last executing test programs: 3.876198775s ago: executing program 1 (id=4848): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0100001600010f0000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0101000000000000000000000000000008003300000000000000000000000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f44f000008001d00000000000c0008"], 0x10c}}, 0x0) recvfrom(r0, &(0x7f0000000080)=""/224, 0xe0, 0x40010000, &(0x7f0000000180)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079107b00000000000500000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$inet(0x2, 0x800, 0x3) 3.365853957s ago: executing program 1 (id=4854): r0 = socket(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x83, &(0x7f0000000000)={r3, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r3}, 0x8) write(r0, &(0x7f0000000040)="effd00001000ff00fd4344c007110000", 0x10) 2.916813672s ago: executing program 4 (id=4863): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4004, 0x6230}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x44}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000010}) r3 = epoll_create1(0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000280)={0x1000}) close(0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) 2.629819842s ago: executing program 0 (id=4866): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000000)={0x8, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @dev}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x52}, &(0x7f00000001c0)=0x9c) 2.629544029s ago: executing program 3 (id=4867): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc010) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ae6af021", @ANYRES16=r2, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c040}, 0x4000) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="500100001000130700000000000000007f000001000000000000000000000000000000000000000004000000000000007d77ecf36eaaf0d65212a09d000000000000000000000000000000003e3aafd2da6c56f227c4c3ea2194d70d61aad17325a8ca6ba0f0c59931d4e9caf392eb76db5e9315789a59173baa28a0fa6a5fcb9616dc7437b8c1e71346b4779474af", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2], 0x150}}, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25040100800c000300000000000000000014"], 0x114}], 0x1}, 0x80) 2.585692215s ago: executing program 4 (id=4868): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a3000000000140003"], 0xc8}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001b00)={0x1238, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x634}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffff1, @mcast2, 0x100}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @loopback, 0x81}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}]}, @TIPC_NLA_NODE={0x10f0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "a76c39498b8930d68f828a04ec57cfcaf002638b4a8a65029e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "fd34000a721318b0afbd89bbc6fb070d1a30af6d480cc3544c732630a621af"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "98e64593721dab881cc0309ad9cba4d604e9620d3f5c798f2b6901f5bb02e76449"}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x1238}, 0x1, 0x0, 0x0, 0x880}, 0x8000) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000060100800c0001"], 0x114}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)=""/197, 0xc5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5}, 0xfff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000002e00)=""/4094, 0xffe}, {&(0x7f0000006080)=""/4072, 0xfe8}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/113, 0x71}], 0x5}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) 2.425580466s ago: executing program 1 (id=4870): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800c64f2d0000000085010000ff631e6afcaa42d8d3481cc1"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x91) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x20040081) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001400030500008000ffdbdf25020751ff", @ANYRES32=r7, @ANYBLOB="080002007f000001"], 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) (async) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) (async) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ac0)=@newtfilter={0x840, 0x2c, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {0x7, 0xf}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x810, 0x2, [@TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x13, 0x800, 0x4, 0x7, 0x8000, 0x73446b73, 0x7, 0x9, 0x6, 0x0, 0x1, 0x2, 0x7fff, 0x2, 0x5, 0x7, 0x5, 0x6, 0x3, 0xd, 0x2, 0xdc, 0x200, 0x5, 0xfffffff8, 0x401, 0x2, 0x2000, 0x4, 0x9, 0x1, 0x2, 0x48aa, 0xdd3, 0x400, 0x5404, 0x10000, 0x5, 0x4, 0xf, 0x0, 0x8, 0x4, 0x4, 0xffffff2d, 0x5, 0x200, 0x4, 0x7, 0x1d, 0x8, 0x6, 0x7, 0x240000, 0x2, 0x4, 0x1, 0x0, 0x4, 0x8, 0x1, 0x7ff, 0x10, 0x1, 0x9, 0x8, 0xf17b, 0xe3bb, 0x9, 0x4, 0x8, 0x81, 0x9, 0xac26, 0x9, 0x0, 0x5, 0x5, 0x3, 0x3, 0x7fff, 0x9, 0x1, 0x5, 0x7d8, 0xfe, 0x8, 0x2, 0x401, 0x100, 0x1, 0x2, 0x6, 0x5, 0x5dde, 0x3, 0xfe61, 0x9, 0x807f, 0x7, 0x1, 0xfffffffc, 0x4, 0x0, 0x2, 0xd2f, 0x7, 0xf, 0xa, 0x7631, 0x4, 0x80000000, 0x3, 0x3, 0x95c2, 0x5, 0x5, 0x3, 0x2, 0x362b, 0xd, 0x1, 0xc92, 0xfff, 0x375, 0xcb, 0xb, 0xb815, 0x5, 0x9, 0x7, 0x3, 0x33e, 0x3, 0x800, 0x4, 0x0, 0x401, 0x10000, 0x8e, 0x8, 0x7, 0xfffffc01, 0x9, 0xa2, 0x6, 0x7, 0x932, 0x6, 0x6a3, 0x2, 0x6, 0x8, 0x80, 0x8, 0x2, 0x8, 0x7fff, 0x2, 0x4c, 0x2, 0x2c, 0x7, 0x0, 0x1, 0x7fffffff, 0x4d, 0x5a442e5c, 0x400001, 0x10000, 0x8, 0x8, 0x8001, 0x10001, 0xae, 0x7, 0xc8, 0x5, 0x81, 0x6, 0x433, 0x8, 0x2, 0x6, 0x4b25, 0x8001, 0x5, 0x4, 0x8, 0x0, 0x79e, 0x10000, 0x4, 0x7946, 0x8870, 0x100, 0x3, 0x9, 0x1, 0x5, 0x81, 0x3, 0x7ff, 0x8, 0xa2, 0x1, 0x0, 0xd, 0x7, 0x92b, 0x3, 0x8, 0x8, 0x0, 0x400, 0x2, 0x8ff3, 0x0, 0x3, 0x7fffffff, 0x7, 0x4, 0x9, 0xfffffff7, 0x1, 0x4, 0x4, 0x1, 0x7fff, 0x2, 0x9, 0x6, 0x5f9, 0x6, 0x401, 0x0, 0x1, 0x40, 0x2, 0x2f, 0x8, 0x1, 0x80000000, 0x1, 0x4, 0x81, 0x10000, 0x6, 0x92f, 0xb, 0xa3, 0x8, 0x62d4d7a3, 0x2, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x7, 0x4, 0x5, 0xfffffffc, 0x1, 0x9, 0x4, 0x4, 0x3, 0x3, 0x200, 0x0, 0x6, 0x3, 0x7, 0x0, 0x5ef, 0x9, 0x6, 0xfffffff8, 0x1, 0x2, 0x0, 0x4, 0x0, 0x5, 0x9, 0x0, 0x42, 0x8, 0x9, 0xe09, 0x800, 0x4, 0x1, 0x7ff, 0x0, 0x6, 0x10001, 0x0, 0x423e573a, 0x9, 0x7, 0x2, 0x1, 0x6, 0x6, 0x9, 0x2, 0xfff, 0x40, 0xffff7fff, 0x2, 0x6dc, 0x9f, 0x7fffffff, 0xa, 0xb, 0xe0000000, 0x3, 0x6, 0xf, 0x3, 0x10, 0x4000000, 0x0, 0x10000, 0x8001, 0x9, 0x3, 0x1, 0x1ff, 0x8d14, 0x401, 0xffff, 0x10000, 0x6, 0x3180, 0x8, 0x8, 0x1f1, 0xffff7fff, 0x8, 0x81, 0x40400, 0x0, 0x2, 0x150, 0x7, 0x9, 0x8, 0x9, 0x9fa0, 0x3, 0xd97c, 0xf, 0x4, 0xd7, 0x2, 0x4, 0x6, 0x7f, 0x6, 0xa, 0x2, 0x97, 0xfffffff8, 0x1, 0x3, 0xa, 0xffffffb5, 0x8, 0x8, 0x7, 0x10, 0x0, 0x990, 0x3, 0xff, 0x400, 0x6, 0x7, 0xfff, 0x400, 0x1, 0x7, 0xc9f, 0x7, 0x0, 0x2, 0x569, 0x9, 0xffffff59, 0x95, 0x2, 0x8, 0x1f0, 0x5, 0x4, 0x7, 0x163025b1, 0xffff, 0x3498, 0x7, 0x5, 0x4d3, 0xffffff0f, 0x8, 0x81c, 0x3, 0x1, 0x1, 0x401, 0xfffffffc, 0x7, 0x6a8, 0x1, 0x8, 0xb, 0x7fffffff, 0x3, 0x7502, 0x0, 0x40, 0x7fffffff, 0x10, 0xde, 0x0, 0x697f, 0xc, 0x2, 0x0, 0x40, 0x3, 0x8, 0xaed, 0x7, 0x12, 0xffffffff, 0x8, 0x7fffffff, 0x9, 0x80000000, 0xffffff98, 0x200, 0x4, 0x6, 0xfffffde1, 0x1, 0xc0c, 0x81, 0x7fffffff, 0x8, 0x9f0, 0x80000001, 0x5, 0xa, 0x8, 0x81, 0x9, 0x1, 0x10001, 0x1, 0xa, 0x80000000, 0xffffac00, 0xb, 0xd31, 0x4, 0x4, 0xaa8b, 0x6, 0x7fff, 0x3bc, 0x10000, 0x3d7b, 0x3c, 0xfffffffc, 0x1b, 0xffffffb3, 0xf, 0x3, 0x2, 0x0, 0x7f, 0x8000, 0x4dd4, 0x2, 0x800, 0x6, 0x1ff, 0x50, 0x109d, 0x10001, 0xe11, 0x1000000, 0x20d, 0xa88, 0x1ff, 0x24f, 0xc, 0x1, 0x100, 0x2, 0x5, 0xbc3d, 0x2, 0xfffffffa, 0x4, 0x2, 0x9, 0x5, 0x1, 0x101]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r10, &(0x7f0000000000)="2e000000010002", 0x7) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) (async) r11 = socket(0x23, 0x6, 0x9) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000080)="d45b8e01983ad6337cda521714f3bfcee019b1f95ddb3823c98938161915bd89793ba37922de45523d5981020005a16b48487006322d28aca9b72fb0a0a5c36d490dcb70ec3e22a9dde390f7b20c17a08f0adc345390a900bccd00a4e6ff6b5dbd182a13b40054cc84a8ea2dc8526a519dfc68f4578e69a769a4779717", 0x7d) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 2.424618142s ago: executing program 0 (id=4871): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x2, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x1}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x5, 0x20000000, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 2.395982818s ago: executing program 2 (id=4872): syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0200", 0x8, 0x0, 0x0, @local, @local, {[@srh={0x32}]}}}}}, 0x0) r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) sendto$inet6(r2, &(0x7f0000000300)="9552f8964b", 0x5, 0x801, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000280), &(0x7f0000000340), 0x12}, 0x20) bind$nfc_llcp(r0, &(0x7f0000000140)={0x27, r1, 0x1, 0x6, 0x6, 0xe2, "4ddc4bb8e5c34cfb96c4bf16341f6a612239b6ad548016ee59e11ac6fdf0df06e855c98e8507ba778eab94c2f9ecb1cf8e2086a0d10faf18483c2be23eb195", 0x11}, 0x60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280"], 0x4c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xffffffffffffff5c) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0xffff, 0x0) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x81800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6) 2.302937893s ago: executing program 0 (id=4873): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4, 0x1, [@m_xt={0x0, 0x14, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x0, 0x2, 0x1}, @TCA_IPT_TARG={0x0, 0x6, {0x5, 'raw\x00', 0x6, 0x1, "52cab51b286ca04c49ce327e6185d38372182a26d3a18d04952ee90eb1673350dcf773f0148a665c68b9925f81793ac4607494594dcbe27066569d6047df797009f07c7bba72d68148c7db1b092f29ef7832cd1fa0ac48f1de4246ca2b5530dd"}}, @TCA_IPT_TABLE={0x0, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x0, 0x3, 0x2}, @TCA_IPT_TARG={0x0, 0x6, {0x7, 'raw\x00', 0x5, 0x3, "c5d6094b643386af9011147cba7f379e269e8faad1bebf6e440d83c10a0dc842dc5a31cf44ef5aada49d052614fa0233a3b13485b0fdc435b80ad91adfb211e043"}}, @TCA_IPT_HOOK={0x0, 0x2, 0x1}, @TCA_IPT_TARG={0x0, 0x6, {0x0, 'filter\x00', 0x0, 0xb79f, "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"}}]}, {0x0, 0x6, "3473446b28ce5eebf327738235b861bef39646aad59cba39bff454b47143378f72afe10c931aa47094cbc0a6d6730c742d0455e28857ebc0505ca12c062ec6d0de3c596a6145a3a882576e3e7b0c37f9d1b59e6a185a3e5910a9cbed428e7d7d1d133bd02a5a3e00592f9bd3603fb5040f9b28f6e9ac72edf009fb6111b09ed09aa335ca5302ca5717c3865c958c42c38bdbca8367d5a21f2d9f41fc9ae0e4366fba42f8e0f305719c695664cddd3b86c82c6eb872f5d8c1d876ed1d939a2d2db0aef1c88ce92348521fe78f95b0c7fc59c4ebc5128fee34c8bb79"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x2, 0x1}}}}, @m_ct={0x0, 0x6, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CT_ZONE, @TCA_CT_NAT_IPV6_MAX={0x0, 0xc, @mcast2}, @TCA_CT_MARK={0x0, 0x5, 0xfa}, @TCA_CT_NAT_PORT_MIN={0x0, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x0, 0xe, 0x4e23}, @TCA_CT_NAT_IPV4_MIN={0x0, 0x9, @private=0xa010100}]}, {0x0, 0x6, "799c39dd9714ac1c09c0e98eb9be196bce434260"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1}}}}, @m_skbedit={0x0, 0x1f, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x0, 0x2, {0x1, 0xd455, 0x10000000, 0x8001, 0xfffffff8}}, @TCA_SKBEDIT_PARMS={0x0, 0x2, {0x400, 0x2, 0x20000005, 0xfffffff2, 0x1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0x7}]}, {0x0, 0x6, "d8f8"}, {}, {0x0, 0x8, {0x1, 0x3}}}}]}]}, 0xfffffffffffffc72}}, 0x0) 2.241850742s ago: executing program 3 (id=4874): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0xffff}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x30, 0x1405, 0x1, 0x70bd27, 0x25dfdbfb, "", [{{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {0x4}, 0x7}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) close(r1) 2.240556367s ago: executing program 1 (id=4875): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000002241918c2657a162e600000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000002241918c2657a162e600000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(0x3) (async) close(0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f00000000c0)=0x3d7, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f00000000c0)=0x3d7, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x40, 0x8000, 0xcfb, 0x9, {{0x6, 0x4, 0x3, 0x35, 0x18, 0x65, 0x0, 0xb, 0x29, 0x0, @multicast2, @broadcast, {[@end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x40, 0x8000, 0xcfb, 0x9, {{0x6, 0x4, 0x3, 0x35, 0x18, 0x65, 0x0, 0xb, 0x29, 0x0, @multicast2, @broadcast, {[@end]}}}}}) socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xffeff034}, {0x6}]}, 0x10) (async) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xffeff034}, {0x6}]}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r9, 0x0, &(0x7f0000001780)=""/4096}, 0x20) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x3001029}]}}]}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000000a1400000010000100000000000000f091eb22e68b"], 0x28}}, 0x0) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r12, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)}}], 0x2, 0x0) shutdown(r12, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r12, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x23}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r12, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x23}, 0x8) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x84, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) 2.201392088s ago: executing program 3 (id=4876): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}]}, 0x30}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000001640)) 2.190034137s ago: executing program 4 (id=4877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xe, 0x0, &(0x7f0000000040)) (async, rerun: 64) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffff8a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) (rerun: 64) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x24}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x667}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4814) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x50}}, 0xd4) 2.116855693s ago: executing program 2 (id=4878): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r0, 0xc252d000) (async) r1 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040)=0x7, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 2.061746523s ago: executing program 0 (id=4879): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000000c0)="33429ab8305cafbec72631f9ed45fc4a6870c1d57385680943c2fd295ad08ad386bc9b68a134c98e329dc56f59738c8d9890657d8ead655581e674fa8136e62014101fe5e1a4476719d1b0bbca8ae23fd6697923bccb1947f2d77c213e262a8ad08715bc0dc07833666bb4", 0x0}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="20e49ebed998007e26bf20eef700000000df53429d0797e1987f112610f876572f9dc47081570fc9ee212c6bee1c5a4630c86435f100208cd67c4bc8620f9fa5fe612860b2a341e8446b17141f14ba8e75fc1698305c6be33d34fbaf6c0a6f760e50add6c9dcc69971752095585a501257229f748ba013ec3c8838c824ba40c048e80e51a75acf0103122063399cd146d3e2b97820fafb13260c8f6233828192", @ANYRES16=r4, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r2) r5 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r6], 0x448}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r8, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x13, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000880)={0x338, r8, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4c1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xcf05}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x72}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x14}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x74}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x586}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffa2fa}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xffffffff, @rand_addr=' \x01\x00', 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @private1, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x4010}, 0x20008804) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x140) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = gettid() syz_open_procfs$namespace(r10, &(0x7f0000000000)='ns/uts\x00') sendmsg$netlink(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000022c0)={0x124c, 0x1d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x1239, 0xf2, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0x1}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@mcast1}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @nested={0x113c, 0x66, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x65, 0x0, 0x0, @pid=r10}, @typed={0x1004, 0x8c, 0x0, 0x0, @binary="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"}, @typed={0x8, 0xe3, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="53956dfd5f301445b6ea01d647083353d1dbf99c321d7a22a8930f94aea4deb2fa638b417523f28db410daaea47945ba858054e9d9e4e85b38826abf1c46d31e27d5f2afdcf599c4bded5e3766a30d3bbc84ca756c842e4d7948409bf5b4b162d1a4e486bb7f47b0541628bfbc0b56f252d7e9585f8caa7be0f710a35f07601244b304b52603762927ec21751487ac55e9e896c1fd87257e09bf2b322971b642a7d12a9abb4a20c8ddf8ecc900bf3ebff47e2175de834f0709bbe9f964571b5fee102a5d4e584ce3", @generic="95215e09275a1ed994bb4a16674c186c2b60919d4cb4f9d3405d6585d8ea8279e23b1e52cf1aa5cb0cdd8f4f2b7e1f6d1277f52863a5dde157b2d30b188b4ffd711ebe68ba2501caeee77510b2d11c3d597543ec"]}]}]}, 0x124c}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.033196393s ago: executing program 1 (id=4880): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='inet_sock_set_state\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r3, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)='&', 0x1}], 0x1}}], 0x1, 0x2c000011) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/143, 0x8f}], 0x1}}], 0x2, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x1c, r7, 0x417, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x4044040) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6b}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x44, 0x20, 0x800, 0x70bd2c, 0x25dfdbfd, {0x2, 0x34, 0x20, 0x81, 0x20}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x33}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x8}}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_SRC={0x8, 0x2, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x24000850) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) (async) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="f200000000000001000200f2fbdbe03cf800f2802e00180001d70002d28474aaba70170000000000000000", @ANYRES32=r10, @ANYBLOB="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"], 0x108}], 0x1, 0x0, 0x0, 0x80}, 0x0) 1.949593563s ago: executing program 3 (id=4881): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x300}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1ab82efe, 0xfffffffffffffffd, 0x1, 0x0, 0xab, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffffff, 0xa, 0x0, 0x0, 0x80000001}, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) 1.946683892s ago: executing program 2 (id=4882): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xb}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x17}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)={0x514, r2, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x4e}}}}, [@NL80211_ATTR_TX_RATES={0x130, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x96f, 0x8, 0x3, 0x4, 0x6, 0x9, 0x3aaf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x7, 0x401, 0x7, 0xfffa, 0x7b, 0x2]}}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0xc4a, 0x239, 0x3, 0xfb0, 0x3, 0x83]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x2, 0x8, 0xfff7, 0xa3c, 0xfcf0]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x60, 0x2d, 0x6, 0xd, 0x2e, 0x1, 0x22, 0x18]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0xa}, {0x5, 0x6}, {0x4, 0x4}, {0x0, 0x5}, {0x4, 0x5}, {0x5, 0x2}, {0x7, 0x6}, {0x6, 0x3}, {0x5, 0x5}, {0x0, 0x6}, {0x3, 0x8}, {0x6, 0xa}, {0x6, 0x7}, {0x0, 0x3}, {0x1, 0x7}, {0x5, 0xa}, {0x4, 0x9}, {0x0, 0x1}, {0x5, 0x5}, {0x0, 0x6}, {0x3, 0x1}, {0x1}, {0x6}, {0x0, 0xa}, {0x5, 0xa}, {0x7, 0x4}, {0x1, 0x9}, {0x0, 0x6}, {0x0, 0x1}, {0x1, 0xa}, {0x6, 0x6}, {0x5}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0xa}, {0x5, 0x8}, {0x6, 0x7}, {0x7, 0x8}, {0x1, 0x4}, {0x6, 0x8}, {0x6, 0xa}, {0x4, 0x4}, {0x2, 0x8}, {0x2, 0x8}, {0x7, 0x4}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1337, 0x1, 0xfff, 0xb3, 0x1, 0x101, 0xfffe]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x31d6, 0x5, 0xf3e, 0x7, 0x8000, 0x5, 0x8, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0xe5, 0x0, 0x6, 0x69, 0x9, 0x1d3]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x16, 0x6, 0x3, 0x6, 0x18, 0xc, 0x4, 0x2, 0x1, 0x18, 0x12, 0x6, 0x18, 0x3, 0x1b, 0x5, 0x6, 0x6c, 0x9, 0x36, 0x4, 0x60, 0x52, 0x9, 0x16, 0x7e, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x99, 0x6, 0xf9, 0x3, 0x7, 0x3, 0xe8ce, 0x9ecf]}}]}]}, @NL80211_ATTR_TX_RATES={0xd8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2, 0x0, 0x16, 0xc, 0x48, 0x1b, 0x5, 0x5, 0x6c, 0x7b, 0x48, 0x24, 0x48, 0x6, 0xc, 0x24, 0x9, 0x9, 0x60, 0x4, 0x1b, 0x16, 0x1b, 0x12, 0x36, 0xe, 0x12, 0x30, 0x3, 0x4, 0x3, 0x6c]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x3, 0x4, 0x16, 0x6, 0x24, 0x4, 0x4, 0x60, 0x6c, 0x3, 0x2, 0x1, 0x18, 0x24, 0x36, 0x18, 0x6, 0x9, 0x4, 0x2, 0x0, 0x12]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x3, 0xadb, 0x4, 0x8, 0xfd8, 0x0, 0x40]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0xfff9, 0x0, 0x8, 0x4, 0xf, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff00, 0xfffa, 0xdadb, 0x27d8, 0x5, 0x2, 0x7, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x2, 0x8, 0x0, 0x2, 0xfff9, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xffff, 0x59e, 0x7, 0x8, 0x100, 0xfff7, 0xaa62]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xc9e, 0x3, 0x3, 0x8, 0x8, 0x7ff, 0x1]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x12c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1b, 0xb, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xd0, 0x3, 0x1000, 0x8, 0x4, 0x5d, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x24, 0x4, 0x18, 0xb, 0x48, 0x3, 0xb, 0x60, 0x16, 0x30, 0x48, 0x5, 0x9, 0xb, 0x12, 0x2, 0xb, 0x6, 0x18, 0x24, 0x4, 0x16, 0x60]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x34, 0x9, 0x1, 0x60, 0x1b, 0xc]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8000, 0x0, 0x8, 0x0, 0x6, 0x8e9f, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x5, 0x9}, {0x0, 0x5}, {0x4, 0x9}, {0x0, 0x7}, {0x1, 0x4}, {0x5, 0x9}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x5}, {0x1, 0x2}, {0x0, 0x5}, {0x1, 0x9}, {0x2, 0x9}, {0x3, 0x7}, {0x0, 0x9}, {0x5, 0x6}, {0x4, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe05, 0x3a94, 0x7f, 0x61, 0x5, 0x1, 0x8, 0x7ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x6, 0x2, 0x0, 0x8, 0x1, 0x3, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7f, 0x2e05, 0x4fb8, 0x7ec, 0xc2, 0x7, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8000, 0x800, 0x1, 0x1, 0x2, 0x4, 0x8cd]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xa, 0x40, 0x9, 0x10, 0xd65, 0x125, 0x7f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7fff, 0x2, 0x40, 0xe, 0x0, 0x8, 0x401]}}]}]}, @NL80211_ATTR_TX_RATES={0x40, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x5, 0x4}, {0x5, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x5, 0x5, 0x1000, 0x1, 0x1, 0xfe9f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4, 0x9, 0x2, 0x0, 0xe6c3, 0x3, 0x400]}}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x5de, 0x1, 0x9, 0x0, 0x2, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xa18, 0x0, 0x5, 0x9, 0x1ff, 0x1c, 0xfffe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3, 0x7, 0x5, 0x2, 0xe8e2, 0xe, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x9, 0x7, 0x6, 0x8, 0x7ff, 0x1000, 0x8]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x16, 0x1b, 0x18]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3, 0x2, 0x6c, 0x2, 0xb, 0x0, 0x16, 0x2, 0x5, 0x1b, 0x60, 0x30, 0xc]}]}]}, @NL80211_ATTR_TX_RATES={0xec, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x401, 0xff, 0x7, 0x7, 0xf0a7, 0x59b9, 0x4]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x9, 0x36, 0x4c, 0x6, 0x6c, 0x19, 0xb, 0x6c, 0xc, 0x24, 0x2, 0x6, 0x1a, 0x6, 0x6c, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x0, 0x5, 0xdab2, 0x4, 0x3, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x8f, 0xb, 0x2, 0x7ff, 0x84c, 0x7f, 0x1c0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xe9, 0x9, 0x40, 0x1, 0x8001, 0x8, 0x401]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xffb, 0x1000, 0x4, 0xdbd2, 0x5, 0x100, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x1}, {0x0, 0x6}, {0x5, 0x7}, {0x2, 0x7}, {0x6}, {0x0, 0xa}, {0x6, 0x2}, {0x3, 0x4}, {0x7, 0x3}, {0x1, 0x1}, {0x3, 0xa}, {0x7, 0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x4, 0x8}, {0x6, 0x3}, {0x1, 0x8}, {0x3, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x1, 0x9}, {}, {0x4, 0x5}, {0x6, 0x6}, {0x5, 0x1}, {0x5, 0x7}, {0x2}, {0x1, 0x7}, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0xa}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0xa}, {0x0, 0x6}, {0x0, 0x7}]}]}]}]}, 0x514}, 0x1, 0x0, 0x0, 0x8091}, 0x240000c0) 1.946480788s ago: executing program 4 (id=4883): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f00000004c0)=0x4) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x9}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x2}]}}}]}, 0x4c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x1c, 0x0, 0x0, @u64=0x9}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xc76d, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)) 1.758644679s ago: executing program 2 (id=4884): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x80000) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000080)={0x6, 0x7f}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x2}, 0x8) unshare(0x6040100) unshare(0x20030000) listen(r0, 0xd) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x8, 0x40, 0x1, 0x8, {{0x24, 0x4, 0x3, 0x7, 0x90, 0x66, 0x0, 0x9, 0x2f, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0x34, 0x33, 0x1, 0x4, [{@multicast2, 0x9}, {@private=0xa010101, 0x2}, {@loopback, 0x7}, {@local, 0x1}, {@broadcast, 0xcd8b}, {@empty, 0xa9}]}, @timestamp={0x44, 0x28, 0xf7, 0x0, 0x0, [0x1ff, 0x6, 0x5010, 0xb, 0xe, 0x4fd, 0x7f, 0x3, 0x100]}, @noop, @end, @lsrr={0x83, 0x1b, 0x95, [@multicast1, @rand_addr=0x64010102, @loopback, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}]}}}}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@loopback, @in=@multicast2, 0x4e20, 0xf, 0x4e21, 0x5, 0xa, 0x0, 0xa0, 0x6c, r2, r3}, {0x3b14, 0x1, 0x0, 0x7, 0xde3b, 0x0, 0x81, 0x7fff}, {0xee8, 0xca3, 0x7c5ac00c, 0x100}, 0x10, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x4d5, 0x75}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x3501, 0x1, 0x3, 0x6, 0x2, 0xa4, 0xfff}}, 0xe8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000500)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2, 0x1}, 0xe) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000600)=@req={0x3, 0xff, 0x5705090a, 0x5}, 0x10) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000640)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0ca558b1c3491fb8e47963a82d"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "600fd3bf0e99a622ed"}, @NL80211_ATTR_KEY={0x50, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "9c4af70e2f1e5ed39b7a5859c1"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ec1c84afbc47e0e451d2da2850"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4805}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f00000008c0)={0x8, 'wlan0\x00', {'gre0\x00'}, 0xfffb}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r9, &(0x7f0000000900)={0x1d, r6, 0x3, {0x1, 0xf0}, 0x2}, 0x18) r10 = socket$inet(0x2, 0x2, 0x401) getsockopt$inet_mreqsrc(r10, 0x0, 0x25, &(0x7f0000000940)={@dev, @remote, @empty}, &(0x7f0000000980)=0xc) r11 = accept4(r4, &(0x7f00000009c0)=@nl, &(0x7f0000000a40)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000a80)={0x0, 0x5}, &(0x7f0000000ac0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r11, 0x84, 0x1a, &(0x7f0000000b00)={r12, 0x91, "487239f10d7b8568995eea08447bea1718f131190988998c5c3c96c3d6b65ab5ae30207f047f09956f466bad50939644df9652a8abf94652066d0e6c731399699d3fd26f87894066b7e5c72771d9e0e5d0b634a15a5b8205b61801f72eb76894c9af06c71ff49a79acfe0c318a7bba0a3debd917658fe0378ebfa6b9866001e3ba05f75b0cee04ab8ae599d72e181ae25a"}, &(0x7f0000000bc0)=0x99) sendfile(r1, r11, &(0x7f0000000c00)=0x4, 0x1) 1.696270752s ago: executing program 2 (id=4885): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="418001", @ANYRES64=r5], 0x4) r9 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) (async) socket$alg(0x26, 0x5, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="79612dbd7000fddbdf257e0000df98e7edd1932bc0915b0dd3980300000008000300", @ANYRES32=r11, @ANYBLOB="0c0099006991000011000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40054) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x41, &(0x7f0000000000)=0x110, 0x4) (async) sendmmsg$inet(r13, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0x2, 0x5e23, @loopback}, 0x10, 0x0}}], 0x1, 0x4004) (async) pselect6(0x40, &(0x7f0000000100)={0x9, 0x47f, 0x7, 0x7, 0x9, 0x10001, 0x1, 0xf8}, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x10800) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r15, @ANYBLOB="59cf0000000000000000080000000e0001800600010000000000"], 0x20}}, 0x0) 169.521657ms ago: executing program 4 (id=4886): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x8000, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xdb5, 0xa, 0x3}) sendto$x25(r1, &(0x7f0000000080)="8ea6001a80e525fee55ee745dfc412abc689568749ee2caec1af045679c5ca68021b1b9b73c82e5af2b9a7b828f46e0c36e1688bf7a37f762c075e4a47fb9d1908664064d7ca2a592af0f229b9f46d5577e9ca958a69d77c2c71dbc1821cd29edb20ebd884958e4bf9f6895e883c827cc47af15e7319fabfdb67e5f30c1ef3b3a9acea83366b1785ba3ebe77a3edbc89f7e9da92243d97a078094f29c1b207e1a88d0c42803d21f1b156c59d681aea", 0xaf, 0x20004000, &(0x7f0000000140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom(r3, &(0x7f0000000200)=""/4096, 0x1000, 0x2002, &(0x7f0000001200)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @empty}, 0x4, 0x4, 0x2, 0x2}}, 0x80) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000012c0)=@generic={&(0x7f0000001280)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@cgroup=r1, 0x4, 0x1, 0x1ff, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001340)=[0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001480)={r1, r1, 0xc, 0x0, @void}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001440)={@map=r1, r4, 0x3, 0x2005, r1, @value=r7, @void, @void, @void, r6}, 0x20) syz_emit_ethernet(0xfa, &(0x7f00000014c0)={@local, @link_local, @void, {@llc={0x4, {@snap={0xaa, 0xaa, "fee9", "c182ac", 0xf9, "523ed9aeb628d343e1311f1c44c785070524bbe872a419f7b05d9ca092de97883e902dbc6a0092dbf62033b73bd4f599595e248379530c499b91f6790021e0e7bf04177d359d99e899a56d304e5905f8c27f97f5f15c16fe58801af6e72cd608aede70a516390507dd970e44c138ed80e784a865a8002a694215513dd7cbf7bdc6a45696f3adc7939bc6718ffdb668b0aae2b3a7f0674998bd42ef96291d90edc038ebe0185bd8a92e90d2b4d7e4d6c81cef4978cd07c2a6c07b801789e80e88ad3bf03bc756e2ca2c20030c27d5a52c953f1697b92a5fc6f57b8fa1c9898092ac3d5b"}}}}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000015c0)={@remote, r2}, 0x14) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r8, &(0x7f0000001600)="738a8e601e23b97e2073308a057cc63c5dcbb0eed3d4b85af6f26cd402a41cd3d6be6319b7e9ad790d217f7dfbc0b79f10f2a79845baed55183dac31e097301a2b914f0d76836092e5b7382ce6f741466ee028f7072b734f412fa07c167d29ff8dfce5d43eb448420b6a21e6d95dac4f192a3e237e8b92ff0ed76c654c9131ea2b240a643e4388703635cc120d29c7506b68dc0a841df8c58353ab57272a1bc779d04e37a88860c27b78e88272f43fb708e4ab0987d7e734739c39635d5685c64c37c9f687fdc1862f828099ace12cdfd2b9029dd965b659854a77d6282af333a955c343a6bfa63807604e57", 0xec, 0x8810, &(0x7f0000001700)={0xa, 0x4e22, 0x4, @private1, 0x4}, 0x1c) connect$bt_rfcomm(r1, &(0x7f0000001740)={0x1f, @none, 0x2d}, 0xa) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000001780)={@rand_addr=' \x01\x00', @private2, @mcast2, 0xb, 0x0, 0x4, 0x100, 0xef5, 0x4040000, r2}) sendto$inet6(r1, &(0x7f0000001800)="7325ec5d325ae5b859dbcd7c219d0a851e2a47744db201b0a61161f6d9992a648a15ba451b489db33e28744894c735647e910ea0ec1dfebc77fc1c4f17286d427558cfb91c02e16388bfc7db9d74a0c27fbb872b861874467474c7a64348ff544116613b39f1673d71c3b17699eced6037ac6670f34067b21f3f30ec37f4582e95f2103aee3a6b15e4fe65329f207202fe4c7898ff930fd37a04e8bb54b0b94cd2f4b9aa6057f0fbeb082a3bdedce4d190851437508bf024b34cae476cc782bda3e96617e867bb72573ea58e0c0795daf855103cb58d19b5a0f8cc3d554241893df18825004a6b6b1af598ee287dd04277e82a6be1d11ab6", 0xf8, 0x20004810, &(0x7f0000001900)={0xa, 0x4e21, 0x7fff, @private1, 0xc}, 0x1c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001940)={r1, r2, 0x25, 0x14, @val=@netfilter={0x7, 0x0, 0x101}}, 0x20) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000001980)={0x0, 0x12f3, 0x20, 0xf}, &(0x7f00000019c0)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001a00)={r9, 0x1c0, 0x3}, 0x8) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x40809804}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x3c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40840}, 0x42041) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001b40)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000001b80)={0xa0000011}) sendmsg$nl_route(r8, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)=@ipv6_newnexthop={0x44, 0x68, 0x400, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x6}, [@NHA_GROUP_TYPE={0x6}, @NHA_GATEWAY={0x14, 0x6, @ip4=@local}, @NHA_OIF={0x8, 0x5, r2}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000001d00)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000001d40)=r10) getpeername$tipc(r1, &(0x7f0000001d80), &(0x7f0000001dc0)=0x10) connect$unix(r1, &(0x7f0000001e00)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000001e80)=0x8, 0x4) 168.37676ms ago: executing program 3 (id=4887): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) accept4(0xffffffffffffffff, &(0x7f0000000040)=@caif, &(0x7f00000000c0)=0x80, 0x80000) (async) r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@caif, &(0x7f00000000c0)=0x80, 0x80000) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@delsa={0x2b0, 0x11, 0x400, 0x70bd29, 0x25dfdbfb, {@in=@loopback, 0x4d6, 0xa, 0x6c}, [@tmpl={0x144, 0x5, [{{@in6=@empty, 0x4d4, 0x32}, 0x2, @in6=@private1, 0x0, 0x2, 0x2, 0x81, 0x9, 0x401}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d3, 0x32}, 0x8, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3501, 0x3, 0x3, 0xd2, 0x8, 0xb, 0x7}, {{@in=@remote, 0x4d4, 0x3c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x34ff, 0x4, 0x2, 0x10, 0x25a, 0x101, 0x8}, {{@in6=@empty, 0x4d5, 0x32}, 0xa, @in=@multicast2, 0x0, 0x5, 0x2, 0x1, 0x9, 0x7a, 0xd91b}, {{@in6=@mcast2, 0x4d5, 0x33}, 0x2, @in6=@private2, 0x0, 0x0, 0x1, 0x6, 0x2, 0x9}]}, @coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x2a}}, @tfcpad={0x8, 0x16, 0x89ca}, @algo_auth={0x126, 0x1, {{'tgr128\x00'}, 0x6f0, "de5b08b304429c66a5fe1a4671c9bf3e615b85d7e4a45b62f326b18ebc172f2c35ca6272e81d72d2ff2e60a2d90d78f357449df9d51d67cab358a72cce54cc70cdec75597916ff27d15cec3f12144ad9214823ed81973b5b7c08276a0413fc4ccf8562fe791dcf9c2664a5fde3efffa04098a618ad823b62dd71daac03065d7df7910517f9692402aa5fe37d6819cc7b8555f029cf9e46bd995fe7d4d4b81ef3a2e21af736a53ed3c41906121793bc8d021b3def437a8b32248cf618fefeda89c892b335a8c3b88a18ce28ca050783097d27cf02996e3f15b0ed22da29e1"}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x20048040}, 0x8000) 167.830641ms ago: executing program 1 (id=4888): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) 167.072461ms ago: executing program 0 (id=4889): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000014c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x3383e4b78cf09ab5}, 0xc, &(0x7f0000001480)={&(0x7f0000000200)={0x125c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x23}, @NL80211_ATTR_CSA_IES={0x11d8, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_PROBE_RESP={0x520, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x108, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xce, 0x3, "39da2f2a713a23a627091a6ddd75c22b3af5969f2fd472d995ed40cdb50fe52f53e77a267eada1dc19ebbe6771917ffe75ea84ae6c8479d80b818db6b96d4d3a809bce925484663d9d23879a0e79e765e3928b2d43f9794017d88907e67add1a3039704bdbfa69b01b7570709468c474ebfdebc1fe8014d630421826931635491434c9c586baedcd5d6d862711a575cb24b70f6f4ffd7df961571f444dcd13360306bfd732f8a61cf1c873cb5c4275119c2b3abe03ffc3c5e02e80d53b970a05077bebc8df53fe7a2e14"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x24, 0x3, "ae167f530f29581b2f904c0aa39011933f5e97131a560ece2de9eb67c39e7484"}]}, @NL80211_ATTR_PROBE_RESP={0x8ca, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x114, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x28, 0x2, "343f5ed7164471091938b82f5216bc9e8959c4e31acba3c8cdc6db3c9506b580ccfd9b99"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6f, 0x3, "a7e114b0c29cc07e4fbbb0b38cb2a41ec64731313c6690f4e19b30b3b655cdcecded7d194bf2989a911db42a01ec02905edf7d6b3f6da60f8249523040781f4016fc14f0a63e5b79cd0b4448757ff2a6e4cf8e29b7d657fd6731f2dbbdffa9bdae26f84fb7082fa2fb1840"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6e, 0x3, "e95767ab331a44d3f7c9ceaccc235479b526428fa02aabd0c3906449edaaa72c63c64b1d2c9cbfe8257039ccec2d14c71c3e31c0558e1c377c9ff9f8d8c4d2f888ea95549c325a33c0fe4717953378f26097e72db1c5e70e23f1ed317dc762c93fccecb98bd77e7972f9"}]}, @NL80211_ATTR_BEACON_HEAD={0x173, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7ffb}, @device_b, @broadcast, @random="8f34a2d684b1", {0x5, 0x7}, @value=@ver_80211n={0x0, 0x4, 0x1, 0x0, 0x0, 0x2, 0x1}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6, {0x8, 0x7f, 0x3, 0x5}}, @val={0x6, 0x2, 0xfffc}, @val={0x5, 0xfa, {0x5, 0x2f, 0xa, "adf5e0b3a434a3f7deb22daef541da0e51368870a3e2e55a92456f09d96ca8173c1f2bc38e5009cb31193093e5feca3fac248ef5ed9c9908c6cce63b72812d024cddb737f5198a64b825551b20fa4e7e7e42585a4848f3283ace37077e1c0bdde96a02bf717c9a6c4acda110b96a2da3d3a1045378ebe7e606411be3ffeaeafb8abea1ebe292d6aaa075a8afeb473b1ae1a23a2a6cb1c5f72cb77ff64b6d7e5fbc2ee18e4c50a631de1227095db8f39cf30523549b733af0aa88463f08e069cd6264b6219dac0f12bffe18f41227a80ed097eadfc8f1d8f2584579abd3d2b0280458996db0565f1bec1aa06bd7032ef8783f56faa8cb6f"}}, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x1, 0x74, 0x2, 0x2d25}}, [{0xdd, 0x2a, "aeff246c704f2e6ee0262d15b848dcc8fb2c19c0897b19e8fb806a987c0a9df4e344d7d0a67be6734a35"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1b, 0xf, [@rann={0x7e, 0x15, {{0x0, 0x6}, 0xff, 0x5, @device_b, 0x9, 0xd1eb, 0x528}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x81, 0x7ff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x8, 0x3, 0xa, 0x1a5, 0x9, 0x0, 0xffff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x8, 0x7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x2, 0x2, 0x283d, 0x33, 0x6, 0xf, 0x81]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x23}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xeb}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x16}]}, 0x125c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8001) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001914019e"], 0x10}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30}, {0x6}]}, 0x10) shutdown(r0, 0x1) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x88, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={0x0}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000014c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x3383e4b78cf09ab5}, 0xc, &(0x7f0000001480)={&(0x7f0000000200)={0x125c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x23}, @NL80211_ATTR_CSA_IES={0x11d8, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_PROBE_RESP={0x520, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x108, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xce, 0x3, "39da2f2a713a23a627091a6ddd75c22b3af5969f2fd472d995ed40cdb50fe52f53e77a267eada1dc19ebbe6771917ffe75ea84ae6c8479d80b818db6b96d4d3a809bce925484663d9d23879a0e79e765e3928b2d43f9794017d88907e67add1a3039704bdbfa69b01b7570709468c474ebfdebc1fe8014d630421826931635491434c9c586baedcd5d6d862711a575cb24b70f6f4ffd7df961571f444dcd13360306bfd732f8a61cf1c873cb5c4275119c2b3abe03ffc3c5e02e80d53b970a05077bebc8df53fe7a2e14"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x24, 0x3, "ae167f530f29581b2f904c0aa39011933f5e97131a560ece2de9eb67c39e7484"}]}, @NL80211_ATTR_PROBE_RESP={0x8ca, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0x114, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x28, 0x2, "343f5ed7164471091938b82f5216bc9e8959c4e31acba3c8cdc6db3c9506b580ccfd9b99"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6f, 0x3, "a7e114b0c29cc07e4fbbb0b38cb2a41ec64731313c6690f4e19b30b3b655cdcecded7d194bf2989a911db42a01ec02905edf7d6b3f6da60f8249523040781f4016fc14f0a63e5b79cd0b4448757ff2a6e4cf8e29b7d657fd6731f2dbbdffa9bdae26f84fb7082fa2fb1840"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x6e, 0x3, "e95767ab331a44d3f7c9ceaccc235479b526428fa02aabd0c3906449edaaa72c63c64b1d2c9cbfe8257039ccec2d14c71c3e31c0558e1c377c9ff9f8d8c4d2f888ea95549c325a33c0fe4717953378f26097e72db1c5e70e23f1ed317dc762c93fccecb98bd77e7972f9"}]}, @NL80211_ATTR_BEACON_HEAD={0x173, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7ffb}, @device_b, @broadcast, @random="8f34a2d684b1", {0x5, 0x7}, @value=@ver_80211n={0x0, 0x4, 0x1, 0x0, 0x0, 0x2, 0x1}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6, {0x8, 0x7f, 0x3, 0x5}}, @val={0x6, 0x2, 0xfffc}, @val={0x5, 0xfa, {0x5, 0x2f, 0xa, "adf5e0b3a434a3f7deb22daef541da0e51368870a3e2e55a92456f09d96ca8173c1f2bc38e5009cb31193093e5feca3fac248ef5ed9c9908c6cce63b72812d024cddb737f5198a64b825551b20fa4e7e7e42585a4848f3283ace37077e1c0bdde96a02bf717c9a6c4acda110b96a2da3d3a1045378ebe7e606411be3ffeaeafb8abea1ebe292d6aaa075a8afeb473b1ae1a23a2a6cb1c5f72cb77ff64b6d7e5fbc2ee18e4c50a631de1227095db8f39cf30523549b733af0aa88463f08e069cd6264b6219dac0f12bffe18f41227a80ed097eadfc8f1d8f2584579abd3d2b0280458996db0565f1bec1aa06bd7032ef8783f56faa8cb6f"}}, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x1, 0x74, 0x2, 0x2d25}}, [{0xdd, 0x2a, "aeff246c704f2e6ee0262d15b848dcc8fb2c19c0897b19e8fb806a987c0a9df4e344d7d0a67be6734a35"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1b, 0xf, [@rann={0x7e, 0x15, {{0x0, 0x6}, 0xff, 0x5, @device_b, 0x9, 0xd1eb, 0x528}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x0, 0x81, 0x7ff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x8, 0x3, 0xa, 0x1a5, 0x9, 0x0, 0xffff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x8, 0x7]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x2, 0x2, 0x283d, 0x33, 0x6, 0xf, 0x81]}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x23}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xeb}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x16}]}, 0x125c}, 0x1, 0x0, 0x0, 0x4000080}, 0x8001) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001914019e"], 0x10}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30}, {0x6}]}, 0x10) (async) shutdown(r0, 0x1) (async) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x88, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={0x0}}, 0x0) (async) 87.42392ms ago: executing program 3 (id=4890): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000a00)=0x4, 0x4) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000300)=@can, 0x80, 0x0}, 0x20040000) (async) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000300)=@can, 0x80, 0x0}, 0x20040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000000)=""/27, &(0x7f0000000240)=0x1b) (async) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000000)=""/27, &(0x7f0000000240)=0x1b) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x50, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}]}, 0x50}}, 0x40) (async) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x50, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}]}, 0x50}}, 0x40) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x42, 0x9, 0x70bd27, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44804}, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000740)=""/191, 0xbf}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000040) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000800000000000000000000a60000000060a0b04661f794a000000000200000034000480300001800b0001006c6f6f6b75700000200002800900010073797a30000000000800054000000000080003400000001d0900010073797a30000000000900020073797a32"], 0x88}}, 0x0) 57.884658ms ago: executing program 2 (id=4891): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x7, 0x4}, @TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f00000003c0)={@multicast1, @empty}, &(0x7f0000000400)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x2, 0x5, [0x4, 0x7, 0x3, 0x6, 0x5cd]}, &(0x7f0000000100)=0x12) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000040)={r7, 0x9, 0x6, 0x8f3d, 0x6, 0x4}, 0x14) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={r4, 0x1, 0x9, 0x1ff, 0x8, 0x47, 0x40, 0x2, {r7, @in6={{0xa, 0x4e21, 0x7fffffff, @local, 0x6}}, 0xfffffffa, 0x2e7, 0xe583, 0xfffff7be, 0xb}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x28) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f00000006c0)={r8, @in6={{0xa, 0x4e24, 0x100, @empty, 0xc}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(0x3) sendmsg$netlink(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1c}, {&(0x7f00000008c0)=ANY=[@ANYBLOB="2401000019000a0005bd7000fcdbdf250800c7000c0000000c0070000800000000000000f62edb2ba22012e8bc3d2fb452e3f06c3c5ff280dbd5e5bc99e34bc36e0848fa39e29c7b32ec513c8bab7a8068a25549823ba13d149ea7a0788f7295aa1b2ac71bb5de89b90032800400a28014007c00ff02000000000000000000000000000115000f00d08a0b6adedad609d011d06eddc7a5599e0000003402b99c32dfe87b55044201000000ef780c9d3e7adecc7247495a20f1a3f55c4e69b645991848bc91b340e396738f379b1a3606d8e544f443c3e6e4ff023b14cdc2bd9851a08eead06aee1d729ca11955f341b9a7b154dba6786f977b37307e419efeb8807b94d717f6ea5ca0098def225e49f7871b0ef3c2bddb0aeaca0148464e145961359027cc0463f2c581000000"], 0x124}, {&(0x7f00000025c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x14cc}], 0x3, 0x0, 0x0, 0x40}, 0x0) 1.78987ms ago: executing program 0 (id=4892): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @default]}) (async) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000180)={0x22, 0x9, 0x9, 0x6, 0x1, 0x81}) 0s ago: executing program 4 (id=4893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) kernel console output (not intermixed with test programs): ut failed -512 [ 392.376127][T16342] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.403822][T16342] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.414044][T16342] bridge_slave_0: entered allmulticast mode [ 392.433676][T16342] bridge_slave_0: entered promiscuous mode [ 392.454346][T16342] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.472034][T16342] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.504797][T16342] bridge_slave_1: entered allmulticast mode [ 392.524282][T16342] bridge_slave_1: entered promiscuous mode [ 392.596298][T16342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.614663][T16432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3025'. [ 392.638141][T16342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.649989][T16432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3025'. [ 392.755011][T16342] team0: Port device team_slave_0 added [ 392.804387][T16342] team0: Port device team_slave_1 added [ 392.931927][T16438] sch_tbf: peakrate 8 is lower than or equals to rate 8 ! [ 392.942661][ T5872] Bluetooth: hci2: command tx timeout [ 392.949813][T16342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.957493][T16342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.985353][T16342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.998362][T16342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.005532][T16342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.074307][T16342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.156275][T16450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.359519][T16342] hsr_slave_0: entered promiscuous mode [ 393.383610][T16342] hsr_slave_1: entered promiscuous mode [ 393.410643][T16342] debugfs: 'hsr0' already exists in 'hsr' [ 393.416427][T16342] Cannot create hsr debugfs directory [ 393.658425][T16466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3036'. [ 393.763820][T16475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3035'. [ 394.820605][T16466] batadv_slave_1 (unregistering): left promiscuous mode [ 395.021602][ T5872] Bluetooth: hci2: command tx timeout [ 395.284437][T16473] syzkaller1: entered promiscuous mode [ 395.294397][T16473] syzkaller1: entered allmulticast mode [ 395.603748][T16465] delete_channel: no stack [ 396.055579][T16342] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.071069][T16342] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.208496][T16342] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.240119][T16342] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.322438][T16342] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.333097][T16342] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.350119][T16521] syzkaller1: entered promiscuous mode [ 396.355871][T16521] syzkaller1: entered allmulticast mode [ 396.430994][T16342] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.442272][T16342] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.698819][T16528] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3053'. [ 396.754258][T16342] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 396.798775][T16342] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 396.837811][T16342] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 396.912719][T16342] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 397.111500][ T5872] Bluetooth: hci2: command tx timeout [ 397.253137][T16342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.304321][T16560] IPVS: Error connecting to the multicast addr [ 397.370091][T16342] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.466438][T13803] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.473693][T13803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.514110][T13789] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.521311][T13789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.539024][T16571] Bluetooth: MGMT ver 1.23 [ 397.683820][T16342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.836826][T16594] netlink: 'syz.2.3069': attribute type 1 has an invalid length. [ 397.978802][T16596] vlan1: entered allmulticast mode [ 398.006957][T16596] bond0: entered allmulticast mode [ 398.299309][T16615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3073'. [ 398.311337][T16614] netlink: 'syz.4.3074': attribute type 1 has an invalid length. [ 398.366886][T16614] bond6 (unregistering): Released all slaves [ 398.542313][T16617] 8021q: VLANs not supported on gre0 [ 398.625254][T16342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.811631][T16342] veth0_vlan: entered promiscuous mode [ 398.863998][T16640] netlink: 576 bytes leftover after parsing attributes in process `syz.1.3082'. [ 398.898336][T16342] veth1_vlan: entered promiscuous mode [ 398.945614][T16644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 398.966677][T16645] netlink: 576 bytes leftover after parsing attributes in process `syz.1.3082'. [ 399.067277][T16342] veth0_macvtap: entered promiscuous mode [ 399.086832][T16342] veth1_macvtap: entered promiscuous mode [ 399.163457][T16342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.188134][ T5872] Bluetooth: hci2: command tx timeout [ 399.234755][T16342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.279821][T13798] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.312016][T13798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.357437][T16662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3084'. [ 399.366966][T13798] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.400854][T13798] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.641815][T13789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.690421][T13789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.819365][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.835573][T16676] netlink: 'syz.1.3090': attribute type 11 has an invalid length. [ 399.851619][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.891456][T16676] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3090'. [ 399.945291][T16682] vlan5: entered promiscuous mode [ 399.959030][T16682] bridge0: entered promiscuous mode [ 400.251552][T16690] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2995'. [ 400.282894][T16689] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2995'. [ 400.502941][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3097'. [ 400.819348][T16711] veth0: entered promiscuous mode [ 400.845838][T16711] veth0: left promiscuous mode [ 401.119447][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 401.129441][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 401.142129][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 401.162874][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 401.174430][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3105'. [ 401.196074][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 401.474454][T16745] netlink: 'syz.4.3108': attribute type 2 has an invalid length. [ 401.486135][T13804] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.498038][T13804] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.509342][T13804] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 401.556557][T16727] lo speed is unknown, defaulting to 1000 [ 401.565404][T16745] v: renamed from dummy0 (while UP) [ 401.633986][T16745] netlink: 'syz.4.3108': attribute type 2 has an invalid length. [ 401.744894][T13804] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.782808][T13804] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.783326][T16759] netlink: 'syz.1.3112': attribute type 10 has an invalid length. [ 401.813022][T13804] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 401.870885][T16759] netdevsim netdevsim1 : entered allmulticast mode [ 401.879847][T16759] bond0: (slave ): Enslaving as an active interface with an up link [ 401.923098][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3113'. [ 402.013176][T13804] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.034030][T13804] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.061189][T13804] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 402.098466][T16772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3115'. [ 402.426658][T16786] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3118'. [ 402.427036][T13804] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.449040][T13804] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.469274][T13804] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 402.813690][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3123'. [ 402.867112][T16801] netlink: 'syz.3.3122': attribute type 10 has an invalid length. [ 402.891135][T16802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3123'. [ 402.955041][T16801] team0: Device hsr_slave_0 failed to register rx_handler [ 403.102302][T16808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3125'. [ 403.263352][ T5873] Bluetooth: hci1: command tx timeout [ 404.547695][T13804] bond5 (unregistering): (slave geneve2): Releasing active interface [ 404.932961][T13804] bond6 (unregistering): (slave bridge7): Releasing active interface [ 405.080995][T13804] bond9 (unregistering): (slave bridge10): Releasing backup interface [ 405.345438][T13804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.354207][ T5873] Bluetooth: hci1: command tx timeout [ 405.365486][T13804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.378453][T13804] bond0 (unregistering): (slave bond1): Releasing backup interface [ 405.392370][T13804] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 405.402367][T13804] bond0 (unregistering): Released all slaves [ 405.507284][T13804] bond1 (unregistering): Released all slaves [ 405.526562][T13804] bond2 (unregistering): Released all slaves [ 405.541052][T13804] bond3 (unregistering): Released all slaves [ 405.558804][T13804] bond4 (unregistering): Released all slaves [ 405.588925][T13804] bond5 (unregistering): Released all slaves [ 405.608444][T13804] bond6 (unregistering): Released all slaves [ 405.627823][T13804] bond7 (unregistering): Released all slaves [ 405.647178][T13804] bond8 (unregistering): Released all slaves [ 405.754529][T13804] bond9 (unregistering): Released all slaves [ 405.853678][T13804] bond10 (unregistering): Released all slaves [ 405.871286][T13804] bond11 (unregistering): Released all slaves [ 406.034997][T16727] chnl_net:caif_netlink_parms(): no params data found [ 406.314355][T13804] : left promiscuous mode [ 406.688313][T13804] tipc: Left network mode [ 406.969664][T16727] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.984447][T16727] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.002890][T16727] bridge_slave_0: entered allmulticast mode [ 407.020021][T16727] bridge_slave_0: entered promiscuous mode [ 407.051846][T16727] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.062664][T16727] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.080735][T16727] bridge_slave_1: entered allmulticast mode [ 407.088854][T16727] bridge_slave_1: entered promiscuous mode [ 407.171503][T16876] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3140'. [ 407.265043][T16871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3140'. [ 407.364275][T16892] netlink: 'syz.0.3144': attribute type 10 has an invalid length. [ 407.405135][T16892] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3144'. [ 407.421346][ T5873] Bluetooth: hci1: command tx timeout [ 407.467147][T16727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.579774][T16892] team0: Port device geneve0 added [ 407.615463][T16727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.836280][T16907] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3148'. [ 407.903599][T16727] team0: Port device team_slave_0 added [ 407.991417][T16908] netlink: 'syz.0.3150': attribute type 11 has an invalid length. [ 407.999297][T16908] netlink: 'syz.0.3150': attribute type 11 has an invalid length. [ 408.038782][T16908] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3150'. [ 408.045145][T16727] team0: Port device team_slave_1 added [ 408.199341][T16921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3162'. [ 408.270013][T13804] hsr_slave_0: left promiscuous mode [ 408.313714][T13804] hsr_slave_1: left promiscuous mode [ 408.349645][T13804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.390769][T13804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.429772][T13804] veth0_to_batadv: left promiscuous mode [ 408.446519][T13804] veth1_vlan: left promiscuous mode [ 408.464835][T16934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3156'. [ 408.483838][T16934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3156'. [ 408.527050][T16936] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3154'. [ 409.311561][T16922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3154'. [ 409.404969][T16727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.430747][T16727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.501201][ T5873] Bluetooth: hci1: command tx timeout [ 409.518954][T16727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.538402][T16727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.553823][T16727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.581596][T16727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.039667][T16727] hsr_slave_0: entered promiscuous mode [ 410.061802][T16727] hsr_slave_1: entered promiscuous mode [ 410.084265][T16727] debugfs: 'hsr0' already exists in 'hsr' [ 410.097268][T16727] Cannot create hsr debugfs directory [ 410.668743][T16988] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.690652][T13804] IPVS: stop unused estimator thread 0... [ 410.716600][T16988] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.958482][T17000] netlink: 'syz.4.3175': attribute type 12 has an invalid length. [ 411.062973][T17000] netlink: 'syz.4.3175': attribute type 12 has an invalid length. [ 411.833872][T16727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 411.883121][T17032] netlink: 'syz.3.3185': attribute type 5 has an invalid length. [ 411.907894][T16727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 411.947952][T16727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 412.069201][T16727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 412.203518][T17044] pim6reg1: entered promiscuous mode [ 412.208882][T17044] pim6reg1: entered allmulticast mode [ 412.258981][T17058] batadv1: entered allmulticast mode [ 412.494519][T16727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.565892][T17067] __nla_validate_parse: 9 callbacks suppressed [ 412.565911][T17067] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3195'. [ 412.594704][T16727] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.634976][T13803] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.642233][T13803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.697332][T13803] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.704591][T13803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.753190][T16727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 412.792136][T16727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 412.813262][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3196'. [ 413.369801][T16727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.607707][T16727] veth0_vlan: entered promiscuous mode [ 413.647507][T17100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3203'. [ 413.664969][T16727] veth1_vlan: entered promiscuous mode [ 413.802413][T16727] veth0_macvtap: entered promiscuous mode [ 413.842060][T16727] veth1_macvtap: entered promiscuous mode [ 413.908649][T17108] tipc: Enabling of bearer rejected, already enabled [ 414.013545][T16727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.024936][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3204'. [ 414.072426][T16727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.172692][T13789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.207680][T13789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.258189][T13789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.340017][T13789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.641162][T17137] netlink: 'syz.0.3210': attribute type 1 has an invalid length. [ 414.664880][T17137] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3210'. [ 414.731421][T13804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.741571][T13804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.749258][T17139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3211'. [ 414.824334][T17142] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3211'. [ 414.843145][T13800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.869574][T13800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.891617][T17139] netlink: 'syz.3.3211': attribute type 1 has an invalid length. [ 414.899410][T17139] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3211'. [ 415.009845][T17139] dvmrp0: entered allmulticast mode [ 415.091898][T17153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3214'. [ 415.368959][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3216'. [ 415.417170][T17160] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 415.448001][T17160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.152455][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 416.161650][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 416.172168][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 416.182174][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 416.191041][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 416.279502][ T3546] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.323214][ T3546] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 416.342115][ T3546] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 416.496427][ T3546] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.511080][ T3546] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 416.541879][ T3546] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 416.582773][T17190] lo speed is unknown, defaulting to 1000 [ 416.677676][ T3546] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.720971][ T3546] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 416.743815][ T3546] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 416.997253][T17227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.006680][T17227] team0: Failed to send options change via netlink (err -105) [ 417.014336][T17227] team0: Port device bond1 added [ 417.026519][ T3546] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.037772][ T3546] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 417.057642][ T3546] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 417.622102][T17252] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 418.099514][T17282] netlink: 'syz.3.3243': attribute type 1 has an invalid length. [ 418.223025][ T5872] Bluetooth: hci3: command tx timeout [ 418.646395][ T3546] bond0 (unregistering): Released all slaves [ 418.764834][ T3546] bond1 (unregistering): Released all slaves [ 418.876965][ T3546] bond2 (unregistering): Released all slaves [ 418.988696][ T3546] bond3 (unregistering): Released all slaves [ 419.005864][ T3546] bond4 (unregistering): Released all slaves [ 419.124349][ T3546] bond5 (unregistering): Released all slaves [ 419.206339][T17270] tipc: Enabling of bearer rejected, failed to enable media [ 419.216901][T17282] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 419.219020][T17275] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 419.412226][ T3546] tipc: Disabling bearer [ 419.460906][ T3546] tipc: Disabling bearer [ 419.466364][ T3546] tipc: Disabling bearer [ 419.516677][ T3546] tipc: Left network mode [ 419.824242][T17311] __nla_validate_parse: 5 callbacks suppressed [ 419.825170][T17311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3248'. [ 419.867020][T17311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3248'. [ 419.945589][T17190] chnl_net:caif_netlink_parms(): no params data found [ 420.300421][ T5872] Bluetooth: hci3: command 0x041b tx timeout [ 421.844047][T13800] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.864723][T13800] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.929381][T17348] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 421.987561][T17355] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3262'. [ 422.020006][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3264'. [ 422.036882][ T3546] hsr_slave_0: left promiscuous mode [ 422.059954][ T3546] hsr_slave_1: left promiscuous mode [ 422.091605][ T3546] vlan0: left allmulticast mode [ 422.106528][ T3546] vlan0: left promiscuous mode [ 422.116746][ T3546] veth0_macvtap: left promiscuous mode [ 422.129801][ T3546] veth1_vlan: left promiscuous mode [ 422.139687][T17357] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3263'. [ 422.157930][ T3546] veth0_vlan: left promiscuous mode [ 422.244115][T17366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3265'. [ 422.380754][ T5872] Bluetooth: hci3: command 0x041b tx timeout [ 422.659227][T17378] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3268'. [ 422.829232][ T3546] vlan1 (unregistering): left allmulticast mode [ 422.836370][ T3546] veth0_vlan (unregistering): left allmulticast mode [ 423.298274][T17385] netlink: 'syz.1.3269': attribute type 4 has an invalid length. [ 423.667751][T17349] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 423.679796][T13800] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.704286][T13800] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.834611][T17393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3271'. [ 423.954651][T17190] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.962032][T17190] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.969307][T17190] bridge_slave_0: entered allmulticast mode [ 423.978895][T17190] bridge_slave_0: entered promiscuous mode [ 424.017055][T17190] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.039088][T17190] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.068450][T17190] bridge_slave_1: entered allmulticast mode [ 424.100901][T17190] bridge_slave_1: entered promiscuous mode [ 424.116901][T17405] netlink: 'syz.3.3274': attribute type 5 has an invalid length. [ 424.141838][T17405] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3274'. [ 424.192139][T17404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3275'. [ 424.296300][T17190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.351951][T17190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.402399][T17412] bond0 (unregistering): (slave ): Releasing backup interface [ 424.410889][T17412] netdevsim netdevsim1 : left allmulticast mode [ 424.426875][T17412] bond0 (unregistering): Released all slaves [ 424.460611][ T5872] Bluetooth: hci3: command 0x041b tx timeout [ 424.593937][T17190] team0: Port device team_slave_0 added [ 424.624220][T17190] team0: Port device team_slave_1 added [ 424.761378][T17190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.769471][T17190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.830440][T17190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.862803][T17190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.880496][T17190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.971020][T17190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.084251][T17421] lo speed is unknown, defaulting to 1000 [ 425.189101][T17434] __nla_validate_parse: 1 callbacks suppressed [ 425.189121][T17434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3284'. [ 425.263753][T17190] hsr_slave_0: entered promiscuous mode [ 425.299869][T17190] hsr_slave_1: entered promiscuous mode [ 425.318912][T17190] debugfs: 'hsr0' already exists in 'hsr' [ 425.336471][T17190] Cannot create hsr debugfs directory [ 425.349317][ T3546] IPVS: stop unused estimator thread 0... [ 425.363031][T17436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3284'. [ 425.818638][T17458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3287'. [ 425.924700][T17460] netlink: 'syz.0.3289': attribute type 1 has an invalid length. [ 426.122798][T17466] netlink: 'syz.0.3291': attribute type 1 has an invalid length. [ 426.158022][T17466] netlink: 'syz.0.3291': attribute type 2 has an invalid length. [ 426.241022][T17464] netlink: 'syz.1.3290': attribute type 10 has an invalid length. [ 426.536751][T17487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3296'. [ 426.551560][ T5872] Bluetooth: hci3: command 0x041b tx timeout [ 427.070856][T17510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3303'. [ 427.088727][T17190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 427.128633][T17512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3305'. [ 427.169426][T17190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 427.203520][T17509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3304'. [ 427.220749][T17190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 427.322201][T17190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 427.366976][T17515] delete_channel: no stack [ 427.388869][T17522] tipc: Started in network mode [ 427.399796][T17520] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3307'. [ 427.403482][T17522] tipc: Node identity 82e02777de51, cluster identity 4711 [ 427.450815][T17522] tipc: Enabled bearer , priority 0 [ 427.483242][T17521] tipc: Disabling bearer [ 427.533026][T17537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3309'. [ 427.596128][T17539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 427.603473][T17539] IPv6: NLM_F_CREATE should be set when creating new route [ 427.626410][T17539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 427.705186][T17190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.778777][T17190] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.804798][T13800] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.812047][T13800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.848770][T17553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3315'. [ 427.937609][T13800] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.944850][T13800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.161251][T17562] Bluetooth: MGMT ver 1.23 [ 428.651554][T17190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.827615][T17592] tap0: tun_chr_ioctl cmd 1074025677 [ 428.854439][T17592] tap0: linktype set to 65534 [ 429.131948][T17607] veth0: entered promiscuous mode [ 429.192068][T17603] veth0: left promiscuous mode [ 429.317687][T17617] bridge_slave_0: left allmulticast mode [ 429.327819][T17617] bridge_slave_0: left promiscuous mode [ 429.338435][T17617] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.399992][T17617] bridge_slave_1: left allmulticast mode [ 429.410064][T17617] bridge_slave_1: left promiscuous mode [ 429.422351][T17617] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.436479][T17617] bond0: (slave bond_slave_0): Releasing backup interface [ 429.459019][T17617] bond0: (slave bond_slave_1): Releasing backup interface [ 429.515888][T17617] team0: Port device team_slave_0 removed [ 429.552847][T17617] team0: Port device team_slave_1 removed [ 429.559846][T17617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.567687][T17617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.578902][T17617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.588210][T17617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.745565][T17190] veth0_vlan: entered promiscuous mode [ 429.798876][T17190] veth1_vlan: entered promiscuous mode [ 429.918209][T17190] veth0_macvtap: entered promiscuous mode [ 429.946956][T17190] veth1_macvtap: entered promiscuous mode [ 430.043919][T17190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.093493][T17190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.131028][T13789] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.150000][T13789] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.201377][T13789] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.221865][T13789] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.356337][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.381193][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.449894][T13789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.479651][T13789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.962805][T17671] __nla_validate_parse: 3 callbacks suppressed [ 430.962827][T17671] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3350'. [ 430.977895][T17679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3352'. [ 431.081213][T17683] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3353'. [ 431.097333][T17679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3352'. [ 431.525186][T17697] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3357'. [ 431.555103][T17696] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3357'. [ 431.704908][T17702] syzkaller1: entered promiscuous mode [ 431.734816][T17702] syzkaller1: entered allmulticast mode [ 431.790708][T17706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3359'. [ 431.811997][T17706] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3359'. [ 431.851995][ T5873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 431.874034][ T5873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 431.888833][ T5873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 431.904556][ T5873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 431.913054][ T5873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 432.017777][T17716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3361'. [ 432.071389][ T3546] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.097524][ T3546] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.194440][T17708] lo speed is unknown, defaulting to 1000 [ 432.363514][ T3546] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.385478][ T3546] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.486667][T17732] sctp: [Deprecated]: syz.2.3367 (pid 17732) Use of int in max_burst socket option deprecated. [ 432.486667][T17732] Use struct sctp_assoc_value instead [ 432.559698][ T3546] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.590316][ T3546] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.686820][T17748] delete_channel: no stack [ 432.997633][ T3546] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.007547][ T3546] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.312388][T17761] netlink: 'syz.4.3371': attribute type 25 has an invalid length. [ 433.361938][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3373'. [ 433.567775][T17761] bond1 (unregistering): Released all slaves [ 433.709612][T17708] chnl_net:caif_netlink_parms(): no params data found [ 433.991009][ T5872] Bluetooth: hci4: command tx timeout [ 434.789800][ T3546] dvmrp1 (unregistering): left allmulticast mode [ 435.367101][ T3546] bond1 (unregistering): Released all slaves [ 435.381806][ T3546] bond2 (unregistering): Released all slaves [ 435.398225][ T3546] bond3 (unregistering): Released all slaves [ 435.512134][ T3546] bond4 (unregistering): Released all slaves [ 435.543341][T17799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.652148][T17809] veth3: entered allmulticast mode [ 435.690817][ T3546] tipc: Disabling bearer [ 435.696907][ T3546] tipc: Disabling bearer [ 435.702332][ T3546] tipc: Left network mode [ 435.958789][T17708] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.991304][T17708] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.002999][T17708] bridge_slave_0: entered allmulticast mode [ 436.011796][T17708] bridge_slave_0: entered promiscuous mode [ 436.061101][ T5872] Bluetooth: hci4: command tx timeout [ 436.082005][T17851] __nla_validate_parse: 45 callbacks suppressed [ 436.082026][T17851] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3393'. [ 436.094419][T17848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.194415][T17708] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.212252][T17708] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.235141][T17708] bridge_slave_1: entered allmulticast mode [ 436.254848][T17708] bridge_slave_1: entered promiscuous mode [ 436.286878][T17858] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3394'. [ 436.325144][T17858] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3394'. [ 436.485224][T17708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.587205][T17708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.660927][T17882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3400'. [ 436.836385][ T3546] hsr_slave_0: left promiscuous mode [ 436.887004][ T3546] hsr_slave_1: left promiscuous mode [ 436.979269][ T3546] veth1_macvtap: left promiscuous mode [ 437.000479][ T3546] veth0_macvtap: left promiscuous mode [ 437.264423][ T3546] pimreg3 (unregistering): left allmulticast mode [ 437.839035][T17876] tipc: Enabling of bearer rejected, failed to enable media [ 437.886980][T17708] team0: Port device team_slave_0 added [ 437.925236][T17708] team0: Port device team_slave_1 added [ 438.140483][ T5872] Bluetooth: hci4: command tx timeout [ 438.355990][T17708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.364525][T17708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.392817][T17708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.419236][T17708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.427922][T17708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.454629][T17708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.637689][T17936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3410'. [ 438.764552][T17708] hsr_slave_0: entered promiscuous mode [ 438.786802][T17708] hsr_slave_1: entered promiscuous mode [ 438.809685][T17708] debugfs: 'hsr0' already exists in 'hsr' [ 438.819065][T17708] Cannot create hsr debugfs directory [ 438.846058][T17952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3415'. [ 438.868566][T17952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3415'. [ 438.907720][T17945] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 438.919896][T17945] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 439.034251][T17951] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.236173][T17951] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.266372][T17958] lo speed is unknown, defaulting to 1000 [ 439.272108][ T3546] IPVS: stop unused estimator thread 0... [ 439.365119][T17951] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.582183][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3420'. [ 439.624855][T17951] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.669084][T17975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3420'. [ 439.923718][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3421'. [ 440.109351][T13803] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.175147][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.225232][ T5872] Bluetooth: hci4: command tx timeout [ 440.252821][T13803] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.291373][T13803] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.549247][T17953] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.926197][T17953] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.053436][T17708] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 441.116564][T17953] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.197930][T17708] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 441.221857][T17708] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 441.253657][ T5952] IPVS: starting estimator thread 0... [ 441.291062][T17953] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.309545][T17708] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 441.328457][T18000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3429'. [ 441.339397][T18000] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3429'. [ 441.370685][T18003] IPVS: using max 26 ests per chain, 62400 per kthread [ 441.382504][T18013] bond0: entered allmulticast mode [ 441.387699][T18013] bond_slave_0: entered allmulticast mode [ 441.393626][T18013] bond_slave_1: entered allmulticast mode [ 441.458219][T18016] tipc: Started in network mode [ 441.465742][T18016] tipc: Node identity 080211, cluster identity 4711 [ 441.485071][T18016] tipc: Enabled bearer , priority 0 [ 441.752989][T17708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.828754][T17708] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.862742][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.869953][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.908684][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.915945][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.930797][T18028] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 442.109288][T17708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 442.394295][T18049] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3440'. [ 442.434021][T18049] netlink: 'syz.3.3440': attribute type 9 has an invalid length. [ 442.451698][T18049] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.3440'. [ 442.477929][T18049] netlink: 'syz.3.3440': attribute type 3 has an invalid length. [ 442.574514][T17708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.600646][T14401] tipc: Node number set to 134353152 [ 442.822832][T17708] veth0_vlan: entered promiscuous mode [ 442.844363][T17708] veth1_vlan: entered promiscuous mode [ 442.878515][T18065] delete_channel: no stack [ 442.932804][T17708] veth0_macvtap: entered promiscuous mode [ 442.953327][T17708] veth1_macvtap: entered promiscuous mode [ 442.975083][T18071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3446'. [ 443.015974][T17708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.046859][T17708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.078249][T13798] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.117897][T13798] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.157591][T13798] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.192591][T13798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.411385][T13804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.439652][T13804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.554397][T18091] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 443.589854][T13804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.620841][T13804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.775472][ T5232] udevd[5232]: worker [7186] terminated by signal 33 (Unknown signal 33) [ 443.785473][ T5232] udevd[5232]: worker [7186] failed while handling '/devices/virtual/block/loop1' [ 443.801090][T18099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3454'. [ 443.819050][T18099] netlink: 'syz.0.3454': attribute type 4 has an invalid length. [ 443.826179][T13804] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.944172][T13800] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.027283][T18112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3456'. [ 444.049532][T13794] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.152925][T13803] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.201952][T18117] pimreg: entered allmulticast mode [ 444.228432][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3458'. [ 444.252829][T18122] netlink: 'syz.1.3459': attribute type 6 has an invalid length. [ 444.277745][T18119] team_slave_0: entered promiscuous mode [ 444.283780][T18119] team_slave_1: entered promiscuous mode [ 444.464365][T18133] netlink: 'syz.2.3465': attribute type 33 has an invalid length. [ 444.605427][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3466'. [ 444.697488][T18147] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 444.725278][T18150] netlink: 212172 bytes leftover after parsing attributes in process `syz.0.3469'. [ 444.785592][T18152] netlink: 'syz.2.3470': attribute type 1 has an invalid length. [ 444.802869][T18147] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 444.827487][T18147] gretap1: entered promiscuous mode [ 444.844133][T18147] gretap1: entered allmulticast mode [ 445.135344][T18169] netlink: 'syz.2.3475': attribute type 7 has an invalid length. [ 445.157993][T18169] netlink: 'syz.2.3475': attribute type 8 has an invalid length. [ 445.371442][T18174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.378936][T18174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.401711][T18174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.420880][T18174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.492690][T18183] netlink: 'syz.4.3483': attribute type 1 has an invalid length. [ 445.573175][T18184] netlink: 'syz.0.3482': attribute type 3 has an invalid length. [ 446.023419][T18202] vxcan3: entered allmulticast mode [ 446.387337][T18237] bond1: (slave bridge2): making interface the new active one [ 446.451471][T18237] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 446.511700][T18227] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 446.704059][T18251] __nla_validate_parse: 9 callbacks suppressed [ 446.704080][T18251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3503'. [ 447.032722][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3508'. [ 447.048530][T18269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3508'. [ 447.250071][T18284] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.266036][T18284] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.267778][T18293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3515'. [ 447.379648][T18284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.392726][T18284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.521540][T18284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.555981][T18284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.638909][T18284] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.649396][T18284] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.093492][T13803] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.119414][T13803] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.139634][T13803] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.159979][T13803] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.206762][T18332] gtp0: entered promiscuous mode [ 448.232395][T18332] gtp0: entered allmulticast mode [ 448.266235][T18337] gtp1: entered promiscuous mode [ 448.439905][T18337] gtp1: entered allmulticast mode [ 448.550633][T13800] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.558881][T13800] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.630295][T13800] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.670185][T13800] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.671812][T18343] validate_nla: 3 callbacks suppressed [ 448.671832][T18343] netlink: 'syz.2.3529': attribute type 4 has an invalid length. [ 448.762144][T18342] netlink: 'syz.2.3529': attribute type 4 has an invalid length. [ 448.787406][T18347] sctp: [Deprecated]: syz.3.3531 (pid 18347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 448.787406][T18347] Use struct sctp_sack_info instead [ 448.830205][ T30] audit: type=1800 audit(1755059744.348:6): pid=18347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3531" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=516 res=0 errno=0 [ 449.028943][ C1] Unknown status report in ack skb [ 449.199002][T18370] netlink: 'syz.0.3537': attribute type 1 has an invalid length. [ 449.218885][T18370] netlink: 15 bytes leftover after parsing attributes in process `syz.0.3537'. [ 449.387410][T18380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3540'. [ 449.636144][T18398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3546'. [ 449.692680][T18409] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3544'. [ 449.702124][T18409] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3544'. [ 449.894062][T18419] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 449.909628][T18420] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3551'. [ 450.126792][T18432] netlink: 'syz.4.3555': attribute type 39 has an invalid length. [ 450.208607][T18436] netlink: 'syz.3.3557': attribute type 1 has an invalid length. [ 450.219413][T18436] netlink: 'syz.3.3557': attribute type 1 has an invalid length. [ 450.230011][T18436] netlink: 'syz.3.3557': attribute type 1 has an invalid length. [ 450.237848][T18436] netlink: 'syz.3.3557': attribute type 2 has an invalid length. [ 450.253868][T18438] veth1_to_bond: entered allmulticast mode [ 450.309891][T18438] bond0: (slave bond_slave_1): Releasing backup interface [ 450.368982][T18438] veth1_to_bond (unregistering): left allmulticast mode [ 450.465084][T18443] netlink: 'syz.3.3561': attribute type 25 has an invalid length. [ 450.529540][T18446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.094196][T18470] netlink: 'syz.3.3566': attribute type 4 has an invalid length. [ 451.273048][T18481] tipc: Started in network mode [ 451.278050][T18481] tipc: Node identity 42317f398baa, cluster identity 4711 [ 451.285906][T18481] tipc: Enabled bearer , priority 0 [ 451.299119][T18481] syzkaller0: entered promiscuous mode [ 451.334382][T18481] syzkaller0: entered allmulticast mode [ 451.401988][T18480] tipc: Resetting bearer [ 451.448800][T18480] tipc: Disabling bearer [ 451.664965][T18497] openvswitch: netlink: Flow key attr not present in new flow. [ 451.738289][T18504] __nla_validate_parse: 9 callbacks suppressed [ 451.738310][T18504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3578'. [ 451.889114][T18507] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3578'. [ 451.917408][T18508] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3578'. [ 452.076523][T18524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.129913][T18526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.151788][T18529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3586'. [ 452.288677][T18536] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3587'. [ 452.320083][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3589'. [ 452.343335][T18540] veth0_to_bond: entered allmulticast mode [ 452.586535][T18554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.645253][T18556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3592'. [ 452.860937][T18568] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3599'. [ 452.888604][T18569] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3599'. [ 452.893536][T18571] netlink: 788 bytes leftover after parsing attributes in process `syz.0.3598'. [ 453.069723][T18574] bridge3: entered promiscuous mode [ 453.102646][T18574] bridge3: entered allmulticast mode [ 454.607732][T18625] validate_nla: 8 callbacks suppressed [ 454.607752][T18625] netlink: 'syz.2.3613': attribute type 1 has an invalid length. [ 455.129756][T18668] lo speed is unknown, defaulting to 1000 [ 455.252361][T18671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.274460][T18674] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20000 [ 455.513850][T18686] tipc: Enabling of bearer rejected, already enabled [ 455.551432][T18688] netlink: 'syz.0.3631': attribute type 1 has an invalid length. [ 455.611488][T18688] netlink: 'syz.0.3631': attribute type 2 has an invalid length. [ 455.692660][T18677] tipc: Resetting bearer [ 455.910450][T18697] Bluetooth: MGMT ver 1.23 [ 456.375275][T18722] netlink: 'syz.2.3642': attribute type 1 has an invalid length. [ 456.863967][T18745] __nla_validate_parse: 11 callbacks suppressed [ 456.863987][T18745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3649'. [ 456.882544][T18745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3649'. [ 456.984775][T18748] netlink: 'syz.3.3651': attribute type 1 has an invalid length. [ 456.986028][T18749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3650'. [ 457.000770][T18748] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3651'. [ 457.001978][T18749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3650'. [ 457.149955][T18760] tipc: Enabling of bearer rejected, already enabled [ 458.064591][T18782] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3661'. [ 458.558250][T18806] netlink: 'syz.3.3669': attribute type 10 has an invalid length. [ 458.589655][T18806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3669'. [ 458.614446][T18806] dummy0: entered promiscuous mode [ 458.632966][T18806] bridge0: port 3(dummy0) entered blocking state [ 458.649908][T18806] bridge0: port 3(dummy0) entered disabled state [ 458.657510][T18806] dummy0: entered allmulticast mode [ 458.676993][T18806] bridge0: port 3(dummy0) entered blocking state [ 458.683532][T18806] bridge0: port 3(dummy0) entered forwarding state [ 459.154273][T18839] tipc: Enabling of bearer rejected, failed to enable media [ 459.347663][T18847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3683'. [ 459.517591][T18865] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3687'. [ 459.799015][T18880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3692'. [ 459.938366][T18879] delete_channel: no stack [ 460.651771][T18922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 460.659205][T18922] IPv6: NLM_F_CREATE should be set when creating new route [ 460.667540][T18922] IPv6: NLM_F_CREATE should be set when creating new route [ 460.674844][T18922] IPv6: NLM_F_CREATE should be set when creating new route [ 460.702586][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 460.932410][T18934] netlink: 'syz.0.3708': attribute type 11 has an invalid length. [ 460.975788][T18934] netlink: 'syz.0.3708': attribute type 11 has an invalid length. [ 461.426471][T18944] netlink: 'syz.0.3713': attribute type 1 has an invalid length. [ 461.685502][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 461.692043][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 461.700019][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 461.707924][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 461.715986][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 461.723884][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 461.731870][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 461.739711][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 461.747710][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 461.755604][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 461.763600][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 461.771478][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 461.779392][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 461.787233][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 461.795194][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 461.803082][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 461.811054][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 461.818894][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 461.826866][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 461.834760][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 461.842763][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 461.850631][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 461.858514][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 461.866548][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 461.874547][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 461.882425][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 461.890414][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 461.898250][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 461.906230][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 461.914102][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 461.922097][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 461.929950][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 461.937888][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 461.945753][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 461.953761][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 461.961655][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 461.969605][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 461.977457][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 461.985407][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 461.993275][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.001252][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.009099][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.017061][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.024917][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.032960][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.040823][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.048756][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.056626][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.064583][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.072453][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.080401][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.088222][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.096131][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.103958][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.111938][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.119779][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.127737][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.135606][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.143584][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.151483][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.159498][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.167356][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.175312][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.183173][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.191145][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.198970][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.206969][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.214925][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.222883][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.230748][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.238697][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.246587][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.254831][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.262722][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.270710][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.278547][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.286549][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.294454][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.302428][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.310305][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.318344][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.326203][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.334145][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.341997][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.349894][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.357788][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.365719][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.373566][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.381515][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.389497][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.397460][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.405327][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.413316][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.421205][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.429154][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 462.437046][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 462.573813][T18971] netlink: 'syz.0.3723': attribute type 1 has an invalid length. [ 462.694183][T18978] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20000 [ 462.704105][T18980] xt_policy: too many policy elements [ 462.729835][T18980] __nla_validate_parse: 5 callbacks suppressed [ 462.729856][T18980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3724'. [ 462.768288][T18983] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3727'. [ 462.784458][T18983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.813173][T18980] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 462.910985][T18989] lo speed is unknown, defaulting to 1000 [ 463.161006][T18994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3730'. [ 463.177168][T18998] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3731'. [ 463.631103][T19012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3733'. [ 464.523745][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 464.530344][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.538199][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.546171][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.554047][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.562007][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.569868][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.577865][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.585733][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.593689][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.601570][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.609493][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.617397][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.625343][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.633209][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.641164][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.648992][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.657028][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.664886][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.672844][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.680739][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.688646][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.696508][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.704465][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.712362][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.720324][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.728206][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.736173][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.744058][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.752039][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.759877][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.767859][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.775739][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.783713][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.791671][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.799920][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.807778][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.815747][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.823642][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.831632][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.839465][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.847368][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.855199][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.863134][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.871001][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.878892][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.886766][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.894656][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.902518][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.910463][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.918295][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.926238][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.934092][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.942388][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.950248][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.958163][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.965986][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.973916][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.981771][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 464.989665][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 464.997507][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 465.005446][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 465.013313][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 465.021289][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 465.029116][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 465.037008][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 465.044856][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 465.052844][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 465.060790][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 465.068756][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 465.076594][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 465.084532][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 465.092389][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 465.100312][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 465.108146][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 465.116072][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 465.123915][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 465.131851][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 465.139672][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 465.147585][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 465.155410][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 465.367114][T19032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3740'. [ 465.392116][T19029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3739'. [ 465.406487][T19032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3740'. [ 465.430553][T19032] netlink: 'syz.4.3740': attribute type 18 has an invalid length. [ 465.448068][T19035] netlink: 'syz.1.3738': attribute type 1 has an invalid length. [ 465.486726][T13804] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.486897][T19032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3740'. [ 465.532774][T19032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3740'. [ 465.549499][T13804] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.600873][T19042] netlink: 'syz.0.3741': attribute type 12 has an invalid length. [ 465.609084][T13804] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.609284][T19032] netlink: 'syz.4.3740': attribute type 18 has an invalid length. [ 465.634186][T13804] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.849955][T19058] macvlan2: entered promiscuous mode [ 465.886671][T19058] macvlan2: entered allmulticast mode [ 465.914927][T19058] veth1_to_bond: entered promiscuous mode [ 465.939450][T19058] veth1_to_bond: entered allmulticast mode [ 465.946076][T19064] netlink: 'syz.1.3747': attribute type 1 has an invalid length. [ 465.969355][T19064] netlink: 'syz.1.3747': attribute type 1 has an invalid length. [ 465.970897][T19067] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 465.989446][T19058] team0: Port device macvlan2 added [ 466.162921][T19072] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙ' [ 466.202653][T19072] CPU: 1 UID: 0 PID: 19072 Comm: syz.3.3750 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 466.202685][T19072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 466.202701][T19072] Call Trace: [ 466.202709][T19072] [ 466.202718][T19072] dump_stack_lvl+0x189/0x250 [ 466.202751][T19072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.202777][T19072] ? __pfx__printk+0x10/0x10 [ 466.202811][T19072] ? kernfs_path_from_node+0x2f/0x290 [ 466.202833][T19072] ? kernfs_path_from_node+0x250/0x290 [ 466.202854][T19072] ? kernfs_path_from_node+0x2f/0x290 [ 466.202881][T19072] sysfs_warn_dup+0x8e/0xa0 [ 466.202902][T19072] sysfs_do_create_link_sd+0xc0/0x110 [ 466.202946][T19072] device_add_class_symlinks+0x1cf/0x240 [ 466.202983][T19072] device_add+0x475/0xb50 [ 466.203019][T19072] wiphy_register+0x1ba6/0x28d0 [ 466.203067][T19072] ? __pfx_wiphy_register+0x10/0x10 [ 466.203093][T19072] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 466.203135][T19072] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 466.203196][T19072] ieee80211_register_hw+0x3425/0x4080 [ 466.203268][T19072] ? ieee80211_register_hw+0x1401/0x4080 [ 466.203316][T19072] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 466.203358][T19072] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 466.203393][T19072] ? __hrtimer_setup+0x187/0x210 [ 466.203413][T19072] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 466.203445][T19072] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 466.203506][T19072] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 466.203530][T19072] ? trace_kmalloc+0x1f/0xd0 [ 466.203557][T19072] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 466.203596][T19072] ? kstrndup+0xbf/0x160 [ 466.203632][T19072] hwsim_new_radio_nl+0xea4/0x1b10 [ 466.203661][T19072] ? __pfx___nla_validate_parse+0x10/0x10 [ 466.203708][T19072] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 466.203750][T19072] ? __nla_parse+0x40/0x60 [ 466.203783][T19072] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 466.203817][T19072] genl_family_rcv_msg_doit+0x212/0x300 [ 466.203848][T19072] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 466.203887][T19072] ? bpf_lsm_capable+0x9/0x20 [ 466.203916][T19072] ? security_capable+0x7e/0x2e0 [ 466.203952][T19072] genl_rcv_msg+0x60e/0x790 [ 466.203981][T19072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 466.204001][T19072] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 466.204042][T19072] netlink_rcv_skb+0x208/0x470 [ 466.204067][T19072] ? __lock_acquire+0xab9/0xd20 [ 466.204100][T19072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 466.204124][T19072] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 466.204176][T19072] ? down_read+0x1ad/0x2e0 [ 466.204211][T19072] genl_rcv+0x28/0x40 [ 466.204255][T19072] netlink_unicast+0x82f/0x9e0 [ 466.204290][T19072] ? __pfx_netlink_unicast+0x10/0x10 [ 466.204318][T19072] ? netlink_sendmsg+0x642/0xb30 [ 466.204343][T19072] ? skb_put+0x11b/0x210 [ 466.204378][T19072] netlink_sendmsg+0x805/0xb30 [ 466.204418][T19072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.204461][T19072] ? aa_sock_msg_perm+0xf1/0x1d0 [ 466.204492][T19072] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.204514][T19072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.204542][T19072] __sock_sendmsg+0x219/0x270 [ 466.204576][T19072] ____sys_sendmsg+0x505/0x830 [ 466.204613][T19072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.204654][T19072] ? import_iovec+0x74/0xa0 [ 466.204678][T19072] ___sys_sendmsg+0x21f/0x2a0 [ 466.204711][T19072] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.204783][T19072] ? __fget_files+0x2a/0x420 [ 466.204811][T19072] ? __fget_files+0x3a0/0x420 [ 466.204854][T19072] __x64_sys_sendmsg+0x19b/0x260 [ 466.204887][T19072] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.204928][T19072] ? rcu_is_watching+0x15/0xb0 [ 466.204955][T19072] ? do_syscall_64+0xbe/0x3b0 [ 466.204987][T19072] do_syscall_64+0xfa/0x3b0 [ 466.205011][T19072] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.205035][T19072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.205056][T19072] ? clear_bhb_loop+0x60/0xb0 [ 466.205080][T19072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.205108][T19072] RIP: 0033:0x7fc70fd8ebe9 [ 466.205126][T19072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.205144][T19072] RSP: 002b:00007fc710c52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.205165][T19072] RAX: ffffffffffffffda RBX: 00007fc70ffb5fa0 RCX: 00007fc70fd8ebe9 [ 466.205179][T19072] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 466.205191][T19072] RBP: 00007fc70fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 466.205220][T19072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.205233][T19072] R13: 00007fc70ffb6038 R14: 00007fc70ffb5fa0 R15: 00007ffe83998f28 [ 466.205268][T19072] [ 466.796231][T19077] netlink: 'syz.2.3751': attribute type 11 has an invalid length. [ 466.855370][T19087] netem: change failed [ 467.821371][T19130] __nla_validate_parse: 5 callbacks suppressed [ 467.821412][T19130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3766'. [ 468.045467][T19144] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3769'. [ 468.094003][T19144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3769'. [ 468.160551][T19148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3773'. [ 468.263516][T19155] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3775'. [ 468.316907][T19158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3777'. [ 468.410093][T19163] netlink: 'syz.0.3778': attribute type 28 has an invalid length. [ 468.421778][T19163] netlink: 'syz.0.3778': attribute type 3 has an invalid length. [ 468.438565][T19163] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3778'. [ 468.562121][T19170] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3780'. [ 468.821449][T19185] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3785'. [ 468.896562][T19188] syzkaller1: entered promiscuous mode [ 468.913088][T19188] syzkaller1: entered allmulticast mode [ 469.201259][T19202] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3790'. [ 469.694598][T19211] lo: entered promiscuous mode [ 469.717004][T19211] netlink: 'syz.1.3792': attribute type 2 has an invalid length. [ 469.760884][T19211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.572501][T19250] netlink: 'syz.3.3805': attribute type 1 has an invalid length. [ 470.588769][T19250] netlink: 'syz.3.3805': attribute type 2 has an invalid length. [ 471.235898][T13804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.274239][T13804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.378145][T19293] netlink: 'syz.4.3818': attribute type 39 has an invalid length. [ 471.389754][T19293] netlink: 'syz.4.3818': attribute type 1 has an invalid length. [ 471.741386][T19311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.910099][T19309] openvswitch: netlink: Tunnel attr 47 out of range max 16 [ 472.264044][T19311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.971826][T19365] __nla_validate_parse: 7 callbacks suppressed [ 472.971847][T19365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3842'. [ 473.032481][T19369] netlink: 'syz.1.3843': attribute type 29 has an invalid length. [ 473.045459][T19372] netlink: 'syz.1.3843': attribute type 29 has an invalid length. [ 473.056108][T19371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3844'. [ 473.240049][T19386] syzkaller1: entered promiscuous mode [ 473.252175][T19385] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3846'. [ 473.280271][T19386] syzkaller1: entered allmulticast mode [ 473.304549][T19385] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3846'. [ 473.641054][T19401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.679119][T19400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3850'. [ 473.978833][T19409] netlink: 'syz.4.3855': attribute type 12 has an invalid length. [ 474.003284][T19415] ipvlan0: entered promiscuous mode [ 474.016933][T19415] bridge0: port 4(ipvlan0) entered blocking state [ 474.039311][T19415] bridge0: port 4(ipvlan0) entered disabled state [ 474.048021][T19415] ipvlan0: entered allmulticast mode [ 474.059153][T19415] bridge0: entered allmulticast mode [ 474.074226][T19415] ipvlan0: left allmulticast mode [ 474.079471][T19415] bridge0: left allmulticast mode [ 474.133929][T19428] : entered promiscuous mode [ 474.408747][T19436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 474.506618][T19451] netlink: 'syz.2.3867': attribute type 29 has an invalid length. [ 474.516112][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3867'. [ 474.534979][T19451] netlink: 'syz.2.3867': attribute type 11 has an invalid length. [ 474.694399][T19459] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3868'. [ 474.734109][T19459] openvswitch: netlink: Actions may not be safe on all matching packets [ 474.753367][T19465] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3871'. [ 474.927007][T19472] netlink: 'syz.0.3873': attribute type 1 has an invalid length. [ 475.074080][T19472] 8021q: adding VLAN 0 to HW filter on device bond3 [ 475.095932][T19472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3873'. [ 475.172271][T19477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3873'. [ 475.243562][T19472] 8021q: adding VLAN 0 to HW filter on device bond3 [ 475.258518][T19472] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 475.272843][T19472] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 475.547268][T19501] netlink: 'syz.2.3881': attribute type 39 has an invalid length. [ 476.391718][T19539] netlink: 'syz.1.3894': attribute type 30 has an invalid length. [ 476.748636][ T5872] block nbd0: Receive control failed (result -32) [ 477.225077][T19568] team0: Device ip6gre1 is of different type [ 477.809947][T19601] netlink: 'syz.2.3915': attribute type 7 has an invalid length. [ 477.839047][T19601] : entered promiscuous mode [ 498.008150][T19633] __nla_validate_parse: 8 callbacks suppressed [ 498.008171][T19633] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3924'. [ 498.667327][T19673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3936'. [ 498.677884][T19672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3936'. [ 498.877979][T19685] team0: Device vti0 is of different type [ 499.040074][T19693] netlink: 'syz.1.3942': attribute type 23 has an invalid length. [ 499.206136][T19699] netlink: 'syz.4.3943': attribute type 11 has an invalid length. [ 499.341505][T19709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3945'. [ 501.129786][T19788] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 501.326753][T19801] syzkaller1: entered promiscuous mode [ 501.333146][T19801] syzkaller1: entered allmulticast mode [ 501.741612][T19796] netlink: 'syz.4.3970': attribute type 11 has an invalid length. [ 501.758644][T19796] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3970'. [ 501.894090][T19810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3974'. [ 502.834059][T19862] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3994'. [ 502.860382][T19862] openvswitch: netlink: Flow actions attr not present in new flow. [ 502.976620][T19870] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 503.232768][T19886] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 503.291362][T19883] netlink: 'syz.1.4003': attribute type 10 has an invalid length. [ 503.732393][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4010'. [ 503.837792][T19919] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4009'. [ 504.139360][T19934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4015'. [ 504.237763][T19941] rdma_op ffff88807864c1f0 conn xmit_rdma 0000000000000000 [ 504.465714][T19957] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4020'. [ 504.509089][T14401] IPVS: starting estimator thread 0... [ 504.614686][T19959] IPVS: using max 27 ests per chain, 64800 per kthread [ 504.648611][T19964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4024'. [ 504.856249][T19974] netlink: 'syz.3.4026': attribute type 22 has an invalid length. [ 504.899105][T19974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4026'. [ 504.952780][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4029'. [ 505.284010][T20001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4037'. [ 505.497909][T20013] netlink: 'syz.0.4040': attribute type 2 has an invalid length. [ 505.517429][T20013] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4040'. [ 505.816455][T20023] netlink: 'syz.0.4045': attribute type 1 has an invalid length. [ 505.859973][T20025] netlink: 'syz.1.4044': attribute type 1 has an invalid length. [ 505.917323][T20025] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4044'. [ 505.952106][T20029] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 506.325645][ T30] audit: type=1800 audit(1755059801.848:7): pid=20030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4044" name="memory.events" dev="tmpfs" ino=554 res=0 errno=0 [ 507.079766][T20083] lo speed is unknown, defaulting to 1000 [ 507.116039][T20087] sctp: [Deprecated]: syz.0.4064 (pid 20087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 507.116039][T20087] Use struct sctp_sack_info instead [ 507.169379][T20081] netlink: 'syz.3.4063': attribute type 1 has an invalid length. [ 507.211681][T20092] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 508.345493][T20152] bond0: option mode: unable to set because the bond device has slaves [ 508.497269][T20158] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 508.838621][T20176] netlink: 'syz.0.4091': attribute type 4 has an invalid length. [ 508.872080][T20181] netlink: 'syz.0.4091': attribute type 1 has an invalid length. [ 508.879862][T20181] __nla_validate_parse: 13 callbacks suppressed [ 508.879879][T20181] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4091'. [ 508.944618][T20181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4091'. [ 509.094732][T20198] netlink: 808 bytes leftover after parsing attributes in process `syz.3.4099'. [ 509.491100][T20218] tipc: Started in network mode [ 509.505582][T20218] tipc: Node identity 0a9f451e9121, cluster identity 4711 [ 509.527637][T20218] tipc: Enabled bearer , priority 0 [ 509.546111][T20223] syzkaller0: entered promiscuous mode [ 509.561272][T20222] netlink: 'syz.2.4109': attribute type 1 has an invalid length. [ 509.574421][T20223] syzkaller0: entered allmulticast mode [ 509.637159][T20222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.649260][T20228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4110'. [ 509.652561][T20229] vlan0: entered promiscuous mode [ 509.699842][T20229] bond2: entered promiscuous mode [ 509.716515][T20231] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4110'. [ 509.718747][T20229] vlan0: entered allmulticast mode [ 509.732512][T20229] bond2: entered allmulticast mode [ 509.778758][T20223] tipc: Resetting bearer [ 509.799047][T20216] tipc: Resetting bearer [ 509.855182][T20216] tipc: Disabling bearer [ 509.905013][T20241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4113'. [ 509.925418][T20222] bond2: (slave gretap1): making interface the new active one [ 509.933142][T20222] gretap1: entered promiscuous mode [ 509.939623][T20222] gretap1: entered allmulticast mode [ 509.951217][T20222] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 510.254767][T20260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4120'. [ 510.393806][T20266] tipc: Resetting bearer [ 510.584109][T20274] sit0: entered promiscuous mode [ 510.617154][T20274] netlink: 'syz.0.4123': attribute type 1 has an invalid length. [ 510.670385][T20274] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4123'. [ 510.892153][T20286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4125'. [ 511.067946][T20292] netlink: 'syz.2.4127': attribute type 2 has an invalid length. [ 511.133271][T20266] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 511.152423][T20266] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 511.351474][T20266] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 511.357438][T20266] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 511.607880][T20326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4136'. [ 511.685636][T20266] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 511.728676][T20266] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 511.980908][T20266] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 511.986971][T20266] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 512.013658][T20335] bond0: entered promiscuous mode [ 512.018809][T20335] bond_slave_0: entered promiscuous mode [ 512.026280][T20335] bond_slave_1: entered promiscuous mode [ 512.041678][T20335] bond0: left promiscuous mode [ 512.051959][T20335] bond_slave_0: left promiscuous mode [ 512.057865][T20335] bond_slave_1: left promiscuous mode [ 512.146096][T20351] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 512.266485][T20359] netlink: 'syz.2.4146': attribute type 33 has an invalid length. [ 512.357814][T20359] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 512.655402][T20375] tipc: Enabling of bearer rejected, failed to enable media [ 512.730567][T20375] netlink: 'syz.2.4151': attribute type 1 has an invalid length. [ 512.953238][T20395] sctp: [Deprecated]: syz.2.4156 (pid 20395) Use of int in max_burst socket option deprecated. [ 512.953238][T20395] Use struct sctp_assoc_value instead [ 513.068645][T20399] wg1: entered promiscuous mode [ 513.118658][T20399] wg1: entered allmulticast mode [ 513.802569][T20435] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 514.109712][T20449] __nla_validate_parse: 9 callbacks suppressed [ 514.109733][T20449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4174'. [ 514.145812][T20449] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 514.797973][T20495] team_slave_0: entered promiscuous mode [ 514.803831][T20495] team_slave_1: entered promiscuous mode [ 514.821678][T20495] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 514.831405][T20495] team0: Device macvtap1 is already an upper device of the team interface [ 514.881331][T20495] team_slave_0: left promiscuous mode [ 514.886934][T20495] team_slave_1: left promiscuous mode [ 514.905432][T20502] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20004 [ 514.959588][T20493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4187'. [ 515.029550][T20498] ip6erspan0: entered promiscuous mode [ 515.330242][T20524] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 515.342456][T20525] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 515.351043][ T5952] IPVS: starting estimator thread 0... [ 515.393902][T20525] x_tables: ip_tables: udp match: only valid for protocol 17 [ 515.472203][T20529] IPVS: using max 31 ests per chain, 74400 per kthread [ 515.754599][T20548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4204'. [ 516.182068][T20586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4210'. [ 516.207138][T20588] netlink: 'syz.2.4214': attribute type 3 has an invalid length. [ 516.252565][T20589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4211'. [ 516.301562][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4214'. [ 516.861232][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4221'. [ 516.885930][T20622] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 517.852546][T20667] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.105442][T20667] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.376573][T20667] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.614041][T20708] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4247'. [ 518.659860][T20667] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.933623][T20715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4248'. [ 518.975401][T20708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.998393][T20708] bond0 (unregistering): Released all slaves [ 519.258474][T13789] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.297829][T13789] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.326262][T13789] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.354059][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.423290][T20726] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4253'. [ 519.458906][T20728] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4254'. [ 519.514201][T20729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4254'. [ 519.616936][T20729] veth3: entered promiscuous mode [ 519.645399][T20729] veth3: entered allmulticast mode [ 519.745793][T20728] veth5: entered promiscuous mode [ 519.770320][T20728] veth5: entered allmulticast mode [ 519.790048][T20731] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.4255'. [ 519.806757][T20731] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 519.861501][T20743] xt_socket: unknown flags 0x50 [ 520.008632][T20747] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4259'. [ 520.062664][T20747] bond0: option mode: unable to set because the bond device has slaves [ 520.089929][T20750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4259'. [ 520.098310][T20752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4261'. [ 520.123130][T20752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4261'. [ 520.169549][T20754] netlink: 'syz.4.4260': attribute type 23 has an invalid length. [ 520.546253][T20766] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4265'. [ 521.374377][T20799] dvmrp1: entered allmulticast mode [ 521.878866][T20819] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4283'. [ 522.048545][T20821] syzkaller1: entered promiscuous mode [ 522.054302][T20821] syzkaller1: entered allmulticast mode [ 522.099184][T20826] netlink: 'syz.4.4285': attribute type 1 has an invalid length. [ 522.114267][T20826] netlink: 'syz.4.4285': attribute type 1 has an invalid length. [ 522.290988][T20833] tipc: Started in network mode [ 522.296189][T20833] tipc: Node identity de4875470eb4, cluster identity 4711 [ 522.318151][T20833] tipc: Enabled bearer , priority 0 [ 522.338536][T20833] syzkaller0: entered promiscuous mode [ 522.372341][T20833] syzkaller0: entered allmulticast mode [ 522.491306][T20833] tipc: Resetting bearer [ 522.522795][T20831] tipc: Resetting bearer [ 522.561621][T20831] tipc: Disabling bearer [ 522.585573][T20843] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 522.715558][T20843] bond3: entered promiscuous mode [ 522.739055][T20843] bond3: entered allmulticast mode [ 522.746753][T20843] 8021q: adding VLAN 0 to HW filter on device bond3 [ 523.285142][T20871] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 524.082188][T20901] openvswitch: netlink: Actions may not be safe on all matching packets [ 524.484360][T20920] vlan1: entered allmulticast mode [ 524.490417][T20920] bridge0: entered allmulticast mode [ 524.641035][T20922] __nla_validate_parse: 14 callbacks suppressed [ 524.641055][T20922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4316'. [ 524.829317][T20931] netlink: 392 bytes leftover after parsing attributes in process `syz.4.4319'. [ 525.128482][T20952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4324'. [ 525.711605][T20989] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4336'. [ 525.875552][T20991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4337'. [ 525.915518][T20996] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4339'. [ 525.978793][T20996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4339'. [ 526.081591][T21002] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4341'. [ 526.361788][T21010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4344'. [ 526.622169][T21017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.894324][T21030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4348'. [ 527.263667][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 527.435911][T20944] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 527.445870][T21042] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 527.758191][T21058] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 528.215130][T21073] netlink: 'syz.4.4364': attribute type 11 has an invalid length. [ 528.462271][T21081] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.498846][T21081] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.584708][T21137] netlink: 'syz.1.4386': attribute type 24 has an invalid length. [ 529.660253][T21143] __nla_validate_parse: 7 callbacks suppressed [ 529.660273][T21143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4387'. [ 529.787246][T21144] lo speed is unknown, defaulting to 1000 [ 530.065545][T21158] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4392'. [ 530.457722][T21177] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.471172][T21176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4395'. [ 530.573961][T21176] xfrm1: entered promiscuous mode [ 530.579186][T21176] xfrm1: entered allmulticast mode [ 530.613035][T21182] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4396'. [ 530.936954][T21193] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4399'. [ 531.359321][T21220] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 531.401278][T21220] netlink: 312 bytes leftover after parsing attributes in process `syz.3.4408'. [ 531.438252][T21220] netlink: 'syz.3.4408': attribute type 1 has an invalid length. [ 531.456414][T21220] netlink: 'syz.3.4408': attribute type 3 has an invalid length. [ 531.473941][T21220] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4408'. [ 531.693770][T21225] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4410'. [ 531.707821][T21231] netlink: 'syz.3.4411': attribute type 1 has an invalid length. [ 531.738768][T21231] netlink: 'syz.3.4411': attribute type 3 has an invalid length. [ 531.747012][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 531.773834][T21231] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4411'. [ 531.777965][T21233] netlink: 'syz.2.4412': attribute type 1 has an invalid length. [ 531.843790][T21231] NCSI netlink: No device for ifindex 813332851 [ 531.902958][T21233] bond4: entered promiscuous mode [ 531.924874][T21233] 8021q: adding VLAN 0 to HW filter on device bond4 [ 531.948919][T21237] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4411'. [ 532.111833][T21233] 8021q: adding VLAN 0 to HW filter on device bond4 [ 532.119125][T21233] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 532.150311][T21233] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 532.236177][T21233] bond4: (slave wireguard0): making interface the new active one [ 532.270505][T21233] wireguard0: entered promiscuous mode [ 532.302671][T21233] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 532.369064][T21253] sctp: [Deprecated]: syz.4.4417 (pid 21253) Use of int in max_burst socket option. [ 532.369064][T21253] Use struct sctp_assoc_value instead [ 532.565653][T21260] team_slave_0: entered promiscuous mode [ 532.571681][T21260] team_slave_1: entered promiscuous mode [ 532.585260][T21260] macsec1: entered promiscuous mode [ 532.598486][T21262] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 532.600538][T21260] team0: entered promiscuous mode [ 532.657494][T21260] bond1: entered promiscuous mode [ 532.664967][T21260] macsec1: entered allmulticast mode [ 532.685135][T21260] team0: entered allmulticast mode [ 532.698543][T21260] team_slave_0: entered allmulticast mode [ 532.731267][T21260] team_slave_1: entered allmulticast mode [ 532.737090][T21260] bond1: entered allmulticast mode [ 532.769237][T21260] team0: Device macsec1 is already an upper device of the team interface [ 532.806038][T21271] openvswitch: netlink: Multiple metadata blocks provided [ 532.816190][T21260] team0: left allmulticast mode [ 532.824810][T21260] team_slave_0: left allmulticast mode [ 532.845713][T21260] team_slave_1: left allmulticast mode [ 532.884199][T21260] bond1: left allmulticast mode [ 532.908692][T21260] team0: left promiscuous mode [ 532.925151][T21260] bond1: left promiscuous mode [ 532.939936][T21260] team_slave_0: left promiscuous mode [ 532.945507][T21260] team_slave_1: left promiscuous mode [ 533.686464][T21321] netlink: 'syz.2.4437': attribute type 5 has an invalid length. [ 534.058651][T21344] 8021q: VLANs not supported on ip_vti0 [ 534.426681][T21353] netlink: 'syz.0.4446': attribute type 10 has an invalid length. [ 534.438275][T21353] veth0_macvtap: left promiscuous mode [ 534.567086][T21364] veth0_to_bond: entered allmulticast mode [ 534.673558][T21368] __nla_validate_parse: 17 callbacks suppressed [ 534.673580][T21368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4450'. [ 535.614158][T21425] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.621836][T21425] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.910448][T21431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4467'. [ 536.031360][T21442] netlink: 'syz.3.4471': attribute type 1 has an invalid length. [ 536.039301][T21442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4471'. [ 536.070529][T21442] netlink: 'syz.3.4471': attribute type 11 has an invalid length. [ 536.120821][T21442] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4471'. [ 536.242565][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4473'. [ 536.466724][T21462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4476'. [ 536.490404][T21462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4476'. [ 536.519942][T21465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4477'. [ 536.546881][T21469] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4476'. [ 536.587880][T21468] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 536.601549][T21462] veth11: entered allmulticast mode [ 536.758145][T21481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4481'. [ 536.764389][T21483] netlink: 'syz.3.4482': attribute type 25 has an invalid length. [ 537.095426][T21483] macvtap1: entered allmulticast mode [ 537.113539][T21483] veth0_macvtap: entered allmulticast mode [ 537.280070][T21507] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 537.725556][T21535] netlink: 'syz.1.4499': attribute type 11 has an invalid length. [ 538.017438][T21546] IPv6: sit2: Disabled Multicast RS [ 538.024405][T21546] sit2: entered allmulticast mode [ 538.442016][T21563] ip6gre1: entered allmulticast mode [ 538.678146][T21579] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.701254][T21576] tipc: Enabling of bearer rejected, failed to enable media [ 538.742393][T21579] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.824390][T21579] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.908440][T21579] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.188379][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.256427][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.331806][T13790] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.377253][T21606] lo: entered promiscuous mode [ 539.390849][T21606] netlink: 'syz.4.4522': attribute type 2 has an invalid length. [ 539.402183][T21606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 539.431626][T13790] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.719942][T21626] vxcan1: tx address claim with dest, not broadcast [ 539.950516][T21643] pim6reg1: entered promiscuous mode [ 539.955998][T21643] pim6reg1: entered allmulticast mode [ 540.060331][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 540.195872][T21652] __nla_validate_parse: 15 callbacks suppressed [ 540.195893][T21652] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4537'. [ 540.219731][T21655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4538'. [ 540.243992][T21652] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 540.539573][T21673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4543'. [ 540.591265][T21673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4543'. [ 540.825934][T21687] IPVS: length: 249 != 8 [ 540.847813][T21686] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4550'. [ 540.983410][T21695] netlink: 'syz.1.4553': attribute type 4 has an invalid length. [ 541.018061][T21699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4555'. [ 541.020269][T21695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4553'. [ 541.240910][T21707] netlink: 'syz.3.4559': attribute type 12 has an invalid length. [ 541.296962][T21711] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.4561'. [ 541.428776][T21715] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4563'. [ 541.466718][T21721] netlink: 'syz.0.4564': attribute type 62 has an invalid length. [ 541.506464][T21715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.605229][T21723] xt_policy: too many policy elements [ 541.665684][T21728] bond2: entered promiscuous mode [ 541.700380][T21728] bond2: entered allmulticast mode [ 541.716768][T21728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 541.840335][T21741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4568'. [ 542.026185][T21756] netlink: 'syz.3.4570': attribute type 39 has an invalid length. [ 542.496839][T21774] bridge_slave_1: left allmulticast mode [ 542.520793][T21774] bridge_slave_1: left promiscuous mode [ 542.541233][T21774] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.573661][T21774] bridge_slave_0: left allmulticast mode [ 542.588664][T21774] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.795887][T21782] mac80211_hwsim hwsim38 ÿ: renamed from wlan1 [ 542.994203][T21803] netlink: 'syz.1.4583': attribute type 10 has an invalid length. [ 543.305778][T21820] hsr_slave_0: left promiscuous mode [ 543.317276][T21820] hsr_slave_1: left promiscuous mode [ 544.007242][T21856] veth0_to_team: entered promiscuous mode [ 544.029156][T21856] erspan0: entered promiscuous mode [ 544.036937][T21856] hsr1: Slave A (veth0_to_team) is not up; please bring it up to get a fully working HSR network [ 545.119445][T21899] can: request_module (can-proto-3) failed. [ 545.130227][T21911] netlink: 'syz.0.4621': attribute type 5 has an invalid length. [ 545.307489][T21922] __nla_validate_parse: 18 callbacks suppressed [ 545.307510][T21922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4625'. [ 545.395269][T21926] netlink: 'syz.3.4626': attribute type 6 has an invalid length. [ 546.126407][T21955] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4633'. [ 546.243789][T21959] netlink: 'syz.4.4634': attribute type 1 has an invalid length. [ 546.253395][T21959] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4634'. [ 546.262782][T21959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4634'. [ 546.441643][T21972] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 546.472914][T21973] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 546.518945][T21977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4640'. [ 546.537574][T21980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4641'. [ 546.571830][T21979] netlink: 'syz.1.4640': attribute type 12 has an invalid length. [ 546.579807][T21979] netlink: 'syz.1.4640': attribute type 29 has an invalid length. [ 546.589752][T21979] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4640'. [ 546.618037][T21979] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4640'. [ 546.636685][T21977] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 546.676136][T21984] unknown channel width for channel at 909000KHz? [ 546.723274][T21984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4642'. [ 546.864268][T21996] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4646'. [ 546.963669][T22005] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 547.183224][T22011] netlink: 'syz.3.4650': attribute type 21 has an invalid length. [ 547.795190][T22058] netlink: 'syz.2.4664': attribute type 29 has an invalid length. [ 547.851559][T22060] netlink: 'syz.2.4664': attribute type 29 has an invalid length. [ 547.882600][T22063] netlink: 'syz.2.4664': attribute type 29 has an invalid length. [ 547.932381][T22074] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 548.515823][T22108] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 548.971678][T22133] C: renamed from lo (while UP) [ 548.991349][T22133] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 549.332182][T22159] tipc: Enabled bearer , priority 0 [ 549.367328][T22154] tipc: Disabling bearer [ 557.340284][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 573.369433][T22226] __nla_validate_parse: 11 callbacks suppressed [ 573.369456][T22226] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4713'. [ 573.521861][T22230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.608447][T22241] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 573.668100][T22244] netlink: 'syz.0.4719': attribute type 10 has an invalid length. [ 573.681865][T22231] nbd1: detected capacity change from 0 to 127 [ 573.686202][T22244] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4719'. [ 573.701092][ T5872] block nbd1: Receive control failed (result -104) [ 573.734101][T22248] netlink: 808 bytes leftover after parsing attributes in process `syz.2.4720'. [ 574.031488][T22267] pim6reg1: entered promiscuous mode [ 574.054557][T22267] pim6reg1: entered allmulticast mode [ 574.183145][T22272] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 574.246142][T22272] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 574.393202][T22272] tipc: Enabling of bearer rejected, already enabled [ 574.425760][T22287] tipc: Enabling of bearer rejected, failed to enable media [ 574.572540][T22292] netlink: 'syz.2.4732': attribute type 33 has an invalid length. [ 574.590591][T22292] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 574.721982][T22296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4734'. [ 574.816737][T22296] netlink: 'syz.2.4734': attribute type 1 has an invalid length. [ 574.828305][T22296] netlink: 'syz.2.4734': attribute type 1 has an invalid length. [ 575.201784][T22319] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 575.239854][T20282] IPVS: starting estimator thread 0... [ 575.320045][T22319] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 575.350883][T22323] IPVS: using max 28 ests per chain, 67200 per kthread [ 575.425464][T22333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4742'. [ 575.526664][T22335] bond5: entered promiscuous mode [ 575.531899][T22335] bond5: entered allmulticast mode [ 575.537700][T22335] 8021q: adding VLAN 0 to HW filter on device bond5 [ 575.578176][T22346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4745'. [ 575.945988][T22363] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.4752'. [ 575.955745][T22363] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.4752'. [ 575.956628][T22372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4751'. [ 576.106549][T22372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4751'. [ 576.301222][ T5872] Bluetooth: hci0: command tx timeout [ 576.502704][T22402] bond0: entered promiscuous mode [ 576.507916][T22402] bond0: entered allmulticast mode [ 576.514330][T22402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.765807][T22402] bond0 (unregistering): Released all slaves [ 577.405334][T22439] netlink: 'syz.3.4770': attribute type 39 has an invalid length. [ 577.426142][T22440] netlink: 'syz.0.4769': attribute type 1 has an invalid length. [ 577.449612][T22440] netlink: 'syz.0.4769': attribute type 1 has an invalid length. [ 577.469517][T22435] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 577.500013][T22440] netlink: 'syz.0.4769': attribute type 1 has an invalid length. [ 577.528648][T22440] netlink: 'syz.0.4769': attribute type 2 has an invalid length. [ 577.532209][T22443] sock: sock_timestamping_bind_phc: sock not bind to device [ 577.975400][T22462] veth3: entered allmulticast mode [ 578.204969][T22482] bridge0: port 4(vlan0) entered blocking state [ 578.228596][T22482] bridge0: port 4(vlan0) entered disabled state [ 578.261933][T22482] vlan0: entered allmulticast mode [ 578.281018][T22482] bridge0: entered allmulticast mode [ 578.305708][T22482] vlan0: left allmulticast mode [ 578.311366][T22482] bridge0: left allmulticast mode [ 578.863131][T22514] openvswitch: netlink: IPv4 tun info is not correct [ 579.145902][T22534] __nla_validate_parse: 72 callbacks suppressed [ 579.145942][T22534] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4795'. [ 579.411119][T22541] nbd2: detected capacity change from 0 to 127 [ 579.445416][T22547] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4796'. [ 579.478574][T22540] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4796'. [ 579.707897][T22558] IPVS: ip_vs_edit_dest(): server weight less than zero [ 580.003827][T22572] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4804'. [ 580.046775][T22572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4804'. [ 580.059208][T22572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4804'. [ 580.077080][T22572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4804'. [ 580.134190][T22584] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 580.159237][ T5872] block nbd2: Receive control failed (result -104) [ 580.216223][T22584] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 580.262725][T22591] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4809'. [ 580.284701][T22584] gretap2: entered promiscuous mode [ 580.319547][T22584] gretap2: entered allmulticast mode [ 580.529049][T22606] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4814'. [ 580.577435][T22614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4815'. [ 581.187829][T22654] netlink: 'syz.3.4820': attribute type 1 has an invalid length. [ 581.314210][T22646] nbd3: detected capacity change from 0 to 127 [ 581.516718][T22665] dvmrp1: entered allmulticast mode [ 581.769496][T22681] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 581.974527][ T5872] block nbd3: Receive control failed (result -104) [ 582.056266][T22691] bond0: Error: Cannot enslave bond to itself. [ 582.382784][T22709] netlink: 'syz.4.4839': attribute type 178 has an invalid length. [ 582.550806][T22715] tipc: Enabled bearer , priority 0 [ 582.602359][T22716] syzkaller0: entered promiscuous mode [ 582.607882][T22716] syzkaller0: entered allmulticast mode [ 582.775504][T22716] tipc: Resetting bearer [ 582.826238][T22727] IPv6: sit1: Disabled Multicast RS [ 582.848522][T22727] sit1: entered allmulticast mode [ 582.913034][T22720] tipc: Resetting bearer [ 582.949136][T22730] nbd4: detected capacity change from 0 to 127 [ 582.991152][T22720] tipc: Disabling bearer [ 583.177969][T22752] RDS: rds_bind could not find a transport for fe80::44, load rds_tcp or rds_rdma? [ 583.399989][T22766] netlink: 'syz.0.4852': attribute type 1 has an invalid length. [ 583.642057][ T5872] block nbd4: Receive control failed (result -104) [ 583.997648][T22794] netlink: 'syz.0.4861': attribute type 9 has an invalid length. [ 584.384158][T22811] __nla_validate_parse: 12 callbacks suppressed [ 584.384179][T22811] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4867'. [ 584.409636][T22811] netlink: 'syz.3.4867': attribute type 1 has an invalid length. [ 584.447203][T22811] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4867'. [ 584.459655][T22811] netlink: 'syz.3.4867': attribute type 1 has an invalid length. [ 584.505283][T22815] netlink: 'syz.4.4868': attribute type 1 has an invalid length. [ 584.527345][T22815] netlink: 'syz.4.4868': attribute type 3 has an invalid length. [ 584.538192][T22815] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4868'. [ 584.554669][T22817] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4870'. [ 584.565985][T22815] NCSI netlink: No device for ifindex 813332851 [ 584.607345][T22824] netlink: 'syz.2.4872': attribute type 2 has an invalid length. [ 584.619362][T22824] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4872'. [ 584.667898][T22827] lo speed is unknown, defaulting to 1000 [ 584.806114][T22837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4876'. [ 584.963746][T22845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4879'. [ 585.054227][T22845] syzkaller0: entered promiscuous mode [ 585.059758][T22845] syzkaller0: entered allmulticast mode [ 585.075831][T22853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4880'. [ 585.122799][T22862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4881'. [ 585.144083][T22863] openvswitch: netlink: nsh attribute has 8 unknown bytes. [ 585.293945][T22869] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4885'. [ 586.606255][T22861] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 586.624545][T22869] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 586.661068][T22869] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 586.694258][T22869] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 586.844523][T22884] openvswitch: netlink: Flow actions attr not present in new flow. [ 586.922446][T22887] [ 586.924838][T22887] ====================================================== [ 586.931871][T22887] WARNING: possible circular locking dependency detected [ 586.938991][T22887] 6.16.0-syzkaller-12108-gc04fdca8a98a #0 Not tainted [ 586.945751][T22887] ------------------------------------------------------ [ 586.952765][T22887] syz.0.4892/22887 is trying to acquire lock: [ 586.958825][T22887] ffffffff8f689ed8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 586.968160][T22887] [ 586.968160][T22887] but task is already holding lock: [ 586.975525][T22887] ffff8880790fdf70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 586.984933][T22887] [ 586.984933][T22887] which lock already depends on the new lock. [ 586.984933][T22887] [ 586.995333][T22887] [ 586.995333][T22887] the existing dependency chain (in reverse order) is: [ 587.004376][T22887] [ 587.004376][T22887] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 587.012377][T22887] lock_acquire+0x120/0x360 [ 587.017412][T22887] _raw_spin_lock_bh+0x36/0x50 [ 587.022694][T22887] nr_rt_device_down+0x12a/0x720 [ 587.028150][T22887] nr_device_event+0x137/0x150 [ 587.033447][T22887] notifier_call_chain+0x1b6/0x3e0 [ 587.039096][T22887] __dev_notify_flags+0x18d/0x2e0 [ 587.044663][T22887] netif_change_flags+0xe8/0x1a0 [ 587.050128][T22887] dev_change_flags+0x130/0x260 [ 587.055503][T22887] dev_ioctl+0x7b4/0x1150 [ 587.060363][T22887] sock_do_ioctl+0x22c/0x300 [ 587.065477][T22887] sock_ioctl+0x576/0x790 [ 587.070419][T22887] __se_sys_ioctl+0xfc/0x170 [ 587.075576][T22887] do_syscall_64+0xfa/0x3b0 [ 587.080612][T22887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.087027][T22887] [ 587.087027][T22887] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 587.094849][T22887] lock_acquire+0x120/0x360 [ 587.099886][T22887] _raw_spin_lock_bh+0x36/0x50 [ 587.105174][T22887] nr_rt_device_down+0xa9/0x720 [ 587.110543][T22887] nr_device_event+0x137/0x150 [ 587.115834][T22887] notifier_call_chain+0x1b6/0x3e0 [ 587.121469][T22887] __dev_notify_flags+0x18d/0x2e0 [ 587.127060][T22887] netif_change_flags+0xe8/0x1a0 [ 587.132528][T22887] dev_change_flags+0x130/0x260 [ 587.137910][T22887] dev_ioctl+0x7b4/0x1150 [ 587.142763][T22887] sock_do_ioctl+0x22c/0x300 [ 587.147876][T22887] sock_ioctl+0x576/0x790 [ 587.152728][T22887] __se_sys_ioctl+0xfc/0x170 [ 587.157838][T22887] do_syscall_64+0xfa/0x3b0 [ 587.162862][T22887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.169277][T22887] [ 587.169277][T22887] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 587.177179][T22887] validate_chain+0xb9b/0x2140 [ 587.182490][T22887] __lock_acquire+0xab9/0xd20 [ 587.187699][T22887] lock_acquire+0x120/0x360 [ 587.192731][T22887] _raw_spin_lock_bh+0x36/0x50 [ 587.198019][T22887] nr_remove_neigh+0x25/0xe0 [ 587.203145][T22887] nr_add_node+0x1d9f/0x2570 [ 587.208257][T22887] nr_rt_ioctl+0xc12/0xd50 [ 587.213203][T22887] sock_do_ioctl+0xd9/0x300 [ 587.218224][T22887] sock_ioctl+0x576/0x790 [ 587.223069][T22887] __se_sys_ioctl+0xfc/0x170 [ 587.228182][T22887] do_syscall_64+0xfa/0x3b0 [ 587.233216][T22887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.239631][T22887] [ 587.239631][T22887] other info that might help us debug this: [ 587.239631][T22887] [ 587.249852][T22887] Chain exists of: [ 587.249852][T22887] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 587.249852][T22887] [ 587.263671][T22887] Possible unsafe locking scenario: [ 587.263671][T22887] [ 587.271113][T22887] CPU0 CPU1 [ 587.276469][T22887] ---- ---- [ 587.281939][T22887] lock(&nr_node->node_lock); [ 587.286708][T22887] lock(nr_node_list_lock); [ 587.293818][T22887] lock(&nr_node->node_lock); [ 587.301103][T22887] lock(nr_neigh_list_lock); [ 587.305781][T22887] [ 587.305781][T22887] *** DEADLOCK *** [ 587.305781][T22887] [ 587.313936][T22887] 1 lock held by syz.0.4892/22887: [ 587.319039][T22887] #0: ffff8880790fdf70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 587.328799][T22887] [ 587.328799][T22887] stack backtrace: [ 587.334681][T22887] CPU: 0 UID: 0 PID: 22887 Comm: syz.0.4892 Not tainted 6.16.0-syzkaller-12108-gc04fdca8a98a #0 PREEMPT(full) [ 587.334702][T22887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 587.334713][T22887] Call Trace: [ 587.334720][T22887] [ 587.334729][T22887] dump_stack_lvl+0x189/0x250 [ 587.334752][T22887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.334771][T22887] ? __pfx__printk+0x10/0x10 [ 587.334791][T22887] ? stack_trace_save+0x9c/0xe0 [ 587.334815][T22887] print_circular_bug+0x2ee/0x310 [ 587.334835][T22887] check_noncircular+0x134/0x160 [ 587.334854][T22887] validate_chain+0xb9b/0x2140 [ 587.334870][T22887] ? do_syscall_64+0xfa/0x3b0 [ 587.334899][T22887] __lock_acquire+0xab9/0xd20 [ 587.334925][T22887] ? nr_remove_neigh+0x25/0xe0 [ 587.334942][T22887] lock_acquire+0x120/0x360 [ 587.334963][T22887] ? nr_remove_neigh+0x25/0xe0 [ 587.334983][T22887] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 587.335004][T22887] ? nr_remove_neigh+0x25/0xe0 [ 587.335021][T22887] _raw_spin_lock_bh+0x36/0x50 [ 587.335037][T22887] ? nr_remove_neigh+0x25/0xe0 [ 587.335054][T22887] nr_remove_neigh+0x25/0xe0 [ 587.335072][T22887] nr_add_node+0x1d9f/0x2570 [ 587.335090][T22887] ? dev_get_by_name+0x21/0x200 [ 587.335105][T22887] ? dev_get_by_name+0x21/0x200 [ 587.335120][T22887] ? dev_get_by_name+0x21/0x200 [ 587.335134][T22887] ? nr_call_to_digi+0x136/0x1b0 [ 587.335151][T22887] nr_rt_ioctl+0xc12/0xd50 [ 587.335170][T22887] ? kasan_quarantine_put+0xdd/0x220 [ 587.335190][T22887] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 587.335210][T22887] ? apparmor_capable+0x137/0x1b0 [ 587.335229][T22887] ? capable+0x89/0xe0 [ 587.335244][T22887] ? nr_ioctl+0x1b1/0x3b0 [ 587.335268][T22887] sock_do_ioctl+0xd9/0x300 [ 587.335285][T22887] ? __pfx_sock_do_ioctl+0x10/0x10 [ 587.335300][T22887] ? __lock_acquire+0xab9/0xd20 [ 587.335340][T22887] sock_ioctl+0x576/0x790 [ 587.335357][T22887] ? __pfx_sock_ioctl+0x10/0x10 [ 587.335390][T22887] ? __fget_files+0x2a/0x420 [ 587.335415][T22887] ? __fget_files+0x3a0/0x420 [ 587.335441][T22887] ? __fget_files+0x2a/0x420 [ 587.335468][T22887] ? bpf_lsm_file_ioctl+0x9/0x20 [ 587.335496][T22887] ? __pfx_sock_ioctl+0x10/0x10 [ 587.335512][T22887] __se_sys_ioctl+0xfc/0x170 [ 587.335534][T22887] do_syscall_64+0xfa/0x3b0 [ 587.335557][T22887] ? lockdep_hardirqs_on+0x9c/0x150 [ 587.335578][T22887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.335595][T22887] ? clear_bhb_loop+0x60/0xb0 [ 587.335615][T22887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.335632][T22887] RIP: 0033:0x7fb526f8ebe9 [ 587.335649][T22887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.335666][T22887] RSP: 002b:00007fb527d7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.335684][T22887] RAX: ffffffffffffffda RBX: 00007fb5271b5fa0 RCX: 00007fb526f8ebe9 [ 587.335697][T22887] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000005 [ 587.335709][T22887] RBP: 00007fb527011e19 R08: 0000000000000000 R09: 0000000000000000 [ 587.335720][T22887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.335732][T22887] R13: 00007fb5271b6038 R14: 00007fb5271b5fa0 R15: 00007ffc86930488 [ 587.335752][T22887] [ 587.657846][T22888] netlink: 'syz.2.4891': attribute type 4 has an invalid length. [ 587.691405][T22888] ieee80211 phy45: Selected rate control algorithm 'minstrel_ht' [ 589.980253][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!