24e55a7f9ae50bf34140e873deb24ca40e4b927e26881f54c4dffa5ca2517a46313d0f7a04ab710fb8c10719136d6869efe8b3cec0043c81b8c09d0f068487d41afef21252d799effa25130b6561a54dece184a0fa85fe16a4bd5b54ff9ced3f16421c917e13154c7cc5e402fa641ee47bfeca4c9a9925100179caa6364ca4ee4be426700d393bed3c3cca64fb72ab0679bca585e248b973ac91c40045aba2f259f3d35914270f32e45916d2a957a48d3705cbf2e0ee840b1d2d7d5fc3619f6d3c7c663723ef91b1bd8a961ea55d0006c8edba751daa7e36bfa7572001506c3450990dc3f7173df2584087cdaf5e02f9c600c087eb2527e431e040d3307dc66b2fb12327701d41b220a99b5e37859ab65b905b11124a77663a7174ad25d8532001a82847a37fdf43842bfcd226d7209bc7149d32576e9ccd3c2b7f5f39ecc8ec23c172e5c7d12a1733023f798ab31bfbeb6d32aa76a26f54d0c93469bd7b3fd5a0a5b5fc2942abf315e81fa38a9ebbc0d52e12b0e740f229642faeb3283cac4d44bb1154b3f20811064e8777ff77865e1aa4250a6142ea31c251dda1d100c0831ac503b021235df774cf95d380fa353a4607266c2b85f0b836b0e25579e3532dd446b1ce8894b0da1f06e4b71e1f6fcfe81287a97a99db6d6e696c87029a54b9654d58388c4b4affc48e9a8b1847a14b2549d86727069bfc86ae469c85b989b05bda3f9786c0a8c229cedab827807bb4410238635508b0abdd2b6860d2b7093f7974ceae1c4f129aa670293b59aba40d39dc980a8ece80051021457b11f01ed76a295bb189be3d7f4c4176472712579c6460b6c80440dcc98ce355417e8b8d40e135dccd8f7295a0a5c94d131c0a1f4e214323dc8438a770d31034c1f504e4fd0dd4a8275c6840baea6b38b22080968c260879e158e083c0e1a34d8e0c874ba14d0cc677d20b22e456e55d3313864ead64af65fe462f39f2b4d02485707e394b7c62a8947f30c27d8e2ac3dcc998c7cf1cae834c57adb4b243e9bd2af3c30daba41e9294d2a68717aa38de57f9bda0ce661ad34a7145cef781889ed026cb4a0b3f0892fc9e263980459d70fff42a36c0b617dd20761acbb5ef971eae19b6eda830b7495c52e6ca7e26634a0dbde2cdc22d33e9dc588a75d231fd903a8bb5eff4a647909f11ccc0d85597fee4d924f9e4d82aa146d6a1a26f5f9d24a6b4fd7d875d978826d54602fd6328319cd71931e8d13c56ff1806e8d0221a6662fb7f3a20f6498ad74c637c2b9cdfe26b991590ac119b170f85f9257cd659ba729ee97cba5da8fe31c272f7c6d3112cd8312873271e7fa73d1a416003ad9b5f1aae535bef532a9b9f40f2125fdad473af243c3f0e798f138fe5716a269d2cedec0965d60c8a3df3473e6fcebb00cb61bc928a11185fc928f3d7bcd8596977dabf68ca40cb9369cb046dcf4d33c7276c1fda5bf580126564ce728eee704137f2fad357581b0767e665c526e4eabcd44e3ccd7976d5cab850b3e63e5438d782fa5ca8029c231f756c7627937a4a60dc88a8722d01053e7eaeb795bdb947769c3474ae52e545bf17b238077f63cc2e3a454c3730b1ce89860aed3f95e1d028db991443d058bb5d9fda633e3a918f405b45b01e9f8c640d8e441995dc788c5cd25b046bb7ecfad56d4c90bdc37871ce4ca0e194f675e12b0460f2829f4c84aa38629b53ce69646ceb4d36bfbff205cceaae6b24cda17d3286f72fc7e862f5601f9668a409393ce311b67fe8262c4481d5ef0e7caff20c14f41f5c37c230a06e5e597e33ee2b6e251640fafefaa13f3ec6bafe35a777a56b0968112397c20203ebbcec8e039761f2baf9e3ff34fc6cab0504bc839b1664c99aa44e1379e938c47a0f41ffcb252ae46d4d236a7d45fe61b5eae40a48d1023df2bfedcbe69b0bc2ffbcaf73cc28401dd16b3ceddf4e0ed4f78c38aee5239b6d9c383842d33553634cd86f0314d8e275c2d25dc3fa04184372e956f711a275ef477c32fdb40cc38cd085d175fe8422ab9e2d65e656b4ce244bc72429559cc52576a423325032c80ef2f355ef027dc378b33b4638859cbfbcebc539b495a74a90c3ea553d98801420334d99ea6eee97c6bd5e43834413ffc5428b3f8e44b54ad7fa114c691da2f2ae4c488de7e96a4fa50335d1cf2f8913c18b268a96b71539eddc435b3c6f0e4eca8de159418196dadff698b91345e79cd6778ad118cd1200f1163aef65596b999988f11e1269a790a2bce1e2bdd234fa042626a1cc10e374f40d6124e042c6bf764c6543be5b14646c08f71dbd091a52333f1f970b694c3aa5729fddcbcc5f8f36c7e26f8ff7003b0353f1fd5f27bdf237b17995e889faa3aad686c89c2822eb9b3dcf81699334b1eb5bbd93c677fe7da0158907fe76f3c2a15a55c3139f9e3b5a68c065870e9b5becd7aebba2a62c5102544f3a8690d1074973906adc2a65c58b45f0091a1d5104ea7b27188fcf27c06f75f35c3966d2fc160ad6e42ffbd060d21046e6f77b3f8ab8248adf0fe18f714f5f3ddd746dca855415f5b8711bb4234c24168a59001b82253b12f31b3e64cb3978f91626e30ec951c72660a1763b57bc7ce03eea5209f522a786230581adfd6f78976dce0475cc94c20919a4fe8293485d945a8ff77f188b3508602f91720576213a9afb25f07f6dd42a2ab57f0b2e3de01badaaa2cb4ee5af669f12c838fa944b8475faa66bc9c5b79205774850826c370369610db4ef00f809f135d22684917621d9da3a9572b49b39798a5173c17d6cc50cc426b711940c973392519e7322e6916f5aaaaa08e8250fe18ed7f99fadeab3524f6f8356da2bd15454e032a938749cf72abc83404c56ae14dc9c92b4a0f547695acd998e8a4360bd3ad4ba04bc9944703c944055015c47cd3f32a99e6442a51ceff22143388f5c3e4e0dcb611f015ddb1ff04aac460f90409b9b42950e8712e375158ad586a01aa9a4b576009a37bc6e73af9cd1ff43e3ff30b8845c49b8067f4728541acfca93d8393e02441e7ee83b0195216cf4de9044cf2de04c83678a8c2c81f0d075f68d3d70ad1be1a5c8c1346accb3cc55208ecbe88e51d283855996dfa2370e86a7aa5fd7ac4254b882d8cf8a5472a8fc621cfa340c819cc0f6c9d024ee9f017babb8f682a4b3a6f08d03c06610515c9433ea530ff1e0d54b054621565ad5ad5cda126f194cca215117709bdc4a132e2d60e46d8c87dbdde707f5f69a5f7e7eac09fa749ccb1a42ca39fd45e05e803ad8d006845cd900146d7d0ecb8ed7f02d3cb017ea636b93bbf2b37d3bbdb1097ab6c8ea3868a3c356b71f1a77e8710535276d28101fb36bb20af1e35c4a4801a0e06d843aa585264810d12ea3e9b32a54f67a12f3d0c039d3ab77857aed11ada820c58314e3fd614e7834f9313b1d17569807d1ab7323f919c58c7da17f3b5b42a79c572eb3bbf4d86e85f7ab8664c1d663db43945d967bb15b1ae327ab556ecbd09fc14f4e6a3f8ab24ced58b7097d0dde04c24c8bb60207ce0b91b506256e0cd595d66e659dc2e1971c2abe63315f46fbfac30d2b38fc8510cf8b40c7b224ab64fedf99b779cf36685480e1a98129241637522a4fa30c6d4418e1d0312fc22319e58374d6109c87bf8f36c16ca76024476013a8e5fb4c32fafeec596628d0d8424ca1a6c25cfb3196a605cc9b3117d396982d4f28ab5cfbcb440635247bb1519bd581f4bcb2680ca7425b3e19e3c68be4512acf1f6f89e2e155415b482a183ba14e4742268a6eae265094757d1e54e6278d03c112bf5e704fd600192185c95d6628586d36c5b8f790e86fe2c6fa00e1f2b2360be429bc9f001af47b5b2346b11a57da844ce1f2b569519a3a4fff603e967477fa8d40ae5df99a87feede86661dc6e49916a6c02956f5887be370705d40352c3471b817f68aa5850957b16fda4778ac6bb8b7d0b700a7a666ae2fec0ab530f4eb74609de87b931140b462c2a158633219636c13fdd640de916ced0214ddec2dc161989c79d14b34f9cd1ce03f45821c3139ac6c09748412042b44bd63db264bbbae38c8e4c491741e216ae5f35448b05a9c6f4794403c14a909492ea6d6b865a1ecfc6f52236a4884b8c9a1eaf6bead577a81f73e75fe020c023384744fbb938aaadba365151a38c423676891bbf11c56c74e606058f5a4df88a36caf0ca8e4878109287c3e98434ba3ac89ae14f86fceb910a71cd602ecede2e85784d2b3d4bbb4476c59e3cfecc774bfda790f419895bf7ee9f2682f2cbc30c053efe69be09ccb56375d821dd09f6e99259ad606a8186f30059edeea203d70a3cfd618fcb1f2441f72e569afd9211b041ca913b145e8d11758480c4a699db04b32a081a587fad5c48c90dd905c2ff3c2cdd06d3a53131a3ec7b5ea94f61b2de21150fff1b2eee5c874bd156c381e7f4d8e73b2c91fe6334b2b2e690c9f8eb733fc2756ca6b5454cd361bd5ce5a17bc056b60442ef0b202f5c5ea4b16d65f4f2ecce661f8f83bb62f4427ee64c3996f8f41089919d5ffb07a8fbccf7577017834e5a2fa3dc50ee07c1e1d159959f62644b8856c64c83052a78af2f1644b24eae01547f326a560c4b1aed5322b18a170836b1299b727f6235a314ebeed1744985a0e3cf2e07da9c1b466edefc930bfd48d5529526c21b40927e5b16b091cfc0e0fa744c6fa66665b0afaf69f8e31d5f0a50ee07b95a4f5c1634bc97b82527d21110705105a31edbddcfd38e1b5c9587b36b15066663e9da095eee286650b3f9f631f0d059a6ec5cc3234525a6f9d4dcd9dbd58c8ab5c6aa6b6807564bcd2e74e6c5744a4a6b49346d033a7c27b4d54f07ad5558a89e3cec068ca0d5cb45fc604bf1a484c71f0524b9e6f96368010a37b2f6e11687e2931e82238b9ab0068eedd2df21d2fe4d58438785f544e4494986c5e283aebaa98627d27105e592943623f55ea8e3ed106b52cc2faae5d39e904ee8bca0c05a17d1fe2bbf024d334381ad4f4f8bace2c41d2d2c7c04769f7b13aac01ebc92e0e"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "a2be31a4244aaf54bfa897bdbc3d35c820770227d0f88b7c14bd482ae1945050593d2dbd2e99684ac73dfb8b1746a8f0f06ca6ce66670e71fa18ce2698eb47030af4d8f2700056047ad9c5fef613aeb2def6d1d0133c7aad0df19c73d554799ea18a199ce9243dddedeb6a166bf5e98f86ab9f1840f12b18fd9f231a57fb1283b8924cf9a79db8e35389d28f8882a0850b901354592a2c9b3e868c7f6d031b6d0ffa5cdf4e25e41fe83b6ca1a5e64eca08d064a7c961edd34bcc69857f0456feed2fb443e52cb441ff68abb52ebd2f8409abf2ad46c533983832ba712c04fedc344f27e3df8997cda8aa16fd91d4a42cf14d628490bde0f92a6e91a4e507f31d18c1163f2b583d89d0fc1ac6a9c69b66464a4924958895d43ea0bedeb1e2e2968cd126d85afc102cec97285ac398bb4774b46f7c7c1bb0ace3214b387df7c452b2a5d294bd2f97cd46876df878050cfc0c32d98a5e791c531389800ac4f07a140de9f0c770a26e509eb3ff7def6af86f5f05d5e2176c77bbfefff37027c527d74d63a9d8faf5ba839334517481bd3ab0244e802f7f0da9f883b7a9df9422f165513ec565afc9c77a68db43e44819608613c57ad1440af7cb6d5493b0454c9be211d8030b6944ae42c4c5a1bf1008e825bf56f9c1a09a8c7a46bf82f302a0ad81d0a81a88e3c6d6d71467a0ccdaaa2e2fc45687e08fe0f185abd59d332c75a928646aacb6d2d45179658897cb8f909f569b40d27499559c9fc925e7a9047bcc50930845f781ce7299c3ca6acae45260027948c24bac8f352b01e190e329efd98e193b74b6e573cdea58e40d14668c2f084ad4ba917851d8503087c4cfcbaff8afbb3ed6fdd50dcedcfbaa473c47f9b99a8c1011c1c0fc1e830de6dde1113fbb52ad8cc2047b7fb73ff8f98a0ab7d0b61743f4310f400867b59b625aea60c8c145a4fd41f12fd61224d148b59ff342d5d05c230ed8a22a77d56b054e1839c2b702102c6164f681e7e5b7d86bfea62fdb218eb1f144fd945dace1e7e0f9bb238ba0b80c4fa15f597de004184e0a76a325b812e3fc74b20f62145da1e70ed0f6173d2a2136d60673ffd9c1187642197b40b2f9c8117617c0a79c45cf0e16d0e68f8d854f83b8a14e969c0774db16663300d5fb85b68bbcb467aacc7d3c97cee22e9451a02ca1d4445dddd517df21b7cd1bcbdc7bc00473c66cf859ea89f21c5aa947ca6014e6eab5daa84d4b4d6e9566153ffa04626b866be10c7cb989f81f2990466cb2e96bbdd1290b1b3641a079cd862f061c093e202b2b9a61443108027b2368bd1689ef3ed7d5ad3c095bd3ef6dc5ce787d889f6a4c2925ad525279906e57e3ba4cea7f7a117a15896a823d8332311607e60f78d16d3de5e4aa4992c4ce0629853789eb3ab818f1e0335c61b6f5d3b0ef393bceaf08510197adf8e22d680977f7d748ab3d7a8acbefa0853027307c2a02a5f37be0fd3f6d2e54c9bc8eb55e528bfcd47bbac5026b62e78f1f1eb80c4fe37f1024522ec8dc5b8968ddb614b5d07d150d9952928b7c126d4a1741fc12f3ebd981bb81c5ca08b3734b0c9761f68035893292d9c43fd281f0b61883bcb044879cd5ae3b8655a4ce34f452ea61b6a9483ffbe33af905a4d7e7836e4a7f2c098f2efd96fbf3fd2aecab196a90535ca06b7ad3efb1ee16847f6e59979531846d3d77a802401728063401d92682e81c800c4e7b5dac382824cff48f9a734909e3f4cb0dab7b999487fc664b947d3e84dfa3c9eb8bf788ad36df6fb500637ae54a1db646c9f3a16db4543b1dbc2a783b77ad302a6ba4c12c23494c4deb250239659a06b0ebd5b550f5d03eb9bff2de328d576309e9fdc7e2f6469a5270ec6ad6ec037c41d20f1871e45342e04a42aa59c45b32216f7dd00ecdf5a994df81dbcdc7b37a89c0a9b5a6e91dfa7b1a0d583a3d1422af872f819f8b202ab56487d714ef4947ff4952806185a18f0787ff134935940b5576fcd1235c19a94a5b85eb37b22efecbb798a2a3d122137e525079147da9bbd0d2da58d1d242cbcdd138ac1f381b2b7f46b51ee76f6f086175f23f794ece515d92b81bc0755181706e8c982716846eba02c88e45a4de59edaec3038f7596dd37cb7da4a4afbd3d06c561036e8bfbad080cb723220e7a1078b87b86e3a261a7a685a1c94eaabdaf0e0d29ef46b3f536cf95b7cde7da769cc6dd5a7de6f3b185852bfc4fcad95f537c3cf124f5397366dcdb573aadc7a18f2c163ef3935c238c687b8a28095218afa49740155a48fe9701d078cfd1a57aed8cc1488a52c49efc26c73b33809689a32aa24b89833ce2079d8f856feecee0eae74319e5299fec1dc2ba0e55ecc46c30ae263f0b622cb5a42fa7a4c5ae7ee68287006f3bbbb5c83c971d4a231fb63f6d2abf4f636cff572b775198a46184458ed864332e2c55c14dbe580bf5f068602620e431a28400eba3ff99190dc08fa946d45bd043416f558052f5fccd331c8c62c7372eef0c1fa4947332be7acf915ad7a89718bda3da05cf9cbafbcda8a17cd4a80dea00f3201a09a9e79cc9cf83ac96d591f54570530271937ccee0f2b6cf053639276361dabfbe3001c490d7c73fabe7f97b760398035ff1d36304708c36578f8f91233db11269565c1cf8dc5e8d356cce0f7b8d08792902a692a4f31af2c8d9b2c482efecca4fe8fb7c8b2851d442621c817d16daa0ecf19a5767663468335ad3aef0d22d1c2df0d2d2803a40074d7bf0d098d0bd5fd614ad77b292a4277b6108dc3d026f3052fd41d3f00c3cb0bb87371889a0812207b2a6d3372f82aefbf35f3c471d759cc09711d86d7b92f768ad20f77bd8180b411afb6a3d6ad939f4a1594608f6706e2137ea979f9f56300ab418b1426db6da74674d8a8f4c125d28a9e04338f6bf06841652d8e23d18a9dd4a9a4c634ec271789c61025d3e21051c05622a1d5cf4c2bc745c0b1484d110bcb4fa3db7d8f8b7f68aada668409504467148fce901ff450c6ba8f78512eb9daf0f0b1674c69f59b9eff8256ba2990d9c4395be562e823e49beba74797f6ab7b8a63330aa75a0714f7ae44b476588a4517f544176b78a417cc748d4052f07c4944a98c6424cf5ba85a97bfadcd252f0abe4bb062be1ce5561a68c7d48580d91b43caa922e01a16c561a3875538796dfda5dd3c19cc68289bf973715c205106c963f0d4566e60a935f7aa666c531e7c3a68eed2c5aa78dbd3be9bfc019bb505bc0f4119402bdbeac063f820eb655dfc35bca037b1e42c5e151c6fff1eb1492a1358cdc0f708db70dc4dc2148c94a9e3fcac17b3dd0633a667011b66ec2ece867d977d5a66b8db27414b1702a3f301134d7f4e2ea49d67d8d2b28482775fa9a6caddd8a06a0c407cee2c76676a0278ec046bcf90b0a94e1a902a08cc1f5ee4f30e32d38db2ea930f4d2c58d9a67304e6feef2ce969184355fa2503e75230ea4348c4afacb440fbbe932502a4d4591665f5324dbbc04f45f5f10e1c573d63a5f885c7af43693345af85708383171634ad56b66002c821bccf0545197c39da55cd942f7df50d777666f7b5aee9f7cf66d43c669edfe1893033784314d26a00539343e975f85fc170763d1e9617253bde3cbbdc9d04e9771ed11a94712731bf3069a4b93e38d1ca064cc93f89937216dc38e9495c9232de52a78a4d6b58fc35b4106ecebb9f615e96f7b816c7cf3d89c26dc0832bede9cdcfbd3acff4910ca95611be8f0a62557ffb1f1f478b3d8748857c2158d21c2fc5fca8ce434a049b3b8d16b0ae1095d5acc065a4563a2e90016f36b3646585537236bed682fd1a11f39400b24e82f856f8a3b2bea50f6a7b5b813eba5d547e4cc4455c855db48b060312f156e5f3a5082a34d194e080731167048fccbf1394a651673a3b6127db2b1db1b037c9f96aaa2238d1b6a399dde29264aad589738560861b8e336c42ef4ce84ba028d5e2f304b0d4e88e0ff2c29f8f3f5e419f99d8b66cb6c690a5e66aacb604f9708685cff5038de432be1bc66fab2d3e0f81e5480539f292463ca0e5b3c31da59cda1da300a377989f24a3c7bc0ab1ee895d917139ea3a6aa65412d96af29f7e7d11ac7c09c5b8801132e0e0066a959bde6ec6bc4681de102b8f36a9fed07298c4ff19d914fb46d8f69067c699351f79b2d851edac09533776bfcd265d6e97ecde30cecc4e3ea97809fd95910d2306d180006d2795ced17675433786ca15024c1c92fdbe8a8d313378fbc51e8d8eef176d2686a45e5644c4fb9dacafd2065a12c2a03cd67f4960b466944ade4e2ff4b09f64a36282fd7822f6ca9aec0edcd5bd6f852627d65c44beb346111748635e30e27691a3324aa6d5f69a6730364587b525f0d3031bfc0c3c471438fd70d1636bbfe0994df1a1c293395c2a55a0b568b15d7d76f2cf7ba0ea47e526a8a52aa74a0c2bb9ff2c40d6ffdbb4071dd81f9e05c7ff45f142ba6067793c6b3805492f5b5b0a2685f32896c324925a12af46c43a550ca7a8864cde974fb512a8c0cb096be211915ca77792c11651e953fc4d558e486e77c34c33011b4e3e8f0ab01fcc58700a1ea88a0debe4480e9e923a6334c5608a62c2a790dde0bdf070becf5f8133a4feaf1d848735ff86b2f0505a0a95afb57dbc5c511ebbe92b35cc4cb1414d1d7728259048a608473753ae5cc1d230b6ff125d0a6b26b036d806350637801b900ab40362ec1ba8ca0c77c1271a6b54a516d62b99dd671c3bc6771d88973ac5546439857964733647ad7eef541b32919b25a95b43702a838946c33a1ce815504e4ac102d788eb09d4569ad46380e0dad02fff2ebea00129650fde8696ad177def9561d7fc5df980f10d6fa707fe0a32afe1d0da2b99810cd9714068b9cdcc74c3bc4a54acd278ef14d3f09ad67bde709635ffc491f01f0031f5ca29a56eae3bdedbe9efb1bd769da76f5107f9fd5f9e397a1c76186e328e0d1728eea4fccfff13342746b94475a1096fe4aa7f8f41f85632cec7b418cb503c8fee89998579844888176b6865a44622a8e86c19bb492e1b4e35e463cef22e0234dcf4bb7fd8a3b0b76c49e2c93c9d257a0f8d0f1b49dc382308728df02d4f21c5c1964ea60972b1cb9d8a79f0223c17d97326ef8ef14d87f4a10004c2c5279cdbf84d3d740fe320ffc90bde30f85d8a53d1af48f9cdc2cfd360f8d923cd99cd1a67a22cc6ef11cd56b1a250f956e71fff670ebcec24cc93e06864e3f86a35d805465d27e95165f2907b2ecbdd5c143635ab96197f368dd241234d2428735336f9fa993ff123287cc1ffeef0d2d71eebf5fcd801b50cb403de11db227c1dee16e3ca991d332caaf94390a279310505b29f614b8debc10a442fdbdfccf6131ce0be829d6b3a98adda67c41b6f3bbb8c768e794285e6eaf7ccb6ffeaa79b66bf946127e31c3977a19e156cde7e61bad67610d37f2f1eb49e044b2a2ee173a71d5b15fabe5c6eac7d8126d225f705262cd5e4c611e0593ba9383f87e9db98ac0b574d95cfe820cc1ec4b01a3158bacb1c6ef08a451f1fb4c6d2435cc36704e12f258088e7e6d9156ddd73d6d3e4f4dc979644db9ecc882b942893825b8fc81592ad971cffa5e7a17930dd65e1d9673ea1e356f49a785a7aec9b9bebbeaee650e55af97fb88e2ecf74c893540ac60f3247a9c1de6e2a10dbf3486be0ae9f01fc3c1eba7c83751932fc4965a61e392bfd1efb768ac2871775dc9cda2dbc3bfa4dee76f3082b095a6084b69e8488a235d537e0e149690949bb3ee3da3c561b8e4bed7"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "3a696a1982e391e1ef57911e06bd7b11bba9b754cb0ffb7edaeff787bff1"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "e964eb25552bcc46e5fa759ed84314f9ae05f7feed"}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20e4}, 0x1, 0x0, 0x0, 0x80}, 0x4004010) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r11, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x60, r7, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x324}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x48}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x40040) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002e40)={0x18, 0x13, &(0x7f0000002cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @exit, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xfffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002d80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002dc0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000002e00)=[{0x1, 0x4, 0x4, 0x4}]}, 0x94) (async) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000003040)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003000)={&(0x7f0000002f40)={0xb8, r7, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x62}}}}, [@NL80211_ATTR_KEY={0x50, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_SEQ={0xc, 0x4, "ac507c68cac15adc"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d94bece74f6a878d6655005200"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "11ca964c828594c2550d1d2c26"}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2a7d80f697"}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0x1f580a}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d4e6c88b4a270d75f8e695a17b"}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000003180)={'syztnl1\x00', &(0x7f0000003080)={'syztnl1\x00', r0, 0x8000, 0x1, 0xb0db, 0xbea124d, {{0x2b, 0x4, 0x0, 0x9, 0xac, 0x68, 0x0, 0x5, 0x4, 0x0, @multicast1, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x44, 0xd9, 0x3, 0x7, [{@remote}, {@empty, 0xfffffff9}, {@private=0xa010102, 0xffffff7f}, {@private=0xa010101}, {@broadcast, 0x3}, {@multicast2, 0xfffffff8}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x8}, {@remote, 0x80000001}]}, @timestamp_addr={0x44, 0x54, 0xa7, 0x1, 0x4, [{@broadcast, 0xe4}, {@multicast2, 0x4}, {@rand_addr=0x64010101, 0xa08}, {@loopback, 0x48}, {@broadcast, 0xbd1}, {@local, 0x2}, {@private=0xa010100, 0x80000000}, {@empty, 0x426dd717}, {@broadcast, 0xd}, {@remote, 0x5}]}]}}}}}) (async) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f00000031c0), &(0x7f0000003200)=0x4) listen(r11, 0x0) (async) r12 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000003240)={{r12}, "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"}) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000004380)={r3, &(0x7f0000004240)="cf8f89bc8142d93bcfeccfc6510451d264e29e4fdd04db5e904a6734cefa4bdbf42481eb9e49470c0c4847fa7f5487ab083a03543bdbfdce11c1d7aae9d924a2fe000b8bd5d7d86e750c4c938f08bf38e7b8e02dcb314ce5d3e3f25f7e7edaa43105a940858f4f3338916db3344377c46936ebfaf570737a98102a124b2e4064602474574c25eacb710b1cb9001bbd081f7a625c17a45efa0a6da9faf932be33c73fcf639f63008136b854da7ee3efdd5fe75c6aab5bad650a48ad3ef005f66f03dcf0c35729c843852b5d1b24e5c72f5dee21920aee00de1d3d14b3091e23d2d728319b98b423", &(0x7f0000004340)=@tcp=r2}, 0x20) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000004480)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)={0x20, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0xc}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 8.483020569s ago: executing program 0 (id=3426): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000004e2300000a"], 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x9d3, 0xffffffff}, {0xfffffffffffffffd}, 0xfffffffd, 0x6e6bb5}}, 0xb8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 7.68678407s ago: executing program 1 (id=3432): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd2d, 0x1, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xf}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0xd7c09c2d509a0793}, 0x401c804) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x58}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x700, {0x5, 0x1, 0xfff, 0x8}}}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8847}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}], @NL80211_ATTR_USE_RRM={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004050) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0xfd9aaeebca23c469}, 0x20000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x90, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x200}, {0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x16, 0x1ff}, {0x5, 0x12, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20044014}, 0x45) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x244, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xd}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff4}, {0x6, 0x11, 0xff}, {0x8, 0x13, 0x3}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x1000}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2d}, {0x6, 0x11, 0x8}, {0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}, {0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xf}, {0x8, 0x13, 0x311c}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x4000}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x11}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x10000}, {0x5}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40048b0}, 0x4000045) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x14c, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x33}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x41b2}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8ca}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x6}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000b00)={'vlan1\x00', 0x200}) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000b40)={0xba, 0x9a9}) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000b80)={0x5, 0x7}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000bc0), 0x8) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, 0x1, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3ff}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$XFS_IOC_FREE_EOFBLOCKS(r3, 0x8080583a, &(0x7f0000000d00)={0x80000000, 0x8000, 0x8, 0x7, 0x81, 0x0, 0x489edfbf}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, r5, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000ec0)) socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000f00), &(0x7f0000000f40)=0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000001200)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000011c0)={&(0x7f0000000fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x1ac, 0xb, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2a}, @NFTA_SET_DESC={0x184, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x64, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcc5e025b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x64, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x92}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xce}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0x74, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}]}]}, @NFTA_SET_DESC_CONCAT={0x2c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd509}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x4}]}]}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x1f8}, 0x1, 0x0, 0x0, 0x4845}, 0x4000) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000001240), &(0x7f0000001280)=0x8) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x40, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x59a, 0x9}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001440)={'ip6gre0\x00', 0x0}) sendto$packet(r3, &(0x7f00000013c0)="ffdf5e4b904b55175776510c47ec829d421a14082feb9e293b76046991cece5cc6d502d1741f694f386a8bb848b37ba3cccea8413339f82e13e1697d602318b69d2086bb5ef828dd84432e6f90fba87bc6cb499b95c823912a3cd20ce78d18dfc4e9e185f84346b0316d89911c0fb3", 0x6f, 0x4002c040, &(0x7f0000001480)={0x11, 0x5, r7, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x14) sendmsg$AUDIT_GET(r3, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x10, 0x3e8, 0x100, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4041}, 0x4400c800) ioctl$OCFS2_IOC_GROUP_ADD64(r4, 0x40186f03, &(0x7f00000015c0)={0x5, 0x2, 0xddf3, 0x2}) 7.580165897s ago: executing program 0 (id=3434): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2a, 0x2, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r1, 0x40105870, &(0x7f0000000200)={0xe, 0x101}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {}, {0x10, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x20, &(0x7f0000000540)=@raw=[@generic={0x20, 0x1, 0xa, 0x5, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x0, 0x7, 0x3, 0x80, 0xfffffffffffffffc}], &(0x7f0000000640)='syzkaller\x00', 0x38, 0x8f, &(0x7f0000000680)=""/143, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xf, 0x92d, 0x8000}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000800)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000840)=[{0x4, 0x5, 0xf, 0x9}, {0x5, 0x5, 0xf, 0x8}, {0x5, 0x2, 0x0, 0x1}, {0x0, 0x2, 0x6, 0x2}, {0x3, 0x4, 0x5, 0x7}, {0x2, 0x1, 0xb}, {0x0, 0x4, 0xe, 0x3}, {0x3, 0x4, 0xd, 0x1}, {0x5, 0x5, 0xa, 0xa}, {0x5, 0x4, 0x4, 0x7}], 0x10, 0xfffffff4}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000009c0)=r2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ab000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x1000, @empty}}, 0xfffd, 0x2000}, 0x90) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="02", 0x1}], 0x1}}], 0x1, 0x20048041) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xe4, "a124db02f1392ddcb3ea3d81719e37321642b1c0c836ab6621cd12caae3d05ca3d575e87fb15b3f9d189be80d678875e8051582a093adaaed50a904733842a33d2a57a185e09114dc452fbf111ef66d8dcb3652c7bfc3f66bc85587cdc274289d54f03b08edbed2779e2f8782470a49561266d490bad4761635a46b6802e4aee6d138fa98e53f71208527f9d7e30ad5765cfff720b7aac43cf00bd83df95011b266faf571a181ac2b5196adaf8edfd3eebb20b26a91536064fa89672efd257c09487aa6196b96abcc105ff9063da4fdb1712bba3ae3c40ba72075a4b4d40511d6b052241"}, &(0x7f00000001c0)=0xec) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000003c0)={r5, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) 7.511805696s ago: executing program 2 (id=3435): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000180)={0xaac1, 0x3, 0x1, 0xfffffff9, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff85000000b200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.308570907s ago: executing program 1 (id=3437): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000100003042bbd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000005c00128009000100766c616e000000004c00028006000100020000000c0002000d00000000000000340004800c00010000690000060000000c000100ba8500000a0000000c00010001000100962b00000c000100090000000004000008000500", @ANYRES32=r0, @ANYBLOB="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"], 0x84}}, 0x0) 7.171133333s ago: executing program 2 (id=3438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000008440)={0x0, 0x0, &(0x7f0000008400)={&(0x7f0000003440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x80) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4004005) 7.032193612s ago: executing program 1 (id=3439): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="28005080110001004abee33957edf8aaae14574df400000005000259d80de730069d260002000069"], 0x44}}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000380)={{r2}, "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"}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000340)) 6.963425885s ago: executing program 0 (id=3440): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8084}, 0x814) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r1, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000040)="89e7ee0c7cda99b4b47380c988ca", 0xe}, {&(0x7f00000007c0)="e582df448b7c0732b70a98f1c6961451e15f", 0x20}], 0x2) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x10, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x854) 6.916836904s ago: executing program 2 (id=3441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000002180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x9, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x20801) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000180)=@req3={0xff, 0xe, 0x1, 0x89e, 0x80, 0xa, 0x2}, 0x1c) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) sendmmsg$alg(r5, &(0x7f0000006180)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18c0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000006140)=[@assoc={0x18, 0x117, 0x4, 0xfffffffd}], 0x18, 0x8080}], 0x3, 0x4000010) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) 6.467144509s ago: executing program 1 (id=3443): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c004}, 0x8804) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x80000000, @local}, {0x0, 0x37c1, 0x8}}}}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r6, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000004) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f00000001c0)={0x3, 0x6, 0x49, 0xfff, 0x9, 0x70000000, 0xef, 0x2}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32=r2, @ANYBLOB="132004000f020200"], 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) 6.375398217s ago: executing program 2 (id=3444): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x44011) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000700)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x1a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8ad4, r6, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x28, r9, 0x10f, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x35, 0x921}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080c5}, 0x50) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000340)=0x6175440b, 0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.219743377s ago: executing program 4 (id=3445): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) 5.674871143s ago: executing program 4 (id=3446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f000000e0c0)=@newtfilter={0xe94, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe60, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x9}}, @TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x18, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0xffffff0b, 0x5, 0x3, 0x8}, 0x3, 0xfd}, [{0x3, 0x3, 0x4, 0x0, 0x2, 0xfb}, {0xfff, 0x10, 0x5, 0x7fff, 0x5, 0x5}, {0x4, 0xf, 0x1, 0x4, 0x4, 0x1}, {0x3, 0xfffffffb, 0x3, 0x4531, 0x81, 0x3}, {0x914f, 0x4, 0xffffffff, 0x1, 0x200, 0x3}, {0x3, 0xb, 0x2, 0x0, 0x2, 0x7}, {0x4, 0x2, 0x400, 0x7fffffff, 0x1, 0x3}, {0xbcd3, 0x2, 0x2, 0x81, 0x3ff, 0x6}, {0x8, 0x4, 0x9, 0x6, 0x8, 0x1}, {0x4, 0xc, 0x101, 0x6, 0x3ff, 0x2}, {0xa, 0x4, 0x5, 0x1, 0x40, 0xfffffff9}, {0x6, 0x7, 0x4b, 0xffff, 0x7fff, 0x200}, {0xe4f, 0x6, 0x1, 0x6, 0xfffff308}, {0x7, 0x7, 0x8, 0x6, 0x1f, 0x6}, {0x52c, 0x6, 0x3f2, 0x200, 0x2, 0x5}, {0xfffff129, 0x9ef, 0xffffffff, 0x9, 0x8, 0x9}, {0x49f, 0x100, 0x7f, 0x3, 0xc69, 0x1}, {0xffffffff, 0x0, 0x0, 0x3, 0x7d14, 0x5}, {0x10, 0x308, 0xf, 0x5, 0x40, 0x4}, {0x8, 0x6, 0x1ff, 0x4, 0xb6a, 0x5}, {0x9, 0x7d, 0xd, 0xfffffff8, 0x7, 0x81}, {0x249, 0x9, 0x7, 0x1, 0x2b, 0xa}, {0x0, 0x8, 0x1, 0xfa, 0x7, 0x5}, {0x1, 0x401, 0x0, 0x5, 0xffffffff, 0x2}, {0x1d, 0x80000000, 0x49, 0x81, 0x8}, {0x8, 0x81, 0xf71, 0x2, 0xa, 0x7ff}, {0x55b, 0x9, 0x3, 0xc0000000, 0x2, 0xc60}, {0xffffffff, 0x4, 0x7, 0x400, 0x9, 0x7ff}, {0x7, 0x5, 0x1, 0x0, 0x9, 0x9}, {0xffff3ad1, 0x7d56, 0x4, 0x2, 0x7}, {0x1, 0x1, 0x4, 0xfffffffe, 0x4, 0x1}, {0x10, 0x100, 0x9, 0x8, 0x3, 0x74c}, {0x6, 0xfcf, 0x6, 0x7fff, 0x7fffffff, 0x2}, {0x3, 0xa47c, 0x50, 0x4, 0x800, 0x2}, {0x6, 0xffff, 0x99e, 0x2, 0x4, 0x2}, {0x2, 0x6, 0x2a6, 0x7, 0x8000, 0x7}, {0x85, 0x8188, 0x401, 0x3, 0x2, 0x1}, {0x0, 0x33, 0x1, 0x0, 0x3, 0x8}, {0x9, 0x40, 0x9, 0x8000, 0x9, 0x3}, {0xd, 0xffff, 0x80000000, 0x0, 0x4, 0xff}, {0x3, 0x6, 0x7, 0x2b39, 0x6, 0x7}, {0x3, 0xfffffff0, 0x6, 0x5, 0x9, 0x2}, {0x2, 0x2, 0x30000000, 0x8001, 0x5, 0x4}, {0x10, 0x6, 0x1, 0xfffffff4, 0x100, 0x9}, {0x2, 0x8000, 0xfffffffd, 0x7, 0x7d7, 0xffffffc0}, {0x1, 0x6, 0x2, 0x488, 0x4b, 0xc}, {0xb7, 0x5, 0x8, 0x2, 0x9}, {0x6, 0x3, 0xd93d, 0x4399, 0x6, 0x5}, {0x7, 0x9, 0x7ff, 0x106c0, 0x0, 0x2}, {0x3, 0x3, 0x6, 0x200, 0x6, 0x3ff}, {0x8, 0x80000000, 0x9, 0xabbd905f, 0x0, 0x65920368}, {0x5f, 0x6, 0x3, 0x7, 0x2, 0x1}, {0x3c3, 0x8000, 0x1, 0x7fffffff, 0xf, 0x5}, {0x29d, 0x2, 0x6, 0x7, 0x4, 0x7595aad9}, {0x1, 0x8a06, 0x8, 0x80000000, 0x1ff, 0x8}, {0x10, 0x0, 0x5, 0x5, 0x4, 0x6}, {0x7ff, 0x6, 0x8, 0x0, 0xd, 0x200}, {0x6, 0x80000000, 0x1, 0x4, 0x1, 0x75}, {0xfffffff7, 0x7, 0xfffffffa, 0x5, 0xfffffffb, 0x133}, {0x40, 0x4, 0x7, 0x7, 0x2, 0xff}, {0x17ff, 0x7, 0x9, 0x600000, 0x4, 0x3ff}, {0x2, 0x7, 0x7, 0x1, 0x200, 0x10000000}, {0xfffffff7, 0x9, 0x0, 0x4, 0x3, 0xf47b}, {0x410d2ac1, 0xecb1, 0xc, 0x9, 0x7, 0x1ff}, {0x0, 0x7ff, 0x1, 0xa, 0x93d8, 0xfff}, {0x2, 0x6, 0x8000, 0x8001, 0x2, 0x2}, {0xfffffffb, 0x4, 0x9, 0x59c, 0x7, 0x3}, {0xfffffffe, 0x5, 0x2, 0x5, 0x0, 0x4}, {0x7, 0x400, 0x101, 0x0, 0x0, 0x1}, {0x6, 0x1, 0x616, 0x8, 0x8, 0xffffffff}, {0x3, 0x2, 0x2, 0x1000, 0x8, 0x81}, {0x5, 0x8, 0x8, 0xfffffffd, 0x100, 0xe52}, {0x1, 0x8001, 0x1, 0x0, 0x0, 0x619}, {0x5, 0x0, 0x3, 0xb0d, 0x2, 0x8000}, {0x7, 0xfffffffe, 0xffff, 0x8, 0x9, 0x9}, {0x7fffffff, 0xfffffffa, 0xad198b3, 0x3, 0x8, 0x5}, {0xfffffffa, 0x9, 0xeb, 0x1c3d6ec8, 0x1, 0x3}, {0x5, 0x7, 0x80000001, 0x9, 0x5, 0x10000}, {0x3, 0x800, 0x80, 0x1, 0x800, 0xfffffffa}, {0x5, 0x7fff, 0x9, 0xffffffff, 0xffffffff, 0xfffffffd}, {0x3000, 0x6, 0x79, 0x1, 0x4, 0x4}, {0x4, 0x7f, 0x7, 0x1, 0x100, 0x9}, {0x5, 0x71, 0x6, 0x4e, 0x5, 0x6a3c}, {0x97, 0x5, 0x100, 0x1, 0x4, 0x7}, {0x7, 0x80000001, 0x2, 0xfffffffe, 0x5, 0x10001}, {0x7f, 0x6, 0x1fffc00, 0xb22, 0x8}, {0x8, 0x7fffffff, 0x8, 0x0, 0xfffffff1, 0x10001}, {0x3, 0x798fbdd6, 0x0, 0x1, 0xbdb, 0x4}, {0x200, 0xc9, 0x6, 0xe, 0xffffffff, 0x1}, {0x100, 0x4, 0x5, 0x200000, 0xf, 0x7}, {0x7, 0xdf13, 0x6, 0x9, 0xe, 0x3}, {0x8, 0x0, 0x4, 0xa, 0x3, 0x9}, {0x5, 0x0, 0x9, 0x1, 0x7, 0x1}, {0x5, 0x0, 0x0, 0x3, 0x9, 0x1}, {0x5, 0x9, 0x9, 0x3, 0x3, 0x7f}, {0x100004, 0x191b, 0x6, 0x6, 0x8, 0x7}, {0x2, 0x9, 0x5, 0x8, 0x8, 0x7fffffff}, {0x401, 0x3, 0xfffffff8, 0x3, 0xb, 0xffffffff}, {0xc, 0x3, 0x4, 0x1a00, 0x4, 0x1}, {0x7, 0x8001, 0x3, 0x0, 0x80, 0x5b}, {0x9, 0x4, 0x0, 0x0, 0xfffffffe, 0x97e0bb02}, {0x1, 0x5, 0x1, 0xfffff001, 0x9, 0xe3e9}, {0x3, 0x1, 0x9, 0x8001, 0x1, 0x5}, {0xfffffff7, 0x0, 0x9394, 0xffffffff, 0x6, 0xfffffffd}, {0x6, 0x3, 0x1000, 0x8, 0x800002, 0x4}, {0xfff, 0x1c56, 0x1, 0x1b, 0x9, 0x1}, {0x2, 0x400, 0x5, 0x7ff, 0x81, 0x9}, {0xfffffffc, 0x9, 0x0, 0x3451, 0x3, 0x8}, {0x4b, 0x6, 0xb4a, 0x1, 0xaa, 0xfffffff1}, {0x3, 0x1, 0xe7, 0xfffffe00, 0x1, 0xe}, {0x0, 0x0, 0x6, 0x5, 0xffff, 0x9e4}, {0x6, 0x3, 0xfffffff7, 0x4, 0x9, 0x17200000}, {0x1ff, 0x8, 0x5, 0x80000000, 0x20000, 0xb}, {0x7fffffff, 0x2d0a, 0x6, 0x2, 0x2, 0x4}, {0x1, 0x39b, 0xe, 0x6, 0x4f, 0x2}, {0x10001, 0xd9, 0xceca, 0x0, 0x7, 0x6}, {0x7, 0x1, 0x8000, 0x6e8, 0x2, 0x9}, {0x2800, 0x3, 0xa, 0x1, 0x7, 0x89}, {0x675, 0xa975, 0x8001, 0x48, 0x4, 0x7}, {0x7ff, 0x6, 0x3, 0x4, 0x7, 0x1}, {0xffffffa9, 0x9, 0x1, 0x1000, 0xfffffff8, 0x4}, {0xaf6, 0x4, 0x0, 0xdd, 0xe76, 0x4}, {0x1000, 0x9, 0x1ff, 0x3, 0x0, 0x2}, {0x8, 0x9, 0x401, 0x5, 0x5}, {0x8, 0xfffffff9, 0x0, 0x0, 0x401, 0x10000}, {0x2, 0x7, 0xffff, 0x3, 0x1, 0x4}, {0xec5, 0xa, 0x7f27, 0x4, 0x1e2, 0x7}, {0xb777, 0x1, 0x7ff, 0x9, 0x6a5, 0x7459}], [{}, {0x3}, {0x5}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x4}, {0x652b3a9d03bda253}, {}, {0x1}, {0x5}, {0x5, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x7, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1}, {0x1}, {0x5, 0x1}, {0x2}, {}, {0x4}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x3}, {0x2}, {0x2}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061102a000000000004000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000007000000000000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000040009500080000000000659b0200f0ffffff88932000ffffffff8520000003000000f85a31c2bf91000000000000b7020000010000008500000085000000b70000000000000095000000"], &(0x7f00000000c0)='syzkaller\x00', 0x400, 0x8c, &(0x7f0000000100)=""/140, 0x40f00, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[r0, r0, r0, r0], &(0x7f0000000280)=[{0x1, 0x2, 0x5, 0x8}, {0x2, 0x5, 0x8, 0x2}], 0x10, 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000500)={@private2, 0x0}, &(0x7f0000000540)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="06004a037000fbdbdf25350000002800018008000100", @ANYRES32=r5, @ANYBLOB="08000300030000001400020076657468315f746f5f68737200000000"], 0x3c}}, 0x4000000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.stat\x00', 0x275a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x2, 0x328, 0x140, 0xa8, 0xfeffffff, 0x140, 0x1e8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @local}}}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000000000000080002000000000008000100d2bb6175845d99d8a0041eaa7d4112e9c37dee83759fbd9856d30652da7a96a682b381054257fe7c45fa96d160b044713a824040c4d936544b22382b47e3b08300e35b18d8f8fb147e56116ec795b81c6710490bc03fe1d2a15bc04f9e66d84e36b9f106fe6668015ac33e244734c2e353686c7009e6076f9aeacf8109cd5c70488bbf9aa89eef2bf06d9e87435fb67c32211448a01f93513ba46ab393ecfe398c4b", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) splice(r8, &(0x7f0000000040)=0xfffffffffffffffc, r7, 0x0, 0x800000000ff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000061100800000000007b0ae0ff0000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) syz_emit_ethernet(0xa6, &(0x7f0000000600)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021000703a00fe8000000000000000000000000000bbff0200000000000000000000000000010400907800000000608bb91d000011000000000000000000000000000000000100000000000000000000000000000000870005196800000000060000000000000502000001060000000000000022a17e9ab13f6e142b20582c8d220c690a74dbf13dfc0b7cb46eaf1f23bf42f1cbeb178a1f780ad1f526dfc433137593009290"], 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r1, r8, 0x1d, 0x0, @void}, 0x10) r12 = socket(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r14) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r15, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 5.643879915s ago: executing program 1 (id=3447): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119d0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x60}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@ifindex=r2, r0, 0x1d, 0x4, r0, @void, @value=r0}, 0x20) 1.539595023s ago: executing program 0 (id=3448): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001480)={'erspan0\x00', &(0x7f0000001400)={'syztnl0\x00', 0x0, 0x0, 0x700, 0x552, 0x0, {{0xe, 0x4, 0x1, 0x6, 0x38, 0x64, 0x0, 0x9, 0x2f, 0x0, @empty, @loopback, {[@ra={0x94, 0x4}, @cipso={0x86, 0x1d, 0x2, [{0x6, 0x2}, {0x0, 0xb, "aab6431d9492086110"}, {0x7, 0xa, "c9c1b02ca4a8482c"}]}]}}}}}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001680)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001640)={&(0x7f00000014c0)={0x168, 0x13, 0x10, 0x70bd2b, 0x3, {0x8d1cd7229b40c42e, 0x7a, 0x7, 0x2, {0x4e23, 0x4e24, [0x45d9c343, 0x6, 0xfffffff6], [0x5e0, 0x8001, 0x66, 0x9], r1, [0xfffffff6, 0xf2d3]}, 0x4, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "7570021dcf893f21078ad39eaadfada189e4f26b9e6a438010ea070d05374dd3ae98d89558ec8afb9cf04ec105739eca047ddbe54f703358541ae17693fffad48125d9663b76837a0cdf193fba71cc2c2a4224ff941585a233497d3bb04f7929c213a17424c432e9ec3a64f35109cab2441734f528e90b483e792d6e29b2aab3504cd65a90ed6c9864be4c9451c271d37fbe8a63a426479d0f187c81b0"}, @INET_DIAG_REQ_BYTECODE={0x12, 0x1, "a80a9bc52c6583dc5746e0d58956"}, @INET_DIAG_REQ_BYTECODE={0x64, 0x1, "faf13d111c69cf21ce8b50339888ed319e263471e48ceffb0cf9c381f4642ce155e8bdb14930ab0463f9e9d2a7fa4c5fe09a61d8462a8ede3b8e51d61963933961031bf9543d4d33a11062f8cb027d38ac8908efff2f896589e52104e6c6ca34"}]}, 0x168}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000016c0)="ada118aca6483c1c5caf46ae1ac543878f101364b20dfc98d79f863a2606f630ac9addbf08b58383b9178416fbe6d73316e608", 0x33}, {&(0x7f0000001700)="460eb2bb5cf0b74a2fe43956ec12e3db831f6163c3bba40f17e891d0b0b66da016f914448d18bfbcbaf217611c0767f648ac15cb98ab3fabba18f36916e584b54ba1ccb5de242b42d041bc7eab181d4def03bd0ec6fb91a792b2790eac1fd8e459458cbec59056c26d09abbf2c69af7c5d8275e882c1abf2e20db79c1bd07901941a7d421e7c444b78a00e90f27d0a554d80fcfc6aedce118b3aa8edf9d7d3caa7d671088dfa7bf9332ec41fba4e0bdeffcdb44a4925b5746ef019fa83cee4a743a4ee9deac2a1927b6c", 0xca}, {&(0x7f0000001800)}, {&(0x7f0000001840)="d0e398b914fd12243cb17a4a04487b661c143c1910954b8f3645a55f995385b998d037817e34dcb0eae89b4b04203f19a08a90bf4ed2e9a97eb0c96fd29345ceba94d0b72efbbbbcc70ac989c6206b38f66595f562bd8f2534f04ecd47333079802f38ceb55a45eafedef2ab77a2aa9a3fc5e8c61a12d401be5b8c182e49cf70efaf941dbfa8d66f5a0536e468b6605cc61c71e6c070afe2f3690c09fc18b73ca2a6dade813663d681f76c4fe57307be94da03259fa6eb7e23f0b6c237e1fddf847172c322f3059b63c2ed526a5278fc925e9c66cb", 0xd5}, {&(0x7f0000001940)="61bed330da2b76faff19bafdf7890774bdb522294b9ca4f49cb016e4f54e88ae5d41981447e3af7e081bea182bc8fd30e351851498283bbcf1ca37d607479e2386347d7dc73cf5056e0b136ba3751f30b03b2c6b29ce9c0e50", 0x59}, {&(0x7f00000019c0)="d5e291d913ff541a56e2a233db98cc0b357639e1326f2209842c8dbaa215188778debd77ef75abe1356c69a7545315dba37c83d2adc3006231f9402d1257cebf09db603b1aab78cf6a7f572d1df9dd6cdc16f8ac", 0x54}, {&(0x7f0000001a40)="94616013157fa16bf10e77f30554945b23f74b91e47b287f35a16580c7cb8539bdc069b9ce36b6ea67f741f21dc8995889574d694f6baaa59cd1df52a596165acca7", 0x42}, {&(0x7f0000001ac0)="81512750e74e36d6dc2041986a87a068ff506c62615d334e0cdacd804fb20fd03f8bd7808d4e4c747d68744e92fb180176119998a5a1416bbc14ddb4e4c1e44399855e0895701476d1", 0x49}], 0x8, &(0x7f0000001bc0)=[@tclass={{0x14, 0x29, 0x43, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0x100}}, @hopopts={{0xa8, 0x29, 0x36, {0x1, 0x11, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x1, 0x4, [0x1, 0x0, 0x2, 0x7fffffff, 0x2]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0x9, 0x1ff, [0x101, 0x9, 0x7377, 0xb54, 0x3]}}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x20, {0x1, 0x6, 0x1, 0xb2bf, [0x55, 0x9, 0x6]}}]}}}, @dstopts={{0xa0, 0x29, 0x37, {0x0, 0x10, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x2, 0x10, 0xe1, 0xe1e, [0x3, 0x40, 0x4, 0x4, 0x100000001, 0x8000000000000001, 0x7a, 0x3a5]}}, @pad1, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x18, {0x0, 0x4, 0x8, 0x7, [0x10, 0x4]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}}}], 0x178}}], 0x1, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031c00d3fc14000000478803", 0xd, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) (async, rerun: 32) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2f6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x1, 0x700, 0x0, 0xfffffffb, {{0xc, 0x4, 0x1, 0x36, 0x30, 0x65, 0x0, 0x7, 0x29, 0x0, @local, @multicast1, {[@generic={0x88, 0x10, "0b3c871e88e07b21259f87cc0b1e"}, @ssrr={0x89, 0xb, 0x56, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}]}}}}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@volatile={0x10, 0x0, 0x0, 0x9, 0x1}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x30, 0x5f, 0x61, 0x0]}}, &(0x7f0000000300)=""/4096, 0x36, 0x1000, 0x1, 0x7, 0x10000, @value=r4}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001340)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xe, '\x00', r6, r7, 0x3, 0x4, 0x1}, 0x50) 1.19056275s ago: executing program 4 (id=3449): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd603000bb006c2b00fc020000000000000000000000000000fe8000000000000000000000000000aa3b00070000000000000000000064907802000000000000000000000082f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108402fa83b1d661c18462075368a1860929ddeb8f71aa23d391b8fa99e9816af2d040876a663a86d97f46b9665d918492b"], 0x0) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x300, 0x70bd2b, 0x2, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0x3, {@in6_addr=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4045}, 0x400c040) 1.161570621s ago: executing program 1 (id=3450): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000100)={0x2c, r4, 0x47918d5eb2b4e5e9, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x431e, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x78b, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0xd, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x85, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x5, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0xff, 0x10000, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x4, 0x7fffffff, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x0, 0x757a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x6f, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x8, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x14, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x200, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x8067, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x8, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x100004}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x5, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x7, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 987.651403ms ago: executing program 2 (id=3451): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="000001000401", @ANYBLOB="2b97"], 0x20) setsockopt(r0, 0x4, 0x0, &(0x7f00000000c0)="5b90a379a8000b38dc580e26fe173f3bf9ec8a4ccd0500873d5dded0885b5b812623752cc2aa37bef286d680b2373488bc2936853ea8bca5c6609ffe22d82d2a92ecba4d048a279c2f38a2f6e57ae8c52308444fd1a65d42c075b6370bc5cd142af96fd0b8c866a84218ec673794ecb8b6057b228d628e2f64a03e88b31366bd691468aa6d4010fcb5f432f8780a18aec348cfefbace7eafe812af59", 0x9c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x18002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) 932.915884ms ago: executing program 4 (id=3452): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000040)='.I@\x00', 0x80, &(0x7f0000000080)={@_ha_fsid={[0x3, 0x6]}, {0x2dc2, 0x1, 0x2, 0xfffffffffffffc01}}, 0xe, &(0x7f00000000c0), &(0x7f0000000100)=0x9}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xaa, 0xaa, 0x5, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x0, 0x3}, {0x0, 0x1}, {0x10, 0x5}, {0x1, 0x2}, {0xb, 0x4}, {0x0, 0x1}]}, @const={0x3, 0x0, 0x0, 0xa, 0x1}, @func={0xf, 0x0, 0x0, 0xc, 0x5}, @volatile={0x5, 0x0, 0x0, 0x9, 0x3}, @datasec={0x6, 0x4, 0x0, 0xf, 0x2, [{0x4, 0x8001, 0x7fffffff}, {0x1, 0x5, 0xebdd}, {0x4, 0x8, 0x4}, {0x1, 0x4, 0x3}], '\f*'}, @typedef={0x8, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30, 0x30, 0x0]}}, &(0x7f0000000880)=""/4096, 0xc9, 0x1000, 0x0, 0x7}, 0x28) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001940)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=@base={0x12, 0x6, 0x4, 0xbc, 0x11040, r1, 0x160, '\x00', r2, r3, 0x5, 0x3, 0x3, 0x0, @void, @value, @value=r4}, 0x50) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) 837.512966ms ago: executing program 4 (id=3453): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x0) (async) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 695.318138ms ago: executing program 4 (id=3454): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="fb", 0x1}, {&(0x7f0000003ac0)="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", 0x5ac}], 0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) close(0x3) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x158, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@private2}, {@in6=@remote, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@replay_thresh={0x8}, @tmpl={0x44, 0x5, [{{@in=@private}, 0x0, @in6=@rand_addr=' \x01\x00'}]}, @srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x158}}, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)={0x114, 0x30, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 28.850534ms ago: executing program 0 (id=3455): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a80000002d0007012bbd7000fedbdf25057c0000080001"], 0xa8}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0xb44, 0x6, 0x88a8}}, {0x14, 0x1, {0x101, 0x766, 0xb1a, 0x88a8}}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 2 (id=3456): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x24, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x5}]}, 0x24}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x4, 0x21, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2a}, {[@generic={0x83, 0x8, "a464e654cfb7"}, @cipso={0x86, 0x6, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, "9cc7e8", 0x2, "94125f"}}}}}}, 0x0) kernel console output (not intermixed with test programs): etting to 100 (1000ms) [ 353.054135][T12816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1800'. [ 353.156049][T12805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1800'. [ 353.395396][T12832] team_slave_1: Caught tx_queue_len zero misconfig [ 354.025089][T12857] netlink: 'syz.4.1816': attribute type 4 has an invalid length. [ 354.159118][T12863] mac80211_hwsim hwsim6 wlan1: Caught tx_queue_len zero misconfig [ 354.416847][T12872] block nbd2: Unsupported socket: should be TCP or UNIX. [ 354.535983][T12879] nbd: must specify a device to reconfigure [ 354.989735][T12895] netlink: 'syz.4.1826': attribute type 1 has an invalid length. [ 355.179206][T12903] macvlan2: entered promiscuous mode [ 355.188486][T12903] macvlan2: entered allmulticast mode [ 355.196245][T12903] bond4: entered promiscuous mode [ 355.203461][T12903] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 355.219381][T12903] bond4: left promiscuous mode [ 355.306671][T12873] infiniband syz0: set down [ 355.312669][T12873] infiniband syz0: added ipvlan1 [ 355.348916][T12873] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 355.366666][T12873] infiniband syz0: Couldn't open port 1 [ 355.401701][T12873] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 355.424459][T12873] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 355.443393][T12873] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 355.506769][T12913] syzkaller0: entered promiscuous mode [ 355.519106][T12913] syzkaller0: entered allmulticast mode [ 355.529218][T12873] RDS/IB: syz0: added [ 355.534668][T12873] smc: adding ib device syz0 with port count 1 [ 355.543426][T12873] smc: ib device syz0 port 1 has no pnetid [ 355.948719][T12924] sctp: [Deprecated]: syz.4.1836 (pid 12924) Use of int in maxseg socket option. [ 355.948719][T12924] Use struct sctp_assoc_value instead [ 356.073662][T12930] __nla_validate_parse: 8 callbacks suppressed [ 356.073685][T12930] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1839'. [ 356.092475][T12930] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1839'. [ 356.465583][T12943] ip6erspan1: entered allmulticast mode [ 356.614112][T12950] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1846'. [ 356.626628][T12950] 8021q: VLANs not supported on gre0 [ 356.834499][T12957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1849'. [ 356.969036][T12965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1852'. [ 357.107524][T12972] ip_vti0: entered promiscuous mode [ 357.153599][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'. [ 357.239180][T12978] tipc: Started in network mode [ 357.261095][T12978] tipc: Node identity ac14140f, cluster identity 4711 [ 357.301054][T12978] tipc: Enabled bearer , priority 10 [ 357.381867][T12984] netlink: 'syz.2.1857': attribute type 1 has an invalid length. [ 357.469938][T12990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1858'. [ 357.907373][T12960] xt_ecn: cannot match TCP bits for non-tcp packets [ 358.028483][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1863'. [ 358.061538][T13006] netlink: 'syz.0.1863': attribute type 10 has an invalid length. [ 358.077298][T13006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1863'. [ 358.184777][T13006] geneve3: entered promiscuous mode [ 358.203750][T13006] geneve3: entered allmulticast mode [ 358.422623][ T42] tipc: Node number set to 2886997007 [ 358.478240][T13016] netlink: 'syz.0.1866': attribute type 23 has an invalid length. [ 359.202228][T13039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1874'. [ 359.324784][T13043] ip6gre2: entered allmulticast mode [ 359.674019][T13055] netlink: 'syz.3.1879': attribute type 21 has an invalid length. [ 359.826789][T13069] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:20000 [ 360.605170][T13108] netlink: zone id is out of range [ 360.611234][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 360.633699][T13108] netlink: del zone limit has 4 unknown bytes [ 360.979719][T13119] ip6tnl0: Caught tx_queue_len zero misconfig [ 360.998968][T13123] netlink: 'syz.4.1899': attribute type 8 has an invalid length. [ 361.114986][T13119] __nla_validate_parse: 5 callbacks suppressed [ 361.115008][T13119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1898'. [ 361.180701][T13133] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1901'. [ 361.195278][T13132] netlink: 'syz.1.1902': attribute type 18 has an invalid length. [ 361.279848][ T1123] netdevsim netdevsim1 : set [0, 1] type 1 family 0 port 8472 - 0 [ 361.312161][ T1130] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 361.356721][ T1130] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 361.387080][ T1130] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 361.540178][T13148] nbd: nbd0 already in use [ 361.556203][T13143] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1907'. [ 361.583714][T13143] nbd: illegal input index -8454144 [ 361.620652][T13148] block nbd1: NBD_DISCONNECT [ 361.641649][T13148] block nbd1: Send disconnect failed -32 [ 362.116906][T13171] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 362.176198][T13171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.250078][T13180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.552517][T13200] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1921'. [ 362.573974][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1921'. [ 362.621724][T13204] x_tables: unsorted underflow at hook 2 [ 362.802777][T13211] sctp: [Deprecated]: syz.4.1926 (pid 13211) Use of int in maxseg socket option. [ 362.802777][T13211] Use struct sctp_assoc_value instead [ 362.921645][T13214] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 362.951458][T13214] netlink: 'syz.2.1927': attribute type 11 has an invalid length. [ 362.970245][T13214] netlink: 4320 bytes leftover after parsing attributes in process `syz.2.1927'. [ 363.164247][T13229] netlink: 'syz.0.1930': attribute type 4 has an invalid length. [ 363.178853][T13227] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 363.196444][T13233] netlink: 'syz.0.1930': attribute type 4 has an invalid length. [ 363.301514][ T5638] block nbd1: Receive control failed (result -32) [ 363.345621][T13236] netlink: 83 bytes leftover after parsing attributes in process `syz.2.1932'. [ 363.517485][T13246] netlink: 'syz.3.1935': attribute type 7 has an invalid length. [ 363.556818][T13245] tipc: Enabled bearer , priority 0 [ 363.600007][T13246] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1935'. [ 363.667821][T13245] ip6tnl3: entered allmulticast mode [ 364.176575][T13274] netlink: 'syz.3.1945': attribute type 1 has an invalid length. [ 364.200631][T13274] netlink: 'syz.3.1945': attribute type 1 has an invalid length. [ 364.438915][T13291] netlink: 'syz.3.1950': attribute type 1 has an invalid length. [ 364.497237][T13291] netlink: 'syz.3.1950': attribute type 3 has an invalid length. [ 364.563174][T13291] netlink: 'syz.3.1950': attribute type 7 has an invalid length. [ 364.568402][T13293] ipvlan0: Caught tx_queue_len zero misconfig [ 364.594151][T13291] netlink: 'syz.3.1950': attribute type 8 has an invalid length. [ 364.613384][T13291] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1950'. [ 364.656836][T13291] NCSI netlink: No device for ifindex 131092 [ 364.729652][T13303] tipc: Enabling of bearer rejected, failed to enable media [ 364.754369][T13303] netlink: 'syz.2.1953': attribute type 1 has an invalid length. [ 365.162338][T13319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1958'. [ 365.495697][T13333] 8021q: adding VLAN 0 to HW filter on device bond11 [ 365.506362][T13333] bond10: (slave bond11): making interface the new active one [ 365.515310][T13333] bond10: (slave bond11): Enslaving as an active interface with an up link [ 365.557839][T13329] 8021q: adding VLAN 0 to HW filter on device bond10 [ 365.648839][ T29] audit: type=1804 audit(1783627005.772:12): pid=13343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1967" name="/newroot/370/cgroup.controllers" dev="tmpfs" ino=1911 res=1 errno=0 [ 365.698042][ T29] audit: type=1800 audit(1783627005.782:13): pid=13343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1967" name="cgroup.controllers" dev="tmpfs" ino=1911 res=0 errno=0 [ 365.923245][T13339] bond13: entered promiscuous mode [ 365.945238][T13339] 8021q: adding VLAN 0 to HW filter on device bond13 [ 366.026358][T13351] 8021q: adding VLAN 0 to HW filter on device bond13 [ 366.042145][T13351] bond13: (slave vti0): The slave device specified does not support setting the MAC address [ 366.092460][T13351] bond13: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 366.114745][T13351] bond13: (slave vti0): making interface the new active one [ 366.129715][T13351] vti0: entered promiscuous mode [ 366.138775][T13351] bond13: (slave vti0): Enslaving as an active interface with an up link [ 366.357891][T13366] lo: entered allmulticast mode [ 366.398605][T13366] tunl0: entered allmulticast mode [ 366.415043][T13371] __nla_validate_parse: 4 callbacks suppressed [ 366.415067][T13371] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1972'. [ 366.465070][T13372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1974'. [ 366.487049][T13366] gre0: entered allmulticast mode [ 366.535282][T13366] gretap0: entered allmulticast mode [ 366.652786][T13366] erspan0: entered allmulticast mode [ 366.687494][T13366] ip_vti0: left promiscuous mode [ 366.700066][T13366] ip_vti0: entered allmulticast mode [ 366.717056][T13366] ip6_vti0: entered allmulticast mode [ 366.736879][T13366] sit0: entered allmulticast mode [ 366.770842][T13380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1975'. [ 366.793178][T13366] ip6tnl0: entered allmulticast mode [ 366.874081][T13366] ip6gre0: entered allmulticast mode [ 366.910005][T13366] syz_tun: entered allmulticast mode [ 366.958930][T13366] ip6gretap0: entered allmulticast mode [ 366.980679][T13366] vcan0: entered allmulticast mode [ 366.993641][T13366] bond0: entered allmulticast mode [ 366.999210][T13366] bond_slave_0: entered allmulticast mode [ 367.006022][T13366] bond_slave_1: entered allmulticast mode [ 367.016821][T13366] team0: left promiscuous mode [ 367.022253][T13366] team_slave_0: left promiscuous mode [ 367.029136][T13366] team_slave_1: left promiscuous mode [ 367.049190][T13366] geneve1: left promiscuous mode [ 367.062727][T13366] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 367.112638][T13366] dummy0: entered allmulticast mode [ 367.143477][T13366] nlmon0: entered allmulticast mode [ 367.163899][T13366] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 367.285151][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'. [ 367.295476][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'. [ 367.482462][T13380] team1: entered promiscuous mode [ 367.492831][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1978'. [ 367.503618][T13380] team1: entered allmulticast mode [ 367.704641][T13407] netlink: 'syz.2.1981': attribute type 11 has an invalid length. [ 367.820532][T13405] bond12: invalid ARP target 0.0.0.0 specified for addition [ 367.829119][T13405] bond12: option arp_ip_target: invalid value (0) [ 367.838753][T13405] bond12 (unregistering): Released all slaves [ 367.850147][T13411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1983'. [ 367.909509][T13410] lo speed is unknown, defaulting to 1000 [ 367.942575][T13410] lo speed is unknown, defaulting to 1000 [ 368.013368][T13410] lo speed is unknown, defaulting to 1000 [ 368.019130][T13413] syzkaller0 speed is unknown, defaulting to 1000 [ 368.170999][ T29] audit: type=1107 audit(1783627008.292:14): pid=13417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òЍhç›' [ 368.237818][T13425] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1987'. [ 368.261214][T13425] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1987'. [ 368.304605][T13425] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 368.334962][T13422] xt_hashlimit: size too large, truncated to 1048576 [ 368.545555][T13433] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 368.602151][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1989'. [ 369.397610][T13410] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 369.438679][T13410] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 369.457024][T13410] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 369.490582][T13463] validate_nla: 5 callbacks suppressed [ 369.490604][T13463] netlink: 'syz.2.1998': attribute type 1 has an invalid length. [ 369.513583][T13410] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 369.569699][T13410] lo speed is unknown, defaulting to 1000 [ 369.688397][T13410] lo speed is unknown, defaulting to 1000 [ 369.726443][T13410] lo speed is unknown, defaulting to 1000 [ 369.755780][T13410] lo speed is unknown, defaulting to 1000 [ 369.770458][T13410] lo speed is unknown, defaulting to 1000 [ 369.780697][T13410] lo speed is unknown, defaulting to 1000 [ 369.992161][T13477] xt_hashlimit: size too large, truncated to 1048576 [ 370.573772][ T29] audit: type=1804 audit(1783627010.702:15): pid=13502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2008" name="/newroot/379/cgroup.controllers" dev="tmpfs" ino=1959 res=1 errno=0 [ 370.655003][ T29] audit: type=1800 audit(1783627010.702:16): pid=13502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2008" name="cgroup.controllers" dev="tmpfs" ino=1959 res=0 errno=0 [ 371.022075][T13521] syz_tun: left allmulticast mode [ 371.153358][T13521] netlink: 'syz.2.2014': attribute type 1 has an invalid length. [ 371.175518][T13528] bond0: (slave bond_slave_0): Releasing backup interface [ 371.196472][T13528] bond_slave_0: left allmulticast mode [ 371.225394][T13528] bond0: (slave bond_slave_1): Releasing backup interface [ 371.237137][T13528] bond_slave_1: left allmulticast mode [ 371.263110][T13528] team_slave_0: left allmulticast mode [ 371.287047][T13528] team0: Port device team_slave_0 removed [ 371.315490][T13528] team_slave_1: left allmulticast mode [ 371.352592][T13528] team0: Port device team_slave_1 removed [ 371.378455][T13528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.391548][T13528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.419411][T13528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.443568][T13528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.470335][T13528] geneve1: left allmulticast mode [ 371.483633][T13528] team0: Port device geneve1 removed [ 371.490284][T13528] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 371.517722][T13528] team0: Port device netdevsim1 removed [ 371.562779][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 371.620120][T13538] pim6reg: left allmulticast mode [ 372.103671][T13566] __nla_validate_parse: 4 callbacks suppressed [ 372.103699][T13566] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2028'. [ 372.172977][T13566] netlink: 20572 bytes leftover after parsing attributes in process `syz.4.2028'. [ 372.314884][T13571] netlink: 'syz.1.2030': attribute type 49 has an invalid length. [ 372.373802][T13571] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 372.532455][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.838986][T13591] pim6reg: left allmulticast mode [ 373.251333][T13609] xt_hashlimit: size too large, truncated to 1048576 [ 373.257384][T13615] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2041'. [ 374.485754][T13660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.502808][T13661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2050'. [ 374.536677][T13661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2050'. [ 374.603287][T13661] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2050'. [ 374.614885][T13668] bond0: Error: CAN devices cannot be enslaved [ 374.637798][T13670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.864100][T13682] xt_TPROXY: Can be used only with -p tcp or -p udp [ 374.917981][T13682] xt_TPROXY: Can be used only with -p tcp or -p udp [ 374.978143][T13682] xt_TPROXY: Can be used only with -p tcp or -p udp [ 375.051982][T13682] xt_TPROXY: Can be used only with -p tcp or -p udp [ 375.071232][T13682] xt_TPROXY: Can be used only with -p tcp or -p udp [ 375.105177][T13682] xt_TPROXY: Can be used only with -p tcp or -p udp [ 375.139986][T13698] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2059'. [ 375.155698][T13682] xt_TPROXY: Can be used only with -p tcp or -p udp [ 375.192046][T13682] xt_TPROXY: Can be used only with -p tcp or -p udp [ 375.217256][T13682] xt_TPROXY: Can be used only with -p tcp or -p udp [ 375.239856][T13682] xt_TPROXY: Can be used only with -p tcp or -p udp [ 375.376726][T13710] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2062'. [ 375.809094][T13729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2067'. [ 375.878008][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2067'. [ 376.117921][T13740] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.420482][T13751] netlink: 'syz.3.2074': attribute type 2 has an invalid length. [ 376.636014][ T5289] veth1_vlan: left promiscuous mode [ 376.861905][T13774] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 376.879606][T13775] veth0_macvtap: Caught tx_queue_len zero misconfig [ 377.264769][T13790] tipc: Failed to remove unknown binding: 66,0,0/0:3731914167/3731914169 [ 377.299632][T13790] tipc: Failed to remove unknown binding: 66,0,0/0:3731914167/3731914168 [ 377.330534][T13788] tipc: Failed to remove unknown binding: 66,0,0/0:3731914167/3731914169 [ 377.375173][T13788] tipc: Failed to remove unknown binding: 66,0,0/0:3731914167/3731914168 [ 377.403934][T13788] tipc: Failed to remove unknown binding: 66,0,0/0:3731914167/3731914169 [ 377.435028][T13788] tipc: Failed to remove unknown binding: 66,0,0/0:3731914167/3731914168 [ 377.598459][T13802] netlink: 'syz.1.2087': attribute type 21 has an invalid length. [ 377.774118][T13802] bond14: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 377.846805][T13802] bond14 (unregistering): Released all slaves [ 378.285385][T13831] __nla_validate_parse: 6 callbacks suppressed [ 378.285410][T13831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2093'. [ 378.597945][T13843] netlink: 'syz.0.2097': attribute type 11 has an invalid length. [ 378.794839][T13851] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2099'. [ 379.178750][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.775877][T13863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2102'. [ 381.869322][T13870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.891996][T13870] syz0: rxe_newlink: already configured on ipvlan1 [ 381.926925][T13869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2106'. [ 381.948347][T13871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2104'. [ 382.010212][T13880] bond0: entered promiscuous mode [ 382.018563][T13880] bond_slave_0: entered promiscuous mode [ 382.026774][T13880] bond_slave_1: entered promiscuous mode [ 382.073582][T13880] batadv0: entered promiscuous mode [ 382.096355][T13880] debugfs: 'hsr0' already exists in 'hsr' [ 382.112340][T13880] Cannot create hsr debugfs directory [ 382.124014][T13880] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 382.146080][T13880] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 382.213215][T13880] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 382.242449][T13880] bond0: left promiscuous mode [ 382.258156][T13880] bond_slave_0: left promiscuous mode [ 382.268804][T13880] bond_slave_1: left promiscuous mode [ 382.289184][T13880] batadv0: left promiscuous mode [ 382.363366][T13891] netlink: 'syz.0.2109': attribute type 10 has an invalid length. [ 382.375834][T13891] openvswitch: netlink: Flow key attr not present in new flow. [ 382.394994][T13891] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2109'. [ 382.409302][T13891] 8021q: VLANs not supported on ip6gre0 [ 382.564675][T13901] netlink: 'syz.1.2114': attribute type 4 has an invalid length. [ 382.596199][T13901] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2114'. [ 382.621823][T13902] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20002 [ 382.664421][T13900] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20002 [ 382.677044][T13901] .`: renamed from bond0 (while UP) [ 382.865649][T13920] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2117'. [ 382.889425][T13920] netlink: 'syz.4.2117': attribute type 7 has an invalid length. [ 382.916207][T13920] netlink: 'syz.4.2117': attribute type 8 has an invalid length. [ 382.950083][T13924] 8021q: VLANs not supported on sit0 [ 382.967848][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2117'. [ 383.242969][T13934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2123'. [ 383.325328][T13939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2124'. [ 383.428970][T13942] bond9: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 383.447774][T13942] bond9 (unregistering): Released all slaves [ 383.729502][T13960] xt_limit: Overflow, try lower: 271964/0 [ 383.736492][T13958] netlink: 'syz.4.2132': attribute type 83 has an invalid length. [ 383.813491][T13960] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 384.722064][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2144'. [ 384.747135][T14008] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 384.773871][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2144'. [ 385.090205][T14038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2147'. [ 385.578275][T14043] bridge0: port 1(ipvlan4) entered blocking state [ 385.598285][T14043] bridge0: port 1(ipvlan4) entered disabled state [ 385.608546][T14043] ipvlan4: entered allmulticast mode [ 385.614520][T14043] bridge0: entered allmulticast mode [ 385.626594][T14043] ipvlan4: left allmulticast mode [ 385.643178][T14043] bridge0: left allmulticast mode [ 386.002292][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2152'. [ 386.597173][T14093] netlink: 'syz.0.2160': attribute type 21 has an invalid length. [ 386.626677][T14102] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2162'. [ 386.637102][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2160'. [ 386.697001][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2160'. [ 386.834439][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2163'. [ 387.251960][T14128] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 387.405904][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2173'. [ 387.465369][ T29] audit: type=1107 audit(1783627027.592:17): pid=14136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 388.008309][T14165] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 388.268046][T14169] team0: entered promiscuous mode [ 388.284216][T14169] team_slave_1: entered promiscuous mode [ 388.355186][T14169] team0: left promiscuous mode [ 388.367075][T14169] team_slave_1: left promiscuous mode [ 388.466990][T14188] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 388.487445][T14170] team0: entered promiscuous mode [ 388.513736][T14170] team_slave_1: entered promiscuous mode [ 388.570756][T14170] team0: left promiscuous mode [ 388.583641][T14170] team_slave_1: left promiscuous mode [ 388.819879][T14203] netlink: 'syz.1.2187': attribute type 1 has an invalid length. [ 388.936075][T14208] __nla_validate_parse: 5 callbacks suppressed [ 388.936099][T14208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2187'. [ 389.035683][T14215] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2191'. [ 389.067121][T14203] bond0: entered promiscuous mode [ 389.094857][T14208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2187'. [ 389.130524][T14203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.207671][T14216] bond0: (slave bridge10): making interface the new active one [ 389.231150][T14216] bridge10: entered promiscuous mode [ 389.256796][T14216] bond0: (slave bridge10): Enslaving as an active interface with an up link [ 389.705881][T14247] netlink: 'syz.2.2199': attribute type 12 has an invalid length. [ 389.914796][T14255] nbd: must specify at least one socket [ 390.257574][T14276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2207'. [ 390.410305][T14280] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2209'. [ 390.457629][T14280] ip6gre0: Caught tx_queue_len zero misconfig [ 390.690843][T14290] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2214'. [ 391.018350][T14311] netlink: 'syz.0.2219': attribute type 21 has an invalid length. [ 391.186166][T14300] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 [ 391.212030][T14311] netlink: 'syz.0.2219': attribute type 6 has an invalid length. [ 391.235952][T14311] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2219'. [ 391.410536][T14318] netlink: 'syz.4.2220': attribute type 1 has an invalid length. [ 391.429155][T14319] IPVS: set_ctl: invalid protocol: 110 224.0.0.1:20000 [ 391.679631][T14318] 8021q: adding VLAN 0 to HW filter on device bond5 [ 391.802817][T14325] bond5: (slave veth0_to_bond): making interface the new active one [ 391.901930][T14325] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 392.206366][T14330] bond12 (unregistering): Released all slaves [ 392.260538][T14352] netlink: 'syz.1.2226': attribute type 8 has an invalid length. [ 392.272074][T14331] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 392.280212][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2226'. [ 392.766670][T14366] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 393.061555][T14377] bridge9: entered promiscuous mode [ 393.085883][T14377] bridge9: entered allmulticast mode [ 393.107793][T14377] team0: Port device bridge9 added [ 393.183779][T14384] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2233'. [ 393.472140][T14396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.793849][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2238'. [ 394.271759][T14431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2243'. [ 394.405089][T14440] bond13: entered allmulticast mode [ 394.412599][T14440] vti0: entered allmulticast mode [ 394.496948][T14440] dvmrp8: entered allmulticast mode [ 394.531501][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 394.539515][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 394.659195][T14446] netlink: 'syz.3.2248': attribute type 1 has an invalid length. [ 395.033325][T14443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.067649][T14443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.245503][T14443] xfrm2: left promiscuous mode [ 395.250525][T14443] xfrm2: left allmulticast mode [ 395.256862][T14443] ip6gre1: left allmulticast mode [ 395.264618][T14443] bridge1: left allmulticast mode [ 395.275507][T14443] bridge6: left promiscuous mode [ 395.280491][T14443] bridge6: left allmulticast mode [ 395.288873][T14443] bridge7: left promiscuous mode [ 395.295369][T14443] bridge7: left allmulticast mode [ 395.305834][T14443] ipvlan2: left promiscuous mode [ 395.321703][T14443] bond10: left promiscuous mode [ 395.326966][T14443] bond10: left allmulticast mode [ 395.336422][T14443] gretap2: left promiscuous mode [ 395.342440][T14443] gretap2: left allmulticast mode [ 395.354056][T14443] bond13: left promiscuous mode [ 395.359009][T14443] vti0: left promiscuous mode [ 395.368433][T14443] bond0: left promiscuous mode [ 395.373985][T14443] bridge10: left promiscuous mode [ 395.388583][ T5749] lo speed is unknown, defaulting to 1000 [ 395.397828][ T5749] syú2: Port: 1 Link DOWN [ 395.470144][T14446] 8021q: adding VLAN 0 to HW filter on device bond10 [ 395.478875][T14447] bond10: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 395.498692][T14447] bond10: entered allmulticast mode [ 395.520836][T14450] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 395.538972][T14457] tipc: New replicast peer: 255.255.255.255 [ 395.548871][T14457] tipc: Enabled bearer , priority 10 [ 395.556946][T14438] bond13: left allmulticast mode [ 395.573333][T14438] vti0: left allmulticast mode [ 395.578942][ T76] netdevsim netdevsim1 : unset [0, 0] type 1 family 0 port 256 - 0 [ 395.598686][ T76] netdevsim netdevsim1 : unset [0, 1] type 1 family 0 port 8472 - 0 [ 395.607708][ T76] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.618222][ T76] netdevsim netdevsim1 : unset [1, 1] type 2 family 0 port 20000 - 0 [ 395.627724][ T76] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 395.637510][ T76] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 395.646962][ T76] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.657587][ T76] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 395.940738][ T76] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 395.961908][ T76] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 395.985424][ T76] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.010515][ T76] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 396.044280][ T76] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 396.072231][ T76] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 396.087720][ T76] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.112079][ T76] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 396.206153][T14478] syzkaller0: entered promiscuous mode [ 396.232269][T14478] syzkaller0: entered allmulticast mode [ 396.415415][T14490] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2258'. [ 396.638623][T14497] tipc: Enabling of bearer rejected, failed to enable media [ 396.671684][ T5830] tipc: Node number set to 1110411023 [ 396.690495][T14502] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2261'. [ 396.726389][T14502] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2261'. [ 396.789321][T14502] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2261'. [ 396.826095][T14508] IPVS: length: 1152 != 121776898056 [ 396.843764][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2261'. [ 396.958067][T14512] netlink: 'syz.2.2263': attribute type 1 has an invalid length. [ 397.035151][T14512] netlink: 'syz.2.2263': attribute type 2 has an invalid length. [ 397.363510][T14533] tipc: Enabling of bearer rejected, media not registered [ 397.870051][T14552] 8021q: VLANs not supported on ip_vti0 [ 398.153866][T14557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2272'. [ 398.167717][T14557] bridge: RTM_NEWNEIGH with invalid ether address [ 398.489129][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'. [ 398.527258][T14580] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2276'. [ 398.635544][T14587] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2277'. [ 398.655894][T14589] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004 [ 399.059973][T14606] 8021q: VLANs not supported on xfrm0 [ 399.176129][T14614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.332339][T14619] __nla_validate_parse: 2 callbacks suppressed [ 399.332362][T14619] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2286'. [ 399.363651][T14626] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2287'. [ 399.426093][T14617] bond3: option fail_over_mac: invalid value (16) [ 399.451850][T14617] bond3 (unregistering): Released all slaves [ 399.535626][T14627] bond3: option fail_over_mac: invalid value (16) [ 399.545457][T14627] bond3 (unregistering): Released all slaves [ 399.777471][T14642] netlink: 'syz.3.2292': attribute type 2 has an invalid length. [ 399.821715][T14642] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2292'. [ 399.878419][T14647] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2293'. [ 399.909855][T14647] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2293'. [ 400.128396][T14653] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2294'. [ 400.196379][T14652] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 400.204762][T14652] netlink: 'syz.4.2294': attribute type 3 has an invalid length. [ 400.330142][T14652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.609778][T14673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2299'. [ 422.630083][T14673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2299'. [ 422.652765][T14673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2299'. [ 422.730434][T14673] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2299'. [ 422.935231][T14690] ip6gre1: entered promiscuous mode [ 422.940572][T14690] ip6gre1: entered allmulticast mode [ 423.128596][T14696] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2305'. [ 423.154575][T14681] syzkaller0: entered promiscuous mode [ 423.160272][T14681] syzkaller0: entered allmulticast mode [ 425.800798][T14726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.819980][T14726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.830808][T14726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.838714][T14726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.103416][T14739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2321'. [ 426.134075][T14742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2320'. [ 426.362048][T14749] netdevsim netdevsim0 netdevsim2: IPsec offload requires 128 bit authentication [ 426.936972][T14788] netlink: 'syz.1.2332': attribute type 1 has an invalid length. [ 426.950318][T14790] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2333'. [ 426.971595][T14788] netlink: 'syz.1.2332': attribute type 3 has an invalid length. [ 426.982806][T14788] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2332'. [ 427.024697][T14788] NCSI netlink: No device for ifindex 813332851 [ 427.063227][T14792] netlink: 'syz.1.2332': attribute type 1 has an invalid length. [ 427.080720][T14792] netlink: 'syz.1.2332': attribute type 3 has an invalid length. [ 427.100714][T14792] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2332'. [ 427.132461][T14792] NCSI netlink: No device for ifindex 813332851 [ 427.256963][T14803] netlink: zone id is out of range [ 427.281300][T14803] netlink: del zone limit has 4 unknown bytes [ 427.405368][T14809] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 427.632443][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2339'. [ 428.152509][T14849] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 428.187751][T14852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2349'. [ 429.017817][T14886] geneve4: entered promiscuous mode [ 429.063460][T14893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2361'. [ 429.097545][T14894] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2360'. [ 429.564587][T14911] 8021q: adding VLAN 0 to HW filter on device bond11 [ 429.596872][T14911] bridge0: port 1(bond11) entered blocking state [ 429.621850][T14911] bridge0: port 1(bond11) entered disabled state [ 429.629060][T14911] bond11: entered allmulticast mode [ 429.644087][T14911] bond11: entered promiscuous mode [ 429.650011][T14911] bond1: entered promiscuous mode [ 429.802582][T14924] bridge11: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 430.062487][T14942] pimreg3: entered allmulticast mode [ 430.068619][T14928] veth0_to_bridge: entered promiscuous mode [ 430.078120][T14940] syzkaller0: entered promiscuous mode [ 430.084391][T14940] syzkaller0: entered allmulticast mode [ 430.098134][T14927] veth0_to_bridge: left promiscuous mode [ 430.109287][T14940] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 430.247535][T14951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2375'. [ 430.443010][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'. [ 430.475526][T14957] netlink: 'syz.2.2376': attribute type 10 has an invalid length. [ 430.514349][T14957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2376'. [ 430.678580][T14965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2380'. [ 430.708846][T14965] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2380'. [ 430.894665][T14965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2380'. [ 431.101571][T14988] netlink: 'syz.3.2385': attribute type 5 has an invalid length. [ 431.936805][T14988] veth0_vlan: left promiscuous mode [ 431.995509][T14988] tipc: Resetting bearer [ 432.078192][T14988] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 432.088956][T14988] bond2: left promiscuous mode [ 432.095883][T14988] bridge1: left promiscuous mode [ 432.108025][T14988] ipvlan3: left allmulticast mode [ 432.113791][T14988] bond2: left allmulticast mode [ 432.119116][T14988] bridge1: left allmulticast mode [ 432.159994][T14988] bond7: left promiscuous mode [ 432.174117][T14988] ip6gre1: left promiscuous mode [ 432.183968][T15024] netlink: 'syz.1.2392': attribute type 2 has an invalid length. [ 432.200470][T14988] ip6gre2: left allmulticast mode [ 432.216066][T14988] bond10: left allmulticast mode [ 432.370660][T15028] netlink: 'syz.1.2393': attribute type 17 has an invalid length. [ 432.395469][T15011] bond7: option lp_interval: invalid value (0) [ 432.422918][T15011] bond7: option lp_interval: allowed values 1 - 2147483647 [ 432.459411][T15011] bond7 (unregistering): Released all slaves [ 432.551767][T15043] ksmbd: Unknown IPC event: 1, ignore. [ 432.675216][ T1108] netdevsim netdevsim3 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.701518][ T1108] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.733102][ T1108] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.770204][ T1108] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.829413][T15050] netlink: 'syz.0.2398': attribute type 1 has an invalid length. [ 432.849962][T15028] gretap0: entered promiscuous mode [ 432.887316][T15050] __nla_validate_parse: 4 callbacks suppressed [ 432.887340][T15050] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2398'. [ 432.933064][T15028] gretap0: left promiscuous mode [ 432.962843][ T1108] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.976198][ T1108] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.988101][ T1108] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.010800][ T1108] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.430220][T15076] netlink: 'syz.2.2405': attribute type 1 has an invalid length. [ 433.529016][T15076] 8021q: adding VLAN 0 to HW filter on device bond3 [ 433.733402][T15076] bond3: (slave gretap1): making interface the new active one [ 433.769808][T15076] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 433.802363][T15080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2405'. [ 434.198964][T15103] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2412'. [ 434.589247][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2416'. [ 434.733418][T15114] openvswitch: netlink: Flow key attribute not present in set flow. [ 434.839092][T15135] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 435.138605][T15150] openvswitch: netlink: IPv6 tunnel dst address is zero [ 435.491489][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 435.866318][T15182] xt_l2tp: v2 doesn't support IP mode [ 435.914546][T15184] xt_connbytes: Forcing CT accounting to be enabled [ 435.938831][T15184] Cannot find set identified by id 65534 to match [ 436.459260][T15207] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2437'. [ 436.677802][T15214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2439'. [ 436.749514][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2440'. [ 436.793045][T15220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2440'. [ 436.811821][T15220] netlink: 'syz.2.2440': attribute type 14 has an invalid length. [ 436.846545][T15220] netlink: 'syz.2.2440': attribute type 13 has an invalid length. [ 437.046158][T15231] netlink: 'syz.0.2443': attribute type 1 has an invalid length. [ 437.124803][T15231] bridge0: port 3(syz_tun) entered disabled state [ 437.154487][T15231] syz_tun: left allmulticast mode [ 437.162092][T15231] syz_tun: left promiscuous mode [ 437.184377][T15231] bridge0: port 3(syz_tun) entered disabled state [ 437.257016][T15239] nbd: must specify an index to disconnect [ 437.281769][T15227] netlink: 'syz.0.2443': attribute type 1 has an invalid length. [ 437.295442][T15232] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2444'. [ 437.323747][T15240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2447'. [ 437.838741][T15258] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 437.861879][T15258] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 438.244763][T15280] gre2: entered promiscuous mode [ 438.263765][T15280] gre2: entered allmulticast mode [ 438.508428][T15284] ip6erspan0: left allmulticast mode [ 438.525340][T15284] gretap1: left allmulticast mode [ 438.538332][T15284] xfrm1: left allmulticast mode [ 438.546819][T15297] netlink: 'syz.1.2465': attribute type 2 has an invalid length. [ 438.555588][T15297] __nla_validate_parse: 2 callbacks suppressed [ 438.555609][T15297] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2465'. [ 438.556494][T15284] vlan3: left allmulticast mode [ 438.564920][T15297] xt_ipcomp: unknown flags 1D [ 438.584290][T15284] veth1_virt_wifi: left allmulticast mode [ 438.593436][T15284] team1: left allmulticast mode [ 438.600435][T15284] ip6gre1: left allmulticast mode [ 438.620187][T15297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2465'. [ 438.809199][T15304] netlink: 'syz.4.2466': attribute type 1 has an invalid length. [ 438.982641][T15304] 8021q: adding VLAN 0 to HW filter on device bond7 [ 439.010847][T15311] x_tables: duplicate underflow at hook 1 [ 439.065568][T15300] vlan4: entered promiscuous mode [ 439.073125][T15300] bond7: entered promiscuous mode [ 439.101775][T15300] vlan4: entered allmulticast mode [ 439.108418][T15300] bond7: entered allmulticast mode [ 439.354169][T15326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2476'. [ 439.527584][ T150] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 439.540311][ T150] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.549570][ T150] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.590758][ T150] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.858794][T15360] netlink: 'syz.2.2483': attribute type 1 has an invalid length. [ 439.927590][T15350] syzkaller0: entered promiscuous mode [ 439.971575][T15350] syzkaller0: entered allmulticast mode [ 440.128945][T15350] tipc: Enabled bearer , priority 0 [ 440.165343][T15343] tipc: Resetting bearer [ 440.253644][T15343] tipc: Disabling bearer [ 440.298102][T15376] syzkaller0: entered promiscuous mode [ 440.305243][T15376] syzkaller0: entered allmulticast mode [ 440.319243][T15382] sctp: [Deprecated]: syz.4.2489 (pid 15382) Use of int in maxseg socket option. [ 440.319243][T15382] Use struct sctp_assoc_value instead [ 440.824362][T15404] tipc: Can't bind to reserved service type 0 [ 440.868664][T15404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2493'. [ 441.133221][T15421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2498'. [ 441.255314][T15427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2497'. [ 441.898378][T15453] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2509'. [ 441.996401][T15462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2510'. [ 442.015532][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2510'. [ 442.048955][T15457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2510'. [ 442.563923][T15491] tproxy_tg4_check: 23 callbacks suppressed [ 442.563951][T15491] xt_TPROXY: Can be used only with -p tcp or -p udp [ 442.750696][T15496] syzkaller0: entered promiscuous mode [ 442.774412][T15496] syzkaller0: entered allmulticast mode [ 443.303659][T15527] syzkaller0: entered promiscuous mode [ 443.309434][T15527] syzkaller0: entered allmulticast mode [ 443.333670][T15528] tipc: Enabled bearer , priority 0 [ 443.342659][T15527] tipc: Enabling of bearer rejected, already enabled [ 443.362818][T15523] tipc: Resetting bearer [ 443.383807][T15519] netlink: 'syz.0.2525': attribute type 4 has an invalid length. [ 443.430843][T15523] tipc: Disabling bearer [ 443.589259][T15542] syzkaller0: entered promiscuous mode [ 443.598274][T15542] syzkaller0: entered allmulticast mode [ 443.700439][T15544] bond0 (unregistering): Released all slaves [ 443.913163][T15549] __nla_validate_parse: 6 callbacks suppressed [ 443.913186][T15549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2532'. [ 444.042180][T15556] batadv_slave_0: Caught tx_queue_len zero misconfig [ 444.335408][T15572] ip6gre0: Master is either lo or non-ether device [ 444.629188][T15580] syzkaller0: entered promiscuous mode [ 444.637111][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2544'. [ 444.656812][T15580] syzkaller0: entered allmulticast mode [ 444.662858][T15586] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2544'. [ 444.674264][T15583] nbd: nbd0 already in use [ 444.687194][T15583] block nbd0: NBD_DISCONNECT [ 444.702866][T15583] block nbd0: Send disconnect failed -32 [ 444.733895][T15583] block nbd0: Send disconnect failed -32 [ 444.775341][T15583] block nbd0: shutting down sockets [ 444.948432][T15594] IPv6: addrconf: prefix option has invalid lifetime [ 444.955727][T15594] IPv6: addrconf: prefix option has invalid lifetime [ 445.658145][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2554'. [ 445.797308][T15629] netlink: 'syz.4.2557': attribute type 10 has an invalid length. [ 445.839417][T15629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.863049][T15629] team0: Port device netdevsim1 added [ 446.129556][T15640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.144838][T15644] lo: left allmulticast mode [ 446.154675][T15644] dvmrp8: left allmulticast mode [ 447.029136][T15639] dvmrp1: entered allmulticast mode [ 447.129015][T15683] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 447.188007][T15683] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 447.240151][T15683] gretap2: entered promiscuous mode [ 447.269498][T15683] gretap2: entered allmulticast mode [ 447.645567][T15714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2576'. [ 447.717867][T15715] tipc: Failed to remove unknown binding: 66,1,1/0:3475689381/3475689383 [ 447.857254][T15722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2575'. [ 447.872375][T15720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2578'. [ 448.148717][T15732] tipc: Resetting bearer [ 448.283562][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2584'. [ 448.296804][T15736] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2583'. [ 448.465319][T15747] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2586'. [ 448.580373][T15747] siw: device registration error -23 [ 448.869433][T15747] smbdirect: ib_dev[syz2] removed [ 449.063501][T15777] __nla_validate_parse: 1 callbacks suppressed [ 449.063527][T15777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2592'. [ 449.310676][T15785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.698227][T15801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2601'. [ 449.973490][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2605'. [ 450.439458][ T29] audit: type=1800 audit(1783627090.562:18): pid=15832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2610" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2855 res=0 errno=0 [ 452.121402][T15874] netlink: 'syz.1.2622': attribute type 10 has an invalid length. [ 452.162979][T15874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 452.183184][T15874] team0: Port device netdevsim1 added [ 452.194037][T15878] netlink: 'syz.1.2622': attribute type 10 has an invalid length. [ 452.317443][T15887] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2623'. [ 452.328164][T15876] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.335943][T15876] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.727869][ T754] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.754286][ T754] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 452.784624][ T754] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.822373][ T754] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 452.867998][ T754] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.907891][ T754] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 452.950451][ T754] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.996264][ T754] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 453.667639][T15932] netlink: 'syz.4.2637': attribute type 1 has an invalid length. [ 453.717458][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2636'. [ 453.784445][T15932] 8021q: adding VLAN 0 to HW filter on device bond8 [ 453.798536][T15937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2636'. [ 453.956958][T15942] bond8: (slave syz_tun): Enslaving as a backup interface with an up link [ 453.974919][T15941] syzkaller0: entered promiscuous mode [ 453.985227][T15941] syzkaller0: entered allmulticast mode [ 454.237784][T15959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2641'. [ 454.290793][T15961] netlink: 'syz.1.2644': attribute type 1 has an invalid length. [ 454.320278][T15960] netlink: 'syz.1.2644': attribute type 1 has an invalid length. [ 454.490405][T15961] 8021q: adding VLAN 0 to HW filter on device bond14 [ 454.518340][T15965] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 454.543360][T15976] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2645'. [ 454.580651][T15976] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2645'. [ 454.618735][T15976] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2645'. [ 454.764929][ T5638] block nbd0: Receive control failed (result -32) [ 454.771851][ T5652] block nbd0: Receive control failed (result -32) [ 455.069639][T16000] IPVS: ip_vs_edit_dest(): server weight less than zero [ 455.107133][T16000] openvswitch: netlink: Key type 153 is out of range max 32 [ 455.132022][T16000] xt_hashlimit: size too large, truncated to 1048576 [ 455.208079][T16009] netlink: 'syz.0.2655': attribute type 11 has an invalid length. [ 455.259880][T16009] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2655'. [ 455.365660][T16016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2658'. [ 455.532743][T16023] netlink: 'syz.2.2660': attribute type 2 has an invalid length. [ 455.555996][T16023] netlink: 'syz.2.2660': attribute type 11 has an invalid length. [ 455.583750][T16023] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2660'. [ 456.118749][T16048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2670'. [ 456.135492][T16046] netlink: 'syz.3.2669': attribute type 1 has an invalid length. [ 456.368362][T16060] bond0: entered promiscuous mode [ 456.388257][T16060] bond_slave_0: entered promiscuous mode [ 456.413086][T16060] bond_slave_1: entered promiscuous mode [ 456.436933][T16060] bond0: entered allmulticast mode [ 456.463149][T16061] netlink: 'syz.0.2673': attribute type 10 has an invalid length. [ 456.498974][T16060] bond_slave_0: entered allmulticast mode [ 456.525948][T16060] bond_slave_1: entered allmulticast mode [ 456.560196][T16060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.639349][T16061] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.665147][T16061] team0: entered promiscuous mode [ 456.672376][T16067] sctp: [Deprecated]: syz.4.2676 (pid 16067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 456.672376][T16067] Use struct sctp_sack_info instead [ 456.680487][T16061] team_slave_1: entered promiscuous mode [ 456.708894][T16061] team0: entered allmulticast mode [ 456.715392][T16061] team_slave_1: entered allmulticast mode [ 456.725058][T16061] bond0: (slave team0): Enslaving as an active interface with an up link [ 456.745116][T16067] syzkaller0: entered promiscuous mode [ 456.751022][T16074] netlink: 'syz.3.2677': attribute type 15 has an invalid length. [ 456.776892][T16067] syzkaller0: entered allmulticast mode [ 456.785178][T16076] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 456.790636][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2677'. [ 457.008332][ T3332] netdevsim netdevsim3 : set [0, 1] type 1 family 0 port 2816 - 0 [ 457.016975][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2677'. [ 457.042810][ T3332] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 457.081879][ T3332] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 457.114369][ T3332] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 457.268240][T16090] validate_nla: 1 callbacks suppressed [ 457.268265][T16090] netlink: 'syz.4.2684': attribute type 1 has an invalid length. [ 458.180688][T16141] xt_CT: You must specify a L4 protocol and not use inversions on it [ 458.594328][T16157] team0: Caught tx_queue_len zero misconfig [ 458.617466][T16159] netlink: 'syz.3.2704': attribute type 3 has an invalid length. [ 459.638859][T16201] __nla_validate_parse: 5 callbacks suppressed [ 459.638883][T16201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2716'. [ 459.739244][T16203] sctp: [Deprecated]: syz.3.2719 (pid 16203) Use of int in maxseg socket option. [ 459.739244][T16203] Use struct sctp_assoc_value instead [ 459.946338][T16211] syzkaller0: entered promiscuous mode [ 459.953812][T16211] syzkaller0: entered allmulticast mode [ 459.960584][T16210] tipc: Enabled bearer , priority 0 [ 460.036626][T16210] tipc: Resetting bearer [ 460.092394][T16218] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2721'. [ 460.185874][T16223] netlink: 'syz.1.2722': attribute type 9 has an invalid length. [ 460.203557][T16221] netlink: 'syz.1.2722': attribute type 9 has an invalid length. [ 460.473069][T16235] netlink: 'syz.2.2726': attribute type 8 has an invalid length. [ 462.987450][T16210] tipc: Disabling bearer [ 463.837663][T16281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2737'. [ 464.025875][T16288] syzkaller1: entered promiscuous mode [ 464.047648][T16288] syzkaller1: entered allmulticast mode [ 464.107638][T16291] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 464.194972][T16294] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 464.354156][T16302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2746'. [ 464.509815][T16311] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2748'. [ 464.647710][T16313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2749'. [ 464.775032][T16324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2753'. [ 464.806287][T16324] syzkaller1: left promiscuous mode [ 464.821157][T16324] syzkaller1: left allmulticast mode [ 464.839850][T16325] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2751'. [ 464.857820][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2751'. [ 464.925895][T16330] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2754'. [ 464.947301][T16335] macvlan0: entered promiscuous mode [ 464.968389][T16335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2756'. [ 465.120331][T16338] netlink: 'syz.3.2758': attribute type 2 has an invalid length. [ 465.608071][T16367] syzkaller1: entered promiscuous mode [ 465.632386][T16367] syzkaller1: entered allmulticast mode [ 465.656204][T16364] wireguard: wg2: Could not create IPv4 socket [ 465.736148][T16375] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2767'. [ 465.748456][T16368] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 465.769049][T16378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2766'. [ 465.785331][T16368] bond0 (unregistering): Released all slaves [ 466.407757][T16391] netlink: 'syz.0.2773': attribute type 3 has an invalid length. [ 466.516581][T16391] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2773'. [ 466.549219][T16399] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 468.926871][T16495] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2797'. [ 469.007975][T16497] tipc: Enabling of bearer rejected, already enabled [ 469.374368][T16511] bond12: Removing last arp target with arp_interval on [ 469.506615][T16519] syzkaller0: entered promiscuous mode [ 469.531879][T16519] syzkaller0: entered allmulticast mode [ 469.679430][T16529] __nla_validate_parse: 51 callbacks suppressed [ 469.679457][T16529] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2807'. [ 469.866638][T16535] openvswitch: netlink: Key type 31 is not supported [ 469.928819][T16538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2808'. [ 470.190074][T16548] netlink: 'syz.2.2814': attribute type 1 has an invalid length. [ 470.209009][T16553] netlink: 304 bytes leftover after parsing attributes in process `syz.1.2813'. [ 470.416659][T16546] netlink: 'syz.4.2812': attribute type 1 has an invalid length. [ 470.570667][T16560] bond5: (slave bridge7): making interface the new active one [ 470.613788][T16560] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 470.616706][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2817'. [ 470.671400][T16570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.706663][T16550] veth7: entered allmulticast mode [ 470.776966][T16558] bond5: (slave veth0_to_bond): Releasing active interface [ 470.915904][T16575] IPv6: NLM_F_CREATE should be specified when creating new route [ 471.324792][T16591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2825'. [ 471.519862][T16602] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 471.693961][T16606] syzkaller1: left promiscuous mode [ 471.706374][T16606] syzkaller1: left allmulticast mode [ 471.923976][T16621] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 471.955192][T16623] lo: left allmulticast mode [ 471.963900][T16623] tunl0: left allmulticast mode [ 471.970551][T16623] gre0: left allmulticast mode [ 471.993769][T16623] gretap0: left allmulticast mode [ 472.020035][T16623] erspan0: left allmulticast mode [ 472.029075][T16623] ip_vti0: left allmulticast mode [ 472.062890][T16623] ip6_vti0: left allmulticast mode [ 472.278303][T16630] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2836'. [ 472.907625][T16654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2842'. [ 473.079528][T16661] netlink: 'syz.2.2845': attribute type 4 has an invalid length. [ 473.109192][T16659] bond0: (slave bond_slave_1): Releasing backup interface [ 473.134242][T16664] netlink: 'syz.2.2845': attribute type 4 has an invalid length. [ 473.199363][T16659] bond_slave_1: left promiscuous mode [ 473.233247][T16659] bond_slave_1: left allmulticast mode [ 473.260737][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 473.275540][ T5638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 473.288537][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 473.301583][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 473.317771][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 473.357728][T16674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2847'. [ 473.490159][ T5652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 473.518657][ T5652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 473.528253][ T5652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 473.550755][ T5652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 473.568954][ T5652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 474.043169][T16697] netlink: 'syz.0.2852': attribute type 2 has an invalid length. [ 474.134939][T16698] netlink: 'syz.0.2852': attribute type 2 has an invalid length. [ 474.369905][T16710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.447038][T16718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2856'. [ 474.546990][T16718] syzkaller0: entered promiscuous mode [ 474.571673][T16718] syzkaller0: entered allmulticast mode [ 474.604931][T16724] tipc: Enabled bearer , priority 0 [ 474.632832][T16723] sctp: [Deprecated]: syz.0.2858 (pid 16723) Use of int in maxseg socket option. [ 474.632832][T16723] Use struct sctp_assoc_value instead [ 474.648264][T16718] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 474.671717][T16718] tipc: Resetting bearer [ 474.700052][T16717] tipc: Resetting bearer [ 474.802942][T16717] tipc: Disabling bearer [ 474.828346][T16727] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2859'. [ 475.276424][T16746] syzkaller0: entered promiscuous mode [ 475.345115][T16746] syzkaller0: entered allmulticast mode [ 475.651335][ T5652] Bluetooth: hci5: command tx timeout [ 476.035412][T16773] netlink: 'syz.0.2865': attribute type 29 has an invalid length. [ 476.075587][T16773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2865'. [ 476.388736][T16667] lo speed is unknown, defaulting to 1000 [ 476.415884][T16780] xt_hashlimit: size too large, truncated to 1048576 [ 476.565217][T10733] tipc: Resetting bearer [ 476.939544][T16789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2869'. [ 477.364019][T16796] bridge10: entered promiscuous mode [ 477.369524][T16796] bridge10: entered allmulticast mode [ 477.627657][T16667] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.657106][T16667] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.664697][T16810] netlink: 'syz.3.2875': attribute type 9 has an invalid length. [ 477.673692][T16667] bridge_slave_0: entered allmulticast mode [ 477.720516][T16667] bridge_slave_0: entered promiscuous mode [ 477.731131][ T5652] Bluetooth: hci5: command tx timeout [ 477.753208][T16812] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2876'. [ 477.773521][T16667] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.809309][T16667] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.835436][T16667] bridge_slave_1: entered allmulticast mode [ 477.871938][T16667] bridge_slave_1: entered promiscuous mode [ 477.959766][T16817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.036698][T16817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2878'. [ 478.061914][T16823] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 478.089568][T16822] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2880'. [ 478.123654][T16817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2878'. [ 478.138759][T16667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.191278][T16667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.388311][T16667] team0: Port device team_slave_0 added [ 478.414459][T16667] team0: Port device team_slave_1 added [ 478.436068][T16835] xt_hashlimit: invalid interval [ 478.515717][T16667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.528305][T16667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.568757][T16667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.590225][T16667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.598910][T16667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.692572][T16667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.925802][T16667] hsr_slave_0: entered promiscuous mode [ 478.942123][T16667] hsr_slave_1: entered promiscuous mode [ 478.962626][T16667] debugfs: 'hsr0' already exists in 'hsr' [ 478.977018][T16667] Cannot create hsr debugfs directory [ 479.568162][T16867] syzkaller0: entered promiscuous mode [ 479.581897][T16867] syzkaller0: entered allmulticast mode [ 479.657088][T16879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2896'. [ 479.811472][ T5652] Bluetooth: hci5: command tx timeout [ 480.068243][T16891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 480.255181][T16903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2903'. [ 480.524658][T16915] netlink: 'syz.4.2906': attribute type 1 has an invalid length. [ 480.590184][T16919] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2906'. [ 480.787672][T16915] 8021q: adding VLAN 0 to HW filter on device bond9 [ 480.825872][T16927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2909'. [ 480.878284][T16931] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2910'. [ 480.979382][T16935] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2910'. [ 480.997594][T16918] syzkaller0: entered promiscuous mode [ 481.015506][T16918] syzkaller0: entered allmulticast mode [ 481.057724][T16940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2910'. [ 481.169416][T16941] netlink: 'syz.0.2910': attribute type 1 has an invalid length. [ 481.208440][T16943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2912'. [ 481.271789][T16931] bond14 (unregistering): Released all slaves [ 481.891703][ T5652] Bluetooth: hci5: command tx timeout [ 484.554387][T16965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2916'. [ 484.586726][T16969] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2918'. [ 484.618191][T16667] team0: Port device netdevsim1 removed [ 484.724899][T16965] xfrm1: entered promiscuous mode [ 484.743200][T16965] xfrm1: entered allmulticast mode [ 485.213743][T16986] sctp: [Deprecated]: syz.4.2921 (pid 16986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 485.213743][T16986] Use struct sctp_sack_info instead [ 485.284360][T16994] vlan3: entered allmulticast mode [ 485.672513][T17004] __nla_validate_parse: 1 callbacks suppressed [ 485.672539][T17004] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2928'. [ 485.811652][T16667] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 485.832601][T16667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 485.856178][T17007] syzkaller0: entered promiscuous mode [ 485.879826][T17007] syzkaller0: entered allmulticast mode [ 485.944321][T16667] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 485.993305][T16667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 486.016828][T17016] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 486.052806][T17016] xt_nat: multiple ranges no longer supported [ 486.079223][T17021] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 486.128318][T16667] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 486.162473][T17015] IPVS: persistence engine module ip_vs_pe_À not found [ 486.187460][T16667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 486.219407][T16667] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 486.279601][T16667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 486.703589][T17049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2939'. [ 487.170334][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2943'. [ 487.201715][T17067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2943'. [ 487.386532][T17043] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.395576][T17043] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.644575][T17070] geneve3: entered promiscuous mode [ 488.657148][ T1108] netdevsim netdevsim4 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.678808][ T1108] netdevsim netdevsim4 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.700717][ T1108] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.726915][ T1108] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.769701][ T1108] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.807071][ T1108] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.862822][ T1108] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 488.893634][ T1108] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.993246][T17091] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2948'. [ 489.017290][T17088] netlink: 'syz.2.2947': attribute type 9 has an invalid length. [ 489.049213][T16667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.193982][T16667] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.273551][T17099] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 489.291733][T17099] syzkaller1: linktype set to 823 [ 489.319862][T10733] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.327210][T10733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.348162][T17102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2950'. [ 489.370315][T17102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2950'. [ 489.426421][T10733] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.433705][T10733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.638272][T17110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2953'. [ 489.680317][T17110] netlink: 'syz.4.2953': attribute type 10 has an invalid length. [ 489.715508][T17110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2953'. [ 489.766670][T17122] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2955'. [ 490.133875][T17132] netlink: 'syz.4.2958': attribute type 21 has an invalid length. [ 490.640525][T17155] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 490.756513][T17155] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 490.767114][T17155] gretap2: entered promiscuous mode [ 490.778482][T17155] gretap2: entered allmulticast mode [ 491.464748][T16667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.603603][T16667] veth0_vlan: entered promiscuous mode [ 491.647591][T16667] veth1_vlan: entered promiscuous mode [ 491.788003][T16667] veth0_macvtap: entered promiscuous mode [ 491.806963][T17199] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 491.836141][T16667] veth1_macvtap: entered promiscuous mode [ 491.896377][T17202] __nla_validate_parse: 2 callbacks suppressed [ 491.896403][T17202] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2976'. [ 491.913822][T16667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.973706][T16667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.019630][T17205] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2978'. [ 492.094843][T10743] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.127241][T10743] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.174395][T10743] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.241518][T10743] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.270317][T17214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2981'. [ 492.733890][T15494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.779811][T15494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.974743][T10733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.023652][T10733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.083333][T17238] syzkaller0: entered promiscuous mode [ 493.112795][T17238] syzkaller0: entered allmulticast mode [ 493.531555][T17248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2840'. [ 493.599857][T17248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2840'. [ 493.695943][ T5652] block nbd2: Receive control failed (result -32) [ 494.135176][T17268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2993'. [ 494.680535][T17286] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 494.798481][T17289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2998'. [ 494.850576][T17289] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2998'. [ 495.011962][T17289] gretap0: entered promiscuous mode [ 495.052972][T17289] gretap0: left promiscuous mode [ 495.077735][T17300] netlink: 'syz.1.3000': attribute type 10 has an invalid length. [ 495.089365][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 495.104314][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 495.115294][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 495.130247][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 495.140692][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 495.231871][T17300] team0: Port device dummy0 added [ 495.530569][T17308] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3005'. [ 495.576075][T17308] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3005'. [ 496.548618][T17354] batadv0: entered allmulticast mode [ 496.920529][T17365] syzkaller0: entered promiscuous mode [ 496.943392][T17365] syzkaller0: entered allmulticast mode [ 497.117022][T17374] __nla_validate_parse: 8 callbacks suppressed [ 497.117046][T17374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3019'. [ 497.254204][ T5652] Bluetooth: hci0: command tx timeout [ 497.352381][T17383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'. [ 497.758686][T17298] lo speed is unknown, defaulting to 1000 [ 498.088212][T17406] openvswitch: netlink: Multiple metadata blocks provided [ 498.138749][T17406] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3032'. [ 498.213706][T17411] nft_compat: unsupported protocol 0 [ 498.757966][T17427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3037'. [ 498.955061][T17436] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 498.991135][T17433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 499.056517][T17298] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.077002][T17298] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.100771][T17298] bridge_slave_0: entered allmulticast mode [ 499.137702][T17298] bridge_slave_0: entered promiscuous mode [ 499.188109][T17433] hsr_slave_1 (unregistering): left promiscuous mode [ 499.256508][T17298] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.274041][T17298] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.302450][T17298] bridge_slave_1: entered allmulticast mode [ 499.335532][ T5652] Bluetooth: hci0: command tx timeout [ 499.345589][T17298] bridge_slave_1: entered promiscuous mode [ 499.390545][T17459] netlink: 'syz.1.3045': attribute type 30 has an invalid length. [ 499.607113][T17298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.682719][T17298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.908942][T17298] team0: Port device team_slave_0 added [ 499.943204][T17298] team0: Port device team_slave_1 added [ 500.088504][T17481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3053'. [ 500.121746][T17481] netlink: 'syz.4.3053': attribute type 10 has an invalid length. [ 500.143859][T17481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3053'. [ 500.166183][T17298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.190236][T17298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.268963][T17298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.291699][T17498] netlink: 'syz.0.3056': attribute type 1 has an invalid length. [ 500.299471][T17481] geneve2: entered promiscuous mode [ 500.299553][T17481] geneve2: entered allmulticast mode [ 500.321193][T17298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.328381][T17298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.359579][T17298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.544233][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3057'. [ 500.589545][T17298] hsr_slave_0: entered promiscuous mode [ 500.598987][T17298] hsr_slave_1: entered promiscuous mode [ 500.607305][T17298] debugfs: 'hsr0' already exists in 'hsr' [ 500.617836][T17298] Cannot create hsr debugfs directory [ 501.079540][T17529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3061'. [ 501.191008][T17529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.212586][T17533] macvlan2: entered promiscuous mode [ 501.218069][T17533] macvlan2: entered allmulticast mode [ 501.227715][T17533] bond0: entered promiscuous mode [ 501.234359][T17533] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 501.243991][T17529] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3061'. [ 501.263336][T17533] bond0: left promiscuous mode [ 501.369667][T17298] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.383453][T17298] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.421430][ T5652] Bluetooth: hci0: command tx timeout [ 501.431039][T17298] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 501.697132][T17298] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.718398][T17298] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.731620][T17298] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 501.840352][T17298] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.852484][T17298] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.865135][T17298] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 502.020483][T17298] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.031597][T17298] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.042293][T17298] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 503.491242][ T5652] Bluetooth: hci0: command tx timeout [ 503.511578][T17503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 503.561692][T17298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 503.636250][T17298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 503.668654][T17298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 503.734062][T17298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 503.759509][T17298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 503.799989][T17298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 503.845195][T17298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 503.860356][T17568] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 503.865761][T17569] xt_TCPMSS: Only works on TCP SYN packets [ 503.890197][T17298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.222534][T17298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.322985][T17589] syzkaller0: entered promiscuous mode [ 504.333140][T17589] syzkaller0: entered allmulticast mode [ 504.347335][T17298] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.381325][T10733] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.388628][T10733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.536137][ T754] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.543439][ T754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.990639][T17616] __nla_validate_parse: 3 callbacks suppressed [ 504.990661][T17616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3082'. [ 505.178478][T17620] sctp: [Deprecated]: syz.1.3083 (pid 17620) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.178478][T17620] Use struct sctp_sack_info instead [ 505.387056][T17632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3087'. [ 505.549167][T17636] sctp: [Deprecated]: syz.3.3088 (pid 17636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.549167][T17636] Use struct sctp_sack_info instead [ 505.689294][T17642] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3090'. [ 506.194988][T17661] syzkaller0: entered promiscuous mode [ 506.222433][T17661] syzkaller0: entered allmulticast mode [ 506.379454][T17298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.604960][T17298] veth0_vlan: entered promiscuous mode [ 506.660530][T17298] veth1_vlan: entered promiscuous mode [ 506.820029][T17298] veth0_macvtap: entered promiscuous mode [ 506.864736][T17298] veth1_macvtap: entered promiscuous mode [ 506.974369][T17298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.047393][T17298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.145932][T10743] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.181583][T17699] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3105'. [ 507.196857][ T754] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.248171][ T754] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.307782][ T754] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.596242][T17715] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 507.645877][T17715] xt_hashlimit: size too large, truncated to 1048576 [ 507.678990][T17716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3108'. [ 507.745719][ T3332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.779416][ T3332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.985552][ T3332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.047958][ T3332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.065144][T17726] sctp: [Deprecated]: syz.4.3110 (pid 17726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 508.065144][T17726] Use struct sctp_sack_info instead [ 508.818621][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3117'. [ 508.855168][T17744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3117'. [ 508.939882][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 508.963221][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 508.973167][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 508.988628][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 508.998211][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 509.198285][T17735] tipc: Enabling of bearer rejected, failed to enable media [ 509.468632][T17751] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3118'. [ 509.535651][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3119'. [ 509.599319][T17757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3120'. [ 509.939610][T17772] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 509.958469][T17772] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 510.216782][T17778] veth0: entered promiscuous mode [ 510.404504][T17776] veth0: left promiscuous mode [ 510.426874][T17786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3126'. [ 510.536446][ T3332] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.568832][ T3332] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.589629][ T3332] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.617538][ T1103] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.948176][T17809] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 511.091243][ T5652] Bluetooth: hci2: command tx timeout [ 511.149542][T17745] lo speed is unknown, defaulting to 1000 [ 511.243548][T17815] syzkaller0: entered promiscuous mode [ 511.262604][T17815] syzkaller0: entered allmulticast mode [ 511.754049][T17840] syzkaller0: entered promiscuous mode [ 511.779120][T17840] syzkaller0: entered allmulticast mode [ 511.885875][T17847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3142'. [ 512.370528][T17871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3146'. [ 512.468717][T17871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3146'. [ 512.478112][ T1130] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 512.521171][ T1130] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.555403][ T1130] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.568788][T17874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3147'. [ 512.584723][ T1130] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.604821][T17874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3147'. [ 512.952550][T17885] syzkaller0: entered promiscuous mode [ 512.958807][T17885] syzkaller0: entered allmulticast mode [ 513.029555][T17893] netlink: 'syz.3.3152': attribute type 1 has an invalid length. [ 513.050163][T17745] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.057703][T17745] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.066030][T17745] bridge_slave_0: entered allmulticast mode [ 513.075965][T17745] bridge_slave_0: entered promiscuous mode [ 513.133337][T17896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3154'. [ 513.171244][ T5652] Bluetooth: hci2: command tx timeout [ 513.256991][T17745] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.271938][T17745] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.289725][T17745] bridge_slave_1: entered allmulticast mode [ 513.303314][T17745] bridge_slave_1: entered promiscuous mode [ 513.408443][T17896] bond2: Invalid ad_actor_system MAC address. [ 513.416624][T17896] bond2: option ad_actor_system: invalid value (1) [ 513.435446][T17896] bond2 (unregistering): Released all slaves [ 513.567241][T17910] netlink: 'syz.3.3156': attribute type 11 has an invalid length. [ 513.600255][T17910] netlink: 4320 bytes leftover after parsing attributes in process `syz.3.3156'. [ 513.649137][T17745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.750320][T17745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.926407][T17923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3157'. [ 513.998740][T17923] IPv6: NLM_F_CREATE should be specified when creating new route [ 514.023485][T17745] team0: Port device team_slave_0 added [ 514.093554][T17745] team0: Port device team_slave_1 added [ 514.268303][T17745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.276284][T17745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.309036][T17745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.330676][T17745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.355103][T17745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.444248][T17745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.593867][T17942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3164'. [ 514.667244][T17942] netlink: 'syz.2.3164': attribute type 29 has an invalid length. [ 514.710140][T17942] IPv6: NLM_F_CREATE should be specified when creating new route [ 514.726074][T17745] hsr_slave_0: entered promiscuous mode [ 514.734073][T17745] hsr_slave_1: entered promiscuous mode [ 514.759072][T17745] debugfs: 'hsr0' already exists in 'hsr' [ 514.770226][T17745] Cannot create hsr debugfs directory [ 514.778295][T17947] netlink: 'syz.1.3165': attribute type 1 has an invalid length. [ 514.954598][T17947] 8021q: adding VLAN 0 to HW filter on device bond2 [ 515.087819][T17946] veth3: entered allmulticast mode [ 515.115165][T17946] bond2: (slave veth3): Enslaving as an active interface with a down link [ 515.159440][T17951] bond2: (slave veth0_to_bond): making interface the new active one [ 515.175418][ T29] audit: type=1800 audit(1783627155.302:19): pid=17967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3170" name="memory.events" dev="tmpfs" ino=3309 res=0 errno=0 [ 515.199441][T17967] netlink: 'syz.3.3170': attribute type 1 has an invalid length. [ 515.199768][T17951] veth0_to_bond: entered promiscuous mode [ 515.214675][T17951] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 515.225428][ T29] audit: type=1804 audit(1783627155.322:20): pid=17967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3170" name="/newroot/642/memory.events" dev="tmpfs" ino=3309 res=1 errno=0 [ 515.258274][ T5652] Bluetooth: hci2: command tx timeout [ 515.336520][T17961] batadv1: entered allmulticast mode [ 515.646729][T17973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.678076][T17971] syzkaller0: entered promiscuous mode [ 515.690214][T17971] syzkaller0: entered allmulticast mode [ 515.703306][T17977] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 515.923603][T17991] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3175'. [ 516.160577][T17996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3178'. [ 516.387017][T17998] bond10 (unregistering): Released all slaves [ 516.427438][T18009] netlink: 'syz.2.3183': attribute type 83 has an invalid length. [ 516.980503][T18026] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 516.992573][T18026] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 517.003048][T18026] gretap3: entered promiscuous mode [ 517.025683][T18026] gretap3: entered allmulticast mode [ 517.298951][T18041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3191'. [ 517.320091][T18042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3191'. [ 517.331395][ T5652] Bluetooth: hci2: command tx timeout [ 517.349038][T18042] block nbd0: Unsupported socket: should be TCP or UNIX. [ 517.870148][T18054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3194'. [ 518.425204][T18061] syzkaller0: entered promiscuous mode [ 518.432622][T18061] syzkaller0: entered allmulticast mode [ 522.075893][T18085] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 522.334467][T18096] macsec0: entered promiscuous mode [ 522.349318][T18096] macsec0: entered allmulticast mode [ 522.358284][T17745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 522.397131][T17745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 522.413349][T17745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 522.434082][T17745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 522.443393][T17745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 522.464747][T17745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 522.471957][T18096] netlink: 'syz.4.3203': attribute type 12 has an invalid length. [ 522.496915][T18092] veth1_macvtap: entered allmulticast mode [ 522.508081][T18092] macsec0: left promiscuous mode [ 522.520393][T18092] macsec0: left allmulticast mode [ 522.546023][T18092] veth1_macvtap: left allmulticast mode [ 522.594602][T18096] bond10: option primary_reselect: invalid value (255) [ 522.605092][T18096] bond10 (unregistering): Released all slaves [ 522.636472][T17745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 522.649924][T17745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 522.659421][T18105] netlink: 'syz.3.3204': attribute type 5 has an invalid length. [ 522.907860][T17745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.948854][T17745] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.991583][T10733] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.998857][T10733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.076592][ T3332] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.084045][ T3332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.291598][T18126] x_tables: duplicate underflow at hook 1 [ 523.348187][T18127] syzkaller1: entered promiscuous mode [ 523.361259][T18127] syzkaller1: entered allmulticast mode [ 523.524488][T18132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3211'. [ 523.829938][T18142] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3212'. [ 523.840756][T18143] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3212'. [ 524.027669][T18149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3215'. [ 524.170360][T18153] Bluetooth: MGMT ver 1.23 [ 524.185887][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 524.198129][T18156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3217'. [ 524.207776][T18156] netlink: 'syz.4.3217': attribute type 15 has an invalid length. [ 524.227324][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 524.248736][T18156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3217'. [ 524.278260][T18156] netlink: 'syz.4.3217': attribute type 15 has an invalid length. [ 524.404457][T18161] pimreg: entered allmulticast mode [ 524.469796][T17745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.585374][T17745] veth0_vlan: entered promiscuous mode [ 524.647124][T17745] veth1_vlan: entered promiscuous mode [ 524.782582][T18173] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3222'. [ 524.808141][T18171] pim6reg1: entered promiscuous mode [ 524.822649][T18171] pim6reg1: entered allmulticast mode [ 524.837791][T17745] veth0_macvtap: entered promiscuous mode [ 524.865085][T17745] veth1_macvtap: entered promiscuous mode [ 524.947698][T17745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.004805][T18177] netlink: 'syz.4.3224': attribute type 1 has an invalid length. [ 525.067008][T18177] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 525.076395][T17745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.117372][T10735] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.141867][T10735] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.173983][T10735] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.210558][T10735] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.268585][T18183] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3225'. [ 525.766526][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.801905][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.856184][T18198] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 525.908518][ T3332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.927416][ T3332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.968132][T18204] block nbd3: Unsupported socket: should be TCP or UNIX. [ 526.501245][T10735] veth0_to_bond: left promiscuous mode [ 526.584732][T18219] IPv6: sit1: Disabled Multicast RS [ 526.606640][T18219] sit1: entered allmulticast mode [ 526.759350][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 526.781112][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 526.798483][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 526.809058][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 526.821507][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 526.885997][T18222] erspan0: entered promiscuous mode [ 526.893751][T18222] gretap0: entered promiscuous mode [ 527.825097][T18254] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 527.872347][ T5642] bond8: (slave syz_tun): Removing an active aggregator [ 527.915602][ T5642] bond8: (slave syz_tun): Releasing backup interface [ 528.027195][T18254] gtp1: entered allmulticast mode [ 528.049826][T18254] team0: Device gtp1 is of different type [ 528.215152][T18267] netlink: 'syz.3.3247': attribute type 4 has an invalid length. [ 528.229605][T18267] dummy0: Caught tx_queue_len zero misconfig [ 528.571847][T18272] __nla_validate_parse: 10 callbacks suppressed [ 528.571883][T18272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3249'. [ 528.603455][T18279] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3250'. [ 528.931912][ T5652] Bluetooth: hci4: command tx timeout [ 528.957231][T18286] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 528.981829][T18286] bond1 (unregistering): Released all slaves [ 529.371326][T18298] syzkaller0: entered promiscuous mode [ 529.377080][T18298] syzkaller0: entered allmulticast mode [ 529.390182][T18223] lo speed is unknown, defaulting to 1000 [ 529.492291][T18310] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3257'. [ 531.011186][ T5638] Bluetooth: hci4: command tx timeout [ 533.099208][ T5638] Bluetooth: hci4: command tx timeout [ 533.407347][T18306] netlink: 'syz.3.3256': attribute type 1 has an invalid length. [ 533.422981][T18306] netlink: 'syz.3.3256': attribute type 3 has an invalid length. [ 533.431241][T18306] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3256'. [ 534.313646][T18358] ip6t_srh: unknown srh match flags 4000 [ 534.604727][T18365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3273'. [ 534.641293][T18366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3273'. [ 534.653001][T18368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3274'. [ 534.671831][T18368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3274'. [ 534.736469][T18368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3274'. [ 534.900797][T18372] netlink: 'syz.1.3274': attribute type 1 has an invalid length. [ 535.088528][T18223] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.109104][T18223] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.138026][T18223] bridge_slave_0: entered allmulticast mode [ 535.171256][ T5638] Bluetooth: hci4: command tx timeout [ 535.182374][T18223] bridge_slave_0: entered promiscuous mode [ 535.203281][T18223] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.210628][T18223] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.218174][T18223] bridge_slave_1: entered allmulticast mode [ 535.228575][T18223] bridge_slave_1: entered promiscuous mode [ 535.335858][T18223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.436617][T18223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.695101][T18223] team0: Port device team_slave_0 added [ 535.709946][T18403] netlink: 'syz.0.3282': attribute type 1 has an invalid length. [ 535.724180][T18403] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3282'. [ 535.804882][T18223] team0: Port device team_slave_1 added [ 536.012759][T18223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.030298][T18223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.124196][T18223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.154653][T18223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.163827][T18223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.194960][T18223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.232637][T18408] tipc: Started in network mode [ 536.261047][T18408] tipc: Node identity d60268315cd7, cluster identity 4711 [ 536.272528][T18408] tipc: Enabled bearer , priority 0 [ 536.279717][T18413] syzkaller0: entered promiscuous mode [ 536.285999][T18413] syzkaller0: entered allmulticast mode [ 536.440151][T18410] syzkaller0: entered promiscuous mode [ 536.458308][T18410] syzkaller0: entered allmulticast mode [ 536.620659][T18407] tipc: Resetting bearer [ 536.717483][T18407] tipc: Disabling bearer [ 536.768164][T18223] hsr_slave_0: entered promiscuous mode [ 536.776123][T18223] hsr_slave_1: entered promiscuous mode [ 536.784079][T18223] debugfs: 'hsr0' already exists in 'hsr' [ 536.789918][T18223] Cannot create hsr debugfs directory [ 537.149569][T18450] IPv6: addrconf: prefix option has invalid lifetime [ 537.409392][T18459] netlink: 'syz.1.3295': attribute type 61 has an invalid length. [ 537.787611][T18476] netlink: 'syz.2.3298': attribute type 12 has an invalid length. [ 538.026876][T18223] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.153742][T18459] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 538.256323][T18495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3303'. [ 538.265963][T18492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3302'. [ 538.403010][T18499] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20004 [ 538.504672][T18501] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3305'. [ 538.585600][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3306'. [ 538.623499][T18223] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.884479][T18513] netlink: 'syz.0.3309': attribute type 1 has an invalid length. [ 538.926850][T18223] team0: Port device netdevsim1 removed [ 538.946058][T18223] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.146838][T18223] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.213125][T18525] Cannot find set identified by id 0 to match [ 539.491215][ T5638] Bluetooth: hci0: command 0x080f tx timeout [ 539.863394][T18554] __nla_validate_parse: 2 callbacks suppressed [ 539.863417][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3320'. [ 539.896328][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3319'. [ 539.992981][T18223] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 540.028309][T18223] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 540.060326][T18223] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 540.176412][T18223] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 540.186129][T18223] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 540.212531][T18223] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 540.248260][T18223] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 540.297492][T18223] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 540.329361][T18559] syzkaller0: entered promiscuous mode [ 540.360765][T18559] syzkaller0: entered allmulticast mode [ 540.898907][T18589] syzkaller0: entered promiscuous mode [ 540.941332][T18589] syzkaller0: entered allmulticast mode [ 541.080689][T18223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.237687][T18597] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3332'. [ 541.248750][T18223] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.290491][T18599] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3332'. [ 541.303182][T18598] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3332'. [ 541.352748][T18599] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3332'. [ 541.396352][T18598] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3332'. [ 541.409994][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.417503][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.479982][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.487246][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.715828][T18620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3338'. [ 541.775960][T18620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.802952][T18620] sctp: [Deprecated]: syz.0.3338 (pid 18620) Use of int in maxseg socket option. [ 541.802952][T18620] Use struct sctp_assoc_value instead [ 542.003963][T18628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.182966][T18633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3343'. [ 542.578359][T18651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3346'. [ 543.085940][T18665] team0: Port device team_slave_0 removed [ 543.350932][T18223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.911998][T18692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.587835][T18223] veth0_vlan: entered promiscuous mode [ 544.639543][T18223] veth1_vlan: entered promiscuous mode [ 544.776992][T18223] veth0_macvtap: entered promiscuous mode [ 544.818489][T18223] veth1_macvtap: entered promiscuous mode [ 544.929466][T18223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.982772][T18223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.023370][ T150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.068364][ T150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.131126][ T150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.149193][ T150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.625911][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.677189][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.833818][T18734] __nla_validate_parse: 3 callbacks suppressed [ 545.833845][T18734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3366'. [ 545.901134][T15494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.944327][T15494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.193438][T18735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3366'. [ 546.276833][T18735] nbd: device at index 64 is going down [ 546.610136][T18752] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3368'. [ 546.646348][T18718] sctp: [Deprecated]: syz.2.3363 (pid 18718) Use of int in max_burst socket option deprecated. [ 546.646348][T18718] Use struct sctp_assoc_value instead [ 546.801635][T18749] netlink: 'syz.4.3234': attribute type 1 has an invalid length. [ 546.924044][T18759] netlink: 'syz.0.3369': attribute type 27 has an invalid length. [ 546.994567][T18759] netlink: 'syz.0.3369': attribute type 4 has an invalid length. [ 547.028567][T18759] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3369'. [ 547.045668][T18347] udevd[18347]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 547.137342][T18760] udevd[18760]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 547.156087][T18745] syzkaller0: entered promiscuous mode [ 547.195408][T18745] syzkaller0: entered allmulticast mode [ 547.390474][T18765] openvswitch: netlink: Message has 24 unknown bytes. [ 547.572957][ T5652] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 547.596300][ T5652] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 547.607454][ T5652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 547.623918][ T5652] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 547.639559][ T5652] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 549.756135][ T5638] Bluetooth: hci3: command tx timeout [ 551.435109][T18782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 551.442457][T18782] IPv6: NLM_F_CREATE should be set when creating new route [ 551.725486][ T1103] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.738902][ T1103] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 551.824937][ T5638] Bluetooth: hci3: command tx timeout [ 551.909737][T18807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.924263][T18806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.095475][T18808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3381'. [ 552.273151][ T1103] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.287130][ T1103] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 552.530192][ T1103] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.577368][ T1103] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 552.709647][T18832] pimreg: left allmulticast mode [ 552.883184][ T1103] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 552.897915][ T1103] netdevsim netdevsim3  (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 553.714822][T18875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3399'. [ 553.801213][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3399'. [ 553.810416][T18878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3399'. [ 553.843487][T18878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3399'. [ 553.864261][T18879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3400'. [ 553.895111][ T5638] Bluetooth: hci3: command tx timeout [ 553.917758][T18881] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 554.029520][T18875] 8021q: adding VLAN 0 to HW filter on device bond2 [ 554.079393][T18869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3399'. [ 554.118942][T18873] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3400'. [ 554.248697][T18767] lo speed is unknown, defaulting to 1000 [ 554.276038][T18886] netlink: 'syz.1.3402': attribute type 1 has an invalid length. [ 554.337554][T18886] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3402'. [ 554.453032][ T1103] bond11: left allmulticast mode [ 554.462132][ T1103] bond11: left promiscuous mode [ 554.470514][ T1103] bridge0: port 1(bond11) entered disabled state [ 554.524437][ T1103] bond1: left promiscuous mode [ 554.546979][ T1103] bond1: left allmulticast mode [ 554.561945][ T1103] bridge0: port 3(bond1) entered disabled state [ 555.028843][ T1103] bond7 (unregistering): (slave ip6gre1): Releasing backup interface [ 555.111725][ T1103] bond10 (unregistering): (slave ip6gretap1): Releasing active interface [ 555.343253][ T1103] bond4 (unregistering): (slave gretap1): Releasing active interface [ 555.488525][ T1103] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 555.536044][ T1103] bond1 (unregistering): Released all slaves [ 555.575576][ T1103] bond2 (unregistering): Released all slaves [ 555.595954][ T1103] bond3 (unregistering): Released all slaves [ 555.615210][ T1103] bond4 (unregistering): Released all slaves [ 555.638418][ T1103] bond5 (unregistering): Released all slaves [ 555.658497][ T1103] bond6 (unregistering): Released all slaves [ 555.679361][ T1103] bond7 (unregistering): Released all slaves [ 555.698729][ T1103] bond8 (unregistering): Released all slaves [ 555.717640][ T1103] bond9 (unregistering): Released all slaves [ 555.740459][ T1103] bond10 (unregistering): Released all slaves [ 555.760517][ T1103] bond11 (unregistering): Released all slaves [ 555.780107][ T1103] bond0 (unregistering): Released all slaves [ 555.854977][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 555.971615][ T5638] Bluetooth: hci3: command tx timeout [ 556.169435][T18928] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 556.214997][T18928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.348008][ T1103] tipc: Disabling bearer [ 556.414023][ T1103] tipc: Left network mode [ 556.761455][T18940] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 557.026139][T18947] syzkaller0: entered promiscuous mode [ 557.051331][T18947] syzkaller0: entered allmulticast mode [ 557.228778][T18968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3416'. [ 557.316686][ T1103] IPVS: stopping backup sync thread 16399 ... [ 557.653887][T18988] netlink: 'syz.1.3419': attribute type 23 has an invalid length. [ 558.096582][T19002] netlink: 'syz.0.3421': attribute type 21 has an invalid length. [ 558.486617][T18985] syzkaller0: entered promiscuous mode [ 558.496387][T18985] syzkaller0: entered allmulticast mode [ 558.538330][T19002] netlink: 'syz.0.3421': attribute type 6 has an invalid length. [ 558.567217][T19002] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3421'. [ 558.608699][T19015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3422'. [ 558.687515][T19008] vlan2: entered promiscuous mode [ 558.731157][T19008] hsr0: entered promiscuous mode [ 558.745674][T19008] vlan2: entered allmulticast mode [ 558.760144][T19008] hsr0: entered allmulticast mode [ 558.809536][T19008] hsr_slave_0: entered allmulticast mode [ 558.822864][T19008] hsr_slave_1: entered allmulticast mode [ 562.657271][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 562.782025][T19028] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3425'. [ 562.846828][T19031] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3425'. [ 562.878755][T19032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3426'. [ 562.948606][T19032] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3426'. [ 563.206664][T19032] lo: entered promiscuous mode [ 563.243134][T19032] tunl0: entered promiscuous mode [ 563.283182][T19032] gre0: entered promiscuous mode [ 563.311127][T19032] gretap0: entered promiscuous mode [ 563.313274][T19043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3430'. [ 563.359252][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3430'. [ 563.376240][T19032] erspan0: entered promiscuous mode [ 563.390674][T19032] ip_vti0: entered promiscuous mode [ 563.972451][T19062] macvtap1: entered allmulticast mode [ 564.401364][T18767] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.424578][T18767] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.449873][T18767] bridge_slave_0: entered allmulticast mode [ 564.486350][T18767] bridge_slave_0: entered promiscuous mode [ 564.532180][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3439'. [ 564.629014][T19086] tipc: Started in network mode [ 564.655787][T19086] tipc: Node identity d69f892fe057, cluster identity 4711 [ 564.677641][T19086] tipc: Enabled bearer , priority 0 [ 564.699566][T19093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3442'. [ 564.710696][T18767] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.733780][T18767] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.749130][T19093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3442'. [ 564.759763][T18767] bridge_slave_1: entered allmulticast mode [ 564.796749][T18767] bridge_slave_1: entered promiscuous mode [ 564.901676][T19098] netlink: 'syz.1.3443': attribute type 1 has an invalid length. [ 565.219359][T19090] syzkaller0: entered promiscuous mode [ 565.241819][T19090] syzkaller0: entered allmulticast mode [ 565.248828][T19090] tipc: Resetting bearer [ 565.311589][T19098] bond3: entered promiscuous mode [ 565.317371][T19098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 565.349608][T19101] bond3: (slave bridge4): making interface the new active one [ 565.358182][T19101] bridge4: entered promiscuous mode [ 565.366346][T19101] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 565.437830][T18767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.472187][T19078] tipc: Resetting bearer [ 565.588514][T19117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3446'. [ 569.483556][T19078] tipc: Disabling bearer [ 569.496427][T19108] syzkaller0: entered promiscuous mode [ 569.502243][T19108] syzkaller0: entered allmulticast mode [ 569.510190][T19112] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 569.546243][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 569.586056][T18767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.648437][T19117] geneve1: entered promiscuous mode [ 569.670594][T19117] geneve1: entered allmulticast mode [ 570.012581][T17075] tipc: Node number set to 919111983 [ 570.188393][ T1103] hsr_slave_0: left promiscuous mode [ 570.202395][ T1103] hsr_slave_1: left promiscuous mode [ 570.486394][T19146] netlink: 'syz.4.3454': attribute type 1 has an invalid length. [ 570.505230][T19146] __nla_validate_parse: 1 callbacks suppressed [ 570.505256][T19146] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3454'. [ 570.589024][ T1130] smc: removing ib device syz0 [ 571.025094][T18767] team0: Port device team_slave_0 added [ 571.126616][T19138] bond0: entered promiscuous mode [ 571.133459][T19138] bond_slave_0: entered promiscuous mode [ 571.139457][T19138] bond_slave_1: entered promiscuous mode [ 571.176226][T19138] batadv0: entered promiscuous mode [ 571.196801][T19138] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 571.209864][T19138] bond0: left promiscuous mode [ 571.219137][T19138] bond_slave_0: left promiscuous mode [ 571.229554][T19138] bond_slave_1: left promiscuous mode [ 571.238568][T19138] batadv0: left promiscuous mode [ 571.276310][ T809] ================================================================== [ 571.284451][ T809] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250 [ 571.293480][ T809] Read of size 1 at addr ffff888031aece09 by task kworker/1:2/809 [ 571.301368][ T809] [ 571.303749][ T809] CPU: 1 UID: 0 PID: 809 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 571.303776][ T809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 571.303793][ T809] Workqueue: events smc_ib_port_event_work [ 571.303937][ T809] Call Trace: [ 571.303951][ T809] [ 571.303960][ T809] dump_stack_lvl+0xe8/0x150 [ 571.304037][ T809] print_address_description+0x55/0x1e0 [ 571.304080][ T809] ? __ethtool_get_link_ksettings+0x230/0x250 [ 571.304117][ T809] print_report+0x58/0x70 [ 571.304144][ T809] kasan_report+0x117/0x150 [ 571.304244][ T809] ? __ethtool_get_link_ksettings+0x230/0x250 [ 571.304274][ T809] __ethtool_get_link_ksettings+0x230/0x250 [ 571.304301][ T809] __ethtool_get_link_ksettings+0x11f/0x250 [ 571.304328][ T809] ib_get_eth_speed+0x180/0x7f0 [ 571.304434][ T809] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 571.304472][ T809] ? do_raw_spin_unlock+0xf5/0x210 [ 571.304526][ T809] ? rxe_query_port+0x6b/0x3d0 [ 571.304627][ T809] rxe_query_port+0x93/0x3d0 [ 571.304660][ T809] ib_query_port+0x16e/0x830 [ 571.304721][ T809] smc_ib_port_event_work+0x147/0x920 [ 571.304750][ T809] ? rcu_is_watching+0x15/0xb0 [ 571.304791][ T809] ? process_scheduled_works+0xa20/0x14e0 [ 571.304825][ T809] process_scheduled_works+0xa8e/0x14e0 [ 571.304866][ T809] ? __pfx_process_scheduled_works+0x10/0x10 [ 571.304894][ T809] ? assign_work+0x3cf/0x5d0 [ 571.304919][ T809] worker_thread+0xa47/0xfb0 [ 571.304959][ T809] kthread+0x388/0x470 [ 571.304986][ T809] ? __pfx_worker_thread+0x10/0x10 [ 571.305008][ T809] ? __pfx_kthread+0x10/0x10 [ 571.305035][ T809] ret_from_fork+0x514/0xb70 [ 571.305082][ T809] ? __pfx_ret_from_fork+0x10/0x10 [ 571.305112][ T809] ? __switch_to+0xc89/0x1420 [ 571.305138][ T809] ? __pfx_kthread+0x10/0x10 [ 571.305165][ T809] ret_from_fork_asm+0x1a/0x30 [ 571.305195][ T809] [ 571.305202][ T809] [ 571.490273][ T809] Allocated by task 5636: [ 571.494797][ T809] kasan_save_track+0x3e/0x80 [ 571.499513][ T809] __kasan_kmalloc+0x93/0xb0 [ 571.504135][ T809] __kvmalloc_node_noprof+0x53f/0x860 [ 571.509567][ T809] alloc_netdev_mqs+0xa9/0x12b0 [ 571.514523][ T809] rtnl_create_link+0x321/0xd70 [ 571.519462][ T809] rtnl_newlink_create+0x25f/0xb00 [ 571.524643][ T809] rtnl_newlink+0x167f/0x1bd0 [ 571.529779][ T809] rtnetlink_rcv_msg+0x802/0xc00 [ 571.534757][ T809] netlink_rcv_skb+0x226/0x4a0 [ 571.539652][ T809] netlink_unicast+0x7bb/0x940 [ 571.544446][ T809] netlink_sendmsg+0x813/0xb40 [ 571.549238][ T809] sock_sendmsg_nosec+0x13a/0x180 [ 571.554432][ T809] __sys_sendto+0x408/0x5a0 [ 571.559028][ T809] __x64_sys_sendto+0xde/0x100 [ 571.563816][ T809] do_syscall_64+0x174/0x580 [ 571.568528][ T809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.574556][ T809] [ 571.576991][ T809] Freed by task 1103: [ 571.580991][ T809] kasan_save_track+0x3e/0x80 [ 571.585708][ T809] kasan_save_free_info+0x40/0x50 [ 571.590755][ T809] __kasan_slab_free+0x5c/0x80 [ 571.595548][ T809] kfree+0x1c5/0x640 [ 571.599556][ T809] device_release+0xc4/0x1f0 [ 571.604271][ T809] kobject_put+0x222/0x550 [ 571.608760][ T809] netdev_run_todo+0xf56/0x10d0 [ 571.613638][ T809] default_device_exit_batch+0x966/0x9e0 [ 571.619299][ T809] ops_undo_list+0x4b4/0x8d0 [ 571.623967][ T809] cleanup_net+0x572/0x810 [ 571.628458][ T809] process_scheduled_works+0xa8e/0x14e0 [ 571.634042][ T809] worker_thread+0xa47/0xfb0 [ 571.638679][ T809] kthread+0x388/0x470 [ 571.642879][ T809] ret_from_fork+0x514/0xb70 [ 571.647598][ T809] ret_from_fork_asm+0x1a/0x30 [ 571.652484][ T809] [ 571.654830][ T809] The buggy address belongs to the object at ffff888031aec000 [ 571.654830][ T809] which belongs to the cache kmalloc-cg-4k of size 4096 [ 571.669255][ T809] The buggy address is located 3593 bytes inside of [ 571.669255][ T809] freed 4096-byte region [ffff888031aec000, ffff888031aed000) [ 571.683297][ T809] [ 571.685829][ T809] The buggy address belongs to the physical page: [ 571.692363][ T809] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31ae8 [ 571.701275][ T809] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 571.709818][ T809] memcg:ffff88803618a681 [ 571.714078][ T809] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 571.721638][ T809] page_type: f5(slab) [ 571.725817][ T809] raw: 00fff00000000040 ffff88801b01b500 dead000000000100 dead000000000122 [ 571.734513][ T809] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff88803618a681 [ 571.743138][ T809] head: 00fff00000000040 ffff88801b01b500 dead000000000100 dead000000000122 [ 571.752021][ T809] head: 0000000000000000 0000000800040004 00000000f5000000 ffff88803618a681 [ 571.760817][ T809] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 571.769532][ T809] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 571.778311][ T809] page dumped because: kasan: bad access detected [ 571.784854][ T809] page_owner tracks the page as allocated [ 571.790588][ T809] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5636, tgid 5636 (syz-executor), ts 100114281762, free_ts 72709617027 [ 571.813897][ T809] post_alloc_hook+0x1f9/0x250 [ 571.818760][ T809] get_page_from_freelist+0x21fa/0x2270 [ 571.824424][ T809] __alloc_frozen_pages_noprof+0x18d/0x380 [ 571.830276][ T809] allocate_slab+0x79/0x5e0 [ 571.835049][ T809] refill_objects+0x2d5/0x350 [ 571.839762][ T809] __pcs_replace_empty_main+0x2bf/0x6b0 [ 571.845438][ T809] __kvmalloc_node_noprof+0x66b/0x860 [ 571.850858][ T809] alloc_netdev_mqs+0xa9/0x12b0 [ 571.855733][ T809] rtnl_create_link+0x321/0xd70 [ 571.860610][ T809] rtnl_newlink_create+0x25f/0xb00 [ 571.865753][ T809] rtnl_newlink+0x167f/0x1bd0 [ 571.870637][ T809] rtnetlink_rcv_msg+0x802/0xc00 [ 571.875617][ T809] netlink_rcv_skb+0x226/0x4a0 [ 571.880434][ T809] netlink_unicast+0x7bb/0x940 [ 571.885228][ T809] netlink_sendmsg+0x813/0xb40 [ 571.890070][ T809] sock_sendmsg_nosec+0x13a/0x180 [ 571.895129][ T809] page last free pid 5495 tgid 5495 stack trace: [ 571.901477][ T809] __free_frozen_pages+0xc1e/0xd10 [ 571.906619][ T809] __slab_free+0x274/0x2c0 [ 571.911061][ T809] qlist_free_all+0x99/0x100 [ 571.915673][ T809] kasan_quarantine_reduce+0x148/0x160 [ 571.921275][ T809] __kasan_slab_alloc+0x22/0x80 [ 571.926763][ T809] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 571.932245][ T809] vm_area_alloc+0x24/0x140 [ 571.936777][ T809] mmap_region+0x1221/0x2310 [ 571.941396][ T809] do_mmap+0xc3b/0x10c0 [ 571.945598][ T809] vm_mmap_pgoff+0x272/0x4e0 [ 571.950776][ T809] ksys_mmap_pgoff+0x4dc/0x760 [ 571.955649][ T809] do_syscall_64+0x174/0x580 [ 571.960355][ T809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.966271][ T809] [ 571.968608][ T809] Memory state around the buggy address: [ 571.974254][ T809] ffff888031aecd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 571.982341][ T809] ffff888031aecd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 571.990468][ T809] >ffff888031aece00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 571.998818][ T809] ^ [ 572.003175][ T809] ffff888031aece80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 572.011531][ T809] ffff888031aecf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 572.019616][ T809] ================================================================== [ 572.111693][ T809] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 572.119021][ T809] CPU: 1 UID: 0 PID: 809 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 572.128368][ T809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 572.138468][ T809] Workqueue: events smc_ib_port_event_work [ 572.144337][ T809] Call Trace: [ 572.147734][ T809] [ 572.150685][ T809] vpanic+0x56c/0xa60 [ 572.154703][ T809] ? __pfx_vpanic+0x10/0x10 [ 572.159249][ T809] panic+0xc5/0xd0 [ 572.163012][ T809] ? __pfx_panic+0x10/0x10 [ 572.167559][ T809] ? preempt_schedule_thunk+0x16/0x40 [ 572.172971][ T809] ? __ethtool_get_link_ksettings+0x230/0x250 [ 572.179129][ T809] ? preempt_schedule_thunk+0x16/0x40 [ 572.184534][ T809] ? __ethtool_get_link_ksettings+0x230/0x250 [ 572.190737][ T809] check_panic_on_warn+0x89/0xb0 [ 572.195784][ T809] ? __ethtool_get_link_ksettings+0x230/0x250 [ 572.201977][ T809] end_report+0x73/0x170 [ 572.206283][ T809] ? __ethtool_get_link_ksettings+0x230/0x250 [ 572.212461][ T809] kasan_report+0x128/0x150 [ 572.217083][ T809] ? __ethtool_get_link_ksettings+0x230/0x250 [ 572.223179][ T809] __ethtool_get_link_ksettings+0x230/0x250 [ 572.229307][ T809] __ethtool_get_link_ksettings+0x11f/0x250 [ 572.235229][ T809] ib_get_eth_speed+0x180/0x7f0 [ 572.240137][ T809] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 572.245541][ T809] ? do_raw_spin_unlock+0xf5/0x210 [ 572.250673][ T809] ? rxe_query_port+0x6b/0x3d0 [ 572.255476][ T809] rxe_query_port+0x93/0x3d0 [ 572.260144][ T809] ib_query_port+0x16e/0x830 [ 572.264950][ T809] smc_ib_port_event_work+0x147/0x920 [ 572.270359][ T809] ? rcu_is_watching+0x15/0xb0 [ 572.275156][ T809] ? process_scheduled_works+0xa20/0x14e0 [ 572.280925][ T809] process_scheduled_works+0xa8e/0x14e0 [ 572.286516][ T809] ? __pfx_process_scheduled_works+0x10/0x10 [ 572.292608][ T809] ? assign_work+0x3cf/0x5d0 [ 572.297232][ T809] worker_thread+0xa47/0xfb0 [ 572.301863][ T809] kthread+0x388/0x470 [ 572.305974][ T809] ? __pfx_worker_thread+0x10/0x10 [ 572.311107][ T809] ? __pfx_kthread+0x10/0x10 [ 572.315728][ T809] ret_from_fork+0x514/0xb70 [ 572.320359][ T809] ? __pfx_ret_from_fork+0x10/0x10 [ 572.325497][ T809] ? __switch_to+0xc89/0x1420 [ 572.330229][ T809] ? __pfx_kthread+0x10/0x10 [ 572.334891][ T809] ret_from_fork_asm+0x1a/0x30 [ 572.339692][ T809] [ 572.343334][ T809] Kernel Offset: disabled [ 572.347754][ T809] Rebooting in 86400 seconds..