last executing test programs: 1.985265942s ago: executing program 3 (id=940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a00), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3, @ANYRESOCT=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x9, 0x6, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x1, 0x0, 0x6, 0x7}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x44, r5, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1000}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x20000044) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r1, 0xd524283ca41e15a7, 0x70bd29, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x20008081}, 0x10) 1.859070823s ago: executing program 1 (id=943): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x20}}, 0xf0}}, 0x0) 1.694782522s ago: executing program 3 (id=946): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x9a, 0x2, 0x40, @loopback, @remote, 0x1, 0x700, 0x492, 0xc6}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @mcast2, 0x9, 0x1000, 0x2, 0x400, 0x4, 0x400000, r1}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r2, 0x72ff0000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab70000000000008"], 0x24}], 0x1}, 0x0) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES16=r3], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0x8, r1, 0x22, r8}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r10, 0x80049363, &(0x7f00000003c0)) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r13], 0x48}}, 0x0) recvmmsg(r11, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x5e}, [@NDA_DST_IPV6={0x14, 0x1, @private2}]}, 0x30}}, 0x0) 1.578319308s ago: executing program 1 (id=947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112b9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c000}, 0x200040c0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x38, 0x20, 0x1, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x10, 0x80, 0x7, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x4}, @FRA_SRC={0x8, 0x2, @multicast1}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r8 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r8, 0x116, 0x7f, &(0x7f0000000c80)=0xe3, 0x4) connect$caif(r8, &(0x7f0000000cc0), 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000d00)={0x120c, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x80}}}}, [@NL80211_ATTR_BEACON_HEAD={0x45d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @device_a, @device_a, @from_mac, {0x2, 0xff9}, @value=@ver_80211n={0x0, 0x54, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0xe91, @default, 0xc2, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @val={0x5, 0xd0, {0x81, 0x1, 0xe, "0c4dbd85fa0ecaab4530230a737af519a822723e18b68a9cd2a5dde75af10e738a95e37d0ee47e88567997936568fc136fe8500bcdea6bc6c9af0d014f70e245c1143b7c34ecbeee702afef195f44f29c5afb5dfd5e0ede64e6c9a14cb3bc3780092be15c0cf644e728a323935dc068b772ed0171b069502aed0be55b7d10a1984cca60d655fbc78092b84e921d41af188f3aa641de5ab6f7815f3d22aaf590dd357ace981cf217ce95fd12742709ea18fb46ce8651acb70553693100be84954a9fb2d77952b91102ae0a5c90d"}}, @val={0x25, 0x3, {0x0, 0x38, 0x2}}, @void, @val={0x3c, 0x4, {0x0, 0x1, 0xa1, 0xc}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x6, 0x61}}, @val={0x76, 0x6, {0xea, 0x3f, 0x30, 0x7ff}}, [{0xdd, 0xfb, "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"}, {0xdd, 0xa1, "7378c06634acccc25f54c8977779f97bcdb8baab27c92f40b041d18a21d6944e54c2508569a799703a43a658eacefe880e6dc5a21934b2eaaf357fb139330cac57748607e20b9fdfef78d40c76a19205ed07d013e8a9ddddafd5546535e995aeb7ffea2b0f32264f2a9c2b0d404788fb6c220ebc3afce46b63cfbdb49fedad2c56bcb7da0fb78e5d6232d016be8d5a29c70c122dd46595253a78c35a606623f39f"}, {0xdd, 0x64, "e27a24e0f21526e6a9808ef2b8a2571d851631a39184424bbf677d20fbcd5b228f7b3ef7fb4b10fe3b46de1c4de776e468fa5295b2e6c5b9510aaf176d154aada6cc786a07e7291b54e229fc028f88b902099b0c34dc3b8e60dacac0e653b28949617d4e"}, {0xdd, 0x8e, "4586ce209243cc27fd4dcd9cab3a7869b028bc1cdd5ead5f6e0e7553ce6f66b0dcfe74b855096f59652fd6b1e1b3d5209784b8916ada7a94bef99e959cd2f25f157879a0de2cedcda7b0cfda51bcd931d4f9a3b1c6c58964edfef835143bc000115160cb18e686ddf5f2da8f829b92788580337378b22abdbb18ab138686ac0bdd5063f416e57333fcb0409904e2"}, {0xdd, 0x9b, "e7af3ee5c5ef35cd9a871679e4aa5e83295e694308ea516b45c40aac3fc491f66d122e9b41a57705906647c62c691da481bced22bcd04710021c1f1b1040ff84d39967dcc91bfe637063b0e238372b3a5451fe7819f44c545872cbbb663d389cd6f0eee2d350f3220147caf80d0ffd017ccd69b0b6ee17bd720ac9b853e182547ba7ed9072fca4112403dab862a12b718eab940a59db6b3ef312cd"}]}}, @NL80211_ATTR_BEACON_HEAD={0x3bc, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_b, @from_mac, {0x3, 0x6}}, 0x8, @default, 0x4800, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0xc, 0x1}, {0x3}, {0x1b, 0x1}, {0x16}]}, @void, @val={0x4, 0x6, {0x3, 0x5e, 0x77, 0x3}}, @void, @val={0x5, 0xc7, {0x3, 0xdd, 0x4, "62b10175d2aa96ea1dbd912ee843df73aa57c89079814de057bd122ec22ee9dc48d3c90589ea5afc918ca177449ea739612ece7d52bed08c23e21d65e3a7842b6e793932eb5c7d4f5abd68f9ed647d1110a638b001c40464dfbe9a59c43a77e8e10d0c76998c9e275b7d7b3dc3021fa388110b6b7dd4ba9ebd33d9402640b435eea35033c292b5fdd1aa953dc518591d632c357035f213376a434300aacbe07ee9a1cef027ccb20f3599646acf7d2cdeef43000bfca84c06e948969f3bb78f349d3b1d4e"}}, @void, @void, @void, @val={0x2d, 0x1a, {0x40, 0x1, 0x3, 0x0, {0x8, 0x3, 0x0, 0x3a, 0x0, 0x0, 0x1}, 0x8, 0x9f, 0x4d}}, @void, @void, @void, [{0xdd, 0x1c, "6f5a9762955c80120c3e6d5013881d1faae35ae07e6d95b97fbbeb0a"}, {0xdd, 0xc, "f8a4a6f3d9299283628291f4"}, {0xdd, 0xc6, "4cfc30fee080f918c59bf4db7a561caa34c42212c257cb120503e9b35701368d56764c5170bc58d1c4ca62afce7ab6dcf76cf8e183d627e312f23b9324c822f990a757efea1b2bd0a2b3ff4d77feed7c0671dad636fe2989d3968be5eb31901cc884900da5a9a88a6ede81c344f9752958971de256cedd714a2bfd0072d4c3e8ec307b35f17c273041e9a24b744ceb536fe04f28ad9c093c8c7191fbee46c493298d5a67a7771b4761d356daf7fefebffbebdc3b2f4f92e2add1703047a259b12bb468859487"}, {0xdd, 0xd, "b32343d1c03355379353fb45f2"}, {0xdd, 0x95, "b4e7d8cb31d1d039312876aab7eb12138b4edab9237c011e203d205bc0a7cca6a54cec79f82bfd409e594312070f72fd5534c08702e7bf74afad3173b32b8f02e358850a6299fb1ddf1ceaa33cd818f25cc1fbe119301f6a9e491657f9a7b3cd5656042613185d16589ac75ed694f77035d458f9076fa724ff219022d677a920fc70684765636a8d1617138638c32dedb254263faf"}, {0xdd, 0xfd, "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"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0xfe, 0x80, [@measure_req={0x26, 0xe0, {0xf1, 0x8, 0xfa, "10fa1115782a78b7e5f301c4c32dfe75b7b58a4b9c839e6492a61f74cbbde79484b1902d600b3576b66bb64ca94383c26b62b3ffdc9f068cb5da29a220d4d20059b2abd85ab1b5baf0d5c2bacd84ab249d420ae5978ddc936b451961fee002fb32c7813e16978a140ec6101f9606668ae9e7ff667678ed4d9a969983b302847394f5211879882d57b89a1d2fde50a360cb0eff8c204fe27e03188785ae3b1c6ab7a98b56317afaa44bfa418f7b6ffc1f286b3619a21ca9dd206a813703e46a384babe47ada5452c8f6c16e7c35de649ea20de2b93a8b3a3adfa13faffe"}}, @link_id={0x65, 0x12, {@random="6d8fb24dcc8d", @device_a, @broadcast}}, @ibss={0x6, 0x2, 0x7ff0}]}, @NL80211_ATTR_IE={0x11e, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @random={0x80, 0xd, "61c96851fc0090dd5167199f3d"}, @ssid={0x0, 0x6, @default_ap_ssid}, @tim={0x5, 0xfe, {0xed, 0xb9, 0x6, "3da4ad0195a77199e04482ce5f307c46ef591507251b4f7394ba84bb3fa51308470c7c07d65cb9b14fbdb76ce31b584ebcad4b6abcd826f10b8821ec2e679412d960da15769fd2ef5980991da42fe9f5a75ddeb33c7111fff1aca9c8ac0bd1c841eb8c8dd3be50a98256854c0c247c9b3fb4a51993f0d23c67e9e1760b833ea2025374ae95593551d41b689a58fc1c57adfde6c1bf2b2317e849b6dd445b31fe850c4a75a8334df1fb49648fd002c6c5ccbdfde9fa5fdd260efccae74570134c882d5315c924438f3bf522955ccee0c1bfdbba7115a4327ea86eb9b1ffe805ae9c963dbf211e3c68a5d4bce36e6027633cfd2a63a928819e326ab6"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x13a, 0x80, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @tim={0x5, 0xc1, {0x0, 0xc9, 0xd0, "918c35140d7fbd988223035922f5314e139fa450827a99e290100346f8e7ed5b3cb9982bfdeca915fb18c36a8d3a21ac15885b10cc436127f155585a5dbb5343fec6da1a4fc99d7e0c2b7bedc4e73f8979407f451152d0b84819dd4a9a3da66f843d81814be0570d7f706a83928b46206e4417e43affa1be86063eac635c39ac79bdae81cc6ae0c9cfc6f4a625c4fdd68b068c187942e0736392d4cb491e38dcdee03f9582792262dacaf513848590c4c88f8a7c849d0458ee082df6f55d"}}, @preq={0x82, 0x25, {{0x0, 0x1}, 0x7, 0x7, 0x4, @device_a, 0x2, @void, 0xe6bf, 0xd9e, 0x1, [{{0x1, 0x0, 0x1}, @broadcast, 0x3}]}}, @supported_rates={0x1, 0x4, [{0x18}, {0xc, 0x1}, {0x5e, 0x1}, {0x12}]}, @channel_switch={0x25, 0x3, {0x1, 0xb, 0xa}}, @cf={0x4, 0x6, {0x6, 0x3, 0x6, 0x8c}}, @mic={0x8c, 0x10, {0x572, "7948eb1f58d0", @short="1810c8c4b001de2e"}}, @random_vendor={0xdd, 0x22, "1c60a0ce4bab6a6a584a7976b29111b28034f8824d800d5d126486675d0ea2467ae5"}]}, @NL80211_ATTR_BEACON_HEAD={0x646, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @device_b, @device_a, @from_mac=@device_b, {0xd, 0xc}}, 0xff, @default, 0x1ff7f798d430aa3b, @void, @val={0x1, 0x7, [{0x1b, 0x1}, {0x16, 0x1}, {0x5}, {0x30, 0x1}, {0x18, 0x1}, {0x30, 0x1}, {0x1b}]}, @val={0x3, 0x1, 0x99}, @void, @void, @val={0x5, 0xc9, {0x80, 0xf6, 0xf2, "a47e02e0e915d1682eeba68ede9327f1d489ad5bed25e85798de1880b14bd7ff390a4cc011a2b25286f9bbc38f178f4403e3c35e7fbab541a16bd891f4620620df0c88c1d7b3e3cc118685b922e8f783de0dfe76687381fb8eff526f64353eb077ecece0b78b4c93489ac71401649c7bd16f60b1f5073a4d092d82e4f2b89b2027ee476970f160026f85ec6a0ae8b3e88e5d4d8268f48fd568f2fbf6d08494571b6d97d18b408da3ac4907e0837cc2ff3c007857acbde5bad20e8dc219cfb651fbe80b848abd"}}, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x2, 0x7, 0x0, {0x1c0000000000000, 0x2, 0x0, 0x7, 0x0, 0x1, 0x1, 0x2}, 0x406, 0xad, 0x27}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x10, 0x20}}, @val={0x76, 0x6, {0x0, 0x5, 0x2e, 0x9}}, [{0xdd, 0xb7, "b53e15a137cd58ad240f3e348d4a4fbcd4a2b4f9ba201f4a15cede83c320434f4e8b0ba8093e3c0c6cdadd37e3809a44f940dd817beb420fe3c604607c38e2a3f961e77caf9a4ba6e9756a146e80ddc7dc5b6a3a718c83fb577c01a49fb3f066ec01fbc238136fcae28c4087673eb82e3e2a6b224fa3690fedb099036ed5c4b7a04afbfc785574583ad357dd0e2b0ddd7fbd06663c11e148cd9407355675e76484255efc0dbdfd4a762e297abdc97cb3af68eba64b07ac"}, {0xdd, 0xb7, "52fcd0dba86996140197d8fc97a1d912840d19ca94f46dc1c498c0439a4d51937517d9e14c141538354d87f74d60723e30d13eb55de5f3036e6301151784850621c3ef70826d078571f218f902049bdc0ce74e3bd2994f01ff2743ea1fdfa6e0d3cd4b1d8e539f970033b37062c1b5ee60d2e6ca40235bd74de35bed0b4e92f293001fda047852f8b746f5fde7d00f36356996bae8598fe6429e08fb2e9441b18a6c780afcae373c0c6041abd98d28d961f35c3bd41854"}, {0xdd, 0xa4, "b49915de50cff74b6f1a27478c8badd317df79d201e9a76a88022cdf24371c863d06f921a241b3da59d02b4addf815b32422cbb3565a5621050cc6e34c8fa9e9b90035ecebf6ab4f6b8361497adbfe44aef511df7b23d83338eeb06bf78adc923f26c40eee5dc08aa8ece37fd3a6dee43684fff0d9bb8d870b8250e245e312fbae191aa32193a082d184b9418ea61a520f908ca6e7078a26723c308642e6f30974acc182"}, {0xdd, 0x77, "9b343788cf0b48f35cb55f07bbd6dd089a37a0210c14f5c78294ff6c992ffea51f39273f42b2d5c29192b1866ae0774edc91b858db8f57eac8f161b9ab5d4539993cf5009d98a5887a6b61a952a480e618b6c8c7d051ec35c78161f5ef5c065d2414a08a23a360dc74aaf0a582b82e06dacb095f218769"}, {0xdd, 0x67, "59ef5d98054923a26aa626410cb4cb2188ade3970d56215b369807a54732863fa71d233058fff6d5f572b3e54852e2fd28ca18792c7d138d24b29f74e5fe4ee71805ff9014274608fca651b5f28754e8b37ffee1453acfb6b6c9623dd90d1bf518cccc84e1f1e3"}, {0xdd, 0xf3, "d408a4e01fb9ab6391d14b0d5e4c4e3769aa794c6659bc00503239035b011aa6c79b447dcc050c4e9a95bb78fa65c92cf691d0e0b49f50ad584f4bf5e27b84b5374549424e79e15fdfd860d0e3d4970c33462038c3a6a9360c70023b3d4c13265f61014a03c2f46655886a2d88d50e8e509e97cccc658b405032774d3235451c6768511fe837e322abddbcd844ee55c3e6fbf0433861b63e38754c2e25b4cf82b1193eaf0227a62afe93cd6edfde8ac4360d84abbcc74f1def942179cf2c57e5cf43b2a87431193546fd914c5b31a90dc7e750b4067b13071ae77077ec2eb56b3e2b22b9152d61ea06e8377eaf4935dccb89d2"}, {0xdd, 0x38, "e1d521409420939fe100a65a528d313dc0cb2327db02f6f0c3d63364b28e9a1fee974f877d9b79e2ae98b145a8befa5b6b9b7b730a6d3b49"}, {0xdd, 0xe7, "5177d6bcf3c91a3df7564621e74848ff9c6fb417399e408613dcd20064cc67fb1a5745f0689384817279e2a2678ed89bd96073485433501d13fb28ad7a7d9a6945550abfb083779ec06a0562c05ddd9a9891f4822b6c47162e3b1185d25651305c2fd3b4e7a47d52aa82db126b2e9775bbbe82d6e9e8201fb0c429bfde0cab12090407a163e1518844cc67aad5de275cdc95ff161e70a2c16f7a3a3098f32736bb787a29d62608914d5ab560fbbccdb128c4c45ff72195c048ee4a43f68dd6f3a8384b786f1cbe830c325b201aef5b1ed73d9d9a4d08c46c2e97b67bca37e8a6ee8dd8ccd95be4"}]}}, @NL80211_ATTR_IE={0x23, 0x2a, [@mesh_chsw={0x76, 0x6, {0x4, 0xa, 0x3d, 0x8}}, @rann={0x7e, 0x15, {{0x0, 0x7b}, 0x5, 0x1, @device_b, 0x4, 0x4, 0x5c}}]}]}, 0x120c}, 0x1, 0x0, 0x0, 0x81}, 0x44044) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c1", 0xe}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r6, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/113, 0x71}], 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRES16=r1, @ANYRESOCT=r5, @ANYRESHEX=r0, @ANYBLOB="0800050006000000140017800400050004000400060001", @ANYRES8=r5], 0x60}}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000540)={0x65cf4c94, 0xfd}) 1.320377155s ago: executing program 4 (id=950): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000021c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10800ff, r2}, 0x38) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000540)={@default, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000001c0), 0x4) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @rand_addr=0x64010101}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f0000000000)={0x3}, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', @broadcast}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r10, &(0x7f0000002a40)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000003f00)=[{&(0x7f0000000280)="91dad46fd2bb24e0a5bb07ff1b5eb9de93b18c9f5998ceec770b2788b6cff9257393787213c8d7cf835b19256e3f5e80ba57cf3d3571f8eee6c75fd5809c705ba3059acc6daf0091", 0x48}, {&(0x7f00000013c0)="294b67d2ae260d8c9caec5120aac812705c5bde622647261f520565559fb17774480a1f293d61bc28c9a44e25f47", 0x2e}, {&(0x7f0000002c80)="0c1aedbb52942f0b261442c5311e747e6d33856799d21bdd3037ccc6e1c462dc38d506c602d058176f8121314af3134701e893eeee925675d2044e1f4d69e89c12764e73d392ba3bed27b5c01d440a66cce35a536ab09b44d2be550f69a1e9e2d933bbe46303524fa79bbb2f19edc90591845ea33a7a8655b23afa732b291de2fc86a6fafd4c84fcdd1d8b58e2b323d9fc76f0daa3f3753941ea008c5c1b32fec247e2ec87c855858b02f2d624d9ed938ca77291985b8b0cce7dcc80fcca878fbf9190b25e0b200e1607b3d53f7c1e982d294b5366c441ea11ac48599e89a2fc521b46cfdd", 0xe5}, {&(0x7f0000002d80)="57d39afe66eb286a2b00ef90eeb2a26598073387e5fbde175f1a5679626962643f2070238909be212f0c34f1b26cad15b4bc25fa5cabbf6b221bde58e8160b93ca7e0923598676eb3fed08ade32f786c0394d538a13245e078a251c17c13cf0852334d23930991229be16789daaf4dca9de2ebd162e98d3e42f6e3b1cf8020f030d36d755b5d1fb1d48eff852c0ec2bfe683b2ed4d4846f41eb377e567b319d6aed92a2a40c5418ff7813fc2fe8b772422157f0143d6e741d9b9732abb99af3535061312ce07b3b43e04da3346cf593059fad5adfb047fa89a8bc3d14b77ee3c986dd6644ee84293b6484760ac837fb387881b7cac0e007ab152978ab1e67e99b94fe1ba518c706a5b279ce23f3810efa3244149fef8894cc6554b57629cd9b0f235b5f899efa75f3e65df135f85ced5c63540c778e204d698738cd5e44642c8d841576addbbf2a257dcdabf17d4beb7ea70ca96b11a8aaf04e767841ae0605b0aa16f2f75f14adbdec68de5fda6c83564e65805c4acef9e3c899cba1d0abb74dee0a81cf0d668fb72c85d7d84eb5d5027fc994e3abd395886da5402568526314107b4fde1608f47dcb1a16678bd28ecdafcf978932961540646f41255b9c7654cd8d69d464e3db324330ddeda56dd82f48b167db3b8e98ce7f9e83e36991f01cc142aef9ac40a102cf92ffe4bd2cda17692e0028d6bca3e195d4244ac307f5cd112e0fd30d0e7fcf0a22d3b7e2720c083b9dc3ed5848a33b23e1323ab94be9bf195fa6523eb8b16f338e7e4b2eea8a72dbeb6b1c3207f67f0cf173e1f8093e4dc7a0b7f43977b31ffe3c7f29926305475219af5f480b844bd9dabb72c01dd168b856e3182da84b5b0f4785536bc45f9633d28552a5308aaf5343ff04e600a0855d509e10e82cd1eaa707b4f26ca1f703104db04c8af428a1750214693907f27cf3120f3d5b0a979468f883832cff12ac516405530264108e92e731d7a47c57b1f27208c82254bfd356ecfcec2a383644738aa3886d48c7faa08e5dc5efb470d55620071dad369bd1ae77f154df85805847e027737e1b928c3a4de96b165a97b7aa1bd21c7cffbc2bf591f41d02455a272501424d31811c1b564cde8d42e5c55c797cbab458938c8378c715af205c51895c743f669a39326a2b709325ba12b41150423049a05b336b0382fc3c19f341a6cf7f6b78e43112d84976e79d918c0e9a457dbec8264ea146c5a80ebf03cf1813acccf6d290c264a0bfb4bdbf10f6c372f1936c145d2b3470fd5489f751d35d13d959c82c412586692374660956993f7b2896eb8c0ba529967f110381a51476a9899c7d20e5f60ad61ad14a218932bfccb3545b5477b021fce771371c4427c2a61772ce43871c48787d228ecd87e186145ef559a0fefcfff4708856ac8bb4c6e0aefb03b2f142cf0976fe9d69b732a990d397ce3d8c72895da650b5653da518378741a504a29230108b46c75fa9789a27b48ee5a7211cc36f5c242a83fb2b151e0dd147f632f1520c220cba8f31106912cbfb6deba73", 0x446}, {0x0}], 0x5}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000002780)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}}], 0x4, 0x20004086) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r10, 0x28, 0x2, &(0x7f0000000300)=0xac24, 0x8) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r9) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000026000100000000001a000000030100800c"], 0x114}], 0x1}, 0x4000040) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x78, r7, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x34, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x74, 0x1, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x58}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @acl_policy, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x78}}, 0x0) 1.309380085s ago: executing program 2 (id=951): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110b6000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x208180, 0x0) ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000180)) 1.174656658s ago: executing program 2 (id=953): unshare(0x20000400) (async) unshare(0x20000400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x90000002}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06962b04961b000000000000000000000000000000c6626505", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00'}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000005c0), 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000005c0), 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000114000429bd7000fcdbdf250800010000000000080001000200001008000100010000000800010002000800010001000000080001000400000008000100000000000800010002000000080001000100002008000100010000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x400c055) (async) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000114000429bd7000fcdbdf250800010000000000080001000200001008000100010000000800010002000800010001000000080001000400000008000100000000000800010002000000080001000100002008000100010000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x400c055) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000f2cc45855df494d7bc0000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff08000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00'}, 0x90) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x38, 0x20, 0x1, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x10, 0x80, 0x7, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x4}, @FRA_SRC={0x8, 0x2, @multicast1}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x38, 0x20, 0x1, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x10, 0x80, 0x7, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x4}, @FRA_SRC={0x8, 0x2, @multicast1}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) r6 = socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x7530}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000280)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r8, 0x4052ebceb7e30bf5, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) socket$key(0xf, 0x3, 0x2) (async) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x7}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={0xffffffffffffffff, r7, 0x25, 0x2, @val=@iter={&(0x7f00000002c0)=@cgroup={0x0, r9, 0x8}, 0x10}}, 0x20) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10) (async) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10) 1.159287597s ago: executing program 4 (id=954): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25021051ff", @ANYRES32=r3, @ANYBLOB="080002007f0000012750ba90dd132a6d630283badd69fb93d602779e2bb563ba2a98f4760bebe76a18278df81b225f5a6058f69079c92101e0d68978246e8bf38c3e58b5015de0d55e53b4adc5deaeea4168e64fe20290f81c4a0adb456db87ee5d1663c5aa8b3f9db45be0ade6792c9538a0f76d64b1358ecccb42c50b1f93bb03e7983070e45873580d44b9fa538f963ee07e64a8c78b84e2a376ddf4394d2c03d6bba904f7017552a16a5f5f3b2e496a6e22545aa9c1debccdcc4fa49898e6b836a4d0501f1fbd8a01c1cc29bbbcf7ca50caf4869aa1c0ed9aadcce71a2ec3833b25c7cf3"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 1.066564724s ago: executing program 2 (id=955): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x1) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x429, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x401}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x840) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x54}}, 0x0) close(r0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000000)={'bridge_slave_0\x00', 0x2bba}) 1.003326935s ago: executing program 0 (id=956): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0xffffffffffffff11, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @restrict={0x1}]}}, 0x0, 0x46, 0x0, 0xa}, 0x20) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 973.867705ms ago: executing program 4 (id=957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r4, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000100)={"291b27c10fb62ec43a155567844a6430", 0x0, r5, {0x9, 0x10000}, {0x3, 0x2}, 0x9, [0x4, 0x7fffffffffffffff, 0xfffffffffffffffb, 0x2, 0x1, 0x1, 0x64c6e837, 0x544f, 0xf, 0x7, 0x4, 0x22, 0x0, 0x40, 0xd, 0x6]}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) 965.774284ms ago: executing program 0 (id=958): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x9, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x1, &(0x7f00000005c0)=@raw=[@ldst={0x2, 0x3, 0x3, 0xa, 0xa, 0x6, 0xfffffffffffffffc}], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 818.821343ms ago: executing program 0 (id=959): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) getsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$inet6(0xa, 0x6, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 796.07007ms ago: executing program 2 (id=960): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_NH_ID={0x8, 0x1e, 0x3}, @RTA_MULTIPATH={0xc}]}, 0x30}}, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x80, r4, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5b}}}}, [@NL80211_ATTR_SSID={0xd, 0x34, @random="893f4536fc17c5d6cf"}, @NL80211_ATTR_PMKID={0x14, 0x55, "c3862b976869ccc92e021ad8a84331f3"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "4b24bffff096675df6403a94a6261368"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x41}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5f}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x0, 0x3, 0x3}, 0x10) getsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000200)=0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x3, 0x1, 0x3}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@setlink={0x3c, 0x13, 0x10, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_MTU={0x8, 0x4, 0xffffffff}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) 749.655683ms ago: executing program 3 (id=961): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a8000081000000080600f807000604"], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x3a) (async) sendto$inet6(r4, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c) (async) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a8000081000000080600f807000604"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) (async) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x62, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) (async) 629.639754ms ago: executing program 4 (id=962): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) (async) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) (async) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r7, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async, rerun: 32) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) (rerun: 32) bind$inet6(0xffffffffffffffff, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r8, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) socket$inet6(0xa, 0x2, 0x0) 555.186527ms ago: executing program 0 (id=963): r0 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x20, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x48}}, 0x0) (async, rerun: 64) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0xff, 0x0, 0x12, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x8000, 0x8e9, 0x4}}) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x48, 0x1, 0x6, 0xb, {{0xb, 0x4, 0x1, 0x1, 0x2c, 0x65, 0x0, 0x9, 0x2f, 0x0, @empty, @remote, {[@end, @ssrr={0x89, 0x7, 0xb6, [@dev={0xac, 0x14, 0x14, 0x2c}]}, @lsrr={0x83, 0xf, 0x54, [@multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, r2, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20020804) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 547.072387ms ago: executing program 4 (id=964): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000008002500"/20, @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008001e00feffffff"], 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000008002500"/20, @ANYRES32=0x0, @ANYBLOB="00000000224400001400030076657468305f766972745f776966690008001e00feffffff"], 0x3c}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x22, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r5, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c0002800800030000fc"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@delneigh={0x30, 0x1d, 0x300, 0x70bd25, 0x25dfdbff, {0x2, 0x0, 0x0, r8, 0x0, 0xf1, 0x6}, [@NDA_PROBES={0x8, 0x4, 0x9fdb}, @NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe243cdad6cd5ba4f}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000881}, 0x4004044) syz_emit_ethernet(0x82, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x74, 0x66, 0x0, 0x3, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x16, 0x4, 0x0, 0x17, 0xc, 0x65, 0x7b98, 0x40, 0x1, 0x4, @multicast1, @loopback, {[@rr={0x7, 0x3, 0x54}, @cipso={0x86, 0x2a, 0x1, [{0x6, 0x7, "abcbae4ca3"}, {0x7, 0x4, "8cfb"}, {0x5, 0x11, "bdc32e2c803418c7d6ff621df9ada7"}, {0x7, 0x8, "14abc9b4b4d5"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x48, 0x0, 0x8, [0x0, 0x80338c, 0x1]}]}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001300)={r9, 0x6e2}, &(0x7f0000001340)=0x8) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001300)={r9, 0x6e2}, &(0x7f0000001340)=0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r12, 0x0, 0x19, 0x0, 0x0) close(0x4) (async) close(0x4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1, @any, 0x4, 0x2}, 0xe) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x2000000, 0x4008800}, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x2000000, 0x4008800}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 490.340082ms ago: executing program 0 (id=965): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000004c0)={r2, 0x3, 0x3, "2a9a9e"}, 0xb) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/93, 0x5d}, {&(0x7f0000000140)=""/207, 0xcf}, {&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f00000002c0)=""/179, 0xb3}, {&(0x7f0000000380)=""/117, 0x75}], 0x5, &(0x7f0000000480)=""/229, 0xe5}}, {{&(0x7f0000000580)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000600)}], 0x1, &(0x7f0000000680)=""/186, 0xba}, 0xfff}], 0x2, 0x2120, 0x0) 423.402341ms ago: executing program 1 (id=966): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) (async) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x400, 0x80000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_NET_NS_FD={0x8, 0x1c, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x3c}}, 0x0) 422.972744ms ago: executing program 2 (id=967): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x8, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x0, 0x14, {{0x5, 0x4, 0x1, 0x34, 0x14, 0x64, 0x0, 0x94, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1f}}}}}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00), 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x2}, 0x38) r4 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r4, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c2000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 374.189223ms ago: executing program 1 (id=968): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000640)='./file0\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000880)="d7b4d9101516daff6d8b8e8aabb53a52fe880021845a91f6789cb2218bae4fd75b35350d1e2ea824", 0x28}], 0x1}, 0xb00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x3c}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000640)='./file0\x00', r0}, 0x18) (async) socket$inet6(0xa, 0x3, 0xff) (async) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000880)="d7b4d9101516daff6d8b8e8aabb53a52fe880021845a91f6789cb2218bae4fd75b35350d1e2ea824", 0x28}], 0x1}, 0xb00) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x3c}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) (async) 359.142518ms ago: executing program 3 (id=969): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) bind$tipc(r1, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x8}, 0x200480c0) r2 = socket(0x10, 0x3, 0x0) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000fffedbdf2500007400000000f0932293852dfaab810fa287f9f3de00a2dac66cdda493afb8fd5becbb00a19ade49ac9e00a10b1b8fde11467f4ee791701e72518c80b92013ce3ad33700df9f875c0fb943f1bbbe14783c0da099df28e9043c6b46ac71b8ed1ff6794bbd727086da4f34e5", @ANYRES32=0x0, @ANYBLOB="049c01000750050008001300", @ANYRES32=r3, @ANYBLOB="1400030076657468305f766972745f7769666900"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00%\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0001000089f2df1c"], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x90) accept4$packet(r2, 0x0, &(0x7f0000000440), 0xc0800) r5 = socket$kcm(0x10, 0x7, 0x0) r6 = socket(0x11, 0x4, 0x9) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r9 = syz_genetlink_get_family_id$team(&(0x7f0000001340), r7) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fbdbdf250204000008000100", @ANYRES32=r8, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x4048001}, 0x40050) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r6) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x238, r10, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8f9c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x86d9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x49}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ID={0x92, 0x3, "616e750e5cc78891d2bfed3ec86e64edf3d4abdd48eb430adcbdc677d764ef6e5f3f11c657698ff3b2b7b15a6db7538de6d711cb53cc0d90996a919feff0ff795ce936e71897605521422c1d6249dac83cc845d3ef8cbf0064e81f552d2cd373b9b17b6e86f00589404885a4ac46aa738defed76bad17bf81298867e85c4e7d8b4a6f646df5df21ee5532167672f"}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x3}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r12) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r12) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r13, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000140)) 207.4103ms ago: executing program 1 (id=970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="07000000010000", 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0xf, 0x80000, 0x6, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01160000000000000000010000020900010073797a310000000040000000030a01020000000000000000070000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000004000480140000001100010000000000000000000300000a"], 0xb8}}, 0x0) 159.793662ms ago: executing program 3 (id=971): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x96}}, 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x9}) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x29, 0x1, 0x10000, 0x25dfdbfc, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x891}, 0x0) 97.368839ms ago: executing program 2 (id=972): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0)=0x20, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) listen(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001700)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xf7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000080)=0x4, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r9, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r10, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @dev}], 0x10) r11 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r11, 0x101, 0x7, &(0x7f0000000140), &(0x7f00000002c0)=0x4) socket$packet(0x11, 0x0, 0x300) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES64=r2, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) 43.227087ms ago: executing program 0 (id=973): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000004480)={&(0x7f0000004380), 0xc, &(0x7f0000004440)={&(0x7f00000043c0)={0x24, 0x1407, 0x1e6a54407809fc47, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x4, 0x2, 'syz2\x00'}]}, 0x24}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x9, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x12c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xd}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0xec, 0x2, [@TCA_ROUTE4_ACT={0xe8, 0x6, [@m_vlan={0x88, 0x6, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1b6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}]}, {0x49, 0x6, "657c8f856bb2bb5d377d3e798375b1d28aa9ff79c5750c001846426a94e358dab26224b357e0bd9c9b84cfee21ec99f48cf585ab10ae01a9ffc67e6ad19b4103524e4f4a3b"}, {0xc}, {0xc}}}, @m_ife={0x5c, 0x1a, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}]}, {0x1d, 0x6, "5cf80cae43926c79f74d5b5abcda3c8569302a433fb2205af1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_CHAIN={0x8}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x38}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 42.460522ms ago: executing program 1 (id=974): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x59}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x88}, 0x1, 0x7}, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) 39.553572ms ago: executing program 4 (id=975): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, &(0x7f0000000080)=0xc00) (async) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, 0x0, &(0x7f0000000080)=0xc00) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd27, 0x800001, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x7ffc, 0x3, 0x5, 0xfffffff8}, @loopback, @multicast1, 0xffffffff, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x4) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6(0xa, 0x1, 0x100) (async) socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) (async) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x1) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r4, 0x40049421, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x2c, r8, 0xc1dc2f86a1e4f805, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40180d5}, 0x4) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r10, 0x84, 0x20, &(0x7f0000000180), &(0x7f0000000140)=0x3) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x1, @null, @bpq0, 0xfff, 'syz0\x00', @null, 0xffffffff, 0x4, [@null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default]}) (async) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x1, @null, @bpq0, 0xfff, 'syz0\x00', @null, 0xffffffff, 0x4, [@null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default]}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001070000111100fc010000000000000000200000000000ff020000000000000000000000000001fffc0e2200119078c4e349a5c7407bebfb"], 0x0) 0s ago: executing program 3 (id=976): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r2, @ANYBLOB="010026bd70000400000005000000080009000500004341de4714ca07d1f94de1ca320a94b80008000c00a50a"], 0x40}, 0x1, 0x0, 0x0, 0x34048844}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. [ 83.466370][ T5851] cgroup: Unknown subsys name 'net' [ 83.603838][ T5851] cgroup: Unknown subsys name 'cpuset' [ 83.613047][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.335838][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.671513][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.689772][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.709731][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.739717][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.748771][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.821551][ T5183] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.842984][ T5183] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.851264][ T5183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.870124][ T5183] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.892182][ T5874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.900521][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.910326][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.918558][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.928245][ T5876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.940422][ T5876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.959756][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.977312][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.987488][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.020837][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.028633][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.058493][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.072534][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.081806][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.090653][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.110077][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.320290][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 90.565655][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.574054][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.581763][ T5861] bridge_slave_0: entered allmulticast mode [ 90.589141][ T5861] bridge_slave_0: entered promiscuous mode [ 90.632489][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.639800][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.647079][ T5861] bridge_slave_1: entered allmulticast mode [ 90.655479][ T5861] bridge_slave_1: entered promiscuous mode [ 90.788138][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.820932][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.857351][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 90.908506][ T5861] team0: Port device team_slave_0 added [ 90.964026][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 90.977720][ T5861] team0: Port device team_slave_1 added [ 91.138660][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.145724][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.172252][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.189974][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.196994][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.222959][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.288736][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 91.313727][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.321179][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.328378][ T5869] bridge_slave_0: entered allmulticast mode [ 91.335969][ T5869] bridge_slave_0: entered promiscuous mode [ 91.396695][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.405199][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.413693][ T5869] bridge_slave_1: entered allmulticast mode [ 91.421731][ T5869] bridge_slave_1: entered promiscuous mode [ 91.428920][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 91.441634][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.448788][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.456185][ T5865] bridge_slave_0: entered allmulticast mode [ 91.464160][ T5865] bridge_slave_0: entered promiscuous mode [ 91.531417][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.538763][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.546719][ T5865] bridge_slave_1: entered allmulticast mode [ 91.554452][ T5865] bridge_slave_1: entered promiscuous mode [ 91.607241][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.667821][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.680471][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.709900][ T5861] hsr_slave_0: entered promiscuous mode [ 91.716638][ T5861] hsr_slave_1: entered promiscuous mode [ 91.747271][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.772279][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.779608][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.786831][ T5875] bridge_slave_0: entered allmulticast mode [ 91.794771][ T5875] bridge_slave_0: entered promiscuous mode [ 91.801301][ T51] Bluetooth: hci0: command tx timeout [ 91.844887][ T5869] team0: Port device team_slave_0 added [ 91.884768][ T5865] team0: Port device team_slave_0 added [ 91.891010][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.898466][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.906123][ T5875] bridge_slave_1: entered allmulticast mode [ 91.913693][ T5875] bridge_slave_1: entered promiscuous mode [ 91.936352][ T5869] team0: Port device team_slave_1 added [ 91.974431][ T5865] team0: Port device team_slave_1 added [ 92.039604][ T51] Bluetooth: hci3: command tx timeout [ 92.093262][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.100874][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.108117][ T5867] bridge_slave_0: entered allmulticast mode [ 92.117477][ T5867] bridge_slave_0: entered promiscuous mode [ 92.121069][ T51] Bluetooth: hci1: command tx timeout [ 92.123699][ T5876] Bluetooth: hci2: command tx timeout [ 92.156376][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.163432][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.189666][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.200871][ T5876] Bluetooth: hci4: command tx timeout [ 92.208283][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.215414][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.241778][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.256575][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.269773][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.279161][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.287646][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.295258][ T5867] bridge_slave_1: entered allmulticast mode [ 92.306045][ T5867] bridge_slave_1: entered promiscuous mode [ 92.324404][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.331851][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.358685][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.378916][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.386026][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.412785][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.555608][ T5875] team0: Port device team_slave_0 added [ 92.564414][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.615080][ T5875] team0: Port device team_slave_1 added [ 92.623237][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.680267][ T5869] hsr_slave_0: entered promiscuous mode [ 92.686802][ T5869] hsr_slave_1: entered promiscuous mode [ 92.693607][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 92.699432][ T5869] Cannot create hsr debugfs directory [ 92.735803][ T5865] hsr_slave_0: entered promiscuous mode [ 92.742572][ T5865] hsr_slave_1: entered promiscuous mode [ 92.748741][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 92.754578][ T5865] Cannot create hsr debugfs directory [ 92.783172][ T5867] team0: Port device team_slave_0 added [ 92.790131][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.797112][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.823299][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.845361][ T5867] team0: Port device team_slave_1 added [ 92.868742][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.875927][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.902409][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.036322][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.044043][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.070733][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.121773][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.128771][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.155587][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.179156][ T5875] hsr_slave_0: entered promiscuous mode [ 93.186443][ T5875] hsr_slave_1: entered promiscuous mode [ 93.193762][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 93.200031][ T5875] Cannot create hsr debugfs directory [ 93.355022][ T5861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.408138][ T5867] hsr_slave_0: entered promiscuous mode [ 93.415336][ T5867] hsr_slave_1: entered promiscuous mode [ 93.422142][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 93.427906][ T5867] Cannot create hsr debugfs directory [ 93.434845][ T5861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.445907][ T5861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.499832][ T5861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.768202][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.781225][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.815172][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.850572][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.880205][ T5876] Bluetooth: hci0: command tx timeout [ 93.956777][ T5865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.968132][ T5865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.981286][ T5865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.011452][ T5865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.103596][ T5875] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.117875][ T5875] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.130061][ T5876] Bluetooth: hci3: command tx timeout [ 94.158293][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.166748][ T5875] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.178144][ T5875] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.199637][ T5876] Bluetooth: hci1: command tx timeout [ 94.210341][ T5876] Bluetooth: hci2: command tx timeout [ 94.280632][ T5876] Bluetooth: hci4: command tx timeout [ 94.307447][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.319379][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.343277][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.352524][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.393948][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.407520][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.414900][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.445204][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.452392][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.523712][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.599246][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.622678][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.658067][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.665275][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.708628][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.718673][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.725854][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.756613][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.835924][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.843617][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.861915][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.869119][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.888830][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.966700][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.973928][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.028202][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.035481][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.154600][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.179889][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.244877][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.305882][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.313112][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.389241][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.396470][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.466168][ T5861] veth0_vlan: entered promiscuous mode [ 95.543981][ T5861] veth1_vlan: entered promiscuous mode [ 95.696158][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.780352][ T5861] veth0_macvtap: entered promiscuous mode [ 95.821775][ T5861] veth1_macvtap: entered promiscuous mode [ 95.897208][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.947446][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.961136][ T5876] Bluetooth: hci0: command tx timeout [ 95.974331][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.018230][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.086922][ T1162] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.126645][ T1162] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.146845][ T1162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.195283][ T1162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.208977][ T5876] Bluetooth: hci3: command tx timeout [ 96.214171][ T5869] veth0_vlan: entered promiscuous mode [ 96.267759][ T5869] veth1_vlan: entered promiscuous mode [ 96.284243][ T5876] Bluetooth: hci2: command tx timeout [ 96.290491][ T51] Bluetooth: hci1: command tx timeout [ 96.305796][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.353034][ T5875] veth0_vlan: entered promiscuous mode [ 96.360528][ T5876] Bluetooth: hci4: command tx timeout [ 96.435455][ T5875] veth1_vlan: entered promiscuous mode [ 96.463069][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.476596][ T5869] veth0_macvtap: entered promiscuous mode [ 96.483284][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.547032][ T5869] veth1_macvtap: entered promiscuous mode [ 96.566657][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.575261][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.584202][ T5867] veth0_vlan: entered promiscuous mode [ 96.617939][ T5865] veth0_vlan: entered promiscuous mode [ 96.647785][ T5865] veth1_vlan: entered promiscuous mode [ 96.666395][ T5875] veth0_macvtap: entered promiscuous mode [ 96.688333][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.707758][ T5867] veth1_vlan: entered promiscuous mode [ 96.727977][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.746176][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.770460][ T5875] veth1_macvtap: entered promiscuous mode [ 96.822606][ T3001] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.837242][ T3001] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.865673][ T3001] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.877087][ T3001] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.914271][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.935773][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.974550][ T5865] veth0_macvtap: entered promiscuous mode [ 96.988140][ T5985] Bluetooth: MGMT ver 1.23 [ 97.006116][ T3001] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.025102][ T3001] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.049038][ T5865] veth1_macvtap: entered promiscuous mode [ 97.070058][ T3001] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.088797][ T3001] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.092590][ T3097] cfg80211: failed to load regulatory.db [ 97.128299][ T5867] veth0_macvtap: entered promiscuous mode [ 97.142027][ T5989] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 97.184987][ T5991] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7'. [ 97.225030][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.241270][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.257977][ T5867] veth1_macvtap: entered promiscuous mode [ 97.336997][ T3001] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.356864][ T3001] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.378321][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.403698][ T3001] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.418314][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.427717][ T3001] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.469418][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.495134][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.546984][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.550923][ T1162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.559051][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.591023][ T1162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.607087][ T1162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.655206][ T1162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.697393][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.728331][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.764861][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.790766][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.852924][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.870612][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.951520][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.970857][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.990437][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.993985][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.042224][ T5876] Bluetooth: hci0: command tx timeout [ 98.173332][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.195464][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.211084][ T6003] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.280186][ T5876] Bluetooth: hci3: command tx timeout [ 98.360420][ T5876] Bluetooth: hci2: command tx timeout [ 98.366098][ T51] Bluetooth: hci1: command tx timeout [ 98.442280][ T51] Bluetooth: hci4: command tx timeout [ 98.517833][ T6012] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.728823][ T6025] warning: `syz.3.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.808156][ T6025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15'. [ 99.291517][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'. [ 99.423728][ T6053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24'. [ 99.925229][ T6076] Zero length message leads to an empty skb [ 100.355850][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 100.487157][ T6108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'. [ 100.531712][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.40'. [ 101.553554][ T6138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.761416][ T6168] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 101.785055][ T6168] netlink: 224 bytes leftover after parsing attributes in process `syz.4.53'. [ 101.824954][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.53'. [ 101.861344][ T6172] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 102.395234][ T6193] tipc: Started in network mode [ 102.419761][ T6193] tipc: Node identity be4bea3537d8, cluster identity 4711 [ 102.456618][ T6193] tipc: Enabled bearer , priority 0 [ 102.535412][ T6208] tipc: Started in network mode [ 102.540546][ T6208] tipc: Node identity 090000000000000005f2ffffffffffff, cluster identity 4711 [ 102.692970][ T6193] tipc: Disabling bearer [ 102.715586][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.67'. [ 102.822351][ T6224] netlink: 'syz.1.68': attribute type 10 has an invalid length. [ 102.929000][ T6224] team0: Device veth1_macvtap failed to register rx_handler [ 103.373378][ T6253] syzkaller0: entered promiscuous mode [ 103.378922][ T6253] syzkaller0: entered allmulticast mode [ 103.507512][ T6253] tipc: Started in network mode [ 103.521391][ T6253] tipc: Node identity , cluster identity 4711 [ 103.538904][ T6253] tipc: Failed to obtain node identity [ 103.553214][ T6253] tipc: Enabling of bearer rejected, failed to enable media [ 103.587275][ T6260] netlink: 'syz.4.78': attribute type 21 has an invalid length. [ 104.374646][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.85'. [ 104.413189][ T6294] netlink: 'syz.2.90': attribute type 21 has an invalid length. [ 104.492990][ T6294] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 104.507660][ T6289] tipc: Started in network mode [ 104.520232][ T6289] tipc: Node identity f27180aec7e6, cluster identity 4711 [ 104.548319][ T6289] tipc: Enabled bearer , priority 0 [ 104.589033][ T6298] veth0: entered promiscuous mode [ 104.664450][ T6301] syzkaller0: entered promiscuous mode [ 104.727765][ T6301] syzkaller0: entered allmulticast mode [ 104.865307][ T6307] tipc: Started in network mode [ 104.878844][ T6307] tipc: Node identity be5bdfdbb5ea, cluster identity 4711 [ 104.889192][ T6307] tipc: Enabled bearer , priority 0 [ 104.909167][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 105.015996][ T6308] syzkaller0: entered promiscuous mode [ 105.021753][ T6308] syzkaller0: entered allmulticast mode [ 105.029391][ T6308] tipc: Resetting bearer [ 105.050655][ T6296] veth0: left promiscuous mode [ 105.069148][ T6277] tipc: Resetting bearer [ 105.131756][ T6277] tipc: Disabling bearer [ 105.282904][ T6330] netlink: 'syz.0.95': attribute type 8 has an invalid length. [ 105.429105][ T6317] hsr_slave_1 (unregistering): left promiscuous mode [ 105.503806][ T6295] tipc: Resetting bearer [ 105.529987][ T6339] netlink: 'syz.0.97': attribute type 11 has an invalid length. [ 105.589583][ T6339] netlink: 'syz.0.97': attribute type 11 has an invalid length. [ 105.613781][ T6343] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.97'. [ 105.623109][ T6339] netlink: 224 bytes leftover after parsing attributes in process `syz.0.97'. [ 105.645782][ T6343] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 105.675291][ T6343] openvswitch: netlink: Duplicate key (type 0). [ 105.941456][ T5978] tipc: Node number set to 196206555 [ 106.565540][ T6295] tipc: Disabling bearer [ 106.579798][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'. [ 106.849540][ T6358] sctp: [Deprecated]: syz.2.101 (pid 6358) Use of int in max_burst socket option. [ 106.849540][ T6358] Use struct sctp_assoc_value instead [ 106.864965][ T6354] lo: entered allmulticast mode [ 106.933344][ T6356] netlink: 88 bytes leftover after parsing attributes in process `syz.1.102'. [ 107.080203][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.105'. [ 107.089132][ T6363] netlink: 'syz.3.105': attribute type 20 has an invalid length. [ 107.146493][ T6374] syz.1.107 uses obsolete (PF_INET,SOCK_PACKET) [ 107.249984][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.258810][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.365935][ T6363] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (65547) [ 107.398369][ T6363] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 107.538977][ T6390] netlink: 'syz.0.110': attribute type 10 has an invalid length. [ 107.548283][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.558206][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 107.590334][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.750908][ T6400] batadv1: entered allmulticast mode [ 107.938195][ T6410] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.116'. [ 108.049767][ T6412] netlink: 96 bytes leftover after parsing attributes in process `syz.2.118'. [ 108.452632][ T6437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.562865][ T6437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.582291][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'. [ 108.662665][ T6437] veth0_virt_wifi: renamed from batadv_slave_0 [ 108.728942][ T6445] netlink: 68 bytes leftover after parsing attributes in process `syz.1.126'. [ 108.784238][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.125'. [ 108.946346][ T6459] netlink: 60 bytes leftover after parsing attributes in process `syz.4.128'. [ 109.249865][ T6471] netlink: 84 bytes leftover after parsing attributes in process `syz.3.131'. [ 109.374730][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 109.468916][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 109.573255][ T6478] netlink: 92 bytes leftover after parsing attributes in process `syz.3.133'. [ 110.354678][ T6524] sctp: [Deprecated]: syz.3.144 (pid 6524) Use of int in maxseg socket option. [ 110.354678][ T6524] Use struct sctp_assoc_value instead [ 110.390009][ T6528] netlink: 'syz.2.145': attribute type 1 has an invalid length. [ 110.418152][ T6525] team0: No ports can be present during mode change [ 110.668213][ T6539] netlink: 'syz.3.148': attribute type 24 has an invalid length. [ 111.224774][ T6557] kthread_run failed with err -4 [ 111.444236][ T6571] netlink: 'syz.4.158': attribute type 1 has an invalid length. [ 111.496363][ T6571] netlink: 'syz.4.158': attribute type 2 has an invalid length. [ 111.556205][ T6583] netlink: 'syz.0.160': attribute type 12 has an invalid length. [ 111.581668][ T6583] netlink: 'syz.0.160': attribute type 11 has an invalid length. [ 112.207885][ T6602] netlink: 'syz.0.165': attribute type 10 has an invalid length. [ 112.255000][ T6607] tipc: Failed to remove unknown binding: 66,1,1/196206555:3904779459/3904779461 [ 112.289752][ T6602] veth0_vlan: entered allmulticast mode [ 112.305469][ T6607] tipc: Failed to remove unknown binding: 66,1,1/196206555:3904779459/3904779461 [ 112.394021][ T6602] veth0_vlan: left promiscuous mode [ 112.410991][ T6568] infiniband syz!: set active [ 112.415904][ T6568] infiniband syz!: added team_slave_0 [ 112.453220][ T6568] syz!: rxe_create_cq: returned err = -12 [ 112.466308][ T6602] veth0_vlan: entered promiscuous mode [ 112.475516][ T6568] infiniband syz!: Couldn't create ib_mad CQ [ 112.483018][ T6568] infiniband syz!: Couldn't open port 1 [ 112.516118][ T6602] team0: Device veth0_vlan failed to register rx_handler [ 112.608619][ T6568] RDS/IB: syz!: added [ 112.613617][ T6568] smc: adding ib device syz! with port count 1 [ 112.626457][ T6568] smc: ib device syz! port 1 has pnetid [ 112.732440][ T6602] netlink: 'syz.0.165': attribute type 1 has an invalid length. [ 113.138621][ T6635] tipc: Enabled bearer , priority 0 [ 113.196008][ T6634] tipc: Enabling of bearer rejected, already enabled [ 113.243191][ T6635] netlink: 'syz.0.173': attribute type 2 has an invalid length. [ 113.264878][ T6634] netlink: 'syz.0.173': attribute type 2 has an invalid length. [ 113.392296][ T6633] tipc: Disabling bearer [ 113.949008][ T6654] geneve2: entered promiscuous mode [ 114.202964][ T6665] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:0 [ 114.232790][ T6660] pimreg: entered allmulticast mode [ 114.252575][ T6663] pimreg: left allmulticast mode [ 114.548919][ T6677] tunl0: entered promiscuous mode [ 114.577600][ T6678] __nla_validate_parse: 10 callbacks suppressed [ 114.577621][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 114.622005][ T6677] netlink: 'syz.1.182': attribute type 3 has an invalid length. [ 114.673128][ T6677] netlink: 9 bytes leftover after parsing attributes in process `syz.1.182'. [ 114.827247][ T6689] netlink: 'syz.4.185': attribute type 2 has an invalid length. [ 114.865831][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.185'. [ 115.176062][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 115.588500][ T6696] syz.4.187 (6696) used greatest stack depth: 16840 bytes left [ 116.052143][ T6729] veth3: entered allmulticast mode [ 117.560745][ T5876] Bluetooth: hci4: command 0x0405 tx timeout [ 117.624170][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 117.689014][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 117.711944][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 117.740128][ T6781] netlink: 40 bytes leftover after parsing attributes in process `syz.1.214'. [ 117.970318][ T6795] netlink: 160 bytes leftover after parsing attributes in process `syz.2.218'. [ 118.148581][ T6803] netlink: 'syz.2.219': attribute type 1 has an invalid length. [ 118.178549][ T6803] netlink: 228 bytes leftover after parsing attributes in process `syz.2.219'. [ 118.861935][ T6830] netlink: 'syz.0.226': attribute type 1 has an invalid length. [ 118.891925][ T6830] netlink: 'syz.0.226': attribute type 2 has an invalid length. [ 119.024170][ T6839] sctp: [Deprecated]: syz.2.228 (pid 6839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.024170][ T6839] Use struct sctp_sack_info instead [ 119.964776][ T6877] __nla_validate_parse: 7 callbacks suppressed [ 119.964822][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 120.410680][ T6901] netlink: 'syz.3.245': attribute type 1 has an invalid length. [ 120.427307][ T6901] netlink: 'syz.3.245': attribute type 2 has an invalid length. [ 120.531530][ T6909] netlink: 6 bytes leftover after parsing attributes in process `syz.2.247'. [ 120.562009][ T6909] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.930175][ T6922] syz_tun: entered allmulticast mode [ 120.988065][ T6919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.014637][ T6934] netlink: 100 bytes leftover after parsing attributes in process `syz.0.254'. [ 121.023558][ T6931] netlink: 36 bytes leftover after parsing attributes in process `syz.4.252'. [ 121.053245][ T6931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.252'. [ 121.351479][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.360658][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.459235][ T6955] Illegal XDP return value 4294967274 on prog (id 37) dev N/A, expect packet loss! [ 121.602177][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.760642][ T6931] veth3: left allmulticast mode [ 121.770591][ T6919] syz_tun: left allmulticast mode [ 121.819668][ T147] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.864765][ T147] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.927345][ T1162] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.964392][ T1162] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.974486][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.260'. [ 122.070826][ T5943] IPVS: starting estimator thread 0... [ 122.169844][ T6974] IPVS: using max 27 ests per chain, 64800 per kthread [ 122.519839][ T6994] trusted_key: syz.3.267 sent an empty control message without MSG_MORE. [ 122.768019][ T7011] netlink: 'syz.2.271': attribute type 1 has an invalid length. [ 122.804440][ T7011] netlink: 'syz.2.271': attribute type 1 has an invalid length. [ 122.838921][ T7011] netlink: 'syz.2.271': attribute type 1 has an invalid length. [ 122.854107][ T7011] netlink: 'syz.2.271': attribute type 2 has an invalid length. [ 122.875419][ T7011] netlink: 76 bytes leftover after parsing attributes in process `syz.2.271'. [ 123.075793][ T7018] tunl0: entered promiscuous mode [ 123.102589][ T7018] netlink: 'syz.2.272': attribute type 3 has an invalid length. [ 123.127506][ T7018] netlink: 9 bytes leftover after parsing attributes in process `syz.2.272'. [ 123.342127][ T7027] sctp: [Deprecated]: syz.0.275 (pid 7027) Use of int in max_burst socket option deprecated. [ 123.342127][ T7027] Use struct sctp_assoc_value instead [ 123.612526][ T7043] Dead loop on virtual device ip6_vti0, fix it urgently! [ 123.882599][ T7056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.283'. [ 123.902559][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 124.069885][ T7065] bridge_slave_1: left allmulticast mode [ 124.083598][ T7065] bridge_slave_1: left promiscuous mode [ 124.174125][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.224613][ T7074] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 124.283817][ T7065] bridge_slave_0: left allmulticast mode [ 124.295562][ T7081] netlink: 'syz.4.289': attribute type 1 has an invalid length. [ 124.303957][ T7065] bridge_slave_0: left promiscuous mode [ 124.319518][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.620783][ T7081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.961543][ T7103] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 125.197851][ T7126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.017022][ T7159] __nla_validate_parse: 3 callbacks suppressed [ 126.017042][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 126.083736][ T7161] netlink: 6 bytes leftover after parsing attributes in process `syz.2.308'. [ 126.125674][ T7161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.246612][ T7170] netlink: 68 bytes leftover after parsing attributes in process `syz.1.310'. [ 126.390352][ T7177] netlink: 'syz.3.312': attribute type 29 has an invalid length. [ 126.433945][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 126.452821][ T7179] netlink: 'syz.2.313': attribute type 1 has an invalid length. [ 126.477778][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.313'. [ 126.792976][ T7186] vlan1: entered allmulticast mode [ 126.823081][ T7186] bridge0: entered allmulticast mode [ 126.870126][ T7186] bridge2: port 1(vlan1) entered blocking state [ 126.891564][ T7186] bridge2: port 1(vlan1) entered disabled state [ 126.912307][ T7186] vlan1: entered promiscuous mode [ 126.927647][ T7186] bridge0: entered promiscuous mode [ 127.425518][ T7232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.331'. [ 127.614186][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 127.651102][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.335'. [ 127.715230][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.335'. [ 127.812053][ T7253] netlink: 68 bytes leftover after parsing attributes in process `syz.3.337'. [ 127.972019][ T7259] nbd: must specify a size in bytes for the device [ 128.138967][ T7272] netlink: 'syz.3.342': attribute type 12 has an invalid length. [ 128.410768][ T7286] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 128.454839][ T7291] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 128.604657][ T7295] IPv6: Can't replace route, no match found [ 128.612379][ T7300] IPv6: Can't replace route, no match found [ 128.987763][ T7322] netlink: 'syz.3.354': attribute type 13 has an invalid length. [ 129.025773][ T7322] netlink: 'syz.3.354': attribute type 58 has an invalid length. [ 129.055006][ T7322] netlink: 'syz.3.354': attribute type 13 has an invalid length. [ 129.082196][ T7322] netlink: 'syz.3.354': attribute type 58 has an invalid length. [ 129.139835][ T7322] netlink: 'syz.3.354': attribute type 13 has an invalid length. [ 129.169644][ T7322] netlink: 'syz.3.354': attribute type 58 has an invalid length. [ 129.734490][ T7354] tipc: Started in network mode [ 129.753101][ T7354] tipc: Node identity 82617267b2ff, cluster identity 4711 [ 129.797874][ T7354] tipc: Enabled bearer , priority 0 [ 129.838712][ T7358] syzkaller0: entered promiscuous mode [ 129.890833][ T7358] syzkaller0: entered allmulticast mode [ 130.032975][ T7354] tipc: Resetting bearer [ 130.066110][ T7353] tipc: Resetting bearer [ 130.153474][ T7372] netlink: 'syz.1.364': attribute type 11 has an invalid length. [ 130.195115][ T7353] tipc: Disabling bearer [ 130.491896][ T7377] macvtap1: entered promiscuous mode [ 130.497458][ T7377] vlan0: entered promiscuous mode [ 130.505817][ T7377] macvtap1: entered allmulticast mode [ 130.511786][ T7377] vlan0: entered allmulticast mode [ 130.517083][ T7377] veth0_vlan: entered allmulticast mode [ 130.759850][ T7396] delete_channel: no stack [ 131.094506][ T7406] __nla_validate_parse: 78 callbacks suppressed [ 131.094528][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 131.118921][ T7410] netlink: 44 bytes leftover after parsing attributes in process `syz.0.376'. [ 131.452101][ T7431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.381'. [ 131.640350][ T7439] 8021q: VLANs not supported on caif0 [ 131.675829][ T7437] 8021q: VLANs not supported on caif0 [ 131.701834][ T7444] hsr0 speed is unknown, defaulting to 1000 [ 131.739789][ T7444] hsr0 speed is unknown, defaulting to 1000 [ 131.759868][ T7444] hsr0 speed is unknown, defaulting to 1000 [ 131.781541][ T7444] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.878757][ T7444] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 131.940211][ T7454] tipc: Enabling of bearer rejected, failed to enable media [ 131.987493][ T7444] hsr0 speed is unknown, defaulting to 1000 [ 131.996520][ T7444] hsr0 speed is unknown, defaulting to 1000 [ 132.006595][ T7444] hsr0 speed is unknown, defaulting to 1000 [ 132.023299][ T7444] hsr0 speed is unknown, defaulting to 1000 [ 132.047003][ T7444] hsr0 speed is unknown, defaulting to 1000 [ 132.119672][ T5876] Bluetooth: hci4: command 0x0405 tx timeout [ 132.390391][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 132.917498][ T7494] Bluetooth: MGMT ver 1.23 [ 132.929061][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.937028][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.974633][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'. [ 132.992016][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 133.262363][ T7504] validate_nla: 124 callbacks suppressed [ 133.262384][ T7504] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 133.313382][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 133.372688][ T7507] netlink: 'syz.2.401': attribute type 13 has an invalid length. [ 133.384175][ T7507] netlink: 'syz.2.401': attribute type 58 has an invalid length. [ 133.411313][ T7507] netlink: 152 bytes leftover after parsing attributes in process `syz.2.401'. [ 133.757585][ T7519] net veth1_virt_wifi .: renamed from virt_wifi0 [ 133.838689][ T7521] netlink: 32 bytes leftover after parsing attributes in process `syz.3.406'. [ 133.874757][ T7521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.882086][ T7521] IPv6: NLM_F_CREATE should be set when creating new route [ 133.891697][ T7522] netlink: 288 bytes leftover after parsing attributes in process `syz.2.404'. [ 134.478000][ T7552] tipc: Enabled bearer , priority 0 [ 134.496431][ T7552] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 134.506176][ T7552] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 134.522964][ T7552] tipc: Resetting bearer [ 134.533543][ T7517] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 134.582335][ T7553] Unsupported xt match [ 134.582357][ T7553] unable to load match [ 134.606546][ T7555] bridge0: port 3(syz_tun) entered blocking state [ 134.615755][ T7555] bridge0: port 3(syz_tun) entered disabled state [ 134.626660][ T7555] syz_tun: entered allmulticast mode [ 134.636445][ T7555] syz_tun: entered promiscuous mode [ 135.114620][ T7570] bridge0: port 3(veth0_to_bridge) entered blocking state [ 135.149698][ T7570] bridge0: port 3(veth0_to_bridge) entered disabled state [ 135.175310][ T7570] veth0_to_bridge: entered allmulticast mode [ 135.209801][ T7570] veth0_to_bridge: entered promiscuous mode [ 135.216018][ T7570] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 135.290122][ T7570] bridge0: port 3(veth0_to_bridge) entered blocking state [ 135.297685][ T7570] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 135.520314][ T10] tipc: Node number set to 2308172341 [ 136.402753][ T7628] __nla_validate_parse: 7 callbacks suppressed [ 136.402776][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 136.457383][ T7626] tipc: Enabling of bearer rejected, failed to enable media [ 136.810386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.823704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.836902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.849519][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.862024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.874786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.887298][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.899905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.912418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.917623][ T7645] veth0_to_bridge: left allmulticast mode [ 136.925047][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 137.012775][ T7645] veth0_to_bridge: left promiscuous mode [ 137.047865][ T7650] tipc: Can't bind to reserved service type 0 [ 137.058756][ T7645] bridge0: port 3(veth0_to_bridge) entered disabled state [ 137.114111][ T7656] netlink: 'syz.2.434': attribute type 1 has an invalid length. [ 137.134083][ T7645] bridge_slave_0: left allmulticast mode [ 137.152033][ T7656] netlink: 124 bytes leftover after parsing attributes in process `syz.2.434'. [ 137.175321][ T7645] bridge_slave_0: left promiscuous mode [ 137.196639][ T7645] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.227319][ T7645] bridge_slave_1: left allmulticast mode [ 137.237519][ T7645] bridge_slave_1: left promiscuous mode [ 137.259787][ T7645] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.302728][ T7645] bond0: (slave bond_slave_0): Releasing backup interface [ 137.331404][ T7645] bond0: (slave bond_slave_1): Releasing backup interface [ 137.361754][ T7645] team0: Port device team_slave_0 removed [ 137.397697][ T7645] team0: Port device team_slave_1 removed [ 137.419790][ T7645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.428821][ T7645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.451520][ T7645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.471300][ T7645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.494394][ T7645] vlan1: left promiscuous mode [ 137.499303][ T7645] bridge0: left promiscuous mode [ 137.506043][ T7645] bridge2: port 1(vlan1) entered disabled state [ 137.542289][ T7648] veth0_vlan: left promiscuous mode [ 137.553805][ T7648] vlan0: entered promiscuous mode [ 137.558894][ T7648] veth0_vlan: entered promiscuous mode [ 137.664425][ T7648] team0: Port device vlan0 added [ 137.696055][ T10] hsr0 speed is unknown, defaulting to 1000 [ 137.963860][ T7681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.441'. [ 138.534521][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.446'. [ 138.560202][ T7713] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 138.598434][ T7713] tipc: Enabled bearer , priority 10 [ 138.669041][ T7720] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 138.685980][ T7719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.447'. [ 139.104209][ T7740] netlink: 'syz.4.454': attribute type 1 has an invalid length. [ 139.137838][ T7740] netlink: 228 bytes leftover after parsing attributes in process `syz.4.454'. [ 139.178981][ T7744] netlink: 'syz.0.455': attribute type 83 has an invalid length. [ 139.319821][ T7750] netlink: 'syz.3.456': attribute type 1 has an invalid length. [ 139.327652][ T7750] netlink: 'syz.3.456': attribute type 1 has an invalid length. [ 139.684139][ T7758] block nbd0: server does not support multiple connections per device. [ 139.709772][ T43] tipc: Node number set to 4077715456 [ 139.718801][ T7758] block nbd0: shutting down sockets [ 140.711827][ T7806] tipc: Enabled bearer , priority 0 [ 140.782360][ T7806] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}z' [ 140.846838][ T7806] CPU: 1 UID: 0 PID: 7806 Comm: syz.2.469 Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 PREEMPT(full) [ 140.846892][ T7806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.846921][ T7806] Call Trace: [ 140.846930][ T7806] [ 140.846940][ T7806] dump_stack_lvl+0x189/0x250 [ 140.846980][ T7806] ? irqentry_exit+0x74/0x90 [ 140.847010][ T7806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.847112][ T7806] sysfs_warn_dup+0x8e/0xa0 [ 140.847136][ T7806] sysfs_do_create_link_sd+0xc0/0x110 [ 140.847163][ T7806] device_add_class_symlinks+0x1cf/0x240 [ 140.847201][ T7806] device_add+0x475/0xb50 [ 140.847239][ T7806] wiphy_register+0x1ba6/0x28d0 [ 140.847285][ T7806] ? __pfx_wiphy_register+0x10/0x10 [ 140.847312][ T7806] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 140.847355][ T7806] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 140.847394][ T7806] ieee80211_register_hw+0x3425/0x4080 [ 140.847449][ T7806] ? ieee80211_register_hw+0x1411/0x4080 [ 140.847493][ T7806] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 140.847533][ T7806] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 140.847581][ T7806] ? __hrtimer_setup+0x187/0x210 [ 140.847600][ T7806] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 140.847631][ T7806] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 140.847689][ T7806] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 140.847712][ T7806] ? trace_kmalloc+0x1f/0xd0 [ 140.847736][ T7806] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 140.847767][ T7806] ? kstrndup+0xbf/0x160 [ 140.847801][ T7806] hwsim_new_radio_nl+0xea4/0x1b10 [ 140.847829][ T7806] ? __pfx___nla_validate_parse+0x10/0x10 [ 140.847874][ T7806] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 140.847913][ T7806] ? __nla_parse+0x40/0x60 [ 140.847964][ T7806] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 140.847997][ T7806] genl_family_rcv_msg_doit+0x215/0x300 [ 140.848037][ T7806] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 140.848075][ T7806] ? bpf_lsm_capable+0x9/0x20 [ 140.848105][ T7806] ? security_capable+0x7e/0x2e0 [ 140.848142][ T7806] genl_rcv_msg+0x60e/0x790 [ 140.848172][ T7806] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.848192][ T7806] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 140.848234][ T7806] netlink_rcv_skb+0x205/0x470 [ 140.848261][ T7806] ? __lock_acquire+0xab9/0xd20 [ 140.848295][ T7806] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.848318][ T7806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.848370][ T7806] ? down_read+0x1ad/0x2e0 [ 140.848404][ T7806] genl_rcv+0x28/0x40 [ 140.848437][ T7806] netlink_unicast+0x82c/0x9e0 [ 140.848473][ T7806] ? __pfx_netlink_unicast+0x10/0x10 [ 140.848502][ T7806] ? netlink_sendmsg+0x642/0xb30 [ 140.848528][ T7806] ? skb_put+0x11b/0x210 [ 140.848564][ T7806] netlink_sendmsg+0x805/0xb30 [ 140.848605][ T7806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.848646][ T7806] ? aa_sock_msg_perm+0xf1/0x1d0 [ 140.848674][ T7806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 140.848693][ T7806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.848718][ T7806] __sock_sendmsg+0x21c/0x270 [ 140.848742][ T7806] ____sys_sendmsg+0x505/0x830 [ 140.848775][ T7806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.848811][ T7806] ? import_iovec+0x74/0xa0 [ 140.848831][ T7806] ___sys_sendmsg+0x21f/0x2a0 [ 140.848860][ T7806] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.848920][ T7806] ? __fget_files+0x2a/0x420 [ 140.848947][ T7806] ? __fget_files+0x3a0/0x420 [ 140.848984][ T7806] __x64_sys_sendmsg+0x19b/0x260 [ 140.849019][ T7806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.849057][ T7806] ? rcu_is_watching+0x15/0xb0 [ 140.849079][ T7806] ? do_syscall_64+0xbe/0x3b0 [ 140.849107][ T7806] do_syscall_64+0xfa/0x3b0 [ 140.849130][ T7806] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.849151][ T7806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.849169][ T7806] ? clear_bhb_loop+0x60/0xb0 [ 140.849191][ T7806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.849209][ T7806] RIP: 0033:0x7f4725f8ebe9 [ 140.849235][ T7806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.849252][ T7806] RSP: 002b:00007f4726da1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.849276][ T7806] RAX: ffffffffffffffda RBX: 00007f47261b5fa0 RCX: 00007f4725f8ebe9 [ 140.849290][ T7806] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 140.849300][ T7806] RBP: 00007f4726011e19 R08: 0000000000000000 R09: 0000000000000000 [ 140.849311][ T7806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.849322][ T7806] R13: 00007f47261b6038 R14: 00007f47261b5fa0 R15: 00007fff399b44c8 [ 140.849350][ T7806] [ 141.379865][ T7810] syzkaller0: entered promiscuous mode [ 141.476409][ T7810] syzkaller0: entered allmulticast mode [ 141.509984][ T7806] tipc: Resetting bearer [ 141.584344][ T7802] tipc: Resetting bearer [ 141.634736][ T7835] netlink: 32 bytes leftover after parsing attributes in process `syz.1.477'. [ 141.648171][ T7802] tipc: Disabling bearer [ 141.671258][ T7829] veth0: entered promiscuous mode [ 141.925768][ T7851] pim6reg: entered allmulticast mode [ 142.001136][ T7850] pim6reg: left allmulticast mode [ 142.088575][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 142.147050][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 142.280317][ T7828] veth0: left promiscuous mode [ 142.514945][ T7871] pim6reg1: entered promiscuous mode [ 142.548848][ T7871] pim6reg1: entered allmulticast mode [ 142.566079][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.488'. [ 142.666703][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.488'. [ 142.746662][ T7888] netlink: 36 bytes leftover after parsing attributes in process `syz.2.489'. [ 143.118456][ T7909] netlink: 'syz.4.492': attribute type 83 has an invalid length. [ 143.331623][ T7913] netlink: 56 bytes leftover after parsing attributes in process `syz.1.495'. [ 143.341249][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.495'. [ 143.359638][ T7916] net_ratelimit: 276 callbacks suppressed [ 143.359659][ T7916] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 143.370059][ T7913] netlink: 31 bytes leftover after parsing attributes in process `syz.1.495'. [ 143.449551][ T7913] netlink: 'syz.1.495': attribute type 2 has an invalid length. [ 143.465506][ T7913] netlink: 31 bytes leftover after parsing attributes in process `syz.1.495'. [ 143.704868][ T7929] netlink: 'syz.0.499': attribute type 26 has an invalid length. [ 144.194561][ T7952] sctp: [Deprecated]: syz.4.507 (pid 7952) Use of int in maxseg socket option. [ 144.194561][ T7952] Use struct sctp_assoc_value instead [ 144.330011][ T7956] netlink: 'syz.2.508': attribute type 1 has an invalid length. [ 144.392072][ T7956] netlink: 'syz.2.508': attribute type 3 has an invalid length. [ 144.434474][ T7956] NCSI netlink: No device for ifindex 131080 [ 144.465266][ T7963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.542429][ T7963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.252079][ T7989] veth5: entered allmulticast mode [ 146.108378][ T8048] raw_sendmsg: syz.4.536 forgot to set AF_INET. Fix it! [ 146.473732][ T8069] netlink: 'syz.3.539': attribute type 10 has an invalid length. [ 146.541908][ T8069] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 146.619599][ T8077] tc_dump_action: action bad kind [ 146.836404][ T8085] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 147.141732][ T8102] delete_channel: no stack [ 147.225099][ T8108] sctp: [Deprecated]: syz.1.552 (pid 8108) Use of int in max_burst socket option deprecated. [ 147.225099][ T8108] Use struct sctp_assoc_value instead [ 147.280345][ T8063] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 147.307947][ T8108] netlink: 'syz.1.552': attribute type 29 has an invalid length. [ 147.343980][ T8108] netlink: 'syz.1.552': attribute type 29 has an invalid length. [ 147.383477][ T8114] __nla_validate_parse: 11 callbacks suppressed [ 147.383497][ T8114] netlink: 32 bytes leftover after parsing attributes in process `syz.2.553'. [ 147.643303][ T8122] netlink: 'syz.3.558': attribute type 62 has an invalid length. [ 147.724152][ T8124] netlink: 64 bytes leftover after parsing attributes in process `syz.4.559'. [ 148.240607][ T8146] tipc: Enabled bearer , priority 0 [ 148.248056][ T8146] syzkaller0: entered promiscuous mode [ 148.254138][ T8146] syzkaller0: entered allmulticast mode [ 148.369962][ T8154] tipc: Resetting bearer [ 148.474964][ T8144] tipc: Resetting bearer [ 148.600895][ T8144] tipc: Disabling bearer [ 150.700884][ T8177] syzkaller0: entered promiscuous mode [ 150.706425][ T8177] syzkaller0: entered allmulticast mode [ 150.915762][ T8215] netlink: 'syz.2.577': attribute type 1 has an invalid length. [ 150.938986][ T8192] hsr0 speed is unknown, defaulting to 1000 [ 150.945020][ T3001] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.947283][ T3001] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.999726][ T8192] syz1: Port: 1 Link DOWN [ 151.087651][ T8215] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.105771][ T8219] tipc: New replicast peer: 255.255.255.255 [ 151.120296][ T8219] tipc: Enabled bearer , priority 10 [ 151.144736][ T3001] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.165515][ T8224] vlan2: entered allmulticast mode [ 151.179344][ T8224] veth1: entered allmulticast mode [ 151.186882][ T3001] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.665925][ T8255] netlink: 'syz.1.590': attribute type 1 has an invalid length. [ 151.678992][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.587'. [ 151.699387][ T8255] netlink: 'syz.1.590': attribute type 1 has an invalid length. [ 151.841618][ T8260] netlink: 48 bytes leftover after parsing attributes in process `syz.2.591'. [ 151.912865][ T8253] bond9 (unregistering): Released all slaves [ 152.251971][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'. [ 152.388957][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'. [ 152.428722][ T8289] netlink: 'syz.4.599': attribute type 26 has an invalid length. [ 152.495465][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'. [ 152.840480][ T8317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.022353][ T8326] team0: Device gtp0 is of different type [ 153.127527][ T8332] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.611'. [ 153.295722][ T8333] netlink: 'syz.3.611': attribute type 1 has an invalid length. [ 153.349163][ T8335] netlink: 72 bytes leftover after parsing attributes in process `syz.0.612'. [ 153.491601][ T8336] netlink: 72 bytes leftover after parsing attributes in process `syz.0.612'. [ 153.908275][ T8362] wireguard: wg1: Could not create IPv4 socket [ 154.019997][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 154.117580][ T8364] netlink: 36 bytes leftover after parsing attributes in process `syz.0.621'. [ 154.214790][ T8372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.622'. [ 154.724232][ T8389] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 154.725446][ T8389] netlink: 96 bytes leftover after parsing attributes in process `syz.3.628'. [ 154.766936][ T8389] netlink: 'syz.3.628': attribute type 11 has an invalid length. [ 154.807143][ T8389] netlink: 'syz.3.628': attribute type 11 has an invalid length. [ 154.847606][ T8389] netlink: 152 bytes leftover after parsing attributes in process `syz.3.628'. [ 156.100429][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.636'. [ 156.136943][ T8440] tipc: New replicast peer: 255.255.255.255 [ 156.146948][ T8440] tipc: Enabled bearer , priority 10 [ 156.159979][ T8439] tipc: Enabling of bearer rejected, already enabled [ 156.224653][ T8440] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 156.275212][ T8450] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 156.638971][ T8472] netlink: 'syz.2.645': attribute type 14 has an invalid length. [ 156.689715][ T8472] netlink: 'syz.2.645': attribute type 14 has an invalid length. [ 156.699084][ T1162] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.720204][ T1162] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.755174][ T1162] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.793504][ T1162] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.163266][ T8509] gretap0: entered promiscuous mode [ 157.228653][ T8513] 0{X: renamed from gretap0 [ 157.239945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.315972][ T8513] 0{X: left promiscuous mode [ 157.359478][ T8513] 0{X: entered allmulticast mode [ 157.367312][ T8513] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 157.716653][ T8539] __nla_validate_parse: 11 callbacks suppressed [ 157.716675][ T8539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.664'. [ 157.733293][ T8539] netlink: 'syz.2.664': attribute type 7 has an invalid length. [ 157.780193][ T8539] netlink: 'syz.2.664': attribute type 8 has an invalid length. [ 157.809147][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.664'. [ 158.110213][ T8546] netlink: 'syz.0.666': attribute type 25 has an invalid length. [ 158.296364][ T8564] pim6reg1: entered promiscuous mode [ 158.315630][ T8564] pim6reg1: entered allmulticast mode [ 158.614514][ T8582] veth0_to_bridge: entered allmulticast mode [ 158.616153][ T8587] netlink: 32 bytes leftover after parsing attributes in process `syz.4.676'. [ 158.665347][ T8586] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 158.744658][ T8590] team0: Device gtp0 is of different type [ 158.835695][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.681'. [ 158.894095][ T8599] sctp: [Deprecated]: syz.2.682 (pid 8599) Use of int in max_burst socket option deprecated. [ 158.894095][ T8599] Use struct sctp_assoc_value instead [ 159.287614][ T8619] netem: change failed [ 159.309145][ T8619] netem: change failed [ 159.452278][ T8607] hsr0 speed is unknown, defaulting to 1000 [ 159.760293][ T8639] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 159.767732][ T5930] IPVS: starting estimator thread 0... [ 159.806240][ T8652] netlink: 256 bytes leftover after parsing attributes in process `syz.1.695'. [ 159.806941][ T8637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.694'. [ 159.822653][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'. [ 159.827607][ T8647] netlink: 64 bytes leftover after parsing attributes in process `syz.4.692'. [ 159.865544][ T8641] netlink: 64 bytes leftover after parsing attributes in process `syz.4.692'. [ 159.870750][ T8646] IPVS: using max 24 ests per chain, 57600 per kthread [ 159.916616][ T8640] netlink: 40 bytes leftover after parsing attributes in process `syz.4.692'. [ 160.457639][ T8678] veth1_to_hsr: default FDB implementation only supports local addresses [ 160.913363][ T8707] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 160.943030][ T8707] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 161.173221][ T8716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.588972][ T8746] ip6gretap0: entered promiscuous mode [ 161.693029][ T8756] netlink: 'syz.4.725': attribute type 18 has an invalid length. [ 161.807499][ T3001] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.820340][ T3001] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.936949][ T3001] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.991341][ T3001] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.070263][ T8781] netlink: 'syz.2.733': attribute type 39 has an invalid length. [ 162.478951][ T8802] team0: Device vti0 is of different type [ 162.734257][ T8823] tipc: Enabled bearer , priority 0 [ 162.754251][ T8823] syzkaller0: entered promiscuous mode [ 162.766572][ T8823] syzkaller0: entered allmulticast mode [ 162.907677][ T8835] openvswitch: netlink: Flow key attr not present in new flow. [ 162.924086][ T8835] openvswitch: netlink: Flow key attr not present in new flow. [ 162.932188][ T8835] openvswitch: netlink: Flow key attr not present in new flow. [ 162.940291][ T8835] openvswitch: netlink: Flow key attr not present in new flow. [ 162.948267][ T8835] openvswitch: netlink: Flow key attr not present in new flow. [ 162.957635][ T8835] openvswitch: netlink: Flow key attr not present in new flow. [ 162.965915][ T8835] openvswitch: netlink: Flow key attr not present in new flow. [ 162.968734][ T8823] tipc: Resetting bearer [ 163.036419][ T8819] tipc: Resetting bearer [ 163.065503][ T8838] __nla_validate_parse: 13 callbacks suppressed [ 163.065525][ T8838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.752'. [ 163.116700][ T8819] tipc: Disabling bearer [ 163.139762][ T8842] netlink: 'syz.0.753': attribute type 10 has an invalid length. [ 163.187966][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.213595][ T8842] bridge_slave_1: left allmulticast mode [ 163.219367][ T8842] bridge_slave_1: left promiscuous mode [ 163.225504][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.292347][ T8842] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 163.428501][ T8849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.755'. [ 163.471362][ T8860] netlink: 'syz.1.759': attribute type 7 has an invalid length. [ 163.544354][ T8860] : entered promiscuous mode [ 163.654547][ T8869] netlink: 244 bytes leftover after parsing attributes in process `syz.4.763'. [ 163.762983][ T8877] netlink: 16 bytes leftover after parsing attributes in process `syz.1.765'. [ 163.768382][ T8874] netlink: 'syz.3.764': attribute type 1 has an invalid length. [ 163.983505][ T8880] bond1: (slave gretap0): making interface the new active one [ 164.000708][ T8880] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 164.328811][ T8895] netlink: 'syz.4.771': attribute type 9 has an invalid length. [ 164.330164][ T8897] net_ratelimit: 26 callbacks suppressed [ 164.330182][ T8897] openvswitch: netlink: IP tunnel dst address not specified [ 164.387219][ T8901] netlink: 'syz.4.771': attribute type 9 has an invalid length. [ 164.458856][ T8904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.772'. [ 164.566930][ T8906] nbd: socks must be embedded in a SOCK_ITEM attr [ 164.871656][ T8923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.773'. [ 164.907242][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.779'. [ 164.930154][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.4.779'. [ 165.016456][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.778'. [ 165.087715][ T8921] 8021q: VLANs not supported on wg1 [ 165.204586][ T8938] netlink: 332 bytes leftover after parsing attributes in process `syz.4.780'. [ 165.224010][ T8937] bond2: entered promiscuous mode [ 165.229109][ T8937] bond2: entered allmulticast mode [ 165.234973][ T8937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.602976][ T8963] tipc: Enabled bearer , priority 0 [ 165.613071][ T8963] syzkaller0: entered promiscuous mode [ 165.618599][ T8963] syzkaller0: entered allmulticast mode [ 165.664083][ T8961] tipc: Resetting bearer [ 165.714151][ T8961] tipc: Disabling bearer [ 165.751007][ T8975] netlink: 'syz.3.794': attribute type 9 has an invalid length. [ 165.870747][ T8981] netlink: 'syz.4.795': attribute type 1 has an invalid length. [ 166.069736][ T8990] netlink: 'syz.0.797': attribute type 32 has an invalid length. [ 166.133107][ T8990] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 166.390313][ T9009] tipc: New replicast peer: 255.255.255.255 [ 166.397135][ T9009] tipc: Enabled bearer , priority 10 [ 166.746494][ T9030] sctp: [Deprecated]: syz.4.813 (pid 9030) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.746494][ T9030] Use struct sctp_sack_info instead [ 166.900992][ T9038] netlink: 'syz.4.816': attribute type 11 has an invalid length. [ 167.339990][ T9063] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 167.380959][ T9067] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 167.533534][ T9066] syzkaller0: entered promiscuous mode [ 167.539173][ T9066] syzkaller0: entered allmulticast mode [ 168.816210][ T9086] __nla_validate_parse: 19 callbacks suppressed [ 168.816230][ T9086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.833'. [ 169.234832][ T9120] netlink: 44 bytes leftover after parsing attributes in process `syz.1.841'. [ 169.261290][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.842'. [ 169.743366][ T9151] openvswitch: netlink: IP tunnel dst address not specified [ 169.992624][ T9166] dvmrp1: entered allmulticast mode [ 170.086273][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 170.381406][ T9185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.865'. [ 170.542358][ T9196] tipc: Enabled bearer , priority 0 [ 170.550549][ T9196] syzkaller0: entered promiscuous mode [ 170.556208][ T9196] syzkaller0: entered allmulticast mode [ 170.572921][ T9196] netlink: 72 bytes leftover after parsing attributes in process `syz.2.868'. [ 170.636437][ T9196] tipc: Resetting bearer [ 170.667655][ T9190] tipc: Resetting bearer [ 170.760540][ T9190] tipc: Disabling bearer [ 170.820470][ T9208] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 170.941294][ T9217] macvlan2: entered promiscuous mode [ 170.946654][ T9217] macvlan2: entered allmulticast mode [ 170.993178][ T9219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.879'. [ 171.066234][ T9225] batadv1: entered allmulticast mode [ 171.092964][ T9225] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 171.150063][ T9229] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 171.192072][ T9229] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 171.204507][ T9229] gretap2: entered promiscuous mode [ 171.215611][ T9229] gretap2: entered allmulticast mode [ 171.384695][ T9244] netlink: 44 bytes leftover after parsing attributes in process `syz.3.887'. [ 171.605752][ T9256] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 171.631280][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 171.930350][ T9279] netlink: 'syz.3.898': attribute type 62 has an invalid length. [ 171.975586][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.898'. [ 172.006845][ T9282] netlink: 'syz.3.898': attribute type 62 has an invalid length. [ 172.058741][ T9284] tap0: tun_chr_ioctl cmd 1074025678 [ 172.070162][ T9284] tap0: group set to 0 [ 172.610293][ T9311] team0: No ports can be present during mode change [ 172.666663][ T9319] netlink: 'syz.2.912': attribute type 11 has an invalid length. [ 172.695363][ T9322] only policy match revision 0 supported [ 172.695384][ T9322] unable to load match [ 172.850797][ T9330] gretap0: entered promiscuous mode [ 172.856891][ T9330] vlan2: entered promiscuous mode [ 173.185576][ T9344] netlink: 'syz.1.920': attribute type 4 has an invalid length. [ 173.272338][ T9352] netlink: 'syz.4.923': attribute type 10 has an invalid length. [ 173.312642][ T9352] team0: Device veth0_vlan failed to register rx_handler [ 173.377205][ T9355] ipvlan0: entered promiscuous mode [ 173.388264][ T9355] ipvlan0: entered allmulticast mode [ 173.412784][ T9352] netlink: 'syz.4.923': attribute type 1 has an invalid length. [ 173.420893][ T9352] nbd: illegal input index 1048576 [ 173.508353][ T9293] hsr0 speed is unknown, defaulting to 1000 [ 173.965406][ T9379] __nla_validate_parse: 6 callbacks suppressed [ 173.965428][ T9379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.931'. [ 174.080284][ T9392] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 174.091822][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.931'. [ 174.463099][ T9417] netlink: 20 bytes leftover after parsing attributes in process `syz.4.939'. [ 174.484389][ T9417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.939'. [ 174.861940][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.944'. [ 174.990492][ T9433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.946'. [ 174.994819][ T9431] netlink: 40 bytes leftover after parsing attributes in process `syz.0.942'. [ 175.363861][ T9452] netdevsim netdevsim4 : renamed from netdevsim0 [ 175.388367][ T9452] netlink: 240 bytes leftover after parsing attributes in process `syz.4.950'. [ 175.459898][ T9455] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 176.061981][ T9485] netlink: 44 bytes leftover after parsing attributes in process `syz.3.961'. [ 176.187520][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 176.223921][ T9502] bridge_slave_0: left allmulticast mode [ 176.233218][ T9502] bridge_slave_0: left promiscuous mode [ 176.239183][ T9502] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.365540][ T9499] bond0: option miimon: invalid value (18446744073709550592) [ 176.375471][ T9499] bond0: option miimon: allowed values 0 - 2147483647 [ 176.394028][ T9511] netlink: 'syz.3.969': attribute type 15 has an invalid length. [ 176.477064][ T9523] netlink: 'syz.3.971': attribute type 1 has an invalid length. [ 176.523675][ T9523] block nbd1: not configured, cannot reconfigure [ 176.643686][ T9532] Oops: general protection fault, probably for non-canonical address 0xfbd5a5d5a0000003: 0000 [#1] SMP KASAN PTI [ 176.655634][ T9532] KASAN: maybe wild-memory-access in range [0xdead4ead00000018-0xdead4ead0000001f] [ 176.664954][ T9532] CPU: 0 UID: 0 PID: 9532 Comm: syz.4.975 Not tainted 6.16.0-syzkaller-12111-gd7e82594a45c #0 PREEMPT(full) [ 176.676535][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.686630][ T9532] RIP: 0010:smc_diag_dump_proto+0x4cd/0x1fb0 [ 176.692652][ T9532] Code: 80 3c 2f 00 74 08 48 89 df e8 1f 7f fb f6 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 30 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f4 7e fb f6 4d 8b 2c 24 49 83 c5 [ 176.712298][ T9532] RSP: 0018:ffffc9001b84ef40 EFLAGS: 00010a06 [ 176.718389][ T9532] RAX: 1bd5a9d5a0000003 RBX: ffff8880114c9338 RCX: ffff88802ee7bc00 [ 176.726374][ T9532] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 176.734358][ T9532] RBP: ffffc9001b84f2b0 R08: ffff8880114c8d5f R09: 1ffff110022991ab [ 176.742359][ T9532] R10: dffffc0000000000 R11: ffffed10022991ac R12: dead4ead00000018 [ 176.750352][ T9532] R13: dffffc0000000000 R14: ffff8880114c8d00 R15: 1ffff11002299267 [ 176.758334][ T9532] FS: 00007f939f3726c0(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 176.767272][ T9532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.773869][ T9532] CR2: 000020000000e000 CR3: 000000007a360000 CR4: 00000000003526f0 [ 176.781848][ T9532] Call Trace: [ 176.785162][ T9532] [ 176.788114][ T9532] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 176.793760][ T9532] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 176.799318][ T9532] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 176.804873][ T9532] ? __phys_addr+0xd3/0x180 [ 176.809399][ T9532] ? __kasan_kmalloc_large+0x85/0xa0 [ 176.814713][ T9532] ? rcu_is_watching+0x15/0xb0 [ 176.819491][ T9532] ? rcu_is_watching+0x15/0xb0 [ 176.824265][ T9532] ? trace_kmalloc+0x1f/0xd0 [ 176.828869][ T9532] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 176.835476][ T9532] ? __build_skb_around+0x257/0x3e0 [ 176.840777][ T9532] smc_diag_dump+0x59/0xa0 [ 176.845213][ T9532] netlink_dump+0x6e4/0xe90 [ 176.849764][ T9532] ? __pfx_netlink_dump+0x10/0x10 [ 176.854807][ T9532] ? __netlink_lookup+0x752/0x810 [ 176.859855][ T9532] ? netlink_lookup+0x30/0x200 [ 176.864645][ T9532] ? netlink_lookup+0x30/0x200 [ 176.869426][ T9532] ? netlink_lookup+0x30/0x200 [ 176.874210][ T9532] __netlink_dump_start+0x5cb/0x7e0 [ 176.879436][ T9532] smc_diag_handler_dump+0x178/0x210 [ 176.884742][ T9532] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 176.890567][ T9532] ? __pfx_smc_diag_dump+0x10/0x10 [ 176.895697][ T9532] ? sock_diag_lock_handler+0x19/0x290 [ 176.901170][ T9532] ? sock_diag_lock_handler+0x19/0x290 [ 176.906645][ T9532] sock_diag_rcv_msg+0x4c9/0x600 [ 176.911606][ T9532] netlink_rcv_skb+0x205/0x470 [ 176.916390][ T9532] ? __lock_acquire+0xab9/0xd20 [ 176.921275][ T9532] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 176.926769][ T9532] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.932162][ T9532] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.937391][ T9532] netlink_unicast+0x82c/0x9e0 [ 176.942193][ T9532] ? __pfx_netlink_unicast+0x10/0x10 [ 176.947500][ T9532] ? netlink_sendmsg+0x642/0xb30 [ 176.952458][ T9532] ? skb_put+0x11b/0x210 [ 176.956756][ T9532] netlink_sendmsg+0x805/0xb30 [ 176.961646][ T9532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.966945][ T9532] ? aa_sock_msg_perm+0xf1/0x1d0 [ 176.971905][ T9532] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.977239][ T9532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.982548][ T9532] __sock_sendmsg+0x21c/0x270 [ 176.987248][ T9532] ____sys_sendmsg+0x505/0x830 [ 176.992035][ T9532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.997340][ T9532] ? import_iovec+0x74/0xa0 [ 177.001858][ T9532] ___sys_sendmsg+0x21f/0x2a0 [ 177.006566][ T9532] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.011793][ T9532] ? __fget_files+0x2a/0x420 [ 177.016401][ T9532] ? __fget_files+0x3a0/0x420 [ 177.021101][ T9532] __x64_sys_sendmsg+0x19b/0x260 [ 177.026069][ T9532] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.031564][ T9532] ? rcu_is_watching+0x15/0xb0 [ 177.036336][ T9532] ? do_syscall_64+0xbe/0x3b0 [ 177.041029][ T9532] do_syscall_64+0xfa/0x3b0 [ 177.045556][ T9532] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.050767][ T9532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.056874][ T9532] ? clear_bhb_loop+0x60/0xb0 [ 177.061568][ T9532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.067653][ T9532] RIP: 0033:0x7f939e58ebe9 [ 177.072078][ T9532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.091728][ T9532] RSP: 002b:00007f939f372038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.100155][ T9532] RAX: ffffffffffffffda RBX: 00007f939e7b6090 RCX: 00007f939e58ebe9 [ 177.108139][ T9532] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 000000000000000b [ 177.116120][ T9532] RBP: 00007f939e611e19 R08: 0000000000000000 R09: 0000000000000000 [ 177.124101][ T9532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.132078][ T9532] R13: 00007f939e7b6128 R14: 00007f939e7b6090 R15: 00007ffd54f3e4d8 [ 177.140065][ T9532] [ 177.143087][ T9532] Modules linked in: [ 177.148926][ T9532] ---[ end trace 0000000000000000 ]--- [ 177.155707][ T9532] RIP: 0010:smc_diag_dump_proto+0x4cd/0x1fb0 [ 177.161918][ T9532] Code: 80 3c 2f 00 74 08 48 89 df e8 1f 7f fb f6 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 30 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f4 7e fb f6 4d 8b 2c 24 49 83 c5 [ 177.181988][ T9532] RSP: 0018:ffffc9001b84ef40 EFLAGS: 00010a06 [ 177.188121][ T9532] RAX: 1bd5a9d5a0000003 RBX: ffff8880114c9338 RCX: ffff88802ee7bc00 [ 177.196211][ T9532] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 177.204247][ T9532] RBP: ffffc9001b84f2b0 R08: ffff8880114c8d5f R09: 1ffff110022991ab [ 177.212285][ T9532] R10: dffffc0000000000 R11: ffffed10022991ac R12: dead4ead00000018 [ 177.220658][ T9532] R13: dffffc0000000000 R14: ffff8880114c8d00 R15: 1ffff11002299267 [ 177.228671][ T9532] FS: 00007f939f3726c0(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 177.237954][ T9532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 177.244650][ T9532] CR2: 000020000000e000 CR3: 000000007a360000 CR4: 00000000003526f0 [ 177.252703][ T9532] Kernel panic - not syncing: Fatal exception [ 177.258941][ T9532] Kernel Offset: disabled [ 177.263295][ T9532] Rebooting in 86400 seconds..