last executing test programs: 2m20.689550358s ago: executing program 0 (id=404): r0 = socket(0x25, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = accept$netrom(r0, &(0x7f0000000140)={{0x3, @null}, [@bcast, @default, @null, @remote, @bcast, @null, @netrom, @bcast]}, &(0x7f00000000c0)=0x48) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f00000001c0)=0x7fffffff, 0x4) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000200)="8de9698a72f2db4ace303952a6b36d99ec3fb1cc40ac0a1cb5db2dfe5bc8c2fcfb007419aec7580a218abd2be1af8d196c24dda8ad434de08defeac820f8915bcd7cf6e8a9724ab57aafea0a8903730f42d3375a348d47d305bdccbc852c26", 0x5f}], 0x1) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 2m20.437737359s ago: executing program 0 (id=410): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r5, 0x8b20, &(0x7f0000000080)) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0) 2m20.1761296s ago: executing program 0 (id=412): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @echo={0x8, 0x0, 0x0, 0x9, 0x9}}}}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000030a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32"], 0xc4}}, 0x0) (async) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000080)=""/56, &(0x7f00000000c0)=0x38) 2m19.964004812s ago: executing program 0 (id=415): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x80, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x4c, 0x1a, 0x0, 0x1, [@AF_INET={0x48, 0x2, 0x0, 0x1, {0x44, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0x35d}, {0x8, 0xb, 0x0, 0x0, 0x74}, {0x8, 0x20, 0x0, 0x0, 0xf41c}, {0xfffffffffffffd43, 0x1d}, {0x8, 0x5, 0x0, 0x0, 0x11afd9d5}, {0x8, 0x16, 0x0, 0x0, 0x9}, {0x8, 0x15, 0x0, 0x0, 0x50}, {0x8, 0x819, 0x0, 0x0, 0x2}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000) socket$inet(0x2, 0x2, 0x1) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x80, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x4c, 0x1a, 0x0, 0x1, [@AF_INET={0x48, 0x2, 0x0, 0x1, {0x44, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0x35d}, {0x8, 0xb, 0x0, 0x0, 0x74}, {0x8, 0x20, 0x0, 0x0, 0xf41c}, {0xfffffffffffffd43, 0x1d}, {0x8, 0x5, 0x0, 0x0, 0x11afd9d5}, {0x8, 0x16, 0x0, 0x0, 0x9}, {0x8, 0x15, 0x0, 0x0, 0x50}, {0x8, 0x819, 0x0, 0x0, 0x2}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x80}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000) (async) 2m19.709492304s ago: executing program 0 (id=418): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x5, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$sock(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="7c3d704a7f78d1d85425a6ca0c363c8c33783d890fe514495b04ec4b80cf7421d529825b9e20e7fa9c6a6da11013e5549629046c9bcd854a557d0017e4eb25", 0x3f}, {&(0x7f0000000740)="97", 0x1}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m18.938507735s ago: executing program 0 (id=425): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r3 = socket(0x1d, 0x2, 0x6) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)={0x224, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa0d8}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r8}, {0xcc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x1}, 0x1) bind$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x2, 0x3, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x4}, 0xfe}, {0x2, 0x10000000000003, {0x0, 0xff, 0x4}, {0x2}, 0xfe, 0xff}], 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010000104000000000000000000007400", @ANYRES32=r10, @ANYBLOB="00000000000000002c0012800b00010067726574617000001c000280060011000000000008000400a8680000060010"], 0x54}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) socket(0x1d, 0x2, 0x6) (async) syz_genetlink_get_family_id$team(&(0x7f0000000100), r3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x11, 0x80a, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)={0x224, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa0d8}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r8}, {0xcc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async) bind$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x2, 0x3, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x4}, 0xfe}, {0x2, 0x10000000000003, {0x0, 0xff, 0x4}, {0x2}, 0xfe, 0xff}], 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010000104000000000000000000007400", @ANYRES32=r10, @ANYBLOB="00000000000000002c0012800b00010067726574617000001c000280060011000000000008000400a8680000060010"], 0x54}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 2m3.869547059s ago: executing program 32 (id=425): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r3 = socket(0x1d, 0x2, 0x6) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)={0x224, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa0d8}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r8}, {0xcc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x1}, 0x1) bind$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x2, 0x3, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x4}, 0xfe}, {0x2, 0x10000000000003, {0x0, 0xff, 0x4}, {0x2}, 0xfe, 0xff}], 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010000104000000000000000000007400", @ANYRES32=r10, @ANYBLOB="00000000000000002c0012800b00010067726574617000001c000280060011000000000008000400a8680000060010"], 0x54}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) socket(0x1d, 0x2, 0x6) (async) syz_genetlink_get_family_id$team(&(0x7f0000000100), r3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x11, 0x80a, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)={0x224, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa0d8}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r8}, {0xcc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async) bind$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000006c0)=[{0x2, 0x3, {0x1, 0x1, 0x3}, {0x1, 0x0, 0x4}, 0xfe}, {0x2, 0x10000000000003, {0x0, 0xff, 0x4}, {0x2}, 0xfe, 0xff}], 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010000104000000000000000000007400", @ANYRES32=r10, @ANYBLOB="00000000000000002c0012800b00010067726574617000001c000280060011000000000008000400a8680000060010"], 0x54}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 2.870639388s ago: executing program 4 (id=1817): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x9, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000038000000bca3000000000000550305002dfeffff630af0ff0000000071a400fe000000001f030000000000002e0a0200000000002604fdffffff000061140800000000001d430200000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a0acf30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478b41d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d859f49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f00960298f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2ccb0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab53080d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f982c91ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f098b6367917888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee1ee17da1900004c1011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f01ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864eeb6511004c1d44d90da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acccbc48d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf799b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d29000000003e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa63264648225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4db8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc351bc8a7c040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9dce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac987fd637c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fd52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac42218301009bbf61e4bba695a41e2109eba8e40c3702bd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812fc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795d35f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242ec06f7170009d92bb7eddd12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843ff3fd404f535be474f456778b5ef85afb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca78fa04d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f00000000000000003f1c0483706db2cb51a9439c2bf24fce70bb9ef9c150397aa1458d9045e9a066c4c07dcb5d3fd47532e6400d78e799e33dda64665388d543741c7440ebdd551ee967b6e2d14a1cc096f18779bc4e34f7de607ec7cbb28efa359d13683d5ef3adc614110f4d8610ebbb5e2d404be76418a0008f12850c49024211b4ea30dc07a52d95989123702f3caab2060f0dbd693ebcf0d5d32b4b76c473d668d63643a162bb4705764fd5656b033c4e49c28c9df7e20bb73ee59205520ad1e2ad93e22231f8251bba43534818baf226082d7d94e9544fe721af383b271d36a43e429ac976ce49ca182f6fcf5f5d1bc6388247669bb217af8c314cf5df36729c23cbcbab2fc7a2fdff67bf87c2651d0c1d87409d1dbef5457ba659111a23ebf03f9b876a03c00ee6b3e29f85321e9b47702f12e3eba8395cbbf7e5e67acc4d20a78ba87899884be807834578d1f2818140ba9facdb716cc8e744c17e5e66ca54b9a243067f85bf63ab86a7bd3bdc7bfd27a5be263205a1f8e2c650e88495fa4b3b6f7176c21c8dc81c9843479f4b14b9a13d8c0fc238e7500a399195373514c3b82efafcc261cfa53944f187ba7ea751a3437c3d4116399d5b65ddf8a641441086bbd30307adc59be211373873ef0fdb10d2c585e07dfd366f256f4b14f7db958cefc154f46bba0893f51acf2f8dd8a19055ffe12661932ac9a648e50683df90d17809e0bd5ec0e0c43f73e85cdc4912ad91b0753bd4561d79906588f9f5d09f56464cc2f56684d287b262b57c23ec78d2eaf96fb17c64f11ead4430c265c28ec02dca4ba38ecfecd4561855adeb2412430abcfa1e0391d0653567bf10827ccc1961743e096dcf2cc2e380b106491ae16d2a1a668de060f838408fbb60bbf017ad4d8dbd7a762c3c0705839f15a3c9f77ebe36bebbd27d98b519f36b12f5153905ed31453958c8c46cb8f974197eb01c819439fd43f43a15920fc1977f2f2a4bdd5d079283e1d6308251a5ae0461e2bd8190284f93f60244101ef8b6541a717a832ddf8aeed5455ed90bdeb9b03dae5481f6cbbf176321fff5e1aeb29840466177af699e84e49d3f9254e557e31a19bbfe55b62e20439710a75bcfa5c8c5f69f5b6cadddfc811fb73b78477688935b00f2f4971ba8c4c7c930e24d9f2fbcc9dc0bd2bf64294e47f02f69b0a84bdd4c0fedac522c7274d74bf367ca6c5441e177fbfc95a56d9490731b1aa1af08aeebb5a9e56d1b50bad5fc3f3ba8eb3095adba4ac1f236580000000000000000000000000000000000000000002e7ec9df3c71f02bb6d639855e3584aafd546739b880ffac40b1292971abc7faa153f90ec46f8c707fdb5b603ce64c155d76aeb8115f54ac9cb6eca976f8026a8bc56392b233a5a661d2e7ee1bbb330cef4da2ec20a4bc1249e45a3c69742ec706a8924bb3ed655137690e951b66fbafe688d98f898fcd545555ed60b3173dc2600f1c6f025dde0629055074e01f79751ba93da933a503a6b928ee43ced85e63996abd88f535bbd6eb7a1f613d2b1bb278341a9a3ed1f0cc81a2b39213ddad2e1e8e94ef639ec16f1d4ba1b89172e8036529d96cb07b409420b8c523103faeadb52341e2adbee1fc90e82924b64e948aea9bf810eb8623263c1dd4d8cc2eef8464f2554a4494a505ef204232f44665eb41c30ad2305056a89255734b3121849af8f6e7348cc9c13c76d285d701c2c078a7b2a41e0c7b2aded6377380e1454c00000000000000000000009355e100fd97c3214075e1ccb353b3e87c"], &(0x7f00000001c0)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x24, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x234e}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x24}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x110, 0x110, 0x7, [@var={0x6, 0x0, 0x0, 0xe, 0x4, 0x1}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x5, 0x3}, @union={0xf, 0x8, 0x0, 0x5, 0x0, 0xfffffffb, [{0x2, 0x3, 0xb}, {0x3, 0x3, 0x5}, {0xc, 0x2, 0x3}, {0x0, 0x5, 0x4}, {0x4, 0x0, 0x2f}, {0xc, 0x4, 0x100}, {0x8, 0x1, 0xffff}, {0x6, 0x2, 0x7fffffff}]}, @union={0x5, 0x9, 0x0, 0x5, 0x1, 0x4, [{0x1, 0x2, 0x5}, {0x6, 0x4, 0x1}, {0x3, 0x5, 0xffffffff}, {0x5, 0x5, 0x9}, {0x4, 0x1, 0x3}, {0x9, 0x3, 0x1}, {0x5, 0x4, 0x6}, {0x5, 0x5, 0x7}, {0x6, 0x5, 0x8}]}, @volatile={0xb}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x0, 0x5f]}}, &(0x7f0000000440)=""/209, 0x12f, 0xd1, 0x1, 0x8, 0x10000, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f00000005c0)=""/141, 0x8d, 0x0, &(0x7f0000000680)=""/120, 0x78}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x20, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xde}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}]}, &(0x7f0000000040)='GPL\x00', 0x20a, 0xb6, &(0x7f0000000100)=""/182, 0x40f00, 0x2, '\x00', r4, @fallback=0x17, r5, 0x8, &(0x7f0000000540)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x8, 0x7, 0x8}, 0x10, r6, r0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x2, 0xa, 0x5}, {0x1, 0x3, 0x8, 0x6}], 0x10, 0x10, @void, @value}, 0x94) 2.705273946s ago: executing program 5 (id=1819): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x5, 0x9, 0x5, 0x4320, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x10, 0x20, 0xbc, 0x3, {{0xd, 0x4, 0x3, 0x0, 0x34, 0x66, 0x0, 0xc, 0x4, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp={0x44, 0x20, 0x5d, 0x0, 0x0, [0x10000, 0x9, 0x5, 0x81, 0x9, 0x6, 0x3]}]}}}}}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x2, 0x7, 0x200}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x2, 0x7, 0x2, 0x20001, r0, 0x841, '\x00', r1, r2, 0x1, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'veth1\x00', 0x1000}) (async, rerun: 32) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88c0}, 0x40080) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x5) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000480)={0x3, {{0x2, 0x4e24, @private=0xa010102}}}, 0x88) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xd9}]}, 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x8880) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x6a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1cb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x58}, 0x1, 0x0, 0x0, 0x4840}, 0x20004000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000001900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000018c0)={&(0x7f0000000840)={0x1044, r6, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x33}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x80}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x55}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}]}, 0x1044}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) (async) sendmmsg$inet(r5, &(0x7f0000001e00)=[{{&(0x7f0000001940)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000001980)="b9988abdf4ff0fa0b856aa0808e96fb2eb392071089b28abdbbc1327939a7f390c1d69ba89201a1eac6e7edfd8c2e7a279b3969ab064b316c581defd5e1b164ecf7b6629d06f99056afc0c9bce6046f4e1eb42005bb4de9dd58fc233926aff04f3604299ce40755f6f84b900eca0876d5d3eb18856679781acc200db26c428bbd49475055337b08ffe1eac8d3057bad936", 0x91}, {&(0x7f0000001a40)="4053276d01f087c35ea59b840547ab067a2a9cd217861354bd50650f188581919e40be728f8e29346be57980a1345565cf43de8c3667d002809d4ad35e65f45a08b1a20dfa0faffa704dd79a009eefa213b55c6655f1c6211d7720635918a82d6392f37d010784c1d43f0039621bb9522febe02d2c4956d83318a4f42addb6fbbac583b266fc7482bfccd84100acb7f75bd19680c9eb638efb7487e0d9ca8d6d1851100be2", 0xa5}, {&(0x7f0000001b00)="9049428057dd3711776173f9ea6abee6bafcfce8cdecf6bbe3e64d764338fabeb3af0662c8b3dd409ccc179e427ca51d952567f72e76f93d8ab854e632fdf3257322acef829e314a0c868a6aeb1be79e09e27ebc8f72b2335eb75dd16f696b25f875475232bc38b18b2c331d452011db2e89805f8aa0284e", 0x78}, {&(0x7f0000001b80)="f9572dd5ca302c6496dd29f81a463f64bef19a1177eb0e263d9003440abf70db254e3bd0b127b2e1b260e0bbe0c6df5f6416543768b0b10b5b8adebb160c6058f9c5595e0e6378551e3e7e0d4ef9f405d8318b9f4ac09a5d3bce3ba83bbeb40a96813c590b565b8d5547984cc3183e5e099f403f22a665143c650c80c6c99d2ef0ee636eb43cacff6408b5657245f0752d8d5315279a70cfb4cbc9a2eb2d17cafa46eeef09d4fb8eb68057a9eabaf38706cced4002a72262f19be924e6db", 0xbe}, {&(0x7f0000001c40)="5b56a338b7155e73159831825ea4d70155b1dccbe85ac426a31939e2afc09d4fecc91945b91f314e37f69b82a2f7bdc7cd7b0439853f6a293e74bc936669c908ad0753a4452e8e73c0cd3af68fefe82e7d102dc26ab899c2d48fb14f82dec01080f276373c13cafad1050898417000da44fbc90109e18c18b28986fc34ee4c61559d18950e4b3511a335e43641a933707fd9ae1b5ec8876ea4bf10ac8fb76794675bc00b303a1afe6f24a0787f9d4141fe513ed9a9a12febbb3bf35474bb4b58184f3aaf707eff15da55af937c260384e2b5858c2c5c10587cb1e2c805396e76351215ea679aa932cf841cd2d70d44f7449d", 0xf2}], 0x5, &(0x7f0000001dc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}}], 0x1, 0x8d0) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x1558f1b9517eba2c}, 0xc, &(0x7f0000001f80)={&(0x7f0000001e80)={0x100, r6, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xe2, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0xf, 0xa9, 0x5}}, @tim={0x5, 0xce, {0xec, 0xff, 0x5, "9f416f43af21c1775034bed4eb3a1228670b92816779471f8eabc0b1cb845ebfffa28a9e54a3df47c35f65979dda56ebf375582f78d2ac195677aa02b32e60e85ac2907dcf03668b8a548fcc771cba34d41f61ad50b8ea617bda8af3966cbcf3d41fc9de40c4e804817b4ed68a00dbbd0a12a002d45cd684c4d6786e78c0da86e2a4c5339da91d7dafcd3751e0fa6ba20e46452d42631766e3bbca6f1e1aaa1de56234a44d73214baca3feeda3154b3b4a9c3e0c8fc3c4dde4dea6e6a6c657c70e1d0077a9b484cfd06c89"}}, @mesh_id={0x72, 0x6}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x28, r6, 0x20, 0x469, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x5f}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x28, 0x1406, 0x28, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x448d0}, 0x1) (async) sendmsg$inet(r7, &(0x7f0000002600)={&(0x7f0000002240)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002440)=[{&(0x7f0000002280)="4e2248c6381bf5605ede5c6711d8193f5ec7f7745248d7c542", 0x19}, {&(0x7f00000022c0)="2cab38fb17df251af000a74a433602876fcdcc0e67d72400d233a214568ee7eadf1e84fef50cbfbfd66b9c6cec2599b071f724c45991d26cfb263efee53acf07c2697d58305fdc25cac990", 0x4b}, {&(0x7f0000002340)="ea729b0f125879b6ad08475d7cd677f252659cb9b413b7dc780c0555e0563e4943378cad07b2e3f3466ba3e610f286bce73d2283097dcef2ce6ff9e38849c5f9cb70d99a3a58a1711ad803dd123b680090ff6943465014af4d52524e6ff0ec2c8cdba56bf1ea4984ae12dd20f8a9dbaab1ab29269849c3a6adf8feee35ff8527ebdcff8009d138ff475b4985cbf7dae0ba14ecd8f05d0b3bde76a77c1c091e3aaba89d9f6498bd9c956911e5bef44e02f4a7a25b74584cee8bbb5236277eabe8ecb8133ac83872c093aaeac06d", 0xcd}], 0x3, &(0x7f0000002480)=[@ip_retopts={{0x8c, 0x0, 0x7, {[@end, @lsrr={0x83, 0xb, 0x2c, [@broadcast, @remote]}, @generic={0x94, 0xc, "1d979bbeff8cd8c20862"}, @lsrr={0x83, 0x1b, 0x8c, [@empty, @remote, @loopback, @private=0xa010100, @loopback, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x2c, 0x81, 0x3, 0x0, [{@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x4}, {@empty, 0x8fa}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @lsrr={0x83, 0x17, 0x5a, [@private=0xa010100, @loopback, @multicast2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x34}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x61}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010102, @empty}}}], 0x150}, 0x4048041) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000002640)={'vcan0\x00'}) (async) r9 = syz_genetlink_get_family_id$gtp(&(0x7f00000026c0), r2) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x2c, r9, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6}, @GTPA_FAMILY={0x5, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000884}, 0x40) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002800), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000002a80)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002840)={0x1ec, r10, 0x200, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x50}, {0x6, 0x16, 0x3ff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7fff}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4dc}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6e2f}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x1ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x6170}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x28}, {0x8, 0xb, 0xac}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x400}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x24048891}, 0x40004) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b00), r2) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000002c40)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b40)={0xac, r11, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1f}}}}, [@NL80211_ATTR_SSID={0x16, 0x34, @random="27a11ebe992db6f828ed5f95a4878d7496fa"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_PMKID={0x14, 0x55, "c68b99f099cfdcc6961eeaae4088f153"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "a9f59ea12560d6a0def37e0b6a93bb92"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2c}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x62}, @NL80211_ATTR_PMK={0x14, 0xfe, "a71c3053fc981d0864e1451b63875aa1"}, @NL80211_ATTR_PMK={0x14, 0xfe, "ff41860ebdde46b6ba704329d97a65db"}]}, 0xac}, 0x1, 0x0, 0x0, 0x24008805}, 0x20000000) 2.579348961s ago: executing program 4 (id=1821): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2}, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4002800) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)={0x724, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x53c, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x43}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaf}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x33c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x60}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x2a8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe1e6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x288, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x4, 0x7, 0x5, 0x4, 0x8, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x6, 0x5, 0x54, 0x2, 0x555, 0x58e]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x24, 0x12, 0x2, 0x4a, 0x0, 0x2, 0x3, 0xb, 0x12, 0x36, 0x6c, 0x2, 0x9, 0xc, 0x16, 0x5, 0x48, 0x60, 0x30, 0x257fd68530ac8bce]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x4, 0x1}, {0x1, 0x4}, {0x0, 0x1}, {0x3, 0x2}, {0x4, 0x7}, {0x2, 0x4}, {0x1, 0x9}, {0x0, 0x5}, {0x6, 0x7}, {0x4, 0x5}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x7, 0x1}, {0x1, 0x9}, {0x0, 0x9}, {0x2, 0xa}, {}, {0x0, 0x8}, {0x6}, {0x4, 0x4}, {0x2, 0x4}, {0x2, 0x6}, {0x6, 0x5}, {0x0, 0x7}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x8}, {0x7, 0xa}, {0x3, 0x4}, {0x2, 0x4}, {0x5, 0x2}, {0x0, 0x7}, {0x3, 0x7}, {0x5, 0x9}, {0x2, 0x4}, {0x1, 0x1}, {}, {0x4, 0x5}, {0x1, 0x7}, {}, {0x5, 0x1}, {0x4}, {0x0, 0x8}, {0x2, 0x6}, {0x1, 0x1}, {0x3, 0x4}, {0x3, 0x5}, {0x0, 0x8}, {}, {0x5, 0x7}, {0x5, 0x1}, {0x4, 0x7}, {0x3, 0xa}, {0x2, 0x8}, {0x0, 0x4}, {0x2, 0x5}]}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x140, 0x0, 0x0, 0xd, 0xfeff, 0x2, 0x8, 0x2000]}}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x3, 0x3}, {0x0, 0x1}, {0x1, 0x7}, {0x4, 0x9}, {0x7, 0xa}, {}, {0x0, 0x1}, {0x7, 0xa}, {0x0, 0x8}, {0x1, 0x8}, {0x6, 0x7}, {0x0, 0x4}, {0x1, 0x8}, {0x0, 0x8}, {0x3, 0xa}, {0x1, 0x9}, {0x5}, {0x2, 0xa}, {0x1, 0x1}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x3, 0xa}, {0x7, 0x5}, {0x3, 0x4}, {0x2, 0x4}, {0x6, 0x9}, {0x3, 0x5}, {0x0, 0x3}, {0x2, 0x4}, {0x3, 0x5}, {0x4, 0x8}, {0x0, 0x4}, {0x6, 0x1}, {0x2, 0x3}, {0x7, 0x3}, {0x3, 0x8}, {0x4}, {0x3, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0x7, 0x1}, {0x3, 0x7}, {0x6, 0x2}, {0x6, 0x8}, {0x5, 0x4}, {0x3, 0x8}, {0x3, 0x8}, {0x5, 0x9}, {0x0, 0x9}, {0x3}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x1}, {0x0, 0x6}, {0x3, 0x1}, {0x6, 0x7}, {0x5, 0x8}, {0x7, 0x5}, {0x3, 0xa}, {0x4, 0x8}, {}, {0x2, 0x8}, {0x3, 0x7}, {0x2, 0x7}, {0x7, 0x1}, {0x1, 0x8}, {0x1, 0x8}, {0x4, 0xa}, {0x3, 0x1}, {0x0, 0x3}, {0x5, 0x3}, {0x2, 0x5}, {0x0, 0xa}, {0x4, 0x7}, {0x4, 0x2}, {0x2, 0x5}, {0x5, 0x5}, {0x6, 0x6}, {0x6, 0x8}, {0x3, 0x7}, {0x7, 0xa}, {0x0, 0x1f}, {0x7, 0x2}, {}, {0x7, 0xa}, {0x0, 0x1}, {0x6, 0x8}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x36, 0x1, 0x2, 0x48, 0x3, 0xc, 0x18, 0x6, 0x6c, 0x30, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xfff, 0x2, 0xdbf, 0x80, 0x0, 0x4, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0xd972, 0x101, 0x1, 0x0, 0x6, 0x6, 0x1ff]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8920, 0x80, 0x81, 0x8001, 0x80, 0x0, 0x4, 0x7]}}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xa812, 0x5c2, 0x4, 0x40, 0x4, 0x8001, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0xfff9, 0xfff9, 0x0, 0x58b0, 0x0, 0x10, 0x26]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8001, 0x2, 0x5, 0x1, 0x3, 0xff, 0xfffa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0xc, 0x81, 0x1, 0x5b, 0x8, 0x100, 0x4]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x3, 0x3}, {0x1}, {0x7, 0x1}, {0x0, 0x4}, {0x5, 0x2}, {0x5, 0x1}, {0x1, 0x2}, {0x4, 0x4}, {0x6, 0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x4}, {0x6, 0x7}, {0x4, 0x8}, {0x2, 0x6}, {0x2, 0x5}, {0x1, 0xa}, {0x1, 0x3}, {0x1, 0x5}, {0x0, 0x7}, {0x7, 0xa}, {0x6, 0x5}, {0x6, 0x4}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfcdb, 0x9, 0x4, 0x5, 0x41f, 0x4, 0x8]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x48, 0x0, 0x48, 0x60, 0x1b, 0x16, 0x2, 0x12, 0x1, 0x18, 0x36, 0x30, 0xb, 0x1, 0x9, 0x6, 0x18, 0x30, 0x1e, 0x48, 0x1b, 0x9, 0x5, 0x77, 0x12, 0xb, 0x48, 0x18, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x3e, 0x1, 0x7, 0x8, 0x5, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x80, 0x35, 0x763, 0x4, 0xf, 0xfff8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9b}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x401}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe5}]}, {0x148, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x74}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x118, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x1}, {0x4, 0x1}, {0x3, 0x6}, {0x7, 0x6}, {0x4, 0x7}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x8}, {0x6, 0x9}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x0, 0x9}, {0x7, 0x2}, {0x1, 0x1}, {0x7, 0x1}, {0x6, 0x2}, {0x1}, {0x0, 0x4}, {0x7}, {0x2, 0x3}, {0x6, 0x2}, {0x7, 0x7}, {0x3, 0x8}, {0x7, 0x5}, {0x1, 0x8}, {0x3, 0x6}, {0x3, 0x3}, {0x4, 0x6}, {0x6}, {0x3, 0x8}, {0x4, 0x3}, {0x7, 0x2}, {0x2, 0x7}, {0x5, 0x3}, {0x3}, {0x5, 0x7}, {0x7, 0x9}, {0x3, 0x5}, {0x0, 0x7}, {0x2, 0x3}, {0x6, 0x4}, {0x2, 0xa}, {0x3, 0x5}, {0x5, 0x9}, {0x0, 0x8}, {0x4, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x2}, {0x7, 0x8}, {0x0, 0x1}, {0x1, 0x2}, {0x1, 0x8}, {0x3, 0x9}, {0x3, 0x9}, {0x1, 0xa}, {0x1, 0x3}, {0x6, 0x1}, {0x7, 0x8}, {0x1, 0x4}, {0x4, 0x5}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1}, {0x4, 0x7}, {0x5, 0x7}, {0x0, 0x7}, {0x2, 0x7}, {0x5, 0xa}, {0x2, 0x8}, {0x5, 0x9}, {0x3, 0xa}, {0x0, 0x9}, {0x7, 0x9}, {0x6, 0x5}, {0x1, 0x5}, {0x3, 0x8}, {0x7, 0x1}, {0x5, 0xa}, {0x7, 0xa}, {0x2, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0x2}, {0x4, 0x8}, {0x0, 0xa}, {0x5, 0x5}, {}, {0x3, 0x3}, {0x7, 0x5}, {0x3}, {0x0, 0x5}, {0x6, 0x5}, {0x6, 0x8}, {0x2, 0x1}, {0x6, 0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0xa}, {0x1, 0x3}, {0x6, 0x5}, {0x2, 0xa}, {0x6, 0x8}, {0x3}, {0x4, 0x6}, {0x6, 0x6}, {0x0, 0x2}, {0x4, 0x8}, {0x1}, {0x6, 0x7}, {0x4, 0x7}, {0x4, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x7, 0x4}, {0x2, 0x5}, {0x3, 0x1}, {0x4, 0x2}, {0x6, 0x1}, {0x6, 0x2}, {0x0, 0x4}, {0x0, 0x7}, {}, {0x2, 0x2}, {0x1}, {0x2, 0x3}, {0x6, 0x2}, {0x4, 0xa}, {0x1, 0x7}, {0x4, 0x8}, {0x1, 0x1}, {0x5, 0x3}, {0x7}, {0x0, 0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xde6, 0x7, 0xa18, 0x6, 0x6, 0x9, 0x2, 0x8]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x3}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x4}, {0x2, 0x2}, {0x0, 0x7}, {0x5, 0x5}, {0x5, 0x9}, {0x2, 0x7}, {0x6, 0x4}, {0x5}, {0x4}, {0x7, 0x6}, {0x1, 0x8}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0xa}, {0x7, 0xa}, {0x4, 0x9}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x4}, {0x7, 0x2}, {0x4, 0x8}, {0x3, 0x8}, {0x4, 0x9}, {0x3, 0xa}, {0x4, 0x8}, {0x3, 0xa}, {0x5, 0x7}, {0x3, 0x9}, {0x1}, {0x1, 0x2}, {0x0, 0x4}, {0x4, 0x7}, {0x1, 0xa}, {0x3, 0x5}, {0x2, 0x8}, {0x2, 0x7}, {0x5, 0x7}, {0x4, 0x9}, {0x4, 0x6}, {0x4, 0x3}, {0x5, 0x8}, {0x6}, {0x5}, {}, {0x2, 0x7}, {0x6, 0x7}, {0x6, 0x9}, {0x7, 0x2}, {0x6, 0x5}, {0x5, 0xa}, {0x1, 0x7}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0xa}, {0x6, 0x5}, {0x3, 0x6}, {0x5}, {0x4, 0x7}, {0x3}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x2}, {0x5, 0x5}, {0x0, 0x4}, {0x5, 0xa}, {0x0, 0x7}, {0x7, 0x14}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x17c, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x9, 0x24, 0x24, 0x1b, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8b}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x42}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x86}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x6, 0x9}, {0x6, 0x8}, {0x0, 0xa}, {0x1, 0x5}, {0x0, 0x3}, {0x6, 0x7}, {0x3, 0xa}, {0x5, 0x3}, {0x6, 0x7}, {0x7, 0x2}, {0x7, 0x7}, {0x5, 0x9}, {0x2, 0xa}, {0x6, 0x7}, {0x3, 0x1}, {0x7, 0x2}, {0x0, 0x2}, {0x6, 0x3}, {0x6, 0x3}, {0x6, 0x17}, {0x6, 0x2}, {0x3, 0x7}, {0x4}, {0x1, 0xa}, {0x3, 0x9}, {0x0, 0x8}, {0x0, 0x5}, {0x4, 0x4}, {0x1, 0x8}, {0x0, 0x4}, {0x4, 0xa}, {0x2, 0x3}, {0x6, 0x5}, {0x0, 0x5}, {0x5, 0x6}, {0x5, 0x1}, {0x3, 0x6}, {0x4, 0x8}, {0x4, 0xa}, {0x1, 0x9}, {0x5}, {0x0, 0x5}, {0x4, 0x2}, {0x0, 0x3}, {0x7, 0x9}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x69}]}]}, @NL80211_ATTR_TID_CONFIG={0x48, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x4}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x724}, 0x1, 0x0, 0x0, 0x884}, 0x8) 2.538795876s ago: executing program 5 (id=1823): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r5, @ANYBLOB="04"], 0xc4}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xd7, '\x00', @remote}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0001080000000000000000050003000800000008000500", @ANYRES32=r1], 0x50}}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071108400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x4, {{0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3ff}}}, 0x88) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001a14010000000000000000000800030000000000080003"], 0x20}}, 0x0) getsockopt$rose(r8, 0x104, 0x3, 0x0, &(0x7f0000000080)) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x4c, r7, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x63}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000) 2.216621246s ago: executing program 1 (id=1826): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r0, 0x0, 0x53, 0x0, &(0x7f0000002e40)) r1 = socket$inet(0xa, 0x801, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0xffffffffffffff8a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xdf48, 0x0, 0x5, 0x0, 0xd01d}, 0x0, &(0x7f00000001c0)={0x1ff}, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x84880, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x6, 0xe}, &(0x7f0000000100)=0xc) sendmmsg$inet_sctp(r1, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000200)="9b5701", 0x3}], 0x1, &(0x7f0000000140)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x0, 0x81, 0x7fff}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0xd}], 0x38, 0x8011}], 0x1, 0x0) 2.107119806s ago: executing program 2 (id=1828): r0 = socket$key(0xf, 0x3, 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001880)=ANY=[@ANYBLOB="0203fb021e0000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000400070c0000000005000500000000000a00000000000000000000000000000000000000000000010700e9ff000000000e00080008"], 0xf0}, 0x1, 0x7}, 0x0) 2.041857642s ago: executing program 5 (id=1829): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0xd, {0x2, 0x0, @empty}}, 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000030e7382d000000000006000000000000009500"/37], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000680)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e3031d32944bf20590000a2bc5603ca00000f7f8907000020008d42188fedc22eedc6d100000101ff0000000309", 0x48}], 0x1) socket$netlink(0x10, 0x3, 0x0) unshare(0x6020480) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$sock_int(r5, 0x1, 0x1a, &(0x7f0000000240), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x6, 0x0, 0x0, 0x6}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x50005}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000005b378a002a408b5e323a1b1afb75026516be7c264ab74fbe335335aef3fd5512ead8fed8aca3ea0b9e882efdf1a4940953f1449505bb4aa8328798f04df0f5577b2934e8011393691b5b7f044d458bb59e2fb0c1d26a05670f432af6ab85e4602a55b170c799aec23ffb7d33ea336e72736aa6ed4955af5f11bae7c8ac487ab0cde50ce34b667f", @ANYRES16=r2, @ANYBLOB="1f0400000000000000001d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}}, 0x0) 1.970813356s ago: executing program 2 (id=1830): pipe(&(0x7f0000000700)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x16, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query, @alu={0x4, 0x0, 0x6, 0x6, 0x4, 0x50, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x7, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0xc, 0x6, 0x8b8}, 0x10, 0x1b5fe, 0xffffffffffffffff, 0x2, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x4, 0x5, 0x2, 0x1d}, {0x5, 0x4, 0xe, 0x3}], 0x10, 0x68a, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0xa, &(0x7f0000000340)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x76}, @alu={0x7, 0x0, 0x2, 0x1, 0x2, 0xffffffffffffffe0, 0xffffffffffffffff}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000040)='syzkaller\x00', 0x25, 0xcd, &(0x7f0000000600)=""/205, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYRES64=r7, @ANYRES32=r9], 0x1c}}, 0xc0) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x2c, r4, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) pipe(&(0x7f0000000700)) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x16, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query, @alu={0x4, 0x0, 0x6, 0x6, 0x4, 0x50, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x7, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0xc, 0x6, 0x8b8}, 0x10, 0x1b5fe, 0xffffffffffffffff, 0x2, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000240)=[{0x4, 0x5, 0x2, 0x1d}, {0x5, 0x4, 0xe, 0x3}], 0x10, 0x68a, @void, @value}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0xe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0xa, &(0x7f0000000340)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x76}, @alu={0x7, 0x0, 0x2, 0x1, 0x2, 0xffffffffffffffe0, 0xffffffffffffffff}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000040)='syzkaller\x00', 0x25, 0xcd, &(0x7f0000000600)=""/205, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYRES64=r7, @ANYRES32=r9], 0x1c}}, 0xc0) (async) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x2c, r4, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) (async) 1.805102408s ago: executing program 5 (id=1833): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)=@isdn, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/56, 0x38}, {&(0x7f00000000c0)=""/2, 0x2}], 0x2, &(0x7f0000000200)=""/88, 0x58}, 0xcf14}, {{&(0x7f0000000280)=@tipc=@name, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/135, 0x87}, {&(0x7f0000000400)=""/5, 0x5}], 0x2, &(0x7f0000000480)=""/225, 0xe1}, 0x4812}], 0x2, 0x10001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r3, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async) recvmsg$can_bcm(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x2) (async, rerun: 64) r5 = socket(0x10, 0x80002, 0x0) (rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 1.667904821s ago: executing program 2 (id=1834): sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300ac1414bb08", @ANYRES32=r6], 0x50}}, 0x0) 1.548572245s ago: executing program 2 (id=1835): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000140)={r3, r3, 0xc, 0x0, 0x0, 0xa, 0x80, 0x699a, 0x5505, 0x8b, 0x0, 0x0, 'syz1\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0x331, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0x98}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (rerun: 64) 1.530108793s ago: executing program 5 (id=1836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket(0x11, 0x3, 0x80000001) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x1}, 0x2}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400030400000000000000542d"], 0x44}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x6, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x4, 0x2}, @union={0x2, 0x4, 0x0, 0x5, 0x1, 0x1, [{0x9, 0x4, 0x4}, {0xe, 0x1, 0x6}, {0x9, 0x0, 0x9}, {0xa, 0x3, 0x5c85}]}, @fwd={0xe}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x1}, @struct={0x7, 0x3, 0x0, 0x4, 0x1, 0x2, [{0x1, 0x5, 0x7fff}, {0xf, 0x5, 0x2}, {0x4, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x6}}, @volatile={0xa, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x30, 0x5f, 0x61, 0x61]}}, &(0x7f0000001340)=""/4096, 0xd6, 0x1000, 0x1, 0x7, 0x10000, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6d08586dd61bcc1d700006cff0000000000000000000000000000000100000000000000000000000000000001"], 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000001c0)=0x1) ioctl$PPPIOCSACTIVE(r9, 0x40107446, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x0, "853c1c9341b05be66feefda4e4b7"}}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)=ANY=[@ANYBLOB=' \x00\x00p', @ANYRES16=r3, @ANYBLOB="9f072cbd7000fddbdf25160000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000300)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) 1.236098317s ago: executing program 1 (id=1838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000014000104595e0000008000001e"], 0x18}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r2, 0x5, 0x0, 0x0, {{0x99}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x24}}, 0x400c0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x0, 0xb55, 0x0, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40440c4}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) (async) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000015000100000000000000000305000000080001"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 1.163307933s ago: executing program 3 (id=1839): syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x1100, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0xffffffffffffffa6, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0xfc, [@remote, @private=0xa010100, @private=0xa010101]}]}}, {{0x0, 0x0, r0, r0, 0x0, 0x0, 0x5}}}}}}, 0x0) 1.095883731s ago: executing program 4 (id=1840): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492856, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'pimreg\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=r5, @ANYBLOB="e9330e0036533243"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492856, 0x0) (async) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'pimreg\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x8) (async) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=r5, @ANYBLOB="e9330e0036533243"], 0x20}}, 0x0) (async) 1.047394062s ago: executing program 1 (id=1841): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = gettid() pipe(&(0x7f0000000340)={0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={r5, r6, 0x0, 0x0, 0x0}, 0x30) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r4}, &(0x7f0000000300), &(0x7f0000000400)='%pS \x00'}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0xb0, 0x1403, 0x1, 0x70bd2c, 0x25dfdbf8, "", [{{0x9, 0x2, 'syz2\x00'}, {0x21, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x20040014) r8 = accept4(r0, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x80, 0x800) sendto$packet(r8, &(0x7f0000000280)="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", 0x1000, 0x0, &(0x7f0000000180)={0x11, 0x19, 0x0, 0x1, 0x27, 0x6, @random="d5306d9c300c"}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0xa, 0x0, {0x0, 0x1000000}}]}}, &(0x7f00000006c0)=""/184, 0x32, 0xb8, 0x1, 0x0, 0x0, @void, @value}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x95}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf, 0x120830, r8, 0xa6678000) 1.001090087s ago: executing program 3 (id=1842): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 900.007596ms ago: executing program 3 (id=1843): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f0000000200)=0xcc48, 0x4) 703.955479ms ago: executing program 4 (id=1844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc020000000000000000000000000000000200000000000004010001010031"], 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f00000011c0)=""/4082, &(0x7f0000000040)=0xff2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x4, @empty, @mcast1, 0x7800, 0x10, 0x3, 0x8e}}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x444c}}}}}}, @IFLA_GROUP={0x8, 0x1b, 0x55690764}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800004}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0xc4, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x0, {0xf, 0x0, 0x2, 0xfff8}}}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}], @crypto_settings=[@NL80211_ATTR_PMK={0x16, 0xfe, "a08554e19e54032b031dcdb36f505eb8932a"}, @NL80211_ATTR_PMK={0x32, 0xfe, "51160d3f2425d8011c6745d7f049ff01fa5a577c19cbd843950f923b56d69b5fa06d0acff3799bdecf4d2ef97228"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xfbfb}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac04}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac05}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac13, 0xfac12]}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac08, 0xfac02]}]]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004000) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x10, 0x8e, 0x9, 0xa, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_ident={0x2, 0xb, 0x3, 0x0, 0x572}, @sadb_address={0x5, 0x5, 0x3c, 0x20, 0x0, @in6={0xa, 0x4e23, 0x6, @empty, 0x1}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x50}}, 0x4c080) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x44, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002e000000180001801400020067656e65766530"], 0x2c}}, 0x0) 700.818465ms ago: executing program 1 (id=1845): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc080}, 0x40804) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) (async) r0 = socket$tipc(0x1e, 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0xa9) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000300)={0x0, 0x4d, "15777a00411b51b194cdb7b86b0edcf0a8c4c02ce1ae55702db9dd79454098d8d83127f32fbb7c77f7b849d339d1855b8e9fa031c393121b08e88b426f7576b698f12c9ddb5b3d512b8db3be96"}, &(0x7f0000000100)=0x55) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7fff}, &(0x7f0000000380)=0x8) (rerun: 64) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000003c0)={r3, 0xfffffffc, 0x800, 0xf71, 0x66, 0x2, 0xd296, 0x8, {r4, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x3, 0xbbf, 0x2, 0x200, 0x5}}, &(0x7f0000000480)=0xb0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000500)={@private0, 0x0}, &(0x7f0000000580)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff1, 0x8}, {0xffe0, 0xd}, {0x10, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x400}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x4004010) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x7c, 0x10, 0x401, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x183, 0x120a1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x196}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40448c1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0x0, 0x0, 0x4044802}, 0x0) 628.088146ms ago: executing program 3 (id=1846): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xd, 0x7fe6, 0xffffffff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, 0x0, &(0x7f00000000c0)) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe51, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004e00ff13"], 0x14}}, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x17, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010120, @broadcast}, "3297e3"}}, 0x25) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0xf0, 0x18, 0x200, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@multicast1, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x5e}, {@in6=@loopback, 0x404d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, {0x0, 0x200000000, 0x0, 0x100000}, {}, 0x1, 0x3504, 0x2, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 447.903898ms ago: executing program 2 (id=1847): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x4008840) 436.899898ms ago: executing program 1 (id=1848): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x3, 0x0, 0x4, 0x0, 0x44, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 336.139797ms ago: executing program 4 (id=1849): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000001140)={{0x3, @null}, [@null, @null, @default, @netrom, @netrom, @null, @netrom, @rose]}, &(0x7f00000011c0)=0x48, 0x1800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000300)={0x3, @null, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000004580)=""/4095, 0xfff}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000005580)=""/4100, 0x1004}, {&(0x7f0000001480)=""/166, 0xa6}], 0x4}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x301, 0x0, 0x25dfdbfd, {0x24}}, 0x14}}, 0x0) 330.218729ms ago: executing program 5 (id=1850): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r5, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x24, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x24}}, 0xc00) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c0001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0xd, 0x1, 0x3, 0x7}, 0x10) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000a40)="480e23") r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd27, 0x25dedbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xff, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x4, 0x10}, {0x0, 0x53, 0xa9, 0x5}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x7c}}, 0x24040084) 200.047432ms ago: executing program 3 (id=1851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x44, r1, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 197.713477ms ago: executing program 2 (id=1852): mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x10, 0x400, 0x4, @rand_addr=' \x01\x00', @loopback, 0x64e91e306b4fab98, 0x700, 0xd, 0x10000}}) r1 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa0000000000107110a0000000000095f9d86c3a01b200"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) unshare(0x600) r2 = socket$inet6(0xa, 0x4, 0x2) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x46, &(0x7f0000000100)=0x8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3}, 0xb, 0x3, 0x0, 0x0, "05dc32f19a5b1ac4fc36749c96e9a34b0d512741e9a1624d891aa47446cc7885dc68c84ade20afc294533c51206125ed3e98e56fb74a5b8543ad41afe3651a61"}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x8000) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f0000001680)=@can={{0x4, 0x1, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, "c44f42f9edefd548"}, 0x10}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) 161.164301ms ago: executing program 1 (id=1853): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffbb, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES32=r0], 0x74}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x50, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}], @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4cf5865bbb60"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x86dd}]]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4008008}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x70, r3, 0x100, 0x70bd28, 0x25dfdb7e, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x22}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xd}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 123.908317ms ago: executing program 3 (id=1854): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0eab070004000523"], 0xfe33) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 0s ago: executing program 4 (id=1855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x2) write$cgroup_subtree(r0, &(0x7f0000000b00)=ANY=[], 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x2) (async) write$cgroup_subtree(r0, &(0x7f0000000b00)=ANY=[], 0xa) (async) kernel console output (not intermixed with test programs): st of known hosts. [ 86.066640][ T5820] cgroup: Unknown subsys name 'net' [ 86.243150][ T5820] cgroup: Unknown subsys name 'cpuset' [ 86.252791][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.976176][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.556921][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.570368][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.598750][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.607145][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.619073][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.764899][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.773344][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.781325][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.803623][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.829023][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.837556][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.844981][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.852946][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.861465][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.869462][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.907232][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.915500][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.923510][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.931903][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.944531][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.952440][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.961408][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.977702][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.989405][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.997183][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.190004][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 92.404621][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.412557][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.420347][ T5830] bridge_slave_0: entered allmulticast mode [ 92.429665][ T5830] bridge_slave_0: entered promiscuous mode [ 92.493330][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.503303][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.510847][ T5830] bridge_slave_1: entered allmulticast mode [ 92.520539][ T5830] bridge_slave_1: entered promiscuous mode [ 92.676633][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.690700][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.790381][ T5830] team0: Port device team_slave_0 added [ 92.834670][ T5830] team0: Port device team_slave_1 added [ 92.906987][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.914980][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.943731][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.966484][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 92.986642][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 93.003151][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.010700][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.036716][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.310605][ T5830] hsr_slave_0: entered promiscuous mode [ 93.317632][ T5830] hsr_slave_1: entered promiscuous mode [ 93.331245][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 93.437635][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.445009][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.454495][ T5834] bridge_slave_0: entered allmulticast mode [ 93.462520][ T5834] bridge_slave_0: entered promiscuous mode [ 93.488124][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.495564][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.503025][ T5843] bridge_slave_0: entered allmulticast mode [ 93.510448][ T5843] bridge_slave_0: entered promiscuous mode [ 93.545712][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.553287][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.560929][ T5834] bridge_slave_1: entered allmulticast mode [ 93.568235][ T5834] bridge_slave_1: entered promiscuous mode [ 93.575381][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 93.588064][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.595345][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.602833][ T5843] bridge_slave_1: entered allmulticast mode [ 93.610185][ T5843] bridge_slave_1: entered promiscuous mode [ 93.659220][ T5842] Bluetooth: hci0: command tx timeout [ 93.776292][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.809432][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.833959][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.861525][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.898711][ T5842] Bluetooth: hci2: command tx timeout [ 93.905854][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.913964][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.922030][ T5836] bridge_slave_0: entered allmulticast mode [ 93.930335][ T5836] bridge_slave_0: entered promiscuous mode [ 93.979513][ T55] Bluetooth: hci1: command tx timeout [ 93.981102][ T5842] Bluetooth: hci3: command tx timeout [ 93.993504][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.001179][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.008420][ T5836] bridge_slave_1: entered allmulticast mode [ 94.016042][ T5836] bridge_slave_1: entered promiscuous mode [ 94.058742][ T5842] Bluetooth: hci4: command tx timeout [ 94.080906][ T5843] team0: Port device team_slave_0 added [ 94.131005][ T5834] team0: Port device team_slave_0 added [ 94.154114][ T5843] team0: Port device team_slave_1 added [ 94.173081][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.187057][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.198085][ T5834] team0: Port device team_slave_1 added [ 94.214475][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.222520][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.230026][ T5841] bridge_slave_0: entered allmulticast mode [ 94.237316][ T5841] bridge_slave_0: entered promiscuous mode [ 94.305051][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.314942][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.323064][ T5841] bridge_slave_1: entered allmulticast mode [ 94.331325][ T5841] bridge_slave_1: entered promiscuous mode [ 94.352597][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.359967][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.386513][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.440544][ T5836] team0: Port device team_slave_0 added [ 94.461296][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.468303][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.494841][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.506929][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.514094][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.540576][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.553331][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.560462][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.586906][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.601054][ T5836] team0: Port device team_slave_1 added [ 94.616925][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.671915][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.679474][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.705834][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.721322][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.771162][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.778256][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.805485][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.829122][ T5841] team0: Port device team_slave_0 added [ 94.897794][ T5843] hsr_slave_0: entered promiscuous mode [ 94.904938][ T5843] hsr_slave_1: entered promiscuous mode [ 94.911716][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.919781][ T5843] Cannot create hsr debugfs directory [ 94.930716][ T5841] team0: Port device team_slave_1 added [ 94.956027][ T5834] hsr_slave_0: entered promiscuous mode [ 94.962949][ T5834] hsr_slave_1: entered promiscuous mode [ 94.969496][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.977112][ T5834] Cannot create hsr debugfs directory [ 94.983607][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.998025][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.064327][ T5836] hsr_slave_0: entered promiscuous mode [ 95.071236][ T5836] hsr_slave_1: entered promiscuous mode [ 95.077417][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.086081][ T5836] Cannot create hsr debugfs directory [ 95.091835][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.178675][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.203959][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.211513][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.237943][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.250787][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.257778][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.284078][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.502147][ T5841] hsr_slave_0: entered promiscuous mode [ 95.508832][ T5841] hsr_slave_1: entered promiscuous mode [ 95.515084][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.523520][ T5841] Cannot create hsr debugfs directory [ 95.739534][ T5842] Bluetooth: hci0: command tx timeout [ 95.881060][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.924671][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.937118][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.953798][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.978651][ T5842] Bluetooth: hci2: command tx timeout [ 96.056177][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.059685][ T5842] Bluetooth: hci3: command tx timeout [ 96.064597][ T55] Bluetooth: hci1: command tx timeout [ 96.089574][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.104425][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.138945][ T55] Bluetooth: hci4: command tx timeout [ 96.145595][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.241854][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.276793][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.288311][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.313601][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.330979][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.415678][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.507876][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.515272][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.525836][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.540102][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.547383][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.557069][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.588240][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.598988][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.610008][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.722361][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.732982][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.781897][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.789633][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.822408][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.845877][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.853161][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.915584][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.922807][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.001122][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.009071][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.047905][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.146596][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.181938][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.189269][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.270874][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.278086][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.347256][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.440985][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.510495][ T1207] cfg80211: failed to load regulatory.db [ 97.553037][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.640364][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.647593][ T4405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.666453][ T4405] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.673730][ T4405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.762917][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.793109][ T5830] veth0_vlan: entered promiscuous mode [ 97.823188][ T55] Bluetooth: hci0: command tx timeout [ 97.904833][ T5830] veth1_vlan: entered promiscuous mode [ 97.957152][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.059133][ T55] Bluetooth: hci2: command tx timeout [ 98.123259][ T5830] veth0_macvtap: entered promiscuous mode [ 98.139029][ T55] Bluetooth: hci3: command tx timeout [ 98.144538][ T55] Bluetooth: hci1: command tx timeout [ 98.166136][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.193441][ T5843] veth0_vlan: entered promiscuous mode [ 98.213907][ T5830] veth1_macvtap: entered promiscuous mode [ 98.222179][ T55] Bluetooth: hci4: command tx timeout [ 98.236821][ T5843] veth1_vlan: entered promiscuous mode [ 98.341883][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.378326][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.424116][ T5843] veth0_macvtap: entered promiscuous mode [ 98.456009][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.467250][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.476691][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.488028][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.521492][ T5843] veth1_macvtap: entered promiscuous mode [ 98.538248][ T5836] veth0_vlan: entered promiscuous mode [ 98.619172][ T5836] veth1_vlan: entered promiscuous mode [ 98.632285][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.648262][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.668177][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.733365][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.742465][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.752298][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.762277][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.812017][ T5834] veth0_vlan: entered promiscuous mode [ 98.829566][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.837571][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.906818][ T5834] veth1_vlan: entered promiscuous mode [ 98.946506][ T5836] veth0_macvtap: entered promiscuous mode [ 98.963602][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.978127][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.004548][ T5841] veth0_vlan: entered promiscuous mode [ 99.040141][ T5836] veth1_macvtap: entered promiscuous mode [ 99.078313][ T5841] veth1_vlan: entered promiscuous mode [ 99.106702][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.153131][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.176772][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.200116][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.285489][ T5920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 99.295094][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.311857][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.313155][ T5834] veth0_macvtap: entered promiscuous mode [ 99.326196][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.333999][ T5920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 99.346852][ T5920] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2'. [ 99.363466][ T5841] veth0_macvtap: entered promiscuous mode [ 99.375567][ T5834] veth1_macvtap: entered promiscuous mode [ 99.390112][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.400099][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.423883][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.449057][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.481540][ T5841] veth1_macvtap: entered promiscuous mode [ 99.643731][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.701881][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.733631][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.822295][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.860945][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.888624][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.897415][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.909920][ T55] Bluetooth: hci0: command tx timeout [ 99.964661][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.032166][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.075910][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.107723][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.138537][ T55] Bluetooth: hci2: command tx timeout [ 100.149321][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.219043][ T55] Bluetooth: hci1: command tx timeout [ 100.219751][ T5842] Bluetooth: hci3: command tx timeout [ 100.309241][ T5842] Bluetooth: hci4: command tx timeout [ 100.452312][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.483215][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.712011][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.741712][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.839722][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.898779][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.227398][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.298582][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.362375][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.428714][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.528596][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.568624][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.290078][ T5951] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 0, id = 0 [ 102.651379][ T5959] xt_l2tp: missing protocol rule (udp|l2tpip) [ 102.691123][ T5964] Zero length message leads to an empty skb [ 102.720201][ T5963] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 102.829726][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 102.966918][ T5970] netlink: 'syz.2.14': attribute type 10 has an invalid length. [ 103.027536][ T5970] veth0_macvtap: left promiscuous mode [ 103.049528][ T5974] netlink: zone id is out of range [ 103.055686][ T5974] netlink: del zone limit has 4 unknown bytes [ 103.206434][ T5979] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.19'. [ 103.676727][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'. [ 103.790698][ T6006] sctp: [Deprecated]: syz.0.29 (pid 6006) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.790698][ T6006] Use struct sctp_sack_info instead [ 103.822548][ T6001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27'. [ 103.838684][ T6001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27'. [ 103.848814][ T5997] 8021q: adding VLAN 0 to HW filter on device team1 [ 104.176956][ T6021] xt_bpf: check failed: parse error [ 104.197165][ T6020] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET) [ 104.229661][ T6023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.31'. [ 104.425931][ T6024] netlink: 6 bytes leftover after parsing attributes in process `syz.3.31'. [ 104.436196][ T6024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.453912][ T6032] netlink: 'syz.1.36': attribute type 5 has an invalid length. [ 104.739210][ T6039] netlink: 16 bytes leftover after parsing attributes in process `syz.1.39'. [ 104.763465][ T6042] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.38'. [ 104.780818][ T6043] netlink: 'syz.3.40': attribute type 1 has an invalid length. [ 104.788938][ T6039] netlink: 16 bytes leftover after parsing attributes in process `syz.1.39'. [ 104.950964][ T6047] warning: `syz.4.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.066948][ T6047] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.082956][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.1.43'. [ 105.415684][ T6066] syz_tun: entered allmulticast mode [ 105.429265][ T6068] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 105.447685][ T6065] syz_tun: left allmulticast mode [ 105.751772][ T6087] netlink: 'syz.1.51': attribute type 1 has an invalid length. [ 105.811239][ T6089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.054418][ T6097] netlink: 'syz.1.56': attribute type 4 has an invalid length. [ 106.243757][ T6112] netlink: 32 bytes leftover after parsing attributes in process `syz.3.59'. [ 106.857873][ T6147] netlink: 'syz.4.65': attribute type 1 has an invalid length. [ 106.908857][ T6147] netlink: 224 bytes leftover after parsing attributes in process `syz.4.65'. [ 107.016265][ T6149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.67'. [ 107.039074][ T6150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.67'. [ 107.357657][ T6160] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.69'. [ 107.361962][ T6163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.427893][ T6164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.617492][ T6121] infiniband syz0: set active [ 107.677497][ T6121] infiniband syz0: added bond_slave_0 [ 107.696309][ T6121] syz0: rxe_create_cq: returned err = -12 [ 107.750608][ T6121] infiniband syz0: Couldn't create ib_mad CQ [ 107.756996][ T6121] infiniband syz0: Couldn't open port 1 [ 107.900895][ T6121] RDS/IB: syz0: added [ 107.930674][ T6121] smc: adding ib device syz0 with port count 1 [ 107.952002][ T6121] smc: ib device syz0 port 1 has pnetid [ 108.099661][ T30] audit: type=1800 audit(1747775170.828:2): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.76" name="memory.events" dev="tmpfs" ino=83 res=0 errno=0 [ 108.549119][ T6205] tipc: Started in network mode [ 108.561103][ T6205] tipc: Node identity ac1414aa, cluster identity 4711 [ 108.587116][ T6205] tipc: Enabled bearer , priority 10 [ 109.262688][ T6225] team0: Port device team_slave_0 removed [ 109.710169][ T5899] tipc: Node number set to 2886997162 [ 110.234103][ T6261] __nla_validate_parse: 2 callbacks suppressed [ 110.234122][ T6261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.93'. [ 110.437370][ T6265] netlink: 'syz.4.95': attribute type 4 has an invalid length. [ 110.491775][ T6266] netlink: 'syz.4.95': attribute type 4 has an invalid length. [ 110.574499][ T6268] tipc: Enabled bearer , priority 0 [ 110.660507][ T6268] syzkaller0: entered promiscuous mode [ 110.666397][ T6268] syzkaller0: entered allmulticast mode [ 110.677671][ T6268] tipc: Resetting bearer [ 110.694789][ T6270] bond0: entered promiscuous mode [ 110.727568][ T6270] bond_slave_0: entered promiscuous mode [ 110.734176][ T6270] bond_slave_1: entered promiscuous mode [ 110.751194][ T6270] batadv0: entered promiscuous mode [ 110.798396][ T6270] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 110.812914][ T6270] bond0: left promiscuous mode [ 110.817775][ T6270] bond_slave_0: left promiscuous mode [ 110.826256][ T6273] netlink: 32 bytes leftover after parsing attributes in process `syz.4.97'. [ 110.836723][ T6270] bond_slave_1: left promiscuous mode [ 110.864048][ T6270] batadv0: left promiscuous mode [ 110.954458][ T37] tipc: Resetting bearer [ 110.963129][ T6267] tipc: Resetting bearer [ 111.019899][ T5842] Bluetooth: hci2: command tx timeout [ 111.085956][ T6282] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 111.127999][ T6286] netlink: 'syz.4.100': attribute type 21 has an invalid length. [ 112.482665][ T6267] tipc: Disabling bearer [ 112.500988][ T6286] netlink: 132 bytes leftover after parsing attributes in process `syz.4.100'. [ 112.753992][ T6313] netlink: 'syz.3.105': attribute type 4 has an invalid length. [ 113.189125][ T6324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.109'. [ 113.217586][ T6324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.109'. [ 113.397454][ T6328] veth1_to_batadv: mtu less than device minimum [ 113.446128][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.112'. [ 113.549821][ T6330] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 113.625400][ T6330] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 113.670056][ T6330] gretap1: entered promiscuous mode [ 113.675434][ T6330] gretap1: entered allmulticast mode [ 113.701829][ T6333] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.520056][ T6357] netlink: 'syz.3.122': attribute type 28 has an invalid length. [ 114.534547][ T6357] netlink: 'syz.3.122': attribute type 3 has an invalid length. [ 114.547608][ T6357] netlink: 132 bytes leftover after parsing attributes in process `syz.3.122'. [ 114.953486][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.127'. [ 114.964797][ T6382] netlink: 16 bytes leftover after parsing attributes in process `syz.3.127'. [ 115.153899][ T6391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.131'. [ 115.164214][ T6389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.257071][ T6389] sctp: [Deprecated]: syz.3.130 (pid 6389) Use of int in max_burst socket option deprecated. [ 115.257071][ T6389] Use struct sctp_assoc_value instead [ 115.314280][ T6389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.130'. [ 115.627124][ T6406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.686656][ T6410] netlink: 180 bytes leftover after parsing attributes in process `syz.2.138'. [ 115.983315][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'. [ 116.024599][ T6426] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 116.044784][ T6426] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 116.046156][ T6424] netlink: 256 bytes leftover after parsing attributes in process `syz.0.142'. [ 116.093764][ T6424] netlink: 'syz.0.142': attribute type 9 has an invalid length. [ 117.997946][ T6440] xt_cgroup: xt_cgroup: no path or classid specified [ 118.024351][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 118.083846][ T6448] netlink: 56 bytes leftover after parsing attributes in process `syz.2.146'. [ 118.105363][ T6448] netlink: 56 bytes leftover after parsing attributes in process `syz.2.146'. [ 118.194195][ T6448] netlink: 56 bytes leftover after parsing attributes in process `syz.2.146'. [ 118.255409][ T6448] netlink: 56 bytes leftover after parsing attributes in process `syz.2.146'. [ 118.271166][ T6448] netlink: 56 bytes leftover after parsing attributes in process `syz.2.146'. [ 118.457562][ T6456] vxcan1 speed is unknown, defaulting to 1000 [ 118.487164][ T6456] vxcan1 speed is unknown, defaulting to 1000 [ 118.550974][ T6456] vxcan1 speed is unknown, defaulting to 1000 [ 118.945030][ T6473] syzkaller1: entered promiscuous mode [ 118.971982][ T6473] syzkaller1: entered allmulticast mode [ 119.068735][ T6458] syz.0.148 (6458) used greatest stack depth: 19144 bytes left [ 119.430712][ T6456] infiniband syz2: set active [ 119.435557][ T5880] vxcan1 speed is unknown, defaulting to 1000 [ 119.452829][ T6456] infiniband syz2: added vxcan1 [ 119.484968][ T6456] syz2: rxe_create_cq: returned err = -12 [ 119.558711][ T6456] infiniband syz2: Couldn't create ib_mad CQ [ 119.574682][ T6456] infiniband syz2: Couldn't open port 1 [ 119.733764][ T6456] RDS/IB: syz2: added [ 119.770970][ T6456] smc: adding ib device syz2 with port count 1 [ 119.818767][ T6456] smc: ib device syz2 port 1 has pnetid [ 119.859444][ T5880] vxcan1 speed is unknown, defaulting to 1000 [ 119.880153][ T6456] vxcan1 speed is unknown, defaulting to 1000 [ 120.170369][ T6525] netlink: 'syz.3.163': attribute type 10 has an invalid length. [ 120.219878][ T6525] veth0_vlan: entered allmulticast mode [ 120.319596][ T6525] veth0_vlan: left promiscuous mode [ 120.427666][ T6525] veth0_vlan: entered promiscuous mode [ 120.478386][ T6525] team0: Device veth0_vlan failed to register rx_handler [ 120.884817][ T6456] vxcan1 speed is unknown, defaulting to 1000 [ 121.536821][ T6566] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 121.581063][ T6570] __nla_validate_parse: 64 callbacks suppressed [ 121.581086][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 121.601347][ T6569] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 121.637436][ T6569] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 121.663456][ T6570] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 121.685816][ T6569] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 121.827092][ T6456] vxcan1 speed is unknown, defaulting to 1000 [ 122.011445][ T6587] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 122.632470][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.181'. [ 122.817405][ T6456] vxcan1 speed is unknown, defaulting to 1000 [ 122.834658][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.183'. [ 123.060375][ T6626] netlink: 'syz.4.184': attribute type 1 has an invalid length. [ 123.160240][ T6617] bond0: (slave bond_slave_1): Releasing backup interface [ 123.505685][ T6639] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 123.528573][ T6639] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 123.683285][ T6456] vxcan1 speed is unknown, defaulting to 1000 [ 124.267010][ T6557] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 124.302061][ T6557] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 124.366973][ T6559] siw: device registration error -23 [ 124.795330][ T6669] sch_fq: defrate 0 ignored. [ 125.364895][ T6695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.200'. [ 125.408919][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 125.599213][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.202'. [ 125.700754][ T6716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.205'. [ 125.717054][ T6714] netlink: 'syz.3.204': attribute type 1 has an invalid length. [ 125.826167][ T6720] netlink: 'syz.0.206': attribute type 4 has an invalid length. [ 125.952446][ T6720] netlink: 'syz.0.206': attribute type 4 has an invalid length. [ 126.304375][ T6738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.211'. [ 126.633020][ T6752] .: renamed from bond0 (while UP) [ 127.008295][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.218'. [ 127.363042][ T5899] IPVS: starting estimator thread 0... [ 127.468739][ T6787] IPVS: using max 29 ests per chain, 69600 per kthread [ 127.729759][ T6798] netlink: 'syz.0.225': attribute type 4 has an invalid length. [ 127.823106][ T6798] netlink: 152 bytes leftover after parsing attributes in process `syz.0.225'. [ 128.775019][ T6839] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 128.849935][ T6846] netlink: 'syz.2.237': attribute type 3 has an invalid length. [ 129.369718][ T6867] netlink: 'syz.3.241': attribute type 15 has an invalid length. [ 129.419376][ T6867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.241'. [ 129.466266][ T6871] netlink: 68 bytes leftover after parsing attributes in process `syz.3.241'. [ 129.575427][ T6877] netlink: 11 bytes leftover after parsing attributes in process `syz.1.245'. [ 130.178037][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'. [ 130.220965][ T6906] netlink: 'syz.3.252': attribute type 2 has an invalid length. [ 130.271212][ T6906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.252'. [ 130.440567][ T6917] netlink: 43 bytes leftover after parsing attributes in process `syz.1.255'. [ 130.740551][ T6926] netlink: 48 bytes leftover after parsing attributes in process `syz.0.257'. [ 131.224350][ T6948] netlink: 80 bytes leftover after parsing attributes in process `syz.0.263'. [ 131.225940][ T6947] netlink: 'syz.4.262': attribute type 1 has an invalid length. [ 131.277601][ T6948] nbd: illegal input index 61504 [ 131.478883][ T6947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.545888][ T6952] bond0: (slave geneve2): making interface the new active one [ 131.567962][ T6952] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 131.646400][ T6958] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 131.679394][ T6958] bond0: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 131.771333][ T6917] vxcan1 speed is unknown, defaulting to 1000 [ 132.012622][ T6972] netlink: 68 bytes leftover after parsing attributes in process `syz.0.269'. [ 132.405207][ T6987] netlink: 'syz.0.272': attribute type 27 has an invalid length. [ 132.621467][ T6993] netlink: 'syz.4.275': attribute type 3 has an invalid length. [ 132.664591][ T6993] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.275'. [ 132.928307][ T7005] netlink: 164 bytes leftover after parsing attributes in process `syz.3.278'. [ 132.993748][ T7005] netlink: 164 bytes leftover after parsing attributes in process `syz.3.278'. [ 133.027577][ T7005] netlink: 60 bytes leftover after parsing attributes in process `syz.3.278'. [ 133.210490][ T7021] netlink: 256 bytes leftover after parsing attributes in process `syz.0.281'. [ 133.269552][ T7021] netlink: 'syz.0.281': attribute type 9 has an invalid length. [ 133.397540][ T7026] netlink: 40 bytes leftover after parsing attributes in process `syz.0.281'. [ 133.435123][ T7026] netlink: 40 bytes leftover after parsing attributes in process `syz.0.281'. [ 133.456696][ T7026] netlink: 40 bytes leftover after parsing attributes in process `syz.0.281'. [ 133.807568][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'. [ 133.963712][ T7042] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 134.247193][ T7051] netlink: 'syz.3.290': attribute type 1 has an invalid length. [ 134.821126][ T7077] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 134.878944][ T5887] IPVS: starting estimator thread 0... [ 134.989652][ T7084] IPVS: using max 25 ests per chain, 60000 per kthread [ 135.011450][ T7090] netlink: 'syz.3.300': attribute type 23 has an invalid length. [ 135.080657][ T7094] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 135.442651][ T7108] netlink: 'syz.2.305': attribute type 1 has an invalid length. [ 135.467303][ T7108] netlink: 'syz.2.305': attribute type 1 has an invalid length. [ 135.489209][ T7108] netlink: 'syz.2.305': attribute type 1 has an invalid length. [ 135.499622][ T7108] netlink: 'syz.2.305': attribute type 1 has an invalid length. [ 135.793292][ T7118] FAULT_INJECTION: forcing a failure. [ 135.793292][ T7118] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 135.843613][ T7118] CPU: 0 UID: 0 PID: 7118 Comm: syz.1.309 Not tainted 6.15.0-rc6-syzkaller-00173-g9e89db3d847f #0 PREEMPT(full) [ 135.843646][ T7118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.843664][ T7118] Call Trace: [ 135.843681][ T7118] [ 135.843693][ T7118] dump_stack_lvl+0x189/0x250 [ 135.843743][ T7118] ? __lock_acquire+0xaac/0xd20 [ 135.843788][ T7118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.843822][ T7118] ? __pfx__printk+0x10/0x10 [ 135.843845][ T7118] ? __might_fault+0xb0/0x130 [ 135.843886][ T7118] should_fail_ex+0x414/0x560 [ 135.843916][ T7118] _copy_from_user+0x2d/0xb0 [ 135.843962][ T7118] ___sys_sendmsg+0x158/0x2a0 [ 135.843995][ T7118] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.844065][ T7118] ? __fget_files+0x2a/0x420 [ 135.844093][ T7118] ? __fget_files+0x3a0/0x420 [ 135.844133][ T7118] __x64_sys_sendmsg+0x19b/0x260 [ 135.844165][ T7118] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.844214][ T7118] ? do_syscall_64+0xba/0x210 [ 135.844247][ T7118] do_syscall_64+0xf6/0x210 [ 135.844275][ T7118] ? clear_bhb_loop+0x60/0xb0 [ 135.844301][ T7118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.844321][ T7118] RIP: 0033:0x7f42cbb8e969 [ 135.844346][ T7118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.844363][ T7118] RSP: 002b:00007f42cca48038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.844393][ T7118] RAX: ffffffffffffffda RBX: 00007f42cbdb5fa0 RCX: 00007f42cbb8e969 [ 135.844409][ T7118] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 135.844422][ T7118] RBP: 00007f42cca48090 R08: 0000000000000000 R09: 0000000000000000 [ 135.844435][ T7118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.844446][ T7118] R13: 0000000000000000 R14: 00007f42cbdb5fa0 R15: 00007fff7787abe8 [ 135.844479][ T7118] [ 136.115688][ T7125] syzkaller0: entered promiscuous mode [ 136.122064][ T7125] syzkaller0: entered allmulticast mode [ 136.510162][ T7142] Cannot find set identified by id 0 to match [ 136.540311][ T7144] netlink: 'syz.4.318': attribute type 10 has an invalid length. [ 136.585942][ T7140] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 136.649309][ T7140] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 136.674956][ T7144] .: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 136.894577][ T7147] tipc: Started in network mode [ 136.908678][ T7147] tipc: Node identity e0000002, cluster identity 4711 [ 136.924234][ T7147] tipc: Enabling of bearer rejected, failed to enable media [ 137.060608][ T7157] __nla_validate_parse: 15 callbacks suppressed [ 137.060631][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.325'. [ 137.198809][ T30] audit: type=1107 audit(1747775199.908:3): pid=7161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='G1§i0ÓÒVn"2t°,dh|C¥‘ZBDÔrE°cÜpuo †9ÈÈì ¹£ [ 137.198809][ T30] ºúšÂÌw{¬õ(ÿ_5Å6¸P!aÁð}®?,ÌÛrbÕÍc‘ë©» O!úÖ®QLŽFåXÌ•ž~`˼­»a¥ˆG’œC.ŸxŸ²™ŠAb¹P»:òDÃ4¹±Q½¼o^…ZQYåìöϽgõÕתHÂLólìGï uAÁ¾ÍdUÖS⼞×)㉧lB¡­Cçõ \†Ô:ÂJšëm^çõ®OSü½ÆaœÕ§³/ÆRh÷' [ 137.494835][ T7173] netlink: 52 bytes leftover after parsing attributes in process `syz.3.328'. [ 137.817224][ T7191] netlink: 256 bytes leftover after parsing attributes in process `syz.3.336'. [ 138.084171][ T7197] xt_CT: No such helper "pptp" [ 138.375372][ T7216] syz.1.343 (7216) used greatest stack depth: 18440 bytes left [ 138.612366][ T7233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.351'. [ 138.654647][ T7233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.351'. [ 139.842377][ T7271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.365'. [ 139.862342][ T7271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.365'. [ 140.406324][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.370'. [ 140.442860][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.370'. [ 140.778990][ T7297] vlan3: entered allmulticast mode [ 140.793167][ T7297] gretap0: entered allmulticast mode [ 140.799494][ T7301] netlink: 'syz.3.377': attribute type 1 has an invalid length. [ 140.809049][ T7301] netlink: 224 bytes leftover after parsing attributes in process `syz.3.377'. [ 141.194904][ T7317] tipc: Enabling of bearer rejected, failed to enable media [ 141.339250][ T7322] delete_channel: no stack [ 141.456205][ T7333] netlink: 'syz.3.388': attribute type 9 has an invalid length. [ 141.510353][ T5842] Bluetooth: hci4: link tx timeout [ 141.515809][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.922127][ T7346] netlink: 'syz.1.393': attribute type 1 has an invalid length. [ 142.134820][ T7359] __nla_validate_parse: 8 callbacks suppressed [ 142.134841][ T7359] netlink: 100 bytes leftover after parsing attributes in process `syz.3.398'. [ 142.156880][ T7358] macvlan2: entered promiscuous mode [ 142.361347][ T7366] FAULT_INJECTION: forcing a failure. [ 142.361347][ T7366] name failslab, interval 1, probability 0, space 0, times 0 [ 142.439803][ T7366] CPU: 1 UID: 0 PID: 7366 Comm: syz.3.401 Not tainted 6.15.0-rc6-syzkaller-00173-g9e89db3d847f #0 PREEMPT(full) [ 142.439845][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.439858][ T7366] Call Trace: [ 142.439866][ T7366] [ 142.439876][ T7366] dump_stack_lvl+0x189/0x250 [ 142.439916][ T7366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.439947][ T7366] ? __pfx__printk+0x10/0x10 [ 142.439976][ T7366] ? __pfx___might_resched+0x10/0x10 [ 142.439996][ T7366] ? fs_reclaim_acquire+0x7d/0x100 [ 142.440033][ T7366] should_fail_ex+0x414/0x560 [ 142.440062][ T7366] should_failslab+0xa8/0x100 [ 142.440099][ T7366] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 142.440127][ T7366] ? __alloc_skb+0x112/0x2d0 [ 142.440158][ T7366] __alloc_skb+0x112/0x2d0 [ 142.440188][ T7366] l2tp_nl_cmd_session_delete+0x4d/0x320 [ 142.440220][ T7366] genl_family_rcv_msg_doit+0x215/0x300 [ 142.440262][ T7366] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 142.440308][ T7366] ? bpf_lsm_capable+0x9/0x20 [ 142.440339][ T7366] ? security_capable+0x7e/0x2e0 [ 142.440370][ T7366] genl_rcv_msg+0x60e/0x790 [ 142.440409][ T7366] ? __pfx_genl_rcv_msg+0x10/0x10 [ 142.440440][ T7366] ? __pfx_l2tp_nl_cmd_session_delete+0x10/0x10 [ 142.440471][ T7366] ? ref_tracker_free+0x63a/0x7d0 [ 142.440493][ T7366] ? __copy_skb_header+0xa7/0x550 [ 142.440532][ T7366] netlink_rcv_skb+0x219/0x490 [ 142.440558][ T7366] ? __pfx_genl_rcv_msg+0x10/0x10 [ 142.440589][ T7366] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.440640][ T7366] ? down_read+0x1ad/0x2e0 [ 142.440673][ T7366] genl_rcv+0x28/0x40 [ 142.440702][ T7366] netlink_unicast+0x75b/0x8d0 [ 142.440737][ T7366] netlink_sendmsg+0x805/0xb30 [ 142.440770][ T7366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.440799][ T7366] ? aa_sock_msg_perm+0x94/0x160 [ 142.440829][ T7366] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.440853][ T7366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.440879][ T7366] __sock_sendmsg+0x219/0x270 [ 142.440904][ T7366] ____sys_sendmsg+0x505/0x830 [ 142.440940][ T7366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.440980][ T7366] ? import_iovec+0x74/0xa0 [ 142.441015][ T7366] ___sys_sendmsg+0x21f/0x2a0 [ 142.441048][ T7366] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.441130][ T7366] ? __fget_files+0x2a/0x420 [ 142.441157][ T7366] ? __fget_files+0x3a0/0x420 [ 142.441197][ T7366] __x64_sys_sendmsg+0x19b/0x260 [ 142.441229][ T7366] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.441279][ T7366] ? do_syscall_64+0xba/0x210 [ 142.441312][ T7366] do_syscall_64+0xf6/0x210 [ 142.441342][ T7366] ? clear_bhb_loop+0x60/0xb0 [ 142.441368][ T7366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.441389][ T7366] RIP: 0033:0x7f944f98e969 [ 142.441407][ T7366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.441424][ T7366] RSP: 002b:00007f94507f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.441446][ T7366] RAX: ffffffffffffffda RBX: 00007f944fbb5fa0 RCX: 00007f944f98e969 [ 142.441461][ T7366] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 142.441473][ T7366] RBP: 00007f94507f5090 R08: 0000000000000000 R09: 0000000000000000 [ 142.441485][ T7366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.441497][ T7366] R13: 0000000000000000 R14: 00007f944fbb5fa0 R15: 00007ffcf16c0328 [ 142.441530][ T7366] [ 142.982225][ T7379] tipc: Started in network mode [ 143.011339][ T7379] tipc: Node identity ac1414aa, cluster identity 4711 [ 143.021404][ T7379] tipc: Enabled bearer , priority 10 [ 143.245263][ T7388] netlink: 'syz.1.409': attribute type 1 has an invalid length. [ 143.255678][ T7388] netlink: 'syz.1.409': attribute type 11 has an invalid length. [ 143.264367][ T7388] netlink: 220 bytes leftover after parsing attributes in process `syz.1.409'. [ 143.280679][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 143.445563][ T7397] netlink: 'syz.0.412': attribute type 2 has an invalid length. [ 143.464634][ T7397] netlink: 68 bytes leftover after parsing attributes in process `syz.0.412'. [ 143.518276][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.413'. [ 143.580550][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 143.720241][ T7405] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 143.728096][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'. [ 143.879542][ T7413] FAULT_INJECTION: forcing a failure. [ 143.879542][ T7413] name failslab, interval 1, probability 0, space 0, times 0 [ 143.905295][ T7388] vxcan1 speed is unknown, defaulting to 1000 [ 143.913360][ T7413] CPU: 1 UID: 0 PID: 7413 Comm: syz.4.417 Not tainted 6.15.0-rc6-syzkaller-00173-g9e89db3d847f #0 PREEMPT(full) [ 143.913391][ T7413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.913404][ T7413] Call Trace: [ 143.913412][ T7413] [ 143.913422][ T7413] dump_stack_lvl+0x189/0x250 [ 143.913462][ T7413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.913494][ T7413] ? __pfx__printk+0x10/0x10 [ 143.913512][ T7413] ? __lock_acquire+0xaac/0xd20 [ 143.913561][ T7413] should_fail_ex+0x414/0x560 [ 143.913595][ T7413] should_failslab+0xa8/0x100 [ 143.913627][ T7413] kmem_cache_alloc_noprof+0x73/0x3c0 [ 143.913654][ T7413] ? skb_clone+0x212/0x3a0 [ 143.913691][ T7413] skb_clone+0x212/0x3a0 [ 143.913727][ T7413] __netlink_deliver_tap+0x404/0x850 [ 143.913768][ T7413] ? netlink_deliver_tap+0x2e/0x1b0 [ 143.913796][ T7413] netlink_deliver_tap+0x19c/0x1b0 [ 143.913822][ T7413] netlink_sendskb+0x68/0x140 [ 143.913847][ T7413] netlink_rcv_skb+0x2a0/0x490 [ 143.913873][ T7413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 143.913907][ T7413] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 143.913961][ T7413] ? down_read+0x1ad/0x2e0 [ 143.913995][ T7413] genl_rcv+0x28/0x40 [ 143.914024][ T7413] netlink_unicast+0x75b/0x8d0 [ 143.914059][ T7413] netlink_sendmsg+0x805/0xb30 [ 143.914097][ T7413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.914128][ T7413] ? aa_sock_msg_perm+0x94/0x160 [ 143.914155][ T7413] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 143.914180][ T7413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.914215][ T7413] __sock_sendmsg+0x219/0x270 [ 143.914242][ T7413] ____sys_sendmsg+0x505/0x830 [ 143.914279][ T7413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.914321][ T7413] ? import_iovec+0x74/0xa0 [ 143.914356][ T7413] ___sys_sendmsg+0x21f/0x2a0 [ 143.914389][ T7413] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.914465][ T7413] ? __fget_files+0x2a/0x420 [ 143.914493][ T7413] ? __fget_files+0x3a0/0x420 [ 143.914535][ T7413] __x64_sys_sendmsg+0x19b/0x260 [ 143.914568][ T7413] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 143.914619][ T7413] ? do_syscall_64+0xba/0x210 [ 143.914653][ T7413] do_syscall_64+0xf6/0x210 [ 143.914683][ T7413] ? clear_bhb_loop+0x60/0xb0 [ 143.914709][ T7413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.914730][ T7413] RIP: 0033:0x7feb7b58e969 [ 143.914749][ T7413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.914766][ T7413] RSP: 002b:00007feb7c313038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.914789][ T7413] RAX: ffffffffffffffda RBX: 00007feb7b7b6080 RCX: 00007feb7b58e969 [ 143.914805][ T7413] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 143.914818][ T7413] RBP: 00007feb7c313090 R08: 0000000000000000 R09: 0000000000000000 [ 143.914830][ T7413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.914842][ T7413] R13: 0000000000000000 R14: 00007feb7b7b6080 R15: 00007ffe8bcd7638 [ 143.914876][ T7413] [ 144.274958][ T1207] tipc: Node number set to 2886997162 [ 144.316118][ T7418] netlink: 168 bytes leftover after parsing attributes in process `syz.2.420'. [ 144.326329][ T7418] netlink: 96 bytes leftover after parsing attributes in process `syz.2.420'. [ 144.782614][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.425'. [ 144.830190][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.425'. [ 144.962276][ T7436] geneve0: mtu less than device minimum [ 145.287719][ T7457] Cannot find del_set index 5 as target [ 145.539087][ T7464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.622256][ T7467] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 145.674334][ T7470] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 146.281088][ T7487] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.519842][ T7503] netlink: 'syz.3.444': attribute type 39 has an invalid length. [ 146.536222][ T7503] veth0_macvtap: left promiscuous mode [ 146.638063][ T7504] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 147.064864][ T7532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.158308][ T7530] __nla_validate_parse: 5 callbacks suppressed [ 147.158330][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.450'. [ 147.399268][ T7544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.453'. [ 147.644370][ T7555] dvmrp0: entered allmulticast mode [ 147.661175][ T7544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'. [ 147.813361][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 147.817984][ T7563] FAULT_INJECTION: forcing a failure. [ 147.817984][ T7563] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 147.837091][ T7563] CPU: 1 UID: 0 PID: 7563 Comm: syz.2.460 Not tainted 6.15.0-rc6-syzkaller-00173-g9e89db3d847f #0 PREEMPT(full) [ 147.837119][ T7563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.837132][ T7563] Call Trace: [ 147.837140][ T7563] [ 147.837149][ T7563] dump_stack_lvl+0x189/0x250 [ 147.837188][ T7563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.837219][ T7563] ? __pfx__printk+0x10/0x10 [ 147.837242][ T7563] ? fs_reclaim_acquire+0x7d/0x100 [ 147.837284][ T7563] should_fail_ex+0x414/0x560 [ 147.837312][ T7563] prepare_alloc_pages+0x213/0x610 [ 147.837352][ T7563] __alloc_frozen_pages_noprof+0x123/0x370 [ 147.837375][ T7563] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 147.837407][ T7563] ? policy_nodemask+0x27c/0x720 [ 147.837435][ T7563] ? __lock_acquire+0xaac/0xd20 [ 147.837470][ T7563] alloc_pages_mpol+0x232/0x4a0 [ 147.837503][ T7563] vma_alloc_folio_noprof+0xe4/0x200 [ 147.837535][ T7563] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 147.837577][ T7563] folio_prealloc+0x30/0x180 [ 147.837618][ T7563] __handle_mm_fault+0x2b28/0x5380 [ 147.837645][ T7563] ? __lock_acquire+0xaac/0xd20 [ 147.837692][ T7563] ? __pfx___handle_mm_fault+0x10/0x10 [ 147.837718][ T7563] ? lock_vma_under_rcu+0xf8/0x710 [ 147.837753][ T7563] ? lock_vma_under_rcu+0xf8/0x710 [ 147.837779][ T7563] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 147.837815][ T7563] handle_mm_fault+0x3f6/0x8c0 [ 147.837851][ T7563] do_user_addr_fault+0xa81/0x1390 [ 147.837882][ T7563] ? rcu_is_watching+0x15/0xb0 [ 147.837901][ T7563] ? trace_irq_disable+0x37/0x110 [ 147.837928][ T7563] exc_page_fault+0x68/0x110 [ 147.837957][ T7563] asm_exc_page_fault+0x26/0x30 [ 147.837977][ T7563] RIP: 0033:0x7fa6ff65a35b [ 147.837996][ T7563] Code: 00 00 00 48 8d 3d dd 2b 19 00 48 89 c1 31 c0 e8 db 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 2c 19 00 48 89 34 24 48 8b 14 24 48 8b [ 147.838013][ T7563] RSP: 002b:00007fa70060dfb0 EFLAGS: 00010202 [ 147.838032][ T7563] RAX: 0000000000000000 RBX: 00007fa6ff9b5fa0 RCX: 0000000000000000 [ 147.838045][ T7563] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000180 [ 147.838058][ T7563] RBP: 00007fa70060f090 R08: 0000000000000000 R09: 0000000000000000 [ 147.838070][ T7563] R10: 0000200000000180 R11: 0000000000000000 R12: 0000000000000001 [ 147.838082][ T7563] R13: 0000000000000000 R14: 00007fa6ff9b5fa0 R15: 00007ffeb8efdf48 [ 147.838114][ T7563] [ 147.838293][ T7563] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 148.268838][ T7575] netlink: 52 bytes leftover after parsing attributes in process `syz.1.462'. [ 148.385225][ T7579] netlink: 232 bytes leftover after parsing attributes in process `syz.4.466'. [ 148.396671][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'. [ 148.412746][ T7579] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 148.468113][ T7581] netlink: 16 bytes leftover after parsing attributes in process `syz.4.467'. [ 148.480960][ T7581] netlink: 16 bytes leftover after parsing attributes in process `syz.4.467'. [ 148.532939][ T7583] raw_sendmsg: syz.4.468 forgot to set AF_INET. Fix it! [ 148.595745][ T7587] xt_TCPMSS: Only works on TCP SYN packets [ 148.673914][ T7589] netlink: 'syz.4.470': attribute type 1 has an invalid length. [ 148.685719][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.470'. [ 148.771410][ T7590] bond2 (unregistering): Released all slaves [ 148.806872][ T7589] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 149.495435][ T7628] x_tables: duplicate underflow at hook 2 [ 149.522068][ T7628] netlink: 'syz.2.481': attribute type 5 has an invalid length. [ 149.667945][ T7635] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.677901][ T7629] Driver unsupported XDP return value 0 on prog (id 80) dev N/A, expect packet loss! [ 149.777722][ T7632] xt_CT: No such helper "netbios-ns" [ 149.966369][ T7647] 8021q: VLANs not supported on ip6gre0 [ 150.186517][ T7633] vxcan1 speed is unknown, defaulting to 1000 [ 150.230779][ T7655] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 150.283560][ T7657] netlink: 'syz.4.490': attribute type 21 has an invalid length. [ 150.369024][ T7656] gretap0: entered promiscuous mode [ 150.438800][ T7661] 0ªî{X¹¦: renamed from gretap0 [ 150.448247][ T7661] 0ªî{X¹¦: left promiscuous mode [ 150.458355][ T7661] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 150.932696][ T7684] Bluetooth: MGMT ver 1.23 [ 151.953477][ T7726] netlink: 'syz.1.512': attribute type 7 has an invalid length. [ 152.063901][ T7728] C: renamed from lo (while UP) [ 152.095294][ T7728] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 152.283725][ T7735] can: request_module (can-proto-0) failed. [ 152.335870][ T7747] __nla_validate_parse: 13 callbacks suppressed [ 152.335891][ T7747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.516'. [ 152.386491][ T7747] netlink: 16 bytes leftover after parsing attributes in process `syz.3.516'. [ 152.580901][ T7753] netlink: 'syz.1.517': attribute type 11 has an invalid length. [ 152.607456][ T7753] netlink: 224 bytes leftover after parsing attributes in process `syz.1.517'. [ 152.778772][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 153.071213][ T7770] No such timeout policy "syz0" [ 153.201404][ T7777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.523'. [ 153.255965][ T7780] netlink: 68 bytes leftover after parsing attributes in process `syz.4.524'. [ 153.269234][ T7779] openvswitch: netlink: IPv4 tun info is not correct [ 153.481824][ T7793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.528'. [ 153.511021][ T7793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.528'. [ 153.657755][ T7798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.965122][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 153.994701][ T7813] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 154.474087][ T7831] netlink: 32 bytes leftover after parsing attributes in process `syz.4.536'. [ 155.692864][ T7867] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 155.704567][ T7867] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 155.751634][ T7867] netlink: 56 bytes leftover after parsing attributes in process `syz.4.548'. [ 155.767653][ T7867] netlink: 'syz.4.548': attribute type 3 has an invalid length. [ 155.777187][ T7867] netlink: 'syz.4.548': attribute type 2 has an invalid length. [ 156.362785][ T7883] netlink: 'syz.2.554': attribute type 3 has an invalid length. [ 156.371888][ T7883] netlink: 'syz.2.554': attribute type 2 has an invalid length. [ 156.462476][ T7886] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.932790][ T7905] netlink: 'syz.3.562': attribute type 2 has an invalid length. [ 156.964465][ T7905] netlink: 'syz.3.562': attribute type 8 has an invalid length. [ 157.105870][ T7916] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 157.411172][ T7934] __nla_validate_parse: 12 callbacks suppressed [ 157.411193][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 157.501899][ T7925] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 157.507807][ T7925] syzkaller0: Linktype set failed because interface is up [ 157.536983][ T7940] vlan2: entered promiscuous mode [ 157.543306][ T7940] bridge0: entered promiscuous mode [ 157.612431][ T7945] netlink: 52 bytes leftover after parsing attributes in process `syz.1.574'. [ 157.670090][ T7947] netlink: 84 bytes leftover after parsing attributes in process `syz.2.575'. [ 159.189616][ T7973] tipc: Enabling of bearer rejected, failed to enable media [ 159.226870][ T7973] tipc: Enabling of bearer rejected, failed to enable media [ 159.514292][ T7989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.585'. [ 159.622406][ T7993] netlink: 84 bytes leftover after parsing attributes in process `syz.3.587'. [ 159.783309][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 159.813099][ T7998] netlink: 'syz.1.590': attribute type 3 has an invalid length. [ 160.042793][ T8005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.594'. [ 160.570079][ T8030] netlink: 44 bytes leftover after parsing attributes in process `syz.3.602'. [ 160.663002][ T8032] x_tables: unsorted underflow at hook 4 [ 160.687142][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.697707][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.706995][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.738871][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.758185][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.873744][ T8051] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 161.148741][ T8065] delete_channel: no stack [ 161.414453][ T8072] netlink: 52 bytes leftover after parsing attributes in process `syz.2.614'. [ 161.443761][ T8075] netlink: 16 bytes leftover after parsing attributes in process `syz.1.615'. [ 161.463322][ T8072] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 161.680864][ T8041] vxcan1 speed is unknown, defaulting to 1000 [ 162.258602][ T8108] netlink: 'syz.4.624': attribute type 11 has an invalid length. [ 162.659743][ T8041] chnl_net:caif_netlink_parms(): no params data found [ 162.811461][ T8123] netlink: 'syz.4.628': attribute type 29 has an invalid length. [ 162.859347][ T55] Bluetooth: hci5: command tx timeout [ 163.353336][ T8143] __nla_validate_parse: 5 callbacks suppressed [ 163.353359][ T8143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.632'. [ 163.408668][ T8041] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.417503][ T8041] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.453107][ T8041] bridge_slave_0: entered allmulticast mode [ 163.486123][ T8041] bridge_slave_0: entered promiscuous mode [ 163.532587][ T8041] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.569064][ T8041] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.596895][ T8041] bridge_slave_1: entered allmulticast mode [ 163.630293][ T8041] bridge_slave_1: entered promiscuous mode [ 163.644951][ T8154] netlink: 6 bytes leftover after parsing attributes in process `syz.2.636'. [ 163.741093][ T8157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.017189][ T8041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.110445][ T8041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.291687][ T8041] team0: Port device team_slave_0 added [ 164.334623][ T8041] team0: Port device team_slave_1 added [ 164.575283][ T8041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.588678][ T8041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.622602][ T8041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.646041][ T8041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.668585][ T8041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.728270][ T8041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.748004][ T8184] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.644'. [ 164.914252][ T8041] hsr_slave_0: entered promiscuous mode [ 164.927028][ T8041] hsr_slave_1: entered promiscuous mode [ 164.941056][ T8041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.950216][ T55] Bluetooth: hci5: command tx timeout [ 164.959881][ T8041] Cannot create hsr debugfs directory [ 165.108920][ T8191] netlink: 'syz.1.646': attribute type 1 has an invalid length. [ 165.167876][ T8191] netlink: 204 bytes leftover after parsing attributes in process `syz.1.646'. [ 165.348111][ T8195] netlink: 288 bytes leftover after parsing attributes in process `syz.2.647'. [ 166.173634][ T8215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.650'. [ 166.190732][ T8215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.650'. [ 166.619567][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.022234][ T55] Bluetooth: hci5: command tx timeout [ 167.740442][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 167.750486][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 167.759949][ T8195] netlink: 36 bytes leftover after parsing attributes in process `syz.2.647'. [ 167.989663][ T8224] netlink: 'syz.4.652': attribute type 21 has an invalid length. [ 168.457031][ T8240] __nla_validate_parse: 1 callbacks suppressed [ 168.457054][ T8240] netlink: 16 bytes leftover after parsing attributes in process `syz.4.657'. [ 168.912313][ T8244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.659'. [ 169.109125][ T55] Bluetooth: hci5: command tx timeout [ 170.226639][ T8252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.660'. [ 170.281470][ T8041] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.303893][ T8252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.660'. [ 170.358197][ T8041] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 170.417680][ T8041] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.504897][ T8041] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 170.504935][ T8262] netlink: 28 bytes leftover after parsing attributes in process `syz.3.664'. [ 170.548647][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.663'. [ 170.573020][ T8262] netlink: 'syz.3.664': attribute type 7 has an invalid length. [ 170.616858][ T8262] netlink: 'syz.3.664': attribute type 8 has an invalid length. [ 170.666644][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'. [ 170.760283][ T8262] erspan0: entered promiscuous mode [ 170.783198][ T8262] gretap0: entered promiscuous mode [ 170.805439][ T8262] erspan0: left promiscuous mode [ 170.844861][ T8262] gretap0: left promiscuous mode [ 171.058926][ T8284] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 171.204643][ T8041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.298094][ T8041] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.403708][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.411003][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.457673][ T8301] netlink: 16 bytes leftover after parsing attributes in process `syz.3.674'. [ 171.476564][ T8301] netlink: 16 bytes leftover after parsing attributes in process `syz.3.674'. [ 171.488854][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.496369][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.680213][ T8340] syz.3.680 uses old SIOCAX25GETINFO [ 172.690384][ T8341] unknown channel width for channel at 909000KHz? [ 172.719651][ T8341] unknown channel width for channel at 909000KHz? [ 172.759268][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 172.784112][ T8041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.556893][ T8369] __nla_validate_parse: 3 callbacks suppressed [ 173.556915][ T8369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.686'. [ 173.602868][ T8369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.686'. [ 173.801425][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 174.541096][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.691'. [ 175.709486][ T8389] bridge_slave_1: left allmulticast mode [ 175.715398][ T8389] bridge_slave_1: left promiscuous mode [ 175.732169][ T8389] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.759480][ T8389] bridge_slave_0: left allmulticast mode [ 175.766528][ T8389] bridge_slave_0: left promiscuous mode [ 175.773973][ T8389] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.955367][ T8403] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 175.984032][ T8404] netlink: 'syz.3.694': attribute type 29 has an invalid length. [ 176.011471][ T8400] netlink: 'syz.3.694': attribute type 29 has an invalid length. [ 176.031598][ T8400] netlink: 500 bytes leftover after parsing attributes in process `syz.3.694'. [ 176.127438][ T8408] netlink: 'syz.1.696': attribute type 1 has an invalid length. [ 176.150086][ T8041] veth0_vlan: entered promiscuous mode [ 176.165860][ T8408] netlink: 224 bytes leftover after parsing attributes in process `syz.1.696'. [ 176.180891][ T8041] veth1_vlan: entered promiscuous mode [ 176.313862][ T8041] veth0_macvtap: entered promiscuous mode [ 176.356167][ T8041] veth1_macvtap: entered promiscuous mode [ 176.363277][ T8415] netlink: 'syz.4.699': attribute type 10 has an invalid length. [ 176.413382][ T8415] .: (slave batadv0): Error -22 calling dev_set_mtu [ 176.486317][ T8041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.493762][ T8420] netlink: 'syz.3.701': attribute type 1 has an invalid length. [ 176.530719][ T8041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.601436][ T8041] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.615533][ T8041] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.637743][ T8041] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.653654][ T8041] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.710738][ T8432] netlink: 'syz.3.704': attribute type 23 has an invalid length. [ 177.030440][ T8441] xt_socket: unknown flags 0x2 [ 177.038322][ T8441] siw: device registration error -23 [ 177.240538][ T8452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.710'. [ 177.250805][ T8452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.710'. [ 177.288386][ T8450] netlink: 'syz.4.709': attribute type 1 has an invalid length. [ 177.330750][ T8456] netlink: 100 bytes leftover after parsing attributes in process `syz.2.712'. [ 178.648861][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.698537][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.804819][ T4405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.832391][ T4405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.911177][ T8467] netlink: 104 bytes leftover after parsing attributes in process `syz.1.715'. [ 178.986794][ T8474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.717'. [ 179.061116][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.720'. [ 179.091180][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.720'. [ 179.108784][ T8480] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.719'. [ 179.135801][ T8480] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 179.439815][ T8497] netlink: 104 bytes leftover after parsing attributes in process `syz.4.724'. [ 179.486352][ T8504] netlink: 104 bytes leftover after parsing attributes in process `syz.4.724'. [ 179.521760][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.725'. [ 179.537168][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.725'. [ 179.546876][ T8502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.725'. [ 179.772893][ T8516] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 179.867782][ T8525] openvswitch: netlink: Message has 3 unknown bytes. [ 179.908064][ T8525] openvswitch: netlink: Actions may not be safe on all matching packets [ 180.066997][ T8523] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 180.841810][ T8571] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 181.483145][ T30] audit: type=1800 audit(1747775244.218:4): pid=8599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.749" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=39 res=0 errno=0 [ 181.896621][ T8606] netlink: 'syz.1.750': attribute type 8 has an invalid length. [ 183.468026][ T8627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.693249][ T8627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.110399][ T8657] __nla_validate_parse: 60 callbacks suppressed [ 184.110420][ T8657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.765'. [ 184.141327][ T8654] netlink: 'syz.4.764': attribute type 4 has an invalid length. [ 184.574495][ T8689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.769'. [ 184.625366][ T8690] netlink: 'syz.5.771': attribute type 4 has an invalid length. [ 184.638965][ T8691] x_tables: duplicate underflow at hook 2 [ 186.658897][ T8723] trusted_key: syz.5.782 sent an empty control message without MSG_MORE. [ 187.478662][ T8768] gtp0: entered promiscuous mode [ 187.488021][ T8768] gtp0: entered allmulticast mode [ 187.507418][ T8768] netlink: 'syz.2.791': attribute type 4 has an invalid length. [ 187.559130][ T8770] netlink: 'syz.2.791': attribute type 4 has an invalid length. [ 187.630095][ T8773] netlink: 44 bytes leftover after parsing attributes in process `syz.1.792'. [ 187.665047][ T8773] netlink: 21 bytes leftover after parsing attributes in process `syz.1.792'. [ 187.726578][ T8773] netlink: 21 bytes leftover after parsing attributes in process `syz.1.792'. [ 188.093387][ T8793] block nbd0: server does not support multiple connections per device. [ 188.132796][ T8793] block nbd0: shutting down sockets [ 188.209100][ T8798] sctp: [Deprecated]: syz.5.796 (pid 8798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 188.209100][ T8798] Use struct sctp_sack_info instead [ 188.502781][ T8807] netlink: 168 bytes leftover after parsing attributes in process `syz.1.800'. [ 188.879527][ T8833] netlink: 'syz.1.805': attribute type 12 has an invalid length. [ 188.925444][ T8836] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 189.495569][ T8860] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 190.828334][ T8881] netlink: 112 bytes leftover after parsing attributes in process `syz.4.821'. [ 190.904788][ T8882] netlink: 'syz.4.821': attribute type 9 has an invalid length. [ 191.334898][ T8897] netlink: 'syz.4.826': attribute type 8 has an invalid length. [ 191.380059][ T8901] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20003 [ 191.405029][ T8902] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20003 [ 191.644459][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.827'. [ 192.060137][ T8888] vxcan1 speed is unknown, defaulting to 1000 [ 193.546774][ T8954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.772522][ T8980] netlink: 'syz.4.846': attribute type 4 has an invalid length. [ 194.813607][ T8980] netlink: 17 bytes leftover after parsing attributes in process `syz.4.846'. [ 194.922386][ T8988] netlink: 32 bytes leftover after parsing attributes in process `syz.2.848'. [ 195.120475][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 195.133866][ T8993] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 195.147453][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.850'. [ 195.256597][ T9000] netlink: 72 bytes leftover after parsing attributes in process `syz.4.850'. [ 195.291730][ T8993] xt_CT: No such helper "snmp" [ 195.537258][ T9013] netlink: 68 bytes leftover after parsing attributes in process `syz.5.856'. [ 195.586377][ T9016] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 195.866827][ T9030] pim6reg: entered allmulticast mode [ 195.915447][ T9032] pim6reg: left allmulticast mode [ 196.009258][ T9036] netlink: 'syz.2.862': attribute type 1 has an invalid length. [ 196.016993][ T9036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.862'. [ 196.185075][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'. [ 196.231355][ T9047] netlink: 'syz.3.864': attribute type 3 has an invalid length. [ 196.380692][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 196.388842][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 196.406884][ T9056] x_tables: duplicate entry at hook 1 [ 196.754856][ T9068] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 196.769673][ T9070] sctp: [Deprecated]: syz.2.871 (pid 9070) Use of int in maxseg socket option. [ 196.769673][ T9070] Use struct sctp_assoc_value instead [ 197.626879][ T9111] C: renamed from lo (while UP) [ 197.663348][ T9111] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 197.941666][ T9121] openvswitch: netlink: Missing key (keys=40, expected=100) [ 198.301490][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'. [ 198.311077][ T9131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 198.787724][ T9145] Bluetooth: MGMT ver 1.23 [ 198.848096][ T9153] sctp: [Deprecated]: syz.4.892 (pid 9153) Use of int in maxseg socket option. [ 198.848096][ T9153] Use struct sctp_assoc_value instead [ 199.007627][ T9153] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 199.073802][ T9161] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 199.541179][ T9185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.551309][ T9185] Cannot find set identified by id 752 to match [ 199.960199][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'. [ 200.344596][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.911'. [ 200.365498][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.911'. [ 200.428612][ T9228] vxcan1: Master is either lo or non-ether device [ 200.648151][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.915'. [ 201.031341][ T9255] netlink: 56 bytes leftover after parsing attributes in process `syz.1.920'. [ 201.060670][ T9257] vlan1: entered allmulticast mode [ 201.157411][ T9259] netlink: 'syz.1.921': attribute type 19 has an invalid length. [ 201.362970][ T9265] net veth1_virt_wifi : renamed from virt_wifi0 [ 201.931744][ T9290] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 202.018112][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'. [ 202.051063][ T9295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.934'. [ 202.911364][ T9343] bridge: RTM_NEWNEIGH with invalid ether address [ 203.055097][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'. [ 203.076480][ T9348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.946'. [ 203.156857][ T9352] bond2: entered promiscuous mode [ 203.163029][ T9352] bond2: entered allmulticast mode [ 203.169862][ T9352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.334797][ T9363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.454961][ T9371] set match dimension is over the limit! [ 203.656148][ T9379] netlink: 48 bytes leftover after parsing attributes in process `syz.5.953'. [ 203.904740][ T9390] netlink: 'syz.1.956': attribute type 10 has an invalid length. [ 203.944942][ T9390] netlink: 40 bytes leftover after parsing attributes in process `syz.1.956'. [ 204.116521][ T9390] team0: Port device geneve0 added [ 204.151881][ T9402] bond0: entered promiscuous mode [ 204.157167][ T9402] geneve2: entered promiscuous mode [ 204.180954][ T9402] bond0: left promiscuous mode [ 204.199277][ T9402] geneve2: left promiscuous mode [ 204.348167][ T9414] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 204.368676][ T9417] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 204.537619][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.962'. [ 204.547388][ T9417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.657645][ T9417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.739986][ T9414] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 204.783693][ T9429] tipc: Started in network mode [ 204.796838][ T9429] tipc: Node identity 56ebffd40925, cluster identity 6 [ 204.806263][ T9429] tipc: Enabled bearer , priority 0 [ 204.816950][ T9429] syzkaller0: entered promiscuous mode [ 204.823506][ T9429] syzkaller0: entered allmulticast mode [ 204.834169][ T9429] tipc: Resetting bearer [ 204.942797][ T9428] tipc: Resetting bearer [ 205.020266][ T9428] tipc: Disabling bearer [ 205.045545][ T9434] netlink: 'syz.5.965': attribute type 6 has an invalid length. [ 205.373347][ T9454] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.968'. [ 205.555526][ T9461] netlink: 'syz.4.971': attribute type 29 has an invalid length. [ 205.587230][ T9461] netlink: 'syz.4.971': attribute type 29 has an invalid length. [ 205.611067][ T9461] netlink: 'syz.4.971': attribute type 29 has an invalid length. [ 205.678174][ T9470] pim6reg1: entered promiscuous mode [ 205.708082][ T9470] pim6reg1: entered allmulticast mode [ 205.799382][ T9477] netlink: 80 bytes leftover after parsing attributes in process `syz.1.974'. [ 205.885716][ T9484] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 205.992910][ T975] IPVS: starting estimator thread 0... [ 206.088664][ T9489] IPVS: using max 28 ests per chain, 67200 per kthread [ 206.283218][ T9505] IPv6: sit1: Disabled Multicast RS [ 206.291844][ T9505] sit1: entered allmulticast mode [ 206.376842][ T9506] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 206.792426][ T9525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.990'. [ 207.053047][ T9533] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.993'. [ 207.430167][ T9551] netlink: 'syz.2.1000': attribute type 28 has an invalid length. [ 207.488599][ T9551] netlink: 'syz.2.1000': attribute type 3 has an invalid length. [ 207.513301][ T9551] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1000'. [ 207.546384][ T9560] netlink: 'syz.5.1003': attribute type 10 has an invalid length. [ 207.571586][ T9560] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1003'. [ 207.736065][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1005'. [ 207.842669][ T9569] netlink: 'syz.3.1007': attribute type 39 has an invalid length. [ 208.313706][ T9587] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1013'. [ 208.323391][ T9587] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1013'. [ 208.359394][ T9591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1014'. [ 208.475267][ T9595] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1016'. [ 209.268033][ T9631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1026'. [ 211.457157][ T9691] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 211.459830][ T9689] netlink: 'syz.4.1044': attribute type 10 has an invalid length. [ 211.875006][ T9713] __nla_validate_parse: 6 callbacks suppressed [ 211.875027][ T9713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1049'. [ 212.847925][ T9761] netlink: 'syz.5.1063': attribute type 1 has an invalid length. [ 212.937772][ T9768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1064'. [ 213.052179][ T9769] bond1: (slave gretap1): making interface the new active one [ 213.075792][ T9769] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 213.102378][ T9733] vxcan1 speed is unknown, defaulting to 1000 [ 213.369824][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1067'. [ 213.733988][ T9792] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1071'. [ 213.754742][ T9797] xt_hashlimit: invalid rate [ 213.755378][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'. [ 213.792603][ T9797] netlink: 'syz.1.1073': attribute type 11 has an invalid length. [ 213.822003][ T9797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1073'. [ 214.148217][ T9813] netlink: 'syz.5.1077': attribute type 24 has an invalid length. [ 215.129718][ T9853] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 215.237655][ T9862] sctp: [Deprecated]: syz.1.1085 (pid 9862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.237655][ T9862] Use struct sctp_sack_info instead [ 215.947831][ T9876] netlink: 'syz.5.1089': attribute type 11 has an invalid length. [ 215.966764][ T9876] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1089'. [ 216.257130][ T9888] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 216.313195][ T9887] gtp1: entered promiscuous mode [ 216.330973][ T9887] gtp1: entered allmulticast mode [ 216.594557][ T9901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1097'. [ 216.621750][ T9903] netlink: 'syz.3.1098': attribute type 12 has an invalid length. [ 216.636255][ T9903] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1098'. [ 216.647524][ T9905] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1099'. [ 216.720355][ T9908] sctp: [Deprecated]: syz.5.1099 (pid 9908) Use of int in maxseg socket option. [ 216.720355][ T9908] Use struct sctp_assoc_value instead [ 217.055107][ T9925] netlink: 'syz.2.1106': attribute type 1 has an invalid length. [ 217.064454][ T9925] __nla_validate_parse: 2 callbacks suppressed [ 217.064472][ T9925] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1106'. [ 217.094816][ T9927] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1107'. [ 217.340392][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e720c00: rx timeout, send abort [ 217.340915][ T5139] Bluetooth: hci0: command 0x0406 tx timeout [ 217.355325][ T5139] Bluetooth: hci2: command 0x0406 tx timeout [ 217.361962][ T5139] Bluetooth: hci1: command 0x0406 tx timeout [ 217.368029][ T5139] Bluetooth: hci3: command 0x0406 tx timeout [ 217.372895][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1111'. [ 217.617819][ T9947] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1113'. [ 217.646409][ T9947] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1113'. [ 217.837109][ T9958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.849857][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e720c00: abort rx timeout. Force session deactivation [ 217.952513][ T9968] C: entered allmulticast mode [ 217.957491][ T9968] C: left allmulticast mode [ 217.971588][ T9963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1118'. [ 218.086946][ T9974] delete_channel: no stack [ 218.695614][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1132'. [ 218.926796][T10022] syz_tun: entered allmulticast mode [ 219.150247][T10030] syz_tun: left allmulticast mode [ 219.446497][T10046] ip6t_srh: unknown srh invflags 5F00 [ 219.474867][T10047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1141'. [ 219.696954][T10055] netlink: 'syz.5.1145': attribute type 1 has an invalid length. [ 219.823663][T10055] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.841771][T10060] vlan3: entered promiscuous mode [ 219.855338][T10060] bond2: entered promiscuous mode [ 219.870141][T10060] vlan3: entered allmulticast mode [ 219.886602][T10060] bond2: entered allmulticast mode [ 219.946209][T10067] netlink: 'syz.4.1149': attribute type 2 has an invalid length. [ 219.960237][T10067] netlink: 'syz.4.1149': attribute type 2 has an invalid length. [ 220.005173][T10064] bond2: (slave gretap2): making interface the new active one [ 220.044820][T10064] gretap2: entered promiscuous mode [ 220.056054][T10064] gretap2: entered allmulticast mode [ 220.066918][T10064] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 220.191594][T10076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1151'. [ 220.203377][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1152'. [ 220.311478][T10074] netlink: 'syz.4.1152': attribute type 6 has an invalid length. [ 220.328627][T10074] netlink: 'syz.4.1152': attribute type 5 has an invalid length. [ 220.380376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.397501][T10074] netlink: 'syz.4.1152': attribute type 39 has an invalid length. [ 220.457736][T10072] syzkaller1: entered promiscuous mode [ 220.492555][T10072] syzkaller1: entered allmulticast mode [ 220.557848][T10097] ipt_REJECT: TCP_RESET invalid for non-tcp [ 220.910394][T10105] delete_channel: no stack [ 221.119953][T10117] netlink: 'syz.1.1163': attribute type 30 has an invalid length. [ 221.157280][T10117] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.166969][T10117] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.176989][T10117] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.186711][T10117] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.218851][T10117] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.228477][T10117] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.237923][T10117] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.247867][T10117] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.562225][T10137] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 221.585782][T10137] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 221.654465][T10140] xfrm2: entered promiscuous mode [ 221.676354][T10140] xfrm2: entered allmulticast mode [ 221.707335][T10141] netlink: 'syz.4.1168': attribute type 4 has an invalid length. [ 221.843462][T10145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.002840][T10149] xt_hashlimit: overflow, rate too high: 0 [ 222.017693][T10132] vxcan1 speed is unknown, defaulting to 1000 [ 222.358094][T10167] __nla_validate_parse: 12 callbacks suppressed [ 222.358114][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1178'. [ 222.390188][T10167] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1178'. [ 222.477465][T10169] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1179'. [ 222.687989][T10176] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 222.735080][T10177] : entered promiscuous mode [ 222.921788][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1186'. [ 223.350249][T10200] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 223.555898][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'. [ 223.672334][T10212] geneve2: entered promiscuous mode [ 223.677618][T10212] geneve2: entered allmulticast mode [ 223.769159][T10216] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 223.790213][T10220] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1199'. [ 223.822844][T10220] netlink: 'syz.3.1199': attribute type 21 has an invalid length. [ 223.867094][T10220] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1199'. [ 223.887555][T10222] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1199'. [ 223.908223][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'. [ 223.928205][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'. [ 223.949405][T10227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.968352][T10227] batadv_slave_1: entered promiscuous mode [ 223.974858][T10227] batadv_slave_1: entered allmulticast mode [ 224.464997][ T5918] IPVS: starting estimator thread 0... [ 224.578633][T10252] IPVS: using max 28 ests per chain, 67200 per kthread [ 225.659793][T10308] netlink: 'syz.5.1223': attribute type 19 has an invalid length. [ 225.725353][T10308] SET target dimension over the limit! [ 225.968649][T10298] af_packet: tpacket_rcv: packet too big, clamped from 100 to 4294967272. macoff=96 [ 226.107120][T10320] bridge0: port 1(veth0_to_bridge) entered blocking state [ 226.135827][T10320] bridge0: port 1(veth0_to_bridge) entered disabled state [ 226.169477][T10320] veth0_to_bridge: entered allmulticast mode [ 226.219248][T10324] openvswitch: netlink: Message has 4 unknown bytes. [ 226.261133][T10320] veth0_to_bridge: entered promiscuous mode [ 226.640671][T10338] xt_hashlimit: invalid interval [ 227.041405][T10343] dvmrp0: entered allmulticast mode [ 227.334555][T10354] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 227.439500][T10358] __nla_validate_parse: 11 callbacks suppressed [ 227.439522][T10358] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1238'. [ 227.744748][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1242'. [ 227.764332][T10367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1242'. [ 227.773696][T10366] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 227.809577][T10367] netlink: 'syz.2.1242': attribute type 15 has an invalid length. [ 228.052614][T10382] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 228.219941][T10389] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 229.203700][T10422] netlink: 'syz.3.1260': attribute type 10 has an invalid length. [ 229.295643][T10422] team0: Port device veth0_macvtap added [ 229.768672][T10454] IPVS: ip_vs_add_dest(): server weight less than zero [ 229.995020][T10461] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 230.263668][T10477] netlink: 212364 bytes leftover after parsing attributes in process `syz.5.1273'. [ 230.276600][T10477] openvswitch: netlink: Message has 5 unknown bytes. [ 230.519972][T10484] netlink: 'syz.5.1276': attribute type 4 has an invalid length. [ 230.520032][T10483] netlink: 'syz.5.1276': attribute type 4 has an invalid length. [ 230.875035][T10500] macsec1: entered allmulticast mode [ 230.892867][T10500] macvlan0: entered allmulticast mode [ 230.907531][T10500] veth1_vlan: entered allmulticast mode [ 231.318275][T10518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1287'. [ 231.520114][T10529] pimreg: entered allmulticast mode [ 231.606155][T10533] netlink: 'syz.4.1291': attribute type 7 has an invalid length. [ 231.618814][T10535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1292'. [ 231.688214][T10537] netlink: 'syz.2.1294': attribute type 1 has an invalid length. [ 231.697963][T10537] netlink: 'syz.2.1294': attribute type 2 has an invalid length. [ 231.708134][T10537] netlink: 'syz.2.1294': attribute type 1 has an invalid length. [ 231.934736][T10550] x_tables: ip6_tables: srh.0 match: invalid size 16 (kernel) != (user) 112 [ 231.958623][T10552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1296'. [ 232.296966][ T8235] udevd[8235]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 232.656501][T10585] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1309'. [ 232.685716][T10585] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 232.857396][T10592] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 233.144857][T10606] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 233.230908][T10611] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1318'. [ 233.273373][T10611] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1318'. [ 233.290218][T10606] bridge0: port 3(gretap0) entered blocking state [ 233.304763][T10606] bridge0: port 3(gretap0) entered disabled state [ 233.323632][T10606] gretap0: entered allmulticast mode [ 233.335154][T10606] gretap0: entered promiscuous mode [ 233.343985][T10606] bridge0: port 3(gretap0) entered blocking state [ 233.350641][T10606] bridge0: port 3(gretap0) entered forwarding state [ 233.642489][T10589] vxcan1 speed is unknown, defaulting to 1000 [ 233.653054][T10625] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1322'. [ 233.774451][T10631] netlink: zone id is out of range [ 234.093555][T10635] netlink: 'syz.1.1325': attribute type 10 has an invalid length. [ 234.131898][T10635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.190558][T10635] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 234.560396][T10643] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1329'. [ 234.752553][T10646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1330'. [ 234.925043][T10590] vxcan1 speed is unknown, defaulting to 1000 [ 235.109193][T10662] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 235.141207][T10662] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1334'. [ 235.144980][T10660] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1333'. [ 235.349698][T10669] netlink: 'syz.2.1336': attribute type 1 has an invalid length. [ 235.384115][T10669] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1336'. [ 235.555184][T10660] . (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.598728][T10660] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.627389][T10660] . (unregistering): (slave veth0_to_bond): Releasing backup interface [ 235.652393][T10660] . (unregistering): Released all slaves [ 235.738987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.013181][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1339'. [ 237.294009][T10726] nbd: must specify an index to disconnect [ 237.368679][ T5832] Bluetooth: hci4: link tx timeout [ 237.373895][ T5832] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 237.485277][T10732] netlink: 'syz.4.1357': attribute type 8 has an invalid length. [ 237.704925][T10763] sctp: [Deprecated]: syz.2.1360 (pid 10763) Use of int in max_burst socket option deprecated. [ 237.704925][T10763] Use struct sctp_assoc_value instead [ 237.805807][T10767] __nla_validate_parse: 5 callbacks suppressed [ 237.805828][T10767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1360'. [ 237.865828][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1361'. [ 237.906116][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1361'. [ 237.944220][T10767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1360'. [ 238.039480][T10770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1360'. [ 238.056950][T10773] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 238.080251][T10773] team0: Device ipvlan2 is already an upper device of the team interface [ 238.099147][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'. [ 238.459032][T10787] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1365'. [ 238.560283][T10790] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1367'. [ 238.785627][T10794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1368'. [ 238.830935][T10794] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1368'. [ 238.872926][T10794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.931181][T10794] netlink: 'syz.2.1368': attribute type 33 has an invalid length. [ 239.419937][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 239.920354][T10835] netlink: 'syz.3.1374': attribute type 10 has an invalid length. [ 239.979503][T10839] netlink: 'syz.5.1377': attribute type 14 has an invalid length. [ 240.297155][T10855] nftables ruleset with unbound set [ 240.325867][T10853] 8021q: VLANs not supported on ip6gre0 [ 240.657351][T10871] netlink: 'syz.2.1388': attribute type 1 has an invalid length. [ 240.732945][T10875] netlink: 'syz.4.1391': attribute type 10 has an invalid length. [ 240.772219][T10877] netlink: 'syz.3.1390': attribute type 142 has an invalid length. [ 240.797435][T10875] team0: Device veth0_macvtap failed to register rx_handler [ 241.175431][T10892] atomic_op ffff888023e5f198 conn xmit_atomic 0000000000000000 [ 241.612245][T10914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.682501][T10960] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 242.716094][T10960] netlink: 'syz.1.1411': attribute type 3 has an invalid length. [ 242.780230][T10960] netlink: 'syz.1.1411': attribute type 3 has an invalid length. [ 242.839841][T10969] netlink: 'syz.4.1413': attribute type 2 has an invalid length. [ 242.890146][T10969] netlink: 'syz.4.1413': attribute type 1 has an invalid length. [ 242.936358][T10978] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 243.076873][T10982] x_tables: duplicate underflow at hook 1 [ 243.134310][T10986] Bluetooth: MGMT ver 1.23 [ 243.134708][T10991] __nla_validate_parse: 12 callbacks suppressed [ 243.134727][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1419'. [ 243.173775][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1419'. [ 243.266418][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1419'. [ 243.316171][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1419'. [ 243.537964][T10998] netlink: 'syz.4.1420': attribute type 1 has an invalid length. [ 243.570239][T10998] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1420'. [ 244.019456][T11028] netlink: 'syz.1.1430': attribute type 8 has an invalid length. [ 244.352679][T11048] x_tables: duplicate underflow at hook 1 [ 244.427325][T11054] netlink: 'syz.2.1435': attribute type 3 has an invalid length. [ 244.591390][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1433'. [ 244.776932][T11062] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1436'. [ 244.802410][T11066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1437'. [ 245.171316][T11083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.465154][T11099] netlink: 'syz.1.1444': attribute type 13 has an invalid length. [ 245.527169][T11099] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1444'. [ 245.765286][T11099] net veth1_virt_wifi : refused to change device tx_queue_len [ 245.863273][T11121] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1451'. [ 246.089103][T11132] IPv6: sit1: Disabled Multicast RS [ 246.282552][T11141] netlink: 'syz.4.1456': attribute type 13 has an invalid length. [ 246.295050][T11141] macvtap0: entered promiscuous mode [ 246.305404][T11141] macvtap0: refused to change device tx_queue_len [ 246.384980][T11145] netlink: 'syz.5.1457': attribute type 21 has an invalid length. [ 246.423541][T11145] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.372059][T11192] openvswitch: netlink: Missing key (keys=40, expected=80) [ 247.460462][T11195] openvswitch: netlink: Missing key (keys=40, expected=80) [ 247.958258][T11216] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 248.053624][T11223] netdevsim netdevsim5: Direct firmware load for . [ 248.053624][T11223] failed with error -2 [ 248.090424][T11226] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 248.108169][T11223] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 248.108169][T11223] [ 249.193250][T11268] validate_nla: 1 callbacks suppressed [ 249.193271][T11268] netlink: 'syz.5.1488': attribute type 1 has an invalid length. [ 249.232812][T11268] __nla_validate_parse: 6 callbacks suppressed [ 249.232835][T11268] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1488'. [ 249.263960][T11272] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 249.369872][T11272] bond3: entered promiscuous mode [ 249.375191][T11272] bond3: entered allmulticast mode [ 249.382152][T11272] 8021q: adding VLAN 0 to HW filter on device bond3 [ 249.764718][T11291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1494'. [ 249.940836][T11294] netlink: 'syz.2.1495': attribute type 10 has an invalid length. [ 250.070713][T11294] team0: Device veth0_macvtap failed to register rx_handler [ 250.147387][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1496'. [ 250.371317][T11307] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1499'. [ 250.806941][T11325] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.906463][T11336] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 251.179741][T11348] netlink: 'syz.1.1510': attribute type 10 has an invalid length. [ 251.297068][T11348] team0: Device veth0_macvtap failed to register rx_handler [ 251.457428][T11361] netlink: 'syz.2.1512': attribute type 1 has an invalid length. [ 251.499691][ T5832] Bluetooth: hci5: command tx timeout [ 251.516910][T11361] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1512'. [ 251.578620][T11361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1512'. [ 251.697732][T11371] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 251.706165][T11369] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 251.715458][T11369] netlink: 'syz.4.1514': attribute type 2 has an invalid length. [ 251.724251][T11371] netlink: 'syz.4.1514': attribute type 2 has an invalid length. [ 251.735782][T11369] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 251.790035][T11371] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 251.827774][T11369] netlink: 1156 bytes leftover after parsing attributes in process `syz.4.1514'. [ 251.848101][T11371] netlink: 1156 bytes leftover after parsing attributes in process `syz.4.1514'. [ 252.123198][T11394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1521'. [ 252.134725][T11394] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 252.400730][T11400] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1523'. [ 252.481551][T11404] team0: Device veth0_macvtap failed to register rx_handler [ 253.703781][T11448] xt_l2tp: missing protocol rule (udp|l2tpip) [ 254.219769][T11448] team0 (unregistering): Port device team_slave_0 removed [ 254.265994][T11448] team0 (unregistering): Port device team_slave_1 removed [ 254.281831][T11448] team0 (unregistering): Port device veth0_macvtap removed [ 254.412215][T11462] team0: Device veth0_macvtap failed to register rx_handler [ 254.522536][T11474] __nla_validate_parse: 9 callbacks suppressed [ 254.522558][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1542'. [ 254.600681][T11476] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1541'. [ 254.633916][T11476] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1541'. [ 254.793578][T11484] syzkaller0: create flow: hash 579852558 index 1 [ 254.865263][T11485] bridge0: port 3(vlan3) entered blocking state [ 254.872344][T11485] bridge0: port 3(vlan3) entered disabled state [ 254.880907][T11485] vlan3: entered allmulticast mode [ 254.887005][T11485] bridge0: entered allmulticast mode [ 254.907315][T11485] vlan3: left allmulticast mode [ 254.916281][T11485] bridge0: left allmulticast mode [ 254.951443][T11496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1548'. [ 254.991427][T11490] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 255.294179][T11490] syzkaller0: delete flow: hash 579852558 index 1 [ 255.613769][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1553'. [ 255.682906][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1553'. [ 255.694075][T11521] validate_nla: 5 callbacks suppressed [ 255.694097][T11521] netlink: 'syz.2.1555': attribute type 10 has an invalid length. [ 257.225081][T11521] team0: Device veth0_macvtap failed to register rx_handler [ 257.424458][T11527] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1557'. [ 257.453050][T11528] tap0: tun_chr_ioctl cmd 1074025678 [ 257.489210][T11528] tap0: group set to 0 [ 257.570574][T11539] xt_bpf: check failed: parse error [ 257.803031][T11552] netlink: 'syz.2.1564': attribute type 1 has an invalid length. [ 257.832079][T11552] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1564'. [ 258.009700][T11552] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1564'. [ 258.109689][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1567'. [ 258.166201][T11566] netlink: 'syz.1.1568': attribute type 4 has an invalid length. [ 261.379619][ T5832] Bluetooth: hci5: link tx timeout [ 261.386343][ T5832] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 261.396058][ T5832] Bluetooth: hci5: link tx timeout [ 261.403021][ T5832] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 261.704075][ T5832] Bluetooth: hci5: link tx timeout [ 261.709838][ T5832] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 261.723143][ T5832] Bluetooth: hci5: link tx timeout [ 261.731858][ T5832] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 261.741173][ T5832] Bluetooth: hci5: link tx timeout [ 261.746935][ T5832] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 261.755646][ T5832] Bluetooth: hci5: link tx timeout [ 261.765934][ T5832] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 261.838811][T11648] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 262.112600][ T5832] Bluetooth: hci5: link tx timeout [ 262.117988][ T5832] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 262.126583][ T5832] Bluetooth: hci5: link tx timeout [ 262.132421][ T5832] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 262.211382][ T5832] Bluetooth: hci5: link tx timeout [ 262.217284][ T5832] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 262.225783][ T5832] Bluetooth: hci5: link tx timeout [ 262.231758][ T5832] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 262.315836][T11670] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 262.520192][T11680] netlink: 'syz.4.1599': attribute type 1 has an invalid length. [ 263.195650][T11727] __nla_validate_parse: 7 callbacks suppressed [ 263.195675][T11727] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1610'. [ 263.264152][ T5832] Bluetooth: hci5: link tx timeout [ 263.273833][ T5832] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 263.280397][T11734] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1612'. [ 263.282665][ T5832] Bluetooth: hci5: link tx timeout [ 263.297019][ T5832] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 263.418874][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 263.709785][T11752] .: renamed from bond0 (while UP) [ 264.006202][T11765] netlink: 'syz.1.1619': attribute type 23 has an invalid length. [ 264.021851][T11766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 264.625338][T11793] netlink: 'syz.3.1624': attribute type 4 has an invalid length. [ 264.655000][T11792] netlink: 'syz.2.1623': attribute type 3 has an invalid length. [ 264.719851][T11792] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1623'. [ 265.445087][T11824] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1631'. [ 265.498636][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 265.598354][T11838] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 265.909967][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1636'. [ 265.944323][T11847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1636'. [ 266.002198][T11852] netlink: 'syz.2.1638': attribute type 1 has an invalid length. [ 266.324905][T11865] 8021q: VLANs not supported on tunl0 [ 267.510153][T11916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'. [ 267.555106][T11919] xt_nat: multiple ranges no longer supported [ 267.833193][T11930] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:5 [ 267.944907][T11938] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1656'. [ 268.066764][T11942] x_tables: duplicate underflow at hook 2 [ 268.553379][T11970] netlink: 'syz.2.1665': attribute type 23 has an invalid length. [ 268.730377][T11973] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1667'. [ 268.835126][T11980] netlink: 696 bytes leftover after parsing attributes in process `syz.4.1670'. [ 268.863888][T11980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1670'. [ 269.385439][T12003] openvswitch: netlink: Key type 30 is not supported [ 269.524986][T12006] syzkaller0: entered promiscuous mode [ 269.530716][T12006] syzkaller0: entered allmulticast mode [ 269.744303][T12021] netlink: 'syz.3.1681': attribute type 3 has an invalid length. [ 269.752243][T11986] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1671'. [ 269.825642][T11987] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1671'. [ 270.196283][T12041] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1686'. [ 270.701069][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1696'. [ 271.115077][T12084] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1701'. [ 271.272351][T12086] veth3: entered allmulticast mode [ 271.325896][T12091] xt_CT: You must specify a L4 protocol and not use inversions on it [ 271.448965][T12096] netlink: 'syz.4.1705': attribute type 10 has an invalid length. [ 271.476909][T12095] syzkaller1: entered promiscuous mode [ 271.483008][T12095] syzkaller1: entered allmulticast mode [ 271.519408][T12099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.529134][T12099] netlink: 'syz.2.1707': attribute type 39 has an invalid length. [ 271.588005][T12061] vxcan1 speed is unknown, defaulting to 1000 [ 271.854811][T12102] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1708'. [ 271.889133][T12102] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1708'. [ 272.420262][T12122] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 272.821581][T12131] netlink: 'syz.4.1716': attribute type 1 has an invalid length. [ 273.157416][T12149] netlink: 'syz.5.1720': attribute type 1 has an invalid length. [ 273.356245][T12143] syzkaller1: entered promiscuous mode [ 273.374767][T12143] syzkaller1: entered allmulticast mode [ 274.381252][ T5842] block nbd0: Receive control failed (result -32) [ 274.837586][T12218] veth0: entered promiscuous mode [ 274.885814][T12218] __nla_validate_parse: 3 callbacks suppressed [ 274.885837][T12218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1738'. [ 274.968991][T12218] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1738'. [ 275.052751][T12217] veth0: left promiscuous mode [ 275.315306][T12241] netlink: 'syz.1.1742': attribute type 1 has an invalid length. [ 275.515518][T12247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1747'. [ 275.552118][T12252] netlink: 'syz.4.1746': attribute type 10 has an invalid length. [ 275.571952][T12254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1745'. [ 275.592024][T12252] veth0_vlan: entered allmulticast mode [ 275.601730][T12254] openvswitch: netlink: Flow actions attr not present in new flow. [ 275.621788][T12258] netlink: 'syz.4.1746': attribute type 1 has an invalid length. [ 275.632927][T12258] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1746'. [ 275.830044][T12252] veth0_vlan: left promiscuous mode [ 275.866354][T12252] veth0_vlan: entered promiscuous mode [ 275.908236][T12252] team0: Device veth0_vlan failed to register rx_handler [ 276.008672][T12258] batman_adv: batadv0: Adding interface: dummy0 [ 276.029038][T12258] batman_adv: batadv0: Interface activated: dummy0 [ 276.279537][T12272] syz.3.1750 (12272) used greatest stack depth: 18168 bytes left [ 276.407234][T12288] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1752'. [ 276.531977][T12295] delete_channel: no stack [ 276.725108][T12275] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1752'. [ 276.995851][T12307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.275483][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 277.309600][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 277.379117][T12321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1761'. [ 278.702645][T12390] netlink: 'syz.5.1779': attribute type 13 has an invalid length. [ 278.766682][T12390] macvtap0: entered promiscuous mode [ 278.806668][T12390] macvtap0: refused to change device tx_queue_len [ 279.065015][T12407] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 279.817971][T12451] netlink: 'syz.2.1802': attribute type 23 has an invalid length. [ 279.972535][T12460] __nla_validate_parse: 17 callbacks suppressed [ 279.972557][T12460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1805'. [ 280.200468][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1808'. [ 280.279284][T12478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1806'. [ 280.326396][T12478] tc_dump_action: action bad kind [ 280.363235][T12483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1811'. [ 280.386287][T12467] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 280.470779][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1806'. [ 280.675053][T12501] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1815'. [ 280.714864][T12501] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1815'. [ 280.738193][T12501] netlink: 31 bytes leftover after parsing attributes in process `syz.5.1815'. [ 280.752464][T12501] netlink: 'syz.5.1815': attribute type 2 has an invalid length. [ 280.761337][T12501] netlink: 31 bytes leftover after parsing attributes in process `syz.5.1815'. [ 280.805425][T12508] wireguard: wg1: Could not create IPv4 socket [ 281.114781][T12523] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1823'. [ 281.723495][T12556] netlink: 'syz.2.1830': attribute type 4 has an invalid length. [ 282.378986][T10757] wlan0: Trigger new scan to find an IBSS to join [ 282.488949][T12591] netlink: 'syz.4.1840': attribute type 1 has an invalid length. [ 282.606806][T12591] 8021q: adding VLAN 0 to HW filter on device bond7 [ 282.664912][T12595] bond7: (slave gretap1): making interface the new active one [ 282.691796][T12595] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 282.729195][T12596] netlink: 'syz.1.1841': attribute type 4 has an invalid length. [ 282.738237][T12599] bond7: entered promiscuous mode [ 282.745220][T12599] gretap1: entered promiscuous mode [ 282.753224][T12599] bond7: entered allmulticast mode [ 282.759333][T12599] gretap1: entered allmulticast mode [ 283.291504][T12625] netlink: 'syz.5.1850': attribute type 1 has an invalid length. [ 283.300724][T12625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.932812][T12654] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 285.038580][ T7431] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 285.349756][ T9827] wlan0: Trigger new scan to find an IBSS to join [ 285.952427][ T9827] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.270253][ T9827] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.346739][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.365442][ T9827] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.440709][ T9827] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.600625][ T9827] bridge_slave_1: left allmulticast mode [ 286.606744][ T9827] bridge_slave_1: left promiscuous mode [ 286.615498][ T9827] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.629587][ T9827] bridge_slave_0: left allmulticast mode [ 286.635564][ T9827] bridge_slave_0: left promiscuous mode [ 286.643307][ T9827] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.147192][ T9827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.160222][ T9827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.172468][ T9827] bond0 (unregistering): Released all slaves [ 287.188755][ T9827] bond1 (unregistering): Released all slaves [ 287.274713][ T9827] : left promiscuous mode [ 288.233539][ T9827] hsr_slave_0: left promiscuous mode [ 288.240299][ T9827] hsr_slave_1: left promiscuous mode [ 288.247132][ T9827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.254855][ T9827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.266621][ T9827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.274309][ T9827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.300158][ T9827] macvlan0: left allmulticast mode [ 288.305356][ T9827] veth1_vlan: left allmulticast mode [ 288.311107][ T9827] veth1_macvtap: left promiscuous mode [ 288.317187][ T9827] veth1_vlan: left promiscuous mode [ 288.696927][ T9827] vlan1 (unregistering): left allmulticast mode [ 289.800607][ T9827] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.906217][ T9827] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.015158][ T9827] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.111399][ T9827] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.343626][ T9827] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.410992][ T9827] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.494525][ T9827] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.573578][ T9827] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.772405][ T9827] bridge_slave_1: left allmulticast mode [ 290.778112][ T9827] bridge_slave_1: left promiscuous mode [ 290.785862][ T9827] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.796816][ T9827] bridge_slave_0: left allmulticast mode [ 290.803062][ T9827] bridge_slave_0: left promiscuous mode [ 290.809415][ T9827] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.826562][ T9827] gretap0: left allmulticast mode [ 290.831868][ T9827] gretap0: left promiscuous mode [ 290.837369][ T9827] bridge0: port 3(gretap0) entered disabled state [ 290.846949][ T9827] bridge_slave_1: left allmulticast mode [ 290.853103][ T9827] bridge_slave_1: left promiscuous mode [ 290.859209][ T9827] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.871865][ T9827] bridge_slave_0: left allmulticast mode [ 290.877545][ T9827] bridge_slave_0: left promiscuous mode [ 290.884856][ T9827] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.323909][ T9827] bond1 (unregistering): (slave gretap1): Releasing active interface [ 291.345798][ T9827] bond2 (unregistering): (slave gretap2): Releasing active interface [ 291.354191][ T9827] gretap2 (unregistering): left promiscuous mode [ 291.362519][ T9827] gretap2 (unregistering): left allmulticast mode [ 291.433356][ T9827] dvmrp0 (unregistering): left allmulticast mode [ 291.876093][ T9827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.886911][ T9827] bond0 (unregistering): Released all slaves [ 291.902779][ T9827] bond1 (unregistering): Released all slaves [ 292.017193][ T9827] bond2 (unregistering): Released all slaves [ 292.032190][ T9827] bond3 (unregistering): Released all slaves [ 292.049813][ T9827] bond4 (unregistering): Released all slaves [ 292.165465][ T9827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.176689][ T9827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.187516][ T9827] bond0 (unregistering): Released all slaves [ 292.203286][ T9827] bond1 (unregistering): Released all slaves [ 292.340738][ T9827] bond2 (unregistering): Released all slaves [ 292.450234][ T9827] bond3 (unregistering): Released all slaves [ 292.466644][ T9827] bond4 (unregistering): Released all slaves [ 292.482097][ T9827] bond5 (unregistering): Released all slaves [ 292.644815][ T9827] tipc: Disabling bearer [ 292.661635][ T9827] tipc: Left network mode [ 294.144763][ T9827] hsr_slave_0: left promiscuous mode [ 294.166366][ T9827] hsr_slave_1: left promiscuous mode [ 294.176807][ T9827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.186087][ T9827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.198204][ T9827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.206140][ T9827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.224760][ T9827] hsr_slave_0: left promiscuous mode [ 294.231705][ T9827] hsr_slave_1: left promiscuous mode [ 294.237962][ T9827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.245504][ T9827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.286278][ T9827] veth1_macvtap: left promiscuous mode [ 294.292820][ T9827] veth1_vlan: left promiscuous mode [ 294.298297][ T9827] veth0_vlan: left promiscuous mode [ 294.305496][ T9827] veth1_macvtap: left promiscuous mode [ 294.311543][ T9827] veth1_vlan: left promiscuous mode [ 294.316874][ T9827] veth0_vlan: left promiscuous mode [ 294.922466][ T9827] team0 (unregistering): Port device team_slave_1 removed [ 294.965422][ T9827] team0 (unregistering): Port device team_slave_0 removed