last executing test programs: 17m1.318715055s ago: executing program 2 (id=5958): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207f00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl(r0, 0x5, &(0x7f0000000240)="ec04cab6fb026f9f7fe5f38c76237470611e6a5557144eb839b470c8d77ae71f5ebabb57f0234099631a765db78160090df4b1a1948ea8d75fdc3dc0441ab20993930a7a659893e1e6504a70c0a49b710d783fd2d69934a20f0b07b4a1a1740de79929393bec72a0203d235266827ac5e643395ff2d6e1de11de5d0d1e913ce089ab51837f24b24931bf89544940d4f807b1504d8dac62e378b41fad73c02c6aa845a10627101795b4aeaf845da6d4e7ba733cdbc708fea2481dd66e79d0be3c28d8011825d522ad703477b88255b0f8a97374dd2ceef9e767e6b9ccf2") setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) 17m1.240688966s ago: executing program 2 (id=5959): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2fffebbc8d12ce26b0182d4dd93e23b682005e4db026562edbd92128f36e81b3b5e991bfd9584647f1e637d4274f5a65d22ae7529360f7d1ad58d629a31b7d048dd148b7b615d917", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000400"], 0x48}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xfc, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0xffffffa3, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRESDEC=r2, @ANYBLOB="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", @ANYRES32=r5, @ANYRESHEX=r4], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42008, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x30, r10, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "0ebfd61996044fb4249989f65f4e7f3ee7"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmmsg$unix(r8, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="1800ea8eca54af62ed56188342e6624d060da3b2a016c1bbb02bbe3c69d20d47ec25668b14a40090647e55e7656b12e83246a7558e569937dd820a1513b672d3628c940b486d9429b4a2d96c3fa254fe068aa55f483458ff192a8de1b414bada9e0e53b78d9815bcd799c2665f3c5921ae9f97afe5fdfea337a25a9b5cd8f953fca52df48c0098649300300ac2ae30923a9584285fdbfd5fbc19ced84fe24913577058bcfe1648845564c1978fbdf401afa850fa6d00"/195, @ANYRES32=r9, @ANYRES32=r8], 0x18}}], 0x1, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'ipvlan1\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x20, r7, 0x1, 0x70bd2d, 0x25dddbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x30008010) socket$nl_generic(0x10, 0x3, 0x10) 17m0.443875444s ago: executing program 2 (id=5967): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r0}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x4000, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x34}}, 0x80) 17m0.053208262s ago: executing program 2 (id=5970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001014d9ec29bd7000fcd9df250800030001000000080001000000000008004b001300004308004a0000000000080015000300000008004f"], 0x40}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) 16m59.860188917s ago: executing program 2 (id=5974): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000080)=0x80, 0x80000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x154, r1, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x6b, 0xfa, "b81092e13fd382af017f4c495fb90a321f833b70bfd3cb620ccf163e2d03b791c3ef920e60e14a0f398e60b4cd3bd3f55b772a6312d45b2fbc9762484f135457d62f0e7ca44e43ef9196416df6266a60cacd75cba11f90fbc60fa46e8f5673594cffbebf3113fb"}, @NL80211_ATTR_FILS_ERP_RRK={0x9f, 0xfc, "511c727300840fcfc82cf426128054a9cca9b59b18bcbeef9f65d10cd2e11aa8e9958340a50470270aaea2c1f634ae2a7af939d19920fe3e4edfa57e725e724dda64b51d8318454c818d597c8e2724d687e376a611f2808a76329833d563098324bd08c3824867e773bb4bb8fc011a4d0b146156c013f3daea18e3a968546fa468f3ebb0b182d306f4ea63b78eeab0e909b0415f88904cd5625f35"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "f3ac4adb3c5d57ee2384b9a0"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xc}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "92ab37489798b825"}]]}, 0x154}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe0, r2, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x33}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2c}}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xbf}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24008804}, 0x40040) sendto$inet6(r0, &(0x7f0000000540)="be5492f542a732b1d64b61e5bd68390997238331431d1ac9ba2ed5728bfabd6a0f4c8ee807e9c7d5eae968856d85840f4fff662d2067cdef52c85afad29fcf521800c6f6b7edc4a3607a0e91a7fc58ee0fc5cd6e2d59ed52b2ea57f4b5c4589477ada2e0c700e79cbb9c24ec2191a5f0d8a7d92c1c0d456d384df1b2c19422a86dae96577f311119", 0x88, 0x0, &(0x7f0000000600)={0xa, 0x4e24, 0x101, @local, 0x1}, 0x1c) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r1, 0x2, 0x70bd25, 0x1, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044044}, 0x4000000) recvfrom$packet(r0, &(0x7f0000000740)=""/197, 0xc5, 0x10020, &(0x7f0000000840)={0x11, 0xd, 0x0, 0x1, 0x10, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r0) bpf$TOKEN_CREATE(0x24, &(0x7f00000008c0)={0x0, r0}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000940)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @private}}, 0x0, @in6=@mcast1}}, &(0x7f0000000a40)=0xe8) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008050) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, r1, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="08e577d3f699"}]}, 0x20}, 0x1, 0x0, 0x0, 0x8014}, 0x20004000) r5 = accept4$rose(r0, &(0x7f0000000cc0)=@full={0xb, @remote, @remote, 0x0, [@rose, @bcast, @default, @rose, @null, @default]}, &(0x7f0000000d00)=0x40, 0x0) writev(r5, &(0x7f0000001140)=[{&(0x7f0000000d40)="e4bc873ea532ab155f70062043faf41ac046d60b5d9b8129114558804aa49c47cef85a5bdea2d6b7730e3182baf943de843bc409a097a24f11fb54d090115c9e788bb12e13e7a62dda4de704da2c22ad6ee79296b0c25b405bc36a8da7a63ea5620a7054142f585cc2eacc7c3aa39d45e71141c981710b14cfb8e044963749cabc0f72957b3a1c69bd45af7702a764d3a790502d7ae605de547f770f993b276c72091072ba31dcfc2070bbe53b50150892de844066b816bfaadcc9d6b162e1ae354bb982cc97b37eae5942622937e0b231e8f8ae026336850884f4ecbc4994bd6dcd6a73ba21297041ebf4ef7ebe330d1c", 0xf1}, {&(0x7f0000000e40)="42b6cf78a4e469e79315bb0497ecf020a17f5c29acca4c2d91919f12a25c0ef6d25d82d22adae0d13f7991b55f86c96e2c8801280f9e099864eeea9cb36d0edd8ce44769216bae90c30ab54d286724819939c84f4ccd7f2b5030b4494103f9e18ffea36c5c8aa528750e7fd50fddd4682451154d05e6cb67f73d9eec9ed92ba9f1c20c430a1361a8", 0x88}, {&(0x7f0000000f00)="aa337d26dfae6773badab84209d95fc6eb1365b5d3b799c66aeb94ff74ccc0c3830a426e73b96828c882ea702f899c3db7ce3576427328e401fb2f7d05952e853cf266aa31f2e61022fe0dab0138e06354fcdfa662fa467d5155fa3fdc818ea62312aca14a9239490666c19dfe", 0x6d}, {&(0x7f0000000f80)="3429a8b1849738a2fc7d3272c6cd5d93839567206fcef2de1ffa313b59fdf17b4d519e64d12887f63020455ce746c926af31e7e86487cc5e687eea51898d73ee1d6e3dc50e286f33f9cb1a1ad064694198227a34bd34adc0160f716f9f1a6b8857ee153480187104a51c9d2be3fbe8229906c8429f133a1302dc63", 0x7b}, {&(0x7f0000001000)="6a29401be6e93204a57a26935e66160c93846de4f834094bc87980513b961ca1e82e", 0x22}, {&(0x7f0000001040)="87c77650b684b62f88d21b36fd3f77c493c9ba5dc7a1b7d398daa1ef6e316b9cd81e3515a8838cec7817d6c742a0c13e898a72cb84a6ecc7abb8a832736c4d34302ca3fefae0dadf52423981ab1f636e75229d16af3b9604724284e6614db363da1c3197189d86ddd0373a297cee3d391b6bb57435c36d3818ae17e26625611aa88627e4b288fbc408edbbdf9fb1990a213169dc06a58a62a8851f267b58972a96ebc7bd5167ed73d60dd322315bebd8b17f2f52e075e4c009998f98765d90d6027673042664fa795902b5d5701f43df36d5ff759bb07068cbbd749afac5f615bf14fc960d3edcbc35ea63b42089c6e55515ba05ce8ac59c", 0xf8}], 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001200), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x4c, r7, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1ff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000001380), r0) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, r8, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44090}, 0x4040000) r9 = accept(r5, &(0x7f00000014c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f0000001540)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r9) clock_gettime(0x0, &(0x7f0000001580)={0x0, 0x0}) nanosleep(&(0x7f00000015c0)={r10, r11+60000000}, &(0x7f0000001600)) pselect6(0x40, &(0x7f0000001640)={0x10, 0x4b6d, 0x7477, 0x100, 0x9, 0x3, 0x1, 0x1}, &(0x7f0000001680)={0x4, 0xd444, 0x6, 0x1a73, 0x6, 0x9, 0x2, 0x44e5}, &(0x7f00000016c0)={0x0, 0xffffffffffffff92, 0x2, 0x8, 0x7c8, 0x7, 0xbc23, 0x5}, &(0x7f0000001700)={0x0, 0x3938700}, &(0x7f0000001780)={&(0x7f0000001740)={[0x598]}, 0x8}) socketpair(0x1a, 0x800, 0x7, &(0x7f00000017c0)={0xffffffffffffffff}) recvmmsg$unix(r12, &(0x7f0000002f40)=[{{&(0x7f0000001800), 0x6e, &(0x7f0000002e00)=[{&(0x7f0000001880)=""/195, 0xc3}, {&(0x7f0000001980)=""/19, 0x13}, {&(0x7f00000019c0)=""/223, 0xdf}, {&(0x7f0000001ac0)=""/192, 0xc0}, {&(0x7f0000001b80)=""/74, 0x4a}, {&(0x7f0000001c00)=""/194, 0xc2}, {&(0x7f0000001d00)=""/153, 0x99}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/18, 0x12}], 0x9, &(0x7f0000002ec0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x1, 0x1, &(0x7f0000002f80)={0x77359400}) sendmsg$SMC_PNETID_GET(r13, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x3c, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x4008000) 16m58.912219491s ago: executing program 2 (id=5983): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_stats}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x1a, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x80020, 0x0, 0x2}, 0x50) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r4 = socket$inet(0x2, 0x3, 0x33) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x4f3e}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) r6 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x5, 0x9}, {0xc, 0x10}, {0x0, 0xffff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xd6f3fb117ffe8d12}, 0x81e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES32, @ANYRES16=r3, @ANYRES8=r5, @ANYRESHEX=r0, @ANYRES32=r8, @ANYRESOCT=r2], 0x44}}, 0x884) 16m43.830459074s ago: executing program 32 (id=5983): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_stats}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x1a, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x80020, 0x0, 0x2}, 0x50) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r4 = socket$inet(0x2, 0x3, 0x33) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x4f3e}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) r6 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x5, 0x9}, {0xc, 0x10}, {0x0, 0xffff}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xd6f3fb117ffe8d12}, 0x81e) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES32, @ANYRES16=r3, @ANYRES8=r5, @ANYRESHEX=r0, @ANYRES32=r8, @ANYRESOCT=r2], 0x44}}, 0x884) 9.029709947s ago: executing program 5 (id=15268): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x442481, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000080)={0x2, 0x2, 0x2}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100), 0x12d) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000800040a0006000008001b0000000077"], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x442481, 0x0) (async) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000080)={0x2, 0x2, 0x2}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100), 0x12d) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000800040a0006000008001b0000000077"], 0x30}}, 0x0) (async) 5.624961638s ago: executing program 5 (id=15274): syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f00000006c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @random="9ad0f4428095", @random="a634aa68cbfe", {0xa, 0xd12}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x28, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 4.92119101s ago: executing program 5 (id=15284): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0x800000, 0x3, 0x0, 0xfffffffe}, 0x14) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) getsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f00000000c0)=""/171, &(0x7f0000000200)=0xab) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@can_newroute={0x3c, 0x18, 0x100, 0x70bd28, 0x25dfdbfc, {0x1d, 0x1, 0x2}, [@CGW_CS_XOR={0x8, 0x5, {0x3, 0x5, 0x3, 0x5}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "062ea11871f60c28"}, 0x6}}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x3c}}, 0x11) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x4, 0x3}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3, &(0x7f0000000080)=0x7, 0x4) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x80011, r0, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x200000c, 0x13, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x200000c, 0x13, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) 4.748649684s ago: executing program 5 (id=15287): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1c17}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 4.213885002s ago: executing program 5 (id=15292): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c000000170a01080000000000000000010000050900020073797a31000002000900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES32, @ANYRESOCT=r1, @ANYBLOB="0485f2c046123fe9a6", @ANYRES16=r0, @ANYRES16=r3], 0x44}, 0x1, 0x2, 0x0, 0x4003}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x44800) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x80, 0x700, 0x2, 0xffff, {{0x22, 0x4, 0x2, 0x0, 0x88, 0x64, 0x0, 0x3, 0x2f, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x8, 0x39, 0x0, 0x6, [0x7]}, @timestamp={0x44, 0x20, 0x17, 0x0, 0x5, [0xfffffffc, 0x10001, 0x3ff, 0xff, 0x9, 0x20005, 0xe]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp_addr={0x44, 0x44, 0xca, 0x1, 0x0, [{@empty, 0x2e}, {@loopback}, {@private=0xa010100, 0xb9c8}, {@multicast1, 0x80000000}, {@rand_addr=0x64010102}, {@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x37}, 0xfffffffa}, {@multicast2, 0x80000001}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000ffdbdf25110000003000018008000100", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="1400020070696d726567000000000000000000000800030003000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c000000170a01080000000000000000010000050900020073797a31000002000900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004", @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES32, @ANYRESOCT=r1, @ANYBLOB="0485f2c046123fe9a6", @ANYRES16=r0, @ANYRES16=r3], 0x44}, 0x1, 0x2, 0x0, 0x4003}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x44800) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x80, 0x700, 0x2, 0xffff, {{0x22, 0x4, 0x2, 0x0, 0x88, 0x64, 0x0, 0x3, 0x2f, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x8, 0x39, 0x0, 0x6, [0x7]}, @timestamp={0x44, 0x20, 0x17, 0x0, 0x5, [0xfffffffc, 0x10001, 0x3ff, 0xff, 0x9, 0x20005, 0xe]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp_addr={0x44, 0x44, 0xca, 0x1, 0x0, [{@empty, 0x2e}, {@loopback}, {@private=0xa010100, 0xb9c8}, {@multicast1, 0x80000000}, {@rand_addr=0x64010102}, {@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x37}, 0xfffffffa}, {@multicast2, 0x80000001}]}, @noop]}}}}}) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000125bd7000ffdbdf25110000003000018008000100", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="1400020070696d726567000000000000000000000800030003000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008001) (async) 3.931345558s ago: executing program 5 (id=15295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0xff7f) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'nat\x00', 0x0, 0x4, 0xde, [0x8232, 0x0, 0xfffffffffffffff7, 0x1521, 0x7ff, 0xfffffffffffffffc], 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f0000000600)=""/222}, &(0x7f0000000100)=0x78) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130fe", 0x19}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="f600e21c", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000d40)="504fd84e46c1819f771555bb3dbd485672d2ba0e9572e3ee66ef94536a7dfd0082883c5bd7fcb4e185c0cd7967b8616cc0446a181b1528f750b94e39b3a39c177446c9d7d9f2ff6922899e853818a3e80b2fd38f5e782b6b42c95104fd111ddce1505140ac49ae419e6264054d2cc085", 0x70}, {&(0x7f00000003c0)="5238e95e63ee39039afbdcc3623762630b41620ad9c3ba2e00e019dd2a6d12b41daf39e8a94ebfb013cd351ea18c923617691c1ff8a55cafd19518d9ba95411af2f1bfa8d10cde6696d503887396d47677c9c8d2197e677aca63c919ba13cd532d707f0cc3c03813e4b03e", 0x6b}, {0x0}], 0x3}}], 0x3, 0x2090) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000008fafaf225c8a3c96060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001708000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) 2.744481s ago: executing program 3 (id=15305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8, 0x3, "e4edf2b7"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x87}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 2.345051192s ago: executing program 3 (id=15310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)="ead77b", 0x3, 0x20000840, &(0x7f0000000080)={0xa, 0x4e24, 0x8b7a, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) (async) close(r2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) (async) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 1.760515198s ago: executing program 3 (id=15313): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x2}}], 0x56e, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd600aa90000000000008000000000000000000000000000bbfe8000000000000000000000000000aa8000907800000000a745e7435473432fcc9baa6728424e78a411f6afa2f493e057006e8c6cff4dc2915d6fb3d3432386de56666aa939b3fc28e7dbb53d1d382ab95ed400f4159a8cdc425ecf653a75f1d7bccea3938cce0817c9e611009d2adf856ead6e8ebe46cf10c99ec6ce240eacc5ed4aa566744266093e0d70955af7d683c4282e34e5f6e24b2177d83552d85862fcf02505df9b25623e18b9f7cd7072284fd64ac1495bf8281db63b2a78f2fe01972ccd7480217855475f2f"], 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000306050000000000000000000a000000"], 0x14}}, 0x8081) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="917ad68c80af6bb5eb69368b90a9fa48607ebf484210f3900995c8b3ae39142ccc610d0cd486683983f8587255cdf775b69ec3e8c76008478cbb47643be709a5f8fa1aca06e63b353c019c4a017c97c078324f189ff61e6fb4e514b529252b5cf4e7904c0816ac4c45063adc2408f62310ecfb2d28ddb76a616ac7b66acbfd8f210566b52a824497b3615117563456d30693280eb1dd362ae7ce757c80ef086987b68881b90674b6ac4aebab5935c3e93d6af177dc3fd79793fd4b0cc25fd5e21a471fb7750fb98a6936fa3eccb89e", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x814) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) 1.745294789s ago: executing program 1 (id=15315): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x100, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xffffffffffffff23, 0xb, 0x9}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x40, r6, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff04}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x5}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x860}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r8) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x100, @none, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xffffffffffffff23, 0xb, 0x9}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x40, r6, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff04}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x5}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x860}, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r1, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r8) (async) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) 1.499771417s ago: executing program 0 (id=15318): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0xb, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000200)={0x20}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.360029555s ago: executing program 1 (id=15319): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x67, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "c2ad8e98be22f76b333c631c72065771"}, @md5sig={0x13, 0x12, "3e485e6a2fef685077d0813fabcb4246"}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xa, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x67, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "c2ad8e98be22f76b333c631c72065771"}, @md5sig={0x13, 0x12, "3e485e6a2fef685077d0813fabcb4246"}]}}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xa, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) (async) 1.304398601s ago: executing program 4 (id=15320): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8d0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000540)={'sit0\x00', r6, 0x80, 0x1, 0x0, 0xa4, {{0x17, 0x4, 0x1, 0x2e, 0x5c, 0x65, 0x0, 0x6, 0x4, 0x0, @local, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x40, 0x3, 0x7, [{@local, 0x9}, {@local}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x7fff}]}, @noop, @ssrr={0x89, 0x13, 0x31, [@rand_addr=0x64010102, @local, @empty, @multicast1]}, @end, @generic={0x82, 0x10, "2cdbfe550ca1c98c170650d07d02"}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0xc005) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003f00), r9) sendmsg$NLBL_CALIPSO_C_LIST(r9, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000003f40)={0x1c, r10, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28861}, 0xc800) sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x54, r10, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710044000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 1.30392926s ago: executing program 0 (id=15321): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4020) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6(0xa, 0x80803, 0x87) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f00000031c0)=@setneightbl={0x18, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0x4}]}, 0x18}}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080019"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x2, 0x2, 0x547b31180522e04c}, {0x0, 0x4, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe8) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000f600"/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000080), &(0x7f00000002c0)=@tcp}, 0x20) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x9c, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2b71}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe03}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x34}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x7, &(0x7f0000000080)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4e}, [@generic={0x6, 0x9, 0x3, 0x40, 0xad4}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000000c0)='GPL\x00'}, 0x94) (async, rerun: 32) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf258800000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4840) (rerun: 32) 1.113519836s ago: executing program 1 (id=15322): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xfffffffffffffff8, 0x5}) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x0, 0x401}, 0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'veth1_virt_wifi\x00', {0x5}, 0x8}) recvmsg$unix(r0, &(0x7f0000000380)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)=""/104, 0x68}, {&(0x7f00000001c0)=""/187, 0xbb}], 0x2, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x0) bind$inet(r9, &(0x7f00000003c0)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000400)=0x2dcf, 0x4) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000440)={@dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x3a}}) r10 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$IP_VS_SO_GET_VERSION(r10, 0x0, 0x480, &(0x7f0000000480), &(0x7f00000004c0)=0x40) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000500)=""/120, &(0x7f0000000580)=0x78) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f00000005c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000600)=0x28) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x4e22, 0x7, @local}}, 0x0, 0x0, 0x4, 0x0, "2b9de10b1ebed2e2a35c3c26506c353915136ec958c1428e89ef58dd98fbd93a9e7284d42e12b92de4cd55687ac156bf45aed46f5dfc4b3138ca030623a4bab4270cf314c62ab07fcf7b980761dac76a"}, 0xd8) socketpair(0xa, 0x840dc91ab9c070ec, 0x7, &(0x7f0000000740)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_PRI(r11, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x20004018) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f00000008c0)=""/137, &(0x7f0000000980)=0x89) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r9) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r12, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x101}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044804}, 0x40) accept$inet6(r2, &(0x7f0000000b40)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000b80)=0x1c) sendmsg$netlink(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000bc0)={0x10, 0x1a, 0x300, 0x70bd26, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x200000c1}, 0x4048054) bind$netlink(r8, &(0x7f0000000c80)={0x10, 0x0, 0x25dfdbff, 0x200}, 0xc) close(r9) r14 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000cc0), 0x2, 0x0) write(r14, &(0x7f0000000d00)="82f0378b623ee35380c6319c5caac5db3a0e0e5873177b4691e3882dba025bdc722a93130e873e77b0485e75d952f12a664f6b1ec3443ee4d7b50e19bf3a42a29fd2ca5b2260bb0ea99af44c1585b9e2d462098a24b0bd1bbdff8db72374aed3e379c10bda40fe650ba2d72f8c9a362bc2f9e5f81d1624a34720a171810e8393d251b4d905c41385c97669d038b18c3392781f45f180b88af52f68bc3570ff6e4754add3847a5922481159a473f6d29d00c1a3c564", 0xb5) r15 = epoll_create1(0x0) sendfile(r11, r15, &(0x7f0000000dc0)=0xa, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r12, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "fc726d7d31c4"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r16, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, r17, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.01691646s ago: executing program 4 (id=15323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20084081}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000400007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1ab0429c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="090300000000000000002e"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6erspan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r9, @ANYRESOCT=r6], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x184, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x70, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x10}, 0x0) 924.013237ms ago: executing program 1 (id=15324): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r1, r1, 0x9, 0x0, 0x0, 0x9, 0x8b, 0x6, 0x7, 0xa35, 0x1, 0x1, 'syz0\x00'}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5475d, 0xfd6f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in=@loopback, 0x4e22, 0x0, 0x4e20, 0x100, 0x2, 0x20, 0x20, 0x84, r5, r6}, {0x10, 0x1, 0xc31, 0x2, 0x3, 0x66dd, 0x7b, 0xb}, {0x7f, 0x101, 0x7a1752d0, 0x8000}, 0x3, 0x6e6bbf, 0x1, 0x0, 0x3, 0x2}, {{@in6=@remote, 0x4d5, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3506, 0x4, 0x0, 0x9, 0x33, 0xffff, 0x6}}, 0xe8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r11, &(0x7f0000000180), 0x3ef, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r13, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fddbdf250300000008000400fffbffff3800018014000400fe880000000000000000000000000101080006"], 0xa4}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r10, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="08002abd7000fbdbdf0bdb19891f200b251000000008000300", @ANYRES32=r14, @ANYBLOB="0c0099000100000041000000"], 0x28}, 0x1, 0x0, 0x0, 0x24040040}, 0xc001) syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000270000000000019078ac1e00c4c8c069c62e8081a0345b6da5b17bef01ac1414aa050090780300000045000000000016bb35ecfc83da1f5cc2e832877f1ecee22f"], 0x0) r15 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r15, 0x6a, 0x5, 0x0, &(0x7f0000000000)) 922.454622ms ago: executing program 0 (id=15325): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) (async) sendmsg$alg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004a80)=@newtaction={0x1008, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0xff4, 0x1, [@m_ipt={0x60, 0x17, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xadc0}, @TCA_IPT_HOOK={0x8}]}, {0x25, 0x6, "e0bc7743d52057483c234da7396aee1c1620232e9758fc402870746166594df527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ipt={0xf90, 0x7, 0x0, 0x0, {{0x8}, {0x4}, {0xf65, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1008}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) recvmmsg$unix(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0xa2, &(0x7f00000003c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0xa2, &(0x7f00000003c0)}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000080), &(0x7f0000000200)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000080), &(0x7f0000000200)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000ac0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff00007edcff48d744", 0x58}], 0x1) 865.152273ms ago: executing program 4 (id=15326): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa8, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc04308", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r2, 0x952de000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x2324, 0x4, 0x5, 0x101, 0x70bd25, 0x9, {0x2, 0x0, 0x6}, [@generic="f622790e46e93f74e2ac2b5a1b73baf71ba0eddb1495ccf4402c378906f60a3fa1ce0ca29e0df4e44c70213fe9c8ba8e2cc76295d85d22b844059a50e39a41d1fe6744b10364c10160bb666f74b0e6bcf74139a1c85301a6c78f063363a94c970b242d6730fe43781415d25e9e08eaa50fbfe01deb5c155ee875c1691a97a92d8e998c05454230993f9b1fc4d20782b6e263d20a17589cca940533f1b597c24ec8f59fb78583906f6719007c136e85", @nested={0x5f, 0x44, 0x0, 0x1, [@generic="5d921e41da6f81daec0ebd9ce7574d2f2bb66c7d88201918c0d08c99db5c4a49e73432bebc358258eec90124d1e9b48d5a547b45dd1f1956a7d87789dcf37642df3653add9363c6b6268203e88fd425f73bee5", @nested={0x4, 0x90}, @nested={0x4, 0x26}]}, @nested={0x1100, 0x17, 0x0, 0x1, [@nested={0x4, 0x139}, @generic="68cb33bca3ba754a057460add76312a5411f3be6244b652c346f84fa05d2d0cdb462e4dcd68287289d98541c36ef9373f8c033d58c1199eb54e935fdf8c757fd9a72703368588a7c330e771359444df9ca9d20745394da785276efc8ce98016e9e29a868ded4dab9ed99eafefd664fdb815088830997ab6766798a50dbc08ea147915b4e216287f3539aee9baaac7cd2a3c885d38e3507e3cbc95defcc95e8c51631e67f298aff916b353250c099718487c373732489ab0924e7708798c5730aefc3aae0f6651b3bec3bc08d670a6ed1e16604cb95590afaa84805f3b8f418685dcfedc8759519ad29fa590da588cf5f688e4f0656ed2b7d7a43a7c3337d17166dbefb5e22cf4930e10807ae5d4a338ac727726be24ae4725532f3db1407244bdaf0165e6032924f6ba951302660ed4387ac7e85cab1961df591d88153c0f68a7d376201e22eb0a6e03935a61e37b01fb8299f3896fe30e79feb527caeaa28e83a9c9c88b904983e3a54d6ab2e3d0db1545a20eaa17f9c2ebb94617a0430caf927185cadb170c7a9aade8ea023395f978ceca11a2f3e4ee308b283635c13c6137cd0561e5f937a49136508f90e9067ef48cc134a5134a1572d35c93783b14e0946d68c6912db0f2f9a944e8a8815d8e19021ac2bbcc7044db6eec60b8ebb6701ef2240744d6f4618b7452f5c41e720ced4da580de18d56ea3ac3d6b658ef700492274a8488aedcf47e9e159078c0d86c91b29c1a77797622a86ae5fa25a02a69de7501a8a84dad4d9293bbf11e747ae2305326f2b3aee8b9be9ce70c0be6df4ba0ca43bb82de49601d152df33ff903869ad5549dc4b1629d5fb45795d9699618ebebe542f30c49355bff9929e0c04f69087683c1d41e31ccaebe4edc7eff0ac2143937f76c29a83ac610b0986a98a4c3b95aeee8bf4a5c1c93e0dc87687a36f909fc200a72b9bb81f180c6dca7aa0d91b19d45aab3390ccdc0032ed7910ffe0519f135f11f2cee8ff11834c69ed28ccf59cf5a9500bd4276a925e5294b17b61f72eb70ce8e44bb58e7a48a71b70a8e0aca74f6cea9545211e11535fcf229ad36ffbb5a8298e01ec1206c13964fca73f7c7059a6e0e34b800dcef26ae55ebcac72f3c93928092b5625d68f84c0494710bd0e2409602b2485695978773e536dcd7b21d1c9c87cc5b12b418aa8c95db4548d9f0d099a9ad5cc4a4c5d86070571070459534766c0ee143a56663b5e00cf35d405d56c88cd87e9e684edbae30050b2a5a1ed5e3f4666e9d7500ef743c6c43926e92bf01a803469ecc9f910458602222fa1b5cd0166ff03c55c886fabe189aee23a935b709a2a05b6d44fd7486d092482d4e25feaf4b78462196ae5c149fc153603adbd671bc5aa923539338f769cbb4e8b57d0b06c767ed5437c60863aaae420c14059f0ddc28c40b6a08e7857d1d0bdb21935662239e6677ea0f438d5919f6021306acb63a384cf7eaa396479ed3bace536ead4a1d6352952a79afc32ecc5ae9dc68505985df6b51247486086b95612e10578e0548cb009bc5f4c85b0604b1b20b2bfd29ddb795d58ace037b05dfd76f2474594885a2db63b956502049c3a223e1b0acf0e2318aae8a6088550a76d2d34106fe1539251131233ff922abe83b7e81118891dc202c395c0cfb5a1cb7e35cb24e41e0f26364b3f992d0fd5ce7bcf84fb92181790c50f1ac5e5f63543185da08eb28c352d8fc5b076dde35d63a9abeb10ff91de01827056f722d5c1f61d58d973148001af621b9d3ecfdd09c2d850fd69e3c5562e3fbcd31bf2e829aa4b83f2c1e7859c95e1a44d147b091920fcea821cb47906ef05e6aa5c1a0538c5f32e7370526d8a4c929642bb14269d46e2d8a29e96f6b8c930c777a54c4c77a4e3f465aabf69415ddc710db962b90967660d625df00e3585aad15d0c1e6f1083c036d0c8dc3de489ed801e8211ecdeefda6dd0a93828d00867eca8a68ac3beb10f3deb774313ea5458ff3a6d7651dc61646b513d708b15e8fbba8b896252fff829b599a1d9855edeed444e4e8a2d6a06491d32d4bf7ef3cb7072a8c5a03280dcd2c522dc5252f63bcb2b755613e6b57b272e231d1780042f0404b36b59ee4400094b9949403608b7d8d27f4e4af999fb1cf684d99da4b46b9c2c04ad8455ef3bf28a16ba7b4ac469f39c3532b7d471c88c76174e4281bfa24cc5e4246cd8024da3d1dce207b9209b412f51902d63f14dfc06dc30e77e2334eec7df763a8ac358956e30734ef36d279e8443d82b86f75bc5b534cf9b8d3bcd9e83118c31ba9aea15281697b412482bfd19724144e400bfe3f1674b844fd169496c2a57f69bca1a8ccfa4cb7dda0f1521ba944392bdb0846fad04607ceb61e1196b4672cdfd1b32744560ca2dd507c5e2b819d80f12c33b035a6849847760c82c35f13e764a8b578d4b64886937d92181ac180dd7b4cecaff00d02d9b60861ee6b3d18deb749e22985b3e830e6b2265321638b30d849cc7b7f16ca1c25e080b8b7ea34ef3ecb51830e81b68e79cdafab6cbc531bd5a145b0b7775a8c292db89790e622b38fd278a263d04d9da87bf3f680d3cc207ba4babe99ee2cc73d5bab30b98167465ef5a1ea6d579e0b0e91d85407c069f53445d9bb982d81438a511acd4719046c0452142efc8872c4538131d61eba78c954aeb87d4a734db00cb015e0297759c567dba03ee6771c9a91e8c640f9c173e8e93d2bce33f5e4bb226a33feca95fe0900a529478c547c3d9be393e521724a93bd764713fe69360c8536ab2974fc428372f968361e413348768f15e484ac8031b453a65c55df49ca14940311e2a5292c18675de08ea88233175b4df0e211147dfb7d5f28df998bf1e14442e2fcdaf9b05fd7cc68d41933637112ce55fd9bd3d6c5de2fe2573ccdae7eb684b6d5f9165743e36e7102e43d7fbc8dea6b4fe548611fe785eb8494a1c59eea6b3341b7896a04bca54f782e823028c9d93857ae6516dffda77052baf17957554a9a155298ae532704015c03d435f0d1f153919b4581b321dbdb8f716c9be04da6fe356001464a7889f59a1893c843156427d542792f057cba60aba985937cc436b3bdf1241c941fc681b13a2ad3f2f5e41c430818b7797662849bd84e341058bc7b163a35663c6b17999467e5773007f57cc1991091c47df8a74d92fa77458d24aba72a2ce9ee56fc7257a297276b06e61fba27de550721ad58b0d5af50e9366ce4a5493df44eaea5a37feb3c69425ea36d63995beadd9387010e59b27ad97e9592b41082377e7b5704999fc2612b10ce9f7855d691a330935f7f04bef3881d7b55a867c3ffab01110b9e6dc48877c43d8d97cce761b4d1382465434aa810a88290238b9ea4e23081b6f209496a460601b757696e6e4f98d7bc78b690fd63a869813ab44ed5542cc33eacdc0e1416d44426d201807dea043722e3c7e0d124ee451ea83d88d825a66728b84ab5942454183e7326e759616dda5faf337eb4250cc32b3647741c098da45f0d0e9da1b6422fda368f038a14f4e9610de218f22746e81ef41b5f786c64bcde1e692c8b600ccd1e6c1a12152719242f673b5db9929e04b1b5b931dffb31693aac2c134b337c1b8e57f0dcfa6a96c1a30db5f8c19fed88176aa61dcde445c9a64342a1280aee631a3e3442378a25d7ace3e36ad7f52f21b144a282eff8011022070137d64fd60e5d66bce5be7d0a2af0a52a5fa6cdbaa73967907d473880390c3e99a7bcbbdefd7f2cf66264831213d8f2c0b7c721cabdd6b06dc0b151be0adaa1b5364d8a4e13b86682166ebcd91748d24ea2acff810786dd5b6b85399054b05166f7089bfd279dcd0e5467d6cc17bae2a9c30cea6fef2e900bd43a80666f366383686e86166055c67bc8283ee46933d079a97eef5c41643b37d54e039dea8379a1aa5b078c6dbe606d4a64f527c46788a4fca94f97bf8a109036a735ee9bd669910f4faf76bb47b9cd70aa555eb60413fb6123a3f0f832c88d5619668130560bf32d29c9946a49b07a38e14bdded17383dbae7b62e990b446a1e308d87972e4e7a0bd5dddc4edcd922f78a10a659c1f7b751210cbbbbb4a7a4b0346d23aea9dbe193a10470270ad3c37b5adac0824866f013803b5170b290ae2de1dfda16ac77b422e2d7ef6a352c86ff64e2e51e89de5fa8be6b06a3bb1f2a81c170cde4b6b696d619713c0f9e53c5bd205671b4baf49c0e07b11d8e4a296cb3369857830ac32c140913eb274697fe7924d35822e7edf381cc17ef989a0915511d5401221510df8ebf5234821365bbb4c0533bc0cd4b5a72cf4a4dab16fce846700b5c507db13d3921fe68d533b1f7e998140f4d4a09e846345c73a2f18f2eea7a37f9bdc312b19d1766d2ca2fc2cc176a0d4fe33d3823e5556fb2b35e6410f3a54607bc0c8165c81af4834d052557804549b2b6ff6aac349d74e18d04960a02f3bb79e106ee0a02849d284a12a4849f1aca2ec7bc5ed3a3338e8c8891b0f09060a0a466c58a08191d6f9f6bafe7d2e6b806b787fa90e28c1712f9a1aed7ae75f765f207268a1635f7957a640a7804e9ffcb9abe89e0153da4d31876772fd10cf6a0907ef2539b59cae6af9dba418cd03748ab2f75ca7bf335d4d0c1d8b457b0cbe3dd32c39c23400c1a2ba7ff1d20840df66c4af563b28c8d4159ba606ed141ee50a7eb113342620ecd72eb792451501c3d22173326744a2391ed97663f86326afe8446b0cd7256cd4bbdc8696d5856295ea02d8e3dbc2f8c73a8360566971a1b08f7d35ddee37fede1dc7013ccaf74e8cc0b6f44b17e0e18b1b40e5d965cfeb633e588209179fce413302946d207b45751727ef5024f2ea574965b139ffa9d059cfb84d2b08bfd6cc8f8d6390ce8d2dc3d8ebb9f0245efcf4c08aaaf1a0503743f9ee5d6759bb869f361d57ad1cf38869ebfb3ffdddc3741b3502e0caf293856227a43996b74b64115fb22493aaa2ce6b723d8e4e3671b941b56612e696f6db0125f58a72aed5dcb253e06ed5fb3bb92b00167112245e2ac12bee7c7299ee1f4dbdb22008c3accfdca51f80e252cf1985f0462dfad4249132c5bbd14e5d887e873c02dda5f3a7e5d0eb8342e64b8aa05c3206b33a44f3e6ebce357d27fbe75ab2a81b63e6ecb7c81c1f6bb9cc11b576d56c9c51eb751b2c93b8df26dfc12207f451d882082eaa00c8187e7bf5480f513c5812f9108d8ae5857b621b975bd81eb510f3590a69f6695783fc51de0b665ab558038bdf695e06c1f7b563b49008d19e4fa9a3d04cb5fe352990ed0069b4a4d26f69d4f82aa382c4b81656c84d3c2f4ff7fc6a10adf61d56afe62d2914e430384e936a26d0ea845ce9d8dd33acb0bcc8a1de863ecfc848a348606480050287467995ae889b6046fc4c7edde9cd5aa2185b827f228573d772677c95fcc129dad8f99650315c9dfa01641c828df32229228ddf7b57b070c30c3c916fea0b50fd093a335f8565270532ed091e98615848de3f6e40856e55b599964e274f203cc6b1774761af0fa59bedb7b572a6d0209a81542daf9611a607f3b260617be4d2e5da25c50ae95cd0d31fa18ed264586ebf3970b31fd035fa5f915201f8f11cce6e08c7f9e724dd62cda3dae452cb5fbd26da328de17a07583c248908f23ebbee85a24533f4cbb13e4119861f6a42c04517e32af162fc97f8e4c5c75c73873392b14667d74c8f13885d56bc51101cc2e53e0fe09bce62e6a7b703da5d79abc0da8485b46bdeba8dcccd093de35204d04c468124d6fd084", @generic="d09a41beadd55b49e138b704ce5f99f0c8548478880468c027d333d078cc0af49b388a03d30b18d9b501c2db1c969b278724f7806d0e662130ec4b60e5b31e969235bef09c42a8358f4a08064d39916e18802b0c13d4f8a8473a750254bdf7240fd4897d565f9b69ad7722883bab2e8cdbf83aecef4635a21ed037afe9132b1cea2f4652dff08cae14023fd54c42cd61dd6df29e4e8677106142bd0c3eca57edd1f84b07470d69283668479569523ebe503afd8c350b3e2e77ac74c2365c2065997f204b25221716ff62411f0777d7e6027e2e3df5f4247c249c0e1a6758cefd1531e2f1b831daa96137c6b27c0ed69aec94e0209a49268d"]}, @nested={0xc, 0x41, 0x0, 0x1, [@nested={0x4, 0x16}, @nested={0x4, 0xbe}]}, @generic="03ee2a2615c6cc08eda95e75a0de2011d991290cc5cfded8a3f79e64afd8a121d0ae8d6df8d09582cdbb8ad4d517e923e35d7f135a", @typed={0xc, 0x138, 0x0, 0x0, @u64=0x5}, @generic="828742ac3e8acb345d0d65d8fc69af78f2c346a52d9d8f48dbf155f1f7dba1ff17c94654c88d015a6759ec7b18cd67637e6fa5f80a95baa79c66c5c0e2e5a11bf28f85d75cae06988833692822b90a51b57e6a1161a8b0c9d27ae45652bcd96469e08bc75b098f448d1a7d86a666d21015ae22315f457eac70ed06220e4009dbd5b1fbc30f5cf194320cab5b5d97ec8a9f7dd23f4f672700d11f2a7cb7ccde83a44be082423fd59b1a58806146dc410d17", @generic="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"]}, 0x2324}}, 0xc00) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r5, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x439, 0x70bd28, 0x25dfdbf8, {0x0, 0x0, 0x0, r5, 0x0, 0x20000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x401}]}}}]}, 0x38}}, 0x0) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000003c0)={r5, @dev={0xac, 0x14, 0x14, 0xd}, @local}, 0xc) r7 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095", 0x4a}, {&(0x7f0000000600)="e827749185fb5a1aaf6f700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306aeaa0123cc910470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58", 0xa6}], 0x3}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0) 792.566265ms ago: executing program 0 (id=15327): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$pppoe(0x18, 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000020000001d440000000000006b0a20fe"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000e00)={0x0, 0x4}, 0x8) 664.769265ms ago: executing program 3 (id=15328): socket(0x1d, 0x2, 0x1) 609.091679ms ago: executing program 4 (id=15329): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000240)="c29ec8b6dfb1ac05c98713748bfc8db5999dff0e128807da25b4482962928b18c36519d9b0bb0347201aec7a60862eabbff53b8b0aaa1fd8788e6c81f1be279a2703145181a0fcf66c2604824e8ece7112e7832d3634466879aaf42099e7bd17b0f5be", 0x63) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x10c}}, 0x0) 604.730266ms ago: executing program 3 (id=15330): syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x8, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}}}}}}}, 0x0) (async, rerun: 32) r0 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async, rerun: 32) shutdown(r1, 0x1) (rerun: 32) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'batadv_slave_1\x00', &(0x7f0000000280)=@ethtool_gfeatures}) 521.664402ms ago: executing program 0 (id=15331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x124, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xfffffffffffffe71}, {0x8}}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x6}]}, 0x124}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0xd}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) (rerun: 64) 412.404257ms ago: executing program 4 (id=15332): r0 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r0, &(0x7f0000000000), 0x0, 0x40000) 410.87351ms ago: executing program 3 (id=15333): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x40000}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="f4000900062b8825fe80000000000000dc8f850f23846632189c54ebcc00007a000000ad6e911b51", 0x28}], 0x1}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '\xe0+'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x4000081) 408.992996ms ago: executing program 1 (id=15334): r0 = socket(0x29, 0x3, 0x3) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) (async) getsockname$packet(r0, 0x0, &(0x7f0000000380)) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xcd) 256.518608ms ago: executing program 4 (id=15335): openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x440140, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x440140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x18, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) sendmmsg$sock(r8, &(0x7f0000000f00)=[{{&(0x7f0000000200)=@phonet={0x23, 0x9, 0x0, 0x5}, 0x80, 0x0}}], 0x1, 0x200088d0) (async) sendmmsg$sock(r8, &(0x7f0000000f00)=[{{&(0x7f0000000200)=@phonet={0x23, 0x9, 0x0, 0x5}, 0x80, 0x0}}], 0x1, 0x200088d0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc}, {}, {}, [@alu={0x7, 0x0, 0x7, 0x7, 0x7, 0xc, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xffff6d7f, 0x1000, &(0x7f00000022c0)=""/4096, 0x40f00, 0x1, '\x00', r5, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xd, 0x7, 0xfff}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000480)=[0x1], &(0x7f00000004c0)=[{0x3, 0x3, 0xd, 0x9}, {0x0, 0x5, 0xe, 0x9}, {0x3, 0x4, 0x4, 0x6}, {0x5, 0x1, 0x10, 0xa}, {0x2, 0x4, 0x1, 0x8}, {0x2, 0x2, 0xa, 0x6}, {0x3, 0x5, 0xd, 0x1}, {0x0, 0x2, 0x8, 0xc}, {0x3, 0x3, 0x10, 0x5}], 0x10, 0x2}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc}, {}, {}, [@alu={0x7, 0x0, 0x7, 0x7, 0x7, 0xc, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xffff6d7f, 0x1000, &(0x7f00000022c0)=""/4096, 0x40f00, 0x1, '\x00', r5, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xd, 0x7, 0xfff}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000480)=[0x1], &(0x7f00000004c0)=[{0x3, 0x3, 0xd, 0x9}, {0x0, 0x5, 0xe, 0x9}, {0x3, 0x4, 0x4, 0x6}, {0x5, 0x1, 0x10, 0xa}, {0x2, 0x4, 0x1, 0x8}, {0x2, 0x2, 0xa, 0x6}, {0x3, 0x5, 0xd, 0x1}, {0x0, 0x2, 0x8, 0xc}, {0x3, 0x3, 0x10, 0x5}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r1, 0x1e, 0x0, 0x81, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0], 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x20000000}, [@RTA_OIF={0x8, 0x4, r14}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x27}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r15) ioctl$SIOCSIFHWADDR(r15, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@map=r11, r9, 0xc, 0x14, 0x0, @void, @value=r15, @void, @void, r10}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@map=r11, r9, 0xc, 0x14, 0x0, @void, @value=r15, @void, @void, r10}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x52, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 228.821594ms ago: executing program 1 (id=15336): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x3a8, 0x1c0, 0x310, 0xffffffff, 0x268, 0x268, 0x310, 0x310, 0xffffffff, 0x310, 0x310, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @rand_addr=0x64010100, @remote, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0xe8, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x96, 0x0, 0x1}}, @common=@unspec=@limit={{0x48}, {0xf, 0x101, 0x5, 0x3, 0x400005, 0x1, 0x81}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7d4, 0x4, 0x2939, 0x2}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @multicast2, @multicast2, @gre_key=0x4, @port=0x4e20}}}}, {{@ip={@remote, @local, 0xffffff00, 0x0, 'veth0_to_team\x00', 'batadv0\x00', {}, {0xff}, 0x62, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @empty, @empty, @icmp_id=0x64, @gre_key=0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004800011d00000000000000000afe80ff", @ANYRES32=0x0, @ANYBLOB="000000001400010000000000000000000000000000000001080002"], 0x38}}, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="1e000000000000001f0000000000000005100000", @ANYRES32, @ANYBLOB="0000000b00000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x40000) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @bcast, @rose={'rose', 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @bcast]}) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0x3fe}}) 0s ago: executing program 0 (id=15337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00004002063182b7ff000000010000e51a23833733c4080000000900020073797a3000000000629f30c868a031c60000000005f91400040000010000800b04ffffe00000ae42a8d631a7759667ad00"/97], 0x5c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40081) kernel console output (not intermixed with test programs): 2342][T32449] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1484.014217][T32449] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1484.722185][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1488.773849][T32435] net_ratelimit: 182 callbacks suppressed [ 1488.773868][T32435] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1488.788363][T32435] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1488.864210][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1488.872008][T32437] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1488.904253][T32437] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1488.912123][T32437] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1488.983941][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1488.991721][T32437] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1489.024098][T32437] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1489.032003][T32437] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1490.073451][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 1490.081507][ C1] lec:lec_tx_timeout: lec0 [ 1493.785253][T14657] net_ratelimit: 176 callbacks suppressed [ 1493.785278][T14657] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1493.799502][T14657] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1493.844673][T14657] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1493.852477][T14657] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1493.914479][T11376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.924028][T32443] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1493.932179][T32443] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1493.964152][T32435] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1493.972122][T32435] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1494.044023][T32437] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1498.814057][T32435] net_ratelimit: 180 callbacks suppressed [ 1498.814082][T32435] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1498.827748][T32435] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1498.883616][T32449] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1498.891406][T32449] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1498.943490][T14657] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1498.951286][T14657] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1499.003959][T32435] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1499.011825][T32435] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1499.064011][T32443] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1499.071818][T32443] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1503.854090][T32443] net_ratelimit: 180 callbacks suppressed [ 1503.854115][T32443] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1503.868110][T32443] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1503.917114][T32446] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1503.927628][T32446] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1504.010942][T26538] syzkaller1: entered promiscuous mode [ 1504.014223][T32443] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1504.024667][T26538] syzkaller1: entered allmulticast mode [ 1504.045149][T32449] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1504.054650][T32443] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1504.073755][T32449] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1504.127192][T26546] __nla_validate_parse: 4 callbacks suppressed [ 1504.127215][T26546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14032'. [ 1504.164326][T32443] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1504.172395][T32443] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1504.182480][T26548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14035'. [ 1504.234874][T26555] netlink: 'syz.3.14036': attribute type 39 has an invalid length. [ 1504.270223][T26552] netlink: 'syz.3.14036': attribute type 21 has an invalid length. [ 1504.415135][T26555] netlink: 'syz.3.14036': attribute type 21 has an invalid length. [ 1504.437656][T26555] netlink: 'syz.3.14036': attribute type 21 has an invalid length. [ 1504.484274][T26555] netlink: 'syz.3.14036': attribute type 21 has an invalid length. [ 1504.502689][T26555] netlink: 'syz.3.14036': attribute type 21 has an invalid length. [ 1504.512368][T26555] netlink: 'syz.3.14036': attribute type 21 has an invalid length. [ 1504.522667][T26555] netlink: 'syz.3.14036': attribute type 21 has an invalid length. [ 1504.532733][T26555] netlink: 'syz.3.14036': attribute type 21 has an invalid length. [ 1504.553998][T32446] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1504.575487][T26568] xt_cgroup: invalid path, errno=-2 [ 1504.585095][T26555] netlink: 'syz.3.14036': attribute type 21 has an invalid length. [ 1504.595402][T26569] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14041'. [ 1504.644858][T26572] xt_cgroup: invalid path, errno=-2 [ 1504.872390][T26588] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1505.018810][T26595] x_tables: unsorted underflow at hook 3 [ 1505.035655][T26597] x_tables: unsorted underflow at hook 3 [ 1505.150256][T26604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14051'. [ 1505.180307][T26604] SET target dimension over the limit! [ 1505.226794][T26604] syzkaller0: entered promiscuous mode [ 1505.254740][T26604] syzkaller0: entered allmulticast mode [ 1505.532551][T26608] lo speed is unknown, defaulting to 1000 [ 1506.003184][T26633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14057'. [ 1507.945879][T26608]  speed is unknown, defaulting to 1000 [ 1508.078344][T28052] lec:lec_start_xmit: lec0:No lecd attached [ 1508.102350][T26642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14064'. [ 1508.162888][T26652] netlink: 216 bytes leftover after parsing attributes in process `syz.1.14064'. [ 1508.241700][T26652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14064'. [ 1508.330757][T26656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14067'. [ 1508.423131][T26654] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14065'. [ 1508.934471][T14653] net_ratelimit: 362 callbacks suppressed [ 1508.934493][T14653] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1508.949029][T14657] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1508.959763][T26699] openvswitch: netlink: IP tunnel dst address not specified [ 1508.986490][T14653] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1508.995341][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1509.024285][T14653] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1509.038505][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1509.088549][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1509.143567][T14653] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1509.151578][T14653] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1509.222580][T26714] __nla_validate_parse: 2 callbacks suppressed [ 1509.222603][T26714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14082'. [ 1509.357164][T26723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14084'. [ 1509.371237][T26724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14082'. [ 1509.419409][T26728] validate_nla: 25 callbacks suppressed [ 1509.419431][T26728] netlink: 'syz.5.14087': attribute type 1 has an invalid length. [ 1509.446407][T26723] bond8: entered promiscuous mode [ 1509.452489][T26723] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1509.487583][T26730] bridge5: entered promiscuous mode [ 1509.512236][T26730] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 1509.568315][T26723] macvlan0: entered promiscuous mode [ 1509.574360][T26723] macvlan0: entered allmulticast mode [ 1509.580787][T26723] bond8: (slave macvlan0): Error -98 calling set_mac_address [ 1509.687249][T26745] netlink: 'syz.3.14092': attribute type 4 has an invalid length. [ 1509.720706][T26728] bond7: entered promiscuous mode [ 1509.727904][T26728] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1509.783942][T26741] bond7: (slave gretap1): making interface the new active one [ 1509.791785][T26741] gretap1: entered promiscuous mode [ 1509.799159][T26741] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 1509.946936][T26761] netlink: 'syz.4.14094': attribute type 11 has an invalid length. [ 1509.974385][T26761] netlink: 224 bytes leftover after parsing attributes in process `syz.4.14094'. [ 1509.998219][T26760] netlink: 'syz.0.14095': attribute type 12 has an invalid length. [ 1510.185391][T26774] syz_tun: left allmulticast mode [ 1510.367116][T26792] siw: device registration error -23 [ 1510.644155][T26809] C: renamed from lo (while UP) [ 1510.879932][T26821] netlink: 'syz.1.14116': attribute type 1 has an invalid length. [ 1510.906690][T17884] IPVS: starting estimator thread 0... [ 1510.915434][T26821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14116'. [ 1511.006437][T26824] IPVS: using max 27 ests per chain, 64800 per kthread [ 1511.166737][T26831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14118'. [ 1511.337187][T26840] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14122'. [ 1511.455682][T29461] hid-generic 0005:0003:0008.0001: unknown main item tag 0x5 [ 1511.496928][T29461] hid-generic 0005:0003:0008.0001: item fetching failed at offset 1/9 [ 1511.533027][T26852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14125'. [ 1511.564020][T29461] hid-generic 0005:0003:0008.0001: probe with driver hid-generic failed with error -22 [ 1511.670353][T26859] sctp: [Deprecated]: syz.1.14127 (pid 26859) Use of int in maxseg socket option. [ 1511.670353][T26859] Use struct sctp_assoc_value instead [ 1511.848303][T26870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14129'. [ 1511.972118][T26879] netlink: 'syz.4.14133': attribute type 21 has an invalid length. [ 1511.991837][T26879] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14133'. [ 1512.009972][T26880] syzkaller0: entered promiscuous mode [ 1512.026410][T26880] syzkaller0: entered allmulticast mode [ 1512.480906][T26904] netlink: 'syz.5.14141': attribute type 3 has an invalid length. [ 1513.094451][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1513.102595][ C1] lec:lec_tx_timeout: lec0 [ 1513.240236][T26951] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.430629][T26966] netlink: 'syz.3.14157': attribute type 1 has an invalid length. [ 1513.448849][T26951] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.628594][T26951] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.724654][T26951] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.858938][T14651] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.882211][T14651] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.907808][T14651] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.944633][T14657] net_ratelimit: 248 callbacks suppressed [ 1513.944656][T14657] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1513.959770][T32437] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1513.968639][T14651] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.978225][T14657] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1514.006435][T32437] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1514.016144][T32437] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1514.104732][T32443] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1514.150088][T14651] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1514.158387][T14657] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1514.174765][T32437] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1514.184754][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1514.741955][T27018] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1514.776361][T27018] bond7 (unregistering): Released all slaves [ 1514.831143][T27021] gre2: entered promiscuous mode [ 1514.839923][T27021] gre2: entered allmulticast mode [ 1515.449310][T27055] __nla_validate_parse: 3 callbacks suppressed [ 1515.449334][T27055] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14177'. [ 1515.525574][T27064] netlink: 'syz.4.14180': attribute type 1 has an invalid length. [ 1515.661770][T27068] pim6reg1: entered promiscuous mode [ 1515.673851][T27068] pim6reg1: entered allmulticast mode [ 1515.749089][T27073] netlink: 'syz.3.14184': attribute type 18 has an invalid length. [ 1515.817183][T27075] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1515.861076][T27080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14186'. [ 1516.040856][T27090] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14188'. [ 1516.354493][T27107] netlink: 'syz.4.14193': attribute type 32 has an invalid length. [ 1516.362746][T27107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14193'. [ 1516.407146][T27107] bond9: option coupled_control: invalid value (11) [ 1516.439610][T27107] bond9 (unregistering): Released all slaves [ 1516.519394][T27114] IPVS: Error connecting to the multicast addr [ 1516.824757][T27139] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1516.865119][T27138] netlink: 'syz.0.14202': attribute type 1 has an invalid length. [ 1517.161774][T27157] netlink: 'syz.5.14207': attribute type 1 has an invalid length. [ 1517.286887][T27157] bond8: (slave team_slave_0): Enslaving as a backup interface with a down link [ 1517.369063][T27174] netlink: 'syz.4.14209': attribute type 5 has an invalid length. [ 1517.472577][T27177] netlink: 1196 bytes leftover after parsing attributes in process `syz.5.14211'. [ 1517.923513][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1519.054488][T32437] net_ratelimit: 235 callbacks suppressed [ 1519.054515][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1519.063558][T14657] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1519.071711][T32437] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1519.093890][T14653] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1519.101776][T14653] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1519.194201][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1519.202169][T32437] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1519.214450][T32437] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1519.222305][T32437] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1519.314020][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1519.669008][T27130] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1519.696980][T27173] netlink: 'syz.0.14210': attribute type 1 has an invalid length. [ 1519.707236][T27173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14210'. [ 1519.728235][T27173] netlink: 658 bytes leftover after parsing attributes in process `syz.0.14210'. [ 1519.738513][T27173] netlink: 'syz.0.14210': attribute type 1 has an invalid length. [ 1519.754585][T27172] netlink: 'syz.0.14210': attribute type 1 has an invalid length. [ 1519.764065][T27172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14210'. [ 1519.777788][T27172] netlink: 658 bytes leftover after parsing attributes in process `syz.0.14210'. [ 1519.789427][T27172] netlink: 'syz.0.14210': attribute type 1 has an invalid length. [ 1519.958665][T27206] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.14217'. [ 1520.560090][T27245] __nla_validate_parse: 1 callbacks suppressed [ 1520.560111][T27245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14228'. [ 1520.668730][T27252] : renamed from wg0 (while UP) [ 1520.676743][T27245] netlink: 120 bytes leftover after parsing attributes in process `syz.0.14228'. [ 1520.690459][T27245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14228'. [ 1520.965406][T27267] syzkaller1: left promiscuous mode [ 1520.970700][T27267] syzkaller1: left allmulticast mode [ 1520.990821][T27272] syzkaller0: entered allmulticast mode [ 1521.417203][T27290] bond9: entered allmulticast mode [ 1521.546712][T27299] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1521.770074][T27310] netdevsim netdevsim4: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 1521.960620][T27320] nbd: couldn't find a device at index 1 [ 1521.979353][T27322] sctp: [Deprecated]: syz.3.14253 (pid 27322) Use of int in maxseg socket option. [ 1521.979353][T27322] Use struct sctp_assoc_value instead [ 1522.020694][T27320] nbd: couldn't find a device at index 0 [ 1522.059701][T27319] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1522.099917][T27319] bond9 (unregistering): Released all slaves [ 1522.116783][T27331] nbd: couldn't find device at index 3 [ 1522.181291][T27324] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1522.206422][T27324] bond9 (unregistering): Released all slaves [ 1522.366569][T27340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1522.387425][T27340] netlink: 660 bytes leftover after parsing attributes in process `syz.4.14256'. [ 1522.434225][T27345] syzkaller1: entered promiscuous mode [ 1522.439775][T27345] syzkaller1: entered allmulticast mode [ 1522.455330][T27340] netlink: 76 bytes leftover after parsing attributes in process `syz.4.14256'. [ 1522.469737][T27347] netlink: 'syz.0.14259': attribute type 1 has an invalid length. [ 1522.501390][T27349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14260'. [ 1522.521226][T27347] netlink: 'syz.0.14259': attribute type 2 has an invalid length. [ 1522.532786][T27349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14260'. [ 1522.595637][T27349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14260'. [ 1522.650878][T27355] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14261'. [ 1522.848268][T27367] xt_TCPMSS: Only works on TCP SYN packets [ 1523.218724][T27386] bond11: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1523.309557][T27386] bond11: entered promiscuous mode [ 1523.315284][T29461] IPVS: starting estimator thread 0... [ 1523.332403][T27386] bond11: entered allmulticast mode [ 1523.373711][T27386] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1523.385544][T27406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14274'. [ 1523.405821][T27402] IPVS: using max 25 ests per chain, 60000 per kthread [ 1523.447548][T27406] netlink: 'syz.0.14274': attribute type 7 has an invalid length. [ 1523.494256][T27406] netlink: 'syz.0.14274': attribute type 8 has an invalid length. [ 1524.067156][T27425] net_ratelimit: 222 callbacks suppressed [ 1524.067182][T27425] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1524.082455][T17884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1524.093665][T14651] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1524.105829][T14651] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1524.125144][T27425] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1524.224266][T27429] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1524.232239][T27429] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1524.267299][T14651] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1524.292349][T14651] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1524.353444][T27429] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1524.588125][T27481] erspan2: entered allmulticast mode [ 1524.924920][T27499] geneve3: entered promiscuous mode [ 1524.938063][T27499] geneve3: entered allmulticast mode [ 1525.157305][T27510] netlink: 'syz.4.14296': attribute type 10 has an invalid length. [ 1525.232197][T27513] netlink: 'syz.3.14298': attribute type 4 has an invalid length. [ 1525.544787][T27533] syzkaller0: entered promiscuous mode [ 1525.563991][T27533] syzkaller0: entered allmulticast mode [ 1525.576955][T27535] bond1: option mode: unable to set because the bond device has slaves [ 1525.716543][T27548] netlink: 'syz.0.14308': attribute type 5 has an invalid length. [ 1525.766740][T27548] __nla_validate_parse: 14 callbacks suppressed [ 1525.766763][T27548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14308'. [ 1525.954698][T27554] : renamed from bond0 [ 1526.029659][T27559] tipc: Enabled bearer , priority 0 [ 1526.319702][T27576] lo speed is unknown, defaulting to 1000 [ 1526.370403][T27576]  speed is unknown, defaulting to 1000 [ 1526.412588][T27587] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14318'. [ 1526.485202][T27587] bond8: entered promiscuous mode [ 1526.490654][T27587] bond8: entered allmulticast mode [ 1526.497593][T27587] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1526.507595][T27593] netlink: 'syz.1.14319': attribute type 29 has an invalid length. [ 1526.778388][T27610] netlink: 'syz.1.14325': attribute type 5 has an invalid length. [ 1526.791111][T27610] netlink: 404 bytes leftover after parsing attributes in process `syz.1.14325'. [ 1526.807643][T27610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14325'. [ 1526.818425][T27610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14325'. [ 1526.847992][T27610] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14325'. [ 1526.940544][T27615] syzkaller0: entered promiscuous mode [ 1526.949676][T27615] syzkaller0: entered allmulticast mode [ 1527.111144][T27626] xt_cgroup: invalid path, errno=-2 [ 1527.681579][T32437] syzkaller0: tun_net_xmit 76 [ 1527.695911][T32437] syzkaller0: tun_net_xmit 48 [ 1527.704898][T29461] syzkaller0: tun_net_xmit 76 [ 1527.747016][T27661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14338'. [ 1529.076306][T32437] net_ratelimit: 326 callbacks suppressed [ 1529.076331][T32437] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1529.091459][T32449] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1529.130811][T32449] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1529.133407][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1529.153531][T32437] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1529.164843][T32449] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1529.173569][T14653] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1529.194193][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1529.202369][T32437] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1529.221067][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1530.866081][T27695] netlink: 'syz.1.14343': attribute type 1 has an invalid length. [ 1530.887258][T27695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14343'. [ 1530.912194][T27695] netlink: 658 bytes leftover after parsing attributes in process `syz.1.14343'. [ 1530.920265][T27703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14343'. [ 1530.929480][T27695] netlink: 'syz.1.14343': attribute type 1 has an invalid length. [ 1531.164094][T27714] sctp: [Deprecated]: syz.3.14348 (pid 27714) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1531.164094][T27714] Use struct sctp_sack_info instead [ 1531.215427][T27716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14349'. [ 1531.226808][T27716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14349'. [ 1531.282454][T27721] IPVS: set_ctl: invalid protocol: 190 224.0.0.1:20000 [ 1531.295302][T27721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14349'. [ 1531.321363][T27721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14349'. [ 1531.405042][T27721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14349'. [ 1531.566443][T27732] bridge0: port 1(syz_tun) entered blocking state [ 1531.576959][T27732] bridge0: port 1(syz_tun) entered disabled state [ 1531.590056][T27732] syz_tun: entered allmulticast mode [ 1531.598762][T27732] syz_tun: entered promiscuous mode [ 1531.917975][T27749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14358'. [ 1531.949928][T27755] vlan0: entered allmulticast mode [ 1531.974538][T27755] bond0: entered allmulticast mode [ 1531.979736][T27755] bond_slave_0: entered allmulticast mode [ 1532.018970][T27755] bond_slave_1: entered allmulticast mode [ 1532.117859][T27764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14362'. [ 1532.606889][T27804] gtp1: entered promiscuous mode [ 1532.615440][T27804] gtp1: entered allmulticast mode [ 1532.930830][T32440] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1532.983751][T32440] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1533.011020][T32440] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1533.029835][T32440] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1533.226131][T27835] netlink: 'syz.5.14383': attribute type 9 has an invalid length. [ 1533.239617][T27835] netlink: 'syz.5.14383': attribute type 9 has an invalid length. [ 1533.460208][T27846] SET target dimension over the limit! [ 1534.174435][T32440] net_ratelimit: 296 callbacks suppressed [ 1534.174459][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1534.181210][T14653] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1534.192631][T32440] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1534.224154][T14653] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1534.281686][T32440] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1534.303502][T32440] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1534.353522][T14653] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1534.377286][T14653] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1534.433436][T27429] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1534.474431][T11376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.599912][T27889] bridge9: entered promiscuous mode [ 1534.607530][T27889] bridge9: entered allmulticast mode [ 1534.748244][T27909] bridge2: entered promiscuous mode [ 1534.778570][T27909] bridge2: entered allmulticast mode [ 1534.781691][T27912] netlink: 'syz.0.14406': attribute type 1 has an invalid length. [ 1534.862808][T27905] bridge3: entered promiscuous mode [ 1534.881510][T27905] bridge3: entered allmulticast mode [ 1535.037953][T27925] bond0: option packets_per_slave: invalid value (18446744073709551615) [ 1535.047754][T27925] bond0: option packets_per_slave: allowed values 0 - 65535 [ 1535.059643][T27925] bond0 (unregistering): Released all slaves [ 1535.891954][T27972] netlink: 'syz.3.14418': attribute type 1 has an invalid length. [ 1535.926410][T27974] siw: device registration error -23 [ 1535.932174][T27976] siw: device registration error -23 [ 1535.969853][T27972] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1535.991289][T27977] vlan3: entered promiscuous mode [ 1536.004773][T27977] bond9: entered promiscuous mode [ 1536.010157][T27977] vlan3: entered allmulticast mode [ 1536.016438][T27977] bond9: entered allmulticast mode [ 1536.066298][T27972] __nla_validate_parse: 14 callbacks suppressed [ 1536.066320][T27972] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14418'. [ 1536.085740][T27972] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14418'. [ 1536.177539][T27972] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1536.195459][T27972] bond9: (slave batadv2): making interface the new active one [ 1536.221832][T27972] batadv2: entered promiscuous mode [ 1536.231264][T27972] batadv2: entered allmulticast mode [ 1536.244782][T27972] bond9: (slave batadv2): Enslaving as an active interface with an up link [ 1536.378837][T27989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14424'. [ 1536.403074][T27995] syz.1.14425: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1536.420584][T27995] CPU: 1 UID: 0 PID: 27995 Comm: syz.1.14425 Not tainted syzkaller #0 PREEMPT(full) [ 1536.420616][T27995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1536.420631][T27995] Call Trace: [ 1536.420641][T27995] [ 1536.420651][T27995] dump_stack_lvl+0xe8/0x150 [ 1536.420690][T27995] warn_alloc+0x249/0x340 [ 1536.420717][T27995] ? stack_trace_save+0xa9/0x100 [ 1536.420745][T27995] ? __pfx_warn_alloc+0x10/0x10 [ 1536.420777][T27995] ? kasan_save_track+0x4f/0x80 [ 1536.420798][T27995] ? kasan_save_track+0x3e/0x80 [ 1536.420819][T27995] ? __kasan_kmalloc+0x93/0xb0 [ 1536.420840][T27995] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1536.420863][T27995] ? xskq_create+0x56/0x170 [ 1536.420902][T27995] ? xsk_setsockopt+0x54c/0x990 [ 1536.420930][T27995] ? do_sock_setsockopt+0x17c/0x1b0 [ 1536.420956][T27995] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1536.420984][T27995] ? do_syscall_64+0x14d/0xf80 [ 1536.421019][T27995] __vmalloc_node_range_noprof+0x132/0x1730 [ 1536.421074][T27995] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1536.421104][T27995] ? __kasan_kmalloc+0x93/0xb0 [ 1536.421134][T27995] vmalloc_user_noprof+0xad/0xe0 [ 1536.421157][T27995] ? xskq_create+0xbf/0x170 [ 1536.421189][T27995] xskq_create+0xbf/0x170 [ 1536.421223][T27995] xsk_init_queue+0x8a/0xe0 [ 1536.421256][T27995] xsk_setsockopt+0x54c/0x990 [ 1536.421299][T27995] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1536.421337][T27995] ? __pfx_aa_sk_perm+0x10/0x10 [ 1536.421365][T27995] ? aa_sock_opt_perm+0xff/0x1a0 [ 1536.421395][T27995] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1536.421417][T27995] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1536.421448][T27995] do_sock_setsockopt+0x17c/0x1b0 [ 1536.421485][T27995] __x64_sys_setsockopt+0x13d/0x1b0 [ 1536.421522][T27995] do_syscall_64+0x14d/0xf80 [ 1536.421541][T27995] ? trace_irq_disable+0x3b/0x150 [ 1536.421570][T27995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.421593][T27995] ? clear_bhb_loop+0x40/0x90 [ 1536.421620][T27995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.421643][T27995] RIP: 0033:0x7f5e66d9c799 [ 1536.421665][T27995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.421684][T27995] RSP: 002b:00007f5e67b7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1536.421708][T27995] RAX: ffffffffffffffda RBX: 00007f5e67015fa0 RCX: 00007f5e66d9c799 [ 1536.421725][T27995] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1536.421739][T27995] RBP: 00007f5e66e32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 1536.421752][T27995] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1536.421766][T27995] R13: 00007f5e67016038 R14: 00007f5e67015fa0 R15: 00007ffc6fee05f8 [ 1536.421801][T27995] [ 1536.421811][T27995] Mem-Info: [ 1536.639394][T32446] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1536.751573][T27995] active_anon:6752 inactive_anon:0 isolated_anon:0 [ 1536.751573][T27995] active_file:3025 inactive_file:40807 isolated_file:0 [ 1536.751573][T27995] unevictable:768 dirty:125 writeback:0 [ 1536.751573][T27995] slab_reclaimable:15898 slab_unreclaimable:154603 [ 1536.751573][T27995] mapped:29494 shmem:1405 pagetables:3734 [ 1536.751573][T27995] sec_pagetables:0 bounce:0 [ 1536.751573][T27995] kernel_misc_reclaimable:0 [ 1536.751573][T27995] free:1228126 free_pcp:27366 free_cma:0 [ 1536.847690][T27995] Node 0 active_anon:27208kB inactive_anon:0kB active_file:12100kB inactive_file:163024kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:19672kB dirty:500kB writeback:0kB shmem:4084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19364kB pagetables:14768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1536.913907][T27995] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1536.951768][T27995] Node 0 DMA free:11080kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:184kB local_pcp:88kB free_cma:0kB [ 1536.987497][T27995] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1536.994597][T27995] Node 0 DMA32 free:1236104kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27208kB inactive_anon:0kB active_file:12100kB inactive_file:163024kB unevictable:1536kB writepending:500kB zspages:0kB present:3129332kB managed:2552820kB mlocked:0kB bounce:0kB free_pcp:43912kB local_pcp:22764kB free_cma:0kB [ 1537.049176][T27995] lowmem_reserve[]: 0 0 0 0 0 [ 1537.057347][T27995] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1537.090719][T27995] lowmem_reserve[]: 0 0 0 0 0 [ 1537.097411][T27995] Node 1 Normal free:3665372kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:65260kB local_pcp:31744kB free_cma:0kB [ 1537.135118][T27995] lowmem_reserve[]: 0 0 0 0 0 [ 1537.140029][T27995] Node 0 DMA: 0*4kB 3*8kB (U) 1*16kB (U) 3*32kB (U) 1*64kB (U) 3*128kB (U) 3*256kB (U) 3*512kB (U) 2*1024kB (U) 3*2048kB (UM) 0*4096kB = 11080kB [ 1537.193065][T27995] Node 0 DMA32: 12675*4kB (UME) 11039*8kB (UM) 6320*16kB (UM) 802*32kB (UM) 111*64kB (UME) 315*128kB (UME) 749*256kB (UM) 403*512kB (UME) 262*1024kB (UME) 126*2048kB (UM) 0*4096kB = 1237636kB [ 1537.222456][T27995] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1537.237824][T27995] Node 1 Normal: 8*4kB (UE) 22*8kB (UME) 18*16kB (UME) 23*32kB (UME) 17*64kB (UME) 12*128kB (UME) 11*256kB (UM) 10*512kB (UME) 8*1024kB (UM) 10*2048kB (UE) 885*4096kB (UM) = 3665424kB [ 1537.258116][T27995] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1537.269426][T27995] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1537.280092][T27995] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1537.291597][T27995] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1537.304007][T27995] 45234 total pagecache pages [ 1537.308820][T27995] 0 pages in swap cache [ 1537.313120][T27995] Free swap = 124996kB [ 1537.319072][T27995] Total swap = 124996kB [ 1537.324377][T27995] 2097051 pages RAM [ 1537.328421][T27995] 0 pages HighMem/MovableOnly [ 1537.333550][T27995] 427010 pages reserved [ 1537.338676][T27995] 0 pages cma reserved [ 1537.371819][T27987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1537.391040][T27987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1537.468610][T28019] sctp: [Deprecated]: syz.1.14428 (pid 28019) Use of int in max_burst socket option. [ 1537.468610][T28019] Use struct sctp_assoc_value instead [ 1537.488920][T28019] x_tables: duplicate underflow at hook 3 [ 1537.541093][T28015] netlink: 200 bytes leftover after parsing attributes in process `syz.5.14427'. [ 1537.564864][T27429] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1537.583711][T27429] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.592718][T27429] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1537.614071][T27429] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.634464][T27429] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1537.646899][T27429] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.657189][T27429] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1537.706451][T27429] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.760984][T28022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14430'. [ 1537.913181][T28029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14433'. [ 1538.091046][T28044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14436'. [ 1538.132661][T28042] syzkaller1: entered promiscuous mode [ 1538.142376][T28044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14436'. [ 1538.160250][T28042] syzkaller1: entered allmulticast mode [ 1538.323712][T28054] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14439'. [ 1538.356764][T28050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14440'. [ 1538.489926][T28066] gretap0: entered promiscuous mode [ 1538.502558][T28068] netlink: 'syz.5.14443': attribute type 4 has an invalid length. [ 1538.525959][T28070] gretap0: left promiscuous mode [ 1538.819599][T28090] netlink: 'syz.4.14448': attribute type 2 has an invalid length. [ 1539.051187][ T30] audit: type=1800 audit(1772435720.748:17): pid=28104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14453" name="memory.events" dev="tmpfs" ino=2391 res=0 errno=0 [ 1539.132964][ T30] audit: type=1804 audit(1772435720.748:18): pid=28104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.14453" name="/newroot/464/memory.events" dev="tmpfs" ino=2391 res=1 errno=0 [ 1539.260703][T28113] net_ratelimit: 276 callbacks suppressed [ 1539.260726][T28113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.276332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.288452][T27439] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1539.298548][T14653] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1539.308033][T27439] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1539.321622][T14653] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1539.425223][T14651] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1539.448157][T27439] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1539.457627][T14653] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1539.474251][T14653] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1539.628631][T28137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1539.958235][T28158] syzkaller1: entered promiscuous mode [ 1539.969197][T28158] syzkaller1: entered allmulticast mode [ 1540.630164][T28205] netlink: 'syz.4.14484': attribute type 1 has an invalid length. [ 1540.658972][T28205] netlink: 'syz.4.14484': attribute type 1 has an invalid length. [ 1540.680993][T28205] netlink: 'syz.4.14484': attribute type 1 has an invalid length. [ 1540.689622][T28205] netlink: 'syz.4.14484': attribute type 1 has an invalid length. [ 1540.698498][T28205] netlink: 'syz.4.14484': attribute type 1 has an invalid length. [ 1540.707704][T28205] netlink: 'syz.4.14484': attribute type 1 has an invalid length. [ 1540.718115][T28205] netlink: 'syz.4.14484': attribute type 1 has an invalid length. [ 1540.931704][T28217] syzkaller0: entered promiscuous mode [ 1540.948799][T28217] syzkaller0: entered allmulticast mode [ 1541.101153][T27429] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1541.123732][T27429] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1541.153876][T14651] bridge_slave_1: left allmulticast mode [ 1541.160582][T14651] bridge_slave_1: left promiscuous mode [ 1541.172421][T14651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.198394][T14651] bridge_slave_0: left allmulticast mode [ 1541.216911][T14651] bridge_slave_0: left promiscuous mode [ 1541.228393][T14651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.280667][T28236] validate_nla: 58 callbacks suppressed [ 1541.280691][T28236] netlink: 'syz.5.14489': attribute type 4 has an invalid length. [ 1541.296575][T28236] __nla_validate_parse: 71 callbacks suppressed [ 1541.296599][T28236] netlink: 152 bytes leftover after parsing attributes in process `syz.5.14489'. [ 1541.380316][T14651] bond2 (unregistering): (slave ip6gretap0): Releasing active interface [ 1541.498012][T14651] gretap0 (unregistering): left promiscuous mode [ 1541.539187][T14651] dvmrp1 (unregistering): left allmulticast mode [ 1541.612763][T28242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14492'. [ 1541.693603][T14651] bond6 (unregistering): (slave bridge2): Removing an active aggregator [ 1541.702722][T14651] bond6 (unregistering): (slave bridge2): Releasing backup interface [ 1541.721728][T14651] bond6 (unregistering): (slave bridge2): the permanent HWaddr of slave - ea:c4:5b:2d:52:b9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1541.742607][T14651] bridge2 (unregistering): left promiscuous mode [ 1541.751675][T14651] bridge2 (unregistering): left allmulticast mode [ 1541.818337][T14651] bond6 (unregistering): (slave bridge3): Releasing backup interface [ 1541.827693][T14651] bridge3 (unregistering): left promiscuous mode [ 1541.835165][T14651] bridge3 (unregistering): left allmulticast mode [ 1541.903358][T14651] bond0 (unregistering): left promiscuous mode [ 1541.909795][T14651] bond_slave_0: left promiscuous mode [ 1541.925775][T14651] bond_slave_1: left promiscuous mode [ 1541.940757][T14651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1541.961858][T14651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1541.976640][T14651] bond0 (unregistering): Released all slaves [ 1541.992597][T14651] bond1 (unregistering): (slave lo): Releasing backup interface [ 1542.005211][T14651] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1542.024845][T14651] bond1 (unregistering): Released all slaves [ 1542.047019][T14651] bond2 (unregistering): Released all slaves [ 1542.071250][T14651] bond3 (unregistering): Released all slaves [ 1542.098553][T14651] bond4 (unregistering): Released all slaves [ 1542.131254][T14651] bond5 (unregistering): Released all slaves [ 1542.155309][T14651] bond6 (unregistering): Released all slaves [ 1542.178601][T14651] bond7 (unregistering): Released all slaves [ 1542.206690][T14651] bond8 (unregistering): Released all slaves [ 1542.230450][T27429] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1542.240131][T27429] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1542.300618][T28236] .`: renamed from  [ 1542.334376][T28262] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.14498'. [ 1542.424249][T14651] v: left promiscuous mode [ 1542.549331][T28270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14503'. [ 1542.602635][T14651] : left promiscuous mode [ 1542.730185][T14651] tipc: Disabling bearer [ 1542.744737][T14651] tipc: Left network mode [ 1542.787481][T28278] syzkaller1: entered promiscuous mode [ 1542.814652][T28278] syzkaller1: entered allmulticast mode [ 1542.893078][T28278] : entered promiscuous mode [ 1543.081789][T28297] netlink: 'syz.4.14509': attribute type 1 has an invalid length. [ 1543.234284][T28297] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1543.327593][T28300] bond12: (slave batadv1): Opening slave failed [ 1543.527093][T28306] syzkaller1: entered promiscuous mode [ 1543.542167][T28306] syzkaller1: entered allmulticast mode [ 1543.708998][T28331] netlink: 'syz.0.14515': attribute type 16 has an invalid length. [ 1543.724773][T28331] netlink: 'syz.0.14515': attribute type 17 has an invalid length. [ 1543.875110][T28331] 8021q: adding VLAN 0 to HW filter on device team0 [ 1544.013477][T14651] hsr_slave_0: left promiscuous mode [ 1544.022189][T28340] netlink: 'syz.3.14518': attribute type 7 has an invalid length. [ 1544.036011][T14651] hsr_slave_1: left promiscuous mode [ 1544.048142][T28340] netlink: 140 bytes leftover after parsing attributes in process `syz.3.14518'. [ 1544.074767][T14651] vlan0: left allmulticast mode [ 1544.080008][T14651] veth0_vlan: left allmulticast mode [ 1544.089969][T14651] vlan0: left promiscuous mode [ 1544.228855][T28355] ipt_REJECT: ECHOREPLY no longer supported. [ 1544.268133][T32449] net_ratelimit: 335 callbacks suppressed [ 1544.268157][T32449] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1544.268764][T27429] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1544.284591][T28357] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1544.298997][T27429] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1544.308452][T28356] netlink: 'syz.1.14522': attribute type 9 has an invalid length. [ 1544.317423][T32449] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1544.336631][T32449] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1544.348546][T27439] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1544.378072][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1544.386473][T32449] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1544.407555][T27439] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1544.418982][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1545.390849][T14651] pim6reg (unregistering): left allmulticast mode [ 1545.594215][T14651] team0 (unregistering): Port device team_slave_1 removed [ 1545.622693][T14651] team0 (unregistering): Port device team_slave_0 removed [ 1545.722429][T14651] vcan0 (unregistering): left allmulticast mode [ 1545.925147][T28364] netlink: 256 bytes leftover after parsing attributes in process `syz.4.14523'. [ 1546.121560][T28370] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1546.162715][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1546.247134][T28370] bond0 (unregistering): Released all slaves [ 1546.302236][T28388] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.14529'. [ 1546.659434][T28403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14533'. [ 1546.978336][T28415] xt_hashlimit: size too large, truncated to 1048576 [ 1547.048765][T28418] : renamed from vxcan1 [ 1547.125650][T28418] netlink: 596 bytes leftover after parsing attributes in process `syz.4.14535'. [ 1547.503726][T28431] nbd: couldn't find a device at index 0 [ 1547.668533][T28444] netlink: 'syz.1.14542': attribute type 2 has an invalid length. [ 1547.681435][T28441] netlink: 'syz.1.14542': attribute type 8 has an invalid length. [ 1547.714511][T28444] netlink: 'syz.1.14542': attribute type 1 has an invalid length. [ 1547.744188][T28441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14542'. [ 1547.795223][T28441] chnl_net:caif_netlink_parms(): no params data found [ 1547.915665][T28450] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14544'. [ 1548.068338][T28464] tipc: Enabling of bearer rejected, already enabled [ 1548.137083][T28471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14550'. [ 1548.190875][T28474] netlink: 'syz.0.14551': attribute type 21 has an invalid length. [ 1548.526283][T28497] netlink: 'syz.4.14558': attribute type 1 has an invalid length. [ 1549.284790][T32440] net_ratelimit: 339 callbacks suppressed [ 1549.284815][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1549.298942][T32437] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1549.311989][T32437] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1549.344478][T17884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.347468][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1549.373005][T28553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14570'. [ 1549.390204][T32437] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1549.408339][T28553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14570'. [ 1549.436545][T32446] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1549.474515][T17884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.483619][T32446] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1549.523664][T32437] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1549.542522][T28561] netlink: 'syz.0.14573': attribute type 21 has an invalid length. [ 1549.556375][T28553] bridge0: port 1(syz_tun) entered blocking state [ 1549.563347][T28553] bridge0: port 1(syz_tun) entered forwarding state [ 1549.575097][T28558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14572'. [ 1549.605983][T28564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14572'. [ 1549.664852][T28561] bond10: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1549.698428][T28561] bond10 (unregistering): Released all slaves [ 1549.838245][T28558] syzkaller0: entered promiscuous mode [ 1549.887935][T28558] syzkaller0: entered allmulticast mode [ 1550.362744][T28617] tipc: Enabling of bearer rejected, failed to enable media [ 1550.572568][T28632] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.14588'. [ 1551.173830][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1551.182110][ C1] lec:lec_tx_timeout: lec0 [ 1551.559370][T28702] delete_channel: no stack [ 1551.701008][T28719] __nla_validate_parse: 5 callbacks suppressed [ 1551.701030][T28719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14610'. [ 1551.735639][T28716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14609'. [ 1551.922728][T28732] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14612'. [ 1551.941681][T28732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1551.961799][T28732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1551.997366][T28732] batadv0 (unregistering): left promiscuous mode [ 1552.010899][T28731] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1552.139095][T28738] netlink: 'syz.3.14614': attribute type 11 has an invalid length. [ 1552.153097][T28738] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.14614'. [ 1552.340565][T28748] bridge_slave_0: entered promiscuous mode [ 1552.430383][T28755] bond0: (slave gre0): Error: Device type is different from other slaves [ 1552.474387][T28756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14617'. [ 1552.676533][T28765] netlink: 'syz.4.14621': attribute type 11 has an invalid length. [ 1552.856078][T28772] vcan1: entered promiscuous mode [ 1552.866004][T28778] xt_hashlimit: size too large, truncated to 1048576 [ 1552.872291][T28772] vcan1: entered allmulticast mode [ 1552.908160][T28776] netlink: 'syz.0.14625': attribute type 1 has an invalid length. [ 1553.064994][T28776] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1553.111169][T28785] bond10: (slave geneve4): making interface the new active one [ 1553.141764][T28785] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 1553.197653][T14651] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1553.223697][T14651] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1553.255101][T14651] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1553.286125][T14651] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1553.409064][T28808] netlink: 'syz.4.14631': attribute type 3 has an invalid length. [ 1553.418165][T28810] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14631'. [ 1553.427630][T28808] netlink: 766 bytes leftover after parsing attributes in process `syz.4.14631'. [ 1554.313604][T17884] net_ratelimit: 267 callbacks suppressed [ 1554.313626][T17884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.344874][T32437] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1554.354474][T32449] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1554.379582][T32449] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1554.392523][T28839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14639'. [ 1554.402225][T28839] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 1554.414172][T27425] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1554.422000][T27425] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1554.434139][T28839] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14639'. [ 1554.495401][T32449] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1554.534873][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1554.548162][T28843] netlink: 92 bytes leftover after parsing attributes in process `syz.5.14639'. [ 1554.562931][T28848] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1554.728148][T28850] team0: Device ip6gre1 is of different type [ 1554.769448][T28853] tipc: Invalid UDP bearer configuration [ 1554.769513][T28853] tipc: Enabling of bearer rejected, failed to enable media [ 1554.816267][T28857] netlink: 'syz.1.14646': attribute type 11 has an invalid length. [ 1554.932098][T28857] netlink: 'syz.1.14646': attribute type 11 has an invalid length. [ 1555.425486][T28904] netlink: 'syz.5.14657': attribute type 4 has an invalid length. [ 1555.463719][T28904] netlink: 'syz.5.14657': attribute type 4 has an invalid length. [ 1555.634030][T28911] netlink: 'syz.5.14660': attribute type 6 has an invalid length. [ 1555.793490][T28917] IPVS: set_ctl: invalid protocol: 0 172.20.20.63:20004 [ 1555.987541][T28928] IPv6: NLM_F_CREATE should be specified when creating new route [ 1556.156656][T32440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1556.168704][T32440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1556.216203][T28943] netlink: 'syz.3.14669': attribute type 1 has an invalid length. [ 1556.641919][T28978] netlink: 'syz.1.14678': attribute type 10 has an invalid length. [ 1556.654346][T14651] bridge_slave_0: left promiscuous mode [ 1556.660178][T14651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.850790][T28986] __nla_validate_parse: 9 callbacks suppressed [ 1556.850812][T28986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14681'. [ 1556.946046][T28989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14680'. [ 1557.001558][T28993] x_tables: unsorted underflow at hook 4 [ 1557.133798][T14651] bond11 (unregistering): (slave vti1): Releasing backup interface [ 1557.155257][T14651] vti1 (unregistering): left promiscuous mode [ 1557.293152][T14651] bond10 (unregistering): (slave gretap2): Releasing active interface [ 1557.330109][T29002] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14683'. [ 1557.399561][T14651] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1557.412298][T29004] netlink: 'syz.5.14683': attribute type 23 has an invalid length. [ 1557.508637][T14651] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 1557.519881][T14651] bridge1 (unregistering): left promiscuous mode [ 1557.701932][T14651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1557.715212][T14651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1557.726326][T14651] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1557.736832][T14651] bond0 (unregistering): Released all slaves [ 1557.751203][T14651] bond1 (unregistering): Released all slaves [ 1557.767582][T14651] bond2 (unregistering): Released all slaves [ 1557.791987][T14651] bond3 (unregistering): Released all slaves [ 1557.807630][T14651] bond4 (unregistering): Released all slaves [ 1557.830667][T14651] bond5 (unregistering): Released all slaves [ 1557.851623][T14651] bond6 (unregistering): Released all slaves [ 1557.878243][T14651] bond7 (unregistering): Released all slaves [ 1557.893564][T14651] bond8 (unregistering): Released all slaves [ 1557.909126][T14651] bond9 (unregistering): Released all slaves [ 1557.926068][T14651] bond10 (unregistering): Released all slaves [ 1557.950363][T14651] bond11 (unregistering): Released all slaves [ 1557.966712][T14651] bond12 (unregistering): Released all slaves [ 1557.987633][T28978] veth0_macvtap: left promiscuous mode [ 1558.213963][T14651] tipc: Disabling bearer [ 1558.244867][T14651] tipc: Left network mode [ 1558.534292][T29024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14692'. [ 1558.563825][T29024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14692'. [ 1558.915011][T29051] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14697'. [ 1559.267768][T29061] netlink: 'syz.0.14702': attribute type 21 has an invalid length. [ 1559.334471][T32440] net_ratelimit: 305 callbacks suppressed [ 1559.334494][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1559.348492][T27425] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1559.380466][T32440] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1559.389309][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1559.443688][T32440] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1559.453415][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1559.485153][T32449] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1559.493109][T32449] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1559.504373][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1559.514879][T14651] hsr_slave_1: left promiscuous mode [ 1559.536434][T32449] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1559.831647][T14651] s5 (unregistering): left allmulticast mode [ 1559.842082][T14651] veth0_vlan (unregistering): left allmulticast mode [ 1559.889265][T29086] netlink: 'syz.5.14709': attribute type 10 has an invalid length. [ 1559.960292][T14651] team0 (unregistering): Port device team_slave_1 removed [ 1559.977712][T14651] team0 (unregistering): Port device team_slave_0 removed [ 1560.117890][T29061] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14702'. [ 1560.138682][T29086] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1560.203070][T29088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14710'. [ 1560.338757][T29093] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.14713'. [ 1560.474144][T32553] Bluetooth: hci1: command 0x0405 tx timeout [ 1560.505703][T29104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14712'. [ 1561.057584][T29127] netlink: 'syz.1.14723': attribute type 1 has an invalid length. [ 1561.152128][T14651] IPVS: stop unused estimator thread 0... [ 1561.232274][T29141] xt_hashlimit: overflow, rate too high: 0 [ 1561.991760][T29169] __nla_validate_parse: 2 callbacks suppressed [ 1561.991788][T29169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14736'. [ 1562.051662][T29169] netlink: 2 bytes leftover after parsing attributes in process `syz.0.14736'. [ 1562.074968][T29169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14736'. [ 1562.088401][T29169] netlink: 2 bytes leftover after parsing attributes in process `syz.0.14736'. [ 1562.099150][T29171] tc_dump_action: action bad kind [ 1562.439148][T29193] netlink: 'syz.1.14744': attribute type 4 has an invalid length. [ 1562.448265][T29194] netlink: 'syz.1.14744': attribute type 4 has an invalid length. [ 1563.208582][T29218] netlink: 'syz.1.14750': attribute type 1 has an invalid length. [ 1563.418119][T29226] syzkaller0: entered promiscuous mode [ 1563.463791][T29226] syzkaller0: entered allmulticast mode [ 1563.622675][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1563.645388][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1563.661775][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1563.671603][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1563.682936][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1563.908800][T29229] lo speed is unknown, defaulting to 1000 [ 1563.937257][T29229]  speed is unknown, defaulting to 1000 [ 1564.136612][T29238] vcan0: entered allmulticast mode [ 1564.354644][T27429] net_ratelimit: 338 callbacks suppressed [ 1564.354669][T27429] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1564.370481][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1564.395827][T29261] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14761'. [ 1564.407627][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1564.413711][T32449] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1564.445014][T32449] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1564.460381][T32449] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1564.471028][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1564.482766][T32449] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1564.515550][T32449] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1564.544760][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1564.574171][T29263] netlink: 'syz.5.14758': attribute type 4 has an invalid length. [ 1564.691943][T29270] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14762'. [ 1564.881808][T29284] xt_TCPMSS: Only works on TCP SYN packets [ 1565.068747][T29282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14764'. [ 1565.310451][T29299] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14768'. [ 1565.338471][T29294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14767'. [ 1565.563798][T29305] syzkaller1: entered promiscuous mode [ 1565.569350][T29305] syzkaller1: entered allmulticast mode [ 1565.630695][T29303] C: renamed from lo (while UP) [ 1565.685077][T29315] netlink: 512 bytes leftover after parsing attributes in process `syz.4.14771'. [ 1565.754620][ T5829] Bluetooth: hci3: command tx timeout [ 1565.803107][T29229] chnl_net:caif_netlink_parms(): no params data found [ 1566.137389][T29229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.156727][T29229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.173958][T29229] bridge_slave_0: entered allmulticast mode [ 1566.184533][T29229] bridge_slave_0: entered promiscuous mode [ 1566.212731][T29229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.229115][T29229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.244722][T29229] bridge_slave_1: entered allmulticast mode [ 1566.276099][T29229] bridge_slave_1: entered promiscuous mode [ 1566.391757][T29229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1566.524870][T29349] bond9: entered promiscuous mode [ 1566.540429][T29349] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1566.604951][T29229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1566.692877][T29363] netlink: 'syz.4.14785': attribute type 6 has an invalid length. [ 1566.737963][T29363] netlink: 'syz.4.14785': attribute type 6 has an invalid length. [ 1566.778523][T29229] team0: Port device team_slave_0 added [ 1566.817031][T29229] team0: Port device team_slave_1 added [ 1566.826639][T29340] infiniband : set down [ 1566.831030][T29340] infiniband : added ipvlan0 [ 1566.876669][T29340] RDS/IB: : added [ 1566.880641][T29340] smc: adding ib device  with port count 1 [ 1566.890063][T29340] smc: ib device  port 1 has no pnetid [ 1566.912830][T29229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1566.924067][T29229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.951935][T29229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1566.994621][T29229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1567.001645][T29229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1567.041525][T29229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.178783][T29229] hsr_slave_0: entered promiscuous mode [ 1567.219369][T29229] hsr_slave_1: entered promiscuous mode [ 1567.229283][T29229] debugfs: 'hsr0' already exists in 'hsr' [ 1567.253711][T29229] Cannot create hsr debugfs directory [ 1567.761750][T29229] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.808887][T29398] tipc: Failed to remove unknown binding: 66,0,0/4269801492:2698044597/2698044598 [ 1567.819759][T29402] __nla_validate_parse: 10 callbacks suppressed [ 1567.819780][T29402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14797'. [ 1567.822337][T29229] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1567.845823][ T5829] Bluetooth: hci3: command tx timeout [ 1567.865736][T29398] tipc: Failed to remove unknown binding: 66,0,0/4269801492:2698044597/2698044598 [ 1567.923558][T29407] netlink: 204 bytes leftover after parsing attributes in process `syz.4.14797'. [ 1568.001112][T29229] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.026946][T29229] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1568.110524][T29229] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.151798][T29229] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1568.280484][T29229] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.302289][T29229] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1568.554477][T14651] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1568.929440][T29433] set match dimension is over the limit! [ 1569.152745][T29438] netlink: 'syz.5.14805': attribute type 4 has an invalid length. [ 1569.170114][T29229] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1569.204075][T29439] netlink: 'syz.5.14805': attribute type 4 has an invalid length. [ 1569.245426][T29229] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1569.283072][T29229] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1569.308676][T29229] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1569.384392][T32440] net_ratelimit: 380 callbacks suppressed [ 1569.384412][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1569.398790][T27429] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1569.437488][T32440] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1569.446124][T27425] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1569.454622][T32440] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1569.470177][T29452] IPVS: set_ctl: invalid protocol: 103 172.20.20.50:20002 [ 1569.484580][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1569.508339][T32449] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1569.544062][T27425] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1569.584802][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1569.592798][T27425] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1569.738393][T29459] netlink: 256 bytes leftover after parsing attributes in process `syz.5.14809'. [ 1569.780028][T29459] netlink: 'syz.5.14809': attribute type 9 has an invalid length. [ 1569.805354][T29229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1569.841180][T29229] 8021q: adding VLAN 0 to HW filter on device team0 [ 1569.862502][T27429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.869790][T27429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1569.908241][T27429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1569.915579][T27429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1569.924882][ T5829] Bluetooth: hci3: command tx timeout [ 1570.547686][T29229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1570.659201][T29492] bond10: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1570.675109][T29492] bond10 (unregistering): Released all slaves [ 1570.744873][T29229] veth0_vlan: entered promiscuous mode [ 1570.852491][T29229] veth1_vlan: entered promiscuous mode [ 1570.926468][T29229] veth0_macvtap: entered promiscuous mode [ 1570.939572][T29229] veth1_macvtap: entered promiscuous mode [ 1570.978097][T29229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1571.017208][T29229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1571.038288][T32440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.047741][T32440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.069504][T32440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.088617][T32440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.200381][T27429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.210820][T27429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.286186][T27429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.307608][T27429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.994195][ T5829] Bluetooth: hci3: command tx timeout [ 1572.563531][T28052] lec:lec_start_xmit: lec0:No lecd attached [ 1574.394308][T27425] net_ratelimit: 212 callbacks suppressed [ 1574.394335][T27425] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1574.408847][T14651] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1574.417948][T27425] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1574.434128][T14651] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1574.442031][T14651] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1574.534316][T32449] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1574.542128][T32449] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1574.555108][T27425] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1574.563053][T27425] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1574.653462][T14653] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1578.073415][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 1578.081763][ C1] lec:lec_tx_timeout: lec0 [ 1579.405223][T14651] net_ratelimit: 177 callbacks suppressed [ 1579.405247][T14651] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1579.420234][T14651] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1579.434307][T27429] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1579.442117][T27429] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1579.450239][T29464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.533699][T32449] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1579.541638][T32449] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1579.564052][T32449] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1579.571937][T32449] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1579.654174][T14653] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1584.444770][T32440] net_ratelimit: 179 callbacks suppressed [ 1584.444796][T32440] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1584.458908][T32440] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1584.494134][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1584.501949][T32440] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1584.556530][T17886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1584.574098][T27425] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1584.582073][T27425] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1584.614052][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1584.621849][T32440] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1584.694415][T27425] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1589.455160][T14653] net_ratelimit: 177 callbacks suppressed [ 1589.455186][T14653] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1589.469217][T14653] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1589.494047][T14653] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1589.501927][T14653] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1589.583694][T27425] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1589.591524][T27425] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1589.613892][T27425] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1589.621751][T27425] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1589.678346][T29464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.704380][T27425] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1591.784209][T29512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14822'. [ 1591.949569][T29523] : renamed from hsr0 (while UP) [ 1592.024674][T29525] sctp: [Deprecated]: syz.4.14828 (pid 29525) Use of int in max_burst socket option deprecated. [ 1592.024674][T29525] Use struct sctp_assoc_value instead [ 1592.140492][T29538] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14830'. [ 1592.291805][T29547] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14832'. [ 1592.382563][T29556] Bluetooth: MGMT ver 1.23 [ 1592.446027][T29561] netlink: 104 bytes leftover after parsing attributes in process `syz.5.14834'. [ 1592.475775][T29561] netlink: 104 bytes leftover after parsing attributes in process `syz.5.14834'. [ 1592.519182][T29562] can: request_module (can-proto-0) failed. [ 1592.542737][T29553] can: request_module (can-proto-0) failed. [ 1592.597718][T29568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14839'. [ 1592.659047][T29567] netlink: 'syz.0.14838': attribute type 1 has an invalid length. [ 1592.671551][T29571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14840'. [ 1592.735161][T29577] netlink: 'syz.4.14840': attribute type 83 has an invalid length. [ 1592.771611][T29577] netlink: 'syz.4.14840': attribute type 1 has an invalid length. [ 1592.813413][T29577] netlink: 228 bytes leftover after parsing attributes in process `syz.4.14840'. [ 1592.856044][T29577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14840'. [ 1592.889546][T29587] netlink: 'syz.1.14845': attribute type 6 has an invalid length. [ 1592.899067][T29588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14843'. [ 1592.926957][T29587] netlink: 'syz.1.14845': attribute type 6 has an invalid length. [ 1593.650620][T29637] netlink: 'syz.0.14856': attribute type 1 has an invalid length. [ 1593.658903][T29637] netlink: 'syz.0.14856': attribute type 1 has an invalid length. [ 1594.129179][T29662] macvlan1: entered allmulticast mode [ 1594.169597][T29662] veth1_vlan: entered allmulticast mode [ 1594.183029][T29662] macvlan1: entered promiscuous mode [ 1594.369555][T29681] netlink: 'syz.4.14867': attribute type 7 has an invalid length. [ 1594.484109][T29695] netlink: 'syz.5.14871': attribute type 1 has an invalid length. [ 1594.544063][T27425] net_ratelimit: 223 callbacks suppressed [ 1594.544088][T27425] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1594.558050][T32437] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1594.593437][T27425] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1594.610435][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1594.630827][T27425] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1594.640407][T17869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1594.673447][T27425] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1594.681338][T27425] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1594.773970][T32440] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1594.803562][T32440] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1595.824793][T29766] netlink: 'syz.4.14893': attribute type 2 has an invalid length. [ 1595.901185][T29768] sctp: [Deprecated]: syz.4.14894 (pid 29768) Use of int in max_burst socket option. [ 1595.901185][T29768] Use struct sctp_assoc_value instead [ 1596.835334][T29775] __nla_validate_parse: 19 callbacks suppressed [ 1596.835356][T29775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14896'. [ 1598.229777][T29735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1598.239491][T29740] netlink: 256 bytes leftover after parsing attributes in process `syz.0.14887'. [ 1598.448832][T29797] validate_nla: 1 callbacks suppressed [ 1598.448856][T29797] netlink: 'syz.1.14902': attribute type 1 has an invalid length. [ 1598.474445][T29797] netlink: 'syz.1.14902': attribute type 7 has an invalid length. [ 1598.482510][T29797] netlink: 'syz.1.14902': attribute type 8 has an invalid length. [ 1598.495332][T29797] netlink: 208 bytes leftover after parsing attributes in process `syz.1.14902'. [ 1598.507254][T29797] NCSI netlink: No device for ifindex 65584 [ 1598.524501][T29797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14902'. [ 1598.534365][T29797] netlink: 'syz.1.14902': attribute type 5 has an invalid length. [ 1598.546783][T29797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14902'. [ 1598.605537][T29803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14902'. [ 1598.653053][T29805] netlink: 'syz.3.14905': attribute type 2 has an invalid length. [ 1598.663496][T29797] geneve2: entered promiscuous mode [ 1598.668777][T29797] geneve2: entered allmulticast mode [ 1598.710707][T14651] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 1598.723425][T14651] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 1598.749833][T29808] 8021q: adding VLAN 0 to HW filter on device team0 [ 1598.760100][T14651] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 1598.827439][T14651] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 1598.886756][T29815] syzkaller0: entered promiscuous mode [ 1598.892318][T29815] syzkaller0: entered allmulticast mode [ 1598.936498][T29819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14909'. [ 1599.053470][T29827] netlink: 'syz.4.14913': attribute type 1 has an invalid length. [ 1599.085273][T29828] bridge_slave_0: default FDB implementation only supports local addresses [ 1599.114099][T29827] bridge_slave_0: default FDB implementation only supports local addresses [ 1599.595085][T14651] net_ratelimit: 202 callbacks suppressed [ 1599.595109][T14651] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1599.609942][T27429] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1599.619674][T27429] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1599.644654][T32440] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1599.658167][T32440] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1599.674170][T29464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1599.731444][T29875] syzkaller0: entered promiscuous mode [ 1599.746519][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1599.761299][T29875] syzkaller0: entered allmulticast mode [ 1599.767458][T29872] 0: reclassify loop, rule prio 0, protocol 800 [ 1599.773854][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1599.794093][T27429] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1599.990175][T29886] netlink: 'syz.5.14930': attribute type 32 has an invalid length. [ 1600.155957][T29888] can: request_module (can-proto-0) failed. [ 1600.446183][T29923] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14939'. [ 1600.526394][T29926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14940'. [ 1600.545620][T29926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14940'. [ 1600.556746][T27429] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1600.571911][T29930] x_tables: ip6_tables: HL target: only valid in mangle table, not wg1 [ 1600.756179][T29942] vlan1: entered promiscuous mode [ 1600.843981][T29948] netlink: 'syz.3.14947': attribute type 9 has an invalid length. [ 1601.098431][T29963] nbd: couldn't find a device at index 0 [ 1601.661929][T29999] bond10: Unable to set up delay as MII monitoring is disabled [ 1601.692799][T29999] bond10 (unregistering): Released all slaves [ 1601.800556][T30001] netlink: 'syz.0.14963': attribute type 1 has an invalid length. [ 1602.058636][T30023] syzkaller0: entered promiscuous mode [ 1602.076775][T30023] syzkaller0: entered allmulticast mode [ 1602.274874][T30028] __nla_validate_parse: 4 callbacks suppressed [ 1602.274893][T30028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14971'. [ 1602.794017][T30057] x_tables: duplicate underflow at hook 3 [ 1602.882968][T30059] bond15: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1602.901174][T30059] bond15: entered promiscuous mode [ 1602.911871][T30059] bond15: entered allmulticast mode [ 1602.918553][T30059] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1602.966410][T30064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14981'. [ 1603.187807][T30077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14986'. [ 1603.204881][T30077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14986'. [ 1603.267605][T30082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14988'. [ 1603.638562][T30110] netlink: 'syz.4.14995': attribute type 2 has an invalid length. [ 1603.798059][ T30] audit: type=1107 audit(1772435785.498:19): pid=30118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='@v38ƯǍQ.Nwmk,' [ 1603.826341][T30122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14999'. [ 1603.836540][T30122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14999'. [ 1603.856944][T30122] netlink: 'syz.5.14999': attribute type 12 has an invalid length. [ 1603.895031][T30122] netlink: 'syz.5.14999': attribute type 11 has an invalid length. [ 1604.015180][T30129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15001'. [ 1604.350463][T30142] tipc: Enabling of bearer rejected, failed to enable media [ 1604.627811][T14651] net_ratelimit: 245 callbacks suppressed [ 1604.627833][T14651] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1604.631303][T27429] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1604.657697][T27425] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1604.683651][T27429] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1604.692984][T30161] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15008'. [ 1604.705271][T27429] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1604.726626][T14651] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1604.735948][T14651] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1604.743975][T30165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15010'. [ 1604.763562][T27429] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1604.799249][T14653] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1604.845835][T14653] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1604.950830][T30171] netlink: 'syz.1.15011': attribute type 3 has an invalid length. [ 1605.048741][T30173] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1605.486998][T30204] netlink: 'syz.0.15022': attribute type 1 has an invalid length. [ 1605.586843][T30204] bond1: entered promiscuous mode [ 1605.596991][T30204] bond1: entered allmulticast mode [ 1605.602797][T30204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1605.664176][T30204] macvlan2: entered promiscuous mode [ 1605.669666][T30204] macvlan2: entered allmulticast mode [ 1605.698646][T30204] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1606.037664][T30227] lec:lec_atm_close: lec0: Shut down! [ 1606.141490][T30235] bridge2: entered promiscuous mode [ 1606.168050][T30235] bridge2: entered allmulticast mode [ 1606.236815][T30235] team0: Port device bridge2 added [ 1606.271537][T30244] bridge0: port 3(team0) entered blocking state [ 1606.278412][T30244] bridge0: port 3(team0) entered disabled state [ 1606.290278][T30244] team0: entered allmulticast mode [ 1606.304188][T30244] team_slave_0: entered allmulticast mode [ 1606.310090][T30244] team_slave_1: entered allmulticast mode [ 1606.341602][T30244] team0: entered promiscuous mode [ 1606.399798][T30244] team_slave_0: entered promiscuous mode [ 1606.440437][T30244] team_slave_1: entered promiscuous mode [ 1606.450541][T30244] bridge0: port 3(team0) entered blocking state [ 1606.457120][T30244] bridge0: port 3(team0) entered forwarding state [ 1606.570610][T30263] vxcan2: entered allmulticast mode [ 1606.763703][T30276] IPv6: NLM_F_CREATE should be specified when creating new route [ 1606.969983][T30283] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20003 [ 1607.149726][T30300] ip6gre0: Master is either lo or non-ether device [ 1607.323694][T30307] __nla_validate_parse: 13 callbacks suppressed [ 1607.323716][T30307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15050'. [ 1607.395512][T14651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.406094][T14651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.595967][T30329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15059'. [ 1607.614717][T30328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15057'. [ 1607.700401][T30337] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1607.912531][T30348] 8021q: adding VLAN 0 to HW filter on device team0 [ 1607.940874][T30348] team0: Cannot enslave team device to itself [ 1607.954977][T30347] team0: Cannot enslave team device to itself [ 1608.208739][T30372] netlink: 64 bytes leftover after parsing attributes in process `syz.1.15070'. [ 1608.265706][T30372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15070'. [ 1608.425833][T30387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15073'. [ 1608.437007][T30385] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15072'. [ 1608.450959][T30387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15073'. [ 1608.479222][T30387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15073'. [ 1608.499705][T30387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15073'. [ 1608.630316][T30387] can: request_module (can-proto-0) failed. [ 1609.228511][T32553] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1609.242545][T32553] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1609.256891][T32553] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1609.266567][T32553] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1609.280291][T32553] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1609.338654][T30427] lo speed is unknown, defaulting to 1000 [ 1609.347468][T30427]  speed is unknown, defaulting to 1000 [ 1609.634336][T27425] net_ratelimit: 258 callbacks suppressed [ 1609.634361][T27425] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1609.643611][T27429] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1609.660475][T27425] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1609.684987][T27429] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1609.784345][T32437] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1609.796006][T14653] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1609.803808][T32437] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1609.817685][T14653] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1609.904779][T18959] bridge0: port 1(syz_tun) entered disabled state [ 1609.916874][T32437] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1609.950753][T14651] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1609.997348][T18959] syz_tun (unregistering): left allmulticast mode [ 1610.011029][T18959] syz_tun (unregistering): left promiscuous mode [ 1610.019822][T18959] bridge0: port 1(syz_tun) entered disabled state [ 1610.138674][T27425] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1610.153006][T27425] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.169450][T27425] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1610.288229][T27425] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1610.306009][T27425] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.335080][T27425] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1610.417605][T27425] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1610.430214][T27425] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.440650][T27425] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1610.552465][T27425] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1610.611033][T27425] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.644992][T27425] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1610.871274][T32437] netdevsim netdevsim1 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1610.890362][T30493] tipc: Started in network mode [ 1610.904120][T30493] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 1610.941630][T30493] tipc: Enabled bearer , priority 2 [ 1611.011919][T30427] chnl_net:caif_netlink_parms(): no params data found [ 1611.043828][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1611.052115][ C1] lec:lec_tx_timeout: lec0 [ 1611.057652][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1611.065744][T14651] netdevsim netdevsim1 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1611.190842][T14651] netdevsim netdevsim1 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1611.237397][T32437] netdevsim netdevsim1 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1611.329246][T30508] syzkaller0: entered promiscuous mode [ 1611.344180][T30508] syzkaller0: entered allmulticast mode [ 1611.353497][ T5829] Bluetooth: hci5: command tx timeout [ 1611.645602][T30536] netlink: 'syz.3.15112': attribute type 1 has an invalid length. [ 1611.779922][T27425] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 1611.953837][T27425] dvmrp6 (unregistering): left allmulticast mode [ 1611.965193][T27425] dvmrp1 (unregistering): left allmulticast mode [ 1612.208674][T27425] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 1612.217969][T27425] bridge4 (unregistering): left promiscuous mode [ 1612.642252][T27425] bond0 (unregistering): Released all slaves [ 1612.653798][T27425] bond1 (unregistering): Released all slaves [ 1612.670575][T27425] bond2 (unregistering): Released all slaves [ 1612.688621][T27425] bond3 (unregistering): Released all slaves [ 1612.710815][T27425] bond4 (unregistering): Released all slaves [ 1612.732457][T27425] bond5 (unregistering): Released all slaves [ 1612.758947][T27425] bond6 (unregistering): Released all slaves [ 1612.774236][T27425] bond7 (unregistering): Released all slaves [ 1612.789193][T27425] bond8 (unregistering): Released all slaves [ 1612.811619][T27425] bond9 (unregistering): Released all slaves [ 1612.891170][T17884] tipc: Node number set to 10463914 [ 1613.135829][T27425] tipc: Disabling bearer [ 1613.158859][T27425] tipc: Disabling bearer [ 1613.170155][T30554] netlink: 'syz.5.15115': attribute type 1 has an invalid length. [ 1613.178847][T27425] tipc: Left network mode [ 1613.255949][T30547] bond16: Unable to set up delay as MII monitoring is disabled [ 1613.272665][T30547] bond16 (unregistering): Released all slaves [ 1613.326909][T30427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1613.358673][T30427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.381280][T30427] bridge_slave_0: entered allmulticast mode [ 1613.431215][T30427] bridge_slave_0: entered promiscuous mode [ 1613.438489][ T5829] Bluetooth: hci5: command tx timeout [ 1613.556884][T30427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.591087][T30572] __nla_validate_parse: 4 callbacks suppressed [ 1613.591109][T30572] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15119'. [ 1613.597740][T30427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.598053][T30427] bridge_slave_1: entered allmulticast mode [ 1613.602889][T30427] bridge_slave_1: entered promiscuous mode [ 1613.974977][T30578] nbd: couldn't find a device at index 0 [ 1614.087144][T30427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1614.187516][T30427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1614.455865][T30597] syzkaller1: entered promiscuous mode [ 1614.461876][T30597] syzkaller1: entered allmulticast mode [ 1614.477883][T30607] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1614.657891][T14653] net_ratelimit: 379 callbacks suppressed [ 1614.657918][T14653] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1614.673716][T14651] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1614.694402][T14653] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1614.694431][T32449] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1614.731626][T32449] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1614.739838][T32437] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1614.778829][T32437] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1614.779989][T32449] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1614.818829][T32449] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1614.827939][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1615.517854][ T5829] Bluetooth: hci5: command tx timeout [ 1616.077738][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1616.085825][ C1] lec:lec_tx_timeout: lec0 [ 1617.380196][T30427] team0: Port device team_slave_0 added [ 1617.398706][T30427] team0: Port device team_slave_1 added [ 1617.552923][T30653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15134'. [ 1617.596275][T32553] Bluetooth: hci5: command tx timeout [ 1617.598268][T30653] netlink: 'syz.4.15134': attribute type 7 has an invalid length. [ 1617.641921][T30653] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15134'. [ 1617.657802][T30427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1617.665842][T30427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1617.699005][T30427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1617.715460][T30427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1617.722640][T30427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1617.751773][T30427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1618.060410][T30427] hsr_slave_0: entered promiscuous mode [ 1618.099020][T30427] hsr_slave_1: entered promiscuous mode [ 1618.116078][T30427] debugfs: 'hsr0' already exists in 'hsr' [ 1618.121883][T30427] Cannot create hsr debugfs directory [ 1618.130440][T30670] netlink: 'syz.5.15140': attribute type 1 has an invalid length. [ 1618.786020][T30699] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.15150'. [ 1618.970719][T27425] hsr_slave_0: left promiscuous mode [ 1618.985929][T27425] hsr_slave_1: left promiscuous mode [ 1619.014399][T30708] netlink: 232 bytes leftover after parsing attributes in process `syz.5.15152'. [ 1619.042199][T27425] veth1_macvtap: left promiscuous mode [ 1619.067661][T27425] veth1_vlan: left allmulticast mode [ 1619.095351][T27425] veth1_vlan: left promiscuous mode [ 1619.100967][T27425] veth0_vlan: left promiscuous mode [ 1619.697640][T27439] net_ratelimit: 413 callbacks suppressed [ 1619.697663][T27439] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1619.715004][T32449] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1619.736022][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1619.775755][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1619.785734][T32449] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1619.813967][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1619.839043][T32449] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1619.848027][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1619.901117][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1619.909741][T32449] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1620.159362][T11376]  speed is unknown, defaulting to 1000 [ 1620.179105][T11376] infiniband syz2: ib_query_port failed (-19) [ 1620.425402][T30753] netlink: 'syz.5.15158': attribute type 1 has an invalid length. [ 1620.436673][T30427] netdevsim netdevsim1 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1620.459078][T30753] netlink: 224 bytes leftover after parsing attributes in process `syz.5.15158'. [ 1620.549656][T30763] xt_HMARK: spi-set and port-set can't be combined [ 1620.590698][T30754] syzkaller0: left promiscuous mode [ 1620.612850][T30754] syzkaller0: left allmulticast mode [ 1620.709062][T30427] netdevsim netdevsim1 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1620.914170][T30775] x_tables: duplicate underflow at hook 1 [ 1621.007719][T30427] netdevsim netdevsim1 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1621.066935][T30776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15164'. [ 1621.177388][T30427] netdevsim netdevsim1 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1621.207446][T30789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1621.214761][T30789] IPv6: NLM_F_CREATE should be set when creating new route [ 1621.236150][T27425] IPVS: stop unused estimator thread 0... [ 1621.261269][T30789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15165'. [ 1621.638503][T30806] netlink: 56 bytes leftover after parsing attributes in process `syz.3.15168'. [ 1621.769288][T30427] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1621.789953][T30427] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1621.841516][T30427] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1621.905811][T30427] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1622.173840][T30427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1622.220903][T30427] 8021q: adding VLAN 0 to HW filter on device team0 [ 1622.241293][T30827] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1622.291259][T32446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1622.298530][T32446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1622.442197][T32446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1622.449445][T32446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1622.513030][T30833] vcan1: entered promiscuous mode [ 1622.519889][T30833] vcan1: entered allmulticast mode [ 1622.693628][T30427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1622.920240][T30857] sch_fq: defrate 0 ignored. [ 1622.949333][T30851] syzkaller1: entered allmulticast mode [ 1623.462294][T30886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15187'. [ 1623.805206][T30870] netlink: 'syz.5.15185': attribute type 11 has an invalid length. [ 1623.895058][T30427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1624.061884][T30427] veth0_vlan: entered promiscuous mode [ 1624.122686][T30903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15190'. [ 1624.138898][T30903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15190'. [ 1624.165503][T30427] veth1_vlan: entered promiscuous mode [ 1624.171689][T30903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15190'. [ 1624.199614][T30903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15190'. [ 1624.299548][T30427] veth0_macvtap: entered promiscuous mode [ 1624.341753][T30427] veth1_macvtap: entered promiscuous mode [ 1624.423828][T30427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1624.452879][T30427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1624.472276][T30913] netlink: 'syz.5.15192': attribute type 1 has an invalid length. [ 1624.514648][T32446] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1624.543616][T32446] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1624.552415][T32446] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1624.654397][T30921] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15193'. [ 1624.714364][T14653] net_ratelimit: 315 callbacks suppressed [ 1624.714387][T14653] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1624.729619][T27439] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1624.752025][T30913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1624.764576][T27439] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1624.809067][T30921] IPVS: set_ctl: invalid protocol: 126 0.0.0.0:0 [ 1624.820823][T32437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1624.830361][T27439] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1624.832016][T30921] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1624.879830][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1624.954501][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1624.966008][T27433] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1624.981054][T30917] bond0: (slave gretap2): making interface the new active one [ 1625.023459][T32440] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1625.061890][T32443] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1625.105710][T30917] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 1625.161954][T32446] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.452707][T30940] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15195'. [ 1625.475567][T30944] netlink: 'syz.3.15194': attribute type 1 has an invalid length. [ 1625.488487][T27437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1625.500982][T30945] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.15196'. [ 1625.528973][T27437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1625.557934][T30947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15194'. [ 1625.675823][T30949] netlink: 27 bytes leftover after parsing attributes in process `syz.3.15194'. [ 1625.709217][T30944] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1625.891677][T30959] netlink: 144 bytes leftover after parsing attributes in process `syz.4.15199'. [ 1625.908003][T30959] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1625.922743][T30953] netlink: 'syz.5.15197': attribute type 1 has an invalid length. [ 1625.956290][T27437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1625.965747][T30952] netlink: 'syz.3.15194': attribute type 9 has an invalid length. [ 1625.998357][T27437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1626.119359][T30962] x9: renamed from bridge_slave_0 [ 1626.434482][T30974] netlink: 'syz.1.15080': attribute type 21 has an invalid length. [ 1626.994071][T32553] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1627.015816][T32553] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1627.029687][T32553] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1627.040684][T32553] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1627.054707][T32553] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1627.166199][T30994] netlink: 'syz.5.15210': attribute type 33 has an invalid length. [ 1627.262389][T30996] lo speed is unknown, defaulting to 1000 [ 1627.613032][T31014] tipc: Enabling of bearer rejected, media not registered [ 1627.907573][T31026] netlink: 'syz.4.15217': attribute type 39 has an invalid length. [ 1628.264815][T31036] netlink: 'syz.1.15221': attribute type 1 has an invalid length. [ 1628.582218][T31041] macvlan2: entered promiscuous mode [ 1628.611546][T31041] macvlan2: entered allmulticast mode [ 1629.113687][ T5829] Bluetooth: hci2: command tx timeout [ 1629.132689][T31074] lo speed is unknown, defaulting to 1000 [ 1629.205246][T30996] chnl_net:caif_netlink_parms(): no params data found [ 1629.480533][T31100] __nla_validate_parse: 2 callbacks suppressed [ 1629.480555][T31100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15230'. [ 1629.679566][T30996] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.721753][T30996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.735304][T32435] net_ratelimit: 271 callbacks suppressed [ 1629.735330][T32435] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1629.743039][T27437] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1629.767510][T30996] bridge_slave_0: entered allmulticast mode [ 1629.785387][T30996] bridge_slave_0: entered promiscuous mode [ 1629.806210][T27429] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1629.820189][T30996] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.827649][T27437] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1629.847398][T30996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.854652][T27429] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1629.873876][T30996] bridge_slave_1: entered allmulticast mode [ 1629.876456][T27429] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1629.888732][T27439] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1629.900228][T30996] bridge_slave_1: entered promiscuous mode [ 1629.915638][T32435] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1629.925055][T27439] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1629.954663][T27439] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1630.122261][T31116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15235'. [ 1630.236675][T31123] sctp: [Deprecated]: syz.1.15237 (pid 31123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1630.236675][T31123] Use struct sctp_sack_info instead [ 1630.267484][T30996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1630.344335][T30996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1630.558579][T30996] team0: Port device team_slave_0 added [ 1630.598355][T30996] team0: Port device team_slave_1 added [ 1630.788705][T30996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1630.797322][T31142] netlink: 48 bytes leftover after parsing attributes in process `syz.5.15239'. [ 1630.831118][T30996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1630.832351][T31142] netlink: 72 bytes leftover after parsing attributes in process `syz.5.15239'. [ 1630.872769][T31142] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15239'. [ 1630.916596][T30996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1630.961687][T30996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1630.984750][T30996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1631.044234][T30996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1631.066752][T31142] syzkaller0: entered promiscuous mode [ 1631.072372][T31142] syzkaller0: entered allmulticast mode [ 1631.093549][T31151] netlink: 'syz.4.15241': attribute type 11 has an invalid length. [ 1631.101841][T31151] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15241'. [ 1631.193641][ T5829] Bluetooth: hci2: command tx timeout [ 1631.264617][T30996] hsr_slave_0: entered promiscuous mode [ 1631.271645][T30996] hsr_slave_1: entered promiscuous mode [ 1631.280696][T30996] debugfs: 'hsr0' already exists in 'hsr' [ 1631.286631][T30996] Cannot create hsr debugfs directory [ 1631.404394][T31161] netlink: 212304 bytes leftover after parsing attributes in process `syz.5.15244'. [ 1631.447147][T31162] : renamed from hsr0 [ 1631.613980][T31170] netlink: 'syz.1.15246': attribute type 1 has an invalid length. [ 1631.645782][T31170] netlink: 'syz.1.15246': attribute type 4 has an invalid length. [ 1631.684043][T31170] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.15246'. [ 1631.879414][T31181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15248'. [ 1631.941459][T30996] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1631.958887][T31187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15249'. [ 1631.984061][T30996] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.010312][T30996] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1632.119388][T31181] bond16: option xmit_hash_policy: invalid value (64) [ 1632.142141][T31181] bond16 (unregistering): Released all slaves [ 1632.207353][T30996] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1632.272968][T30996] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.292554][T30996] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1632.308719][T31204] netlink: 'syz.1.15251': attribute type 1 has an invalid length. [ 1632.492032][T30996] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1632.516832][T30996] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.536815][T30996] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1632.674926][T31218] netlink: 'syz.4.15254': attribute type 1 has an invalid length. [ 1632.849123][T30996] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1632.898991][T30996] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.957767][T30996] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1632.996361][T31225] bond16: (slave bridge8): making interface the new active one [ 1633.009175][T31225] bond16: (slave bridge8): Enslaving as an active interface with an up link [ 1633.282868][ T5829] Bluetooth: hci2: command tx timeout [ 1633.385701][T30996] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1633.472971][T30996] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1633.554942][T30996] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1633.619594][T30996] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1634.028707][T30996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1634.167152][T30996] 8021q: adding VLAN 0 to HW filter on device team0 [ 1634.317802][T31281] netlink: 'syz.1.15265': attribute type 21 has an invalid length. [ 1634.407704][T31285] netlink: 'syz.4.15266': attribute type 8 has an invalid length. [ 1634.498331][T31281] netlink: 'syz.1.15265': attribute type 5 has an invalid length. [ 1634.513424][T31281] __nla_validate_parse: 4 callbacks suppressed [ 1634.513444][T31281] netlink: 3 bytes leftover after parsing attributes in process `syz.1.15265'. [ 1634.536403][T32435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1634.543657][T32435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1634.754480][T27425] net_ratelimit: 329 callbacks suppressed [ 1634.754504][T27425] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1634.768677][T32446] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1634.804338][T27425] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1634.813412][T32446] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1634.835609][T32446] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1634.863589][T32449] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1634.871626][T32449] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1634.883584][T32449] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1634.893939][T27425] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1634.913878][T32449] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1634.958636][T31310] FAULT_INJECTION: forcing a failure. [ 1634.958636][T31310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1634.972307][T31310] CPU: 0 UID: 0 PID: 31310 Comm: syz.1.15272 Not tainted syzkaller #0 PREEMPT(full) [ 1634.972336][T31310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1634.972349][T31310] Call Trace: [ 1634.972358][T31310] [ 1634.972367][T31310] dump_stack_lvl+0xe8/0x150 [ 1634.972404][T31310] should_fail_ex+0x412/0x560 [ 1634.972437][T31310] _copy_from_iter+0x1d3/0x1670 [ 1634.972466][T31310] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1634.972498][T31310] ? __pfx_policy_nodemask+0x10/0x10 [ 1634.972550][T31310] ? __pfx__copy_from_iter+0x10/0x10 [ 1634.972585][T31310] ? set_page_refcounted+0xa0/0x1e0 [ 1634.972620][T31310] ? page_copy_sane+0x4e/0x270 [ 1634.972649][T31310] copy_page_from_iter+0xdd/0x170 [ 1634.972682][T31310] tun_get_user+0x1d4b/0x3dd0 [ 1634.972710][T31310] ? tun_get_user+0x6ff/0x3dd0 [ 1634.972758][T31310] ? aa_file_perm+0x50e/0x15e0 [ 1634.972786][T31310] ? __pfx_tun_get_user+0x10/0x10 [ 1634.972812][T31310] ? aa_file_perm+0x192/0x15e0 [ 1634.972860][T31310] ? ref_tracker_alloc+0x35c/0x4c0 [ 1634.972890][T31310] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1634.972923][T31310] ? tun_get+0x1c/0x2f0 [ 1634.972957][T31310] ? tun_get+0x1c/0x2f0 [ 1634.972984][T31310] ? tun_get+0x1c/0x2f0 [ 1634.973016][T31310] tun_chr_write_iter+0x113/0x200 [ 1634.973049][T31310] vfs_write+0x61d/0xb90 [ 1634.973081][T31310] ? __pfx_vfs_write+0x10/0x10 [ 1634.973115][T31310] ? __fget_files+0x2a/0x420 [ 1634.973163][T31310] ksys_write+0x150/0x270 [ 1634.973186][T31310] ? __pfx_ksys_write+0x10/0x10 [ 1634.973215][T31310] do_syscall_64+0x14d/0xf80 [ 1634.973233][T31310] ? trace_irq_disable+0x3b/0x150 [ 1634.973261][T31310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.973282][T31310] ? clear_bhb_loop+0x40/0x90 [ 1634.973305][T31310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.973324][T31310] RIP: 0033:0x7f29a915cfce [ 1634.973344][T31310] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1634.973361][T31310] RSP: 002b:00007f29a9fb8fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1634.973382][T31310] RAX: ffffffffffffffda RBX: 00007f29a9fb96c0 RCX: 00007f29a915cfce [ 1634.973396][T31310] RDX: 00000000000000be RSI: 0000200000000300 RDI: 00000000000000c8 [ 1634.973408][T31310] RBP: 00007f29a9fb9090 R08: 0000000000000000 R09: 0000000000000000 [ 1634.973420][T31310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1634.973432][T31310] R13: 00007f29a9416038 R14: 00007f29a9415fa0 R15: 00007ffdad0389e8 [ 1634.973462][T31310] [ 1635.361742][ T5829] Bluetooth: hci2: command tx timeout [ 1637.770359][T32435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.777558][T32435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1637.901579][T31341] netlink: 'syz.4.15275': attribute type 1 has an invalid length. [ 1637.924441][T31342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1637.959821][T31342] netlink: 'syz.5.15274': attribute type 1 has an invalid length. [ 1638.862994][T30996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1639.029799][T30996] veth0_vlan: entered promiscuous mode [ 1639.214971][T30996] veth1_vlan: entered promiscuous mode [ 1639.422164][T30996] veth0_macvtap: entered promiscuous mode [ 1639.477706][T30996] veth1_macvtap: entered promiscuous mode [ 1639.539306][T30996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1639.575961][T30996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1639.616578][T14651] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.672516][T14651] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.711220][T14651] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.762728][T14651] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.771930][T32446] net_ratelimit: 340 callbacks suppressed [ 1639.771952][T32446] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1639.785792][T32449] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1639.844118][T14651] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1639.858795][T27439] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1639.883101][T31447] netlink: 'syz.4.15298': attribute type 10 has an invalid length. [ 1639.894476][T32446] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1639.926261][T32446] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1639.938618][T14651] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1639.958628][T28052] lec:lec_start_xmit: lec0:No lecd attached [ 1639.969654][T32446] bond6: (slave ip6gretap0): failed to get link speed/duplex [ 1639.978595][T31447] netlink: 228 bytes leftover after parsing attributes in process `syz.4.15298'. [ 1640.014152][T32446] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1640.096407][T32446] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1640.176130][T31458] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15299'. [ 1640.221065][T32449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1640.246353][T32449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.256148][T31458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15299'. [ 1640.369503][T14651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1640.408830][T14651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.626000][T31466] pim6reg: entered allmulticast mode [ 1640.932537][T31475] Unknown options in mask b7f2 [ 1641.199660][T32553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1641.215170][T32553] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1641.230495][T32553] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1641.251127][T32553] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1641.261570][T32553] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1641.311756][T31487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15309'. [ 1641.401670][T31494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15309'. [ 1641.414856][T31501] netlink: 252 bytes leftover after parsing attributes in process `syz.0.15309'. [ 1641.651072][T31506] netlink: 72 bytes leftover after parsing attributes in process `syz.4.15312'. [ 1641.758949][T31485] lo speed is unknown, defaulting to 1000 [ 1641.872919][T31514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15315'. [ 1642.038468][T31519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15315'. [ 1642.265627][T31542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15319'. [ 1642.275330][T31541] netlink: 'syz.4.15320': attribute type 4 has an invalid length. [ 1642.374827][T31541] bond5: (slave veth0_to_bond): Releasing active interface [ 1642.655839][T31554] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9 [ 1642.721249][ T30] audit: type=1800 audit(1772435824.418:20): pid=31557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.15326" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=3166 res=0 errno=0 [ 1642.770645][T31554] syz_tun: entered promiscuous mode [ 1642.809576][T31554] macvtap1: entered promiscuous mode [ 1642.861437][T31554] syz_tun: left promiscuous mode [ 1643.186397][T31485] chnl_net:caif_netlink_parms(): no params data found [ 1643.354320][ T5829] Bluetooth: hci0: command tx timeout [ 1643.424906][T31485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.432173][T31485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.440211][T31485] bridge_slave_0: entered allmulticast mode [ 1643.449422][T31485] bridge_slave_0: entered promiscuous mode [ 1643.458892][T31485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.466830][T31485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1643.474753][T31485] bridge_slave_1: entered allmulticast mode [ 1643.482776][T31485] bridge_slave_1: entered promiscuous mode [ 1643.530285][T31485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1643.544644][T31485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1643.584147][T31485] team0: Port device team_slave_0 added [ 1643.600432][T31485] team0: Port device team_slave_1 added [ 1643.631540][T31485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1643.639272][T31485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1643.666269][T31485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1643.679700][T31485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1643.688105][T31485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1643.714953][T31485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1643.778828][T31485] hsr_slave_0: entered promiscuous mode [ 1643.786226][T31485] hsr_slave_1: entered promiscuous mode [ 1643.792835][T31485] debugfs: 'hsr0' already exists in 'hsr' [ 1643.800857][T31485] Cannot create hsr debugfs directory [ 1643.935983][T31485] ================================================================== [ 1643.944096][T31485] BUG: KASAN: slab-use-after-free in mini_qdisc_pair_swap+0x68/0x190 [ 1643.952227][T31485] Read of size 8 at addr ffff888034ef5000 by task syz-executor/31485 [ 1643.960345][T31485] [ 1643.962796][T31485] CPU: 0 UID: 0 PID: 31485 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1643.962816][T31485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1643.962827][T31485] Call Trace: [ 1643.962834][T31485] [ 1643.962841][T31485] dump_stack_lvl+0xe8/0x150 [ 1643.962867][T31485] print_report+0xba/0x230 [ 1643.962886][T31485] ? mini_qdisc_pair_swap+0x68/0x190 [ 1643.962907][T31485] kasan_report+0x117/0x150 [ 1643.962927][T31485] ? mini_qdisc_pair_swap+0x68/0x190 [ 1643.962951][T31485] mini_qdisc_pair_swap+0x68/0x190 [ 1643.962973][T31485] ? __pfx_clsact_chain_head_change+0x10/0x10 [ 1643.962994][T31485] tcf_chain0_head_change_cb_del+0x24c/0x380 [ 1643.963015][T31485] tcf_block_put_ext+0x129/0x390 [ 1643.963036][T31485] clsact_destroy+0x25e/0x820 [ 1643.963057][T31485] ? __pfx_clsact_destroy+0x10/0x10 [ 1643.963076][T31485] __qdisc_destroy+0x153/0x4a0 [ 1643.963096][T31485] dev_shutdown+0x233/0x440 [ 1643.963117][T31485] unregister_netdevice_many_notify+0x11a9/0x2370 [ 1643.963141][T31485] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1643.963181][T31485] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1643.963219][T31485] unregister_netdevice_queue+0x31f/0x360 [ 1643.963237][T31485] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1643.963257][T31485] nsim_destroy+0x1e5/0x680 [ 1643.963282][T31485] __nsim_dev_port_del+0x14d/0x1b0 [ 1643.963307][T31485] nsim_dev_reload_destroy+0x288/0x490 [ 1643.963334][T31485] nsim_drv_remove+0x58/0x170 [ 1643.963383][T31485] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1643.963411][T31485] device_release_driver_internal+0x46f/0x860 [ 1643.963447][T31485] bus_remove_device+0x34d/0x440 [ 1643.963471][T31485] device_del+0x527/0x8f0 [ 1643.963484][T31485] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1643.963510][T31485] ? __pfx_device_del+0x10/0x10 [ 1643.963528][T31485] device_unregister+0x21/0xf0 [ 1643.963542][T31485] del_device_store+0x2b0/0x370 [ 1643.963565][T31485] ? __pfx_del_device_store+0x10/0x10 [ 1643.963608][T31485] ? sysfs_file_kobj+0x1e4/0x230 [ 1643.963635][T31485] ? sysfs_kf_write+0x166/0x260 [ 1643.963662][T31485] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1643.963689][T31485] kernfs_fop_write_iter+0x3af/0x540 [ 1643.963708][T31485] vfs_write+0x61d/0xb90 [ 1643.963727][T31485] ? __pfx_vfs_write+0x10/0x10 [ 1643.963743][T31485] ? kmem_cache_free+0x187/0x630 [ 1643.963759][T31485] ? fd_install+0x94/0x3d0 [ 1643.963778][T31485] ? do_sys_openat2+0x14c/0x200 [ 1643.963805][T31485] ksys_write+0x150/0x270 [ 1643.963822][T31485] ? __pfx_ksys_write+0x10/0x10 [ 1643.963842][T31485] do_syscall_64+0x14d/0xf80 [ 1643.963856][T31485] ? trace_irq_disable+0x3b/0x150 [ 1643.963879][T31485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.963894][T31485] ? clear_bhb_loop+0x40/0x90 [ 1643.963912][T31485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.963928][T31485] RIP: 0033:0x7f2da3b5cfce [ 1643.963943][T31485] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1643.963956][T31485] RSP: 002b:00007fff0fd418a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1643.963973][T31485] RAX: ffffffffffffffda RBX: 00005555866dd500 RCX: 00007f2da3b5cfce [ 1643.963985][T31485] RDX: 0000000000000001 RSI: 00007fff0fd41930 RDI: 0000000000000005 [ 1643.963995][T31485] RBP: 00007f2da3c3345c R08: 0000000000000000 R09: 0000000000000000 [ 1643.964005][T31485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1643.964015][T31485] R13: 00007fff0fd41930 R14: 00007f2da4944620 R15: 0000000000000003 [ 1643.964033][T31485] [ 1643.964039][T31485] [ 1644.313773][T31485] Allocated by task 30996: [ 1644.318205][T31485] kasan_save_track+0x3e/0x80 [ 1644.322926][T31485] __kasan_kmalloc+0x93/0xb0 [ 1644.327531][T31485] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 1644.333991][T31485] pskb_expand_head+0x228/0x1320 [ 1644.339049][T31485] netlink_trim+0x1b3/0x2c0 [ 1644.343569][T31485] netlink_broadcast_filtered+0xd6/0x1020 [ 1644.349342][T31485] nlmsg_notify+0xf0/0x1a0 [ 1644.353808][T31485] __dev_notify_flags+0xf2/0x310 [ 1644.358780][T31485] netif_change_flags+0xe8/0x1a0 [ 1644.363737][T31485] do_setlink+0xf82/0x4590 [ 1644.368278][T31485] rtnl_newlink+0x15a9/0x1be0 [ 1644.373061][T31485] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1644.378190][T31485] netlink_rcv_skb+0x232/0x4b0 [ 1644.382975][T31485] netlink_unicast+0x80f/0x9b0 [ 1644.387756][T31485] netlink_sendmsg+0x813/0xb40 [ 1644.392542][T31485] __sys_sendto+0x709/0x7a0 [ 1644.397348][T31485] __x64_sys_sendto+0xde/0x100 [ 1644.402168][T31485] do_syscall_64+0x14d/0xf80 [ 1644.406878][T31485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.412888][T31485] [ 1644.415229][T31485] Freed by task 30996: [ 1644.419333][T31485] kasan_save_track+0x3e/0x80 [ 1644.424031][T31485] kasan_save_free_info+0x46/0x50 [ 1644.429077][T31485] __kasan_slab_free+0x5c/0x80 [ 1644.433863][T31485] kfree+0x1c1/0x630 [ 1644.437783][T31485] skb_release_data+0x6f0/0x940 [ 1644.442659][T31485] __kfree_skb+0x5d/0x210 [ 1644.447030][T31485] netlink_broadcast_filtered+0xee4/0x1020 [ 1644.453096][T31485] nlmsg_notify+0xf0/0x1a0 [ 1644.457540][T31485] __dev_notify_flags+0xf2/0x310 [ 1644.462510][T31485] netif_change_flags+0xe8/0x1a0 [ 1644.467497][T31485] do_setlink+0xf82/0x4590 [ 1644.471958][T31485] rtnl_newlink+0x15a9/0x1be0 [ 1644.476678][T31485] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1644.481667][T31485] netlink_rcv_skb+0x232/0x4b0 [ 1644.486665][T31485] netlink_unicast+0x80f/0x9b0 [ 1644.491559][T31485] netlink_sendmsg+0x813/0xb40 [ 1644.496381][T31485] __sys_sendto+0x709/0x7a0 [ 1644.500955][T31485] __x64_sys_sendto+0xde/0x100 [ 1644.505794][T31485] do_syscall_64+0x14d/0xf80 [ 1644.510438][T31485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.516376][T31485] [ 1644.518728][T31485] The buggy address belongs to the object at ffff888034ef5000 [ 1644.518728][T31485] which belongs to the cache kmalloc-2k of size 2048 [ 1644.532797][T31485] The buggy address is located 0 bytes inside of [ 1644.532797][T31485] freed 2048-byte region [ffff888034ef5000, ffff888034ef5800) [ 1644.546706][T31485] [ 1644.549064][T31485] The buggy address belongs to the physical page: [ 1644.555504][T31485] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34ef0 [ 1644.564388][T31485] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1644.573603][T31485] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1644.581266][T31485] page_type: f5(slab) [ 1644.585276][T31485] raw: 00fff00000000040 ffff88813fea9000 dead000000000100 dead000000000122 [ 1644.593882][T31485] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1644.602515][T31485] head: 00fff00000000040 ffff88813fea9000 dead000000000100 dead000000000122 [ 1644.611209][T31485] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1644.619986][T31485] head: 00fff00000000003 ffffea0000d3bc01 00000000ffffffff 00000000ffffffff [ 1644.628759][T31485] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1644.637455][T31485] page dumped because: kasan: bad access detected [ 1644.643927][T31485] page_owner tracks the page as allocated [ 1644.649762][T31485] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5824, tgid 5824 (syz-executor), ts 84848257093, free_ts 69773739223 [ 1644.671244][T31485] post_alloc_hook+0x231/0x280 [ 1644.676075][T31485] get_page_from_freelist+0x24dc/0x2580 [ 1644.681649][T31485] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1644.687601][T31485] allocate_slab+0x77/0x660 [ 1644.692404][T31485] refill_objects+0x331/0x3c0 [ 1644.697118][T31485] __pcs_replace_empty_main+0x2b9/0x620 [ 1644.702712][T31485] __kmalloc_cache_noprof+0x392/0x660 [ 1644.708106][T31485] rxrpc_alloc_connection+0x7b/0x590 [ 1644.713412][T31485] rxrpc_prealloc_service_connection+0x26/0x2e0 [ 1644.719690][T31485] rxrpc_service_prealloc_one+0x2f5/0xe50 [ 1644.725455][T31485] afs_charge_preallocation+0x394/0x4e0 [ 1644.731047][T31485] afs_open_socket+0x33c/0x3f0 [ 1644.735864][T31485] afs_net_init+0x67d/0x880 [ 1644.740393][T31485] ops_init+0x35c/0x5c0 [ 1644.744569][T31485] setup_net+0x118/0x340 [ 1644.748840][T31485] copy_net_ns+0x50e/0x730 [ 1644.753282][T31485] page last free pid 5743 tgid 5743 stack trace: [ 1644.759714][T31485] __free_frozen_pages+0xc2b/0xdb0 [ 1644.764855][T31485] __slab_free+0x263/0x2b0 [ 1644.769290][T31485] qlist_free_all+0x97/0x100 [ 1644.773899][T31485] kasan_quarantine_reduce+0x148/0x160 [ 1644.779546][T31485] __kasan_slab_alloc+0x22/0x80 [ 1644.784511][T31485] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1644.790086][T31485] vm_area_alloc+0x24/0x140 [ 1644.794614][T31485] mmap_region+0x10eb/0x2240 [ 1644.799240][T31485] do_mmap+0xc39/0x10c0 [ 1644.803437][T31485] vm_mmap_pgoff+0x2c9/0x4f0 [ 1644.808058][T31485] ksys_mmap_pgoff+0x51e/0x760 [ 1644.812854][T31485] do_syscall_64+0x14d/0xf80 [ 1644.817461][T31485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.823369][T31485] [ 1644.825721][T31485] Memory state around the buggy address: [ 1644.831389][T31485] ffff888034ef4f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1644.839480][T31485] ffff888034ef4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1644.847650][T31485] >ffff888034ef5000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1644.855739][T31485] ^ [ 1644.859831][T31485] ffff888034ef5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1644.867910][T31485] ffff888034ef5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1644.876154][T31485] ================================================================== [ 1644.905353][T14651] net_ratelimit: 238 callbacks suppressed [ 1644.905377][T14651] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1644.924888][T14651] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1644.944811][T14651] bond6: (slave ip6gretap0): link status up, enabling it in 0 ms [ 1644.962661][T27429] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1644.981471][T31485] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1644.988768][T31485] CPU: 0 UID: 0 PID: 31485 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1644.998467][T31485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1645.008755][T31485] Call Trace: [ 1645.012197][T31485] [ 1645.015253][T31485] vpanic+0x56c/0xa60 [ 1645.019250][T31485] ? __pfx_vpanic+0x10/0x10 [ 1645.023829][T31485] ? __pfx___schedule+0x10/0x10 [ 1645.028742][T31485] panic+0xc5/0xd0 [ 1645.032512][T31485] ? __pfx_panic+0x10/0x10 [ 1645.037231][T31485] ? preempt_schedule_common+0x82/0xd0 [ 1645.042747][T31485] ? mini_qdisc_pair_swap+0x68/0x190 [ 1645.048166][T31485] check_panic_on_warn+0x89/0xb0 [ 1645.053138][T31485] ? mini_qdisc_pair_swap+0x68/0x190 [ 1645.058462][T31485] end_report+0x73/0x180 [ 1645.062734][T31485] ? mini_qdisc_pair_swap+0x68/0x190 [ 1645.068132][T31485] kasan_report+0x128/0x150 [ 1645.072702][T31485] ? mini_qdisc_pair_swap+0x68/0x190 [ 1645.078029][T31485] mini_qdisc_pair_swap+0x68/0x190 [ 1645.083165][T31485] ? __pfx_clsact_chain_head_change+0x10/0x10 [ 1645.089303][T31485] tcf_chain0_head_change_cb_del+0x24c/0x380 [ 1645.095333][T31485] tcf_block_put_ext+0x129/0x390 [ 1645.100308][T31485] clsact_destroy+0x25e/0x820 [ 1645.105024][T31485] ? __pfx_clsact_destroy+0x10/0x10 [ 1645.110249][T31485] __qdisc_destroy+0x153/0x4a0 [ 1645.115048][T31485] dev_shutdown+0x233/0x440 [ 1645.119575][T31485] unregister_netdevice_many_notify+0x11a9/0x2370 [ 1645.126013][T31485] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1645.132793][T31485] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1645.138459][T31485] unregister_netdevice_queue+0x31f/0x360 [ 1645.144298][T31485] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1645.150657][T31485] nsim_destroy+0x1e5/0x680 [ 1645.155189][T31485] __nsim_dev_port_del+0x14d/0x1b0 [ 1645.160331][T31485] nsim_dev_reload_destroy+0x288/0x490 [ 1645.165820][T31485] nsim_drv_remove+0x58/0x170 [ 1645.170846][T31485] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1645.176599][T31485] device_release_driver_internal+0x46f/0x860 [ 1645.182699][T31485] bus_remove_device+0x34d/0x440 [ 1645.187685][T31485] device_del+0x527/0x8f0 [ 1645.192034][T31485] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1645.197888][T31485] ? __pfx_device_del+0x10/0x10 [ 1645.202758][T31485] device_unregister+0x21/0xf0 [ 1645.207549][T31485] del_device_store+0x2b0/0x370 [ 1645.212439][T31485] ? __pfx_del_device_store+0x10/0x10 [ 1645.217929][T31485] ? sysfs_file_kobj+0x1e4/0x230 [ 1645.222896][T31485] ? sysfs_kf_write+0x166/0x260 [ 1645.227772][T31485] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1645.233079][T31485] kernfs_fop_write_iter+0x3af/0x540 [ 1645.238418][T31485] vfs_write+0x61d/0xb90 [ 1645.242721][T31485] ? __pfx_vfs_write+0x10/0x10 [ 1645.247512][T31485] ? kmem_cache_free+0x187/0x630 [ 1645.252491][T31485] ? fd_install+0x94/0x3d0 [ 1645.256955][T31485] ? do_sys_openat2+0x14c/0x200 [ 1645.261846][T31485] ksys_write+0x150/0x270 [ 1645.266211][T31485] ? __pfx_ksys_write+0x10/0x10 [ 1645.271098][T31485] do_syscall_64+0x14d/0xf80 [ 1645.275713][T31485] ? trace_irq_disable+0x3b/0x150 [ 1645.280761][T31485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.286853][T31485] ? clear_bhb_loop+0x40/0x90 [ 1645.291565][T31485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.297487][T31485] RIP: 0033:0x7f2da3b5cfce [ 1645.301931][T31485] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1645.321736][T31485] RSP: 002b:00007fff0fd418a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1645.330284][T31485] RAX: ffffffffffffffda RBX: 00005555866dd500 RCX: 00007f2da3b5cfce [ 1645.338297][T31485] RDX: 0000000000000001 RSI: 00007fff0fd41930 RDI: 0000000000000005 [ 1645.346298][T31485] RBP: 00007f2da3c3345c R08: 0000000000000000 R09: 0000000000000000 [ 1645.354296][T31485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1645.362375][T31485] R13: 00007fff0fd41930 R14: 00007f2da4944620 R15: 0000000000000003 [ 1645.370442][T31485] [ 1645.374258][T31485] Kernel Offset: disabled [ 1645.378774][T31485] Rebooting in 86400 seconds..