last executing test programs: 8.157831438s ago: executing program 3 (id=3124): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) unshare(0x24020400) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) shutdown(r2, 0x1) (async) shutdown(r2, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ppoll(0x0, 0xfe4a, 0x0, &(0x7f0000000580), 0x8) (async) ppoll(0x0, 0xfe4a, 0x0, &(0x7f0000000580), 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) accept(r6, 0x0, &(0x7f0000000000)) (async) r7 = accept(r6, 0x0, &(0x7f0000000000)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f00000003c0)={0x2, 'syz_tun\x00', {0xffffffff}, 0x5}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f00000003c0)={0x2, 'syz_tun\x00', {0xffffffff}, 0x5}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000000180)={0x60f, 0x20, '\x00', 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0x806000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r10, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r11, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x90) (async) sendmsg$NLBL_MGMT_C_LISTALL(r10, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r11, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x90) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r6, 0x3a0000) 7.9696309s ago: executing program 3 (id=3128): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async, rerun: 32) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1cab, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x4, 0x0}, 0x8) (async, rerun: 32) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r5}, 0x10) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x700, 0x1, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x63, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @broadcast, @multicast2}}}}) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r9) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, r10, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3cac}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) (async) sendmsg$nl_generic(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3a25027c0000040045802011010000000000000008000000000000"], 0x1138}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) (async) r11 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1f}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r12, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000002000018200000", @ANYRES32=r4, @ANYBLOB="00000000000000006200f8ff0000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xf0, &(0x7f0000000ac0)=""/240, 0x0, 0x20, '\x00', r8}, 0x94) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000000a80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000001140)=ANY=[@ANYBLOB="80156f305fa2b7bf2a51a0c6898a9a99028000", @ANYRES16=0x0, @ANYBLOB="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"], 0x280}, 0x1, 0x0, 0x0, 0x4000}, 0x20004040) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async, rerun: 32) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00008e64000080000014000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r14}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x15, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x2, 0x3, 0x2, 0x3, 0x5, 0xc, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x2, 0x3e, &(0x7f0000000440)=""/62, 0x0, 0x10, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x2, 0x80}, 0x8, 0x10, 0x0, 0x0, r3, r0, 0x8, &(0x7f0000000500)=[r4, r13], &(0x7f0000000540)=[{0x2, 0x2, 0x8, 0x5}, {0x2, 0x1, 0x8, 0x3}, {0x3, 0x2, 0x8, 0x5}, {0x1, 0x1, 0x10, 0x8}, {0x4, 0x5, 0xf, 0x9}, {0x1, 0x1, 0x1, 0x6}, {0x4, 0x1, 0x5}, {0x1, 0x2, 0x7}], 0x10, 0xffffffff}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) 7.746584783s ago: executing program 3 (id=3131): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x3, 0x3c) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a80140900000007000001"], 0x4c}}, 0x40000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.715978098s ago: executing program 3 (id=3132): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c010000190001000000000003000000e0000002000000000000000000000000fe8000000000000000000000000000aa00000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000ffffff80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500e0000001000000000000000000000000000004d53c00000002000000e0000001000000000000000000000000073500000403070008000900040000005f2fb579aa6bd880cde09dbc2502000000fe80000000000000000004d36c00000002000000fe880000000000000000000000000101"], 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7.656268831s ago: executing program 3 (id=3133): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) unshare(0x26020480) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x220440a8}, 0x20004000) 7.302127718s ago: executing program 3 (id=3135): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000010000007c00000002000000000000000000000e0000000000000000000000000680000d00000000000000000000000000000000000000000000000000000000030000000000000009000000000000000000000000000000000000000000000c00000000000000000000000900000000090000000000000200000000000000000000000902"], 0x0, 0x96}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0xa, 0x0, 0x0, 0x6, 0x4, [{0x0, 0x10000}, {0x5, 0x5}, {0xb, 0x6}, {0xd, 0x2}, {0x5, 0x399cb929}]}]}}, 0x0, 0x26}, 0x28) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, &(0x7f0000000040)) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xb, 0x16}, {}, {0x6, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x8, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x4, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x1}, 0x2, 0x0, 0x0, 0xfffffffffffffde6}, 0x80) 3.026635753s ago: executing program 0 (id=3182): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005f40)={0x34, r2, 0x1, 0x70bd2d, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x6cb9}]}, 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x99, 0x9, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x8, 0x1, 0x13, 0x3c62}}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_getnexthop={0x4c, 0x6a, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x4c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socketpair(0x6, 0x4, 0x3, &(0x7f0000000180)) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="2f0000004520000504"], 0x20) 2.830404141s ago: executing program 0 (id=3186): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004081}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r2) (async) read(r1, &(0x7f0000000380)=""/46, 0xfffffeb4) (async) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 1.802255778s ago: executing program 4 (id=3196): r0 = socket(0x10, 0x803, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000840)=""/228, 0xe4}, {&(0x7f0000003380)=""/4094, 0xffe}], 0x2}, 0xfffffffc}, {{0x0, 0x0, 0x0}}], 0x3, 0x42, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0xfffffffd, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.620017076s ago: executing program 1 (id=3197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) read$alg(r2, &(0x7f0000000080)=""/179, 0xb3) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x60, r1, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 1.593712518s ago: executing program 4 (id=3198): syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xd9, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x4, 0x4, 0x2}]}}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}, {0x5}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r1 = socket(0x2d, 0x2, 0x0) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000005d80)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x2c, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @dstopts={{0x18, 0x29, 0x37, {0x67}}}], 0x58}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000018110000000000003500000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010000104000002000004000000000000", @ANYRES32=0x0, @ANYBLOB="8b90000010e3040008000500", @ANYRES32=r5, @ANYBLOB="2400128009000100766c616e00000000140002800600010004000000040004800400038008000a00", @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f0000000e40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e80)={0x324, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0xfffffffffffffea4, 0x2, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5fc9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x13}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6a3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x438}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x100, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8ba}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xba2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb89}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x462d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x53}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x165}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x59a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x31c}]}]}]}, 0x324}, 0x1, 0x0, 0x0, 0x20004800}, 0x880) write$cgroup_int(r7, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r7, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000004000400040000000a00000000000700", @ANYRES32=r3, @ANYBLOB="0100"/20, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="01000000030000000500"/28], 0x50) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800010000000000000000000a80000000eb0bb6"], 0x30}}, 0x20000000) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0x9) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x1, 0x20, 0xf86, 0x7802, {{0xc, 0x4, 0x1, 0x4, 0x30, 0x68, 0x0, 0x69, 0x2f, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0x17, 0x36, [@rand_addr=0x64010102, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}]}}}}}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0xffffffffffffff25, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000580)={'erspan0\x00', r11, 0x7, 0x80, 0x8, 0xd293, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2}}}}) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x2000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) 1.518358524s ago: executing program 0 (id=3199): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040014) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040014) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xe, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0xaf, 0x0, 0x0, 0x0, 0x80}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @map_fd, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0xf, &(0x7f0000000880)=""/15, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0xf, 0xf9df}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000940)=[{0x5, 0x2, 0x2, 0xc}], 0x10, 0x76}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000640)='devfreq_monitor\x00', r1, 0x0, 0x1}, 0x18) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x100, 0x6, 0x4}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)={0x12c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x700}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x73ab}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffc00}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf0b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x246b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa38}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r8 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r8, 0x0, 0x0, 0x4004000) (async) sendmmsg$inet(r8, 0x0, 0x0, 0x4004000) close(r8) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000121000010025bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000121000010025bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000005c0), 0x10) (async) connect$can_bcm(r9, &(0x7f00000005c0), 0x10) r10 = socket$packet(0x11, 0x2, 0x300) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000540)=0x4) sendto$packet(r10, &(0x7f0000000480)="436c1e722f05154fb81434663fe6c9bb4bbac50c1bb58e9ca41d37a32e7b8f9f88c51acb6e00d1df5218487228c99bf0063433c5665152d3ea47350263db434cc77a7ad58deacebd382252a09125b2a1736c6039a8187c7026cbdffcc36e1e4e0a5f45382286d11550b2e5f6f35df2385287789c8fa52c8b7b5d4115ccd47109f5", 0x81, 0x86, &(0x7f0000000600)={0x11, 0x8, r11, 0x1, 0x6}, 0x14) (async) sendto$packet(r10, &(0x7f0000000480)="436c1e722f05154fb81434663fe6c9bb4bbac50c1bb58e9ca41d37a32e7b8f9f88c51acb6e00d1df5218487228c99bf0063433c5665152d3ea47350263db434cc77a7ad58deacebd382252a09125b2a1736c6039a8187c7026cbdffcc36e1e4e0a5f45382286d11550b2e5f6f35df2385287789c8fa52c8b7b5d4115ccd47109f5", 0x81, 0x86, &(0x7f0000000600)={0x11, 0x8, r11, 0x1, 0x6}, 0x14) recvmmsg(r9, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000400)=""/40, 0x28}], 0x2}, 0x5}], 0x1, 0x10022, 0x0) sendmsg$can_bcm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240), 0x4) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240), 0x4) 1.514234082s ago: executing program 1 (id=3200): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9"], 0xb8}}, 0x0) setsockopt$inet_buf(r2, 0x0, 0x27, &(0x7f0000000080)="a91b1b5d891fee0c79c9cc6fb703100ea2c3741850763869a1596b95962bf026ba614317bf02649c8c31181b26b37e2465e5d6d0a7b66fd4c870ad5a688ac9d486f0a37346f149f1b534df3766566bd39f215e6c2e81181607372e4df0163ddaf2", 0x61) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x268, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_route={{0xa}, {0x238, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0xe}}, @TCA_ROUTE4_ACT={0x1e4, 0x6, [@m_ctinfo={0xdc, 0x8, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x3}]}, {0xa7, 0x6, "a7c59a84710ab9f5d55dcaaa80f89b9c71c83a9563d1c66cb460bde8e40f728f075a2595b90a09237cc37f9a6422de89583baa045781faeda436decfe5751c13ce35fa200e1cd40a8c39646a177ca89d7b3cf668658f1674a555aff6cadfc31c7de4d0d571e873e570e7d99be65a9def6f73fea4bddd89c3357d1656229254c47ea28986ee6f51de74eb4b6f71ff2a274585d286b5519a770978ce324468017c3a5fec"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x104, 0x8, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x10000000, 0x3ff}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf4ac, 0x5, 0x10000000, 0x0, 0x8000}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb, 0x401, 0x20000000, 0x8, 0x422}, 0x4006}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x29ab, 0xe5a1, 0xffffffffffffffff, 0x8c3b, 0x7}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x27, 0x2, 0x240000, 0xf244}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x7fffffff, 0x2, 0xe, 0xc4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0xffffffffffffffff, 0x0, 0x2a}, 0x1}}]}, {0xd, 0x6, "1fe130e4bf2f478f64"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_POLICE={0x48, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0xef1, 0x5, 0x3, {0x0, 0x1, 0x0, 0x1, 0xfffc, 0x7fff}, {0xb, 0x1, 0x4, 0x4}, 0x80000000, 0x4, 0xae6}}, @TCA_POLICE_RESULT={0x8}]}]}}]}, 0x268}, 0x1, 0x0, 0x0, 0x10}, 0x44044) 1.317113748s ago: executing program 1 (id=3202): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000240009002400000006000000000000000200008409010000040000000400000001000000000000010500000009000000003000002e0059866517678ac909ea0fe53b003169f2dddaf78233bbab89a0f3eb559d22048b9434b2bf4bce4e0277633060134baadd6d9bc64b2ff6c74b1dc793d578a49fd0462ffe4e5612edc3987f6d50ea07b3a6f3ee1e3e44f839a51c6adbe0db5349464361cd7bfaf3d771bb697a1c252faa896c3fa7"], 0x0, 0x42, 0x0, 0x8}, 0x28) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/pid_for_children\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x4, 0x3, 0x8001, 0x100, 0x1, 0x8, '\x00', 0x0, r1, 0x1, 0x2, 0x5, 0x7}, 0x50) r5 = socket(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) (async) r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0xfffffffffffffcca, 0x400) sendto$inet6(r6, &(0x7f0000000080)="d4b586b308e00a379e782c400b69be4483fcece535551c4596c0a1574c47b3810652cce11484", 0x26, 0x20044850, 0x0, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001d40)=""/4096, 0x1000, 0x0, &(0x7f0000002d40)=""/4096, 0x1000}, &(0x7f0000001a80)=0x40) (async) r7 = accept4(r5, 0x0, 0x0, 0x80000) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={r4, &(0x7f0000000300)="b22384c6a2f6d2a38d74af809c3c8a91", &(0x7f0000000640)=@tcp6=r5, 0x2}, 0x20) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x1f, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x7, 0x1, 0x0, r4}, @map_fd={0x18, 0x6, 0x1, 0x0, r4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000800)='GPL\x00', 0x200, 0x1000, &(0x7f0000000a00)=""/4096, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x4, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000880)=[{0x4, 0x4, 0xb}, {0x1, 0x3, 0xd, 0x4}, {0x2, 0x4, 0x6, 0x6}, {0x2, 0x5, 0x4, 0xa}, {0x4, 0x1, 0x1, 0x9}], 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a00)={&(0x7f00000006c0)='btrfs_sync_fs\x00', r8, 0x0, 0xfffffffffffffff8}, 0x18) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) (async) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e00000080600"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) (async) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001a40)='i2c_read\x00', r10, 0x0, 0x1000000000000}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) (async) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) (async) poll(&(0x7f0000000080)=[{r0, 0xc0a9}], 0x1, 0x3) 1.241764818s ago: executing program 0 (id=3203): epoll_create1(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r1, 0xdd6, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060001001000000008000a"], 0x24}}, 0x24008000) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000011a00000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000011a00000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001400)={0x788, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_MEASUREMENTS={0x748, 0x111, 0x0, 0x1, {0x744, 0x5, 0x0, 0x1, [{0x3e8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x27c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffd}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5df7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x108, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}]}, {0x338, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x148, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x392}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1d8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x144, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7fff}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x788}, 0x1, 0x0, 0x0, 0x10}, 0x4040880) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x8001, 0x8}, 0x90) 1.09513994s ago: executing program 1 (id=3204): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x3, 0x3c) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.09426485s ago: executing program 0 (id=3206): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="940000001200010000000000000000007e0003"], 0x94}], 0x1}, 0x4000800) (async) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r1, 0x0, 0x0) 1.093639431s ago: executing program 4 (id=3207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000000)) (async) socket$kcm(0x29, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ffd7000008"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.035375082s ago: executing program 1 (id=3208): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611885000000000095"], &(0x7f0000000140)='GPL\x00', 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000140)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008005}, 0x80) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2c, r5, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x69}, @void, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x83, r5, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8, 0x3, r7}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) sendmmsg(r0, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000000)="bf", 0x1}], 0x1, &(0x7f0000000680)=ANY=[], 0xc}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000a80)="cb", 0x1}], 0x1, &(0x7f0000000200)=ANY=[], 0x10}}], 0x2, 0x4044044) 1.008565974s ago: executing program 2 (id=3209): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000390e3c92a1e7d4e1bf3779917f59b70be4f45734999b933decf3ec4f2e349884c431f9b9552b2ad22ad24ba4e6382de70ff1cc3368534d52a4c48c6837ad832ff4bef88665741740c88cd7c195d16a036ae4cf81825a4c640f", @ANYRESDEC, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x4004804) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe62}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x20033}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028014000200fe8000000000000000000000000000aa08000100", @ANYRES32=r2, @ANYBLOB="040013001400030017"], 0x68}}, 0x20008804) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="ce5b6d0c", @ANYRES32=r7, @ANYBLOB="1c005a801800018014000300810000023e1506000300090006000500"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, 0x0, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x3c}, 0x8, 0x3000000000002}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="660a00000000000081117d000000000085000000cd00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x3) r11 = accept4$inet6(r8, 0x0, &(0x7f00000000c0), 0x1800) getsockopt$IP_SET_OP_GET_BYINDEX(r11, 0x1, 0x53, &(0x7f0000000140), &(0x7f0000000180)=0x28) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f00000002c0)={0x4, 0x2, '\x00', 0x0, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x40480c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) 958.443957ms ago: executing program 0 (id=3210): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x10080}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000fedbdf2500"/20, @ANYRES32=0x0, @ANYBLOB="40000000000000000c002b80080003000000"], 0x2c}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff0700070026093a0914000600626f6e643000"/94], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}, {&(0x7f0000000280)="c6e5bf4e5ba26d3e5c9bb5360f92e67a44ba6b62e2274d6487af77d783d4c6693cee943690f5864e779d1beb21efed6e6d476f87"}, {&(0x7f0000000040)="dcbe422f5d028b81e662578f53c6471fd1c854f19dfa4247ae100a162723a5a403ccb3dd5913918efd77b8c43fbc4981d9bafc3b48e16322a5389908ee89a3c08fa633f1ae892c748b831b5b007a53f960f174194ce4812b382d45c202230aa6be00be2fbb427a3a"}, {&(0x7f00000000c0)="d1bc1a7600e5a60a93d380d591a3ee81db3154323e5c991f724a3fb2ef7fce391b98a4c3dee9b879f3c7f9c8ea68e307bd072d45d3b6d21ac4b6a820d8b9d3f6ab9c2a99257afdff89172e4c0118cd53e3620717e20c3f3a2f7d36a39493b166bcb349e584a2d14678b014398a181abcd2e3aef487a0667aabc0f4927dc0f23f897606e702a0ee605e8a0c3336b2936f03dbef8244cd3f87de18e4374edf5610cd7e53baa579063b65fdcc608037b6459e05632743841ec2ba0f81aaa631d64e2a33955d814e"}, {&(0x7f00000001c0)="93890dce91f8091f06ba66f5ad81571882d65b82d7ab4616336da4ecaf1965633209d1f7a7d363f8dadd4d6a3926d74bfec60d9d08bf196fe146"}], 0x1) sendmsg$netlink(r3, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r6) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="819b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, r7, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x64}, 0x1, 0x0, 0x0, 0x440c4}, 0x51) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x8000000, @empty, 0xffffffff}}, 0x0, 0x0, 0x3, 0x2, 0x8a, 0x5}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x1}, {0xf, 0xb}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008085}, 0x8814) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000500)="4bdf4b9b41cabcc7ade502f038d1ba9bbad70777e253ed86b83dc6a722be555f80093cddd0ebe24c79b4fcf3eff6", 0x2e, 0x4004000, &(0x7f0000000540)={0xa, 0x4e21, 0x80, @mcast2, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) shutdown(r5, 0x2) 879.980222ms ago: executing program 4 (id=3211): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00070c27bd70000000000002000000", @ANYRES32=0x0, @ANYBLOB="80004100050001"], 0x2c}, 0x1, 0x0, 0x0, 0x40840}, 0x20024090) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x6, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0x1003, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x23, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0x5, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x7fffffff, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x9e, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x1, 0x203, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x6, 0x5, 0x6cdf13a3, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x2, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x7ffffffc, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8, 0x6, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0x3, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x3d, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0xfffd, 0xcbf, 0x4010000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff9, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0x2, 0x8dc3, 0x20000005, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x2, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x105, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x7, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0x7]}]}}]}, 0x468}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x2, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x6, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x2, 0x8, 0x1003, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x8000, 0x8, 0x255, 0x6, 0xa, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0x2, 0x200, 0x1, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x23, 0x3, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0xe, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0x5, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x7fffffff, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x9, 0x0, 0x3, 0x9e, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x1, 0x203, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x8e, 0x5, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x0, 0x6, 0x5, 0x6cdf13a3, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x2, 0xfffffffa, 0x2, 0x18d1, 0x0, 0x3, 0x9486, 0x80, 0x2, 0x7ffffffc, 0xdb, 0x3, 0x80, 0xffff8000, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8, 0x6, 0x0, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0x3, 0x4, 0xc1, 0x9, 0x1, 0x5, 0x283, 0xb, 0x4, 0x3d, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x4, 0x62cc, 0x2, 0x7, 0x2eb7, 0xfffd, 0xcbf, 0x4010000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x800, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff9, 0x81, 0x382ae49b, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0xfffffffb, 0x6, 0x2, 0x8dc3, 0x20000005, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x2, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x105, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x7, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0x7]}]}}]}, 0x468}}, 0x0) 824.073428ms ago: executing program 1 (id=3212): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000000000000002030000000000000000000002"], 0x0, 0x56}, 0x20) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ff00000000000071118200000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket(0x15, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x9, 0x1, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB='*\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="3a949112e692823be823fe3eb9e2b2a4083ca9514ef325fa757241c467d8c2684e887442d4706386c0955769395a39ed0eae2fde0a14db45ccb11e1430efc464fb158730cf5acfe5729862b16af1a3d263f5c574bd6b904ee24d4166f3", @ANYRES64=r5], 0x20) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000180)=[{&(0x7f00000003c0)="9516", 0x2}], 0x1, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x2, 0x3, 0x6, 0x2042d, r8, 0x254, '\x00', r7, r0, 0x1, 0x1, 0x5, 0x1}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_proto_private(r9, 0x8924, &(0x7f0000000000)="d84450a4bf55990ef9b33a") sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r10, 0x0, 0x48a, &(0x7f0000000500)={0xbb, 0x10000}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006117d00000000000a6070000000013009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0x5}, {0xf, 0x6}, {0xc, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0xfeff, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@ifindex=r7, 0xffffffffffffffff, 0x29, 0x50, 0x0, @void, @value=r3, @void, @void, r5}, 0x20) getsockopt(r4, 0x200000000114, 0x271d, 0x0, &(0x7f00000000c0)) getsockopt$bt_hci(r1, 0x0, 0x18, &(0x7f0000000200)=""/3, &(0x7f0000000340)=0x3) 754.806053ms ago: executing program 2 (id=3213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x4, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)={0x34, 0x0, 0xb, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xd, 0x1, 'rpfilter\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048850}, 0x4) 708.393981ms ago: executing program 4 (id=3214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/221, 0xdd}], 0x1}, 0x1fc}], 0x400000000000207, 0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYBLOB="06c2162ea800f0a56cd7d8b828998ded17a013daee0fe9fa5f44fc24d311a92be6b114206bfc84de3c083cda92a159de65a31598c0f2382c91c60fbc83fdf2ac8e59fc2ac2146688da7c7aa2907d556dfd7b08ceb5fa4b23da3560f1fb823d9cec3a25f841f4f1a052b856b9619b52b57768ebf0e2430c7fd07d1783fa28473483f12fbfd96daa10b23e32a0e2c695c4f6561358bdb045484694ce306d5602396abb2918026e8ca63325516818731d065ca70af85e32503607adae42"], 0x118}}, 0x240408d0) 703.933981ms ago: executing program 2 (id=3215): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000002c00000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20}, {0x72}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x0, 0xe, 0xa, 0x2, 0x0, 0x9, 0x9, 0x5, 0x10, 0x7, 0x8, 0x3, 0x2, 0x6, 0xd, 0xd], 0x1, [0x1, 0x2883, 0x85, 0x1, 0x10, 0x0, 0x9, 0x7, 0x7ff, 0xc, 0x4, 0x6, 0x42d, 0x8, 0x200, 0x4], [0x36e, 0xd, 0xeed, 0x5, 0x200, 0x1, 0x32c4, 0x0, 0x5, 0x0, 0x10, 0x7, 0x200, 0x29, 0xffff, 0x3]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x4}}]}]}, 0xac}}, 0x40044) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r0, 0x58, &(0x7f00000014c0)}, 0x10) 428.303895ms ago: executing program 2 (id=3216): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711081000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x4}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xb}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x1, 0x4, 0xfff7, 0x500, 0x3, 0x400102, r1}) 310.656888ms ago: executing program 2 (id=3217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x60, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) r1 = socket(0x277b3ddf925e140c, 0x6, 0x5) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 212.077208ms ago: executing program 2 (id=3218): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0xf, 0x3, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x3, 0x3c) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 4 (id=3219): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=@ipv4_newroute={0x15, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfb, {0xa, 0x80}, [@RTA_UID={0x8, 0x19, 0xffffffffffffffff}]}, 0x24}}, 0x20000050) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) kernel console output (not intermixed with test programs): device bond6 [ 587.371089][T12252] macvlan2: entered promiscuous mode [ 587.377224][T12252] macvlan2: entered allmulticast mode [ 587.385079][T12252] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 587.905765][T12279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1655'. [ 587.989906][T12288] batadv0: entered promiscuous mode [ 588.000617][T12284] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1654'. [ 588.035030][T12286] nbd0: detected capacity change from 0 to 127 [ 588.053668][T12291] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1657'. [ 588.062643][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1657'. [ 588.133856][T12286] netlink: 'syz.2.1657': attribute type 10 has an invalid length. [ 588.135995][T12290] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1658'. [ 588.183952][T12303] xt_ipcomp: unknown flags 1D [ 588.208392][ T5831] block nbd0: Receive control failed (result -32) [ 588.214315][T12304] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 588.248991][T12304] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 588.319424][T12312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1664'. [ 588.476335][T12323] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 588.586412][T12324] lo speed is unknown, defaulting to 1000 [ 589.378458][T12324] lo speed is unknown, defaulting to 1000 [ 589.395441][T12339] lo speed is unknown, defaulting to 1000 [ 589.425847][T12339] lo speed is unknown, defaulting to 1000 [ 589.515453][T12347] netlink: 'syz.1.1673': attribute type 2 has an invalid length. [ 589.652667][T12347] lo speed is unknown, defaulting to 1000 [ 589.793062][T12347] lo speed is unknown, defaulting to 1000 [ 589.802300][T12359] tipc: Enabled bearer , priority 0 [ 589.881193][T12359] tipc: Resetting bearer [ 590.372775][T12387] lo speed is unknown, defaulting to 1000 [ 590.395301][T12385] lo speed is unknown, defaulting to 1000 [ 590.402527][T12387] lo speed is unknown, defaulting to 1000 [ 590.434763][T12385] lo speed is unknown, defaulting to 1000 [ 591.055542][T12397] lo speed is unknown, defaulting to 1000 [ 591.075852][T12397] lo speed is unknown, defaulting to 1000 [ 591.235819][T12401] lo speed is unknown, defaulting to 1000 [ 591.274696][T12401] lo speed is unknown, defaulting to 1000 [ 591.422595][T12413] SET target dimension over the limit! [ 591.715549][T12426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.766223][T12426] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.843598][T12426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 591.859532][T12420] lo speed is unknown, defaulting to 1000 [ 591.950248][T12420] lo speed is unknown, defaulting to 1000 [ 592.341791][T12446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 592.481862][T12447] __nla_validate_parse: 6 callbacks suppressed [ 592.481879][T12447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1698'. [ 592.538484][T12451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'. [ 592.551229][T12451] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1700'. [ 592.598759][T12451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1700'. [ 592.638986][T12451] vlan0: entered allmulticast mode [ 592.654581][T12451] dummy0: entered allmulticast mode [ 592.715239][T12461] lo speed is unknown, defaulting to 1000 [ 592.735061][T12461] lo speed is unknown, defaulting to 1000 [ 592.825546][T12464] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 592.831363][T12464] dvmrp1: linktype set to 774 [ 592.873991][T12465] lo speed is unknown, defaulting to 1000 [ 592.881344][T12467] netlink: 'syz.0.1704': attribute type 4 has an invalid length. [ 592.901930][T12464] dvmrp1: tun_chr_ioctl cmd 2147767521 [ 592.975899][ T10] lo speed is unknown, defaulting to 1000 [ 592.978058][T12465] lo speed is unknown, defaulting to 1000 [ 592.982021][ T10] syz2: Port: 1 Link DOWN [ 593.292187][ T9420] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.355075][ T9420] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.372608][ T9420] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.393128][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1709'. [ 593.452015][ T9420] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.458532][T12511] netlink: 'syz.1.1711': attribute type 1 has an invalid length. [ 593.480855][T12504] bridge_slave_1: left allmulticast mode [ 593.487208][T12504] bridge_slave_1: left promiscuous mode [ 593.500773][T12504] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.818765][T12527] FAULT_INJECTION: forcing a failure. [ 593.818765][T12527] name failslab, interval 1, probability 0, space 0, times 0 [ 593.832695][T12527] CPU: 0 UID: 0 PID: 12527 Comm: syz.3.1715 Not tainted syzkaller #0 PREEMPT(full) [ 593.832742][T12527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 593.832768][T12527] Call Trace: [ 593.832776][T12527] [ 593.832784][T12527] dump_stack_lvl+0xe8/0x150 [ 593.832812][T12527] should_fail_ex+0x414/0x560 [ 593.832842][T12527] should_failslab+0xa8/0x100 [ 593.832864][T12527] __kvmalloc_node_noprof+0x175/0x920 [ 593.832885][T12527] ? map_get_next_key+0x234/0x630 [ 593.832907][T12527] ? _copy_from_user+0x94/0xb0 [ 593.832931][T12527] map_get_next_key+0x234/0x630 [ 593.832955][T12527] ? bpf_lsm_bpf+0x9/0x20 [ 593.832979][T12527] __sys_bpf+0x63d/0x860 [ 593.833003][T12527] ? __pfx___sys_bpf+0x10/0x10 [ 593.833046][T12527] ? ksys_write+0x22a/0x250 [ 593.833066][T12527] ? __pfx_ksys_write+0x10/0x10 [ 593.833091][T12527] __x64_sys_bpf+0x7c/0x90 [ 593.833112][T12527] do_syscall_64+0xec/0xf80 [ 593.833132][T12527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.833149][T12527] ? trace_irq_disable+0x37/0x100 [ 593.833169][T12527] ? clear_bhb_loop+0x60/0xb0 [ 593.833190][T12527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.833211][T12527] RIP: 0033:0x7f979058f749 [ 593.833228][T12527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.833246][T12527] RSP: 002b:00007f9791402038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 593.833264][T12527] RAX: ffffffffffffffda RBX: 00007f97907e5fa0 RCX: 00007f979058f749 [ 593.833276][T12527] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000004 [ 593.833287][T12527] RBP: 00007f9791402090 R08: 0000000000000000 R09: 0000000000000000 [ 593.833297][T12527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.833307][T12527] R13: 00007f97907e6038 R14: 00007f97907e5fa0 R15: 00007ffdf6026b68 [ 593.833334][T12527] [ 594.176711][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1718'. [ 594.301328][T12535] bond2: option min_links: invalid value (18446744073709551612) [ 594.309117][T12535] bond2: option min_links: allowed values 0 - 2147483647 [ 594.329515][T12535] bond2 (unregistering): Released all slaves [ 594.381169][T12533] team1: entered promiscuous mode [ 594.433025][T12533] team1: entered allmulticast mode [ 594.655177][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1725'. [ 594.852755][T12567] lo speed is unknown, defaulting to 1000 [ 594.860271][T12567] lo speed is unknown, defaulting to 1000 [ 624.256150][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.265126][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.271382][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 660.962818][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 661.149714][T12592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.194358][T12592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.204251][T12592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.215657][T12592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.234668][T12592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.248916][T12592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.292869][T12593] lo speed is unknown, defaulting to 1000 [ 661.301231][T12592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.345879][T12609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1741'. [ 661.348086][T12593] lo speed is unknown, defaulting to 1000 [ 661.385613][T12609] netlink: 'syz.0.1741': attribute type 4 has an invalid length. [ 661.389611][T12592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.426228][T12593] lo speed is unknown, defaulting to 1000 [ 661.441817][T12592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.472123][T12592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.709442][T12624] pim6reg: entered allmulticast mode [ 661.724544][ T5894] lo speed is unknown, defaulting to 1000 [ 661.730632][T12593] infiniband syz0: set active [ 661.736965][T12624] pim6reg: left allmulticast mode [ 661.742130][T12593] infiniband syz0: added lo [ 661.837450][T12593] RDS/IB: syz0: added [ 661.842466][T12593] smc: adding ib device syz0 with port count 1 [ 661.854160][T12593] smc: ib device syz0 port 1 has no pnetid [ 661.876083][ T10] lo speed is unknown, defaulting to 1000 [ 661.885422][T12631] lo speed is unknown, defaulting to 1000 [ 661.892928][T12631] lo speed is unknown, defaulting to 1000 [ 661.926094][T12593] lo speed is unknown, defaulting to 1000 [ 662.417008][T12651] bridge_slave_0: left allmulticast mode [ 662.427250][T12651] bridge_slave_0: left promiscuous mode [ 662.440791][T12651] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.464195][T12651] bridge_slave_1: left allmulticast mode [ 662.484822][T12651] bridge_slave_1: left promiscuous mode [ 662.501795][T12651] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.531264][T12651] bond0: (slave bond_slave_0): Releasing backup interface [ 662.545211][T12651] bond_slave_0: left promiscuous mode [ 662.555964][T12651] bond0: (slave bond_slave_1): Releasing backup interface [ 662.577321][T12651] bond_slave_1: left promiscuous mode [ 662.624720][T12651] team0: Port device team_slave_0 removed [ 662.640582][T12651] team0: Port device team_slave_1 removed [ 662.656732][T12651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.665305][T12651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.675520][T12631] lo speed is unknown, defaulting to 1000 [ 662.940929][T12593] lo speed is unknown, defaulting to 1000 [ 663.107451][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 663.831828][T12593] lo speed is unknown, defaulting to 1000 [ 663.932052][T12681] netlink: 416 bytes leftover after parsing attributes in process `syz.2.1757'. [ 664.074808][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1761'. [ 664.178054][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1762'. [ 664.289548][T12593] lo speed is unknown, defaulting to 1000 [ 664.343877][T12694] sch_tbf: burst 240 is lower than device lo mtu (11337746) ! [ 664.539246][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1763'. [ 664.607972][T12701] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1763'. [ 664.751849][T12593] lo speed is unknown, defaulting to 1000 [ 665.169208][T12718] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 665.292970][T12726] sctp: [Deprecated]: syz.2.1771 (pid 12726) Use of int in max_burst socket option. [ 665.292970][T12726] Use struct sctp_assoc_value instead [ 665.293211][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1770'. [ 665.323467][T12725] tipc: Enabling of bearer rejected, failed to enable media [ 665.394681][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 665.512920][T12734] siw: device registration error -23 [ 665.930795][T12758] netlink: 'syz.0.1782': attribute type 1 has an invalid length. [ 666.004443][T12766] xt_hashlimit: size too large, truncated to 1048576 [ 666.011656][T12766] xt_hashlimit: max too large, truncated to 1048576 [ 666.046465][T12766] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 666.159313][T12770] __nla_validate_parse: 3 callbacks suppressed [ 666.159325][T12770] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1785'. [ 666.184724][T12770] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1785'. [ 666.321689][T12776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1787'. [ 666.417121][T12778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1788'. [ 666.426503][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1788'. [ 666.438220][T12778] vlan2: entered promiscuous mode [ 666.452876][T12785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1790'. [ 666.467860][T12778] bridge_slave_0: entered promiscuous mode [ 666.477079][T12778] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 666.726129][T12803] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 666.763152][T12803] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 666.770273][T12803] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 667.525133][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1807'. [ 667.585373][T12841] gretap1: entered promiscuous mode [ 667.611815][T12841] batman_adv: batadv0: Adding interface: gretap1 [ 667.641825][T12841] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 667.667704][T12841] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 667.775579][T12859] netlink: 'syz.1.1812': attribute type 1 has an invalid length. [ 667.926953][T12859] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 667.976672][T12859] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 668.101173][T12875] tipc: Enabled bearer , priority 0 [ 668.127743][T12875] tipc: Disabling bearer [ 668.196340][T12859] bond7: (slave gretap2): making interface the new active one [ 668.214369][T12859] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 668.258914][T12872] macvlan3: entered promiscuous mode [ 668.264429][T12872] macvlan3: entered allmulticast mode [ 668.275048][T12872] bond7: entered promiscuous mode [ 668.284876][T12872] gretap2: entered promiscuous mode [ 668.303129][T12872] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 668.369913][T12872] bond7: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 668.514859][T12872] bond7: left promiscuous mode [ 668.521983][T12872] gretap2: left promiscuous mode [ 669.195486][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'. [ 669.206710][T12892] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1821'. [ 669.255162][T12893] nbd: device at index 2 is going down [ 669.363134][T12898] syzkaller0: entered promiscuous mode [ 669.369097][T12898] syzkaller0: entered allmulticast mode [ 669.404276][T12895] tipc: Enabled bearer , priority 0 [ 669.464126][T12894] tipc: Resetting bearer [ 669.711778][T12894] tipc: Disabling bearer [ 669.767584][T12905] bond2: option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 669.805282][T12905] bond2 (unregistering): Released all slaves [ 670.201577][T12928] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1835'. [ 670.229390][T12931] netlink: 'syz.1.1836': attribute type 11 has an invalid length. [ 670.940544][T12963] team0: Mode changed to "loadbalance" [ 671.180594][T12982] lo speed is unknown, defaulting to 1000 [ 671.251298][T12982] lo speed is unknown, defaulting to 1000 [ 671.277572][T12982] lo speed is unknown, defaulting to 1000 [ 671.330804][T12998] __nla_validate_parse: 4 callbacks suppressed [ 671.330823][T12998] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1856'. [ 671.506725][T13010] net_ratelimit: 56 callbacks suppressed [ 671.506740][T13010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 671.630359][T13014] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 671.713131][T13018] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1859'. [ 671.742569][T13020] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 671.827130][T13014] lo speed is unknown, defaulting to 1000 [ 671.847432][T13014] lo speed is unknown, defaulting to 1000 [ 671.849264][ T30] audit: type=1800 audit(1768600478.162:5): pid=13003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1854" name="memory.events" dev="tmpfs" ino=1774 res=0 errno=0 [ 671.871539][T13014] lo speed is unknown, defaulting to 1000 [ 671.977600][T13023] sctp: [Deprecated]: syz.4.1860 (pid 13023) Use of int in maxseg socket option. [ 671.977600][T13023] Use struct sctp_assoc_value instead [ 672.215692][T13026] lo speed is unknown, defaulting to 1000 [ 672.227229][T13028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1862'. [ 672.239468][T13026] lo speed is unknown, defaulting to 1000 [ 672.439149][T13026] lo speed is unknown, defaulting to 1000 [ 672.666527][T13047] syzkaller1: entered promiscuous mode [ 672.672419][T13047] syzkaller1: entered allmulticast mode [ 672.816919][T13029] bond8: option lacp_rate: invalid value (255) [ 672.865355][T13029] bond8 (unregistering): Released all slaves [ 672.897397][T13058] netlink: 'syz.3.1870': attribute type 30 has an invalid length. [ 673.228856][T13061] netlink: 'syz.4.1871': attribute type 39 has an invalid length. [ 673.614996][T13075] netlink: 'syz.4.1874': attribute type 1 has an invalid length. [ 673.733123][T13075] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1874'. [ 673.751073][T13077] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 673.779249][T13077] bond7: (slave batadv1): making interface the new active one [ 673.814788][T13077] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 673.859190][T13075] 8021q: adding VLAN 0 to HW filter on device bond7 [ 673.990271][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1875'. [ 674.011466][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1876'. [ 674.020935][T13080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1875'. [ 674.030933][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1876'. [ 674.155620][T13083] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1877'. [ 674.168615][T13083] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1877'. [ 674.439122][T13097] lo speed is unknown, defaulting to 1000 [ 674.478318][T13097] lo speed is unknown, defaulting to 1000 [ 674.522688][T13097] lo speed is unknown, defaulting to 1000 [ 675.351941][T13122] bridge: RTM_NEWNEIGH with invalid ether address [ 675.510035][T13128] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 675.556655][T13126] tipc: Enabled bearer , priority 0 [ 675.664082][T13129] syzkaller0: entered promiscuous mode [ 675.672957][T13129] syzkaller0: entered allmulticast mode [ 675.844823][T13138] tipc: Resetting bearer [ 675.877181][T13138] tipc: Disabling bearer [ 675.895101][ T30] audit: type=1107 audit(1768600482.212:6): pid=13141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 675.926668][T13129] lo speed is unknown, defaulting to 1000 [ 675.934739][T13129] lo speed is unknown, defaulting to 1000 [ 675.940614][ T30] audit: type=1800 audit(1768600482.212:7): pid=13142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1895" name="memory.events" dev="tmpfs" ino=1816 res=0 errno=0 [ 675.976837][T13129] lo speed is unknown, defaulting to 1000 [ 676.081073][T13147] lo speed is unknown, defaulting to 1000 [ 676.125386][T13147] lo speed is unknown, defaulting to 1000 [ 676.213510][T13147] lo speed is unknown, defaulting to 1000 [ 676.529656][T13162] __nla_validate_parse: 5 callbacks suppressed [ 676.529672][T13162] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1901'. [ 677.277128][T13185] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1908'. [ 677.288419][T13185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 677.477176][T13190] pim6reg: entered allmulticast mode [ 677.495737][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1909'. [ 677.558947][T13185] pim6reg: left allmulticast mode [ 677.741400][T13200] netlink: 'syz.0.1911': attribute type 1 has an invalid length. [ 677.751373][T13200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1911'. [ 677.904373][T13207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1913'. [ 678.045498][T13210] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1914'. [ 678.158467][T13221] netlink: 'syz.2.1917': attribute type 11 has an invalid length. [ 678.300268][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1922'. [ 678.329121][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1922'. [ 678.362062][T13234] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 678.378910][T13222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1918'. [ 678.389611][ T980] lo speed is unknown, defaulting to 1000 [ 678.769791][T13255] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1928'. [ 678.787588][T13255] netlink: Unknown conntrack attr (0) [ 678.826800][T13241] block nbd1: server does not support multiple connections per device. [ 678.847505][T13255] pimreg: entered allmulticast mode [ 678.853073][T13245] lo speed is unknown, defaulting to 1000 [ 678.855208][T13241] block nbd1: shutting down sockets [ 678.872202][T13245] lo speed is unknown, defaulting to 1000 [ 678.892745][T13245] lo speed is unknown, defaulting to 1000 [ 680.384269][T13345] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 680.460815][T13348] ip6erspan0: entered allmulticast mode [ 681.216975][T13376] netlink: 'syz.0.1967': attribute type 1 has an invalid length. [ 681.414487][T13391] netlink: 'syz.1.1973': attribute type 1 has an invalid length. [ 681.599709][T13402] tipc: MTU too low for tipc bearer [ 681.671591][T13406] __nla_validate_parse: 5 callbacks suppressed [ 681.671609][T13406] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1974'. [ 681.726063][T13407] bond9: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 681.786264][T13407] bond9 (unregistering): Released all slaves [ 681.815909][T13402] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1974'. [ 681.959844][T13413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1978'. [ 681.974452][T13414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1978'. [ 681.974555][T13411] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1977'. [ 682.431786][T13434] lo speed is unknown, defaulting to 1000 [ 682.449090][T13440] netlink: 'syz.4.1987': attribute type 3 has an invalid length. [ 682.456920][T13440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1987'. [ 682.478040][T13440] netpci0: tun_chr_ioctl cmd 1074025678 [ 682.483723][T13440] netpci0: group set to 0 [ 682.489397][T13442] netlink: 'syz.2.1986': attribute type 29 has an invalid length. [ 682.496216][T13434] lo speed is unknown, defaulting to 1000 [ 682.504798][T13437] lo speed is unknown, defaulting to 1000 [ 682.506166][T13441] netlink: 'syz.3.1985': attribute type 16 has an invalid length. [ 682.518780][T13441] netlink: 'syz.3.1985': attribute type 17 has an invalid length. [ 682.550420][T13441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.565700][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1989'. [ 682.595065][T13441] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.617932][T13441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 682.628864][T13452] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1990'. [ 682.644637][T13442] netlink: 'syz.2.1986': attribute type 29 has an invalid length. [ 682.653052][T13434] lo speed is unknown, defaulting to 1000 [ 682.659597][T13437] lo speed is unknown, defaulting to 1000 [ 682.782327][T13456] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1991'. [ 682.882016][T13458] xt_limit: Overflow, try lower: 271964/0 [ 682.909673][T13458] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1993'. [ 683.153535][T13437] lo speed is unknown, defaulting to 1000 [ 683.191494][T13473] IPv6: sit1: Disabled Multicast RS [ 683.204989][T13473] sit1: entered promiscuous mode [ 683.210155][T13473] sit1: entered allmulticast mode [ 684.381508][T13510] lo speed is unknown, defaulting to 1000 [ 684.389181][T13510] lo speed is unknown, defaulting to 1000 [ 684.417441][T13510] lo speed is unknown, defaulting to 1000 [ 684.907900][T13547] xt_TPROXY: Can be used only with -p tcp or -p udp [ 685.447865][T13569] lo speed is unknown, defaulting to 1000 [ 685.468480][T13569] lo speed is unknown, defaulting to 1000 [ 685.498765][T13569] lo speed is unknown, defaulting to 1000 [ 685.521917][T13577] netlink: 'syz.0.2024': attribute type 4 has an invalid length. [ 685.535385][T12934] lo speed is unknown, defaulting to 1000 [ 685.548166][T12934] syz2: Port: 1 Link ACTIVE [ 685.697693][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 685.715982][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.722328][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.761965][T13586] lo speed is unknown, defaulting to 1000 [ 685.773159][T13586] lo speed is unknown, defaulting to 1000 [ 685.899058][T13594] lo speed is unknown, defaulting to 1000 [ 685.924280][T13586] lo speed is unknown, defaulting to 1000 [ 685.925537][T13594] lo speed is unknown, defaulting to 1000 [ 686.029920][T13601] IPv6: sit3: Disabled Multicast RS [ 686.037239][T13601] sit3: entered allmulticast mode [ 686.328536][T13594] lo speed is unknown, defaulting to 1000 [ 686.477846][T13616] netlink: 'syz.2.2039': attribute type 3 has an invalid length. [ 686.523291][T13616] netlink: 'syz.2.2039': attribute type 1 has an invalid length. [ 686.638931][T13622] netlink: 'syz.1.2042': attribute type 21 has an invalid length. [ 686.647015][T13622] netlink: 'syz.1.2042': attribute type 5 has an invalid length. [ 686.669191][T13622] netlink: 'syz.1.2042': attribute type 6 has an invalid length. [ 686.688372][T13622] __nla_validate_parse: 15 callbacks suppressed [ 686.688389][T13622] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2042'. [ 686.899842][T13637] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 686.934592][T13638] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2046'. [ 686.964443][T13637] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 686.997612][T13637] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 687.001768][T13647] netlink: 'syz.1.2048': attribute type 1 has an invalid length. [ 687.093888][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2048'. [ 687.112296][T13656] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2049'. [ 687.257289][T13637] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.269372][T13637] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 687.279494][T13637] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 687.337313][T13655] syzkaller0: entered promiscuous mode [ 687.342818][T13655] syzkaller0: entered allmulticast mode [ 687.537727][T13667] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2052'. [ 687.742546][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2053'. [ 688.751532][T13637] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.761438][T13637] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 688.771297][T13637] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 688.908651][T13637] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.929000][T13637] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 688.941741][T13637] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 689.193853][T13683] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 689.258633][ T6185] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.285299][ T6185] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 689.323456][ T6185] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 689.394242][T13671] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.422410][T13671] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 689.435381][T13671] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 689.452066][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2061'. [ 689.556449][T13671] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.597510][T13671] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 689.619721][T13671] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 689.659735][T13671] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.682096][T13671] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 689.703364][T13671] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 689.732359][T13707] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2063'. [ 690.095954][T13734] nbd: must specify at least one socket [ 690.110960][T13734] nbd: couldn't find device at index 2 [ 690.287706][T13752] openvswitch: netlink: Multiple metadata blocks provided [ 690.305270][T13751] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2077'. [ 690.460090][T13756] pim6reg: entered allmulticast mode [ 690.481086][T13756] pim6reg: left allmulticast mode [ 690.572052][T13759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2079'. [ 690.718983][T13747] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 690.812722][ T980] lo speed is unknown, defaulting to 1000 [ 690.835465][ T980] syz2: Port: 1 Link DOWN [ 691.045419][T13780] syzkaller0: entered promiscuous mode [ 691.055322][T13780] syzkaller0: entered allmulticast mode [ 691.451282][T13795] bond0 (unregistering): Released all slaves [ 691.574543][T13806] xt_bpf: check failed: parse error [ 691.620169][T13803] netlink: 'syz.1.2091': attribute type 1 has an invalid length. [ 691.688083][T13803] 8021q: adding VLAN 0 to HW filter on device bond10 [ 691.788764][T13803] bond10: (slave syz_tun): making interface the new active one [ 691.809062][T13803] bond10: (slave syz_tun): Enslaving as an active interface with an up link [ 691.890572][T13812] __nla_validate_parse: 4 callbacks suppressed [ 691.890592][T13812] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2092'. [ 691.956422][T13803] syzkaller1: entered promiscuous mode [ 691.962009][T13803] syzkaller1: entered allmulticast mode [ 692.165482][T13819] lo speed is unknown, defaulting to 1000 [ 692.173014][T13819] lo speed is unknown, defaulting to 1000 [ 692.213054][T13819] lo speed is unknown, defaulting to 1000 [ 692.389599][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2097'. [ 693.244573][T13840] netlink: 'syz.0.2101': attribute type 1 has an invalid length. [ 693.287834][T13845] netlink: 'syz.3.2102': attribute type 1 has an invalid length. [ 693.301245][T13840] 8021q: adding VLAN 0 to HW filter on device bond7 [ 693.319568][T13847] vlan0: entered promiscuous mode [ 693.353406][T13847] bond7: entered promiscuous mode [ 693.359353][T13847] vlan0: entered allmulticast mode [ 693.388345][T13847] bond7: entered allmulticast mode [ 693.454645][T13845] 8021q: adding VLAN 0 to HW filter on device bond4 [ 693.537714][T13840] bond7: (slave gretap2): making interface the new active one [ 693.546136][T13840] gretap2: entered promiscuous mode [ 693.551644][T13840] gretap2: entered allmulticast mode [ 693.559279][T13840] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 693.581605][T13848] macvlan2: entered promiscuous mode [ 693.587574][T13848] macvlan2: entered allmulticast mode [ 693.599923][T13848] bond4: entered allmulticast mode [ 693.623497][T13848] bond4: entered promiscuous mode [ 693.655196][T13848] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 693.687039][T13848] team0: Port device macvlan2 added [ 693.793805][T13845] lo speed is unknown, defaulting to 1000 [ 693.801521][T13855] lo speed is unknown, defaulting to 1000 [ 693.808157][T13845] lo speed is unknown, defaulting to 1000 [ 693.819075][T13855] lo speed is unknown, defaulting to 1000 [ 693.829641][T13845] lo speed is unknown, defaulting to 1000 [ 693.990430][T13862] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2105'. [ 694.226710][T13855] lo speed is unknown, defaulting to 1000 [ 694.521563][T13882] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 694.587347][T13882] ip6t_REJECT: ECHOREPLY is not supported [ 695.254284][T13897] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2116'. [ 695.504947][T13904] lo speed is unknown, defaulting to 1000 [ 695.512318][T13904] lo speed is unknown, defaulting to 1000 [ 695.536438][T13904] lo speed is unknown, defaulting to 1000 [ 695.610397][T13914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2121'. [ 695.744676][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2122'. [ 695.855688][T13931] openvswitch: netlink: IP tunnel TTL not specified. [ 696.120770][T13941] tipc: Enabling of bearer rejected, already enabled [ 696.213474][T13944] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2127'. [ 696.231315][T13941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2126'. [ 696.240710][T13941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2126'. [ 696.290093][T13947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2128'. [ 696.690219][T13962] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 696.849410][T13976] netlink: 'syz.1.2134': attribute type 4 has an invalid length. [ 696.860763][T13977] netlink: 'syz.1.2134': attribute type 4 has an invalid length. [ 696.899031][T13977] __nla_validate_parse: 2 callbacks suppressed [ 696.899048][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2134'. [ 696.982453][T13980] lo speed is unknown, defaulting to 1000 [ 696.994011][T13980] lo speed is unknown, defaulting to 1000 [ 697.002445][T13980] lo speed is unknown, defaulting to 1000 [ 697.034188][T13986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2135'. [ 697.044301][T13988] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2138'. [ 697.259906][T14001] veth0: entered promiscuous mode [ 697.291160][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2140'. [ 697.400137][T14009] netlink: 'syz.2.2146': attribute type 1 has an invalid length. [ 697.436929][T14009] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2146'. [ 697.465111][T13990] veth0 (unregistering): left promiscuous mode [ 697.947487][T14032] lo speed is unknown, defaulting to 1000 [ 697.991215][T14036] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2148'. [ 698.014958][T14032] lo speed is unknown, defaulting to 1000 [ 698.021914][T14032] lo speed is unknown, defaulting to 1000 [ 698.170213][T14044] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2152'. [ 698.564177][T14057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2157'. [ 698.683074][T14060] netlink: 'syz.1.2158': attribute type 1 has an invalid length. [ 698.755671][T14064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2159'. [ 698.843462][T14064] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2159'. [ 699.092980][T14077] tipc: Enabled bearer , priority 0 [ 699.111872][T14077] syzkaller0: entered promiscuous mode [ 699.121822][T14077] syzkaller0: entered allmulticast mode [ 699.210416][T14077] tipc: Resetting bearer [ 699.270736][T14072] tipc: Resetting bearer [ 699.294313][T14072] tipc: Disabling bearer [ 699.590325][T14107] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 699.666791][T14109] vlan3: entered allmulticast mode [ 699.679797][T14109] gretap0: entered allmulticast mode [ 699.699410][T14114] netlink: 'syz.2.2174': attribute type 21 has an invalid length. [ 699.722946][T14104] lo speed is unknown, defaulting to 1000 [ 699.731937][T14114] netlink: 'syz.2.2174': attribute type 21 has an invalid length. [ 699.744768][T14104] lo speed is unknown, defaulting to 1000 [ 699.754199][T14104] lo speed is unknown, defaulting to 1000 [ 699.904396][T14121] lo speed is unknown, defaulting to 1000 [ 699.912053][T14121] lo speed is unknown, defaulting to 1000 [ 700.222306][T14121] lo speed is unknown, defaulting to 1000 [ 701.767566][T14176] tipc: Enabled bearer , priority 0 [ 701.778356][T14176] syzkaller0: entered promiscuous mode [ 701.784072][T14176] syzkaller0: entered allmulticast mode [ 701.823404][T14176] tipc: Resetting bearer [ 701.875712][T14176] tipc: Disabling bearer [ 702.050308][T14183] __nla_validate_parse: 13 callbacks suppressed [ 702.050327][T14183] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2192'. [ 702.074451][ T5986] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 702.214671][T14192] team_slave_1: Caught tx_queue_len zero misconfig [ 702.279927][T14189] lo speed is unknown, defaulting to 1000 [ 702.297119][T14189] lo speed is unknown, defaulting to 1000 [ 702.315834][T14189] lo speed is unknown, defaulting to 1000 [ 702.323489][ T5986] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 702.463185][T14201] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2197'. [ 702.547073][T14203] erspan0: left promiscuous mode [ 702.627029][T14209] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2200'. [ 702.661389][T14209] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2200'. [ 702.731996][T14203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.751027][T14203] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.774146][T14203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 702.828819][T14204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 702.887826][T14210] lo speed is unknown, defaulting to 1000 [ 702.930488][T14210] lo speed is unknown, defaulting to 1000 [ 702.970797][T14210] lo speed is unknown, defaulting to 1000 [ 703.113725][T14216] lo: Caught tx_queue_len zero misconfig [ 703.154113][ T12] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 703.348560][T14220] pim6reg1: entered promiscuous mode [ 703.353940][T14220] pim6reg1: entered allmulticast mode [ 703.580899][T14227] openvswitch: netlink: IP tunnel dst address not specified [ 703.588529][T14228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2205'. [ 703.632271][T14228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2205'. [ 703.864282][T14245] xt_TCPMSS: Only works on TCP SYN packets [ 704.053003][T14252] netlink: 'syz.1.2212': attribute type 1 has an invalid length. [ 704.062173][T14246] lo speed is unknown, defaulting to 1000 [ 704.083094][T14246] lo speed is unknown, defaulting to 1000 [ 704.104772][T14252] netlink: 'syz.1.2212': attribute type 2 has an invalid length. [ 704.112653][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2212'. [ 704.129633][T14246] lo speed is unknown, defaulting to 1000 [ 704.174450][ T7628] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 704.197017][ T7628] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 704.319880][T14259] siw: device registration error -23 [ 704.530966][T14269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2217'. [ 704.689080][T14272] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2218'. [ 704.716823][T14272] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2218'. [ 704.973965][T12934] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 704.999988][T14291] tipc: Enabled bearer , priority 0 [ 705.100664][T14291] syzkaller0: entered promiscuous mode [ 705.118184][T14291] syzkaller0: entered allmulticast mode [ 705.148968][T14291] tipc: Resetting bearer [ 705.173403][T14303] Can't find ip_set type hash:n [ 705.696662][ T1940] tipc: Resetting bearer [ 705.740266][T14290] tipc: Resetting bearer [ 707.579969][T14290] tipc: Disabling bearer [ 707.594184][T12934] tipc: Node number set to 3815347656 [ 707.603496][T14324] __nla_validate_parse: 2 callbacks suppressed [ 707.603513][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2230'. [ 707.614604][T14326] vlan1: entered promiscuous mode [ 707.618686][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2230'. [ 707.698339][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2232'. [ 707.728211][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2230'. [ 707.757927][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2230'. [ 707.956283][T14356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2236'. [ 708.011773][T14357] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2239'. [ 708.086209][T14362] netlink: 'syz.4.2241': attribute type 1 has an invalid length. [ 708.095273][T14361] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2240'. [ 708.121086][T14367] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2240'. [ 708.151026][T14362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.173607][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 708.194367][T14362] bridge0: entered allmulticast mode [ 708.304830][T14373] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2244'. [ 708.544641][T14388] netlink: 'syz.0.2250': attribute type 8 has an invalid length. [ 708.573995][T14388] netlink: 'syz.0.2250': attribute type 9 has an invalid length. [ 708.602738][T14388] netlink: 'syz.0.2250': attribute type 10 has an invalid length. [ 708.626676][T14394] Unsupported ieee802154 address type: 0 [ 708.661550][T14388] netlink: 'syz.0.2250': attribute type 11 has an invalid length. [ 709.559052][T14436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 710.305674][T14474] gretap3: entered promiscuous mode [ 710.336636][T14474] batman_adv: batadv0: Adding interface: gretap3 [ 710.343002][T14474] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 710.370897][T14474] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 710.502161][T14479] lo speed is unknown, defaulting to 1000 [ 710.545511][T14479] lo speed is unknown, defaulting to 1000 [ 710.569059][T14479] lo speed is unknown, defaulting to 1000 [ 711.376771][T14507] netlink: 'syz.1.2279': attribute type 15 has an invalid length. [ 712.268082][T14536] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 712.303719][T14536] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 712.785808][T14552] __nla_validate_parse: 13 callbacks suppressed [ 712.785825][T14552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2293'. [ 712.808927][T14552] hsr_slave_0: left promiscuous mode [ 712.824886][T14552] hsr_slave_1: left promiscuous mode [ 713.263626][T14557] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2294'. [ 713.284232][T14557] netlink: 'syz.1.2294': attribute type 1 has an invalid length. [ 713.288053][T14559] IPv6: sit4: Disabled Multicast RS [ 713.485545][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2296'. [ 713.611225][T14572] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 713.736188][T14582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2299'. [ 713.877970][T14590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2305'. [ 714.074335][T14599] IPVS: Error connecting to the multicast addr [ 714.257602][T14609] ip6gretap3: entered allmulticast mode [ 714.290028][T14609] netlink: 'syz.0.2313': attribute type 13 has an invalid length. [ 714.310947][T14609] netlink: 'syz.0.2313': attribute type 17 has an invalid length. [ 714.382003][T14609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.391960][T14609] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.413015][T14609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 714.438516][ T5986] lo speed is unknown, defaulting to 1000 [ 714.445336][ T5986] syz2: Port: 1 Link ACTIVE [ 714.756101][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2319'. [ 714.876497][T14635] vxcan1: entered promiscuous mode [ 714.893089][T14629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2321'. [ 715.571526][T14674] team_slave_0: Caught tx_queue_len zero misconfig [ 715.636996][T14677] netlink: 'syz.2.2334': attribute type 29 has an invalid length. [ 715.658224][T14674] dvmrp12: entered allmulticast mode [ 715.664988][T14677] netlink: 'syz.2.2334': attribute type 29 has an invalid length. [ 715.676441][T14673] dvmrp12: left allmulticast mode [ 715.806827][T14695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2337'. [ 715.828411][T14696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.858179][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2337'. [ 715.918688][T14667] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2328'. [ 716.095945][T14706] lo speed is unknown, defaulting to 1000 [ 716.103742][T14706] lo speed is unknown, defaulting to 1000 [ 716.110906][T14706] lo speed is unknown, defaulting to 1000 [ 716.267281][T14719] xt_hashlimit: max too large, truncated to 1048576 [ 716.275497][T14719] xt_CT: You must specify a L4 protocol and not use inversions on it [ 716.413483][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 717.518270][T14749] lo speed is unknown, defaulting to 1000 [ 717.525638][T14749] lo speed is unknown, defaulting to 1000 [ 717.529428][T14752] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 717.533418][T14749] lo speed is unknown, defaulting to 1000 [ 717.628709][T14748] lo speed is unknown, defaulting to 1000 [ 717.676935][T14748] lo speed is unknown, defaulting to 1000 [ 717.707135][T14754] netlink: 'syz.3.2355': attribute type 8 has an invalid length. [ 717.716428][T14760] lo speed is unknown, defaulting to 1000 [ 717.722999][T14754] netlink: 'syz.3.2355': attribute type 4 has an invalid length. [ 717.747298][T14760] lo speed is unknown, defaulting to 1000 [ 717.866424][T14777] __nla_validate_parse: 2 callbacks suppressed [ 717.866441][T14777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2362'. [ 717.953217][T14779] unsupported nlmsg_type 40 [ 717.976580][T14781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2363'. [ 718.071623][T14788] lo speed is unknown, defaulting to 1000 [ 718.136747][T14760] lo speed is unknown, defaulting to 1000 [ 718.136759][T14788] lo speed is unknown, defaulting to 1000 [ 718.536617][T14807] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2369'. [ 718.563842][T14748] lo speed is unknown, defaulting to 1000 [ 718.744350][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2370'. [ 719.130684][T14788] lo speed is unknown, defaulting to 1000 [ 719.137659][T14819] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 719.499141][T14795] lo speed is unknown, defaulting to 1000 [ 719.546910][T14795] lo speed is unknown, defaulting to 1000 [ 719.646405][T14795] lo speed is unknown, defaulting to 1000 [ 719.664821][T14838] netlink: 'syz.4.2378': attribute type 3 has an invalid length. [ 719.733723][T14838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2378'. [ 720.019269][T14849] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2381'. [ 720.213794][T14842] lo speed is unknown, defaulting to 1000 [ 720.250607][T14842] lo speed is unknown, defaulting to 1000 [ 720.338046][T14852] pim6reg1: entered promiscuous mode [ 720.343794][T14852] pim6reg1: entered allmulticast mode [ 720.463611][T14842] lo speed is unknown, defaulting to 1000 [ 720.732494][T14864] netlink: 'syz.4.2385': attribute type 1 has an invalid length. [ 720.784137][T14864] bond8: entered promiscuous mode [ 720.789743][T14864] 8021q: adding VLAN 0 to HW filter on device bond8 [ 721.237102][T14864] bond8: (slave bridge4): making interface the new active one [ 721.247037][T14864] bridge4: entered promiscuous mode [ 721.254867][T14864] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 721.438864][T14870] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2387'. [ 721.476834][T14870] 8021q: VLANs not supported on ip_vti0 [ 722.419397][T14904] sctp: [Deprecated]: syz.2.2397 (pid 14904) Use of int in maxseg socket option. [ 722.419397][T14904] Use struct sctp_assoc_value instead [ 722.543042][T14918] openvswitch: netlink: IP tunnel dst address not specified [ 722.941192][T14923] lo speed is unknown, defaulting to 1000 [ 723.017702][T14923] lo speed is unknown, defaulting to 1000 [ 723.120159][T14923] lo speed is unknown, defaulting to 1000 [ 724.247618][T14942] ip6gretap0: entered allmulticast mode [ 725.277419][T14958] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 726.162286][T14965] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2414'. [ 726.281057][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2414'. [ 727.149657][T14965] lo speed is unknown, defaulting to 1000 [ 727.165009][T14965] lo speed is unknown, defaulting to 1000 [ 727.181480][T14965] lo speed is unknown, defaulting to 1000 [ 728.161228][T14977] netlink: 'syz.4.2417': attribute type 12 has an invalid length. [ 729.176410][T14983] netlink: 'syz.4.2419': attribute type 39 has an invalid length. [ 730.283230][T14980] tipc: Enabling of bearer rejected, failed to enable media [ 732.414758][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 733.226337][T14999] lo speed is unknown, defaulting to 1000 [ 733.252476][T14999] lo speed is unknown, defaulting to 1000 [ 733.290352][T14999] lo speed is unknown, defaulting to 1000 [ 733.405825][T15012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2429'. [ 733.607951][T15014] tipc: Enabled bearer , priority 0 [ 733.641117][T15014] syzkaller0: entered promiscuous mode [ 733.653644][T15014] syzkaller0: entered allmulticast mode [ 733.680830][T15006] netlink: 'syz.1.2427': attribute type 11 has an invalid length. [ 733.700176][T15006] netlink: 'syz.1.2427': attribute type 11 has an invalid length. [ 733.712102][T15014] tipc: Resetting bearer [ 733.735303][T15006] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2427'. [ 733.796864][T15005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.837740][T15025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2433'. [ 733.856846][T15013] tipc: Resetting bearer [ 733.899699][T15013] tipc: Disabling bearer [ 733.971097][T15029] lo speed is unknown, defaulting to 1000 [ 733.986276][T15032] netem: change failed [ 734.059523][T15029] lo speed is unknown, defaulting to 1000 [ 734.120683][T15029] lo speed is unknown, defaulting to 1000 [ 734.317430][T15047] tipc: Enabling of bearer rejected, failed to enable media [ 734.579879][T15062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'. [ 734.598604][T15062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'. [ 734.620145][T15057] lo speed is unknown, defaulting to 1000 [ 734.620251][T15062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'. [ 734.642474][T15062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'. [ 734.660652][T15069] tipc: Enabled bearer , priority 0 [ 734.668270][T15062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'. [ 734.680019][T15057] lo speed is unknown, defaulting to 1000 [ 734.681930][T15067] syzkaller0: entered promiscuous mode [ 734.691986][T15067] syzkaller0: entered allmulticast mode [ 734.708540][T15057] lo speed is unknown, defaulting to 1000 [ 734.725481][T15066] tipc: Resetting bearer [ 734.779412][T15066] tipc: Disabling bearer [ 734.851397][T15073] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2446'. [ 734.924059][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2446'. [ 735.760436][T15106] netlink: 'syz.0.2455': attribute type 4 has an invalid length. [ 735.823711][ T5894] lo speed is unknown, defaulting to 1000 [ 735.844507][ T5894] syz2: Port: 1 Link DOWN [ 735.937913][T15109] wg1 speed is unknown, defaulting to 1000 [ 735.948300][T15109] wg1 speed is unknown, defaulting to 1000 [ 735.966278][T15109] wg1 speed is unknown, defaulting to 1000 [ 736.018912][T15109] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 736.056763][T15109] wg1 speed is unknown, defaulting to 1000 [ 736.067134][T15109] wg1 speed is unknown, defaulting to 1000 [ 736.079644][T15109] wg1 speed is unknown, defaulting to 1000 [ 736.088045][T15109] wg1 speed is unknown, defaulting to 1000 [ 736.096319][T15109] wg1 speed is unknown, defaulting to 1000 [ 736.198526][T15118] netlink: 'syz.4.2459': attribute type 2 has an invalid length. [ 736.216814][T15118] hmac(sha224: entered promiscuous mode [ 736.412310][T15129] bond9: option arp_validate: invalid value (18446744073491447809) [ 736.424609][T15129] bond9 (unregistering): Released all slaves [ 736.466647][T15126] xt_CT: You must specify a L4 protocol and not use inversions on it [ 736.687564][T15148] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.698216][T15148] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 736.708519][T15148] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 736.829236][T15148] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.851221][T15148] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 736.861183][T15148] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 736.879953][T15157] netlink: 'syz.2.2471': attribute type 3 has an invalid length. [ 736.924169][T15148] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.945750][T15148] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 736.976078][T15148] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 737.034959][T15155] lo speed is unknown, defaulting to 1000 [ 737.042377][T15155] lo speed is unknown, defaulting to 1000 [ 737.062857][T15163] xt_CT: No such helper "netbios-ns" [ 737.063548][T15168] smc: net device hsr0 applied user defined pnetid SYZ2 [ 737.082978][T15148] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.099134][T15173] smc: net device hsr0 erased user defined pnetid SYZ2 [ 737.107909][T15148] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 737.125587][T15148] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 737.144330][T15168] team0: No ports can be present during mode change [ 737.153711][T15155] lo speed is unknown, defaulting to 1000 [ 737.167855][T15170] lo speed is unknown, defaulting to 1000 [ 737.210894][T15170] lo speed is unknown, defaulting to 1000 [ 737.283126][T14462] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.292691][T14462] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 737.346334][T14462] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 737.408464][T14462] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.421561][T14462] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 737.459006][T14462] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 737.512275][T14462] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.524573][T14462] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 737.533123][T14462] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 737.628352][ T1940] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.637537][ T1940] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 737.648265][T15189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.658400][ T1940] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 737.667642][T15155] wg1 speed is unknown, defaulting to 1000 [ 737.683745][T15170] lo speed is unknown, defaulting to 1000 [ 737.820552][T15197] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 738.039483][T15170] wg1 speed is unknown, defaulting to 1000 [ 738.303014][T15216] netlink: 'syz.0.2486': attribute type 1 has an invalid length. [ 738.311897][T15216] netlink: 'syz.0.2486': attribute type 3 has an invalid length. [ 738.320802][T15216] netlink: 'syz.0.2486': attribute type 2 has an invalid length. [ 738.329452][T15216] netlink: 'syz.0.2486': attribute type 3 has an invalid length. [ 738.579106][T15226] __nla_validate_parse: 10 callbacks suppressed [ 738.579123][T15226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2488'. [ 738.677361][T15229] lo speed is unknown, defaulting to 1000 [ 738.708146][T15229] lo speed is unknown, defaulting to 1000 [ 738.808006][T15231] lo speed is unknown, defaulting to 1000 [ 738.815412][T15233] ip6erspan1: entered promiscuous mode [ 738.822140][T15231] lo speed is unknown, defaulting to 1000 [ 738.822762][T15229] lo speed is unknown, defaulting to 1000 [ 738.902703][T15236] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2491'. [ 738.927559][T15236] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2491'. [ 738.937287][T15236] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2491'. [ 739.184465][T15231] lo speed is unknown, defaulting to 1000 [ 739.184626][T15229] wg1 speed is unknown, defaulting to 1000 [ 739.227075][T15251] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2495'. [ 739.243869][T15254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.602377][T15265] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 739.629983][T15231] wg1 speed is unknown, defaulting to 1000 [ 739.670136][T15267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2500'. [ 739.839645][T15270] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2501'. [ 739.848916][T15270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2501'. [ 739.871947][T15270] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2501'. [ 740.485176][T15298] netlink: 'syz.0.2508': attribute type 2 has an invalid length. [ 740.493103][T15297] netlink: 'syz.0.2508': attribute type 2 has an invalid length. [ 740.694904][T15308] tipc: Enabled bearer , priority 10 [ 740.766072][T15316] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2515'. [ 740.975251][T15321] lo speed is unknown, defaulting to 1000 [ 740.981968][T15321] lo speed is unknown, defaulting to 1000 [ 740.989892][T15321] lo speed is unknown, defaulting to 1000 [ 741.100395][T15321] wg1 speed is unknown, defaulting to 1000 [ 747.136146][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 747.145146][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 765.053504][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 808.576489][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 808.585382][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 812.028654][T15329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2518'. [ 812.210863][T15343] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 812.227220][T15343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2518'. [ 812.910918][T15340] lo speed is unknown, defaulting to 1000 [ 812.922605][T15340] lo speed is unknown, defaulting to 1000 [ 812.934953][T15340] lo speed is unknown, defaulting to 1000 [ 813.055237][T15358] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2527'. [ 813.149796][T15363] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2528'. [ 813.325171][T15372] lo speed is unknown, defaulting to 1000 [ 813.329520][T15340] wg1 speed is unknown, defaulting to 1000 [ 813.332770][T15372] lo speed is unknown, defaulting to 1000 [ 813.358991][T15372] lo speed is unknown, defaulting to 1000 [ 813.654147][T15372] wg1 speed is unknown, defaulting to 1000 [ 814.167712][T15385] netlink: 'syz.4.2533': attribute type 26 has an invalid length. [ 814.495258][T15407] netlink: 'syz.0.2539': attribute type 13 has an invalid length. [ 814.712046][T15409] netlink: 'syz.1.2540': attribute type 8 has an invalid length. [ 814.863719][T15412] netlink: 'syz.4.2542': attribute type 1 has an invalid length. [ 814.871478][T15412] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2542'. [ 815.051263][T15428] lo speed is unknown, defaulting to 1000 [ 815.086183][T15428] lo speed is unknown, defaulting to 1000 [ 815.107271][T15428] lo speed is unknown, defaulting to 1000 [ 815.135750][T15436] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 815.212271][T15443] netlink: 'syz.3.2547': attribute type 4 has an invalid length. [ 815.225060][T15436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2548'. [ 815.257431][T15443] syzkaller0: entered promiscuous mode [ 815.263032][T15443] syzkaller0: entered allmulticast mode [ 815.275133][ T30] audit: type=1107 audit(1768600621.592:8): pid=15432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ąË˛ő!őCŽń@˛Tß…Q{˙ż’ťb(7ĺţÎŔĹ#Ťp=ŰP‘‡¶Ô=‡O±é‘_Í–ç’ź®ŚíLâÔ=8‹˛#ĚŤ_]Áľčmî÷U^HËĘv·áă—ď¸éŕ¸1Iă&GÝY¨±:J›)%!Íf%¶-şTĂfTňŹC.‰1 ×OI6 "A§HëU?-ZöńńÝ%SŹÖqć…·fQ˛Ň÷oĽ –¤ßĘűÖ$"bŹ€Ušd4mžW–ŔĄĽf¬EMzűç˙;±Ă ' [ 815.388899][T15453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2552'. [ 815.408188][T15453] gretap0: entered promiscuous mode [ 815.478571][T15458] tipc: Enabling of bearer rejected, failed to enable media [ 815.552441][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2553'. [ 815.577457][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2553'. [ 815.606643][T15428] wg1 speed is unknown, defaulting to 1000 [ 816.227409][T15495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2565'. [ 816.544435][T15514] netlink: 'syz.3.2573': attribute type 1 has an invalid length. [ 816.983700][T15551] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 817.039035][T15551] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 817.114683][T15559] syzkaller0: entered promiscuous mode [ 817.130997][T15559] syzkaller0: entered allmulticast mode [ 817.202721][T15568] __nla_validate_parse: 5 callbacks suppressed [ 817.202734][T15568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2587'. [ 817.598342][T15537] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 817.790080][T15580] netlink: 'syz.1.2588': attribute type 21 has an invalid length. [ 817.844455][T15583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2589'. [ 817.922080][T15584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2589'. [ 819.194327][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2596'. [ 819.239569][T15619] IPVS: length: 35 != 1272 [ 819.489003][T15597] lo speed is unknown, defaulting to 1000 [ 819.496881][T15597] lo speed is unknown, defaulting to 1000 [ 819.504949][T15597] lo speed is unknown, defaulting to 1000 [ 819.933489][T15644] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2603'. [ 820.064561][T15597] wg1 speed is unknown, defaulting to 1000 [ 820.466717][T15655] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2607'. [ 820.779627][T15659] netlink: 'syz.2.2609': attribute type 29 has an invalid length. [ 820.816291][T15659] netlink: 'syz.2.2609': attribute type 29 has an invalid length. [ 820.834308][T15659] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2609'. [ 821.040323][T15680] tipc: Enabling of bearer rejected, already enabled [ 821.042109][T15684] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2619'. [ 821.075780][T15685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2617'. [ 821.095358][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2617'. [ 821.104866][T15685] netlink: 'syz.3.2617': attribute type 12 has an invalid length. [ 821.225052][T15689] syzkaller1: entered promiscuous mode [ 821.230556][T15689] syzkaller1: entered allmulticast mode [ 821.459244][T15705] x_tables: duplicate underflow at hook 1 [ 821.766046][T15712] netlink: 'syz.4.2627': attribute type 2 has an invalid length. [ 822.072897][T15731] bond8: option arp_validate: invalid value (18446744073491447809) [ 822.083107][T15731] bond8 (unregistering): Released all slaves [ 822.580593][T15756] __nla_validate_parse: 1 callbacks suppressed [ 822.580610][T15756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'. [ 822.680477][T15758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'. [ 822.880098][T15767] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 822.886528][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2645'. [ 822.888410][T15767] batadv_slave_0: entered promiscuous mode [ 822.904438][T15767] debugfs: 'hsr0' already exists in 'hsr' [ 822.910184][T15767] Cannot create hsr debugfs directory [ 822.916157][T15767] hsr0: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network [ 822.928043][T15767] hsr0: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 822.940278][T15767] hsr0: entered promiscuous mode [ 822.985781][T15772] macvtap1: entered promiscuous mode [ 822.991148][T15772] macvtap1: entered allmulticast mode [ 823.034183][T15774] lo speed is unknown, defaulting to 1000 [ 823.040880][T15774] lo speed is unknown, defaulting to 1000 [ 823.057416][T15774] lo speed is unknown, defaulting to 1000 [ 823.155275][T15778] x_tables: duplicate underflow at hook 1 [ 823.344876][T15774] wg1 speed is unknown, defaulting to 1000 [ 823.569210][T15798] tipc: Enabled bearer , priority 10 [ 823.571309][T15804] netlink: 'syz.3.2654': attribute type 1 has an invalid length. [ 823.595610][T15804] netlink: 'syz.3.2654': attribute type 2 has an invalid length. [ 823.634007][T15804] netlink: 'syz.3.2654': attribute type 1 has an invalid length. [ 823.641779][T15804] netlink: 'syz.3.2654': attribute type 3 has an invalid length. [ 823.711635][T15804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2654'. [ 823.944786][T15822] pim6reg1: entered promiscuous mode [ 823.959632][T15822] pim6reg1: entered allmulticast mode [ 824.490400][T15852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2663'. [ 824.514832][T15852] netlink: 'syz.3.2663': attribute type 1 has an invalid length. [ 824.522593][T15852] netlink: 'syz.3.2663': attribute type 2 has an invalid length. [ 825.282626][T15890] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2673'. [ 825.302103][T15890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2673'. [ 825.417337][T15894] lo speed is unknown, defaulting to 1000 [ 825.428222][T15894] lo speed is unknown, defaulting to 1000 [ 825.435097][T15896] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2675'. [ 825.435779][T15894] lo speed is unknown, defaulting to 1000 [ 825.886514][T15929] bond8: (slave veth9): Enslaving as an active interface with a down link [ 825.922246][T15894] wg1 speed is unknown, defaulting to 1000 [ 825.980652][T15924] bond8: (slave ip6gretap4): making interface the new active one [ 825.989594][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2681'. [ 825.999860][T15924] bond8: (slave ip6gretap4): Enslaving as an active interface with an up link [ 826.009425][T15935] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2681'. [ 826.312288][T15951] netlink: 'syz.3.2686': attribute type 1 has an invalid length. [ 826.332167][T15954] bond10: (slave syz_tun): Releasing active interface [ 826.377134][T15954] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 826.679371][T15964] lo speed is unknown, defaulting to 1000 [ 826.810506][T15964] lo speed is unknown, defaulting to 1000 [ 826.889828][T15964] lo speed is unknown, defaulting to 1000 [ 826.896379][T15981] netlink: 'syz.1.2693': attribute type 23 has an invalid length. [ 826.911472][T15981] netlink: 'syz.1.2693': attribute type 2 has an invalid length. [ 826.956036][T15981] : entered promiscuous mode [ 827.248109][T15964] wg1 speed is unknown, defaulting to 1000 [ 827.696827][T16013] __nla_validate_parse: 2 callbacks suppressed [ 827.696844][T16013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2701'. [ 827.800091][T16022] tipc: Enabling of bearer rejected, already enabled [ 827.851499][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2704'. [ 828.257281][T16045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2711'. [ 828.271709][T16035] delete_channel: no stack [ 828.507788][T16060] netlink: 'syz.1.2715': attribute type 3 has an invalid length. [ 828.548402][T16060] netlink: 'syz.1.2715': attribute type 1 has an invalid length. [ 828.580710][T16067] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 828.582751][T16060] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2715'. [ 828.605477][T16067] x_tables: duplicate underflow at hook 2 [ 828.804247][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2715'. [ 828.841219][T16079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2719'. [ 828.850641][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2715'. [ 829.053571][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 829.180420][T16094] bond3: (slave lo): Releasing backup interface [ 829.189578][T16094] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 829.228004][T16094] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 829.669349][T16113] lo speed is unknown, defaulting to 1000 [ 829.687150][T16113] lo speed is unknown, defaulting to 1000 [ 829.724739][T16113] lo speed is unknown, defaulting to 1000 [ 829.869952][T16120] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2728'. [ 830.234840][T16113] wg1 speed is unknown, defaulting to 1000 [ 830.746780][T16156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2735'. [ 830.758044][T16154] vlan0: entered allmulticast mode [ 830.781290][T16154] bridge_slave_0: entered allmulticast mode [ 830.798074][T16154] bridge0: port 1(vlan0) entered blocking state [ 830.804679][T16154] bridge0: port 1(vlan0) entered disabled state [ 830.812994][T16154] vlan0: entered promiscuous mode [ 830.818279][T16154] bridge_slave_0: entered promiscuous mode [ 831.009034][T16166] netlink: 'syz.3.2737': attribute type 2 has an invalid length. [ 831.185013][T16175] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 831.198972][T16177] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 831.692047][T16194] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2744'. [ 832.346313][T16204] lo speed is unknown, defaulting to 1000 [ 832.385648][T16204] lo speed is unknown, defaulting to 1000 [ 832.434099][T16204] lo speed is unknown, defaulting to 1000 [ 832.744668][T16211] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 832.863392][T16211] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.010088][T16211] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.092106][T16211] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.183054][ T139] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.213948][T16204] wg1 speed is unknown, defaulting to 1000 [ 833.226045][ T139] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.258734][ T139] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.310585][ T139] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.759864][T16220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2749'. [ 833.803979][T16220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2749'. [ 833.860684][T16221] openvswitch: netlink: Flow key attr not present in new flow. [ 834.039138][T16226] netlink: 'syz.0.2752': attribute type 15 has an invalid length. [ 834.455803][T16238] batadv0: entered promiscuous mode [ 834.477583][T16238] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 834.571347][T16240] bridge5: entered promiscuous mode [ 834.841915][T16245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 834.860819][T16242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2758'. [ 835.056912][T16254] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2762'. [ 835.202188][T16260] netlink: 'syz.4.2764': attribute type 5 has an invalid length. [ 835.416991][T16269] tipc: Enabled bearer , priority 0 [ 835.437997][T16269] netlink: 'syz.3.2768': attribute type 3 has an invalid length. [ 835.475003][T16269] syzkaller0: entered promiscuous mode [ 835.494322][T16269] syzkaller0: entered allmulticast mode [ 835.563745][T16268] tipc: Resetting bearer [ 835.630215][T10489] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 835.639899][T10489] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 835.647865][T10489] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 835.658119][T10489] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 835.665805][T10489] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 835.679366][T16268] tipc: Disabling bearer [ 835.690284][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 835.698624][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 835.706778][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 835.715606][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 835.726848][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 835.768815][T16272] lo speed is unknown, defaulting to 1000 [ 835.778871][T16272] lo speed is unknown, defaulting to 1000 [ 835.786520][T16272] lo speed is unknown, defaulting to 1000 [ 836.170104][T16272] wg1 speed is unknown, defaulting to 1000 [ 836.194473][T16285] netlink: 'syz.3.2772': attribute type 1 has an invalid length. [ 836.337744][T16285] 8021q: adding VLAN 0 to HW filter on device bond5 [ 836.342017][T16292] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2774'. [ 836.387328][T16287] bond5: (slave gretap2): making interface the new active one [ 836.413383][T16287] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 836.644189][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2778'. [ 836.684344][T16311] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2780'. [ 836.696107][T16311] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2780'. [ 837.479388][T16272] chnl_net:caif_netlink_parms(): no params data found [ 837.480136][T16323] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2783'. [ 837.773455][ T5842] Bluetooth: hci5: command tx timeout [ 837.824418][T16272] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.831941][T16272] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.840220][T16272] bridge_slave_0: entered allmulticast mode [ 837.848755][T16272] bridge_slave_0: entered promiscuous mode [ 837.858927][T16272] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.866322][T16272] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.874302][T16272] bridge_slave_1: entered allmulticast mode [ 837.882289][T16272] bridge_slave_1: entered promiscuous mode [ 837.960954][T16272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.968093][T16348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2788'. [ 838.001642][T16272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.116444][T16272] team0: Port device team_slave_0 added [ 838.127334][T16272] team0: Port device team_slave_1 added [ 838.280199][T16272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.298365][T16272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.347977][T16272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.372683][T16272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.380760][T16272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 838.408102][T16272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.425685][T16360] lo speed is unknown, defaulting to 1000 [ 838.462908][T16373] syzkaller0: entered promiscuous mode [ 838.469489][T16373] syzkaller0: entered allmulticast mode [ 838.488733][T16368] netlink: 'syz.2.2796': attribute type 41 has an invalid length. [ 838.498353][T16368] tipc: Enabling of bearer rejected, already enabled [ 838.503699][T16360] lo speed is unknown, defaulting to 1000 [ 839.864140][ T5842] Bluetooth: hci5: command tx timeout [ 840.016075][T16360] lo speed is unknown, defaulting to 1000 [ 840.049911][T16272] hsr_slave_0: entered promiscuous mode [ 840.073742][T16272] hsr_slave_1: entered promiscuous mode [ 840.084877][T16272] debugfs: 'hsr0' already exists in 'hsr' [ 840.090696][T16272] Cannot create hsr debugfs directory [ 840.337761][T16405] __nla_validate_parse: 1 callbacks suppressed [ 840.337779][T16405] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2805'. [ 840.471660][T16360] wg1 speed is unknown, defaulting to 1000 [ 840.577609][T16272] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.629506][T16418] netlink: 'syz.2.2809': attribute type 6 has an invalid length. [ 840.637453][T16418] netlink: 'syz.2.2809': attribute type 7 has an invalid length. [ 840.655021][T16418] netlink: 'syz.2.2809': attribute type 8 has an invalid length. [ 840.678067][T16272] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.841133][T16435] netlink: 'syz.0.2814': attribute type 1 has an invalid length. [ 840.849002][T16435] netlink: 'syz.0.2814': attribute type 2 has an invalid length. [ 840.859979][T16435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2814'. [ 840.872322][T16272] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.988910][T16272] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 841.292964][T16446] lo speed is unknown, defaulting to 1000 [ 841.303235][T16446] lo speed is unknown, defaulting to 1000 [ 841.361929][T16446] lo speed is unknown, defaulting to 1000 [ 841.446259][T16272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 841.499863][T16272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 841.540741][T16272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 841.594601][T16272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 841.607698][T16446] wg1 speed is unknown, defaulting to 1000 [ 841.748336][T16460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2819'. [ 841.866382][T16469] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2821'. [ 841.938203][ T5842] Bluetooth: hci5: command tx timeout [ 842.120861][T16272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.360840][T16272] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.899720][T16500] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.955125][T16500] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 842.972525][T16500] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 843.009392][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.016575][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.051541][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.058691][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.141772][T16500] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.179927][T16500] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 843.190823][T16500] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 843.305552][T16500] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.359477][T16500] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 843.384375][T16500] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 843.467618][T16500] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 843.491732][T16500] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 843.513476][T16500] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 843.595198][ T1940] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.603944][ T1940] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 843.612286][ T1940] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 843.631619][ T1940] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.640139][ T1940] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 843.648957][ T1940] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 843.667673][ T1940] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.676468][ T1940] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 843.686065][ T1940] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 843.707719][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.716207][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 843.724706][ T36] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 843.753704][T16272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.817835][T16272] veth0_vlan: entered promiscuous mode [ 843.834907][T16272] veth1_vlan: entered promiscuous mode [ 843.861849][T16272] veth0_macvtap: entered promiscuous mode [ 843.877585][T16272] veth1_macvtap: entered promiscuous mode [ 843.899520][T16272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.917068][T16272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.944079][ T6185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.954074][ T6185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.968980][ T6185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.979717][ T6185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.023825][ T5842] Bluetooth: hci5: command tx timeout [ 844.177354][T16516] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 844.272569][T13671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.281221][T13671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.344542][ T7628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.354360][T16549] netlink: 'syz.3.2841': attribute type 1 has an invalid length. [ 844.362128][ T7628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.387262][T16555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2840'. [ 844.419885][T16547] lo speed is unknown, defaulting to 1000 [ 844.550795][T16547] lo speed is unknown, defaulting to 1000 [ 844.605401][T16547] lo speed is unknown, defaulting to 1000 [ 844.860860][T16547] wg1 speed is unknown, defaulting to 1000 [ 844.918493][T16579] netlink: 'syz.0.2844': attribute type 2 has an invalid length. [ 845.020631][T16585] ˙˙˙˙˙˙: renamed from vlan0 (while UP) [ 845.153013][T16577] lo speed is unknown, defaulting to 1000 [ 845.389846][T16577] lo speed is unknown, defaulting to 1000 [ 845.430359][T16597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2849'. [ 845.525909][T16577] lo speed is unknown, defaulting to 1000 [ 845.533021][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'. [ 845.700083][T16596] lo speed is unknown, defaulting to 1000 [ 845.776126][T16596] lo speed is unknown, defaulting to 1000 [ 845.776154][T16599] lo speed is unknown, defaulting to 1000 [ 845.807615][T16599] lo speed is unknown, defaulting to 1000 [ 845.826711][T16593] lo speed is unknown, defaulting to 1000 [ 845.837583][T16593] lo speed is unknown, defaulting to 1000 [ 845.939578][T16596] lo speed is unknown, defaulting to 1000 [ 845.979700][T16577] wg1 speed is unknown, defaulting to 1000 [ 846.260687][T16599] lo speed is unknown, defaulting to 1000 [ 846.266819][T16596] wg1 speed is unknown, defaulting to 1000 [ 846.574316][T16629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2858'. [ 846.587374][T16629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2858'. [ 846.598731][T16593] lo speed is unknown, defaulting to 1000 [ 846.698367][T16635] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2860'. [ 846.784540][T16593] wg1 speed is unknown, defaulting to 1000 [ 846.794249][T16599] wg1 speed is unknown, defaulting to 1000 [ 846.800729][T16637] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2861'. [ 847.574780][T16654] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 847.625387][T16657] syzkaller0: entered promiscuous mode [ 847.641181][T16657] syzkaller0: entered allmulticast mode [ 847.706051][T16656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2867'. [ 847.986571][T16668] netlink: 'syz.4.2871': attribute type 7 has an invalid length. [ 848.092513][T16670] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2872'. [ 848.513077][T16714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2884'. [ 848.541605][T16714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2884'. [ 848.615528][T16717] netlink: 'syz.2.2885': attribute type 8 has an invalid length. [ 848.775404][T16721] lo speed is unknown, defaulting to 1000 [ 848.809251][T16721] lo speed is unknown, defaulting to 1000 [ 848.839485][T16721] lo speed is unknown, defaulting to 1000 [ 849.099677][T16721] wg1 speed is unknown, defaulting to 1000 [ 849.280355][T16752] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 850.292032][T16793] lo speed is unknown, defaulting to 1000 [ 850.340016][T16793] lo speed is unknown, defaulting to 1000 [ 850.404332][T16793] lo speed is unknown, defaulting to 1000 [ 850.437636][T16802] netlink: 'syz.0.2909': attribute type 7 has an invalid length. [ 850.660683][T16814] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 850.749379][T16816] IPv6: addrconf: prefix option has invalid lifetime [ 850.826107][T16793] wg1 speed is unknown, defaulting to 1000 [ 850.838731][T16821] __nla_validate_parse: 11 callbacks suppressed [ 850.838751][T16821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2914'. [ 850.938588][T16821] wg1: entered promiscuous mode [ 850.953475][T16821] wg1: entered allmulticast mode [ 851.010166][T16830] veth0: entered promiscuous mode [ 851.090843][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'. [ 851.120536][T16832] veth0: left promiscuous mode [ 851.130135][T16838] : renamed from bond0 (while UP) [ 851.468196][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2928'. [ 851.650651][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2932'. [ 851.742898][T16875] lo speed is unknown, defaulting to 1000 [ 851.750546][T16875] lo speed is unknown, defaulting to 1000 [ 851.761218][T16875] lo speed is unknown, defaulting to 1000 [ 851.877674][T16887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2936'. [ 851.965473][T16875] wg1 speed is unknown, defaulting to 1000 [ 852.109356][T16893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2937'. [ 852.120649][T16893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2937'. [ 852.561236][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'. [ 852.597038][T16915] lo speed is unknown, defaulting to 1000 [ 852.615185][T16915] lo speed is unknown, defaulting to 1000 [ 852.635884][T16915] lo speed is unknown, defaulting to 1000 [ 852.874011][T16934] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2949'. [ 853.120756][T10489] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 853.131544][T10489] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 853.139796][T10489] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 853.147994][T10489] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 853.155857][T10489] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 853.200326][T16944] lo speed is unknown, defaulting to 1000 [ 853.207893][T16944] lo speed is unknown, defaulting to 1000 [ 853.330415][T16915] wg1 speed is unknown, defaulting to 1000 [ 853.356541][T16944] lo speed is unknown, defaulting to 1000 [ 853.869097][ T36] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 853.888321][ T36] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 853.902181][ T36] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 853.924048][T16944] wg1 speed is unknown, defaulting to 1000 [ 854.031428][T16965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2954'. [ 854.054516][ T36] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.088541][ T36] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 854.104059][ T36] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 854.169789][ T36] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.186713][ T36] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 854.201954][ T36] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 854.228293][T16975] bond0: (slave sit0): Error: Device type is different from other slaves [ 854.261150][ T36] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.272521][ T36] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 854.283594][ T36] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 854.331317][T16972] netlink: zone id is out of range [ 854.338881][T16972] netlink: zone id is out of range [ 854.551628][ T6186] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.635030][ T6186] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.679860][T16994] batadv1: entered promiscuous mode [ 854.737070][ T999] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.755026][T16944] chnl_net:caif_netlink_parms(): no params data found [ 854.830161][ T999] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.215530][T10489] Bluetooth: hci2: command tx timeout [ 855.448585][ T36] bond1 (unregistering): (slave geneve2): Releasing active interface [ 855.674149][ T36] bond8 (unregistering): (slave bridge4): Releasing backup interface [ 855.682366][ T36] bridge4 (unregistering): left promiscuous mode [ 855.892131][ T36] bond1 (unregistering): Released all slaves [ 855.906181][ T36] bond2 (unregistering): Released all slaves [ 855.918303][ T36] bond3 (unregistering): Released all slaves [ 856.025146][ T36] bond4 (unregistering): Released all slaves [ 856.116269][ T36] bond5 (unregistering): (slave veth3): Releasing backup interface [ 856.126293][ T36] bond5 (unregistering): Released all slaves [ 856.221244][ T36] bond6 (unregistering): Released all slaves [ 856.321438][ T36] bond7 (unregistering): (slave batadv1): Releasing active interface [ 856.331609][ T36] bond7 (unregistering): Released all slaves [ 856.428184][ T36] bond0 (unregistering): Released all slaves [ 856.520973][ T36] bond8 (unregistering): Released all slaves [ 856.685986][T17028] __nla_validate_parse: 6 callbacks suppressed [ 856.686003][T17028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2971'. [ 856.717343][ T36] hmac(sha224: left promiscuous mode [ 856.751148][T17032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2972'. [ 856.812755][T16944] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.829173][T16944] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.838588][T16944] bridge_slave_0: entered allmulticast mode [ 856.848253][T16944] bridge_slave_0: entered promiscuous mode [ 856.858771][ T36] tipc: Left network mode [ 856.866187][T16944] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.873717][T16944] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.881859][T16944] bridge_slave_1: entered allmulticast mode [ 856.899042][T16944] bridge_slave_1: entered promiscuous mode [ 856.964276][T17038] netlink: 'syz.3.2973': attribute type 1 has an invalid length. [ 856.983684][T17038] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2973'. [ 857.017225][ T36] IPVS: stopping backup sync thread 16752 ... [ 857.057619][T17045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2974'. [ 857.087363][T16944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.096591][T17045] openvswitch: netlink: Flow actions attr not present in new flow. [ 857.221282][T16944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.293593][T10489] Bluetooth: hci2: command tx timeout [ 857.409173][T17064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2983'. [ 857.640001][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2985'. [ 857.655388][T17077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2985'. [ 857.853228][T16944] team0: Port device team_slave_0 added [ 857.863882][T17085] netlink: 'syz.1.2988': attribute type 4 has an invalid length. [ 857.866324][T16944] team0: Port device team_slave_1 added [ 857.871799][T17085] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2988'. [ 857.923674][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2988'. [ 857.966043][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2988'. [ 857.986255][T16944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.993225][T16944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.037105][T16944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.086793][T16944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.109578][T16944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.176703][T16944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.216650][T17093] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 858.480472][ T36] hsr_slave_0: left promiscuous mode [ 858.505405][ T36] batman_adv: batadv0: Removing interface: vlan0 [ 858.553220][ T36] veth1_macvtap: left promiscuous mode [ 858.560362][ T36] veth0_macvtap: left promiscuous mode [ 858.569661][ T36] veth1_vlan: left promiscuous mode [ 858.602591][T17116] "syz.1.2994" (17116) uses obsolete ecb(arc4) skcipher [ 858.619233][ T36] veth0_vlan: left promiscuous mode [ 858.808910][ T36] pimreg (unregistering): left allmulticast mode [ 859.374638][T10489] Bluetooth: hci2: command tx timeout [ 859.697261][T16944] hsr_slave_0: entered promiscuous mode [ 859.717253][T16944] hsr_slave_1: entered promiscuous mode [ 859.732338][T16944] debugfs: 'hsr0' already exists in 'hsr' [ 859.753856][T16944] Cannot create hsr debugfs directory [ 860.061858][T17162] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 860.097110][ T36] IPVS: stop unused estimator thread 0... [ 860.113235][T17162] vlan0: entered promiscuous mode [ 860.119038][T17162] vlan0: entered allmulticast mode [ 860.131354][T17162] hsr_slave_1: entered allmulticast mode [ 860.192281][T16944] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.345358][T17165] lo speed is unknown, defaulting to 1000 [ 860.354272][T16944] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.381883][T17165] lo speed is unknown, defaulting to 1000 [ 860.404393][T17165] lo speed is unknown, defaulting to 1000 [ 860.448906][T16944] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.508966][T17173] netlink: 'syz.2.3011': attribute type 4 has an invalid length. [ 860.547114][T16944] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.867919][T16944] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 861.046229][T16944] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 861.083759][T17165] wg1 speed is unknown, defaulting to 1000 [ 861.096449][T16944] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 861.154972][T16944] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 861.455149][T10489] Bluetooth: hci2: command tx timeout [ 861.501160][T16944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.551467][T16944] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.589421][T14462] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.596638][T14462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.847870][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.855090][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.011150][T17226] __nla_validate_parse: 13 callbacks suppressed [ 862.011167][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3025'. [ 862.217172][T17231] syzkaller0: entered promiscuous mode [ 862.222678][T17231] syzkaller0: entered allmulticast mode [ 862.283002][T17234] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3029'. [ 862.347675][T16944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.482637][T17244] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3032'. [ 862.496854][T17240] netlink: 'syz.0.3031': attribute type 3 has an invalid length. [ 862.515192][T17244] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 862.754116][T17261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3036'. [ 862.802883][T17264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 862.860346][T17259] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.3037'. [ 862.906382][T17271] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3040'. [ 862.951457][T17270] bond9: entered promiscuous mode [ 862.956878][T17270] bond9: entered allmulticast mode [ 862.962598][T17270] 8021q: adding VLAN 0 to HW filter on device bond9 [ 863.027772][T17274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3041'. [ 863.065226][T17276] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3043'. [ 863.269202][T16944] veth0_vlan: entered promiscuous mode [ 863.295118][T17293] lo speed is unknown, defaulting to 1000 [ 863.308241][T17293] lo speed is unknown, defaulting to 1000 [ 863.317161][T17293] lo speed is unknown, defaulting to 1000 [ 863.319071][T16944] veth1_vlan: entered promiscuous mode [ 863.390225][T16944] veth0_macvtap: entered promiscuous mode [ 863.411821][T17296] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 863.415679][T16944] veth1_macvtap: entered promiscuous mode [ 863.479504][T16944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.497788][T16944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.516248][T14462] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.549219][T14462] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.568825][T14462] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.595067][T14462] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.615563][T17303] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3050'. [ 863.784273][ T1940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.797588][ T1940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.849511][T17312] netlink: 'syz.1.3053': attribute type 1 has an invalid length. [ 863.881520][ T1940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.903790][ T1940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.927284][T17293] wg1 speed is unknown, defaulting to 1000 [ 864.229589][T17316] lo speed is unknown, defaulting to 1000 [ 864.372480][T17316] lo speed is unknown, defaulting to 1000 [ 864.392964][T17316] lo speed is unknown, defaulting to 1000 [ 864.499078][T17335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3059'. [ 864.526028][T17338] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 864.638324][T17316] wg1 speed is unknown, defaulting to 1000 [ 864.701062][T17341] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 865.676660][T16275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 865.688836][T16275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 865.698790][T16275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 865.709441][T16275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 865.718366][T16275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 865.769226][T17380] lo speed is unknown, defaulting to 1000 [ 865.779231][T17380] lo speed is unknown, defaulting to 1000 [ 865.787246][T17380] lo speed is unknown, defaulting to 1000 [ 866.058603][T17380] wg1 speed is unknown, defaulting to 1000 [ 866.253751][T10489] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 866.317830][T17380] chnl_net:caif_netlink_parms(): no params data found [ 866.497929][T17380] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.507497][T17380] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.533686][T17380] bridge_slave_0: entered allmulticast mode [ 866.543108][T17380] bridge_slave_0: entered promiscuous mode [ 866.585468][T17380] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.604530][T17380] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.611772][T17380] bridge_slave_1: entered allmulticast mode [ 866.636293][T17380] bridge_slave_1: entered promiscuous mode [ 866.888223][T17380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.918914][T17380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.035087][T17435] netlink: 'syz.4.3082': attribute type 1 has an invalid length. [ 867.092058][T17380] team0: Port device team_slave_0 added [ 867.104134][T17380] team0: Port device team_slave_1 added [ 867.226739][T17441] netlink: 'syz.1.3085': attribute type 10 has an invalid length. [ 867.238421][T17380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.246819][T17380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.274616][T17442] __nla_validate_parse: 10 callbacks suppressed [ 867.274636][T17442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3084'. [ 867.291596][T17380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.309736][T17443] netlink: 'syz.1.3085': attribute type 10 has an invalid length. [ 867.312939][T17441] team0: Port device dummy0 added [ 867.359057][T17446] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3086'. [ 867.375661][T17380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.387302][T17380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.420035][T17380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.462087][T17441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3085'. [ 867.495761][T17443] team0: Port device dummy0 removed [ 867.511469][T17443] : (slave dummy0): Enslaving as an active interface with an up link [ 867.606917][T17457] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 867.655569][T17457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3087'. [ 867.667761][T17457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3087'. [ 867.717751][T17380] hsr_slave_0: entered promiscuous mode [ 867.774935][T10489] Bluetooth: hci3: command tx timeout [ 867.805905][T17380] hsr_slave_1: entered promiscuous mode [ 867.813006][T17380] debugfs: 'hsr0' already exists in 'hsr' [ 867.820062][T17380] Cannot create hsr debugfs directory [ 867.967379][T17471] netlink: 'syz.0.3089': attribute type 39 has an invalid length. [ 868.091509][T17475] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3091'. [ 868.148930][T17477] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3092'. [ 868.306877][T17484] netlink: 428 bytes leftover after parsing attributes in process `syz.3.3095'. [ 868.310016][T17486] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3096'. [ 868.327174][T17484] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3095'. [ 868.575409][T17498] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 868.741709][T17510] netlink: 'syz.4.3102': attribute type 4 has an invalid length. [ 868.818291][T17380] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 868.882275][T17380] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 868.926772][T17380] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 868.966249][T17380] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 869.058772][T17536] syzkaller0: entered promiscuous mode [ 869.065137][T17536] syzkaller0: entered allmulticast mode [ 869.153186][T17539] atomic_op ffff88807d139198 conn xmit_atomic 0000000000000000 [ 869.164321][T17540] xt_ecn: cannot match TCP bits for non-tcp packets [ 869.178127][T17543] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 869.184100][T17539] tipc: New replicast peer: 255.255.255.255 [ 869.194534][T17539] tipc: Enabled bearer , priority 10 [ 869.221411][T17539] netlink: 'syz.0.3110': attribute type 2 has an invalid length. [ 869.267783][T17380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.312135][T17380] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.330265][ T1940] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.337438][ T1940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.357464][T13671] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.364651][T13671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.576801][T17558] IPv6: NLM_F_REPLACE set, but no existing node found! [ 869.780744][T17380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.854545][T10489] Bluetooth: hci3: command tx timeout [ 869.902420][T17380] veth0_vlan: entered promiscuous mode [ 869.917533][T17380] veth1_vlan: entered promiscuous mode [ 869.957704][T17380] veth0_macvtap: entered promiscuous mode [ 869.986133][T17380] veth1_macvtap: entered promiscuous mode [ 870.018103][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 870.034200][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.035249][T17380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.122513][T17380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.195780][T17588] batadv1: entered promiscuous mode [ 870.226482][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.236567][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.284279][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.301619][T17594] netlink: set zone limit has 4 unknown bytes [ 870.302940][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.320807][T17601] netlink: 'syz.0.3129': attribute type 1 has an invalid length. [ 870.409033][T17601] 8021q: adding VLAN 0 to HW filter on device bond10 [ 870.469165][T17605] 8021q: adding VLAN 0 to HW filter on device bond10 [ 870.476574][T17605] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 870.488532][T17605] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 870.513462][T17613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 870.547350][T17601] gretap3: entered promiscuous mode [ 870.557730][T17601] bond10: (slave gretap3): making interface the new active one [ 870.568514][T17601] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 870.595991][T17610] macvlan2: entered promiscuous mode [ 870.601312][T17610] macvlan2: entered allmulticast mode [ 870.609878][T17610] bond10: entered promiscuous mode [ 870.616560][T17610] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 870.628359][T17610] bond10: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 870.641059][T17610] bond10: left promiscuous mode [ 870.732169][T17615] x_tables: unsorted underflow at hook 4 [ 870.841427][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.867096][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.925581][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.951458][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.012692][T17634] lo speed is unknown, defaulting to 1000 [ 871.037078][T17634] lo speed is unknown, defaulting to 1000 [ 871.048521][T17634] lo speed is unknown, defaulting to 1000 [ 871.244099][T17643] bond1: Removing last ns target with arp_interval on [ 871.413675][T16275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 871.423072][T16275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 871.434950][T16275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 871.443798][T16275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 871.452038][T16275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 871.481573][T17634] wg1 speed is unknown, defaulting to 1000 [ 871.612246][T17650] lo speed is unknown, defaulting to 1000 [ 871.645716][T17650] lo speed is unknown, defaulting to 1000 [ 871.700421][T17650] lo speed is unknown, defaulting to 1000 [ 871.935376][T16275] Bluetooth: hci3: command tx timeout [ 872.266877][T17650] wg1 speed is unknown, defaulting to 1000 [ 872.307764][T17685] syzkaller0: entered promiscuous mode [ 872.323656][T17685] syzkaller0: entered allmulticast mode [ 872.336763][T17690] __nla_validate_parse: 17 callbacks suppressed [ 872.336780][T17690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3152'. [ 872.462306][T17685] netem: change failed [ 872.481535][T17696] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3153'. [ 872.516458][T17685] netlink: 'syz.2.3151': attribute type 9 has an invalid length. [ 872.543640][T17685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3151'. [ 872.585323][T17685] hsr0: entered promiscuous mode [ 872.605579][T17685] macvlan2: entered promiscuous mode [ 872.611052][T17685] macvlan2: entered allmulticast mode [ 872.629295][T17685] hsr0: entered allmulticast mode [ 872.639196][T17685] hsr_slave_0: entered allmulticast mode [ 872.644987][T17685] hsr_slave_1: entered allmulticast mode [ 872.660291][T17699] team0: No ports can be present during mode change [ 872.932968][T17650] chnl_net:caif_netlink_parms(): no params data found [ 873.005991][T17719] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3159'. [ 873.038217][T17719] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3159'. [ 873.075299][T17719] netlink: 'syz.2.3159': attribute type 1 has an invalid length. [ 873.083051][T17719] netlink: 'syz.2.3159': attribute type 2 has an invalid length. [ 873.092861][T17719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3159'. [ 873.109508][T17721] lo speed is unknown, defaulting to 1000 [ 873.151636][T17721] lo speed is unknown, defaulting to 1000 [ 873.211660][T17721] lo speed is unknown, defaulting to 1000 [ 873.220050][T17650] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.230385][T17650] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.231827][T17733] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 873.249237][T17650] bridge_slave_0: entered allmulticast mode [ 873.311163][T17650] bridge_slave_0: entered promiscuous mode [ 873.337173][T17650] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.353433][T17650] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.360866][T17650] bridge_slave_1: entered allmulticast mode [ 873.377041][T17650] bridge_slave_1: entered promiscuous mode [ 873.458596][T17737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3164'. [ 873.478193][T17650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.498013][T17650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.553343][T16275] Bluetooth: hci4: command tx timeout [ 873.583974][T17739] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 873.678699][T17650] team0: Port device team_slave_0 added [ 873.705529][T17650] team0: Port device team_slave_1 added [ 873.805166][T17721] wg1 speed is unknown, defaulting to 1000 [ 873.811588][T17753] x_tables: duplicate underflow at hook 2 [ 873.811755][T17650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.832141][T17650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.860388][T17650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.904942][T17650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.911930][T17650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.938926][T17650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.013513][T16275] Bluetooth: hci3: command tx timeout [ 874.160473][T17650] hsr_slave_0: entered promiscuous mode [ 874.185141][T17650] hsr_slave_1: entered promiscuous mode [ 874.212198][T17650] debugfs: 'hsr0' already exists in 'hsr' [ 874.227593][T17650] Cannot create hsr debugfs directory [ 874.562312][T17778] 8021q: adding VLAN 0 to HW filter on device bond2 [ 874.612927][T17782] bond_slave_0: entered promiscuous mode [ 874.619058][T17782] bond_slave_1: entered promiscuous mode [ 874.628565][T17782] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 874.639788][T17782] bond2: (slave macvlan3): Enslaving as a backup interface with an up link [ 874.675197][T17789] bridge_slave_0: left allmulticast mode [ 874.680951][T17789] bridge_slave_0: left promiscuous mode [ 874.687240][T17789] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.705496][T17789] bridge_slave_1: left allmulticast mode [ 874.711766][T17789] bridge_slave_1: left promiscuous mode [ 874.717795][T17789] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.731438][T17789] bond0: (slave bond_slave_0): Releasing backup interface [ 874.740425][T17789] bond_slave_0: left promiscuous mode [ 874.750550][T17789] bond0: (slave bond_slave_1): Releasing backup interface [ 874.760914][T17789] bond_slave_1: left promiscuous mode [ 874.773183][T17789] team0: Port device team_slave_0 removed [ 874.784214][T17789] team0: Port device team_slave_1 removed [ 874.791446][T17789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.802150][T17789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.810921][T17789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.819260][T17789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.827900][T17789] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 874.861504][T13874] bond2: (slave macvlan3): speed changed to 0 on port 1 [ 874.886423][T17799] tipc: Enabled bearer , priority 0 [ 874.906102][T17798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3179'. [ 874.993072][T17810] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3181'. [ 875.010978][T17799] tipc: Disabling bearer [ 875.151073][ T5831] block nbd1: Receive control failed (result -110) [ 875.227449][T17818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3184'. [ 875.302562][ T6189] bond2: (slave macvlan3): link status definitely down, disabling slave [ 875.615465][ T5831] Bluetooth: hci4: command tx timeout [ 875.754458][T17650] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 875.783601][T17650] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 875.904524][T17650] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 875.939716][T17650] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 876.397022][T17650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.445928][T17859] netlink: 'syz.2.3195': attribute type 13 has an invalid length. [ 876.476055][T17859] netlink: 'syz.2.3195': attribute type 17 has an invalid length. [ 876.497902][T17650] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.648596][T17859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 876.677630][T17868] batman_adv: batadv0: Adding interface: vlan2 [ 876.695180][T17868] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 876.720985][T17868] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 876.788694][T17880] netlink: 'syz.2.3201': attribute type 58 has an invalid length. [ 876.793309][ T1940] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.803699][ T1940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.835177][T17868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 876.888549][T13874] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.895737][T13874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.266600][T17650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.320191][T17912] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 877.355727][T17914] netlink: 'syz.0.3210': attribute type 13 has an invalid length. [ 877.365300][T17913] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 877.402425][T17918] __nla_validate_parse: 32 callbacks suppressed [ 877.402441][T17918] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3212'. [ 877.475247][T17918] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3212'. [ 877.701020][ T5831] Bluetooth: hci4: command tx timeout [ 878.104446][ C0] ------------[ cut here ]------------ [ 878.110171][ C0] WARNING: net/ipv4/af_inet.c:157 at inet_sock_destruct+0x62d/0x740, CPU#0: syz.1.3212/17915 [ 878.120503][ C0] Modules linked in: [ 878.124627][ C0] CPU: 0 UID: 0 PID: 17915 Comm: syz.1.3212 Not tainted syzkaller #0 PREEMPT(full) [ 878.134024][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 878.144101][ C0] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 878.149928][ C0] Code: 0f 0b 90 e9 58 fe ff ff e8 a0 81 e4 f7 90 0f 0b 90 e9 8b fe ff ff e8 92 81 e4 f7 90 0f 0b 90 e9 b1 fe ff ff e8 84 81 e4 f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 878.169573][ C0] RSP: 0018:ffffc90000007d28 EFLAGS: 00010246 [ 878.175669][ C0] RAX: ffffffff89dc772c RBX: dffffc0000000000 RCX: ffff888031589e80 [ 878.183752][ C0] RDX: 0000000000000100 RSI: 0000000000000f70 RDI: 0000000000000000 [ 878.191730][ C0] RBP: 0000000000000f70 R08: ffff888077f7bc67 R09: 1ffff1100efef78c [ 878.199725][ C0] R10: dffffc0000000000 R11: ffffed100efef78d R12: ffff888077f7b9c0 [ 878.207717][ C0] R13: dffffc0000000000 R14: ffff888077f7bc4c R15: ffffffff8f3e38c0 [ 878.215708][ C0] FS: 000055557c482500(0000) GS:ffff888125e1c000(0000) knlGS:0000000000000000 [ 878.224673][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 878.231268][ C0] CR2: 00007fffe718ff08 CR3: 0000000078374000 CR4: 00000000003526f0 [ 878.239277][ C0] Call Trace: [ 878.242561][ C0] [ 878.245446][ C0] ? __pfx_udp_destruct_sock+0x10/0x10 [ 878.250926][ C0] __sk_destruct+0x85/0x880 [ 878.255471][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 878.260597][ C0] ? rcu_core+0xc1a/0x1720 [ 878.265031][ C0] rcu_core+0xc8e/0x1720 [ 878.269304][ C0] ? __pfx_rcu_core+0x10/0x10 [ 878.273997][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 878.279179][ C0] ? sched_clock_cpu+0x74/0x430 [ 878.284032][ C0] handle_softirqs+0x22b/0x7c0 [ 878.288784][ C0] ? __irq_exit_rcu+0x60/0x150 [ 878.293554][ C0] __irq_exit_rcu+0x60/0x150 [ 878.298127][ C0] irq_exit_rcu+0x9/0x30 [ 878.302357][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 878.308008][ C0] [ 878.310944][ C0] [ 878.313896][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 878.319890][ C0] RIP: 0010:_raw_spin_lock_irqsave+0x6/0x60 [ 878.325792][ C0] Code: 41 f6 48 83 c4 08 48 89 df 5b e9 15 b9 41 f6 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 56 <53> 49 89 fe 9c 5b fa f7 c3 00 02 00 00 74 05 e8 26 ed 6b f6 bf 01 [ 878.345416][ C0] RSP: 0018:ffffc900030a7ca0 EFLAGS: 00000296 [ 878.351498][ C0] RAX: 000ffffc900030a7 RBX: ffffc900030a7d40 RCX: 0000000000008e78 [ 878.359494][ C0] RDX: 0000000000000000 RSI: ffffffff8b6d3840 RDI: ffffffff99aeedc0 [ 878.367486][ C0] RBP: ffffc900030a7e10 R08: ffffffff8f823877 R09: 1ffffffff1f0470e [ 878.375475][ C0] R10: dffffc0000000000 R11: fffffbfff1f0470f R12: ffffffff99aeedb8 [ 878.383478][ C0] R13: dffffc0000000000 R14: ffff888031589e80 R15: dffffc0000000000 [ 878.391454][ C0] debug_object_free+0x7c/0x400 [ 878.396329][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 878.401539][ C0] hrtimer_nanosleep+0x2a6/0x360 [ 878.406497][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 878.411963][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 878.417174][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 878.422369][ C0] __se_sys_clock_nanosleep+0x339/0x390 [ 878.427940][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 878.434022][ C0] do_syscall_64+0xec/0xf80 [ 878.438513][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.444586][ C0] ? clear_bhb_loop+0x60/0xb0 [ 878.449272][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.455170][ C0] RIP: 0033:0x7f7b16bc2005 [ 878.459572][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 878.479188][ C0] RSP: 002b:00007ffe29ad87b0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 878.487639][ C0] RAX: ffffffffffffffda RBX: 00007f7b16de5fa0 RCX: 00007f7b16bc2005 [ 878.495644][ C0] RDX: 00007ffe29ad87f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 878.503643][ C0] RBP: 00007f7b16de7da0 R08: 0000000000000000 R09: 3fffffffffffffff [ 878.511620][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000d6672 [ 878.519617][ C0] R13: 00007f7b16de5fa0 R14: ffffffffffffffff R15: 00007ffe29ad8930 [ 878.527636][ C0] [ 878.530666][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 878.537943][ C0] CPU: 0 UID: 0 PID: 17915 Comm: syz.1.3212 Not tainted syzkaller #0 PREEMPT(full) [ 878.547289][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 878.557330][ C0] Call Trace: [ 878.560597][ C0] [ 878.563432][ C0] vpanic+0x1e0/0x670 [ 878.567411][ C0] panic+0xb9/0xc0 [ 878.571119][ C0] ? __pfx_panic+0x10/0x10 [ 878.575528][ C0] __warn+0x317/0x4b0 [ 878.579496][ C0] ? inet_sock_destruct+0x62d/0x740 [ 878.584705][ C0] ? inet_sock_destruct+0x62d/0x740 [ 878.589897][ C0] __report_bug+0x288/0x500 [ 878.594396][ C0] ? kasan_save_track+0x4f/0x80 [ 878.599249][ C0] ? kasan_save_track+0x3e/0x80 [ 878.604090][ C0] ? inet_sock_destruct+0x62d/0x740 [ 878.609300][ C0] ? __pfx___report_bug+0x10/0x10 [ 878.614313][ C0] ? debug_object_free+0x7c/0x400 [ 878.619324][ C0] ? hrtimer_nanosleep+0x2a6/0x360 [ 878.624418][ C0] ? __se_sys_clock_nanosleep+0x339/0x390 [ 878.630119][ C0] ? do_syscall_64+0xec/0xf80 [ 878.634787][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.640871][ C0] ? inet_sock_destruct+0x62d/0x740 [ 878.646071][ C0] report_bug+0x16a/0x220 [ 878.650392][ C0] ? inet_sock_destruct+0x62d/0x740 [ 878.655580][ C0] ? inet_sock_destruct+0x62f/0x740 [ 878.660773][ C0] handle_bug+0x98/0x200 [ 878.665011][ C0] exc_invalid_op+0x1a/0x50 [ 878.669505][ C0] asm_exc_invalid_op+0x1a/0x20 [ 878.674339][ C0] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 878.680138][ C0] Code: 0f 0b 90 e9 58 fe ff ff e8 a0 81 e4 f7 90 0f 0b 90 e9 8b fe ff ff e8 92 81 e4 f7 90 0f 0b 90 e9 b1 fe ff ff e8 84 81 e4 f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 878.699731][ C0] RSP: 0018:ffffc90000007d28 EFLAGS: 00010246 [ 878.705790][ C0] RAX: ffffffff89dc772c RBX: dffffc0000000000 RCX: ffff888031589e80 [ 878.713747][ C0] RDX: 0000000000000100 RSI: 0000000000000f70 RDI: 0000000000000000 [ 878.721702][ C0] RBP: 0000000000000f70 R08: ffff888077f7bc67 R09: 1ffff1100efef78c [ 878.729662][ C0] R10: dffffc0000000000 R11: ffffed100efef78d R12: ffff888077f7b9c0 [ 878.737618][ C0] R13: dffffc0000000000 R14: ffff888077f7bc4c R15: ffffffff8f3e38c0 [ 878.745586][ C0] ? inet_sock_destruct+0x62c/0x740 [ 878.750784][ C0] ? inet_sock_destruct+0x62c/0x740 [ 878.755973][ C0] ? __pfx_udp_destruct_sock+0x10/0x10 [ 878.761415][ C0] __sk_destruct+0x85/0x880 [ 878.765908][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 878.771003][ C0] ? rcu_core+0xc1a/0x1720 [ 878.775405][ C0] rcu_core+0xc8e/0x1720 [ 878.779646][ C0] ? __pfx_rcu_core+0x10/0x10 [ 878.784305][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 878.789490][ C0] ? sched_clock_cpu+0x74/0x430 [ 878.794341][ C0] handle_softirqs+0x22b/0x7c0 [ 878.799101][ C0] ? __irq_exit_rcu+0x60/0x150 [ 878.803877][ C0] __irq_exit_rcu+0x60/0x150 [ 878.808462][ C0] irq_exit_rcu+0x9/0x30 [ 878.812689][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 878.818316][ C0] [ 878.821235][ C0] [ 878.824152][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 878.830127][ C0] RIP: 0010:_raw_spin_lock_irqsave+0x6/0x60 [ 878.836009][ C0] Code: 41 f6 48 83 c4 08 48 89 df 5b e9 15 b9 41 f6 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 56 <53> 49 89 fe 9c 5b fa f7 c3 00 02 00 00 74 05 e8 26 ed 6b f6 bf 01 [ 878.855599][ C0] RSP: 0018:ffffc900030a7ca0 EFLAGS: 00000296 [ 878.861657][ C0] RAX: 000ffffc900030a7 RBX: ffffc900030a7d40 RCX: 0000000000008e78 [ 878.869614][ C0] RDX: 0000000000000000 RSI: ffffffff8b6d3840 RDI: ffffffff99aeedc0 [ 878.877568][ C0] RBP: ffffc900030a7e10 R08: ffffffff8f823877 R09: 1ffffffff1f0470e [ 878.885526][ C0] R10: dffffc0000000000 R11: fffffbfff1f0470f R12: ffffffff99aeedb8 [ 878.893481][ C0] R13: dffffc0000000000 R14: ffff888031589e80 R15: dffffc0000000000 [ 878.901453][ C0] debug_object_free+0x7c/0x400 [ 878.906301][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 878.911491][ C0] hrtimer_nanosleep+0x2a6/0x360 [ 878.916418][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 878.921868][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 878.927056][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 878.932247][ C0] __se_sys_clock_nanosleep+0x339/0x390 [ 878.937783][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 878.943854][ C0] do_syscall_64+0xec/0xf80 [ 878.948349][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.954402][ C0] ? clear_bhb_loop+0x60/0xb0 [ 878.959065][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.964943][ C0] RIP: 0033:0x7f7b16bc2005 [ 878.969343][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 878.988937][ C0] RSP: 002b:00007ffe29ad87b0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 878.997341][ C0] RAX: ffffffffffffffda RBX: 00007f7b16de5fa0 RCX: 00007f7b16bc2005 [ 879.005299][ C0] RDX: 00007ffe29ad87f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 879.013254][ C0] RBP: 00007f7b16de7da0 R08: 0000000000000000 R09: 3fffffffffffffff [ 879.021217][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000d6672 [ 879.029171][ C0] R13: 00007f7b16de5fa0 R14: ffffffffffffffff R15: 00007ffe29ad8930 [ 879.037145][ C0] [ 879.040497][ C0] Kernel Offset: disabled [ 879.044806][ C0] Rebooting in 86400 seconds..