last executing test programs: 11.865273254s ago: executing program 3 (id=5988): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) r1 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) syz_emit_ethernet(0x83, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tipc={{0x17, 0x4, 0x2, 0x30, 0xfffffffffffffffb, 0x67, 0x0, 0x4, 0x6, 0x0, @broadcast, @rand_addr=0x64010101, {[@end, @timestamp_addr={0x44, 0x24, 0x5f, 0x1, 0x7, [{@private=0xa010102, 0x4}, {@rand_addr=0x64010102, 0x8}, {@multicast2, 0xb}, {@local, 0xe9460}]}, @lsrr={0x83, 0x1b, 0xfe, [@broadcast, @multicast2, @remote, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0xf8, 0x0}]}, @noop, @ra={0x94, 0x4, 0x1}]}}, @payload_conn={{{0x19, 0x0, 0x0, 0x1, 0x1, 0x6, 0x3, 0x2, 0x3, 0x0, 0x0, 0x6, 0x5, 0x0, 0x2, 0x3, 0x0, 0x4e21, 0x4e20}}, [0x0]}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000600000000000019078ac1e0001ac1414aa05009078e00000e04100000000000000002f0000000000007f000001830300070700ac1e00018623000000000706954d2dd40211ad010000000000000013f8d51edcd60206ba2a891b000000"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 8.909554004s ago: executing program 3 (id=5993): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000008000eb7f000071101b0000d423df3485e1a62c5d4b97ac9aacc713747e4754bd47b59cefb30096b69a965df731afacc8d2d03f39e6d8d4bee3ab6beb7be2e472cfeb24323d95f55b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x1d, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@ldst={0x2, 0xb62bba014dc9ca2, 0x1, 0x0, 0x0, 0x40, 0x8}, @exit, @jmp={0x5, 0x1, 0x7, 0x7, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffc}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x2, 0x7, 0x3, 0x4, 0x1}, @call={0x85, 0x0, 0x0, 0x48}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000600)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80}, 0x10}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept(r1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2) socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x10010, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r6, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x5}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) readv(r3, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) (async) readv(r3, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYRES64=r0], 0x80}}, 0x0) (async) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYRES64=r0], 0x80}}, 0x0) r8 = socket(0xb, 0x2, 0x5) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 8.623452048s ago: executing program 3 (id=5997): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="ef07000000f01f007f00411001001d5ed86c35c16f2146cdd2d0371d48b8143cb11507c822e76c918fa6353e4f2512cc9d300d6d8bbdfd0a7d9f4b7b76bd68e672a42d1505653b00589e535229ecfd05b1a02031592e5e82645ef9000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB], 0x50) unshare(0x68040200) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0xffff, @empty, 0x1}}, 0x7}, &(0x7f0000000200)=0x90) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1d4, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x9}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfff}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10001}, @NL80211_ATTR_TX_RATES={0x15c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x1, 0xd22, 0x800, 0xffff, 0x1659, 0x946]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x5, 0x4, 0x5, 0x56d8, 0x0, 0x2]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x2, 0x5, 0x3, 0x4, 0x6, 0x800]}}]}, @NL80211_BAND_60GHZ={0x10c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x3}, {0x7, 0x5}, {0x5, 0x9}, {0x3, 0x4}, {0x1, 0x9}, {0x7, 0x7}, {0x1, 0x9}, {0x6, 0xa}, {0x5, 0x7}, {0x0, 0x5}, {0x7}, {0x1, 0x3}, {0x7, 0x6}, {0x6}, {0x7, 0x3}, {0x3, 0x3}, {0x7, 0xa}, {0x4, 0x3}, {0x5, 0x9}, {0x3, 0x6}, {0x0, 0x3}, {0x4, 0x8}, {0x4, 0x3}, {0x2, 0x5}, {0x2}, {0x7, 0x1}, {0x7, 0x3}, {0x3, 0x4}, {0x7, 0x3}, {0x1, 0x5}, {0x1, 0x4}, {0x0, 0x7}, {0x2, 0x1}, {0x0, 0x8}, {0x3, 0x4}, {0x2}, {0x7, 0x5}, {0x4, 0x6}, {0x1, 0x3}, {0x7, 0x6}, {0x1, 0x5}, {0x4, 0x1}, {0x6, 0x8}, {0x2}, {0x6, 0x6}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x8}, {0x5, 0x9}, {0x2, 0x3}, {0x6, 0x4}, {0x7, 0x1}, {0x2, 0x5}, {0x5, 0x9}, {0x7, 0xa}, {0x1, 0x5}, {0x7, 0x9}, {0x7, 0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x7, 0xa}, {0x6, 0x4}, {0x3, 0x7}, {0x3, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x1}, {0x6, 0xa}, {0x6, 0x6}, {0x6, 0x8}, {0x3, 0x1}, {0x1, 0x5}, {0x1, 0x1}, {0x4, 0x4}, {0x4, 0x4}, {0x1, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x7f, 0x7f, 0x9, 0x4ab3, 0xffff, 0xfffe]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x7, 0x7ff, 0x9, 0x1, 0x0, 0x1295, 0x9]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x5}, {0x0, 0x6}, {0x3, 0x5}, {0x4, 0x3}, {0x4, 0x1}, {0x1, 0x5}, {0x0, 0x5}, {0x0, 0x9}, {0x7}, {0x3, 0x4}, {0x4, 0x4}, {0x1, 0x4}, {0x5, 0x9}, {0x4, 0x2}, {0x2, 0x4}, {0x7, 0xa}, {0x0, 0x3}, {0x1, 0x8}, {0x1, 0x9}, {0x4, 0x2}, {0x6}, {0x5, 0xa}, {0x6, 0x1}, {0x3, 0xa}, {0x6, 0x4}, {0x4, 0xa}, {0x6, 0x1}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0x1}, {0x5, 0x6}, {0x0, 0x4}, {0x6, 0x9}, {0x4, 0xa}, {0x4, 0x4}, {0x2, 0x2}, {0x4, 0x4}, {0x1, 0x6}, {0x6, 0x2}, {0x3, 0x6}, {0x1, 0x3}, {0x3, 0x7}, {0x1, 0x2}, {0x3, 0x4}, {0x3, 0x7}, {0x4, 0x4}, {0x5, 0x9}, {0x3, 0x2}, {0x2, 0x9}, {0x2, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x9}, {0x6, 0x3}, {0x0, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x1, 0x6}, {0x2, 0x3}, {0x0, 0x5}, {0x0, 0x5}, {0x1}, {0x6, 0x8}, {0x2, 0x6}, {0x0, 0x3}, {0x1, 0x4}, {0x5}, {0x2, 0x4}, {0x4, 0x5}, {0x0, 0x3}, {0x2}, {0x2, 0x3}, {0x3, 0x3}, {0x5, 0x5}, {0x0, 0x2}, {0x0, 0x5}, {0x2, 0x5}, {0x7}, {0x0, 0x8}, {0x7, 0x2}, {0x0, 0x5}, {0x0, 0x8}, {0x1, 0x1}, {0x0, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x5, 0x7}, {0x6, 0x2}, {0x2, 0x2}, {0x6, 0x8}, {0x5, 0x8}, {0x1, 0x4}, {0x5, 0x3}, {0x1, 0x7}, {0x2, 0x2}, {0x3, 0x4}, {0x7, 0x1}, {0x7}, {0x2}, {0x1, 0x2}, {0x4}, {0x4, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x40}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xf}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffde}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x2}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x8800}, 0x40004) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r4, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000ac0)="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", 0x1000) 7.959085054s ago: executing program 2 (id=6008): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000210"], 0x18}, 0x1, 0x0, 0x0, 0x4048811}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000000508000840000000011400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000aefff000900020073797a310000ffdf0900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmmsg(r4, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)={0x24, r5, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10000006}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x488c8}, 0x24004010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r0) 6.761881007s ago: executing program 2 (id=6016): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x2, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80008000}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x810) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) connect$netlink(r2, &(0x7f0000000180), 0xc) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000000c0)=""/140, 0x8c}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2, &(0x7f0000001540)=""/4096, 0x1000}, 0x140) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 6.18632708s ago: executing program 2 (id=6019): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001040)="90", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[], 0x160}}], 0x2, 0x40480c0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "5b238eb33affcf54", "2b54d7a94767ee7486740825f9883b16", "18e8a9d3", "61707359c6175bdd"}, 0x28) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}}}, 0x24}}, 0x0) 5.192842511s ago: executing program 3 (id=6024): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r1}, &(0x7f0000000ac0), &(0x7f0000000b00)='%ps \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f00000007c0), &(0x7f0000000340)=""/178, 0x2}, 0x20) r2 = socket$inet6(0xa, 0x80000, 0x6) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @mcast2, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.184513415s ago: executing program 2 (id=6025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f0000007200)={0x0, 0x0, &(0x7f00000071c0)={&(0x7f000000e6c0)=ANY=[], 0x7470}, 0x1, 0x0, 0x0, 0x40001}, 0x95) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000080000009111bf000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) pipe(&(0x7f0000000200)={0xffffffffffffffff}) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x7, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x4000051) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000081113e0000000000950000"], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}, [{0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 4.804471706s ago: executing program 3 (id=6028): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x3c) write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="420002"], 0x5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) 4.641005166s ago: executing program 2 (id=6030): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0xdf, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x20, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x10}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x40) shutdown(r1, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000240)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x7c, 0x10, 0x5, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x10, 0x52, 0xfffff9c8}}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x5, '\x00', r4, r1, 0x2, 0x5, 0x1}, 0x50) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000000400)=0x3ff, &(0x7f0000000440)=0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000480)="5e516d16beb144a553305c09da58d8afbcd31e5ddc59250be2200fb2e2c7ce172b26dbc3324d746ca23357", &(0x7f00000004c0)=@tcp6=r0, 0x2}, 0x20) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000540)={0xdc, 0x2a6, 0x1, 0x1e8a, 0x8, 0x7f, 0xe6dc, 0x4}) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f00000005c0)=0x8, 0x4) r7 = openat$cgroup_ro(r1, &(0x7f0000000600)='cpuacct.stat\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001840)={r7, 0x0, 0xc1, 0x28, &(0x7f0000000680)="75d47e3afc369458e3fe82392bbcc6e3c4140505f55fe25c9dbf509506bb4f4b03c1fa10931e096a5fd39884d8a605d655b894aa61679622f0d6108167b6ffe2e7cbe78534891d59547f5d45220dacab4f12329362e575a961f9e23942b355c2ac84266967f37831914f1d6fba9d4b9a5b953e1ea0381f949f5b3aa0ad02cc1bd3598eed8039086baa44ae6beab6e140e88c763092d4327934a6144ee4f27190a6874e162a45e28d5ad91184d36a8940bf014a2398368d0aa999c40d331f99eb3f", &(0x7f0000000780)=""/40, 0x7, 0x0, 0x5a, 0x1000, &(0x7f00000007c0)="c16d15045d74fcedef1935c071d42c4513fe739165c165efe340f1747e61ff2b3238591b831e9059856f8a02c327fbecdab0efde1c1367a3b9371db859722e2e93f7232b934eec1f82995d97687d437873fce0878421b97ca64d", &(0x7f0000000840)="8d51bccbcf1a5cf437427ba8829f07ce2023538658ae2ac33e84a29cd698eeb9bef603a9d3eb018fca2a4e9fd9f957969805a30d94259245fc99629f2b5972150a8425525cc73b44ef6ec067188aaaa25c2e542f09d364e96698ec9c4f14f24d55b4731ad833219f14992bf3d0d027adb46a1181a5e044ba98707523d0d04984c295aca52e7c1dd0e2139d0cc76eea35beb7e2ebddab1a4613de5e277cbe416f2ab84ca7d40137c5121aaf1e76121e35c8fc558419e8a3fa0a2e2d81192d1069c3989e65f8e7926d11dfc804d809648bf706163d002b276575584a06a0012047305b0a191683a7573b538fc563a405902c2131680508e1e4bf8cbe82206d457fc434bcd56ca5a45daee7df9b91763e59ed6b3cc284c938838e59ba11d78de84b9ac91dba9fc4d97ada53ffe270ee47e053732316a94eac766448644ad66e513b951a3ececa5a085759019f58ff0db60fd45b192c0dab123e06e97f548622f40975f5b32dd60faab9a1fb424d03e636e2236535dbd0d715086afc1e607dee2a7b2d12b0348f518c93cdcb04d808457aab7ea4ceee58833eca54097d050040a07c85db279d88284675dc52fcff609b52e0cb6559f9a9a11d0a1fa0082f577e7dc8797767403afa298b87815fc0564ca6440fd8e682576a7738f55ff5f34aba97bf64088be9a8896ce767c07ce23c2d0bcae0f5683d39b06ee643267c2e77f639aa1187e39e7e0a6655e0ad7cd8b8e0de1aab0a48bb49fd0b66c29eca1f8d05f49f58199d751c9f4c5613e8de2a9cd9510f4687a4cdaa7ee0ede27e0c36ff2947b90e82071b3ad5e2fa6283cbfea76ed7cf7f0d8d3aaf52df2a10d6a8ec94e46544619126e94669a04a80819202f48df0152cc97b0bdb00d2e83e439719e6f2a0f4d9270f08c6d167df32b89bf859d584c280d11f45592196882d306b2f327a5a8530a4f72bb594c82d3915709690aae3fdaada0a3171ec12ac0dc9ee4c1353e9a8953f7f322dca4031a34b94d8007f2c32338af80c217fb5c2fbfca430909fd069dabb7d14fe753a594c936cbd6235f0557747f46895c2d07fc6c6e8f8a17e9d36822c9c3d3f71758001f345f241952c01a6670bfc87210470840e2e9606c849a2b2496f40a2db6b1c468ba2a329f290eca66f569da14305c2af5dee7f2cbd21826b51a1bb5152d51b41714370da04b974da40ea0c241bb9a1872106eb6beded9b033be3fae054af8e11ef723962d33e53af9e53abb37fed2fa33b936990dcd88bdf49831bcfb57bad3c3d2608072dd2f368fd3eb8567348cb2897037267ab1119dcbf9fea9f6178f08acd896a3de88a2fe04ad004d7c8d2ce17b869f6b985b358f25d07e1401ca6b3a75017f2334a360c0eca1b4f0a42d3ab2dc2ab12c62afa5a44e4be875ead13838d00d5ad750a4a4f0da8aad6983d3f8f62c9986cfe02b175309ee47c91dc37add2c2c54894f45f689bdc2645de5d7b952109239d71be5ea5780ea846f7b1ac8bf1e4ce84e2ac0d597a99ccc7aa1a13617c3c7eec5dc0b1f5f53259fe270d2b6c822b402aac37870177d38edb6bc0391942bda0ba6613aecbfbbedf69168b71994e03f9becc490798a64bf62cf8ebba722cdc0fff3e5773976c4d146f4affd5011782662f43e2ec1f1383172e99b0a35d2c487325314fe6e1756f19788e386dab4ff395abe03e7a90276afa4e3c7f8c89c732b91d4fa22cecc00733176e78125350a9bb5d84aa9ae0226e69e3e11305e4f73f69fde5d33f0f341dd3e22171220664c9bb05e84bed7a2b642918a9f53640b4f92f0728d08f7af305d4606a616a78a5d3602916e1005b4f3bcf5669a3884576c00fd99b7d9cf4a81b0e53101f8f1fe0b5e2231c9df19130711ac9c6ad73a88896145e24b316e714f8aeca3ce5735ff4e8f9e1214d16293ce99aeec1f88df1326a23e1a8496d0a2e1311ce4ce1413a0d88b0e1509314553307ba668a1bfbf6a87c99ff8715ebbae1168c9907630800fecf7f39f1cf441907c3ebb6b350c2845f050192ec65645770b43f68806fcce4cf6fb84e2aebc4c122607b3e9447daf4cc55df0098cdda7dcc0a65daa3eb0d9e79396b1cf08ef6dc8b14b2e6965ca7b68ee3134c3a5d357a29a58938995dc141221d47712ab8c7a70d72d629556a3d4b9d673b23b0f965ca3aca4ec97a22e5c00d3d646cf0b30070c4c409ac283d2f82310eca19aeca3af2b9571c1072105730968db34323d18aabbec36b1996e4cabde28bc8a94e16f73576eff97976d93101a85e448a696e022490bfce47087c75d6298d54f8e3d2c346c721662ccbf9a65fb4f8b3b8d607b209e65559ef2cc7776244302521a0ae388d63db4eb21737a6eddb76017bac946f6653addd37b31bc4853c7dbbddfaa3c5394c60c213c3debc44afa02faec97467db2aff8fab28ba890ea26f2a1f61d9b7c07f01c992c906e128f8c614ab4a9f6580c9c3365dc65d5d397b8938aa746425632aa084fde66c5dbe38f513572e267d49fd40d422e83cbbed89964378c0119a3d1627eb6462c3158d3e32131b622a8a8c3534198a4806acacf2c75bb30f1c9fc077f8dc78253b907f2cec6c4ec348aa5c60223afe2377f54e6f008b981762e1bec892a58c8ab9ea2e869d90b0f53b9123999f07a36eac19e5fad8656c5bf9e9f629641f39a873f41aa989b66bd9e32e12829778d0cf543e1c20c3d14f3573fc5a24f5a8690ebbe75718275441bf914069ff7ea4145f8be02f84f0d5252fc27b835e02781a1c277bb96d365edd2a10cc0223e74f830c50cfefafd382d8f7377e95ef3ccedc8d69f5969652507bb2762feac73a6854aec5fd89a591c59bc036594796555c3ec0cf5d5c08fac32a7ab87d2d271556374da8f0bcc43a8700bc927deefd3da95592b4218a5d42e46e6485d2bc9e92657fac3db7e2e21d32abe93ca856979a0fbc7556a425e55ee44c4106f92bd52adf73d4ccf11e633f39a7abf9c2d302e95bd45be4b9176cb771b550de09ef309fbbfaf7c8048796c2c141a95a06ccede76881c5546d27225e45561f5b6aaebb33114776d7f5262973a2643513d6e76a9ea7eae02684d5aad306f420bf1eba1e900e3f4ed978c9e2e0d0a358b7c6b658f9f71bed908c888dc87a3e9432e60b432d49809691fda446c22e41b0ee5794248a131a7cb2b083e7638b58e0a94165ea482bfaa304cc39c7bc74f029eb0492c516ec808c54b3d8ffa60d722f2f9cadf5748c1059855499d9c4d8bdce3ff1ca8de92919160aeda05df3e85174236ea8ee8de8d10f1bc3c3fa876146471c4552bd68252f868d65b0a8f6c87c4b4ebc711acdf7d51ad3901faf1e0958b0676923cb5927c6df318b2a13769767cd2842c014d60c431116d142adaf3032c6ea1c20161c041ebd0c5543b9a9dd236c33e73b000772b188710060ef7e125572bf1be1a798ab36830657211396c266addf70370aa49dcb62d575f4d5356b1d56027ee74cc31c99f83807fe677390c5dfeada6055609c66c807768761f234d5387d2910706266f1f38baba72efd2e0725df00d92b9c5ae36ebbcfd047b8b2c1cbdc04665a93b23ab58a5be4611bfe34826a5404116a2b4c0b6c8337c8d5cb3d35aab3fbaf6d8ea937d43fc2d037a203ce9b4215b1dd6d356ae5f99d74dfcce089f2b95de4bc69763b04b25a154b0313bd76060d8c26bdd3f583170a416e9289b3a59653c7760cb8a5772f991a724884102e9490392191756fd0ee4f659b7753fa4b173ffebd2c9ff832a12e84921d94b799a7bbb37c9cb05b75ee3860ec55c75f148a7ed50fc4e8072c97e6bed3ca535b6cebf10c860b7f037425bb614c3d6e5f70b372216579f9af1bede1ab46ebbcfc60f2af8608be1361fcbf9ec128b53a20e5b6c848bee261ba352f99e5a6495430a22ce44381aadcc8e9b1d51bd162631bfcc76a78d3873b0af3907aa34eadd381e99722f669d200132e543ec532bf56ec4820adfd098519dd97f511004313606f1cb5f629f8ee253b34798684fe7953f1252f669fc4f8e9e81b69e1000037ac8aca57a4a610b70d7a073e79168a3c2cfec109cc2379a64928a85c16b14fe0c1b94f528bc75486653ef911095df23017c402f8227a623ba77f5c714c434eeceb7768f405cde68f3bbabcf59cb6e6d965b0fdeb6523d9ac223dc125972e2969a0161c86a44ccde5debc974c4605c82c7bbbc48fb64b334ceab18e9f3932f8b30b97a131c8492da98a10815e9b91db79b2a7198009cb8a277c20b63f78489f4b216e0720b6d0ba6f6ad3ba951e17f8fbbb144c84d37ceeb82de2200bc46bdd3710438c33d10f159eea107fe866b00f6b04d6ffd0e4e61302cb381b2dbbb255f89e41c7a9760d996f4d21531f560435194cdd982c26598fe9e2b0e7dba883b2069e32f2fe5b03f9a867a5b7ebb199b3c103898f31b237594a6c98d6eca09514bebe9753c61b364fc5b1b5ace025eb7d8c166b6d4b02f956febd3a7dbbe14000f6feb20617a900e798a68d78fae52b0f2e75dd30c6d9c1375dca406d160be7b9fa96dcb70a788be0aca1a654cb6705c1b31c45ac6f4e1b58858a56ec3067b94d4c3ca94f55c9d8dca8bcbba0dd04d4a94cad56aee1308576cca2bcb1b0e32daf70314b4ed43485683a83f20feea0659d66ab35f986f6c694a277976aa154f2e24b5728ff3e905a886ebba208db6c10a84b9781f7ff5437880f4e05fd6194ad9bcb6864c8af57eda52764c7f8b9eee367901883f78ff135f0fa298350ec04fd4d8949ee0a7d6fa7046cb2cc61bcf779e516229af95c772e8a34b25b36328fff478642ec20b2271b0a595d9aec14b1d2546baa07b800c324bc68a249aabde068ffddfc32216474fbe77b39f2b40340e0b954e724e26cb66ef8d080c1f75afbe662bcb94035d46de97845d7d27fe72d9624e6f958e5832ef13129d54a026b7db6e6826c6c983837a2a2bec38367f58e5aea65103ea272cf2b148428182cec2153c194c3164bb3af1615b1875eb24e67c90715212e36b3f80d328a784417a61dcace3e7cc7bc9dd2c3ab735e0fe4b1a61c1e5d071bb7b689c4a772204942410e64c3b3e239b3bf4881e0121fcf6498f370264d7382e5d17be21421471b0771028d2e88fe20a3ae60aba55bcde4186f04fdf8099d9672ddfa5e60314fd3d72527d4b1f65aaececb6c8dcc744532439ce29e6b4b5c42bd04983a1ed59278c7a7c706caf2ac71b02e0e5c940989f56800c116814cbb945e48bd04e5ca2c20ce5c87f3e65886d9233d6faf16607638aca8f4aea765454871e80cc633e5deadbe1f7c4154e37d4c1e00ba7db6e2de812b2757fa43fceedab79b318ea060f8413f49358f50e91716564c72b6c4ba12a013121730823772f3dd2474e774e0f2f475be3620c39df1d938ae3ed8bad431cd107facde7dea8428370ab92b4835c94a3f4b6af4695b075671818e656c632ec0274716b7b0710a901be345be4e82cfd08047c6a2e05799c1561a57e31d9814570aa8d6a0f3d9bef7a79a75f54e1cf238856c62e6494f319dd4033782cc1bd457af4336d020487751ad2202f59c1a7a4393d8497e6ad3b025f115f13e62839d8b32b68b2e97e376a401a163ff56bd8cdae26dfd0e9fcb3ac512cef0c17098968dddc5d56d0909f380369a6cfae4c9bbac6a3ba73b35ea5265fa990417209180cbc26ff1d1acffea354de12576e6592b893e0c9057d73f2e103e2c96190ada52ac457f29efe3370df9830cba6b87457b09fb0ef87aed3b78a8c84b0ded2c4bb271dca2545a07bcf6d65d67a0", 0x1, 0x0, 0x6}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000018c0)={'vxcan1\x00', @local}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001980)={{r1, 0xffffffffffffffff}, &(0x7f0000001900), &(0x7f0000001940)='%pS \x00'}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001bc0)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x7, '\x00', r4, r1, 0x0, 0x5, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d40)=@bpf_tracing={0x1a, 0x17, &(0x7f00000019c0)=@raw=[@generic={0xa7, 0x7, 0x6, 0x5c87}, @alu={0x4, 0x1, 0x1, 0xf, 0x3, 0xfffffffffffffff4, 0x8}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @map_fd={0x18, 0x9, 0x1, 0x0, r8}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}], &(0x7f0000001a80)='syzkaller\x00', 0xffff, 0x6a, &(0x7f0000001ac0)=""/106, 0x40f00, 0x7, '\x00', 0x0, 0x1a, r1, 0x8, &(0x7f0000001b40)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000001b80)={0x2, 0x8, 0x200, 0x7}, 0x10, 0x7ce1, r7, 0xa, &(0x7f0000001c40)=[r7, r9], &(0x7f0000001c80)=[{0x1, 0x1, 0x5, 0x3}, {0x1, 0x2, 0xd, 0xb}, {0x4, 0x1, 0x5, 0xfdb5ca92b067f208}, {0x5, 0x1, 0xd, 0xc}, {0x5, 0x2, 0x6, 0x7}, {0x4, 0x1, 0xe, 0x4}, {0x2, 0x2, 0xb, 0x7}, {0x2, 0x4, 0x5, 0xc}, {0x3, 0x2, 0x0, 0x1}, {0x5, 0x5, 0xa, 0x4}], 0x10, 0x4}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = accept$nfc_llcp(r7, &(0x7f0000001e00), &(0x7f0000001e80)=0x60) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000001ec0)={'bridge0\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000001f00)=[@in6={0xa, 0x4e24, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}, 0xe}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x4}}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0xc, @empty, 0x5}], 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002080)={'team0\x00', 0x0}) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000020c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002200)={0x6, 0x7, &(0x7f0000001fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000002000)='syzkaller\x00', 0x4, 0x37, &(0x7f0000002040)=""/55, 0x41100, 0x22, '\x00', r11, 0x25, r12, 0x8, &(0x7f0000002100)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000002140)={0x2, 0x5, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002180)=[r5, 0xffffffffffffffff, r8], &(0x7f00000021c0)=[{0x2, 0x3, 0xc, 0xb}, {0x4, 0x5, 0xc, 0xa}, {0x0, 0x3, 0x2, 0x6}, {0x2, 0x1, 0xf, 0xc}], 0x10, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000022c0)={'veth1_virt_wifi\x00', @local}) 3.721015626s ago: executing program 2 (id=6034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x44, r4, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x10}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xfe}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r2, 0x80000003) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a09000000000000000000020000000900010073797a30000000000900020073797a3000000000740000001c0a01040000000000000000020000020900020073797a30000000000900010073797a3000000000080007400000000240000380080002400000000108000140000000002c000380140001007767300000000000000000000000000014000100767863616e310000000000000000000014000000110001"], 0xc8}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000006bb753bdb2498cdef8d82ba1482871000000002c00128009120100626f6e64000000101c0002800500010004000000080005000000000000000000000000005cae4a78a8e227639124ba27867882392e09f2dc4ee09d2bcd193a7c8ae415c6daaaab2e67da58be671b91546bc867aac59d511be3705f230a"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) 3.720298705s ago: executing program 3 (id=6036): unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0xa0, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='2'}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000), 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="61202a3a2a20776d00ca7ff02a01f64671aa218354f44653b67f03979282e5679c164ccd4247e822f06877fbce1df2500efadf8c042edecd7ee72a1d2cdc1138556aff89f7c138e36f655f429d077efafcb850c472d88a084489271e1fa0421fe30f6afc807ce3f734525f58493a8a48c44114d39d03fee708c016c940b985abb97ac804648bee64"], 0x9) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000400)="80004b77efe55463", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES8=r6], 0x30}, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000280)}) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007000000", @ANYRES32, @ANYRESHEX=0x0, @ANYRESHEX], 0x2c}}, 0x4000001) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x4886) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f0000000000)=0x4fd0, 0x4) bind$inet(r12, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r12, &(0x7f0000007fc0), 0x800001d, 0x0) 2.885557538s ago: executing program 0 (id=6041): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8224}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x15, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0xf0, 0x2, 0xf, 0x7fff, 0x5}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xe}, @ldst={0x0, 0x0, 0x0, 0xb, 0x5, 0xfffffffffffffffc, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x27, &(0x7f0000000140)=""/39, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xc, 0x7, 0xffff}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000300)=[{0x4, 0x5, 0x8, 0x7}], 0x10, 0xc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f0000000000), &(0x7f0000000640)=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.378890541s ago: executing program 0 (id=6043): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40010) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) listen(r0, 0xfffffffe) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x8810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144a8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00'], 0x24}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000400)="0589", 0x2}], 0x1) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r5, &(0x7f0000000480)=""/198, 0xc6, 0x1a2, 0x0, 0x0) 2.121282257s ago: executing program 0 (id=6046): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x3a, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xffffeffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xa76, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}], 0x1c) syz_emit_ethernet(0x110, &(0x7f0000000200)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x17, 0x4, 0x1, 0x13, 0x102, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @empty, {[@ssrr={0x89, 0x1b, 0x92, [@multicast1, @broadcast, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x24}, @local, @multicast2]}, @ssrr={0x89, 0x13, 0x9f, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1]}, @end, @lsrr={0x83, 0x17, 0x2e, [@loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010101, @loopback, @loopback]}]}}, {0x16, 0x4, 0x0, @broadcast, "fa4a985b584094e9675c7a40aaaa23d9547e3b9094cb155456b024bdec790ce274d4009760e6a9e5436cc507237d115488c9a6e4e5b12e4bb8183ea884b8f9c4a34d6c1b774c48e253e1610c9b40572c794aaa17c6481cbdc41443806407476fdb5e81d5f97722bd48e3cbe7f29b5b09c4371d17071880d12262ea351a2527d4bf542da675cf32844d70942c276468282a88097f3866558c1100fa83fc9c"}}}}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008014}, 0x40010) 1.802407795s ago: executing program 1 (id=6047): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) (async) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0xfffd, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4201, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x1, 0x5, 0x3b}]}) (async) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) 1.689324724s ago: executing program 4 (id=6048): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffff8, 0x4, 0x8, 0x0, 0x2}, 0x0, &(0x7f0000000900)={0x3fe, 0x0, 0x0, 0x81, 0x4000, 0x0, 0x7ffffffe, 0x4}, 0x0, 0x0) close(r0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x4, 0x70bd28, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}}, 0x40000) 1.627641474s ago: executing program 1 (id=6049): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100004, 0x0, 0x0, 0xfffffffffffffede, 0x0, 0x0, 0x7, 0x0, 0x401}, 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001800), r0) socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4) socket$inet6(0xa, 0x3, 0xff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f7465616d"], 0x110}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="189d050800ec0c0000000200000000ff01001801000020458ea5d844d22bf0ce85fe6e008a4c8dbc7a903f4d67dec4a25959c8a7080000000000000081e07d122005000000a35530d25ab6d5e03b5db0d79bb8ee9d1f51f2e2db50a210e978efbd83324eb99a5662dc"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'bridge_slave_0\x00', @broadcast}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="06180000fbbbbbbbbbbbaaaa0000aaa188f5f0bd3362ca829c35b2730a18d7f3d208d7a6a4fbc9a9fbbdfffe5eb9afe972866337be2abb51b6cb7868ea99ae6979a3d0d7038796eb25aa"], 0x72) close(0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r5, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r6, 0x0, 0x0, 0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff38}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES64=r7, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r9, @ANYRESDEC=0x0, @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.621184505s ago: executing program 0 (id=6050): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008001300000000000800120000000000"], 0x44}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r0], 0x18}, 0x0) (async) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r0], 0x18}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x1000, {0x2, 0xff, 0x4}, 0xfe}, 0x18) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x1000, {0x2, 0xff, 0x4}, 0xfe}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0xd3, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x89, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000580)=0x4, 0x4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="00000000b7315fde0031f5bf5f1910674cf453119385e7c22666f9e19095576fcac2c23370d50f0deba04f0d8fe591e8a0e7c3a1757e4fde7846c0cafb38abf1260a794218af593629fa25829c89a706d4d9a1ae1d6645e7d9f4a2b5db39c10a71", @ANYRES16=r3, @ANYBLOB="000126bd7000fedbdf25020000000c00050000010000000000000c00050000000000000000000c00060003000000000000000c00060000000000000000000c00050005010000000000000c00030008000000000000000c00030000000000002000000c0003009000000000000000"], 0x74}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="7400010800"/16, @ANYRES32=0x0, @ANYBLOB="0b0000000000000054001a8018000a8014000700fe8000000000000000000000000000aa300002802c0001800800000000000000080000000000000008000000000000000800000000000000080000000000000008000280040001"], 0x74}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r6 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1a}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="64723b9ff18da85c7f84761ca6e6eaf1a2cfe59c766d66d1a1bd4898b64e28368b34ed425b59594f48717c8c070c79a7c78a3aa3b487fcd9d70707c262ee0a36f746c3922f2cf269d3d4134b0e68f498d74fceff7becde66", 0x58}], 0x1}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000780)={{r5, &(0x7f00000005c0)='nbd\x00', 0x10000, &(0x7f0000000600)={@_ha_fsid={[0xb3ce, 0x4]}, {0x4, 0x2, 0x3ff, 0x400}}, 0x7, &(0x7f00000006c0), &(0x7f0000000700)=0x7}, {[0x4b, 0xffff7fff, 0x7, 0x3]}, 0x6, 0x29, &(0x7f0000000740)=""/41}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000780)={{r5, &(0x7f00000005c0)='nbd\x00', 0x10000, &(0x7f0000000600)={@_ha_fsid={[0xb3ce, 0x4]}, {0x4, 0x2, 0x3ff, 0x400}}, 0x7, &(0x7f00000006c0), &(0x7f0000000700)=0x7}, {[0x4b, 0xffff7fff, 0x7, 0x3]}, 0x6, 0x29, &(0x7f0000000740)=""/41}) 1.285149942s ago: executing program 4 (id=6051): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3abe9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a86", 0x28}], 0x2}], 0x1, 0x40800) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3abe9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a86", 0x28}], 0x2}], 0x1, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto(r1, &(0x7f0000000180)="c14ab7164d792a172b0661043cf619887c904c60d6455e25ca85272b40701da7bd12e8b4993302cb036c252021f4a470dd07b29f12a931b5fc8f5c250601f4c18dfb0dfbc7cb0a53853e4ddfdc52c172abcd2486d52dbb08d58ac5342951b849f40d9792db13f8e0d6fa34835b890f2e73af09191130e78f351831f4617c17dcb87d8e9db30a875630aa26f5d50f057ee282b958172dfa8831e23fd99b7846ceb32ce058d20ceb935bca645cef265387d3b42bd6070588a2ba8cbee940093c3d88ae025978152bb91818714bd460bf5432a5afeef5dc229cc5d977642bbd4b9f02bc8de5d1a8ffadb83af6d1a5a871957a2c304e", 0xf4, 0x4000008, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e00010000000000fedbdf2507000000", @ANYRES32=r0, @ANYBLOB="000000000a0002"], 0x28}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000200)=0xd, 0x4) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000200)=0xd, 0x4) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000280)={0x1, [0x8]}, &(0x7f0000000400)=0x6) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r2) (async) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r2) syz_80211_join_ibss(&(0x7f0000000300)='wlan1\x00', &(0x7f0000000880)=@random="a967abf843c5631259b44f294ec968b190b66410d409a667ecc4bd", 0x1b, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x5, 0x4, {{0x15, 0x4, 0x0, 0x26, 0x54, 0x65, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0xf, 0x3, [{0x7, 0x9, "9b7de7c50274cd"}]}, @end, @lsrr={0x83, 0x7, 0x8e, [@private=0xa010100]}, @end, @rr={0x7, 0x23, 0x27, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}]}, @lsrr={0x83, 0x3, 0xcb}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000c500000085000001890000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x7, 0x700, 0x6f8, 0x9, {{0x27, 0x4, 0x2, 0x1b, 0x9c, 0x67, 0x0, 0x10, 0x2d, 0x0, @multicast1, @multicast2, {[@end, @timestamp_addr={0x44, 0x1c, 0x5f, 0x1, 0x9, [{@broadcast, 0x28000}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x80000001}, {@loopback, 0x8}]}, @ssrr={0x89, 0x27, 0xf4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @loopback, @local, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast2, @empty]}, @generic={0x17, 0xc, "a63af53c256fb1f3ef87"}, @end, @timestamp_prespec={0x44, 0x2c, 0x74, 0x3, 0x5, [{@local, 0x1}, {@local, 0xd}, {@empty, 0x2}, {@broadcast, 0x5bcb3cf3}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x9}]}, @generic={0x7, 0x7, "733259f9fd"}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r2, 0x0, 0x3) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x1c8, 0x1c8, 0x98, 0x0, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x4, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 995.161867ms ago: executing program 1 (id=6052): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x4000800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$nci(r6, &(0x7f0000000480)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x0, 0x2, 0x0, 0x0, "6e4d9143910a8e9429019b4d5e932b"}, 0x12) ioctl$FS_IOC_MEASURE_VERITY(r6, 0xc0046686, &(0x7f00000004c0)={0x3, 0x1000, "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"}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001740)={&(0x7f0000001540)={0x1e0, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d88fd1fb33ffa3555c266c085b1ca38b0b2e1f8580ee8fd0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c11dd7c0a51fbcc2"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e7e615d4b338ed0ce6b6d5bdf4d52ae78cc6a4e70aa927b643741c287d5eab17"}]}, @NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="81a2397cb1e421603cf3feb58cfbb58fa624a9346c16076d06dbc161cc455f51"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="87b138dfdf977626efda242088be5848"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "760d6c7436102643"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f39d3a6b947aad2a9fe58bc2a98b2a0675116f205f8af826d8f906daca169b88"}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f5abe3b8123e985c58d0bf1a63a6d4b8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a4fd8df6c96aa55e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="0951f9e173dacfe4bea290d18daa71b7"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="45073fbd59c1610c3e8f77342dc938eab382fd82027d7621b3bd363d5b745ca2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fd6d4f6404fb1c3c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x401}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5b16618beaede073"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5ffd2476bbb01f94"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d1f0ed2ffec4ba4115184401ae41ae10"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3a428f87f723a6e90d55356d1623e88c252a3dabf44a6723"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="28de106d82e2e4b4559adbbb85d82f3e"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c4eb8e76bb411138496c8067e9d9662619303fa3ce24adcb"}]}, @NL80211_ATTR_REKEY_DATA={0x14, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x40, r8, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}}, 0x4000004) r10 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001940)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f0000001980)=0x14) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000019c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bind$xdp(r10, &(0x7f0000001a00)={0x2c, 0x0, r11, 0x3b, r12}, 0x10) setsockopt$CAN_RAW_FILTER(r12, 0x65, 0x1, &(0x7f0000001a40)=[{{0x0, 0x1}, {0x4, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x6, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x2, 0x1}, {0x2, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x2}}, {{0x0, 0x1, 0x1}, {0x4, 0x1}}], 0x30) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000001d40)={'gretap0\x00', &(0x7f0000001cc0)={'syztnl0\x00', r11, 0x20, 0xfdab7c5cd7ac037e, 0x5, 0x0, {{0x16, 0x4, 0x0, 0x4, 0x58, 0x64, 0x0, 0xb4, 0x29, 0x0, @remote, @rand_addr=0x64010102, {[@rr={0x7, 0x7, 0xa0, [@multicast1]}, @timestamp_prespec={0x44, 0x14, 0x8a, 0x3, 0x9, [{@rand_addr=0x64010102, 0xffffffff}, {@empty, 0x1}]}, @end, @timestamp_prespec={0x44, 0x14, 0xfc, 0x3, 0xb, [{@remote, 0xc8db}, {@loopback, 0x4}]}, @timestamp_addr={0x44, 0x14, 0xc2, 0x1, 0x8, [{@multicast1, 0xb}, {@private=0xa010100, 0x7}]}]}}}}}) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000001e80)={0x0, 0x1b, &(0x7f0000001a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @ldst={0x3, 0x3, 0x0, 0xa, 0xa, 0x4}, @call={0x85, 0x0, 0x0, 0x4c}, @printk={@lu}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001b80)='GPL\x00', 0x4, 0xde, &(0x7f0000001bc0)=""/222, 0x40f00, 0x48, '\x00', r13, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000001d80)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001dc0)={0x1, 0xb, 0xfffffff8, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000001e00), &(0x7f0000001e40)=[{0x1, 0x3, 0x3, 0x4}, {0x3, 0x3, 0x1, 0xb}, {0x5, 0x3, 0x1, 0x7f15a48ba1e8d4f7}, {0x2, 0x1, 0xa, 0x3}], 0x10, 0x5}, 0x94) setsockopt$CAN_RAW_LOOPBACK(r12, 0x65, 0x3, &(0x7f0000001f40), 0x4) bind$tipc(r12, &(0x7f0000001f80)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000001fc0)={'vcan0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4b, &(0x7f0000002180)={@empty, @empty, 0x0}, &(0x7f00000021c0)=0xc) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000022c0)=@generic={&(0x7f0000002280)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000023c0)={0x6, 0xe, &(0x7f0000002000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xcb38}, @call={0x85, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @ldst={0x2, 0x2, 0x4, 0x8, 0x8, 0x1, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x7, 0x0, 0xb, 0xfffffffffffffffc, 0x4}, @ldst={0xb4fd24eeb96597b6, 0x0, 0x1, 0xa, 0xb, 0x10, 0xffffffffffffffff}]}, &(0x7f0000002080)='syzkaller\x00', 0x9, 0x9e, &(0x7f00000020c0)=""/158, 0x41100, 0x1, '\x00', r15, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002200)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000002240)={0x4, 0xc, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000002300)=[r16, r14, r12, r12, r12, r12, r12, 0xffffffffffffffff, r12, r12], &(0x7f0000002340)=[{0x4, 0x1, 0x5, 0x9}, {0x1, 0x4, 0x8, 0xb}, {0x5, 0x2, 0x4, 0x8}, {0x1, 0x4, 0xf, 0x7}, {0x5, 0x1, 0x3, 0xa}], 0x10, 0x800}, 0x94) 853.293896ms ago: executing program 4 (id=6053): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x14, r3, 0x401, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x60}, 0x2804) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, 0x1}, 0xc) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@broadcast, 0x0, 0x0, 0x50, 0x0, [{@local}, {@dev}, {@multicast2}, {@broadcast}, {@remote}]}}) 700.998867ms ago: executing program 1 (id=6054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0x6, 0xf}, {0xe, 0xd}}}, 0x62}}, 0x0) recvmmsg(r4, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/1, 0x1}, {&(0x7f00000001c0)=""/64, 0x40}], 0x2}, 0x8}], 0x1, 0x2, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x401, 0x4d}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7}, @NL80211_ATTR_SSID={0x17, 0x34, @random="2cfe2a1fe41ba908e0212f915513325e6e6ab2"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x248}], @NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x12}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x3}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x9}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r1, 0x501, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x10) 502.064088ms ago: executing program 1 (id=6055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_buf(r1, 0x1, 0xc, &(0x7f00000006c0)=""/43, &(0x7f0000000700)=0x2b) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x7}, &(0x7f00000000c0)=0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)=ANY=[@ANYBLOB='\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbdf250600000008000b0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r5, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xa}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x62}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c0c5}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x33}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000001000000000000000000008500000075"], 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r6, &(0x7f00000004c0)="a5c1d6f0f0d37e992faec60cdc5a5d9e8699268d61ba6fe5f5cb7653d128f7e83984f5181bf99dbca4a903281255312004949d57d974943607d87924c577326172ade2cd29dc0b95f9e87c1e4e948419009b9414b1106eae75a8fcf98a39761de877bb6377490081dad0ad54256cb28a41bde4080ea605c436a7521cc4f9fd8f054f38d25014f065dc6ed87e660fb84d607bed3bd65a121b46836a06c27339f5f37c", &(0x7f0000000580)=""/193, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300001a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900b2a5ec347a3100000014000380100000800c00018006000100d65b0000140000001100010000000013000000000700000a"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x2010, r8, 0xffffe000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 420.211067ms ago: executing program 0 (id=6056): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) (async) 349.514659ms ago: executing program 4 (id=6057): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0xce, 0x0, 0x0) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x40f00, 0x8}, 0x94) 230.131911ms ago: executing program 4 (id=6058): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="691a840869b4f05379922630936ba6d27a624d08e85fc4b7caf2b51a99a09cc8bbd04f5027bde7234a8e10aa6226f7b0aa91edacffdf2b16fd65e3", 0x3b}, {&(0x7f00000000c0)="c480a5f7abee17a3c9bbce41acb6b14e3a843969127f7434fe25c4c53c2d001be977e30116ac079ab8194df85fb8842d07877953c5638a2690011730ed14ce6d4e5ac27479390a7706c69f02097a5bc83a03d92f99ba", 0xffd4}, {&(0x7f0000000380)="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", 0x11b}], 0x3) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (async) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4888}, 0x4040) recvmmsg(r5, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000000980)=""/90, 0x5a}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000001840)=""/4104, 0x1008}], 0x4}, 0x70001}, {{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x5}], 0x3, 0x102, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x800) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x395, 0x2, 0x8, 0x20121, 0x1, 0x80000000, '\x00', r8, r10, 0x5, 0x3, 0x5, 0xd}, 0x50) (async) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4, 0x27}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x260580e9}, 0x810) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESDEC, @ANYBLOB="010080fffffff6ffffff0000000008000100030000001400048005000300800000000500ffffffffffffffff02006f0618be32def3c2abe8a4b54c03a4ab030000008a0ee2595913d1a964dfabc7e5b9554a2cbc2f438ddc24bf37089d4582b52b90cc83017727768503f8824f105eb3c0038ab1b7f12794ab34c61a9df10d1883a980f0624a5892fa14d2e0"], 0x38}, 0x1, 0x0, 0x0, 0x20054090}, 0x0) 172.995009ms ago: executing program 0 (id=6059): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x6, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000001340)=[{{&(0x7f0000000080)=@can={0x1d, r1}, 0x80, &(0x7f0000001180)=[{&(0x7f00000029c0)="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", 0x100c}, {&(0x7f0000001100)="9df9d5f100"/18, 0x12}, {&(0x7f0000001140)="3e2a39e907c7824bb0cc3925675c1a01197782", 0x13}], 0x3}}, {{&(0x7f00000011c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x43}}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001240)="6dbdf9cba9b2e0ebd01fee55728a51f32c08e0c224722bcf6a342774ae1ee0d32a1cf66a2de5414155f7ea4be89110ab79e8376d6b0d8f513c05c72792d904579c95006f3efe10dd78f2f47c65c4943ee1e13ca883580b27f36a01bbebf5045c883701eebf2fba03e27812505828e67faff3e1b90092e34f3bd92b534727b73943766c2f33171a97fc3a237d8bbe", 0x8e}], 0x1, &(0x7f00000016c0)=[{0x1010, 0x115, 0x2, "c07249c379fb092600ff7a57c45cd0470c27bf4414e0f3719b725b710baf164dcaadf491b8e8669c8a501e5f2c2d71b50689e11693cfd0cea4212a4f8f892fc4701f132d0be2023f12144c7a877fcc7c72af76d918b493e2aa47b283628859d2848928fbea5b68c2d36c67174e5490b159092f042a8a1e6ff907de29a67e935f7b14eea2f710a2ba37d734205205ef11cb628de56440834987e14158d46091047193c3f4e3e2ebe8add65239277d60d702b3ccabb2050c69f39eea7989c472a0351f9075d2f2f4d73c96427d5fe77f6437b9ad37fcd5ea49a7122c8ea4984d306974ead168ff87b3b6ccfaa03299a1fb5d78f1fb2e77dc41c659e52e5799f32b830c8a76d57a7fddf3d5fd65dd8b573453f2f8ac03d8e560fcf11ed6e2751de695e6c1ecdf8e87c7f998ba97e9f7dbe8cbacaffc50aa9602e70f26a45d21a4e4405afb9773680db8826a4c440251c5e3e3fc71a7598a5fb670044ef2c5b09cd4be3bd3fcc33370daf3dc5a507dfa0e5b21a896ea0fb2f5da1542fa3c08e4ada3f08442190bf10c691fc541039003999578f297f26c78a7c3df9473466490a400459b102e5d8d758a0bf53ec6b9d980e4ad447cbf8c184455250e76532144a7e7654a015b1870fed712a67ed64aa9b2c713c07084a2dad2b7fcaec112e7940ef413569a806118cc55778c536ee49b839818fa85954b5136f51ec45c4bdd3761c88e377c4897c4784b80c56ac3a74a8e709048a0c957b7b627604ce12459488c131f49f754343adad41f2cab22b95a876e3fbecd409bd27040c78b7b0ad3c3222e2ff363e840c716c536fe29bda19844226ffeef1a10ce1f44c0a8ac1607b5b585562dbfeaa362b160b5ea5c134f96f7a8fc7e80e7ddb7a40c4c4e4e65009348d909163a4ed2754f7f2a34a2266a7a9ab32dd19ad6e8dcbfb18b4a14d08cc0c709b58c20a2d56fb7b9d72c0ffac5300d16afbb7429e2f16f20d2be79a04e13ab056ed53f671bf5db17c28c26c5a7b1f501f0944e2be536e0f7dff0cf2555dd092ddc0162679545950a8f31cf1418d6a5da56a03bffc1e4625436b9e528ce769ff42bdcee6877363ae4cc70fd83c83e0f637c5ae22f4ea42d6ce96b3ef3871aebc48f21be72bb4c8ff2bea2c9410cd8adc4cccc81f32a1f8482e64cbb50bb068bf0e2298f35402385270dc22cada374be80a721ee92601c09dc1e1b2d815794c3c82efa74c4948fab131abd0e8aa25fe909774fd9c3c389c2ad51d4c03e886c7c8d8ebd6b6076647e9ea507e6385cdb7b1385b8128bf86878368f51d9ff480f5eda0d28690d3ff694421bd88f172152a3ab062633792c342627be261ed5ab6105cb5283b8385c53cc62fd2c0ff69b5d6ecdad04c04e1910cff05abcc92faa5455e58533ae5a1df2a0ffbd20f36028ee72822073f3cfe03c08749f027734a4bcd7ea7666ce998c376f6e49747f9f014e5a4d39a89b7b81bc8c5ff342c31fc7702574ae7eb5fba04c7c3f126841899d3ae2fe85ffa5604d8e038ba17fb5b0d51bccc01a664de20cf674fb0f3abaa0ec3e9ea3eb68bedb877618a4eb6a0d09e5043c4cb8246a8656d86789a188dfd5cbe6045411cfc3cc7c4bb70c5ffce267d22e7209526fa30efd9e5de2d9fcf77a9910dbbc4c5cfe0632e6a5462a2112b9fb7f0aab06e8a152520f2dae35b80e7a978d31cdd8fd4379dc5e3b54ebc7ee96cdd7d7fad8c611d6dcdd95dc121a396d6ba30a024ad36a96ef016019b14b920f8ae43677e3e85292c46990fa25fce333a9440883b61f0a9736dca32c49d2f08020f0f8270e4116c83f97f5dfa0aefd3d64b2d387a6ea8fb18bfb58412cc215ceb2ad54c9227810b6705cd34feb19086bd1bd711609fcaa9b3280445b2fe18d9666a667beffe7673aa6e29892bd7193cd877bf6226155650ec76e4aaab4f46289168c33ca80d9d03612c15be414e9edd647f468b9a79b54b82a844451f4e07c66efb6aa9376cf427f180b3e75ae283eef3f7ff23fd5d362ce2d8220442f944db2802401bde5dc923e2ab80eb20856ceb52db900b2ccf57b016e5beb4cc96239660f5b5560c84cc2d80888725612f95190f6b7e04f49b189d45f9e8be6b1d359c2dae83099bfb533e1fa6ea005209783eeeb06f8bb2ff6734bfa3c9f1f4bfffb2b43081e16ab1f2d498dcb1fbe04d9e912d2c49bfe4e41ba43fd65bfb305be83a89f6a7e250a5f23ec05575e556e3cb9b12c217a02cde2c729c7404d2e0bb448b2c026a2f74ab757c78dd37f017b2342b685d9288832f3b74777ae56379434a5388a5f666c8930eef14637dd941f349364d771d96c731c5551f29e204e27d809b5476d6816375d97f404a7c357ba356919a0d2b42f931c308f0d1b96dff564d9140a0b400da522b66fc5a17d2f7ee93439f01fc8ec26a4b719b5425cf91c1660b3ba6a06b9d6367bd2dad6e48dd5a837054c14b0672f8b193e23c094d153f56024bf68c033beedbf8772bd8164e3a84df3d2b5a47cf5bebc65c89fb4ca2632507f6ef6b2fea4d149c55a28ead5d85a7a93b874d6f713ee9909a8c91f0a86f370b6e9aabf73c55f1896219241d1ce3f2cee4ba96cc8f975f512ee657010a1004b439562985eea20758b93573b732aeee8f2f6c8a95917544e8da431ffc9d46ca463a67d0136c948bcf6df6c8ef7e692710aea5ee70d5718e17aed9e790a57350346112b3afbe583d2c5aec6ee0c682f44da72b9847113e1f8c9754902f33948ccd0c00890b417fa57d672a6ae535188326190002ea1620b317ede104b3224e1724bc523ea49c6f6dac9da102771e30aeda8a82323ad542aefa6561f28d96e520f27bbf7a72636710b3149613543fa91e49fa4b2a7950621bbec099301b0f9305ace18d4738a5887fce61dd652bd21f5e87e386fa87ff41fd2b8214675b43712c189ef0ed59e44d5c6a1921a1f3203d884666dcaf909244e347835ac79f2a4280107d67c422c7e2c57f0808e6a91a724ef36498d1ec8555d6b70c732778672261a2cfa15de5579449ddc58c3ef04a3bd7e7628427c4f78848cb95c9e2093b56a3a11746883f26d7a05e7d14cf3e74610e72f678c2d07deacad9a06fbf4f9c0b0e2040015b0ce296aa8869df44b7e177bfe51aae891c2a7cf42ce85c9de4388f6c1bcc0f76db7d151fd77b5bba46b67b8454abc9e8f5d651b48cd68fa5f4f4aecc03416103a5b0aec1ff34d1976e20fd86cb0f970263b426701194ce0412aa7d4a5efabe4bf4db8bd91808d87c37f992e694bede0c0992e10a0b1297ad06fd382a9a3e83f287eb66ff1ad8f06d44a5d6f170d9da076042a5d14ea6126ec722764fc43cf2efdb8f6e3d6a735b6115d9bf11bd4bd7bf938ea3a921f8f355991c3f8a45e2cfb8cc2999e23c699b2074fe1edbad3a0d00cf143124e46a578ce76f713746720e7b541af911bad4c9d6fefd3e25886bae0317c67638df34c415c95e891537c9200ea1827543740f1416e1fe8a9a2d8ccaa6ec72277f84db79dbe1feabbdfa5cfac1f5a0b63c5213a13c0c4d5fa00ac1aa704c4d0b2cbeb162fc5fba06bfe5776f69a74e137e1f7935606c77f8ec633ed9a824e3c03b6943d500daf2adba92cb88a243e35993e73bffb3492b3d93536efda852259e93b6f90d9bae8610c792f6ed729869009d97bc251ebb37ac12b51c70cec7da9a51548cdb7df429c6d97d30445c6ad75358e5e4c9769e7040c04a0f577c304dab1d0df3a37670b8df6c034a8310552bfe621b0f6e2f27a86ac77dccdd57a80e26c57450d0e673f61a276aae1766e51c70ab3e060c5abd24e7b7ae2311af0da8fe30a505ac6901417d4ea2f03fd0cafa9bf530e81b7d204bad7c89d0ab0c9407593c4ff7368c8e14502d59deeaaffe80cc0545110a7a162dd683107e84bfb98df971d21bf5ba7762e100b74149e99723ed6999c370a160b0b879b66e3a4fd79218ed2e7f2884fc7786192c7489e68abb9e589538988cf242b292d5315494dcc0d7768c33d9d3ebd897496f62d5d9256735761f12a354521a0a65735cdfe358fa1d9d6417521a035a03af641620167f769c89963624399ef1a081d90432b800914764edb3f8dc111bbaafbb085b4c47cc16b325d67feb70039f741ad1569cb346260984a2ac651c6fd3050601cf65330f0d41ae64be159c4af79b0144a577a98aedcf515074d38d3364bbf49102ed2e7be668a40076b232b0633a8a7abfd35f6ea3bdee343db4896fd5e36f599977363df99595db27bb8a9ce00d5766dfb9c43fa5b06facadf1d997552d052ef9e8cab2afa456abf2f4a7a598796c654461b01d5ccc9e6de949fff9d5f042e66cebc25cd59cfc32861a737711b3a5f72b7668b23b13240f148a8b9df0acefcff35a45930d398a2d6fe6213b78921b19d322163093f427820f030e58d9ffecd2c677316c782d069977ce91fc4676ee3dce450a4fa1f5cd6b46ff3c4cac435d61b686ab6a352ea0ed6742075eaf1e0eb8a0ad71e66fddac33721e6180db326b0853eef5b3d3bdb5a9b157acc882881176d0974fcd6061ce79e2b24f631464cb55a1005efce3d3a41ac70343cdf3becb4c0d433ad988e45c5776e76b122c66851d8b04ff5dd0becd4c53655cf43743b04ca141856cf36de666c19bb1a4c45aab7ecdc4c644eae3b67bf75b16c15f034016cdf781c8e344a9f305044624f43b79ac361f6c5c029da4b9db19959d766fc0fde2f0e32b89259422cf043ed3a46b8290a729f724b770243e893aa85221112b648fbcd83f14df558fe7e759023c3fe364f37a46039a3dc7a8237fc3c6d2905e1722ae195a5996ac3f2e6436281572fb682448f098a8473e65e83941eedf8184a206834772e0b1627ab1431aae981e70d481d614a75c8ef05f87c4387bf64e8f3aebace9135147c517c3b4b1b077e6ae319d500ddc56f6a7e2b371a3fff4fd790e0da1a19661d187acf6e81f0e7dbeb71698550f418cbecacc42e6fb0a863747dbaa3e4b2557555169b17fd530093d557fa1e45082aea1d2a48c5de6a93fc59f40f6675fa4043c442b4f848e8b8d43945303fc637821974520b547b4a96f8eb6297f957e0009f0c1d26e64896b70d5b95a75292eecc11f00bbee49a12ed10bd2624a7b59acd5172cd22062c20d7f2640154d4a6f87d36b8b48848f8ce18ba8a537c6b397a2c0389ba0e2136999b72576cb02f4faeee745c9324991eb57ebbb6a16ee8cfb2babcc5642e073d7429bbf5177fc4c1654bc7aeec260d28e9330b32854069806a89b84010f52962d026bd32155b22d19514057d14cd665b0f82756246c86979fbfd22451eed1efbe5033425f2f84a91be6c502befeef0e36ce1c8c6767c40a4b7f2f28f23ceab477d63cf13f9bbaaff22ee30cff12c15e4857c81ab42606e1b1b0f46d1bc556cbc10b0e0b1b405145643387b8570b3e9352823a589fa1963ec5fc5c8deecc082059e11fe49c412e7ee34ebed74d2547cb68b0bf21126a9bfa86225aa785d2579ffe65798c8aa02700b044909b83242d37342100cf4d1e1cdf0352cc8d6e904ccaa4712cf544eb47230faa3064f276ca87b0e009782369bbf62074147b78984688659fc36e4c1130e5b1b2abd00adf7d88c60863b723d134d48b2b2401fac6b9b9e4bad324182bde4caba0d6632c248f165d0f92b9fa53f3cb7762e7ec86ffb11c8dc66b22ce48b5772037f7108a4a2823de8de1b7f455a2dc2bfc98278d604209acdeec9d50e93dd8b197fe2f887a0113206e24cc3c2b4893b34366b814c2c7831eb03e665c417614ce0"}, {0x10, 0x10e, 0x8}, {0x18, 0x181, 0x0, "68f79a"}, {0x60, 0x107, 0xc, "0c44eec8d24d43d5c12304e393e2b18cd811776b4c480d4c6d2a8bbc2b1649512510a704734ea11ae23d8017413ffd31ec470c52319ab024760eb53e331b5b2d29882ead2e193153756e"}, {0x80, 0x113, 0x10000, "9c8a23b324f86453ea3cc711ba45c6e96bf5a7f56369b6053785bdedf65ef6be972141e47f8b0042519750d48eeba6ea8b11ed091ac646981d539acd5b0a2dc045d536abdff666a4d333ff0a1c920d86786f9ee42c09ced8214e1578144815d2bff2edb103e258c414611fe585"}, {0xc8, 0x116, 0x3, "60652d2d2e905c4a03cf97b21bef55afef857a6add1fde9a0d8c40e345c2a2bbe4c985933424224af8bad6434e62ad967d157f37ae671a887479323025ced74c38cb23aa7b5f09d7191eff2a2edf149474936592ec67bba3c7cd7eff565fb3dfd0a0436b88fd07ca3b2d8ddb64431e283f89c144d436413e1e0e8379f2c5414a262d81d6e93191d3d9928f78ee6d05d20c32645f7a74cdf23225cecdf72666087047bb1d9502ef728fbf54f9749fab7b865a85"}, {0x70, 0x0, 0xfdd, "8d8b98c587330f37952deea11495569073c27d7dde67a9287634ebc0f2cd0e383f7ca11711474c52ce454ea624da3a8377b70019a30bfa42cf557b04823adf16d3dc8463baa05c9dfc4dce03247a607b64ee658c49b985a094dcbb0b743935"}, {0x98, 0x109, 0x7, "624403df909084bad81971c03da12df0427654806990e340d833c1e99c50f3f6c65fa857bada339e8f3a0bc8409450de1bf29ada9a741be525f4b21b241cf4bc235d342f7cb6eee894c3d6e002337cafd0a90c97f120aeba8c293c6e7aeb80221e6dcac37b602a7039c6c5b104de16ae53b27dd201e783990a75d7e5c016007e93f958b3527d"}], 0x12e8}}], 0x2, 0x800) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='p\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f6b657967656e5f657865635f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dc58c00140660"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003780)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) r5 = socket$igmp(0x2, 0x3, 0x2) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x9, 0xc5, @vifc_lcl_ifindex=r6, @remote}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x26}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x15}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48081}, 0x20000004) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r9 = getpid() sendmsg$nl_route(r7, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@getlink={0x54, 0x12, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x120, 0x100}, [@IFLA_NET_NS_PID={0x8, 0x13, r9}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xf30e}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_TXQLEN={0x8, 0xd, 0x8001}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_IFALIASn={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) (async) write$cgroup_type(r8, &(0x7f00000000c0), 0x9) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0", 0x1b}, {&(0x7f0000000240)="d29edb52e9bc960d8858f5476408b13775dd38ec094aa3", 0x17}, {&(0x7f0000000480)="d91197e00f747fc820d9e533b12152b68ad35d567ae53cdee5f5a8747909c8e0f1d6c55d041443d850d904b0108b5d0915", 0x31}, {&(0x7f0000000340)="c3b3269390", 0x5}], 0x4) (async) sendfile(r8, r7, 0x0, 0x10000) 124.596495ms ago: executing program 1 (id=6060): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5f, &(0x7f0000000680)={@local, @multicast, @void, {@x25={0x805, {0x0, 0xf, 0x1, "ad063c96b35a225c188f23409896c9882e7234f98a3578ca6dc1bbbb5579292e2084d4378084b09196229793aefdcb15ebc2e185295e5279d99fe573b35352bab2453264c82fc5904f5100bb23da"}}}}, &(0x7f0000000140)={0x1, 0x1, [0x355, 0x16e, 0x30a, 0x8f6]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000005000128009000100766c616e000000004000028006000100fe0f00000400048028000380d8fd010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="08000500", @ANYRES64=r1], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f00000001c0)=0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) 0s ago: executing program 4 (id=6061): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@private2, @in=@multicast2, 0x4e1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in=@rand_addr=0x64010101, 0x0, 0x3c}, @in6=@mcast1, {0x0, 0x5, 0x2, 0x100, 0x10000000, 0xffffffffffffffff}, {0x7, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x70bd2b, 0x0, 0xa, 0x2, 0x0, 0x34}}, 0x3d}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x40010000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x12, 0x100000002, 0x0, 0xfff, 0xfffffffffffffffb, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x10001}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x2, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r7 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000000)=@l2={0x1f, 0x1ff, @any, 0xfffe, 0x1}, 0x1b, &(0x7f0000000200)=[{&(0x7f0000000080)="a0005bf8f1", 0x5}, {&(0x7f00000000c0)="d3a214", 0x3}], 0x2, 0x0, 0x0, 0x900}, 0x4000800) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x4070bd2b, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x43}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}}, 0x18) kernel console output (not intermixed with test programs): t device veth9 added [ 636.313184][T24317] lo speed is unknown, defaulting to 1000 [ 636.733758][T24343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4611'. [ 636.768869][T24343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4611'. [ 636.928569][T24348] syzkaller0: entered promiscuous mode [ 636.935933][T24348] syzkaller0: entered allmulticast mode [ 637.125484][T24353] netlink: 'syz.2.4615': attribute type 25 has an invalid length. [ 637.134166][T24353] netlink: 'syz.2.4615': attribute type 3 has an invalid length. [ 637.143673][T24353] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4615'. [ 637.366413][T24356] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.414671][T24317] lo speed is unknown, defaulting to 1000 [ 637.490214][T24363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4617'. [ 637.526862][T24356] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.701544][T24356] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.768705][T24375] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.4619'. [ 637.814244][T24370] bond3 (unregistering): Released all slaves [ 637.961899][T24356] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.065386][T24391] openvswitch: netlink: Flow actions attr not present in new flow. [ 638.306287][T17040] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.412846][T17040] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.434966][T17040] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.528406][T24403] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.4629'. [ 638.556405][ T9591] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.602187][T24355] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.685242][T24408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4630'. [ 638.686044][T24355] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.696682][T24408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4630'. [ 638.788708][T24355] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.841937][ T9599] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.858389][ T9599] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.869724][ T9599] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.878975][ T9599] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.914743][T24355] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.113102][T24426] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4637'. [ 639.132683][T24426] sctp: [Deprecated]: syz.1.4637 (pid 24426) Use of int in maxseg socket option. [ 639.132683][T24426] Use struct sctp_assoc_value instead [ 639.591774][T24455] : entered promiscuous mode [ 639.978924][T24476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4654'. [ 640.014942][T24476] bond3: entered promiscuous mode [ 640.027884][T24476] 8021q: adding VLAN 0 to HW filter on device bond3 [ 640.059488][T24476] 8021q: adding VLAN 0 to HW filter on device bond3 [ 640.066528][T24476] bond3: (slave sit2): The slave device specified does not support setting the MAC address [ 640.080320][T24476] bond3: (slave sit2): Error -95 calling set_mac_address [ 640.101230][T24482] bridge0: port 3(syz_tun) entered blocking state [ 640.108417][T24482] bridge0: port 3(syz_tun) entered disabled state [ 640.114950][T24482] syz_tun: entered allmulticast mode [ 640.121653][T24482] syz_tun: entered promiscuous mode [ 640.128709][T24479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4653'. [ 640.191623][T24485] xt_TPROXY: Can be used only with -p tcp or -p udp [ 640.206991][T24485] netlink: 22 bytes leftover after parsing attributes in process `syz.4.4656'. [ 640.367064][T24492] lo speed is unknown, defaulting to 1000 [ 640.469949][T24502] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 640.470916][T24501] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 640.509238][T24501] netlink: 'syz.1.4662': attribute type 5 has an invalid length. [ 640.527700][T24502] netlink: 'syz.1.4662': attribute type 5 has an invalid length. [ 640.666370][T24512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4666'. [ 640.686448][T24512] bond0: option resend_igmp: invalid value (41663) [ 640.704807][T24512] bond0: option resend_igmp: allowed values 0 - 255 [ 640.776802][T24492] lo speed is unknown, defaulting to 1000 [ 640.785082][T24517] xt_l2tp: invalid flags combination: 8 [ 640.941989][T24523] veth0: entered promiscuous mode [ 640.953243][T24523] veth0: left promiscuous mode [ 641.253951][T24530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.269264][T24530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.780017][T24540] lo speed is unknown, defaulting to 1000 [ 642.311796][T24540] lo speed is unknown, defaulting to 1000 [ 642.816782][T24596] __nla_validate_parse: 8 callbacks suppressed [ 642.816799][T24596] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4691'. [ 642.880652][T24601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4691'. [ 642.911525][T24596] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4691'. [ 643.216981][ T9591] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.321687][ T9591] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.403599][ T9591] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.437047][ T9591] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.562889][T24619] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4698'. [ 643.575329][T24619] openvswitch: netlink: Flow actions attr not present in new flow. [ 643.586342][T24621] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4698'. [ 643.609014][T24621] openvswitch: netlink: Flow actions attr not present in new flow. [ 643.724095][T24629] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4699'. [ 643.764116][T24630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4702'. [ 643.788559][T24630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4702'. [ 643.859497][T24634] netlink: 'syz.4.4703': attribute type 13 has an invalid length. [ 644.032353][T24635] v: renamed from vxcan0 [ 644.854777][T24678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4709'. [ 644.859136][T24681] netlink: 'syz.1.4711': attribute type 8 has an invalid length. [ 644.973769][T24690] xt_CT: You must specify a L4 protocol and not use inversions on it [ 645.004866][T24678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4709'. [ 645.125162][T24699] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 645.471219][T24720] tipc: Enabled bearer , priority 0 [ 645.488693][T24720] syzkaller0: entered promiscuous mode [ 645.504447][T24720] syzkaller0: entered allmulticast mode [ 645.545793][T24720] tipc: Resetting bearer [ 646.252053][T24714] tipc: Resetting bearer [ 646.283291][T24714] tipc: Disabling bearer [ 646.299635][T24751] lo speed is unknown, defaulting to 1000 [ 646.313169][T24755] tipc: Enabled bearer , priority 0 [ 646.328480][T24755] syzkaller0: entered promiscuous mode [ 646.346068][T24755] syzkaller0: entered allmulticast mode [ 646.398576][T24760] bond5: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 646.414487][T24760] bond5 (unregistering): Released all slaves [ 646.496545][T24759] tipc: Resetting bearer [ 646.550871][T24754] tipc: Resetting bearer [ 646.589644][T24768] openvswitch: netlink: Message has 20 unknown bytes. [ 646.598564][T24754] tipc: Disabling bearer [ 646.619407][T24768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 646.640686][T24751] lo speed is unknown, defaulting to 1000 [ 646.795275][T24772] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 647.188934][T24784] sock: sock_timestamping_bind_phc: sock not bind to device [ 647.232242][T24781] lo speed is unknown, defaulting to 1000 [ 647.609423][T24802] netlink: 'syz.3.4741': attribute type 2 has an invalid length. [ 647.871893][T24806] __nla_validate_parse: 5 callbacks suppressed [ 647.871914][T24806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4743'. [ 647.976292][T24809] veth11: entered allmulticast mode [ 647.993341][T24812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4744'. [ 648.125749][T24781] lo speed is unknown, defaulting to 1000 [ 648.518196][T24827] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 648.692612][T24834] Bluetooth: MGMT ver 1.23 [ 648.769865][T24835] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 648.825981][T24835] netlink: 'syz.4.4752': attribute type 28 has an invalid length. [ 648.864794][T24835] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4752'. [ 648.932726][T24849] ip6gretap1: entered allmulticast mode [ 649.060780][T24855] IPVS: Error connecting to the multicast addr [ 649.082220][T24855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4760'. [ 649.105266][T24855] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4760'. [ 649.125545][T24855] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4760'. [ 649.165605][T24863] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4760'. [ 649.180337][T24863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4760'. [ 649.190999][T24863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4760'. [ 649.965580][T24878] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4764'. [ 650.235683][T24884] bond10: entered promiscuous mode [ 650.241725][T24884] bond10: entered allmulticast mode [ 650.250490][T24884] 8021q: adding VLAN 0 to HW filter on device bond10 [ 650.513892][T24896] netlink: 'syz.0.4770': attribute type 5 has an invalid length. [ 650.763056][T24922] xfrm1: entered allmulticast mode [ 650.778127][T24920] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 650.791015][T24920] hsr0: entered promiscuous mode [ 650.796456][T24921] hsr_slave_0: left promiscuous mode [ 650.796653][T24925] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 650.810549][T24921] hsr_slave_1: left promiscuous mode [ 650.819814][T24921] hsr0 (unregistering): left promiscuous mode [ 651.796547][T24951] syzkaller1: entered promiscuous mode [ 651.817641][T24951] syzkaller1: entered allmulticast mode [ 652.212880][T24973] 8021q: VLANs not supported on ip6_vti0 [ 653.637829][T24908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 653.786573][T24985] __nla_validate_parse: 9 callbacks suppressed [ 653.786591][T24985] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4795'. [ 653.829047][T24987] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4795'. [ 653.855579][T24987] 0ªî{X¹¦: renamed from gretap0 [ 653.881085][T24987] 0ªî{X¹¦: entered allmulticast mode [ 653.910340][T24987] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 654.022387][T25008] xt_CT: You must specify a L4 protocol and not use inversions on it [ 654.032296][T25008] netlink: 'syz.0.4800': attribute type 21 has an invalid length. [ 654.060906][T25009] netlink: 'syz.0.4800': attribute type 21 has an invalid length. [ 654.100535][T25011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4801'. [ 654.117883][T25011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4801'. [ 654.167308][ T9589] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.176752][ T9589] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.186085][T25012] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4801'. [ 654.210946][ T9589] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.220213][T25011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4801'. [ 654.230274][ T9589] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.242373][T25011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4801'. [ 654.771185][T25017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4803'. [ 654.780235][T25017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4803'. [ 654.872240][T25021] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4804'. [ 655.282562][T25045] bond5: entered promiscuous mode [ 655.920237][T25090] v: renamed from vxcan0 (while UP) [ 656.035037][ T9594] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 656.042078][T25105] netlink: 'syz.2.4826': attribute type 1 has an invalid length. [ 656.064330][T25105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.183504][T25111] xt_connbytes: Forcing CT accounting to be enabled [ 656.234388][T25110] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 656.559139][T25130] netlink: 'syz.0.4830': attribute type 4 has an invalid length. [ 656.570134][T25130] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 656.653449][T25137] netlink: 'syz.4.4833': attribute type 4 has an invalid length. [ 656.785470][T25144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.828050][T25143] v: renamed from vxcan0 [ 657.001538][T25151] syzkaller0: entered promiscuous mode [ 657.007209][T25151] syzkaller0: entered allmulticast mode [ 659.179911][T25175] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 659.190722][T25190] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 659.213983][T25175] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 659.243823][T25175] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 659.343364][T25201] __nla_validate_parse: 11 callbacks suppressed [ 659.343381][T25201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4847'. [ 659.487894][T25212] IPv6: NLM_F_CREATE should be specified when creating new route [ 659.691195][T25215] veth0_vlan: left promiscuous mode [ 659.721183][T25215] veth0_vlan: entered promiscuous mode [ 659.746934][T25215] ipvlan0: left allmulticast mode [ 659.758053][T25215] veth0_vlan: left allmulticast mode [ 659.801797][T25215] bond1: left promiscuous mode [ 659.964564][T25215] vxlan0: left promiscuous mode [ 659.977785][T25215] vxlan0: left allmulticast mode [ 660.010257][T25215] ip6tnl1: left allmulticast mode [ 660.053454][T25215] 8021q: adding VLAN 0 to HW filter on device bond3 [ 660.071150][T25215] 8021q: adding VLAN 0 to HW filter on device bond4 [ 660.093481][T25215] bond5: left promiscuous mode [ 660.113865][T25215] 8021q: adding VLAN 0 to HW filter on device bond5 [ 660.592344][T25253] xt_nfacct: accounting object `syz0' does not exist [ 660.688096][T25257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4858'. [ 660.859473][T25259] netlink: 'syz.0.4859': attribute type 1 has an invalid length. [ 660.952503][T25259] 8021q: adding VLAN 0 to HW filter on device bond9 [ 660.963650][T25259] bond8: (slave bond9): making interface the new active one [ 660.974026][T25259] bond8: (slave bond9): Enslaving as an active interface with an up link [ 661.392121][T25293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4868'. [ 661.410048][T10079] lo speed is unknown, defaulting to 1000 [ 661.415150][T25293] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 661.432434][T25295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4869'. [ 661.433647][T25293] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 661.466341][T25293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4868'. [ 661.505627][T25295] veth3: entered allmulticast mode [ 661.800381][T25318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4873'. [ 661.835906][T25318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4873'. [ 661.926132][T25326] netlink: 'syz.1.4875': attribute type 1 has an invalid length. [ 662.040484][T25329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4876'. [ 662.054736][T25327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4875'. [ 662.086063][T25327] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4875'. [ 662.634998][T25353] IPVS: set_ctl: invalid protocol: 44 172.20.20.15:20003 [ 663.062846][T25375] netlink: zone id is out of range [ 663.073641][T25375] netlink: zone id is out of range [ 663.090998][T25375] netlink: zone id is out of range [ 663.105260][T25375] netlink: zone id is out of range [ 663.119638][T25375] netlink: zone id is out of range [ 663.130834][T25375] netlink: zone id is out of range [ 663.156551][T25375] netlink: zone id is out of range [ 663.169097][T25375] netlink: zone id is out of range [ 663.182090][T25375] netlink: zone id is out of range [ 663.194043][T25375] netlink: zone id is out of range [ 663.205876][T25379] tipc: Enabling of bearer rejected, failed to enable media [ 663.527267][ T3379] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.536361][ T3379] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.553412][ T3379] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.571980][ T3379] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.785851][T25424] geneve2: entered promiscuous mode [ 663.791776][T17040] wlan1: Trigger new scan to find an IBSS to join [ 663.800569][ T3379] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.821949][ T3379] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.842287][ T3379] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.864839][ T3379] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.451033][T25477] lo speed is unknown, defaulting to 1000 [ 664.501571][T25485] sctp: [Deprecated]: syz.3.4919 (pid 25485) Use of int in max_burst socket option. [ 664.501571][T25485] Use struct sctp_assoc_value instead [ 664.665111][T25492] __nla_validate_parse: 6 callbacks suppressed [ 664.665127][T25492] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4921'. [ 664.699306][T25502] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4920'. [ 664.755153][T25492] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4921'. [ 665.087581][T25477] lo speed is unknown, defaulting to 1000 [ 665.203016][T25523] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4927'. [ 665.688768][ T3379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.701983][ T3379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.725719][T25542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.422486][T25560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4932'. [ 666.726626][T25570] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20003 [ 667.158081][T25592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4942'. [ 667.197322][T25592] hsr_slave_0: left promiscuous mode [ 667.208711][T25592] hsr_slave_1: left promiscuous mode [ 667.466306][T25606] netlink: 'syz.4.4946': attribute type 3 has an invalid length. [ 667.470745][T25607] netlink: 'syz.2.4945': attribute type 1 has an invalid length. [ 667.539250][T25607] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4945'. [ 667.786090][T25621] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4948'. [ 667.805227][ T9591] wlan1: Trigger new scan to find an IBSS to join [ 668.081897][T25635] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4949'. [ 668.112455][T25630] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4949'. [ 668.701074][ T3379] wlan1: Creating new IBSS network, BSSID 52:4f:80:a0:96:77 [ 669.526897][T25701] ip6_vti0: entered promiscuous mode [ 669.547048][T25699] syzkaller0: entered promiscuous mode [ 669.555210][T25699] syzkaller0: entered allmulticast mode [ 670.972622][T25720] 8021q: adding VLAN 0 to HW filter on device bond6 [ 671.856397][T25779] __nla_validate_parse: 5 callbacks suppressed [ 671.856413][T25779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4983'. [ 671.864549][T25783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4977'. [ 671.895416][T25782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4977'. [ 671.905461][T25782] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4977'. [ 671.927394][T25783] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4977'. [ 671.960922][T25779] gtp0: entered promiscuous mode [ 671.967799][T25779] gtp0: entered allmulticast mode [ 672.058355][T25796] IPv6: NLM_F_CREATE should be specified when creating new route [ 672.269570][T25802] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 672.292570][T25802] bond5 (unregistering): Released all slaves [ 672.476082][ T30] audit: type=1804 audit(1778395973.904:14): pid=25814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4990" name="/newroot/360/memory.events" dev="tmpfs" ino=1870 res=1 errno=0 [ 672.562134][ T30] audit: type=1800 audit(1778395973.934:15): pid=25814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4990" name="memory.events" dev="tmpfs" ino=1870 res=0 errno=0 [ 672.759094][T25836] pimreg: entered allmulticast mode [ 672.775195][T25833] pimreg: left allmulticast mode [ 673.028634][T25854] netlink: 'syz.2.5000': attribute type 1 has an invalid length. [ 673.070208][T25854] bond7: (slave vxcan2): The slave device specified does not support setting the MAC address [ 673.081534][T25854] bond7: (slave vxcan2): Error -95 calling set_mac_address [ 673.181349][T25858] bond7: (slave gretap1): making interface the new active one [ 673.228044][T25858] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 673.288337][T25854] bond7: (slave bridge5): Enslaving as an active interface with a down link [ 673.309581][T25866] netlink: 'syz.0.5004': attribute type 10 has an invalid length. [ 673.327225][T25866] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5004'. [ 673.373554][T25858] macvlan3: entered promiscuous mode [ 673.400250][T25858] macvlan3: entered allmulticast mode [ 673.426509][T25858] bond7: entered promiscuous mode [ 673.452098][T25858] gretap1: entered promiscuous mode [ 673.478551][T25858] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 673.508425][T25858] bond7: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 673.537549][T25858] bond7: left promiscuous mode [ 673.554293][T25858] gretap1: left promiscuous mode [ 673.616074][T25861] macvlan3: entered promiscuous mode [ 673.631563][T25861] macvlan3: entered allmulticast mode [ 673.648520][T25861] bond7: entered promiscuous mode [ 673.660290][T25861] gretap1: entered promiscuous mode [ 673.673537][T25861] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 673.696681][T25861] bond7: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 673.731167][T25861] bond7: left promiscuous mode [ 673.742388][T25861] gretap1: left promiscuous mode [ 674.004423][T25883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5006'. [ 674.243980][T25892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.288645][T25890] syzkaller0: entered promiscuous mode [ 674.309915][T25890] syzkaller0: entered allmulticast mode [ 674.732152][T25904] tc_dump_action: action bad kind [ 674.872260][T25911] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5015'. [ 675.114711][T25915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5017'. [ 675.206773][T25922] IPVS: ip_vs_add_dest(): server weight less than zero [ 675.358604][T25929] tipc: Invalid UDP bearer configuration [ 675.358656][T25929] tipc: Enabling of bearer rejected, failed to enable media [ 677.646881][T26033] lo speed is unknown, defaulting to 1000 [ 677.853539][T26049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5052'. [ 677.994796][T26049] bond5: entered promiscuous mode [ 678.018961][T26060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5052'. [ 678.056160][T26049] 8021q: adding VLAN 0 to HW filter on device bond5 [ 678.209097][T26057] 8021q: adding VLAN 0 to HW filter on device bond5 [ 678.228588][T26057] bond5: (slave sit3): The slave device specified does not support setting the MAC address [ 678.258113][T26057] bond5: (slave sit3): Error -95 calling set_mac_address [ 678.281370][T26033] lo speed is unknown, defaulting to 1000 [ 678.473558][T26074] syzkaller0: entered promiscuous mode [ 678.487254][T26074] syzkaller0: entered allmulticast mode [ 678.659913][T26091] IPVS: set_ctl: invalid protocol: 51 172.30.17.3:20000 [ 678.672427][T26087] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 678.794543][T26092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5062'. [ 680.993758][T26114] netlink: 'syz.2.5067': attribute type 1 has an invalid length. [ 681.041694][T26114] batman_adv: batadv0: Adding interface: ipvlan2 [ 681.067442][T26114] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.204474][T26114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.251712][T26114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.267247][T26114] batman_adv: batadv0: Interface activated: ipvlan2 [ 681.306519][T26140] netlink: 'syz.1.5070': attribute type 62 has an invalid length. [ 681.590333][T26134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5070'. [ 682.485463][T26188] netlink: 'syz.3.5080': attribute type 13 has an invalid length. [ 682.881417][T26208] bond4: option ad_select: invalid value (34) [ 682.890216][T26208] bond4 (unregistering): Released all slaves [ 682.981362][T26209] lo speed is unknown, defaulting to 1000 [ 682.998964][T26212] pim6reg1: entered promiscuous mode [ 683.017819][T26212] pim6reg1: entered allmulticast mode [ 683.116401][T26216] erspan1: entered promiscuous mode [ 683.121881][T26216] erspan1: entered allmulticast mode [ 683.458882][T26209] lo speed is unknown, defaulting to 1000 [ 683.648454][T26233] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 683.785328][T26238] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5095'. [ 684.236908][T26256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5098'. [ 685.179732][T26283] netlink: 'syz.0.5104': attribute type 16 has an invalid length. [ 685.260131][T26283] netem: change failed [ 685.290583][T26281] lo speed is unknown, defaulting to 1000 [ 685.708598][ T1313] net_ratelimit: 392 callbacks suppressed [ 685.708616][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.038235][T26281] lo speed is unknown, defaulting to 1000 [ 686.382926][T26322] netlink: 208 bytes leftover after parsing attributes in process `syz.2.5112'. [ 686.430831][T26322] netlink: 208 bytes leftover after parsing attributes in process `syz.2.5112'. [ 686.453996][T26322] netlink: 'syz.2.5112': attribute type 1 has an invalid length. [ 686.497919][T26327] tipc: Enabled bearer , priority 0 [ 686.516286][T26327] syzkaller0: entered promiscuous mode [ 686.538755][T26327] syzkaller0: entered allmulticast mode [ 686.622013][T26327] tipc: Resetting bearer [ 686.772652][T26334] tipc: Resetting bearer [ 686.818615][T26348] rdma_rxe: rxe_newlink: failed to add lo [ 686.825921][T26334] tipc: Disabling bearer [ 686.976936][T26352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5117'. [ 687.253248][T26363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5119'. [ 687.290456][T26363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5119'. [ 687.386821][T26369] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5122'. [ 688.219925][T26406] block nbd0: NBD_DISCONNECT [ 688.225140][T26406] block nbd0: Send disconnect failed -104 [ 688.234942][T26406] block nbd0: shutting down sockets [ 688.315207][ T9594] erspan0: left allmulticast mode [ 688.321108][ T9594] erspan0: left promiscuous mode [ 688.328760][ T9594] bridge0: port 3(erspan0) entered disabled state [ 688.338003][ T9594] bridge_slave_1: left allmulticast mode [ 688.353875][ T9594] bridge_slave_1: left promiscuous mode [ 688.367044][ T9594] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.393377][ T9594] bridge_slave_0: left allmulticast mode [ 688.408023][ T9594] bridge_slave_0: left promiscuous mode [ 688.420953][ T9594] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.552298][T26419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5133'. [ 688.820906][ T9594] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 689.401433][ T9594] bond1 (unregistering): Released all slaves [ 689.416540][ T9594] bond2 (unregistering): (slave bond3): Releasing backup interface [ 689.425308][ T9594] bond2 (unregistering): Released all slaves [ 689.440522][ T9594] bond3 (unregistering): Released all slaves [ 689.454979][ T9594] bond4 (unregistering): Released all slaves [ 689.474037][ T9594] bond5 (unregistering): Released all slaves [ 689.488613][ T9594] bond6 (unregistering): (slave lo): Releasing backup interface [ 689.496627][ T9594] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 689.513914][ T9594] bond6 (unregistering): Released all slaves [ 689.528341][ T9594] bond7 (unregistering): Released all slaves [ 689.542300][ T9594] bond0 (unregistering): Released all slaves [ 689.561672][ T9594] bond8 (unregistering): Released all slaves [ 689.575142][ T9594] bond9 (unregistering): Released all slaves [ 689.591334][ T9594] bond10 (unregistering): left allmulticast mode [ 689.599590][ T9594] bond10 (unregistering): left promiscuous mode [ 689.607441][ T9594] team0: Port device macvlan3 removed [ 689.615812][ T9594] bond10 (unregistering): Released all slaves [ 689.632782][ T9594] bond11 (unregistering): Released all slaves [ 689.647291][ T9594] bond12 (unregistering): Released all slaves [ 689.662887][ T9594] bond13 (unregistering): (slave dummy0): Releasing active interface [ 689.682839][ T9594] bond13 (unregistering): Released all slaves [ 689.696018][ T9594] bond14 (unregistering): Released all slaves [ 689.711284][T26409] lo speed is unknown, defaulting to 1000 [ 689.711463][T26414] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5131'. [ 689.729750][T26433] netlink: 'syz.2.5136': attribute type 29 has an invalid length. [ 689.747387][T26433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5136'. [ 689.894452][T26441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.340856][T26409] lo speed is unknown, defaulting to 1000 [ 690.342406][T26466] netlink: 'syz.1.5144': attribute type 3 has an invalid length. [ 690.360525][T26462] tipc: Enabled bearer , priority 0 [ 690.531402][T26462] syzkaller0: entered promiscuous mode [ 690.537284][T26462] syzkaller0: entered allmulticast mode [ 690.546765][T26462] tipc: Resetting bearer [ 690.572900][T26479] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5148'. [ 690.596126][T26461] tipc: Resetting bearer [ 690.653295][T26482] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5148'. [ 691.144592][T26496] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5153'. [ 693.003756][T26461] tipc: Disabling bearer [ 693.019024][T26496] .70·X: renamed from veth1_virt_wifi (while UP) [ 693.028679][T26496] .70·X: entered allmulticast mode [ 693.034314][T26496] A link change request failed with some changes committed already. Interface .70·X may have been left with an inconsistent configuration, please check. [ 693.439391][T26541] sit3: entered allmulticast mode [ 693.831196][T26557] geneve2: entered promiscuous mode [ 693.843980][T26557] geneve2: entered allmulticast mode [ 693.866157][T26558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5159'. [ 693.997688][T26531] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5155'. [ 694.025625][T26568] netlink: 'syz.1.5161': attribute type 13 has an invalid length. [ 694.058077][T26568] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5161'. [ 694.088452][T26568] syz_tun: refused to change device tx_queue_len [ 694.125526][T26568] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 694.178111][T26568] netlink: 'syz.1.5161': attribute type 13 has an invalid length. [ 694.222248][T26572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5162'. [ 694.231789][T26568] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5161'. [ 694.242183][T26568] syz_tun: refused to change device tx_queue_len [ 694.252290][T26568] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 694.430443][T26587] ip6t_REJECT: ECHOREPLY is not supported [ 694.441736][T26587] ip6gre0: Caught tx_queue_len zero misconfig [ 694.547918][T26594] netlink: 'syz.2.5169': attribute type 21 has an invalid length. [ 694.565235][T26594] netlink: 'syz.2.5169': attribute type 22 has an invalid length. [ 694.598416][T26594] netlink: 'syz.2.5169': attribute type 23 has an invalid length. [ 694.646564][T26597] lo speed is unknown, defaulting to 1000 [ 694.722900][T26605] netlink: 'syz.0.5171': attribute type 1 has an invalid length. [ 694.792975][T26612] __nla_validate_parse: 3 callbacks suppressed [ 694.792992][T26612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5171'. [ 694.835309][T26612] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5171'. [ 694.876253][T26605] 8021q: adding VLAN 0 to HW filter on device bond10 [ 694.883975][T26615] xt_hashlimit: invalid rate [ 694.908730][T26612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5171'. [ 694.926921][T26612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5171'. [ 695.075787][T26623] netlink: 'syz.0.5175': attribute type 10 has an invalid length. [ 695.085163][T26623] openvswitch: netlink: Flow key attr not present in new flow. [ 695.204642][T26597] lo speed is unknown, defaulting to 1000 [ 695.440826][T26635] IPv6: Can't replace route, no match found [ 695.471745][T26635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5179'. [ 695.649010][T26645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5181'. [ 695.677251][T26645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5181'. [ 695.759240][T26648] bond11: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 695.769712][T26648] bond11: entered promiscuous mode [ 695.776650][T26648] 8021q: adding VLAN 0 to HW filter on device bond11 [ 695.785182][T26645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5181'. [ 695.806318][T26645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5181'. [ 696.287208][T26673] lo speed is unknown, defaulting to 1000 [ 696.666705][T26683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5188'. [ 697.241416][T26673] lo speed is unknown, defaulting to 1000 [ 697.301702][T26718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.542462][T26730] syzkaller1: entered allmulticast mode [ 697.562114][T26732] netlink: 'syz.0.5198': attribute type 1 has an invalid length. [ 697.578781][T26732] netlink: 'syz.0.5198': attribute type 3 has an invalid length. [ 697.926231][T26749] netlink: 'syz.2.5201': attribute type 39 has an invalid length. [ 698.061799][T26758] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 698.075943][T26758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.616290][T26788] x_tables: duplicate underflow at hook 2 [ 698.795905][T26797] ip6tnl0: Caught tx_queue_len zero misconfig [ 699.168606][T26828] veth0_macvtap: Caught tx_queue_len zero misconfig [ 699.706343][T26868] 0ªî{X¹¦: left allmulticast mode [ 699.731524][T26868] ip6tnl2: left allmulticast mode [ 699.747832][T26868] hsr1: left promiscuous mode [ 699.766856][T26868] erspan1: left promiscuous mode [ 699.774908][T26868] erspan1: left allmulticast mode [ 700.455900][T26909] __nla_validate_parse: 10 callbacks suppressed [ 700.455951][T26909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5232'. [ 700.468041][T26906] nbd: socks must be embedded in a SOCK_ITEM attr [ 700.479124][T26909] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5232'. [ 700.486201][T26906] block nbd0: shutting down sockets [ 700.525546][T26912] validate_nla: 1 callbacks suppressed [ 700.525564][T26912] netlink: 'syz.1.5231': attribute type 10 has an invalid length. [ 700.581477][T26912] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5231'. [ 700.633044][T26906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5231'. [ 700.684701][T26920] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 700.721799][T26920] bond6 (unregistering): Released all slaves [ 700.891337][T26905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.219847][T26951] netlink: 'syz.1.5241': attribute type 1 has an invalid length. [ 701.333835][T10079] IPVS: starting estimator thread 0... [ 701.339824][T26962] IPVS: sh: FWM 3 0x00000003 - no destination available [ 701.414263][T26966] netlink: 'syz.1.5248': attribute type 6 has an invalid length. [ 701.422076][T26966] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5248'. [ 701.588310][T26963] IPVS: using max 28 ests per chain, 67200 per kthread [ 701.685495][T10079] IPVS: starting estimator thread 0... [ 701.759106][T26960] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.807682][T26982] IPVS: using max 29 ests per chain, 69600 per kthread [ 701.812975][T26985] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 701.878193][T26987] syzkaller0: entered promiscuous mode [ 701.885891][T26987] syzkaller0: entered allmulticast mode [ 702.035829][T27010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5259'. [ 702.231753][T27018] can: request_module (can-proto-4) failed. [ 702.284148][T26960] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.482947][T26960] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.652797][T27055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5269'. [ 702.664042][T27055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.690428][T26960] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.954243][ T9591] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.976398][ T9591] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.004270][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.025117][ T3379] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.152675][T27063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 703.361385][T27068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5271'. [ 703.371150][T27068] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5271'. [ 703.380702][T27068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5271'. [ 705.106481][T27021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.359117][T27080] netlink: 'syz.1.5275': attribute type 1 has an invalid length. [ 705.549605][T27080] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 705.582075][T27095] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 705.626587][T27095] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 705.715213][T27101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 705.758205][T27106] __nla_validate_parse: 1 callbacks suppressed [ 705.758239][T27106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5282'. [ 705.794158][T27101] netlink: 'syz.0.5280': attribute type 1 has an invalid length. [ 705.801526][T27107] netlink: 'syz.2.5282': attribute type 13 has an invalid length. [ 705.811584][T27106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5282'. [ 705.822026][T27107] netlink: 'syz.2.5282': attribute type 17 has an invalid length. [ 705.830695][T27111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 706.024505][T27107] .70·X: left allmulticast mode [ 706.202018][T27107] 8021q: adding VLAN 0 to HW filter on device bond7 [ 706.271945][T27101] 8021q: adding VLAN 0 to HW filter on device bond12 [ 706.291630][T27108] vlan0: entered allmulticast mode [ 706.296761][T27108] bond12: entered allmulticast mode [ 706.350288][T27134] bond12: (slave geneve3): making interface the new active one [ 706.357940][T27134] geneve3: entered allmulticast mode [ 706.392048][T27134] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 706.401656][T27121] syzkaller1: entered allmulticast mode [ 706.409560][T27148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5290'. [ 706.683977][T27151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5292'. [ 706.748873][T27154] netlink: 'syz.1.5293': attribute type 1 has an invalid length. [ 706.871398][T27158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5294'. [ 706.902460][T27154] bond11: entered promiscuous mode [ 706.920354][T27154] 8021q: adding VLAN 0 to HW filter on device bond11 [ 706.966738][T27161] 8021q: adding VLAN 0 to HW filter on device bond11 [ 706.996132][T27161] bond11: (slave wireguard0): The slave device specified does not support setting the MAC address [ 707.036505][T27161] bond11: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 707.119862][T27161] bond11: (slave wireguard0): making interface the new active one [ 707.145243][T27161] wireguard0: entered promiscuous mode [ 707.152379][T27161] bond11: (slave wireguard0): Enslaving as an active interface with an up link [ 707.473537][T27169] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5296'. [ 707.715020][T27176] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 707.930605][T27191] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5302'. [ 707.941748][T27191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5302'. [ 707.954703][T27192] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5302'. [ 708.004458][T27198] netlink: 'syz.0.5303': attribute type 1 has an invalid length. [ 708.151067][T27204] netlink: 268 bytes leftover after parsing attributes in process `syz.0.5304'. [ 708.404099][T27214] netlink: 'syz.1.5306': attribute type 1 has an invalid length. [ 708.416622][T27214] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 708.505007][T27222] lo: Caught tx_queue_len zero misconfig [ 708.753396][ T30] audit: type=1107 audit(1778396010.184:16): pid=27231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 708.789375][ T13] wlan1: Trigger new scan to find an IBSS to join [ 708.948544][T27237] netlink: 'syz.0.5313': attribute type 1 has an invalid length. [ 709.214468][T27245] IPv6: NLM_F_CREATE should be specified when creating new route [ 709.298343][T27245] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 709.305652][T27245] IPv6: NLM_F_CREATE should be set when creating new route [ 709.312943][T27245] IPv6: NLM_F_CREATE should be set when creating new route [ 709.320184][T27245] IPv6: NLM_F_CREATE should be set when creating new route [ 709.589941][T27266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 709.606383][T27263] macsec4: entered promiscuous mode [ 709.648761][T27263] macsec4: entered allmulticast mode [ 709.831492][T27270] pim6reg1: entered promiscuous mode [ 709.836838][T27270] pim6reg1: entered allmulticast mode [ 710.965397][T27310] netlink: 'syz.1.5334': attribute type 1 has an invalid length. [ 711.328871][T27325] __nla_validate_parse: 11 callbacks suppressed [ 711.328889][T27325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5339'. [ 711.404618][T27327] netlink: 'syz.1.5340': attribute type 1 has an invalid length. [ 711.462172][T27327] bond12: entered promiscuous mode [ 711.469819][T27327] bond12: entered allmulticast mode [ 711.475597][T27327] 8021q: adding VLAN 0 to HW filter on device bond12 [ 711.487989][T27332] netlink: 'syz.3.5342': attribute type 1 has an invalid length. [ 711.496162][T27332] netlink: 'syz.3.5342': attribute type 2 has an invalid length. [ 711.512247][T27332] netlink: 'syz.3.5342': attribute type 3 has an invalid length. [ 711.523632][T27333] macvlan0: entered promiscuous mode [ 711.531862][T27333] macvlan0: entered allmulticast mode [ 711.541930][T27335] netlink: 'syz.2.5343': attribute type 6 has an invalid length. [ 711.554838][T27333] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 711.569051][T27327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5340'. [ 711.590313][T27327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5340'. [ 711.608276][T27327] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5340'. [ 711.728870][T27343] v: renamed from dummy0 (while UP) [ 711.986524][T27351] lo speed is unknown, defaulting to 1000 [ 712.295929][T27351] lo speed is unknown, defaulting to 1000 [ 713.788223][T17040] wlan1: Trigger new scan to find an IBSS to join [ 714.688147][ T9591] wlan1: Creating new IBSS network, BSSID 1e:e7:c2:4f:25:96 [ 743.965776][T27393] lo speed is unknown, defaulting to 1000 [ 744.031042][T27410] netlink: 'syz.4.5355': attribute type 13 has an invalid length. [ 744.064911][T27410] netlink: 'syz.4.5355': attribute type 13 has an invalid length. [ 744.068498][T17042] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.102510][T17042] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.136798][T17042] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.172127][T17042] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.258336][T27419] bond3: entered allmulticast mode [ 744.395424][T27423] bond3: left allmulticast mode [ 744.589761][T27394] lo speed is unknown, defaulting to 1000 [ 744.679382][T27393] lo speed is unknown, defaulting to 1000 [ 744.973017][T27429] lo speed is unknown, defaulting to 1000 [ 745.063503][ T3388] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.076584][ T3388] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.087936][ T3388] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.096333][ T3388] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.364426][T27394] lo speed is unknown, defaulting to 1000 [ 745.653150][T27469] netlink: 'syz.2.5365': attribute type 10 has an invalid length. [ 745.804957][T27429] lo speed is unknown, defaulting to 1000 [ 746.516261][T27500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.525602][T27500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.534771][T27500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.566715][T27500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.578250][T27500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.595461][T27500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.605005][T27500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.621200][T27500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.650304][T27500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.665058][T27500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.078686][T27520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5369'. [ 747.167147][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 747.494024][T27525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5371'. [ 747.984007][T27541] netlink: 'syz.2.5376': attribute type 10 has an invalid length. [ 748.258918][T27555] netlink: 'syz.3.5380': attribute type 1 has an invalid length. [ 748.300735][T27555] 8021q: adding VLAN 0 to HW filter on device bond6 [ 748.311190][T27563] netlink: 'syz.1.5382': attribute type 1 has an invalid length. [ 748.318982][T27563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5382'. [ 748.400188][T27565] netlink: 'syz.1.5383': attribute type 49 has an invalid length. [ 748.496824][T27572] lo speed is unknown, defaulting to 1000 [ 748.581768][T27579] netlink: 'syz.0.5387': attribute type 1 has an invalid length. [ 748.691855][T27579] bond15: entered promiscuous mode [ 748.709159][T27579] 8021q: adding VLAN 0 to HW filter on device bond15 [ 748.800457][T27579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5387'. [ 748.833417][T27572] lo speed is unknown, defaulting to 1000 [ 748.844760][T27579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5387'. [ 748.950998][T27579] bond15: (slave bridge6): making interface the new active one [ 748.958589][T27579] bridge6: entered promiscuous mode [ 748.965022][T27579] bond15: (slave bridge6): Enslaving as an active interface with an up link [ 749.028539][T27595] netlink: 'syz.4.5392': attribute type 4 has an invalid length. [ 749.477673][T27616] lo speed is unknown, defaulting to 1000 [ 749.709292][T27616] lo speed is unknown, defaulting to 1000 [ 750.016555][T27636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5403'. [ 750.059446][T27638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5404'. [ 750.162607][T27638] bond7: entered promiscuous mode [ 750.174476][T27638] bond7: entered allmulticast mode [ 750.439501][T27655] netlink: 'syz.4.5409': attribute type 3 has an invalid length. [ 750.466882][T27655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5409'. [ 750.548979][T27660] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5411'. [ 750.836492][T27671] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5414'. [ 750.946431][T27673] smc: net device wlan0 applied user defined pnetid SYZ0 [ 751.682369][T27697] bond4 (unregistering): Released all slaves [ 751.811596][T27698] ip6gre1: entered promiscuous mode [ 751.835556][T27698] ip6gre1: entered allmulticast mode [ 751.866011][T27692] lo speed is unknown, defaulting to 1000 [ 752.054643][T27719] bridge_slave_1: left promiscuous mode [ 752.060447][T27719] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.074160][T27722] netlink: 'syz.0.5429': attribute type 39 has an invalid length. [ 752.095869][T27719] net_ratelimit: 2 callbacks suppressed [ 752.095885][T27719] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 752.126863][T27724] __nla_validate_parse: 1 callbacks suppressed [ 752.126880][T27724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5429'. [ 752.367811][T27733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5429'. [ 752.618857][T27730] veth5: entered allmulticast mode [ 752.639798][T27730] bond16: (slave veth5): Enslaving as an active interface with an up link [ 752.656743][T27733] bond16 (unregistering): (slave veth5): Releasing backup interface [ 752.671531][T27733] bond16 (unregistering): Released all slaves [ 752.699672][T27692] lo speed is unknown, defaulting to 1000 [ 753.364890][T27754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5434'. [ 753.394774][T27754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 753.700298][T27768] tipc: New replicast peer: 172.20.20.170 [ 753.706607][T27768] tipc: Enabled bearer , priority 5 [ 754.343965][T27792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5445'. [ 754.589498][T27806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5449'. [ 754.871973][T27818] syzkaller1: entered promiscuous mode [ 754.877505][T27818] syzkaller1: entered allmulticast mode [ 755.140629][T27836] Timeout policy `syz1' can only be used by L3 protocol number 23 [ 756.074935][T10079] lo speed is unknown, defaulting to 1000 [ 756.080712][T10079] sqz0: Port: 1 Link DOWN [ 756.085096][T10079] lo speed is unknown, defaulting to 1000 [ 756.100241][T27866] sctp: [Deprecated]: syz.0.5463 (pid 27866) Use of int in max_burst socket option deprecated. [ 756.100241][T27866] Use struct sctp_assoc_value instead [ 756.663663][ T30] audit: type=1804 audit(1778396058.094:17): pid=27884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5470" name="/newroot/499/memory.events" dev="tmpfs" ino=2563 res=1 errno=0 [ 757.366175][T27918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 757.584148][T27923] tunl0: Caught tx_queue_len zero misconfig [ 757.601271][T27926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5480'. [ 757.811120][T27932] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5482'. [ 757.853340][T27933] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5482'. [ 757.889490][T27932] xt_hashlimit: invalid rate [ 757.941550][T27935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5483'. [ 758.057815][T27945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5485'. [ 758.125235][T27943] netlink: 'syz.3.5484': attribute type 13 has an invalid length. [ 758.392170][T27950] netlink: 'syz.1.5486': attribute type 13 has an invalid length. [ 758.538171][T27950] netlink: 'syz.1.5486': attribute type 13 has an invalid length. [ 759.365359][T27979] netlink: 'syz.4.5496': attribute type 5 has an invalid length. [ 759.873601][T27993] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5498'. [ 760.711484][T27997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5500'. [ 761.345148][T28033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5504'. [ 761.734739][T28062] netlink: 'syz.0.5515': attribute type 1 has an invalid length. [ 761.748538][T28064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5516'. [ 761.829817][T28065] gretap1: entered allmulticast mode [ 762.463648][T28101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5527'. [ 762.505621][T28095] lo speed is unknown, defaulting to 1000 [ 762.666648][T28106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 762.776217][T28106] __nla_validate_parse: 9 callbacks suppressed [ 762.776237][T28106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5528'. [ 762.812616][T28106] sctp: [Deprecated]: syz.0.5528 (pid 28106) Use of struct sctp_assoc_value in delayed_ack socket option. [ 762.812616][T28106] Use struct sctp_sack_info instead [ 762.890037][T28109] bridge5: entered promiscuous mode [ 762.895369][T28109] bridge5: entered allmulticast mode [ 762.978552][T28095] lo speed is unknown, defaulting to 1000 [ 762.998399][T28116] netlink: 'syz.0.5528': attribute type 1 has an invalid length. [ 763.006149][T28116] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5528'. [ 763.065898][T28118] netlink: 'syz.4.5531': attribute type 1 has an invalid length. [ 763.128509][T28118] bond4: entered promiscuous mode [ 763.134090][T28118] 8021q: adding VLAN 0 to HW filter on device bond4 [ 763.176272][T28120] 8021q: adding VLAN 0 to HW filter on device bond4 [ 763.191676][T28120] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 763.203433][T28120] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 763.219298][T28120] bond4: (slave wireguard0): making interface the new active one [ 763.230261][T28120] wireguard0: entered promiscuous mode [ 763.237216][T28120] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 763.258281][T28123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5532'. [ 763.506545][T28133] erspan0: left promiscuous mode [ 763.526579][T28133] ip6gretap0: left promiscuous mode [ 763.550431][T28133] bridge0: port 3(syz_tun) entered blocking state [ 763.556985][T28133] bridge0: port 3(syz_tun) entered forwarding state [ 763.565099][T28133] bridge0: left promiscuous mode [ 763.574234][T28133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.584693][T28133] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.609544][T28140] x_tables: duplicate underflow at hook 3 [ 763.682123][T28133] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 763.693172][T28133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 763.715191][T28133] veth1_macvtap: left promiscuous mode [ 763.721838][T28133] veth0_macvtap: left promiscuous mode [ 763.728361][T28133] veth0_macvtap: entered promiscuous mode [ 763.734749][T28133] veth1_macvtap: entered promiscuous mode [ 763.746818][T28133] ip6gretap0: entered promiscuous mode [ 763.779903][T28133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 763.793113][T28133] 8021q: adding VLAN 0 to HW filter on device bond2 [ 763.805689][T28133] erspan0: entered promiscuous mode [ 763.838702][T28133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 763.848103][T28133] 8021q: adding VLAN 0 to HW filter on device eth0 [ 763.856133][T28133] 8021q: adding VLAN 0 to HW filter on device eth1 [ 763.876479][T28133] 8021q: adding VLAN 0 to HW filter on device eth2 [ 763.888105][T28133] 8021q: adding VLAN 0 to HW filter on device eth3 [ 763.904821][T28133] virt_wifi0: entered promiscuous mode [ 763.913222][T28133] virt_wifi0: entered allmulticast mode [ 763.924238][T10101] bridge0: entered promiscuous mode [ 763.935673][ T3388] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.942820][ T3388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.955520][ T3388] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.962671][ T3388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.008540][T28145] bond3: entered allmulticast mode [ 764.028009][T17042] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.036240][T17042] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.044460][T17042] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.052629][T17042] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.060898][T17042] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.071274][T17042] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.106127][T17042] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.114334][T17042] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.174942][T28154] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1033287962/1033287964 [ 764.184179][T28154] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1033287962/1033287963 [ 764.938504][T28194] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 765.228497][T28201] netlink: 'syz.1.5552': attribute type 1 has an invalid length. [ 765.236264][T28201] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5552'. [ 765.283486][T28208] FAULT_INJECTION: forcing a failure. [ 765.283486][T28208] name failslab, interval 1, probability 0, space 0, times 0 [ 765.337014][T28208] CPU: 1 UID: 0 PID: 28208 Comm: syz.4.5556 Not tainted syzkaller #0 PREEMPT(full) [ 765.337038][T28208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 765.337050][T28208] Call Trace: [ 765.337057][T28208] [ 765.337065][T28208] dump_stack_lvl+0xe8/0x150 [ 765.337092][T28208] should_fail_ex+0x412/0x560 [ 765.337121][T28208] should_failslab+0xa8/0x100 [ 765.337151][T28208] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 765.337187][T28208] ? __alloc_skb+0x1d0/0x7d0 [ 765.337222][T28208] __alloc_skb+0x1d0/0x7d0 [ 765.337251][T28208] tipc_msg_create+0x51/0x4d0 [ 765.337286][T28208] tipc_group_proto_xmit+0xce/0x790 [ 765.337315][T28208] tipc_group_delete+0x15e/0x4c0 [ 765.337345][T28208] ? __pfx_tipc_group_delete+0x10/0x10 [ 765.337373][T28208] ? tipc_release+0xc4/0x2580 [ 765.337403][T28208] ? tipc_group_self+0x26/0x1c0 [ 765.337426][T28208] tipc_release+0x3f7/0x2580 [ 765.337463][T28208] ? __pfx_tipc_release+0x10/0x10 [ 765.337491][T28208] ? down_write+0x16d/0x200 [ 765.337511][T28208] ? __pfx_down_write+0x10/0x10 [ 765.337529][T28208] ? locks_remove_posix+0x14f/0x6a0 [ 765.337565][T28208] sock_close+0xc3/0x240 [ 765.337586][T28208] ? __pfx_sock_close+0x10/0x10 [ 765.337604][T28208] __fput+0x44f/0xa60 [ 765.337636][T28208] fput_close_sync+0x11f/0x240 [ 765.337657][T28208] ? __pfx_fput_close_sync+0x10/0x10 [ 765.337683][T28208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.337706][T28208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.337726][T28208] __x64_sys_close+0x7e/0x110 [ 765.337749][T28208] do_syscall_64+0x15f/0xf80 [ 765.337766][T28208] ? trace_irq_disable+0x3b/0x140 [ 765.337792][T28208] ? clear_bhb_loop+0x40/0x90 [ 765.337815][T28208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.337833][T28208] RIP: 0033:0x7f494c19cdd9 [ 765.337851][T28208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.337866][T28208] RSP: 002b:00007f494cff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 765.337886][T28208] RAX: ffffffffffffffda RBX: 00007f494c415fa0 RCX: 00007f494c19cdd9 [ 765.337899][T28208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 765.337910][T28208] RBP: 00007f494cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 765.337922][T28208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.337933][T28208] R13: 00007f494c416038 R14: 00007f494c415fa0 R15: 00007fffbcbf8c28 [ 765.337964][T28208] [ 765.747855][ T5629] Bluetooth: hci1: command 0x0405 tx timeout [ 766.073656][T28238] veth0: entered promiscuous mode [ 766.080320][T28238] bond0: entered promiscuous mode [ 766.086253][T28238] bond_slave_0: entered promiscuous mode [ 766.092956][T28238] bond_slave_1: entered promiscuous mode [ 766.112788][T28237] bond0: left promiscuous mode [ 766.120055][T28237] bond_slave_0: left promiscuous mode [ 766.125737][T28237] bond_slave_1: left promiscuous mode [ 766.151007][T28237] veth0: left promiscuous mode [ 766.175914][T28244] tap0: tun_chr_ioctl cmd 1074025692 [ 766.183795][T28244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5567'. [ 767.141491][T28291] netlink: 'syz.1.5573': attribute type 4 has an invalid length. [ 767.155416][T28262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5568'. [ 767.237726][T28291] netlink: 'syz.1.5573': attribute type 4 has an invalid length. [ 767.293594][T28299] netlink: 'syz.4.5575': attribute type 1 has an invalid length. [ 767.308560][ T30] audit: type=1804 audit(1778396068.714:18): pid=28291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5573" name="/newroot/570/cgroup.controllers" dev="tmpfs" ino=2915 res=1 errno=0 [ 767.347421][ T30] audit: type=1800 audit(1778396068.714:19): pid=28291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5573" name="cgroup.controllers" dev="tmpfs" ino=2915 res=0 errno=0 [ 767.366985][T28303] xt_addrtype: ipv6 does not support BROADCAST matching [ 767.554163][T28310] bond6: entered promiscuous mode [ 767.561812][T28310] 8021q: adding VLAN 0 to HW filter on device bond6 [ 767.570464][T28310] bridge0: port 4(bond6) entered blocking state [ 767.577923][T28310] bridge0: port 4(bond6) entered disabled state [ 767.584472][T28310] bond6: entered allmulticast mode [ 767.594088][T28310] bridge0: port 4(bond6) entered blocking state [ 767.600523][T28310] bridge0: port 4(bond6) entered forwarding state [ 767.618665][T28315] netlink: 300 bytes leftover after parsing attributes in process `syz.3.5576'. [ 767.877509][T28332] netlink: 'syz.2.5584': attribute type 83 has an invalid length. [ 768.010463][T28336] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 768.080847][T28338] syzkaller0: entered promiscuous mode [ 768.086764][T28338] syzkaller0: entered allmulticast mode [ 768.095378][T28337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5586'. [ 770.545663][ T3379] bridge0: port 4(bond6) entered disabled state [ 770.895129][T28380] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5596'. [ 771.019694][T28388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5598'. [ 771.031884][T28388] žÿ: renamed from team_slave_1 [ 771.085764][T28392] tipc: Enabling of bearer rejected, failed to enable media [ 771.276239][T28399] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5603'. [ 771.353987][T28402] netlink: 'syz.1.5604': attribute type 1 has an invalid length. [ 771.380934][T28402] 8021q: adding VLAN 0 to HW filter on device bond13 [ 771.620702][T28409] netlink: 'syz.4.5606': attribute type 1 has an invalid length. [ 771.658212][T28409] bond7: entered promiscuous mode [ 771.663334][T28409] bond7: entered allmulticast mode [ 771.687613][T28409] 8021q: adding VLAN 0 to HW filter on device bond7 [ 771.731839][T28409] bridge6: entered promiscuous mode [ 771.737622][T28409] bridge6: entered allmulticast mode [ 771.743307][T28409] bond7: (slave bridge6): Enslaving as a backup interface with an up link [ 771.774537][T28409] bridge7: entered promiscuous mode [ 771.788569][T17093] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 771.800948][T28409] bridge7: entered allmulticast mode [ 771.810851][T28409] bond7: (slave bridge7): Enslaving as a backup interface with a down link [ 771.905982][T17040] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 771.970859][T28414] lo speed is unknown, defaulting to 1000 [ 772.531072][T28414] lo speed is unknown, defaulting to 1000 [ 772.609312][T28449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 772.616611][T28449] IPv6: NLM_F_CREATE should be set when creating new route [ 772.772019][T28455] dvmrp1: entered allmulticast mode [ 772.778621][T28458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5617'. [ 773.493108][T28467] lo speed is unknown, defaulting to 1000 [ 773.623122][T28488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5624'. [ 773.658294][T28489] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5624'. [ 773.680175][T28489] openvswitch: netlink: Flow key attr not present in new flow. [ 773.782582][T28492] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 773.793072][T28492] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.816271][T28467] lo speed is unknown, defaulting to 1000 [ 774.291921][T28504] netlink: 840 bytes leftover after parsing attributes in process `syz.0.5629'. [ 774.395686][T28492] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.405995][T28492] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.915730][T28492] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.938021][T28492] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.215433][T28492] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.229928][T28492] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.548112][T17093] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.566539][T17093] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.591232][T17093] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.599435][T17093] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.619297][T17093] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.627532][T17093] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.788479][T28544] netlink: 840 bytes leftover after parsing attributes in process `syz.2.5640'. [ 775.981612][T28535] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 776.005056][T17093] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.014313][T17093] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.036621][T28546] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5641'. [ 776.048573][T28546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 776.264402][T28566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5644'. [ 776.280737][T28566] ip6gre2: entered promiscuous mode [ 776.286023][T28566] ip6gre2: entered allmulticast mode [ 776.324301][T17042] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 776.332566][T17042] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 776.343264][T28566] netlink: 'syz.1.5644': attribute type 3 has an invalid length. [ 776.416373][T10101] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 776.527886][T10079] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 776.592274][T28584] netlink: 'syz.3.5646': attribute type 13 has an invalid length. [ 776.608432][T28585] netlink: 'syz.3.5646': attribute type 13 has an invalid length. [ 776.616272][T28585] netlink: 'syz.3.5646': attribute type 17 has an invalid length. [ 776.626685][T28584] netlink: 'syz.3.5646': attribute type 17 has an invalid length. [ 776.694419][T17040] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.703189][T17040] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.717087][T17040] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.725587][T17040] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.765236][T28593] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5648'. [ 776.778216][T28584] ip6_vti0: left promiscuous mode [ 776.799756][T28584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.807768][T28584] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.832636][T28584] bridge_slave_1: left allmulticast mode [ 776.874595][T28584] veth1_vlan: left promiscuous mode [ 776.880981][T28584] veth0_vlan: left promiscuous mode [ 776.887077][T28584] veth0_vlan: entered promiscuous mode [ 776.895442][T28584] veth1_vlan: entered promiscuous mode [ 776.905421][T28584] veth1_macvtap: left promiscuous mode [ 776.911998][T28584] veth0_macvtap: left promiscuous mode [ 776.918491][T28584] veth1_macvtap: entered promiscuous mode [ 776.935617][T28584] bridge1: left allmulticast mode [ 776.941693][T28584] bond1: left promiscuous mode [ 776.946686][T28584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 776.953896][T28584] bond2: left promiscuous mode [ 776.969706][T28584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 776.993927][T28584] 8021q: adding VLAN 0 to HW filter on device eth0 [ 777.005714][T28584] 8021q: adding VLAN 0 to HW filter on device eth1 [ 777.016964][T28584] 8021q: adding VLAN 0 to HW filter on device eth2 [ 777.028587][T28584] 8021q: adding VLAN 0 to HW filter on device eth3 [ 777.041067][T28584] veth0_to_team: entered promiscuous mode [ 777.049851][T28584] 8021q: adding VLAN 0 to HW filter on device bond3 [ 777.057256][T28584] bond4: left promiscuous mode [ 777.062319][T28584] 8021q: adding VLAN 0 to HW filter on device bond4 [ 777.120453][T28584] ip6gretap1: left allmulticast mode [ 777.151160][T28584] 8021q: adding VLAN 0 to HW filter on device bond5 [ 777.164833][T28584] 8021q: adding VLAN 0 to HW filter on device bond6 [ 777.174079][T28584] bond7: left promiscuous mode [ 777.179878][T28584] bond7: left allmulticast mode [ 777.185070][T28584] 8021q: adding VLAN 0 to HW filter on device bond7 [ 777.189581][ T5735] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 777.209729][T28584] bridge5: left promiscuous mode [ 777.214693][T28584] bridge5: left allmulticast mode [ 777.250644][T17040] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.258849][T17040] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.267041][T17040] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 777.275206][T17040] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.418424][T17042] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 777.764848][T28627] IPv6: Can't replace route, no match found [ 777.772310][T28627] IPv6: Can't replace route, no match found [ 777.817784][T28634] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5658'. [ 778.077782][T28638] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5659'. [ 778.323948][T28660] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5664'. [ 778.469456][T28665] xt_l2tp: invalid flags combination: 8 [ 778.489124][T28665] netlink: 'syz.3.5666': attribute type 1 has an invalid length. [ 778.705400][T28666] gre0: entered promiscuous mode [ 778.710487][T28666] gre0: entered allmulticast mode [ 779.022658][T28678] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.030286][T28678] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.149334][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 779.349660][T28678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.396880][T28678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.446635][T28713] sctp: [Deprecated]: syz.0.5675 (pid 28713) Use of struct sctp_assoc_value in delayed_ack socket option. [ 779.446635][T28713] Use struct sctp_sack_info instead [ 780.118061][T28678] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 780.170064][T28686] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 780.206222][T17093] netdevsim netdevsim2 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.244543][T17093] netdevsim netdevsim2 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.266731][T17093] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.307613][T17093] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.427326][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 780.661210][T17093] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.692292][T17093] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.709726][T17093] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.724736][T17093] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.740149][T28737] netlink: 'syz.4.5678': attribute type 4 has an invalid length. [ 780.782576][T28738] lo speed is unknown, defaulting to 1000 [ 781.446349][T17093] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 781.465122][T17093] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.501475][T28738] lo speed is unknown, defaulting to 1000 [ 781.508803][T17093] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 781.534698][T17093] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.556571][T28730] lo speed is unknown, defaulting to 1000 [ 781.561997][T17093] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 781.583127][T17093] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.603330][T17093] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 781.629993][T17093] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.308205][T28730] lo speed is unknown, defaulting to 1000 [ 782.370398][T28817] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 782.450212][T28817] netlink: 'syz.0.5693': attribute type 11 has an invalid length. [ 783.001961][T28842] __nla_validate_parse: 1 callbacks suppressed [ 783.001982][T28842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5697'. [ 783.392342][T28866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5701'. [ 783.516964][T28862] netlink: 'syz.3.5701': attribute type 5 has an invalid length. [ 783.541899][T28857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5700'. [ 783.551774][T28862] netlink: 'syz.3.5701': attribute type 4 has an invalid length. [ 783.980817][T28858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5700'. [ 784.592458][T28903] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5709'. [ 784.595192][T28901] netlink: 1012 bytes leftover after parsing attributes in process `syz.4.5710'. [ 784.764465][T28907] netlink: 'syz.4.5713': attribute type 6 has an invalid length. [ 784.914077][T28915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5715'. [ 785.098616][T28923] bond8: option resend_igmp: invalid value (2878) [ 785.105382][T28923] bond8: option resend_igmp: allowed values 0 - 255 [ 785.585420][T28923] bond8 (unregistering): Released all slaves [ 785.857616][ T5735] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 786.015946][T28954] lo speed is unknown, defaulting to 1000 [ 786.058316][ T9591] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 786.268450][ T5735] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 786.824783][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 786.840754][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 786.849773][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 786.861329][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 786.870441][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 786.903557][T28954] lo speed is unknown, defaulting to 1000 [ 786.929271][T28968] lo speed is unknown, defaulting to 1000 [ 787.068028][T17093] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 787.129112][T17093] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 787.510225][T28981] lo speed is unknown, defaulting to 1000 [ 787.593181][T29011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5739'. [ 787.607858][ T5735] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 787.642076][T28968] lo speed is unknown, defaulting to 1000 [ 787.962023][T28986] lo speed is unknown, defaulting to 1000 [ 788.036430][T28981] lo speed is unknown, defaulting to 1000 [ 788.309684][T29020] netlink: 'syz.2.5742': attribute type 2 has an invalid length. [ 788.425653][T28986] lo speed is unknown, defaulting to 1000 [ 788.747199][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 788.826024][T29033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5744'. [ 788.907955][T29033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5744'. [ 788.988472][ T5629] Bluetooth: hci4: command tx timeout [ 789.295432][T29053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5747'. [ 789.882835][T29054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5747'. [ 789.885483][T29075] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5752'. [ 790.094456][T29078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5753'. [ 790.274686][T29084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5754'. [ 790.677383][T29097] netlink: 'syz.4.5758': attribute type 6 has an invalid length. [ 791.070378][ T5629] Bluetooth: hci4: command tx timeout [ 791.229661][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 793.155853][ T5629] Bluetooth: hci4: command tx timeout [ 793.577463][T29095] sit0: Caught tx_queue_len zero misconfig [ 793.591479][T28986] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.611021][T28986] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.647366][T28986] bridge_slave_0: entered allmulticast mode [ 793.664899][T28986] bridge_slave_0: entered promiscuous mode [ 793.695938][T28986] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.719427][T28986] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.737352][T28986] bridge_slave_1: entered allmulticast mode [ 793.754424][T28986] bridge_slave_1: entered promiscuous mode [ 793.839778][T28986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.859474][T28986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.892123][T29101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 793.916588][T28986] team0: Port device team_slave_0 added [ 793.925456][T28986] team0: Port device team_slave_1 added [ 793.970526][T29118] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5762'. [ 794.021091][T28986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.028898][T28986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.055946][T28986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.070060][T28986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.077279][T28986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.103321][T28986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.119426][T29112] lo speed is unknown, defaulting to 1000 [ 794.136262][T29115] netlink: 180568 bytes leftover after parsing attributes in process `syz.0.5764'. [ 794.208401][T28986] hsr_slave_0: entered promiscuous mode [ 794.218243][T28986] hsr_slave_1: entered promiscuous mode [ 794.546460][T29145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5769'. [ 794.560985][T29112] lo speed is unknown, defaulting to 1000 [ 794.660306][T29145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5769'. [ 794.680626][T28986] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.691384][T28986] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.922946][T28986] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.972289][T28986] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.078778][T29160] 8021q: adding VLAN 0 to HW filter on device bond8 [ 795.142791][T28986] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.165709][T28986] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.193777][T29173] No such timeout policy "syz1" [ 795.229012][ T5629] Bluetooth: hci4: command tx timeout [ 795.276610][T28986] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.298977][T28986] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.462827][T29186] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5777'. [ 795.569547][T29181] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.792440][T29196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 795.824579][T29201] netlink: 'syz.0.5782': attribute type 9 has an invalid length. [ 796.115420][T29206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5783'. [ 796.125255][T29206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5783'. [ 796.135083][T29206] netlink: 58 bytes leftover after parsing attributes in process `syz.3.5783'. [ 796.182300][T28986] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 796.234213][T28986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 796.251680][T28986] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 796.287610][T28986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 796.315666][T28986] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 796.326483][T28986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 796.345733][T28986] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 796.356814][T28986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 796.426715][T29224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5785'. [ 796.503024][T28986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.544546][T28986] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.561376][T17042] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.568549][T17042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.582142][T29193] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 796.598820][T17042] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.605961][T17042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.915630][T29251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5791'. [ 797.046565][T29252] netlink: 'syz.3.5793': attribute type 3 has an invalid length. [ 797.543241][T28986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.694112][T28986] veth0_vlan: entered promiscuous mode [ 797.751051][T28986] veth1_vlan: entered promiscuous mode [ 797.885158][T28986] veth0_macvtap: entered promiscuous mode [ 797.915302][T28986] veth1_macvtap: entered promiscuous mode [ 798.018718][T28986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.046284][T28986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.098793][ T9591] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.111732][ T9591] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.142252][ T9591] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.160224][ T9591] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.449429][T17093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.468318][T17093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.542427][ T9591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.569197][ T9591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.839517][T29330] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.847266][T29330] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.912427][T29330] netlink: 'syz.1.5810': attribute type 21 has an invalid length. [ 799.170200][T29347] IPVS: Unknown mcast interface: veth0_to_bridge [ 799.206775][T29347] __nla_validate_parse: 5 callbacks suppressed [ 799.206793][T29347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5815'. [ 799.247650][T29347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5815'. [ 799.275332][T29347] netlink: 'syz.0.5815': attribute type 6 has an invalid length. [ 799.349011][T29359] GUP no longer grows the stack in syz.2.5819 (29359): 200000003000-20000000a000 (200000001000) [ 799.365440][T29359] CPU: 1 UID: 0 PID: 29359 Comm: syz.2.5819 Not tainted syzkaller #0 PREEMPT(full) [ 799.365467][T29359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 799.365480][T29359] Call Trace: [ 799.365489][T29359] [ 799.365498][T29359] dump_stack_lvl+0xe8/0x150 [ 799.365528][T29359] __get_user_pages+0x2378/0x2720 [ 799.365558][T29359] ? __gup_longterm_locked+0xc4e/0x1630 [ 799.365600][T29359] ? __gup_longterm_locked+0xc4e/0x1630 [ 799.365625][T29359] ? down_read_killable+0x1bb/0x340 [ 799.365656][T29359] __gup_longterm_locked+0xdcf/0x1630 [ 799.365691][T29359] ? lock_acquire+0x106/0x350 [ 799.365733][T29359] gup_fast_fallback+0x1d84/0x20d0 [ 799.365793][T29359] ? __pfx_gup_fast_fallback+0x10/0x10 [ 799.365821][T29359] ? is_valid_gup_args+0x11f/0x200 [ 799.365848][T29359] ? get_user_pages_fast+0x4d/0xb0 [ 799.365875][T29359] __iov_iter_get_pages_alloc+0x370/0xa10 [ 799.365914][T29359] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 799.365948][T29359] iov_iter_get_pages2+0x5e/0xa0 [ 799.365990][T29359] __se_sys_vmsplice+0x7c7/0x1620 [ 799.366038][T29359] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 799.366068][T29359] ? __pfx_futex_wake+0x10/0x10 [ 799.366105][T29359] ? lockdep_hardirqs_on+0x7a/0x110 [ 799.366185][T29359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.366209][T29359] do_syscall_64+0x15f/0xf80 [ 799.366228][T29359] ? trace_irq_disable+0x3b/0x140 [ 799.366258][T29359] ? clear_bhb_loop+0x40/0x90 [ 799.366282][T29359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.366303][T29359] RIP: 0033:0x7ff10cd9cdd9 [ 799.366321][T29359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.366339][T29359] RSP: 002b:00007ff10dc3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 799.366362][T29359] RAX: ffffffffffffffda RBX: 00007ff10d015fa0 RCX: 00007ff10cd9cdd9 [ 799.366377][T29359] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 799.366389][T29359] RBP: 00007ff10ce32d69 R08: 0000000000000000 R09: 0000000000000000 [ 799.366402][T29359] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 799.366414][T29359] R13: 00007ff10d016038 R14: 00007ff10d015fa0 R15: 00007ffc292a5898 [ 799.366448][T29359] [ 799.591849][T17042] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.627255][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 799.780376][T29358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5818'. [ 799.823758][T29372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5821'. [ 800.002534][T29368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.016790][T29368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.103256][T29382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5823'. [ 800.156000][T17093] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.166667][T17093] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.192534][T29376] ipip0: entered promiscuous mode [ 800.221970][T17093] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.247821][T17093] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.301330][T29384] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5824'. [ 800.322683][T29384] netlink: 18076 bytes leftover after parsing attributes in process `syz.2.5824'. [ 800.336658][T29390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5827'. [ 800.346201][T17093] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.346511][T29390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5827'. [ 800.382643][T17093] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.405136][T17093] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.429699][ T5637] Bluetooth: hci1: command 0x0405 tx timeout [ 800.481725][T29399] tipc: Enabled bearer , priority 0 [ 800.489672][T29399] syzkaller0: entered promiscuous mode [ 800.490539][T29397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5828'. [ 800.495264][T29399] syzkaller0: entered allmulticast mode [ 800.536205][T29399] tipc: Resetting bearer [ 800.593151][T29406] tipc: Resetting bearer [ 800.635942][T29406] tipc: Disabling bearer [ 800.758939][T29416] netlink: 'syz.4.5835': attribute type 40 has an invalid length. [ 800.788960][T29416] netem: change failed [ 800.806218][T29424] netem: change failed [ 800.984976][T29431] FAULT_INJECTION: forcing a failure. [ 800.984976][T29431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.000060][T29431] CPU: 0 UID: 0 PID: 29431 Comm: syz.2.5838 Not tainted syzkaller #0 PREEMPT(full) [ 801.000085][T29431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 801.000097][T29431] Call Trace: [ 801.000105][T29431] [ 801.000113][T29431] dump_stack_lvl+0xe8/0x150 [ 801.000141][T29431] should_fail_ex+0x412/0x560 [ 801.000171][T29431] _copy_to_user+0x31/0xb0 [ 801.000200][T29431] simple_read_from_buffer+0xe1/0x170 [ 801.000228][T29431] proc_fail_nth_read+0x1bb/0x230 [ 801.000255][T29431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 801.000280][T29431] ? rw_verify_area+0x2a6/0x4d0 [ 801.000304][T29431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 801.000329][T29431] vfs_read+0x20c/0xa70 [ 801.000359][T29431] ? __pfx___mutex_lock+0x10/0x10 [ 801.000379][T29431] ? __pfx_vfs_read+0x10/0x10 [ 801.000404][T29431] ? __fget_files+0x2a/0x420 [ 801.000429][T29431] ? __fget_files+0x3a0/0x420 [ 801.000467][T29431] ? __fget_files+0x2a/0x420 [ 801.000498][T29431] ksys_read+0x150/0x270 [ 801.000524][T29431] ? __pfx_ksys_read+0x10/0x10 [ 801.000557][T29431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.000578][T29431] do_syscall_64+0x15f/0xf80 [ 801.000594][T29431] ? trace_irq_disable+0x3b/0x140 [ 801.000620][T29431] ? clear_bhb_loop+0x40/0x90 [ 801.000644][T29431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.000662][T29431] RIP: 0033:0x7ff10cd5d60e [ 801.000680][T29431] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 801.000696][T29431] RSP: 002b:00007ff10dc3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 801.000716][T29431] RAX: ffffffffffffffda RBX: 00007ff10dc3f6c0 RCX: 00007ff10cd5d60e [ 801.000733][T29431] RDX: 000000000000000f RSI: 00007ff10dc3f0a0 RDI: 0000000000000009 [ 801.000745][T29431] RBP: 00007ff10dc3f090 R08: 0000000000000000 R09: 0000000000000000 [ 801.000757][T29431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 801.000767][T29431] R13: 00007ff10d016038 R14: 00007ff10d015fa0 R15: 00007ffc292a5898 [ 801.000796][T29431] [ 801.065497][T29433] lo speed is unknown, defaulting to 1000 [ 801.264132][T29436] netlink: 'syz.3.5840': attribute type 1 has an invalid length. [ 801.662749][T29453] syzkaller0: entered promiscuous mode [ 801.673422][T29453] syzkaller0: entered allmulticast mode [ 802.043335][T29439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.052792][T29439] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.078774][T29439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.120290][T29439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.132534][T29439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.148799][T29439] veth1_vlan: left promiscuous mode [ 802.156018][T29439] veth0_vlan: left promiscuous mode [ 802.162812][T29439] veth0_vlan: entered promiscuous mode [ 802.171029][T29439] veth1_vlan: entered promiscuous mode [ 802.191574][T29439] veth1_macvtap: left promiscuous mode [ 802.199054][T29439] veth0_macvtap: left promiscuous mode [ 802.205725][T29439] veth0_macvtap: entered promiscuous mode [ 802.213111][T29439] veth1_macvtap: entered promiscuous mode [ 802.230735][T29439] 8021q: adding VLAN 0 to HW filter on device €Â [ 802.240388][T29439] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 802.248895][T29439] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 802.256772][T29439] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 802.267479][T29439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 802.307953][T29439] 8021q: adding VLAN 0 to HW filter on device bond2 [ 802.323335][T29439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 802.332117][T29439] 8021q: adding VLAN 0 to HW filter on device bond4 [ 802.341708][T29439] 8021q: adding VLAN 0 to HW filter on device bond5 [ 802.349845][T29439] 8021q: adding VLAN 0 to HW filter on device bond6 [ 802.360186][T29439] 8021q: adding VLAN 0 to HW filter on device bond7 [ 802.370452][T29439] batman_adv: batadv0: Interface activated: ipvlan2 [ 802.383668][T29433] lo speed is unknown, defaulting to 1000 [ 802.410844][ T9589] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.418021][ T9589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.455000][ T9589] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.462211][ T9589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.553782][T29488] netlink: 'syz.4.5853': attribute type 1 has an invalid length. [ 802.615854][ T9599] netdevsim netdevsim2 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.646283][ T9599] netdevsim netdevsim2 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.680724][ T9599] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.708000][ T9599] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.732774][T29488] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 802.751477][ T9599] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.807751][ T9599] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.840298][ T9599] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.872999][ T9599] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.890691][T29504] netlink: 'syz.2.5856': attribute type 1 has an invalid length. [ 802.954940][T29504] 8021q: adding VLAN 0 to HW filter on device bond8 [ 802.964663][T17093] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 802.973120][T17093] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 802.987453][T28697] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 803.057577][T28697] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 803.248572][T29519] netlink: 'syz.2.5861': attribute type 10 has an invalid length. [ 803.465479][T28697] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 803.494118][T29526] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 803.583397][T29527] netlink: 'syz.2.5864': attribute type 13 has an invalid length. [ 803.618742][T29527] netlink: 'syz.2.5864': attribute type 17 has an invalid length. [ 803.766764][T29525] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.774257][T29525] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.914891][T29525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.936173][T29525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.088763][T29525] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 804.144475][T29527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.152536][T29527] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.163543][T29527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.179593][T29527] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.186750][T29527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.196871][T29527] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.203976][T29527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.222289][T29527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.231530][T29527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.245723][T29527] veth1_vlan: left promiscuous mode [ 804.251824][T29527] veth0_vlan: left promiscuous mode [ 804.258647][T29527] veth0_vlan: entered promiscuous mode [ 804.266285][T29527] veth1_vlan: entered promiscuous mode [ 804.278087][T29527] veth1_macvtap: left promiscuous mode [ 804.284317][T29527] veth0_macvtap: left promiscuous mode [ 804.291650][T29527] veth0_macvtap: entered promiscuous mode [ 804.300710][T29527] veth1_macvtap: entered promiscuous mode [ 804.312014][T29527] 8021q: adding VLAN 0 to HW filter on device €Â [ 804.320261][T29527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 804.329305][T29527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 804.337911][T29527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 804.349128][T29527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 804.388859][T29527] 8021q: adding VLAN 0 to HW filter on device bond2 [ 804.405080][T29527] 8021q: adding VLAN 0 to HW filter on device bond3 [ 804.413988][T29527] 8021q: adding VLAN 0 to HW filter on device bond4 [ 804.423282][T29527] 8021q: adding VLAN 0 to HW filter on device bond5 [ 804.431518][T29527] 8021q: adding VLAN 0 to HW filter on device bond6 [ 804.439970][T29527] 8021q: adding VLAN 0 to HW filter on device bond7 [ 804.451741][T29527] batman_adv: batadv0: Interface activated: ipvlan2 [ 804.468130][T29527] 8021q: adding VLAN 0 to HW filter on device bond8 [ 804.747219][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 805.290805][T29588] __nla_validate_parse: 14 callbacks suppressed [ 805.290825][T29588] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5875'. [ 805.388875][T29578] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 805.789816][T29624] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5883'. [ 805.964485][T29629] lo speed is unknown, defaulting to 1000 [ 806.098693][T29642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5889'. [ 806.123871][T29644] netlink: 'syz.0.5888': attribute type 1 has an invalid length. [ 806.125832][T29642] nbd: must specify at least one socket [ 806.168777][T29647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5889'. [ 806.179246][T29638] IPVS: Scheduler module ip_vs_sip not found [ 806.195327][T29647] nbd: must specify at least one socket [ 806.203027][T29643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5889'. [ 806.220355][T29644] 8021q: adding VLAN 0 to HW filter on device bond17 [ 806.233868][T29643] nbd: must specify at least one socket [ 806.315773][T29648] bond17: (slave gretap2): making interface the new active one [ 806.343879][T29648] bond17: (slave gretap2): Enslaving as an active interface with an up link [ 806.670192][T29629] lo speed is unknown, defaulting to 1000 [ 806.726342][T29670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5893'. [ 806.770379][T29670] block nbd0: not configured, cannot reconfigure [ 806.796282][T29677] tipc: Enabling of bearer rejected, already enabled [ 806.828920][T17042] wlan1: Trigger new scan to find an IBSS to join [ 806.993805][T29689] netlink: 'syz.1.5899': attribute type 3 has an invalid length. [ 807.148404][T29691] lo speed is unknown, defaulting to 1000 [ 807.216975][T29693] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5901'. [ 807.693989][T29708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.736083][T29708] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.808654][T29708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.952096][T29708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.972290][T29708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.988566][T29708] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 808.045742][ T3388] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.053024][ T3388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.089025][ T3388] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.096172][ T3388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.144759][T29691] lo speed is unknown, defaulting to 1000 [ 808.395629][T29725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5907'. [ 808.415369][T29722] netlink: 'syz.2.5907': attribute type 4 has an invalid length. [ 808.428355][T29722] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5907'. [ 808.449281][T29722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5907'. [ 808.591391][ T1313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.615845][T29736] netlink: 'syz.4.5911': attribute type 1 has an invalid length. [ 808.754819][T29736] bond8: entered promiscuous mode [ 808.794731][T29736] bond8: entered allmulticast mode [ 808.818203][T29736] 8021q: adding VLAN 0 to HW filter on device bond8 [ 808.890268][T29741] erspan2: entered allmulticast mode [ 808.956246][T29741] bond8: (slave erspan2): making interface the new active one [ 808.974081][T29741] erspan2: entered promiscuous mode [ 809.023919][T29741] bond8: (slave erspan2): Enslaving as an active interface with an up link [ 809.130551][T29749] netlink: 'syz.1.5913': attribute type 3 has an invalid length. [ 809.174362][T29748] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 809.186699][T29748] syzkaller1: linktype set to 260 [ 809.336627][T29747] lo speed is unknown, defaulting to 1000 [ 809.547393][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 809.585320][T29747] lo speed is unknown, defaulting to 1000 [ 809.733277][T29767] tc_dump_action: action bad kind [ 809.787610][T17040] wlan1: Trigger new scan to find an IBSS to join [ 809.904453][T29755] lo speed is unknown, defaulting to 1000 [ 810.056955][T29773] sctp: [Deprecated]: syz.3.5919 (pid 29773) Use of int in maxseg socket option. [ 810.056955][T29773] Use struct sctp_assoc_value instead [ 810.391308][T29755] lo speed is unknown, defaulting to 1000 [ 810.495826][T29790] netlink: 'syz.4.5926': attribute type 15 has an invalid length. [ 810.506247][T29791] netlink: 'syz.4.5926': attribute type 15 has an invalid length. [ 810.516927][T29790] __nla_validate_parse: 4 callbacks suppressed [ 810.516943][T29790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5926'. [ 810.533765][T29791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5926'. [ 810.533931][T29790] netlink: 'syz.4.5926': attribute type 15 has an invalid length. [ 810.555748][T29790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5926'. [ 810.565980][T29791] netlink: 'syz.4.5926': attribute type 15 has an invalid length. [ 810.584031][T29791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5926'. [ 810.643407][T29794] syzkaller0: entered promiscuous mode [ 810.657249][T29794] syzkaller0: entered allmulticast mode [ 810.669791][T29794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5925'. [ 810.976834][T29796] lo speed is unknown, defaulting to 1000 [ 811.758147][T29796] lo speed is unknown, defaulting to 1000 [ 811.906375][T29817] wlan0: mtu greater than device maximum [ 811.924572][T29817] bond0: (slave wlan0): Error -22 calling dev_set_mtu [ 811.941306][T29817] netlink: 'syz.0.5931': attribute type 58 has an invalid length. [ 811.959672][T29817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5931'. [ 812.133235][T29826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5936'. [ 812.383158][T29826] lo speed is unknown, defaulting to 1000 [ 812.650733][T29839] IPVS: Scheduler module ip_vs_sip not found [ 812.749444][T17040] wlan1: Trigger new scan to find an IBSS to join [ 812.759203][T29839] veth0_to_team: entered promiscuous mode [ 813.206951][T29871] netlink: 'syz.2.5945': attribute type 2 has an invalid length. [ 813.241705][T29871] syzkaller0: entered promiscuous mode [ 813.254634][T29849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5936'. [ 813.268003][T29871] syzkaller0: entered allmulticast mode [ 813.496346][T29826] lo speed is unknown, defaulting to 1000 [ 813.605082][T29882] netlink: 'syz.4.5947': attribute type 4 has an invalid length. [ 813.631836][T29881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5948'. [ 813.666242][T29881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5948'. [ 813.691104][T17093] wlan1: Creating new IBSS network, BSSID 9a:79:29:08:05:d6 [ 813.826236][T29887] sctp: [Deprecated]: syz.2.5950 (pid 29887) Use of struct sctp_assoc_value in delayed_ack socket option. [ 813.826236][T29887] Use struct sctp_sack_info instead [ 814.855553][T29935] lo speed is unknown, defaulting to 1000 [ 814.869293][T29935] lo speed is unknown, defaulting to 1000 [ 814.891962][T29935] lo speed is unknown, defaulting to 1000 [ 814.915987][T29935] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 815.014000][T29935] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 815.064540][T29953] netlink: 'syz.3.5961': attribute type 4 has an invalid length. [ 815.156576][T29935] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 815.268388][T29935] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 815.462237][T29935] lo speed is unknown, defaulting to 1000 [ 815.535168][T29935] lo speed is unknown, defaulting to 1000 [ 815.568386][T29935] lo speed is unknown, defaulting to 1000 [ 815.586230][T29966] __nla_validate_parse: 3 callbacks suppressed [ 815.586254][T29966] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.5964'. [ 815.603654][T29935] lo speed is unknown, defaulting to 1000 [ 815.634285][T29966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5964'. [ 815.643558][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 815.664928][T29935] lo speed is unknown, defaulting to 1000 [ 815.696068][T29935] lo speed is unknown, defaulting to 1000 [ 815.724155][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 815.738225][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 815.750320][T29935] lo speed is unknown, defaulting to 1000 [ 815.759772][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 815.779312][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 815.794329][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 815.885563][T29935] lo speed is unknown, defaulting to 1000 [ 815.933658][T29935] lo speed is unknown, defaulting to 1000 [ 815.980062][T29935] lo speed is unknown, defaulting to 1000 [ 816.014865][T29935] lo speed is unknown, defaulting to 1000 [ 816.059907][T29935] lo speed is unknown, defaulting to 1000 [ 816.084913][T29935] lo speed is unknown, defaulting to 1000 [ 816.120598][T29935] lo speed is unknown, defaulting to 1000 [ 816.150505][T29935] lo speed is unknown, defaulting to 1000 [ 816.180042][T29935] lo speed is unknown, defaulting to 1000 [ 816.471713][T29994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5971'. [ 816.552179][T29994] bond9: option broadcast_neighbor: invalid value (30) [ 816.561751][T29994] bond9 (unregistering): Released all slaves [ 816.634299][T29967] lo speed is unknown, defaulting to 1000 [ 817.201095][T30037] netlink: 'syz.4.5980': attribute type 2 has an invalid length. [ 817.232893][T30037] netlink: 'syz.4.5980': attribute type 9 has an invalid length. [ 817.248182][T29967] lo speed is unknown, defaulting to 1000 [ 817.264563][T30037] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5980'. [ 817.712265][T30055] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 817.740080][T29967] lo speed is unknown, defaulting to 1000 [ 817.800838][T30054] lo speed is unknown, defaulting to 1000 [ 817.867178][ T5637] Bluetooth: hci5: command tx timeout [ 817.893064][T30058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5984'. [ 818.019578][T30057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5984'. [ 818.029717][T30057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5984'. [ 818.123394][T30065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5986'. [ 818.145979][T30067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5987'. [ 818.187206][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 818.225964][T30065] ip6tnl1: entered allmulticast mode [ 818.231822][T30054] lo speed is unknown, defaulting to 1000 [ 818.256125][T30067] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5987'. [ 818.543789][T29967] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.551268][T29967] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.559166][T29967] bridge_slave_0: entered allmulticast mode [ 818.567639][T29967] bridge_slave_0: entered promiscuous mode [ 818.575032][T30054] lo speed is unknown, defaulting to 1000 [ 818.576102][T29967] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.588581][T29967] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.595836][T29967] bridge_slave_1: entered allmulticast mode [ 818.603319][T29967] bridge_slave_1: entered promiscuous mode [ 818.659718][T29967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.693341][T29967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.724111][T29967] team0: Port device team_slave_0 added [ 818.735009][T29967] team0: Port device team_slave_1 added [ 818.993266][T29967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.003447][T29967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.031628][T29967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.066532][T29967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.074982][T29967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.119991][T29967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.333293][T29967] hsr_slave_0: entered promiscuous mode [ 819.340548][T29967] hsr_slave_1: entered promiscuous mode [ 819.346862][T29967] debugfs: 'hsr0' already exists in 'hsr' [ 819.352901][T29967] Cannot create hsr debugfs directory [ 819.455375][T29967] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.473567][T29967] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.565404][T29967] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.575951][T29967] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.642832][T30089] veth0_macvtap: entered allmulticast mode [ 819.654616][T29967] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.664667][T29967] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.734238][T29967] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.744069][T29967] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.947581][ T5637] Bluetooth: hci5: command tx timeout [ 821.006899][T30060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 821.056247][T29967] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 821.109868][T29967] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 821.134230][T29967] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 821.170954][T29967] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 821.202800][T30100] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5994'. [ 821.260709][T29967] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 821.271724][T29967] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 821.355484][T29967] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 821.371122][T29967] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 821.572582][T30116] lo speed is unknown, defaulting to 1000 [ 821.633036][T30130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6000'. [ 821.666013][T29967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.672402][T30131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6000'. [ 821.728741][T29967] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.770595][T30130] team0: entered promiscuous mode [ 821.790709][T30130] team_slave_0: entered promiscuous mode [ 821.801930][T30130] team_slave_1: entered promiscuous mode [ 821.815040][T30130] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 821.841633][ T3388] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.848856][ T3388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.906898][ T9603] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.915797][ T9603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.932334][T30142] netlink: 192 bytes leftover after parsing attributes in process `syz.2.6004'. [ 821.944350][T30143] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6005'. [ 821.968658][T30143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 821.987523][T30144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6004'. [ 822.032321][ T5637] Bluetooth: hci5: command tx timeout [ 822.082262][T30147] netlink: 'syz.4.6006': attribute type 12 has an invalid length. [ 822.143195][T30116] lo speed is unknown, defaulting to 1000 [ 822.955308][T30116] lo speed is unknown, defaulting to 1000 [ 823.343339][T30211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6016'. [ 823.353989][T30207] syzkaller1: entered promiscuous mode [ 823.373522][T30207] syzkaller1: entered allmulticast mode [ 823.379944][T30211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6016'. [ 823.402829][T30211] netlink: 'syz.2.6016': attribute type 18 has an invalid length. [ 823.584684][T29967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.821346][T29967] veth0_vlan: entered promiscuous mode [ 823.951079][T29967] veth1_vlan: entered promiscuous mode [ 823.996563][T30231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6019'. [ 824.074770][T30237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6019'. [ 824.107282][ T5637] Bluetooth: hci5: command tx timeout [ 824.315841][T30231] bond9: entered promiscuous mode [ 824.334828][T30231] 8021q: adding VLAN 0 to HW filter on device bond9 [ 824.394521][T30237] bond9 (unregistering): Released all slaves [ 824.540237][T29967] veth0_macvtap: entered promiscuous mode [ 824.587220][T29967] veth1_macvtap: entered promiscuous mode [ 824.655006][T29967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.698616][T29967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 824.736298][T17040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.777655][T17040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.839298][T30262] xt_TCPMSS: Only works on TCP SYN packets [ 824.899257][T17040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.933433][T17040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.358254][ T9603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.396850][ T9603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.454728][T30294] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 825.479625][T30294] pim6reg1: entered promiscuous mode [ 825.485235][T30294] pim6reg1: entered allmulticast mode [ 826.105081][T30286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 826.215283][T29578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.236085][T29578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.414163][T30337] netlink: 'syz.4.6035': attribute type 1 has an invalid length. [ 826.444454][T30340] netlink: 'syz.2.6034': attribute type 3 has an invalid length. [ 826.461715][T30334] lo speed is unknown, defaulting to 1000 [ 826.503095][T30340] __nla_validate_parse: 2 callbacks suppressed [ 826.503112][T30340] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6034'. [ 826.509354][T30348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5962'. [ 826.530359][T30337] 8021q: adding VLAN 0 to HW filter on device bond9 [ 826.611658][T30353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6037'. [ 826.969721][T30361] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 827.092490][T28720] team_slave_0: entered promiscuous mode [ 827.100259][T28720] team_slave_1: entered promiscuous mode [ 827.279129][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 827.293893][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 827.302933][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 827.316284][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 827.326349][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 827.830595][T30396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6044'. [ 827.879894][T30396] vlan0: entered promiscuous mode [ 827.972364][T30334] lo speed is unknown, defaulting to 1000 [ 828.183366][T30411] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6046'. [ 828.483550][T30376] lo speed is unknown, defaulting to 1000 [ 828.612219][T30334] lo speed is unknown, defaulting to 1000 [ 829.210908][T30376] lo speed is unknown, defaulting to 1000 [ 829.396301][ T5629] Bluetooth: hci1: command tx timeout [ 829.660305][T30376] lo speed is unknown, defaulting to 1000 [ 829.717895][T30470] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6055'. [ 829.948460][ T9594] unregister_netdevice: waiting for bond6 to become free. Usage count = 2 [ 829.968610][T30492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6060'. [ 829.978418][T30492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6060'. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 830.030508][T30492] vlan2: entered promiscuous mode [ 830.073758][T30492] gretap0: entered promiscuous mode [ 830.113126][T30492] vlan2: entered allmulticast mode [ 830.147511][T30492] gretap0: entered allmulticast mode [ 830.284719][T30506] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6061'. [ 831.274995][T30504] bridge0: port 3(syz_tun) entered disabled state [ 831.346452][T30504] syz_tun (unregistering): left allmulticast mode [ 831.354401][T30504] syz_tun (unregistering): left promiscuous mode [ 831.363422][T30504] bridge0: port 3(syz_tun) entered disabled state [ 835.468864][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 836.108566][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!