last executing test programs: 3m42.87915138s ago: executing program 1 (id=653): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x1042}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl(r0, 0x8b2c, &(0x7f0000000040)) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x1042}, 0x10) (async) 3m42.633170004s ago: executing program 1 (id=656): socket$alg(0x26, 0x5, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) listen(r2, 0x0) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r3, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 3m41.819740877s ago: executing program 1 (id=664): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r2, 0x2, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280), 0x0, 0x0}, 0x40) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r8 = accept(r6, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a8"], 0x50) writev(r7, &(0x7f0000001a80)=[{&(0x7f0000000180)="bf", 0x1}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r8}, 0x20) recvmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001330022eb"], 0x10da) ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, 0x0) r10 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x12, 0x80800) ioctl$SIOCX25SDTEFACILITIES(r10, 0x89eb, &(0x7f0000000140)={0x0, 0x0, 0x5, 0x9, 0xa8, 0x25, 0xe, "993fc706ca81061b9f4c04f18c46456dee2be10e", "3725b5f43b9c17bf07307a9c1ea0c3db09e21f16"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 3m41.015179132s ago: executing program 1 (id=670): r0 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x262549bc027f03fb, 0x10, r0, 0xad965000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000001280)={&(0x7f0000000080)=@tipc, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/238, 0xee}, {&(0x7f0000000200)=""/11, 0xb}], 0x2, &(0x7f0000000280)=""/4096, 0x1000}, 0x10100) r3 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000012c0)) accept4$ax25(r3, &(0x7f0000001300)={{0x3, @netrom}, [@null, @rose, @netrom, @netrom, @bcast, @null, @netrom, @null]}, &(0x7f0000001380)=0x48, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000013c0)={'veth1_to_team\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x1f, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x0, 0x0, 0x2, 0x3, 0xa, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5b4b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001540)='syzkaller\x00', 0x9, 0x2e, &(0x7f0000001580)=""/46, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001600)={0x1, 0xf, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001640)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001680)=[{0x5, 0x1, 0xc, 0x8}, {0x5, 0x2, 0xd, 0x7}, {0x2, 0x2, 0x6, 0x7}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001780)={&(0x7f0000001400)='ext4_ext_rm_idx\x00', r4, 0x0, 0x8}, 0x18) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f00000017c0), &(0x7f0000001800)=0x8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000001840)={0x0, 'veth0_vlan\x00', {}, 0xbbfd}) r5 = socket(0x1, 0x4, 0x2) setsockopt$packet_buf(r5, 0x107, 0xd, &(0x7f0000001880)="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", 0x1000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000002880)={0x0, 0x9, 0x8, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000002c80)={r6, "4d98a02a0d8c389df6d0807e0a4d46c5"}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000003c80)={0x0, 0x131, 0x8, 0x1000000, 0x6, 0x1a89}, &(0x7f0000003cc0)=0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000003d00)={r7, @in6={{0xa, 0x4e21, 0x200, @private2, 0x4}}, 0x71, 0x4, 0x0, 0x7, 0x6, 0x5}, &(0x7f0000003dc0)=0x9c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(0xffffffffffffffff, &(0x7f0000005f80)=[{&(0x7f0000003e00)=""/38, 0x26}, {&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e40)=""/221, 0xdd}, {&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000005f40)=""/41, 0x29}], 0x5) getsockname$packet(r5, &(0x7f0000006000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006040)=0x14) socket$isdn(0x22, 0x3, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000060c0)={&(0x7f0000006080)='hugepage_set_pmd\x00', r4, 0x0, 0x9}, 0x18) socket$inet_sctp(0x2, 0x5, 0x84) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000006300)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000063c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', r8, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000064c0)={0x18, 0x15, &(0x7f0000006100)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x7, 0x0, 0xd, 0x1, 0x5, 0x4, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0x9, 0x3, 0x6, 0xfffffffffffffff4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff801}}], &(0x7f00000061c0)='GPL\x00', 0x3, 0xe0, &(0x7f0000006200)=""/224, 0x40f00, 0x53, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000006340)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000006380)={0x0, 0x0, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000006440)=[r10], &(0x7f0000006480)=[{0x3, 0x2, 0x4, 0x2}], 0x10, 0x3}, 0x94) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000006600)={'syztnl1\x00', &(0x7f0000006580)={'gre0\x00', r8, 0x1, 0x80, 0x5, 0x7fffffff, {{0x10, 0x4, 0x3, 0x7, 0x40, 0x66, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @local, {[@cipso={0x86, 0x2b, 0x0, [{0x6, 0x2}, {0x7, 0xe, "195c040d80e0d11a7a497539"}, {0x0, 0xc, "3303b5188e18468c860d"}, {0x0, 0x6, "062493bc"}, {0x0, 0x3, "cf"}]}, @noop]}}}}}) 3m40.711353915s ago: executing program 1 (id=675): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @window={0x3, 0x100, 0x70f9}, @sack_perm, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) r1 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x80400) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0x8, 0xc9100120, 0x0, 0x0) 3m21.756236596s ago: executing program 1 (id=675): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @window={0x3, 0x100, 0x70f9}, @sack_perm, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) r1 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x80400) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0x8, 0xc9100120, 0x0, 0x0) 3m21.151095609s ago: executing program 32 (id=675): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @window={0x3, 0x100, 0x70f9}, @sack_perm, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) r1 = accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10, 0x80400) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0x8, 0xc9100120, 0x0, 0x0) 1m41.26206297s ago: executing program 2 (id=283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000007300)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000000)="7f21547c", 0x4}], 0x1}}], 0x1, 0x0) listen(r4, 0xfff) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x2, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0xe]}}]}}]}, 0x94}}, 0x0) r8 = accept(r4, 0xfffffffffffffffd, &(0x7f0000000440)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x10, 0x40, 0xf, 0x2, {{0xf, 0x4, 0x0, 0x7, 0x3c, 0x3, 0x0, 0x1, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x27, 0x60, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}]}}}}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x0, 0xffffffff, 0xe51, 0x1000, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x240, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd7f5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r14]}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pB \x00'}, 0x20) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xc, 0x1, 0x1, 0x6, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) setsockopt$inet_int(r8, 0x0, 0xe, &(0x7f0000000300)=0x800, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x1b, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000006000000000000000002000018600000100000000000000001010000b7080000000000007b8af8ff00000000b70800008d0900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a50000001811000086210a24bd75fd4a09297fd294eb8699434eb72288da38f6e4bf4f6ae6f3ee5304bdc74ea442bf7882aa6e9186a514e48a2a36085ac7c7a859518912b0b53e6e5beb6702000fb3deea9315d660bc5cee5d7beba5accda04467830000000000000087745abd0ea618c09588eb054d817f16e82a9c9f8158d1869f27", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x81, 0xf1, &(0x7f0000000380)=""/241, 0x40f00, 0x2, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xa, 0x8000, 0x80}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000840)=[r11, r12, r13, r14, r16, r17], &(0x7f0000000880)=[{0x5, 0x3, 0x2, 0xc}, {0x0, 0x4, 0x2, 0xb}, {0x2, 0x4, 0x6, 0xa}, {0x2, 0x2, 0xc}, {0x0, 0x5, 0x7, 0x1}, {0x1, 0x3, 0x6}, {0x4, 0x4, 0x8, 0xb}]}, 0x94) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x7, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}]}]}, 0x38}}, 0x0) 1m27.589088627s ago: executing program 2 (id=283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000007300)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000000)="7f21547c", 0x4}], 0x1}}], 0x1, 0x0) listen(r4, 0xfff) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x2, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0xe]}}]}}]}, 0x94}}, 0x0) r8 = accept(r4, 0xfffffffffffffffd, &(0x7f0000000440)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x10, 0x40, 0xf, 0x2, {{0xf, 0x4, 0x0, 0x7, 0x3c, 0x3, 0x0, 0x1, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x27, 0x60, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}]}}}}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x0, 0xffffffff, 0xe51, 0x1000, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x240, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd7f5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r14]}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pB \x00'}, 0x20) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xc, 0x1, 0x1, 0x6, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) setsockopt$inet_int(r8, 0x0, 0xe, &(0x7f0000000300)=0x800, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x1b, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000006000000000000000002000018600000100000000000000001010000b7080000000000007b8af8ff00000000b70800008d0900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a50000001811000086210a24bd75fd4a09297fd294eb8699434eb72288da38f6e4bf4f6ae6f3ee5304bdc74ea442bf7882aa6e9186a514e48a2a36085ac7c7a859518912b0b53e6e5beb6702000fb3deea9315d660bc5cee5d7beba5accda04467830000000000000087745abd0ea618c09588eb054d817f16e82a9c9f8158d1869f27", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x81, 0xf1, &(0x7f0000000380)=""/241, 0x40f00, 0x2, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xa, 0x8000, 0x80}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000840)=[r11, r12, r13, r14, r16, r17], &(0x7f0000000880)=[{0x5, 0x3, 0x2, 0xc}, {0x0, 0x4, 0x2, 0xb}, {0x2, 0x4, 0x6, 0xa}, {0x2, 0x2, 0xc}, {0x0, 0x5, 0x7, 0x1}, {0x1, 0x3, 0x6}, {0x4, 0x4, 0x8, 0xb}]}, 0x94) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x7, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}]}]}, 0x38}}, 0x0) 1m24.056866715s ago: executing program 5 (id=1705): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x30b}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r5, 0x0, 0x1, &(0x7f0000000040)='\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r6}, 0x4) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 1m23.367802318s ago: executing program 5 (id=1710): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000440), &(0x7f00000004c0), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', r0, @sched_cls}, 0x94) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0x0, 0x0}, 0x8) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)="7102b87fd4a29eb711d3d8dd9d30a576adc9f6e273aa268bf88d9b6b401a48d9897f02e252e0882cc55d14a5949d95b3fa8e0fdefbdb9d5f2b2402455bb8ea9669c041e99a804b3a84e5be4329c6ac5ccfd26d65bf13d7dc9ce767be3e7d49acf525dca7523b6bc44d49b40ce43b8cb32004f23c12750711d0858c8d0d41dc8700148a722a3cbc6abb", 0x89}], 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f0000000540), 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) (async) sendmsg$inet(r7, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) (async) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) r11 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r11) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="23025f21342ff181be470000000c00000000030004001400019757"], 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r3, r3, 0x2f, 0x20, 0x4, @void, @void, @void, @value=r4}, 0x20) (async) r12 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) setsockopt(r12, 0xff, 0x7, &(0x7f0000000900)="7c73c6e9", 0x4) (async) r14 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) 1m2.956916604s ago: executing program 2 (id=283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000007300)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000000)="7f21547c", 0x4}], 0x1}}], 0x1, 0x0) listen(r4, 0xfff) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x2, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0xe]}}]}}]}, 0x94}}, 0x0) r8 = accept(r4, 0xfffffffffffffffd, &(0x7f0000000440)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x10, 0x40, 0xf, 0x2, {{0xf, 0x4, 0x0, 0x7, 0x3c, 0x3, 0x0, 0x1, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x27, 0x60, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}]}}}}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x0, 0xffffffff, 0xe51, 0x1000, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x240, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd7f5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r14]}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pB \x00'}, 0x20) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xc, 0x1, 0x1, 0x6, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) setsockopt$inet_int(r8, 0x0, 0xe, &(0x7f0000000300)=0x800, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x1b, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000006000000000000000002000018600000100000000000000001010000b7080000000000007b8af8ff00000000b70800008d0900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a50000001811000086210a24bd75fd4a09297fd294eb8699434eb72288da38f6e4bf4f6ae6f3ee5304bdc74ea442bf7882aa6e9186a514e48a2a36085ac7c7a859518912b0b53e6e5beb6702000fb3deea9315d660bc5cee5d7beba5accda04467830000000000000087745abd0ea618c09588eb054d817f16e82a9c9f8158d1869f27", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x81, 0xf1, &(0x7f0000000380)=""/241, 0x40f00, 0x2, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xa, 0x8000, 0x80}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000840)=[r11, r12, r13, r14, r16, r17], &(0x7f0000000880)=[{0x5, 0x3, 0x2, 0xc}, {0x0, 0x4, 0x2, 0xb}, {0x2, 0x4, 0x6, 0xa}, {0x2, 0x2, 0xc}, {0x0, 0x5, 0x7, 0x1}, {0x1, 0x3, 0x6}, {0x4, 0x4, 0x8, 0xb}]}, 0x94) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x7, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}]}]}, 0x38}}, 0x0) 1m1.728018242s ago: executing program 5 (id=1710): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000440), &(0x7f00000004c0), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', r0, @sched_cls}, 0x94) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0x0, 0x0}, 0x8) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)="7102b87fd4a29eb711d3d8dd9d30a576adc9f6e273aa268bf88d9b6b401a48d9897f02e252e0882cc55d14a5949d95b3fa8e0fdefbdb9d5f2b2402455bb8ea9669c041e99a804b3a84e5be4329c6ac5ccfd26d65bf13d7dc9ce767be3e7d49acf525dca7523b6bc44d49b40ce43b8cb32004f23c12750711d0858c8d0d41dc8700148a722a3cbc6abb", 0x89}], 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f0000000540), 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) (async) sendmsg$inet(r7, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) (async) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) r11 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r11) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="23025f21342ff181be470000000c00000000030004001400019757"], 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r3, r3, 0x2f, 0x20, 0x4, @void, @void, @void, @value=r4}, 0x20) (async) r12 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) setsockopt(r12, 0xff, 0x7, &(0x7f0000000900)="7c73c6e9", 0x4) (async) r14 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) 45.789535991s ago: executing program 2 (id=283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000007300)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000000)="7f21547c", 0x4}], 0x1}}], 0x1, 0x0) listen(r4, 0xfff) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x2, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0xe]}}]}}]}, 0x94}}, 0x0) r8 = accept(r4, 0xfffffffffffffffd, &(0x7f0000000440)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x10, 0x40, 0xf, 0x2, {{0xf, 0x4, 0x0, 0x7, 0x3c, 0x3, 0x0, 0x1, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x27, 0x60, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}]}}}}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x0, 0xffffffff, 0xe51, 0x1000, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x240, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd7f5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r14]}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pB \x00'}, 0x20) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xc, 0x1, 0x1, 0x6, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) setsockopt$inet_int(r8, 0x0, 0xe, &(0x7f0000000300)=0x800, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x1b, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000006000000000000000002000018600000100000000000000001010000b7080000000000007b8af8ff00000000b70800008d0900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a50000001811000086210a24bd75fd4a09297fd294eb8699434eb72288da38f6e4bf4f6ae6f3ee5304bdc74ea442bf7882aa6e9186a514e48a2a36085ac7c7a859518912b0b53e6e5beb6702000fb3deea9315d660bc5cee5d7beba5accda04467830000000000000087745abd0ea618c09588eb054d817f16e82a9c9f8158d1869f27", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x81, 0xf1, &(0x7f0000000380)=""/241, 0x40f00, 0x2, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xa, 0x8000, 0x80}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000840)=[r11, r12, r13, r14, r16, r17], &(0x7f0000000880)=[{0x5, 0x3, 0x2, 0xc}, {0x0, 0x4, 0x2, 0xb}, {0x2, 0x4, 0x6, 0xa}, {0x2, 0x2, 0xc}, {0x0, 0x5, 0x7, 0x1}, {0x1, 0x3, 0x6}, {0x4, 0x4, 0x8, 0xb}]}, 0x94) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x7, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}]}]}, 0x38}}, 0x0) 44.699519866s ago: executing program 5 (id=1710): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000440), &(0x7f00000004c0), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', r0, @sched_cls}, 0x94) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0x0, 0x0}, 0x8) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)="7102b87fd4a29eb711d3d8dd9d30a576adc9f6e273aa268bf88d9b6b401a48d9897f02e252e0882cc55d14a5949d95b3fa8e0fdefbdb9d5f2b2402455bb8ea9669c041e99a804b3a84e5be4329c6ac5ccfd26d65bf13d7dc9ce767be3e7d49acf525dca7523b6bc44d49b40ce43b8cb32004f23c12750711d0858c8d0d41dc8700148a722a3cbc6abb", 0x89}], 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f0000000540), 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) (async) sendmsg$inet(r7, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) (async) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) r11 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r11) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="23025f21342ff181be470000000c00000000030004001400019757"], 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r3, r3, 0x2f, 0x20, 0x4, @void, @void, @void, @value=r4}, 0x20) (async) r12 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) setsockopt(r12, 0xff, 0x7, &(0x7f0000000900)="7c73c6e9", 0x4) (async) r14 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) 28.468265727s ago: executing program 2 (id=283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000007300)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000000)="7f21547c", 0x4}], 0x1}}], 0x1, 0x0) listen(r4, 0xfff) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x2, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0xe]}}]}}]}, 0x94}}, 0x0) r8 = accept(r4, 0xfffffffffffffffd, &(0x7f0000000440)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x10, 0x40, 0xf, 0x2, {{0xf, 0x4, 0x0, 0x7, 0x3c, 0x3, 0x0, 0x1, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x27, 0x60, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}]}}}}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x0, 0xffffffff, 0xe51, 0x1000, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x240, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd7f5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r14]}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pB \x00'}, 0x20) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xc, 0x1, 0x1, 0x6, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) setsockopt$inet_int(r8, 0x0, 0xe, &(0x7f0000000300)=0x800, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x1b, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000006000000000000000002000018600000100000000000000001010000b7080000000000007b8af8ff00000000b70800008d0900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a50000001811000086210a24bd75fd4a09297fd294eb8699434eb72288da38f6e4bf4f6ae6f3ee5304bdc74ea442bf7882aa6e9186a514e48a2a36085ac7c7a859518912b0b53e6e5beb6702000fb3deea9315d660bc5cee5d7beba5accda04467830000000000000087745abd0ea618c09588eb054d817f16e82a9c9f8158d1869f27", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x81, 0xf1, &(0x7f0000000380)=""/241, 0x40f00, 0x2, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xa, 0x8000, 0x80}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000840)=[r11, r12, r13, r14, r16, r17], &(0x7f0000000880)=[{0x5, 0x3, 0x2, 0xc}, {0x0, 0x4, 0x2, 0xb}, {0x2, 0x4, 0x6, 0xa}, {0x2, 0x2, 0xc}, {0x0, 0x5, 0x7, 0x1}, {0x1, 0x3, 0x6}, {0x4, 0x4, 0x8, 0xb}]}, 0x94) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x7, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}]}]}, 0x38}}, 0x0) 27.662236984s ago: executing program 5 (id=1710): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000440), &(0x7f00000004c0), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', r0, @sched_cls}, 0x94) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0x0, 0x0}, 0x8) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)="7102b87fd4a29eb711d3d8dd9d30a576adc9f6e273aa268bf88d9b6b401a48d9897f02e252e0882cc55d14a5949d95b3fa8e0fdefbdb9d5f2b2402455bb8ea9669c041e99a804b3a84e5be4329c6ac5ccfd26d65bf13d7dc9ce767be3e7d49acf525dca7523b6bc44d49b40ce43b8cb32004f23c12750711d0858c8d0d41dc8700148a722a3cbc6abb", 0x89}], 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f0000000540), 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) (async) sendmsg$inet(r7, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) (async) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) r11 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r11) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="23025f21342ff181be470000000c00000000030004001400019757"], 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r3, r3, 0x2f, 0x20, 0x4, @void, @void, @void, @value=r4}, 0x20) (async) r12 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) setsockopt(r12, 0xff, 0x7, &(0x7f0000000900)="7c73c6e9", 0x4) (async) r14 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) 25.827902295s ago: executing program 4 (id=2116): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x69}}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc01000010000000180000000000000000000000000000009500"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000100)={'some', 0x20, 0x4, 0x20, 0x884}, 0x2f) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000631108000000000007000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff7b}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) close(r1) 25.689889667s ago: executing program 4 (id=2118): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_macvtap\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r2) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="23020000000000000000030004001400019757"], 0x28}}, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40240, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) (async) socket(0x1, 0x2, 0x8001) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x24, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0xc000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000000000000c00"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops}, 0x94) (async) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000340)={r8}) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r11, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, 0x1, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3c}}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0xc010}, 0x80) (async) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000040)={r9}) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e3, &(0x7f0000000180)={r8, r10}) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)={0x12c, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xfffffffb}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}}}}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe9ab}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc66a}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) 25.395400137s ago: executing program 4 (id=2119): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200000002"], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="02"], 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r5, 0x4) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r6, 0x1) shutdown(r6, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x503, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004, 0x4c20}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x4c}}, 0x24048020) 25.248320169s ago: executing program 4 (id=2121): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143fdd, 0x80, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1d, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000300000000000000a138000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a00000000000003000000000000000200000000000008000000000000000000010002000000000c0015000100010010000000"], 0xc4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r7, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) sendmsg$inet(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r5, 0x6, 0x5, &(0x7f0000000000), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), 0x20000000}, 0x20) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r9, &(0x7f0000000000)={0x24, @short={0x2, 0x1}}, 0xb) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r0, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00'}, 0x94) 24.993206014s ago: executing program 4 (id=2123): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfffffffc}, 0x50) r2 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x1170, 0x1170, 0x1a8, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0x0, 0x0, 0x0, 0xffffff00], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20]}}, @common=@unspec=@physdev={{0x68}, {'geneve0\x00', {}, 'veth1_macvtap\x00', {}, 0x9, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0x40], 0xfffffffd, 0x0, 0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_TOS={0x5, 0x9, 0xa}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_newroute={0x2c, 0x18, 0x2, 0x70bd27, 0x25dfdbfb, {0x1c, 0x94, 0x0, 0x5, 0x101, 0x3, 0xfe, 0x6, 0x400}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c000) (async) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000100), 0x20000000}, 0x20) 6.844227386s ago: executing program 2 (id=283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x94}]}, 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000007300)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000000)="7f21547c", 0x4}], 0x1}}], 0x1, 0x0) listen(r4, 0xfff) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x2, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0xe]}}]}}]}, 0x94}}, 0x0) r8 = accept(r4, 0xfffffffffffffffd, &(0x7f0000000440)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}]}}}]}, 0x38}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x10, 0x40, 0xf, 0x2, {{0xf, 0x4, 0x0, 0x7, 0x3c, 0x3, 0x0, 0x1, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x27, 0x60, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}]}}}}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x0, 0xffffffff, 0xe51, 0x1000, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0xf, 0x0, 0x1, 0x240, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd7f5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r14]}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pB \x00'}, 0x20) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xc, 0x1, 0x1, 0x6, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) setsockopt$inet_int(r8, 0x0, 0xe, &(0x7f0000000300)=0x800, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x1b, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000006000000000000000002000018600000100000000000000001010000b7080000000000007b8af8ff00000000b70800008d0900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a50000001811000086210a24bd75fd4a09297fd294eb8699434eb72288da38f6e4bf4f6ae6f3ee5304bdc74ea442bf7882aa6e9186a514e48a2a36085ac7c7a859518912b0b53e6e5beb6702000fb3deea9315d660bc5cee5d7beba5accda04467830000000000000087745abd0ea618c09588eb054d817f16e82a9c9f8158d1869f27", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x81, 0xf1, &(0x7f0000000380)=""/241, 0x40f00, 0x2, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xa, 0x8000, 0x80}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000840)=[r11, r12, r13, r14, r16, r17], &(0x7f0000000880)=[{0x5, 0x3, 0x2, 0xc}, {0x0, 0x4, 0x2, 0xb}, {0x2, 0x4, 0x6, 0xa}, {0x2, 0x2, 0xc}, {0x0, 0x5, 0x7, 0x1}, {0x1, 0x3, 0x6}, {0x4, 0x4, 0x8, 0xb}]}, 0x94) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x7, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}]}]}, 0x38}}, 0x0) 5.199196387s ago: executing program 5 (id=1710): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000440), &(0x7f00000004c0), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES16=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', r0, @sched_cls}, 0x94) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0x0, 0x0}, 0x8) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)="7102b87fd4a29eb711d3d8dd9d30a576adc9f6e273aa268bf88d9b6b401a48d9897f02e252e0882cc55d14a5949d95b3fa8e0fdefbdb9d5f2b2402455bb8ea9669c041e99a804b3a84e5be4329c6ac5ccfd26d65bf13d7dc9ce767be3e7d49acf525dca7523b6bc44d49b40ce43b8cb32004f23c12750711d0858c8d0d41dc8700148a722a3cbc6abb", 0x89}], 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f0000000540), 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) (async) sendmsg$inet(r7, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) (async) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) r11 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r11) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="23025f21342ff181be470000000c00000000030004001400019757"], 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r3, r3, 0x2f, 0x20, 0x4, @void, @void, @void, @value=r4}, 0x20) (async) r12 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x3, &(0x7f00000000c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) setsockopt(r12, 0xff, 0x7, &(0x7f0000000900)="7c73c6e9", 0x4) (async) r14 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) 4.301648346s ago: executing program 4 (id=2123): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xfffffffc}, 0x50) r2 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x1170, 0x1170, 0x1a8, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0x0, 0x0, 0x0, 0xffffff00], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20]}}, @common=@unspec=@physdev={{0x68}, {'geneve0\x00', {}, 'veth1_macvtap\x00', {}, 0x9, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x1, 0x40], 0xfffffffd, 0x0, 0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}, @IFLA_GRE_TOS={0x5, 0x9, 0xa}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_newroute={0x2c, 0x18, 0x2, 0x70bd27, 0x25dfdbfb, {0x1c, 0x94, 0x0, 0x5, 0x101, 0x3, 0xfe, 0x6, 0x400}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_OIF={0x8, 0x4, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c000) (async) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000100), 0x20000000}, 0x20) 3.487702085s ago: executing program 0 (id=2208): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095", @ANYRES32=r0, @ANYBLOB="0dfe7a71f074d7b8ef1151a69dd7359fd3f732db9c3136db2f8fb88518645dc9a2f7deff8593122229f503fcc9634a1ae26e44bfcd952e21b54903888a0be44670f2880899b5fdbda1c839f2047a805f2dea27cf29c308e18685e02abd757d8ff8482ac64ac2e549986fb9cac4fd26c2e51f4624d0b8d75c61bf959853de0215fe5eb68065c7e402422dceffb371c7fea01495a3fb193f7789c0becc8481fc1fd54dd16703a3571f487167b10ad9360d45ed5b3c39668c47ad0b913b89afa00718f93bc1cd37e6ae81962585cffdb184b394aa6e3b9ab5b45cf08c20cdff0ce0c3e3a7df7c", @ANYRESOCT=r1, @ANYBLOB="1038131bb2ce95ce1745ee447d8515fab58324"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x2}]}}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0xffff, 0x0, 0x0, 0x0]}}, {{0x19, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c}, {0x4}}, {{0x1c}, {0x4}}]}]}, 0x148}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x129, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r9 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) sendmmsg$inet6(r10, &(0x7f0000001140)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004000) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x3, 0x0, 0xfffffff8}, 0x10) 2.013950843s ago: executing program 0 (id=2210): r0 = socket(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000041b00003b0000000800430051cab2aeaf97cd0fd6abf0453e209af59e2e6fd1da52", @ANYRES32=r4, @ANYBLOB="430033008000000008021100000008021100000050505050505000000000000000000000640000000006020202020202030100040600000400000005030000002a01010004008700"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) accept4$llc(r1, 0x0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000a000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r9, &(0x7f00000005c0), &(0x7f00000001c0)=@udp6, 0x2}, 0x20) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4) sendmsg$netlink(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x3, @local}, 0x10) connect$inet(r11, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000077c2"], 0x48) r13 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r12, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r13, 0x2}, 0x20) 1.523743738s ago: executing program 0 (id=2214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) socket$inet(0x2, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x1, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x3}]}}}]}, 0x38}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r7, 0x11, 0xa, 0x0, &(0x7f0000000100)) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000380)=@generic={0x3, 0x5326, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r8, 0xa00, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4006895}, 0x20008000) socket$igmp6(0xa, 0x3, 0x2) 851.377815ms ago: executing program 3 (id=2216): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000000)=0x10000, 0x4) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001520", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) 650.644875ms ago: executing program 0 (id=2217): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r4}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x30, r7, 0x9, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x4000010, r2, 0x180000000) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) syz_emit_ethernet(0x31, &(0x7f00000094c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@llc={0x4, {@llc={0xd4, 0xe, "e1", "9e0c61f67515928cb13af659da7993c2a560faf2d1ff66fe55fea2779c063584"}}}}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x3c, 0x0, 0x1, 0x0, 0x200, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "f3556e32a2"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x3c}}, 0x0) 600.039652ms ago: executing program 3 (id=2218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x4020) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x48}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 440.533359ms ago: executing program 3 (id=2219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000005c0)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4004084) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @payload={{0xc}, @void}}]}], {0x14, 0x10}}, 0x94}}, 0x0) 333.131268ms ago: executing program 0 (id=2220): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYBLOB="adad7daa1043223169a8d5b7e2ae210b0670a6a53afd6aacc505d53bf3d3cbc9a25669a148fd643c3470232be127e31d58ce2c3d9e840f7f488f6dbde112261cb0b94224174e297968df0e9fc639ce77d0d3288f790a5d72ae61b6522c6f8d6ccda661940525dcf44ae2c5945fe9f4651ae9c97fd27c5f48350aa9ecb7d315ce30ef0a1161587ff9465c2d4b43e7c8e886bd6c7c9627408c8114fed6d7568c1bf568672b3f09d7040440d16fb1d8449b4c0a90bb8bcb24d4bb56600562da2585bbeb149648b9df6f90759a1c89c1017a831c9e86642ebb80cf6eae912f408a941460784a85e8f1e2c288ed775f02a428d486a31b20585b6d6b", @ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 176.102867ms ago: executing program 3 (id=2221): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000b80)) r1 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e20f00", 0x28, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0x1, 0x1b5a, "5d0719656701ba4d2a43d88e945401b9"}}}}}}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f00000004c0)=ANY=[@ANYRES16=r1, @ANYBLOB="5e017b"], 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x1ff, @private1, 0x7fff}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x4c) 164.310311ms ago: executing program 0 (id=2222): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100020a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000000)=0x908) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18"], 0x0}, 0x90) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r7, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x5efe) setsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f0000000000)=0x24, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r0, 0x1) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000180)=0x5773) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x8ae3, 0x0, 0x42, 0x0, 0x0, 0x0, 0xfffffffd, 0x4]}}, 0x5c) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES32=r4, @ANYRES16=r3, @ANYRESDEC=r1, @ANYRES32=r8, @ANYRESDEC], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4002080) 110.013832ms ago: executing program 3 (id=2223): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001d00000000f7ffffff000000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61103400000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d2aca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c437dc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc28206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418df19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001d00000000f7ffffff000000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r0}, 0x94) (async) 0s ago: executing program 3 (id=2224): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0xfffe, 0xf5b0, 0x8, 0x3c5, 0xa3, 0x1]}}]}]}]}, 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x44, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): [T11782] veth0_vlan: entered promiscuous mode [ 282.418107][T11782] veth1_vlan: entered promiscuous mode [ 282.632906][T11782] veth0_macvtap: entered promiscuous mode [ 282.687828][T11782] veth1_macvtap: entered promiscuous mode [ 282.730401][T12002] netlink: 'syz.5.1396': attribute type 4 has an invalid length. [ 282.848299][T11782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.917760][T11782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.952748][T11782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.973258][T11782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.983168][T12007] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1397'. [ 282.984224][T11782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.005112][T11782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.200756][T12013] C: left allmulticast mode [ 283.206350][T12013] tunl0: left allmulticast mode [ 283.211519][T12013] gre0: left allmulticast mode [ 283.217335][T12013] gretap0: left allmulticast mode [ 283.222629][T12013] erspan0: left allmulticast mode [ 283.228286][T12013] ip_vti0: left allmulticast mode [ 283.233606][T12013] ip6_vti0: left allmulticast mode [ 283.240434][T12013] sit0: left allmulticast mode [ 283.246436][T12013] ip6tnl0: left allmulticast mode [ 283.252746][T12013] ip6gre0: left allmulticast mode [ 283.258225][T12013] ip6gretap0: left allmulticast mode [ 283.263914][T12013] team0: left allmulticast mode [ 283.269225][T12013] bond0: left allmulticast mode [ 283.274629][T12013] mac80211_hwsim hwsim7 ÿ: left allmulticast mode [ 283.281425][T12013] nlmon0: left allmulticast mode [ 283.288751][T12013] caif0: left allmulticast mode [ 283.293880][T12013] batadv0: left promiscuous mode [ 283.299808][T12013] batadv0: left allmulticast mode [ 283.312759][T12013] vxcan0: left allmulticast mode [ 283.318212][T12013] vxcan1: left allmulticast mode [ 283.337055][T12013] veth0: left allmulticast mode [ 283.357294][T12013] wg0: left allmulticast mode [ 283.404701][T12013] wg1: left allmulticast mode [ 283.409631][T12013] wg2: left allmulticast mode [ 283.424423][T12013] veth0_to_bridge: left allmulticast mode [ 283.430790][T12013] bridge_slave_0: left allmulticast mode [ 283.437057][T12013] veth0_to_bond: left allmulticast mode [ 283.443486][T12013] bond_slave_0: left allmulticast mode [ 283.452120][T12013] veth1_to_bond: left allmulticast mode [ 283.466081][T12013] bond_slave_1: left allmulticast mode [ 283.472001][T12013] team_slave_0: left allmulticast mode [ 283.509725][T12013] veth1_to_team: left allmulticast mode [ 283.526987][T12013] team_slave_1: left allmulticast mode [ 283.532710][T12013] veth0_to_batadv: left allmulticast mode [ 283.597868][T12013] batadv_slave_0: left allmulticast mode [ 283.605178][T12013] veth1_to_batadv: left allmulticast mode [ 283.625186][T12013] batadv_slave_1: left allmulticast mode [ 283.631480][T12013] xfrm0: left allmulticast mode [ 283.639895][T12013] veth0_to_hsr: left allmulticast mode [ 283.648332][T12013] veth1_to_hsr: left allmulticast mode [ 283.666175][T12013] hsr0: left allmulticast mode [ 283.671697][T12013] hsr_slave_0: left allmulticast mode [ 283.682963][T12013] hsr_slave_1: left allmulticast mode [ 283.691811][T12013] veth1_virt_wifi: left allmulticast mode [ 283.707583][T12013] veth0_virt_wifi: left allmulticast mode [ 283.738099][T12013] net veth1_virt_wifi .: left allmulticast mode [ 283.748707][T12013] veth1_vlan: left allmulticast mode [ 283.759260][T12013] vlan0: left allmulticast mode [ 283.773049][T12013] vlan1: left allmulticast mode [ 283.780223][T12013] macvlan1: left allmulticast mode [ 283.790747][T12013] ipvlan0: left allmulticast mode [ 283.798106][T12013] ipvlan1: left allmulticast mode [ 283.803318][T12013] veth0_vlan: left allmulticast mode [ 283.813467][T12013] geneve0: left allmulticast mode [ 283.821185][T12013] geneve1: left allmulticast mode [ 283.830694][T12013] netdevsim netdevsim0 ªªªªª»: left allmulticast mode [ 283.839814][T12013] netdevsim netdevsim0 netdevsim1: left allmulticast mode [ 283.852222][T12013] netdevsim netdevsim0 netdevsim2: left allmulticast mode [ 283.855250][ T5835] Bluetooth: hci4: command tx timeout [ 283.862788][T12013] netdevsim netdevsim0 netdevsim3: left allmulticast mode [ 283.918029][T12013] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 283.929795][T12013] vxlan0: left allmulticast mode [ 283.935106][T12013] sit1: left allmulticast mode [ 283.940229][T12013] vxlan1: left allmulticast mode [ 283.946138][T12013] geneve2: left allmulticast mode [ 283.951637][T12013] syzkaller0: left allmulticast mode [ 283.958273][T12013] bridge1: left allmulticast mode [ 283.964758][T12013] syztnl0: left allmulticast mode [ 283.970054][T12013] ip6gretap1: left allmulticast mode [ 283.976021][T12013] bond1: left allmulticast mode [ 283.981146][T12013] veth2: left allmulticast mode [ 283.993880][T12013] veth3: left allmulticast mode [ 283.999197][T12013] vlan2: left allmulticast mode [ 284.005010][T12013] veth1: left allmulticast mode [ 284.010233][T12013] ip6tnl1: left allmulticast mode [ 284.024850][T12013] vlan3: left promiscuous mode [ 284.029694][T12013] bridge0: left promiscuous mode [ 284.038131][T12013] veth5: left promiscuous mode [ 284.047338][T12013] veth7: left promiscuous mode [ 284.073477][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.084520][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.085733][T12015] syzkaller1: entered promiscuous mode [ 284.106617][T12015] syzkaller1: entered allmulticast mode [ 284.273174][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.291698][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.150142][T12090] netlink: 'syz.0.1421': attribute type 10 has an invalid length. [ 285.163298][ T2975] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.214495][T12090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.227372][T12090] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 285.335262][ T2975] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.422726][ T2975] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.627394][ T2975] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.779915][ T2975] bridge_slave_1: left allmulticast mode [ 285.791238][ T2975] bridge_slave_1: left promiscuous mode [ 285.797906][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.812553][ T2975] bridge_slave_0: left allmulticast mode [ 285.818703][ T2975] bridge_slave_0: left promiscuous mode [ 285.824817][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.162895][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.179859][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.190347][ T2975] bond0 (unregistering): Released all slaves [ 286.719435][T12097] sctp: [Deprecated]: syz.3.1425 (pid 12097) Use of int in max_burst socket option deprecated. [ 286.719435][T12097] Use struct sctp_assoc_value instead [ 286.755515][T12102] netlink: 'syz.4.1426': attribute type 1 has an invalid length. [ 286.838231][T12106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.048179][T12102] 8021q: adding VLAN 0 to HW filter on device bond3 [ 287.079219][T12108] 8021q: VLANs not supported on sit0 [ 287.135627][T12118] syzkaller1: entered promiscuous mode [ 287.152790][T12118] syzkaller1: entered allmulticast mode [ 287.252214][T12102] bond3: (slave gretap1): making interface the new active one [ 287.261314][T12102] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 287.313554][T12123] netlink: 'syz.0.1432': attribute type 1 has an invalid length. [ 287.346064][T12121] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.375970][T12123] netlink: 'syz.0.1432': attribute type 2 has an invalid length. [ 287.383853][T12123] __nla_validate_parse: 6 callbacks suppressed [ 287.383869][T12123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1432'. [ 287.503056][ T2975] hsr_slave_0: left promiscuous mode [ 287.538603][ T2975] hsr_slave_1: left promiscuous mode [ 287.555512][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.579082][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.615633][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.630051][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.663227][T12137] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1434'. [ 287.675383][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.684554][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.691826][T12143] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1434'. [ 287.707693][ T2975] veth1_macvtap: left promiscuous mode [ 287.711792][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.713356][ T2975] veth0_macvtap: left promiscuous mode [ 287.731775][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.739923][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 287.743717][ T2975] veth1_vlan: left promiscuous mode [ 287.760346][ T2975] veth0_vlan: left promiscuous mode [ 288.282046][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 288.325019][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 289.102248][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1439'. [ 289.359959][T12166] netlink: 'syz.3.1444': attribute type 12 has an invalid length. [ 289.370231][T12162] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1443'. [ 289.391254][T12164] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1443'. [ 289.584820][T12172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.774939][ T51] Bluetooth: hci4: command tx timeout [ 289.812510][T12180] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 289.862577][T12183] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_0, syncid = 2, id = 0 [ 289.874536][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1449'. [ 290.088334][T12188] openvswitch: netlink: Missing key (keys=40, expected=100) [ 290.502783][T12205] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 291.248099][T12140] chnl_net:caif_netlink_parms(): no params data found [ 291.471189][T12140] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.479047][T12140] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.487041][T12140] bridge_slave_0: entered allmulticast mode [ 291.515857][T12140] bridge_slave_0: entered promiscuous mode [ 291.537699][T12140] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.546037][T12140] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.561828][T12140] bridge_slave_1: entered allmulticast mode [ 291.585274][T12140] bridge_slave_1: entered promiscuous mode [ 291.705568][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1465'. [ 291.778390][T12245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1465'. [ 291.855188][ T51] Bluetooth: hci4: command tx timeout [ 291.924652][T12249] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x3 [ 291.970591][T12249] netlink: 'syz.5.1467': attribute type 1 has an invalid length. [ 291.981956][T12140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.992396][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1467'. [ 292.046945][T12140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.303050][T12140] team0: Port device team_slave_0 added [ 292.355144][T12140] team0: Port device team_slave_1 added [ 292.464761][ T5200] udevd[5200]: worker [8671] /devices/virtual/block/nbd3 is taking a long time [ 292.484434][ T5200] udevd[5200]: worker [5831] /devices/virtual/block/nbd0 is taking a long time [ 292.591296][T12140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.611850][T12140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.647373][T12140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.669212][T12273] netlink: 'syz.5.1476': attribute type 1 has an invalid length. [ 292.676280][T12271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1475'. [ 292.682304][T12273] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1476'. [ 292.712450][T12275] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1476'. [ 292.726281][T12275] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1476'. [ 292.842379][T12140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.850305][T12140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.879115][T12140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.061568][T12140] hsr_slave_0: entered promiscuous mode [ 293.075269][T12140] hsr_slave_1: entered promiscuous mode [ 293.086829][T12140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.098623][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1479'. [ 293.107767][T12140] Cannot create hsr debugfs directory [ 293.277570][T12293] IPVS: persistence engine module ip_vs_pe_À not found [ 293.501042][T12304] sctp: [Deprecated]: syz.5.1484 (pid 12304) Use of int in maxseg socket option. [ 293.501042][T12304] Use struct sctp_assoc_value instead [ 293.512787][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 293.717344][T12313] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 293.830004][T12325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1490'. [ 293.924517][ T51] Bluetooth: hci4: command tx timeout [ 294.000575][T12323] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1490'. [ 294.010174][T12323] openvswitch: netlink: Actions may not be safe on all matching packets [ 294.106045][T12337] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 294.178394][T12140] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 294.223120][T12140] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 294.261374][T12140] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 294.274638][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 294.333920][T12140] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 294.380080][T12356] netlink: 212388 bytes leftover after parsing attributes in process `syz.0.1498'. [ 294.681370][T12372] pim6reg527: entered allmulticast mode [ 294.746588][T12140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.873791][T12140] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.932148][ T8339] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.939428][ T8339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.959093][ T8339] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.966347][ T8339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.583701][T12140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.635825][T12422] netlink: 'syz.3.1518': attribute type 1 has an invalid length. [ 295.691990][T12422] netlink: 'syz.3.1518': attribute type 3 has an invalid length. [ 295.708133][T12422] netlink: 'syz.3.1518': attribute type 235 has an invalid length. [ 295.760911][T12140] veth0_vlan: entered promiscuous mode [ 295.807819][T12140] veth1_vlan: entered promiscuous mode [ 295.911065][T12140] veth0_macvtap: entered promiscuous mode [ 295.931767][T12431] netlink: 'syz.3.1522': attribute type 1 has an invalid length. [ 296.004535][ T51] Bluetooth: hci4: command tx timeout [ 296.038766][T12140] veth1_macvtap: entered promiscuous mode [ 296.084969][ T55] block nbd0: Possible stuck request ffff88802517e000: control (read@0,1024B). Runtime 150 seconds [ 296.097120][ T55] block nbd0: Possible stuck request ffff88802517e1c0: control (read@1024,1024B). Runtime 150 seconds [ 296.108297][ T55] block nbd0: Possible stuck request ffff88802517e380: control (read@2048,1024B). Runtime 150 seconds [ 296.121277][ T55] block nbd0: Possible stuck request ffff88802517e540: control (read@3072,1024B). Runtime 150 seconds [ 296.218468][T12140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.291480][T12140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.341408][T12140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.373854][T12140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.396838][T12140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.418101][T12140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.796026][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.803924][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.940121][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.958999][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.989729][T12476] syz_tun: entered promiscuous mode [ 297.003258][T12476] macvtap1: entered promiscuous mode [ 297.010303][T12476] macvtap1: entered allmulticast mode [ 297.020809][T12476] syz_tun: entered allmulticast mode [ 297.061682][T12479] vlan4: entered allmulticast mode [ 297.068095][T12479] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 297.082944][T12481] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 297.132724][T12475] netlink: 'syz.0.1537': attribute type 3 has an invalid length. [ 297.536203][T12501] openvswitch: netlink: Duplicate or invalid key (type 0). [ 297.543545][T12501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.820329][ T8343] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.053947][ T8343] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.283958][ T8343] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.393649][ T8343] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.582011][ T8343] bridge_slave_1: left allmulticast mode [ 298.589108][ T8343] bridge_slave_1: left promiscuous mode [ 298.595342][ T8343] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.609956][ T8343] bridge_slave_0: left allmulticast mode [ 298.615900][ T8343] bridge_slave_0: left promiscuous mode [ 298.621707][ T8343] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.939868][ T8343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.952525][ T8343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.964051][ T8343] bond0 (unregistering): Released all slaves [ 299.583891][T12525] __nla_validate_parse: 20 callbacks suppressed [ 299.583914][T12525] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1551'. [ 299.812247][T12534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.844713][T12538] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.857456][T12536] xt_hashlimit: invalid rate [ 300.056249][ T8343] hsr_slave_0: left promiscuous mode [ 300.104512][ T8343] hsr_slave_1: left promiscuous mode [ 300.110721][ T8343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.156595][ T8343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.206334][ T8343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.213835][ T8343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.363032][ T8343] veth1_macvtap: left promiscuous mode [ 300.394636][ T8343] veth0_macvtap: left promiscuous mode [ 300.400944][ T8343] veth1_vlan: left promiscuous mode [ 300.433741][ T8343] veth0_vlan: left promiscuous mode [ 300.457464][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.466647][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.475815][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.485470][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.497444][T12567] netlink: 'syz.5.1562': attribute type 21 has an invalid length. [ 300.507283][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.137910][ T8343] team0 (unregistering): Port device team_slave_1 removed [ 301.179906][ T8343] team0 (unregistering): Port device team_slave_0 removed [ 301.216111][ T55] block nbd3: Possible stuck request ffff888025277000: control (read@0,1024B). Runtime 120 seconds [ 301.227166][ T55] block nbd3: Possible stuck request ffff8880252771c0: control (read@1024,1024B). Runtime 120 seconds [ 301.238771][ T55] block nbd3: Possible stuck request ffff888025277380: control (read@2048,1024B). Runtime 120 seconds [ 301.250024][ T55] block nbd3: Possible stuck request ffff888025277540: control (read@3072,1024B). Runtime 120 seconds [ 301.642832][T12567] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1562'. [ 301.889078][T12591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1567'. [ 302.019857][T12591] netlink: 'syz.4.1567': attribute type 1 has an invalid length. [ 302.038667][T12591] netlink: 'syz.4.1567': attribute type 1 has an invalid length. [ 302.212963][T12608] IPVS: set_ctl: invalid protocol: 137 172.20.20.20:20000 [ 302.288993][T12608] IPVS: set_ctl: invalid protocol: 137 172.20.20.20:20000 [ 302.311878][T12608] IPVS: set_ctl: invalid protocol: 137 172.20.20.20:20000 [ 302.564845][ T5835] Bluetooth: hci4: command tx timeout [ 302.928775][T12635] ieee802154 phy0 wpan0: encryption failed: -22 [ 302.960334][T12641] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 303.013192][T12641] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 303.656582][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1587'. [ 303.672277][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1589'. [ 303.703220][T12667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1589'. [ 303.775554][T12665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1589'. [ 303.829096][T12667] xfrm1: entered promiscuous mode [ 303.845992][T12667] xfrm1: entered allmulticast mode [ 303.892267][T12676] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.950732][T12671] veth7: entered promiscuous mode [ 303.955934][T12671] veth7: entered allmulticast mode [ 304.194569][T12685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1593'. [ 304.224987][T12685] x_tables: unsorted underflow at hook 4 [ 304.390975][T12699] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 304.555804][T12565] chnl_net:caif_netlink_parms(): no params data found [ 304.644538][ T5835] Bluetooth: hci4: command tx timeout [ 304.716596][T12712] netlink: 'syz.5.1601': attribute type 1 has an invalid length. [ 304.841181][T12715] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 304.863221][T12719] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1605'. [ 304.892972][T12719] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1605'. [ 304.967051][T12565] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.974809][T12565] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.982134][T12565] bridge_slave_0: entered allmulticast mode [ 304.990898][T12565] bridge_slave_0: entered promiscuous mode [ 305.021819][T12719] gretap1: entered promiscuous mode [ 305.028696][T12719] gretap1: entered allmulticast mode [ 305.036657][T12565] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.045663][T12565] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.067611][T12565] bridge_slave_1: entered allmulticast mode [ 305.078840][T12565] bridge_slave_1: entered promiscuous mode [ 305.248516][T12565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.283150][T12733] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1609'. [ 305.330883][T12738] netlink: 'syz.0.1610': attribute type 1 has an invalid length. [ 305.386283][T12565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.465050][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 305.513737][T12565] team0: Port device team_slave_0 added [ 305.537566][T12565] team0: Port device team_slave_1 added [ 305.598157][T12747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1614'. [ 305.648701][T12565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.664659][T12565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.693793][T12565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.753365][T12565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.797005][T12565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.882320][T12762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1618'. [ 305.901978][T12565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.026648][T12762] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1618'. [ 306.101542][T12565] hsr_slave_0: entered promiscuous mode [ 306.124285][T12565] hsr_slave_1: entered promiscuous mode [ 306.139734][T12565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.166012][T12565] Cannot create hsr debugfs directory [ 306.248334][T12779] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1622'. [ 306.259108][T12779] netlink: 'syz.3.1622': attribute type 9 has an invalid length. [ 306.267188][T12779] netlink: 'syz.3.1622': attribute type 9 has an invalid length. [ 306.724346][ T5835] Bluetooth: hci4: command tx timeout [ 306.861407][T12803] xt_hashlimit: max too large, truncated to 1048576 [ 307.417992][T12817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.425386][T12820] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 307.597703][T12565] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 307.639402][T12565] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 307.699078][T12565] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 307.721964][T12828] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1636'. [ 307.757097][T12565] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 308.010594][T12842] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1638'. [ 308.140297][T12565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.229912][T12565] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.269864][ T8343] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.277115][ T8343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.339930][ T8343] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.347199][ T8343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.592947][T12873] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 308.636514][T12873] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 308.808351][ T5835] Bluetooth: hci4: command tx timeout [ 309.033968][ T5896] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x5 [ 309.062569][ T5896] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x2 [ 309.072697][ T5896] hid-generic 0005:16BF:5505.0001: item fetching failed at offset 2/4 [ 309.093679][ T5896] hid-generic 0005:16BF:5505.0001: probe with driver hid-generic failed with error -22 [ 309.312082][T12565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.401247][T12912] netlink: 'syz.5.1658': attribute type 32 has an invalid length. [ 309.432104][T12912] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 309.788544][T12565] veth0_vlan: entered promiscuous mode [ 309.818623][T12565] veth1_vlan: entered promiscuous mode [ 309.857530][T12928] netlink: 'syz.4.1662': attribute type 14 has an invalid length. [ 309.971555][T12565] veth0_macvtap: entered promiscuous mode [ 310.001944][T12565] veth1_macvtap: entered promiscuous mode [ 310.069376][T12565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.150773][T12565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.197234][T12565] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.201547][T12946] __nla_validate_parse: 4 callbacks suppressed [ 310.201568][T12946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1667'. [ 310.217388][T12565] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.232280][T12565] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.245366][T12565] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.319972][T12949] netlink: 'syz.4.1668': attribute type 10 has an invalid length. [ 310.374038][T12949] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 310.452371][T12950] pimreg: entered allmulticast mode [ 310.546646][ T8339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.574462][ T8339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.650132][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.672758][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.910231][T12969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1676'. [ 310.982326][T12973] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1677'. [ 311.252261][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1679'. [ 311.302530][T12986] xt_hashlimit: size too large, truncated to 1048576 [ 311.361890][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1682'. [ 311.870780][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.974920][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.409759][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.562372][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.691965][ T59] bridge_slave_1: left allmulticast mode [ 312.698133][ T59] bridge_slave_1: left promiscuous mode [ 312.703846][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.718246][ T59] bridge_slave_0: left allmulticast mode [ 312.724000][ T59] bridge_slave_0: left promiscuous mode [ 312.730818][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.043820][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.055838][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.067764][ T59] bond0 (unregistering): Released all slaves [ 313.260796][T13002] netlink: 'syz.4.1686': attribute type 10 has an invalid length. [ 313.281766][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1684'. [ 313.298388][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1684'. [ 313.365409][T13002] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 313.402338][T13000] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.550158][T13000] bridge_slave_1 (unregistering): left allmulticast mode [ 313.567709][T13000] bridge_slave_1 (unregistering): left promiscuous mode [ 313.585181][T13000] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.746104][T13022] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1689'. [ 313.807826][T13025] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1689'. [ 313.815073][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.836447][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 313.854371][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 313.866711][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.877002][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.013917][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1694'. [ 314.352637][T13043] netlink: 'syz.4.1698': attribute type 10 has an invalid length. [ 314.740710][T13060] netlink: 'syz.0.1702': attribute type 29 has an invalid length. [ 314.927244][T13064] netlink: 'syz.4.1703': attribute type 4 has an invalid length. [ 315.232724][ T9577] syz_tun (unregistering): left allmulticast mode [ 315.838065][ T59] hsr_slave_0: left promiscuous mode [ 315.859082][ T59] hsr_slave_1: left promiscuous mode [ 315.885491][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.894997][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.932227][ T51] Bluetooth: hci4: command tx timeout [ 315.939105][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.964745][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.031373][ T59] veth1_macvtap: left promiscuous mode [ 316.060795][ T59] veth0_macvtap: left promiscuous mode [ 316.080567][ T59] veth1_vlan: left promiscuous mode [ 316.087822][ T59] veth0_vlan: left promiscuous mode [ 316.212032][T13102] __nla_validate_parse: 2 callbacks suppressed [ 316.212051][T13102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1716'. [ 316.351642][T13107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1716'. [ 316.665649][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.675369][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.684459][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.693399][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.706161][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.960570][ T59] team0 (unregistering): Port device team_slave_1 removed [ 317.007973][ T59] team0 (unregistering): Port device team_slave_0 removed [ 317.210652][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.633356][T13117] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1719'. [ 317.681149][T13117] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1719'. [ 318.022422][ T51] Bluetooth: hci4: command tx timeout [ 318.143609][T13138] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.248643][T13143] netlink: 'syz.0.1725': attribute type 1 has an invalid length. [ 318.367485][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.388096][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 318.639144][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.709368][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 318.804570][ T51] Bluetooth: hci2: command tx timeout [ 318.969813][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.980791][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 319.156171][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.176325][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 319.220826][T13177] netlink: 'syz.3.1733': attribute type 29 has an invalid length. [ 319.288034][T13023] chnl_net:caif_netlink_parms(): no params data found [ 319.308078][T13177] netlink: 'syz.3.1733': attribute type 29 has an invalid length. [ 319.359608][T13180] syzkaller1: entered promiscuous mode [ 319.381118][T13180] syzkaller1: entered allmulticast mode [ 319.590919][ T5903] hid-generic 0005:15C2:000B.0002: item fetching failed at offset 0/1 [ 319.602827][ T5903] hid-generic 0005:15C2:000B.0002: probe with driver hid-generic failed with error -22 [ 319.897292][T13023] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.905025][T13023] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.912646][T13023] bridge_slave_0: entered allmulticast mode [ 319.923583][T13023] bridge_slave_0: entered promiscuous mode [ 319.932536][ T59] bridge_slave_0: left allmulticast mode [ 319.949688][ T59] bridge_slave_0: left promiscuous mode [ 319.973428][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.085172][ T51] Bluetooth: hci4: command tx timeout [ 320.703263][T13225] netlink: 'syz.0.1745': attribute type 10 has an invalid length. [ 320.896719][ T51] Bluetooth: hci2: command tx timeout [ 320.960202][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.972845][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.983971][ T59] bond0 (unregistering): Released all slaves [ 321.099199][ T59] bond1 (unregistering): (slave veth5): Releasing active interface [ 321.107403][ T59] vlan2: entered promiscuous mode [ 321.117697][ T59] bond1 (unregistering): (slave vlan2): Releasing active interface [ 321.128015][ T59] bond1 (unregistering): Released all slaves [ 321.145180][ T59] bond2 (unregistering): Released all slaves [ 321.161310][ T59] bond3 (unregistering): Released all slaves [ 321.176771][ T59] bond4 (unregistering): Released all slaves [ 321.217451][T13023] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.224978][T13023] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.232859][T13023] bridge_slave_1: entered allmulticast mode [ 321.243576][T13023] bridge_slave_1: entered promiscuous mode [ 321.368399][ T59] : left promiscuous mode [ 321.418499][T13023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.431667][T13023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.445566][T13230] !: renamed from dummy0 (while UP) [ 321.682288][T13023] team0: Port device team_slave_0 added [ 321.693020][T13023] team0: Port device team_slave_1 added [ 321.855614][T13244] netlink: 'syz.4.1750': attribute type 1 has an invalid length. [ 321.984045][T13248] netlink: 'syz.0.1752': attribute type 29 has an invalid length. [ 322.072742][T13023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.093619][T13023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.163337][T13023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.181239][ T51] Bluetooth: hci4: command tx timeout [ 322.213384][T13246] bond4: (slave gretap2): making interface the new active one [ 322.227831][T13246] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 322.259925][T13242] pim6reg: entered allmulticast mode [ 322.288436][T13256] tipc: New replicast peer: 255.255.255.255 [ 322.328459][T13256] tipc: Enabled bearer , priority 10 [ 322.361611][T13023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.373274][T13023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.400907][T13023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.484053][T13258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1754'. [ 322.506270][T13258] tipc: Disabling bearer [ 322.572544][T13112] chnl_net:caif_netlink_parms(): no params data found [ 322.964931][ T51] Bluetooth: hci2: command tx timeout [ 322.990570][T13023] hsr_slave_0: entered promiscuous mode [ 323.045209][T13023] hsr_slave_1: entered promiscuous mode [ 323.051625][T13023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.078981][T13023] Cannot create hsr debugfs directory [ 323.409634][T13291] netlink: 'syz.3.1760': attribute type 4 has an invalid length. [ 323.711136][T13112] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.726085][T13112] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.733465][T13112] bridge_slave_0: entered allmulticast mode [ 323.749323][T13112] bridge_slave_0: entered promiscuous mode [ 323.778113][ T59] hsr_slave_0: left promiscuous mode [ 323.790785][ T59] hsr_slave_1: left promiscuous mode [ 323.797571][ T59] batman_adv: batadv0: Interface deactivated: dummy0 [ 323.804932][ T59] batman_adv: batadv0: Removing interface: dummy0 [ 323.812467][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.821001][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.829456][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.857525][ T59] veth1_macvtap: left promiscuous mode [ 323.864379][ T59] veth0_macvtap: left promiscuous mode [ 323.870179][ T59] veth1_vlan: left promiscuous mode [ 323.877617][ T59] veth0_vlan: left promiscuous mode [ 324.179003][ T2975] smc: removing ib device syz2 [ 324.384000][ T59] team0 (unregistering): Port device team_slave_1 removed [ 324.430422][ T59] team0 (unregistering): Port device team_slave_0 removed [ 324.845558][T13112] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.852758][T13112] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.870118][T13112] bridge_slave_1: entered allmulticast mode [ 324.878822][T13112] bridge_slave_1: entered promiscuous mode [ 324.886368][ T6024] syz2: Port: 1 Link DOWN [ 325.044238][ T51] Bluetooth: hci2: command tx timeout [ 325.231635][T13112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.328507][T13112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.846849][T13112] team0: Port device team_slave_0 added [ 325.973506][T13112] team0: Port device team_slave_1 added [ 326.167672][ T55] block nbd0: Possible stuck request ffff88802517e000: control (read@0,1024B). Runtime 180 seconds [ 326.178679][ T55] block nbd0: Possible stuck request ffff88802517e1c0: control (read@1024,1024B). Runtime 180 seconds [ 326.190242][ T55] block nbd0: Possible stuck request ffff88802517e380: control (read@2048,1024B). Runtime 180 seconds [ 326.201767][ T55] block nbd0: Possible stuck request ffff88802517e540: control (read@3072,1024B). Runtime 180 seconds [ 326.503600][T13112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.546369][T13112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.614333][T13112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.682239][T13112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.694026][T13112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.741445][T13112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.848687][T13374] pim6reg: left allmulticast mode [ 326.986585][T13378] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1781'. [ 327.324007][T13112] hsr_slave_0: entered promiscuous mode [ 327.382725][T13112] hsr_slave_1: entered promiscuous mode [ 327.404028][T13112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.422236][T13112] Cannot create hsr debugfs directory [ 327.647593][T13386] syzkaller0: entered promiscuous mode [ 327.653424][T13386] syzkaller0: entered allmulticast mode [ 327.969700][T13413] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1786'. [ 329.277471][ T59] IPVS: stop unused estimator thread 0... [ 329.589411][T13425] netlink: 'syz.0.1791': attribute type 10 has an invalid length. [ 329.625677][T13425] netlink: 'syz.0.1791': attribute type 10 has an invalid length. [ 329.633698][T13425] netlink: 'syz.0.1791': attribute type 10 has an invalid length. [ 329.668208][T13425] netlink: 'syz.0.1791': attribute type 10 has an invalid length. [ 329.680327][T13417] syzkaller0: entered allmulticast mode [ 329.710938][T13428] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1792'. [ 329.720332][T13428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1792'. [ 329.732096][T13425] netlink: 'syz.0.1791': attribute type 10 has an invalid length. [ 329.736699][T13416] syzkaller0: left allmulticast mode [ 329.756769][T13425] netlink: 'syz.0.1791': attribute type 10 has an invalid length. [ 329.850197][ T30] audit: type=1800 audit(1751208873.378:8): pid=13430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1793" name="memory.events" dev="tmpfs" ino=2326 res=0 errno=0 [ 329.884207][ T30] audit: type=1804 audit(1751208873.378:9): pid=13430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1793" name="/newroot/454/memory.events" dev="tmpfs" ino=2326 res=1 errno=0 [ 329.967465][T13434] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 330.097514][T13438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1793'. [ 330.110489][T13438] openvswitch: netlink: Flow key attr not present in new flow. [ 331.287999][ T55] block nbd3: Possible stuck request ffff888025277000: control (read@0,1024B). Runtime 150 seconds [ 331.299013][ T55] block nbd3: Possible stuck request ffff8880252771c0: control (read@1024,1024B). Runtime 150 seconds [ 331.310300][ T55] block nbd3: Possible stuck request ffff888025277380: control (read@2048,1024B). Runtime 150 seconds [ 331.321437][ T55] block nbd3: Possible stuck request ffff888025277540: control (read@3072,1024B). Runtime 150 seconds [ 331.558887][T13440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'. [ 331.723077][T13453] netlink: 'syz.4.1798': attribute type 29 has an invalid length. [ 331.922664][T13465] tipc: Enabled bearer , priority 10 [ 331.935786][T13023] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 331.963620][T13023] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 332.050677][T13023] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 332.097701][T13023] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 332.263680][T13112] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 332.302126][T13112] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 332.339027][T13112] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 332.372039][T13112] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 332.381022][T13490] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1807'. [ 332.389482][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1806'. [ 332.399028][T13490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1807'. [ 332.639864][T13499] netlink: 'syz.3.1808': attribute type 19 has an invalid length. [ 332.680403][T13112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.694971][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1808'. [ 332.729717][T13023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.816668][T13112] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.850069][T13023] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.918329][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.925615][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.946551][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.953751][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.973107][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.980360][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.999762][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.006982][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.152686][T13515] tipc: Enabling of bearer rejected, already enabled [ 333.760277][T13539] vlan1: entered promiscuous mode [ 333.783361][T13539] bridge0: entered promiscuous mode [ 333.940993][T13112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.051266][T13553] netlink: 'syz.3.1824': attribute type 10 has an invalid length. [ 334.061627][T13555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1823'. [ 334.112003][T13553] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.131284][T13553] bridge_slave_1: left allmulticast mode [ 334.138183][T13553] bridge_slave_1: left promiscuous mode [ 334.152825][T13553] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.206495][T13023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.372938][T13023] veth0_vlan: entered promiscuous mode [ 334.461861][T13023] veth1_vlan: entered promiscuous mode [ 334.475606][T13566] netlink: 'syz.3.1826': attribute type 21 has an invalid length. [ 334.542256][T13023] veth0_macvtap: entered promiscuous mode [ 334.585367][T13023] veth1_macvtap: entered promiscuous mode [ 334.658640][T13023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.696115][T13023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.747510][T13023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.775427][T13023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.796565][T13023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.816798][T13023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.845605][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1829'. [ 335.133609][ T8343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.144801][ T8343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.164298][T13112] veth0_vlan: entered promiscuous mode [ 335.177059][T13586] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1831'. [ 335.288469][T13112] veth1_vlan: entered promiscuous mode [ 335.378134][T13593] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 335.406621][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.424343][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.438369][T13591] delete_channel: no stack [ 335.479598][T13112] veth0_macvtap: entered promiscuous mode [ 335.537913][T13112] veth1_macvtap: entered promiscuous mode [ 335.622318][T13112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.657008][T13600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 335.724976][T13112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.742054][T13112] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.751215][T13112] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.762274][T13112] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.779539][T13112] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.976590][T13608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1839'. [ 336.067851][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.146719][T13608] netlink: 'syz.3.1839': attribute type 1 has an invalid length. [ 336.164642][T13608] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1839'. [ 336.237813][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.288702][T13613] netlink: 'syz.4.1838': attribute type 21 has an invalid length. [ 336.314740][T13615] netlink: 'syz.4.1838': attribute type 21 has an invalid length. [ 336.322645][T13615] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1838'. [ 336.354279][T13613] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1838'. [ 336.391037][ T8343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.400546][ T8343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.423233][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.454916][T13613] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1838'. [ 336.466044][T13615] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1838'. [ 336.553647][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.589592][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.598607][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.014419][ T59] bridge_slave_1: left allmulticast mode [ 337.020309][ T59] bridge_slave_1: left promiscuous mode [ 337.037045][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.072514][ T59] bridge_slave_0: left allmulticast mode [ 337.082403][ T59] bridge_slave_0: left promiscuous mode [ 337.094469][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.556471][T13633] IPv6: NLM_F_CREATE should be specified when creating new route [ 337.703935][T13639] netlink: 'syz.3.1846': attribute type 11 has an invalid length. [ 337.757509][T13640] netlink: 'syz.3.1846': attribute type 1 has an invalid length. [ 337.859579][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.875561][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.884443][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.911280][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.915957][T13644] netlink: 'syz.3.1846': attribute type 10 has an invalid length. [ 337.929780][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.938081][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.951062][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.962455][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.979060][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.990488][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.013263][T13647] netlink: 'syz.3.1846': attribute type 14 has an invalid length. [ 338.024268][T13647] netlink: 'syz.3.1846': attribute type 13 has an invalid length. [ 338.167575][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.180482][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.191123][ T59] bond0 (unregistering): Released all slaves [ 338.416687][T13651] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 338.451782][T13651] xt_hashlimit: overflow, rate too high: 0 [ 338.823461][T13671] syzkaller0: entered allmulticast mode [ 339.303829][T13691] __nla_validate_parse: 10 callbacks suppressed [ 339.303852][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1858'. [ 339.485185][T13701] xt_bpf: check failed: parse error [ 339.511304][T13703] xt_bpf: check failed: parse error [ 339.675874][T13714] bridge0: entered allmulticast mode [ 339.812398][T13719] netlink: 'syz.4.1865': attribute type 8 has an invalid length. [ 339.864058][T13719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1865'. [ 339.892446][T13719] bridge0: entered allmulticast mode [ 339.943488][T13722] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 340.008034][T13722] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1866'. [ 340.010023][ T5835] Bluetooth: hci4: command tx timeout [ 340.017675][ T51] Bluetooth: hci2: command tx timeout [ 340.298427][T13733] netlink: 'syz.4.1870': attribute type 1 has an invalid length. [ 340.536268][T13741] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.1872'. [ 340.870394][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1873'. [ 340.895478][T13753] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1876'. [ 340.908011][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1873'. [ 340.934804][T13753] gretap0: entered promiscuous mode [ 340.940217][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1873'. [ 340.976008][T13750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1873'. [ 340.987447][T13753] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1876'. [ 341.072266][T13753] 0ªX¹¦D: renamed from gretap0 [ 341.092261][T13753] 0ªX¹¦D: left promiscuous mode [ 341.110620][T13753] 0ªX¹¦D: entered allmulticast mode [ 341.138680][T13753] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 341.255704][T13642] chnl_net:caif_netlink_parms(): no params data found [ 341.280602][ T59] hsr_slave_0: left promiscuous mode [ 341.293776][ T59] hsr_slave_1: left promiscuous mode [ 341.300221][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.310213][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.319369][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.327237][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.351399][ T59] veth1_macvtap: left promiscuous mode [ 341.357171][ T59] veth0_macvtap: left promiscuous mode [ 341.362835][ T59] veth1_vlan: left promiscuous mode [ 341.369889][ T59] veth0_vlan: left promiscuous mode [ 341.718414][ T5200] udevd[5200]: worker [5831] /devices/virtual/block/nbd0 timeout; kill it [ 341.732698][ T5200] udevd[5200]: seq 12711 '/devices/virtual/block/nbd0' killed [ 341.909901][ T59] team0 (unregistering): Port device team_slave_1 removed [ 341.950665][ T59] team0 (unregistering): Port device team_slave_0 removed [ 342.085773][ T5835] Bluetooth: hci4: command tx timeout [ 342.090899][ T51] Bluetooth: hci2: command tx timeout [ 342.850430][T13642] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.853718][T13788] xt_CONNSECMARK: invalid mode: 0 [ 342.861893][T13642] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.904706][T13642] bridge_slave_0: entered allmulticast mode [ 342.912558][T13642] bridge_slave_0: entered promiscuous mode [ 342.930378][T13642] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.940780][T13642] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.960833][T13642] bridge_slave_1: entered allmulticast mode [ 342.973826][T13642] bridge_slave_1: entered promiscuous mode [ 343.100195][T13642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.137624][T13803] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 343.148976][T13642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.212987][T13642] team0: Port device team_slave_0 added [ 343.245419][T13642] team0: Port device team_slave_1 added [ 343.320419][T13642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.344769][T13642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.387263][T13642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.466899][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.532814][T13642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.551843][T13642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.606264][T13642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.629573][T13645] chnl_net:caif_netlink_parms(): no params data found [ 343.663786][T13809] : renamed from veth0_vlan [ 343.773704][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.992141][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.164842][ T51] Bluetooth: hci2: command tx timeout [ 344.170650][ T51] Bluetooth: hci4: command tx timeout [ 344.247451][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.400113][T13642] hsr_slave_0: entered promiscuous mode [ 344.428338][T13642] hsr_slave_1: entered promiscuous mode [ 344.474766][T13642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.498494][T13642] Cannot create hsr debugfs directory [ 344.876242][T13645] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.882703][T13924] __nla_validate_parse: 14 callbacks suppressed [ 344.882727][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1907'. [ 344.883438][T13645] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.908931][T13645] bridge_slave_0: entered allmulticast mode [ 344.936130][T13645] bridge_slave_0: entered promiscuous mode [ 344.953542][T13645] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.962159][T13645] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.970647][T13645] bridge_slave_1: entered allmulticast mode [ 344.979512][T13645] bridge_slave_1: entered promiscuous mode [ 345.043752][T13928] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1908'. [ 345.189836][T13645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.190072][T13936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.230457][T13645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.465121][T13945] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 345.484183][T13945] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 345.512089][T13945] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 345.550369][T13945] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 345.578812][T13945] geneve2: entered promiscuous mode [ 345.593015][T13945] geneve2: entered allmulticast mode [ 345.646504][T13645] team0: Port device team_slave_0 added [ 345.686490][ T59] bridge_slave_1: left allmulticast mode [ 345.692536][ T59] bridge_slave_1: left promiscuous mode [ 345.724534][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.751756][ T59] bridge_slave_0: left allmulticast mode [ 345.759681][ T59] bridge_slave_0: left promiscuous mode [ 345.774676][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.913537][T13966] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1917'. [ 346.246576][ T51] Bluetooth: hci4: command tx timeout [ 346.246863][ T5835] Bluetooth: hci2: command tx timeout [ 346.301738][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.314697][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.326285][ T59] bond0 (unregistering): Released all slaves [ 346.343652][T13645] team0: Port device team_slave_1 added [ 346.542249][T13645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.564677][T13645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.591594][T13645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.610145][T13645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.617683][T13645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.645509][T13645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.682994][T13983] wg1: entered promiscuous mode [ 346.849709][T13988] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1922'. [ 346.932789][T13645] hsr_slave_0: entered promiscuous mode [ 346.935841][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1923'. [ 346.958328][T13995] validate_nla: 3 callbacks suppressed [ 346.958346][T13995] netlink: 'syz.4.1924': attribute type 10 has an invalid length. [ 346.973858][T13645] hsr_slave_1: entered promiscuous mode [ 346.988523][T13645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.001362][T13645] Cannot create hsr debugfs directory [ 347.121110][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1926'. [ 347.251518][T14007] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1927'. [ 347.324560][T14003] xt_nfacct: accounting object `syz1' does not exists [ 347.817114][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1932'. [ 347.826363][T14018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1932'. [ 347.840050][ T59] hsr_slave_0: left promiscuous mode [ 347.862632][ T59] hsr_slave_1: left promiscuous mode [ 347.873922][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.881607][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.901927][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.909872][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.945036][ T59] veth1_macvtap: left promiscuous mode [ 347.950942][ T59] veth0_macvtap: left promiscuous mode [ 347.957693][ T59] veth1_vlan: left promiscuous mode [ 347.963311][ T59] veth0_vlan: left promiscuous mode [ 348.451238][ T59] team0 (unregistering): Port device team_slave_1 removed [ 348.494124][ T59] team0 (unregistering): Port device team_slave_0 removed [ 349.048610][T13642] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 349.132919][T13642] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 349.189857][T13642] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 349.231424][T14037] tipc: Enabling of bearer rejected, already enabled [ 349.301853][T13642] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 349.408571][T14041] netlink: 'syz.3.1939': attribute type 1 has an invalid length. [ 349.435661][T14041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1939'. [ 349.921315][T14071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1946'. [ 349.994790][T13642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.017951][T13645] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 350.090024][T13642] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.100074][T13645] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 350.116592][T13645] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 350.132013][T13645] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 350.191754][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.198992][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.242198][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.249424][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.462985][T13645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.542096][T13645] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.587761][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.595018][ T6323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.661635][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.670406][ T6323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.000189][T13642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.187632][T14122] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1958'. [ 351.338076][T13642] veth0_vlan: entered promiscuous mode [ 351.372776][T13642] veth1_vlan: entered promiscuous mode [ 351.482669][T13645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.569744][T13642] veth0_macvtap: entered promiscuous mode [ 351.600270][T13642] veth1_macvtap: entered promiscuous mode [ 351.698619][T13642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.748213][T13642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.796188][T13642] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.823083][T13642] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.850052][T13642] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.861251][T14153] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1965'. [ 351.869282][T13642] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.918360][T14148] tipc: Bearer : already 2 bearers with priority 10 [ 351.938124][T14153] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1965'. [ 351.961542][T14148] tipc: Bearer : trying with adjusted priority [ 351.979755][T14148] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 352.084524][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1966'. [ 352.326258][ T6336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.372045][T14171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1968'. [ 352.375513][ T6336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.388100][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1968'. [ 352.505882][ T8343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.522302][ T8343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.629470][T13645] veth0_vlan: entered promiscuous mode [ 352.670284][T13645] veth1_vlan: entered promiscuous mode [ 352.713287][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1972'. [ 352.803473][T13645] veth0_macvtap: entered promiscuous mode [ 352.828334][T13645] veth1_macvtap: entered promiscuous mode [ 352.865156][T13645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.893226][T13645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.917029][T13645] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.931905][T13645] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.984129][T13645] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.992902][T13645] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.086391][T14187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1975'. [ 353.193018][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.207622][T14200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1976'. [ 353.428453][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.547011][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.582184][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.601954][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.631417][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.639631][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.959632][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.157556][ T36] bridge_slave_1: left allmulticast mode [ 354.163377][ T36] bridge_slave_1: left promiscuous mode [ 354.189924][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.245087][T14205] netlink: 'syz.0.1977': attribute type 2 has an invalid length. [ 354.252888][T14205] netlink: 'syz.0.1977': attribute type 2 has an invalid length. [ 354.298811][ T36] bridge_slave_0: left allmulticast mode [ 354.314289][ T36] bridge_slave_0: left promiscuous mode [ 354.335993][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.341334][T14205] netlink: 'syz.0.1977': attribute type 1 has an invalid length. [ 354.402369][T14205] netlink: 'syz.0.1977': attribute type 1 has an invalid length. [ 354.451982][T14205] netlink: 'syz.0.1977': attribute type 1 has an invalid length. [ 354.494290][T14205] netlink: 'syz.0.1977': attribute type 1 has an invalid length. [ 354.940855][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 354.951256][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 354.974381][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 354.974590][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 354.990129][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 355.000750][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 355.013251][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 355.016861][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 355.025870][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 355.028714][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 355.196937][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.208830][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.222716][ T36] bond0 (unregistering): Released all slaves [ 355.666263][T14245] sch_fq: defrate 0 ignored. [ 355.676801][T14246] __nla_validate_parse: 1 callbacks suppressed [ 355.676820][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1985'. [ 355.944141][T14258] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 355.959544][T14260] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1989'. [ 356.245949][ T55] block nbd0: Possible stuck request ffff88802517e000: control (read@0,1024B). Runtime 210 seconds [ 356.257594][ T55] block nbd0: Possible stuck request ffff88802517e1c0: control (read@1024,1024B). Runtime 210 seconds [ 356.268749][ T55] block nbd0: Possible stuck request ffff88802517e380: control (read@2048,1024B). Runtime 210 seconds [ 356.279952][ T55] block nbd0: Possible stuck request ffff88802517e540: control (read@3072,1024B). Runtime 210 seconds [ 356.631398][T14281] x_tables: ip_tables: cgroup.0 match: invalid size 8 (kernel) != (user) 16 [ 356.643671][T14281] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20002 [ 357.053060][ T5834] Bluetooth: hci4: command tx timeout [ 357.124219][ T5834] Bluetooth: hci2: command tx timeout [ 357.366179][T14312] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2004'. [ 357.435885][T14310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2005'. [ 357.560720][T14320] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2007'. [ 357.624349][T14320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2007'. [ 357.682293][T14320] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2007'. [ 357.735536][ T36] hsr_slave_0: left promiscuous mode [ 357.743437][T14324] xt_CT: You must specify a L4 protocol and not use inversions on it [ 357.752257][ T36] hsr_slave_1: left promiscuous mode [ 357.764704][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.772805][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.787217][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.799951][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.848308][T14328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2009'. [ 357.853527][ T36] veth1_macvtap: left promiscuous mode [ 357.873888][ T36] veth0_macvtap: left promiscuous mode [ 357.884441][ T36] veth1_vlan: left promiscuous mode [ 357.890491][ T36] veth0_vlan: left promiscuous mode [ 358.138820][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2011'. [ 358.161486][T14339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2011'. [ 358.511972][ T36] team0 (unregistering): Port device team_slave_1 removed [ 358.558975][ T36] team0 (unregistering): Port device team_slave_0 removed [ 359.066412][T14339] vlan0: entered allmulticast mode [ 359.071723][T14339] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 359.124582][ T5834] Bluetooth: hci4: command tx timeout [ 359.175512][T14345] netlink: 'syz.4.2013': attribute type 33 has an invalid length. [ 359.206820][ T5834] Bluetooth: hci2: command tx timeout [ 359.220068][T14222] chnl_net:caif_netlink_parms(): no params data found [ 359.355937][T14347] veth9: entered allmulticast mode [ 359.508759][T14359] netlink: 'syz.0.2017': attribute type 6 has an invalid length. [ 359.584853][T14363] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 359.648145][T14365] ksmbd: Unknown IPC event: 3, ignore. [ 359.750554][T14222] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.760309][T14222] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.768564][T14222] bridge_slave_0: entered allmulticast mode [ 359.776923][T14222] bridge_slave_0: entered promiscuous mode [ 359.786372][T14222] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.793623][T14222] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.793701][T14369] netlink: 'syz.0.2021': attribute type 1 has an invalid length. [ 359.801628][T14222] bridge_slave_1: entered allmulticast mode [ 359.816559][T14222] bridge_slave_1: entered promiscuous mode [ 359.928898][T14222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.948128][T14223] chnl_net:caif_netlink_parms(): no params data found [ 360.046563][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.091092][T14222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.168176][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.303341][T14222] team0: Port device team_slave_0 added [ 360.361953][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.406475][T14222] team0: Port device team_slave_1 added [ 360.606862][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.688613][T14222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.697284][T14222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.735404][T14222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.735700][T14419] netlink: 'syz.3.2034': attribute type 1 has an invalid length. [ 360.769599][T14223] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.782842][T14419] netlink: 'syz.3.2034': attribute type 2 has an invalid length. [ 360.792939][T14419] netlink: 'syz.3.2034': attribute type 1 has an invalid length. [ 360.800453][T14223] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.802055][T14419] __nla_validate_parse: 9 callbacks suppressed [ 360.802074][T14419] netlink: 1156 bytes leftover after parsing attributes in process `syz.3.2034'. [ 360.823667][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2033'. [ 360.835173][T14223] bridge_slave_0: entered allmulticast mode [ 360.845143][T14223] bridge_slave_0: entered promiscuous mode [ 360.859391][T14223] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.867705][T14223] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.875230][T14223] bridge_slave_1: entered allmulticast mode [ 360.892472][T13918] hid-generic 0005:0C45:0004.0003: item fetching failed at offset 0/1 [ 360.911992][T14223] bridge_slave_1: entered promiscuous mode [ 360.921514][T13918] hid-generic 0005:0C45:0004.0003: probe with driver hid-generic failed with error -22 [ 360.933448][T14222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.940764][T14222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.967425][T14222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.069962][T14223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.073759][T14431] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2033'. [ 361.139954][T14223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.196681][T14222] hsr_slave_0: entered promiscuous mode [ 361.203985][T14222] hsr_slave_1: entered promiscuous mode [ 361.207203][ T5834] Bluetooth: hci4: command tx timeout [ 361.210766][T14222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.222897][T14222] Cannot create hsr debugfs directory [ 361.259509][T14416] 8021q: VLANs not supported on tunl0 [ 361.284375][ T5834] Bluetooth: hci2: command tx timeout [ 361.364525][ T55] block nbd3: Possible stuck request ffff888025277000: control (read@0,1024B). Runtime 180 seconds [ 361.375899][ T55] block nbd3: Possible stuck request ffff8880252771c0: control (read@1024,1024B). Runtime 180 seconds [ 361.387342][ T55] block nbd3: Possible stuck request ffff888025277380: control (read@2048,1024B). Runtime 180 seconds [ 361.398407][ T55] block nbd3: Possible stuck request ffff888025277540: control (read@3072,1024B). Runtime 180 seconds [ 361.447562][T14441] ieee802154 phy0 wpan0: encryption failed: -22 [ 361.463882][T14223] team0: Port device team_slave_0 added [ 361.513464][T14223] team0: Port device team_slave_1 added [ 361.557087][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.571955][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.698288][T14223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.712903][T14223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.756763][T14223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.801916][T14223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.809990][T14223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.837895][T14223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.953658][ T36] bridge_slave_1: left allmulticast mode [ 361.965951][ T36] bridge_slave_1: left promiscuous mode [ 361.971768][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.983151][ T36] bridge_slave_0: left allmulticast mode [ 361.990175][ T36] bridge_slave_0: left promiscuous mode [ 362.007842][T14463] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2043'. [ 362.023367][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.110473][T14466] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2045'. [ 362.301538][T14470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2046'. [ 362.480656][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.493325][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.504877][ T36] bond0 (unregistering): Released all slaves [ 362.636592][T14223] hsr_slave_0: entered promiscuous mode [ 362.643982][T14223] hsr_slave_1: entered promiscuous mode [ 362.663033][T14223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.671280][T14223] Cannot create hsr debugfs directory [ 363.011750][T14482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2050'. [ 363.284691][ T5834] Bluetooth: hci4: command tx timeout [ 363.364446][ T5834] Bluetooth: hci2: command tx timeout [ 363.370934][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'. [ 363.885370][T14510] openvswitch: netlink: Actions may not be safe on all matching packets [ 363.993613][ T36] hsr_slave_0: left promiscuous mode [ 364.003755][ T36] hsr_slave_1: left promiscuous mode [ 364.020697][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.030352][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.039227][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.047366][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.072965][ T36] veth1_macvtap: left promiscuous mode [ 364.094302][ T36] veth0_macvtap: left promiscuous mode [ 364.100046][ T36] veth1_vlan: left promiscuous mode [ 364.115714][ T36] veth0_vlan: left promiscuous mode [ 364.669088][ T36] team0 (unregistering): Port device team_slave_1 removed [ 364.709532][ T36] team0 (unregistering): Port device team_slave_0 removed [ 365.404522][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2065'. [ 365.520625][T14540] netlink: 'syz.0.2066': attribute type 3 has an invalid length. [ 365.692352][T14544] netlink: 'syz.3.2068': attribute type 13 has an invalid length. [ 365.827355][T14544] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 365.905942][T14222] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 365.942786][T14222] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 366.001478][T14222] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 366.027625][T14558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'. [ 366.075306][T14222] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 366.107952][T14560] lo: entered allmulticast mode [ 366.165745][T14560] tunl0: entered allmulticast mode [ 366.185544][T14560] gre0: entered allmulticast mode [ 366.195927][T14560] gretap0: entered allmulticast mode [ 366.202097][T14560] erspan0: entered allmulticast mode [ 366.211150][T14560] ip_vti0: entered allmulticast mode [ 366.217806][T14560] ip6_vti0: entered allmulticast mode [ 366.224859][T14560] sit0: left promiscuous mode [ 366.229660][T14560] sit0: entered allmulticast mode [ 366.275273][T14560] ip6tnl0: entered allmulticast mode [ 366.281727][T14560] ip6gre0: entered allmulticast mode [ 366.295334][T14563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2073'. [ 366.325702][T14563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2073'. [ 366.477608][T14223] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 366.527315][T14223] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 366.558040][T14223] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 366.624039][T14223] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 366.986821][T14222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.134884][T14222] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.150104][T14598] tipc: Started in network mode [ 367.157859][T14598] tipc: Node identity b6a08faa032e, cluster identity 4711 [ 367.169796][T14598] tipc: Enabled bearer , priority 0 [ 367.255349][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.262689][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.283814][T14603] +: renamed from syzkaller0 [ 367.291259][T14603] tipc: Disabling bearer [ 367.327451][ T8343] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.334710][ T8343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.423170][T14223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.532343][T14223] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.599610][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.606890][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.646579][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.653922][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.955717][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2086'. [ 367.999078][T14619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2086'. [ 368.248231][T14222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.574525][T14223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.686041][T14641] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2090'. [ 368.693906][T14223] veth0_vlan: entered promiscuous mode [ 368.748138][T14641] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2090'. [ 368.761637][T14223] veth1_vlan: entered promiscuous mode [ 368.822736][T14641] team0: Port device bond0 removed [ 368.840033][T14641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.864959][T14641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.900320][T14641] bond0 (unregistering): (slave ÿ): Releasing backup interface [ 368.916502][T14641] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 368.936788][T14641] bond0 (unregistering): Released all slaves [ 369.090679][T14223] veth0_macvtap: entered promiscuous mode [ 369.149975][T14223] veth1_macvtap: entered promiscuous mode [ 369.241004][T14223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.292090][T14223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.359955][T14223] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.390021][T14223] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.410756][T14223] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.428856][T14223] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.586945][T14222] veth0_vlan: entered promiscuous mode [ 369.619139][T14222] veth1_vlan: entered promiscuous mode [ 369.707136][ T8339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.717771][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 369.733390][ T8339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.765011][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 369.782445][ T6336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.808989][T14687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 369.811374][ T6336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.830281][T14222] veth0_macvtap: entered promiscuous mode [ 369.871286][T14222] veth1_macvtap: entered promiscuous mode [ 369.951089][T14222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.960857][T14694] sctp: [Deprecated]: syz.0.2104 (pid 14694) Use of int in maxseg socket option. [ 369.960857][T14694] Use struct sctp_assoc_value instead [ 369.991747][T14222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.033994][T14222] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.058373][T14222] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.070070][T14222] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.090618][T14222] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.282423][ T6336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.306594][ T6336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.406358][T14701] netlink: 'syz.0.2106': attribute type 64 has an invalid length. [ 370.478032][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.568477][T14703] 8021q: adding VLAN 0 to HW filter on device bond5 [ 370.582445][T14703] bond0: (slave bond5): making interface the new active one [ 370.596282][T14703] bond0: (slave bond5): Enslaving as an active interface with an up link [ 370.605754][ T6336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.636826][ T6336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.648454][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.790551][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.949952][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.351264][ T36] bridge_slave_1: left allmulticast mode [ 371.357919][ T36] bridge_slave_1: left promiscuous mode [ 371.363853][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.383942][ T36] bridge_slave_0: left allmulticast mode [ 371.401092][ T36] bridge_slave_0: left promiscuous mode [ 371.410724][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.693034][T14721] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.720781][T14718] netlink: 'syz.4.2111': attribute type 1 has an invalid length. [ 371.730052][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 371.743431][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 371.754177][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 371.767605][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 371.777172][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 372.178061][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.193366][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.201636][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.211484][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.220901][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.230617][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 372.248897][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.276400][ T36] bond0 (unregistering): Released all slaves [ 372.368390][T14718] 8021q: adding VLAN 0 to HW filter on device bond6 [ 372.415488][T14728] __nla_validate_parse: 63 callbacks suppressed [ 372.415508][T14728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2111'. [ 372.438665][T14728] tc_dump_action: action bad kind [ 372.605652][T14739] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2113'. [ 372.673212][T14741] netlink: 'syz.0.2114': attribute type 1 has an invalid length. [ 372.873088][T14743] bond0: (slave gretap0): making interface the new active one [ 372.933620][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2114'. [ 372.966248][T14743] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 373.244439][T14758] netlink: 'syz.4.2118': attribute type 10 has an invalid length. [ 373.270432][T14758] batman_adv: batadv0: Adding interface: team0 [ 373.285938][T14758] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.312723][T14758] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 373.776027][T14770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2122'. [ 373.794327][T14770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2122'. [ 373.844727][ T5834] Bluetooth: hci2: command tx timeout [ 374.324982][ T5834] Bluetooth: hci4: command tx timeout [ 374.719029][T14780] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2126'. [ 375.270725][T14722] chnl_net:caif_netlink_parms(): no params data found [ 375.347665][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2128'. [ 375.386976][T14795] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 375.414925][T14795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.608881][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 375.617818][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 375.631340][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 375.654739][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 375.667695][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 375.831711][T14812] netlink: 'syz.3.2131': attribute type 1 has an invalid length. [ 375.854246][T14812] netlink: 'syz.3.2131': attribute type 3 has an invalid length. [ 375.862045][T14812] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2131'. [ 375.880872][T14812] NCSI netlink: No device for ifindex 0 [ 375.898860][T14812] netlink: 'syz.3.2131': attribute type 1 has an invalid length. [ 375.908692][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2131'. [ 375.927279][ T5834] Bluetooth: hci2: command tx timeout [ 375.933521][ T36] hsr_slave_0: left promiscuous mode [ 375.949272][ T36] hsr_slave_1: left promiscuous mode [ 375.958185][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.965973][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.976576][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.984016][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.003546][T14822] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2132'. [ 376.043815][ T36] veth1_macvtap: left promiscuous mode [ 376.055387][T14816] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 376.065192][ T36] veth0_macvtap: left promiscuous mode [ 376.071261][ T36] veth1_vlan: left promiscuous mode [ 376.084772][ T36] veth0_vlan: left promiscuous mode [ 376.404761][ T5834] Bluetooth: hci4: command tx timeout [ 376.627786][ T36] team0 (unregistering): Port device team_slave_1 removed [ 376.678643][ T36] team0 (unregistering): Port device team_slave_0 removed [ 377.119762][T14812] veth11: entered allmulticast mode [ 377.168621][T14722] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.204993][T14722] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.212283][T14722] bridge_slave_0: entered allmulticast mode [ 377.232040][T14722] bridge_slave_0: entered promiscuous mode [ 377.239375][T14827] xt_hashlimit: size too large, truncated to 1048576 [ 377.242786][T14722] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.254216][T14722] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.261440][T14722] bridge_slave_1: entered allmulticast mode [ 377.269309][T14722] bridge_slave_1: entered promiscuous mode [ 377.547706][T14722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.609746][T14722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.695137][T14835] sctp: [Deprecated]: syz.3.2136 (pid 14835) Use of int in max_burst socket option deprecated. [ 377.695137][T14835] Use struct sctp_assoc_value instead [ 377.764471][ T5834] Bluetooth: hci1: command tx timeout [ 377.871406][T14722] team0: Port device team_slave_0 added [ 377.907463][T14722] team0: Port device team_slave_1 added [ 377.959492][T14734] chnl_net:caif_netlink_parms(): no params data found [ 378.005123][ T5834] Bluetooth: hci2: command tx timeout [ 378.095979][T14722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.103586][T14722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.146968][T14850] SET target dimension over the limit! [ 378.152967][T14722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.221019][T14722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.228362][T14722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.255584][T14722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.484150][ T5835] Bluetooth: hci4: command tx timeout [ 378.579520][T14722] hsr_slave_0: entered promiscuous mode [ 378.624602][T14722] hsr_slave_1: entered promiscuous mode [ 378.647797][T14722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.663764][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.694986][T14722] Cannot create hsr debugfs directory [ 379.040771][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.082380][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 379.161909][T14734] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.178955][T14734] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.191241][T14734] bridge_slave_0: entered allmulticast mode [ 379.202790][T14734] bridge_slave_0: entered promiscuous mode [ 379.214607][T14734] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.221778][T14734] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.229076][T14734] bridge_slave_1: entered allmulticast mode [ 379.236961][T14734] bridge_slave_1: entered promiscuous mode [ 379.290624][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.310711][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 379.361028][T14884] __nla_validate_parse: 1 callbacks suppressed [ 379.361047][T14884] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2146'. [ 379.383653][T14884] syz0: rxe_newlink: already configured on bond_slave_0 [ 379.393787][T14884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2146'. [ 379.393830][T14886] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2147'. [ 379.422669][T14886] NCSI netlink: No device for ifindex 0 [ 379.497564][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.529812][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 379.598359][T14734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.697698][T14896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2148'. [ 379.710842][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.722125][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 379.751464][T14734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.845402][ T5835] Bluetooth: hci1: command tx timeout [ 379.973531][T14734] team0: Port device team_slave_0 added [ 380.035481][T14734] team0: Port device team_slave_1 added [ 380.084612][ T5835] Bluetooth: hci2: command tx timeout [ 380.177406][T14734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.184713][T14734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.210974][T14734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.229118][T14916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2153'. [ 380.247013][T14917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2152'. [ 380.268821][T14917] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2152'. [ 380.290791][T14734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.301722][T14734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.338401][T14734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.566670][ T5835] Bluetooth: hci4: command tx timeout [ 380.613272][T14927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.851935][T14734] hsr_slave_0: entered promiscuous mode [ 380.860395][T14734] hsr_slave_1: entered promiscuous mode [ 380.867113][T14734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.874889][T14734] Cannot create hsr debugfs directory [ 380.930061][T14803] chnl_net:caif_netlink_parms(): no params data found [ 380.982232][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.191371][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.483026][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.580362][T14967] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2165'. [ 381.596740][T14803] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.612542][T14803] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.628362][T14803] bridge_slave_0: entered allmulticast mode [ 381.641335][T14803] bridge_slave_0: entered promiscuous mode [ 381.690774][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.713579][T14803] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.721613][T14803] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.729890][T14803] bridge_slave_1: entered allmulticast mode [ 381.740945][T14803] bridge_slave_1: entered promiscuous mode [ 381.785150][T14975] xt_CONNSECMARK: invalid mode: 0 [ 381.837149][T14803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.925215][ T5835] Bluetooth: hci1: command tx timeout [ 381.955777][T14803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.975677][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2169'. [ 382.068014][T14803] team0: Port device team_slave_0 added [ 382.142279][T14803] team0: Port device team_slave_1 added [ 382.227237][T14722] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 382.248691][T14722] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 382.296817][T14803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.314397][T14803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.350588][T14803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.380547][T14722] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 382.395909][T14803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.402957][T14803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.430612][T14803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.483342][ T36] bridge_slave_1: left allmulticast mode [ 382.489730][ T36] bridge_slave_1: left promiscuous mode [ 382.503999][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.520821][ T36] bridge_slave_0: left allmulticast mode [ 382.526870][ T36] bridge_slave_0: left promiscuous mode [ 382.535390][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.549088][ T36] tipc: Resetting bearer [ 382.792770][ T36] tipc: Disabling bearer [ 382.864370][ T36] bond3 (unregistering): (slave gretap1): Releasing active interface [ 382.890857][ T36] bond4 (unregistering): (slave gretap2): Releasing active interface [ 383.572301][ T36] bond1 (unregistering): Released all slaves [ 383.600760][ T36] bond0 (unregistering): (slave bond5): Releasing active interface [ 383.613557][ T36] bond0 (unregistering): Released all slaves [ 383.630942][ T36] bond2 (unregistering): Released all slaves [ 383.734433][ T36] bond3 (unregistering): Released all slaves [ 383.750793][ T36] bond4 (unregistering): Released all slaves [ 383.863272][ T36] bond5 (unregistering): Released all slaves [ 383.975673][ T36] bond6 (unregistering): Released all slaves [ 384.006732][ T5835] Bluetooth: hci1: command tx timeout [ 384.292984][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.304509][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.315537][ T36] bond0 (unregistering): Released all slaves [ 384.332569][T14722] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 384.535147][ T36] : left promiscuous mode [ 384.621783][ T36] tipc: Disabling bearer [ 384.639653][ T36] tipc: Disabling bearer [ 384.654181][ T36] tipc: Left network mode [ 384.659537][T14803] hsr_slave_0: entered promiscuous mode [ 384.681703][T14803] hsr_slave_1: entered promiscuous mode [ 384.692625][T14803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.704836][T14803] Cannot create hsr debugfs directory [ 385.412534][T14734] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 385.474897][T14734] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 385.566007][T15031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 385.615354][T15026] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2182'. [ 385.654165][T14734] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 385.691205][T14734] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 385.959761][T14722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.043391][T14722] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.192175][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.199452][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.261013][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.268274][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.326950][ T55] block nbd0: Possible stuck request ffff88802517e000: control (read@0,1024B). Runtime 240 seconds [ 386.337970][ T55] block nbd0: Possible stuck request ffff88802517e1c0: control (read@1024,1024B). Runtime 240 seconds [ 386.349135][ T55] block nbd0: Possible stuck request ffff88802517e380: control (read@2048,1024B). Runtime 240 seconds [ 386.360227][ T55] block nbd0: Possible stuck request ffff88802517e540: control (read@3072,1024B). Runtime 240 seconds [ 386.533304][T14803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 386.575522][T14803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 386.687077][T14803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 386.774346][T14803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 386.806474][T14722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 386.937204][ T36] hsr_slave_0: left promiscuous mode [ 386.943365][ T36] hsr_slave_1: left promiscuous mode [ 386.949793][ T36] batman_adv: batadv0: Removing interface: team0 [ 386.967676][ T36] hsr_slave_0: left promiscuous mode [ 386.973942][ T36] hsr_slave_1: left promiscuous mode [ 386.995627][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.004253][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.012430][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.020693][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.072946][ T36] veth0_macvtap: left promiscuous mode [ 387.080268][ T36] veth1_vlan: left promiscuous mode [ 387.085928][ T36] veth0_vlan: left promiscuous mode [ 387.092735][ T36] veth1_macvtap: left promiscuous mode [ 387.098718][ T36] veth0_macvtap: left promiscuous mode [ 387.114926][ T36] veth1_vlan: left promiscuous mode [ 387.120386][ T36] veth0_vlan: left promiscuous mode [ 387.539075][ T36] pim6reg (unregistering): left allmulticast mode [ 387.578218][ T36] pimreg (unregistering): left allmulticast mode [ 388.894370][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.050185][ T36] team0 (unregistering): Port device team_slave_1 removed [ 389.101277][ T36] team0 (unregistering): Port device team_slave_0 removed [ 389.563372][ T5200] udevd[5200]: worker [8671] /devices/virtual/block/nbd3 timeout; kill it [ 389.615233][ T5200] udevd[5200]: seq 14520 '/devices/virtual/block/nbd3' killed [ 389.677882][T14734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.823737][T14734] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.900463][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.907693][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.932281][T14722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.971687][T15078] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 389.989987][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.997212][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.170470][T14803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.206600][T14722] veth0_vlan: entered promiscuous mode [ 390.243956][T14734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.276303][T14722] veth1_vlan: entered promiscuous mode [ 390.334232][T14803] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.385276][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.392487][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.441140][ T6336] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.448377][ T6336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.520944][T15085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2192'. [ 390.576153][T14722] veth0_macvtap: entered promiscuous mode [ 390.593039][T14722] veth1_macvtap: entered promiscuous mode [ 390.699928][T14722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.742443][T14803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.800579][T14722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.825632][T15091] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2194'. [ 390.837554][T14722] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.864975][T14722] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.873757][T14722] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.902995][T14722] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.030958][ T36] IPVS: stop unused estimator thread 0... [ 391.041252][T15095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2195'. [ 391.076019][T14734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.330825][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.377410][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.445245][ T55] block nbd3: Possible stuck request ffff888025277000: control (read@0,1024B). Runtime 210 seconds [ 391.456836][ T55] block nbd3: Possible stuck request ffff8880252771c0: control (read@1024,1024B). Runtime 210 seconds [ 391.468090][ T55] block nbd3: Possible stuck request ffff888025277380: control (read@2048,1024B). Runtime 210 seconds [ 391.480035][ T55] block nbd3: Possible stuck request ffff888025277540: control (read@3072,1024B). Runtime 210 seconds [ 391.503511][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.567584][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.640541][T14803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.198965][ T1154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.267661][T14734] veth0_vlan: entered promiscuous mode [ 392.380503][ T1154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.427500][T14734] veth1_vlan: entered promiscuous mode [ 392.555944][T14734] veth0_macvtap: entered promiscuous mode [ 392.576820][T14734] veth1_macvtap: entered promiscuous mode [ 392.585457][T14803] veth0_vlan: entered promiscuous mode [ 392.613509][T14803] veth1_vlan: entered promiscuous mode [ 392.635999][ T1154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.653325][T14734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.678400][T14734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.698670][T14734] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.708175][T14734] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.720507][T14734] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.730248][T14734] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.757696][T14803] veth0_macvtap: entered promiscuous mode [ 392.773034][T14803] veth1_macvtap: entered promiscuous mode [ 392.833400][T14803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.858331][T14803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.869722][T14803] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.878928][T14803] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.888449][T14803] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.897545][T14803] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.937034][ T1154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.967086][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.988694][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.049206][ T8343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.073541][ T8343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.240256][ T1154] bridge_slave_1: left allmulticast mode [ 393.247731][ T1154] bridge_slave_1: left promiscuous mode [ 393.253551][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.263238][ T1154] bridge_slave_0: left allmulticast mode [ 393.269585][ T1154] bridge_slave_0: left promiscuous mode [ 393.276019][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.777359][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.793279][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.803989][ T1154] bond0 (unregistering): Released all slaves [ 393.823199][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.839650][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.024298][ T8343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.032184][ T8343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.131361][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 394.144527][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 394.152550][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 394.160877][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 394.169004][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 394.370043][T15143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2203'. [ 394.985193][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 395.010175][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 395.019724][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 395.034696][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 395.054568][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 395.248163][T15153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2205'. [ 395.579493][ T1154] hsr_slave_0: left promiscuous mode [ 395.596701][ T1154] hsr_slave_1: left promiscuous mode [ 395.614756][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.623168][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.631524][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.639176][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.667467][ T1154] veth1_macvtap: left promiscuous mode [ 395.673141][ T1154] veth0_macvtap: left promiscuous mode [ 395.679913][ T1154] veth1_vlan: left promiscuous mode [ 395.685933][ T1154] veth0_vlan: left promiscuous mode [ 395.868067][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 395.878287][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 395.889171][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 395.907917][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 395.917122][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 396.244636][ T5834] Bluetooth: hci2: command tx timeout [ 396.281976][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 396.352294][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 397.024108][T15175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2210'. [ 397.205204][ T5834] Bluetooth: hci1: command tx timeout [ 397.400680][T15184] tipc: New replicast peer: 255.255.255.255 [ 397.442503][T15184] tipc: Enabled bearer , priority 10 [ 397.530149][T15190] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 397.673788][ T1154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.695023][T15195] netlink: 'syz.3.2215': attribute type 58 has an invalid length. [ 397.726213][T15195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2215'. [ 397.823442][ T1154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.014192][ T5834] Bluetooth: hci4: command tx timeout [ 398.116028][ T1154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.158037][T15200] netlink: 'syz.3.2216': attribute type 4 has an invalid length. [ 398.317714][ T1154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.334211][ T5834] Bluetooth: hci2: command tx timeout [ 398.425612][T15204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2217'. [ 398.957522][ T1154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.995579][T15224] ------------[ cut here ]------------ [ 399.001146][T15224] WARNING: CPU: 1 PID: 15224 at ./include/net/mac80211.h:7748 _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 399.012209][T15224] Modules linked in: [ 399.016488][T15224] CPU: 1 UID: 0 PID: 15224 Comm: syz.3.2224 Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 PREEMPT(full) [ 399.028665][T15224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 399.038831][T15224] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 399.045746][T15224] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 60 53 e5 f6 b8 04 00 00 00 eb 31 e8 54 53 e5 f6 eb 28 e8 4d 53 e5 f6 90 <0f> 0b 90 eb 1d e8 42 53 e5 f6 b8 02 00 00 00 eb 13 e8 36 53 e5 f6 [ 399.065725][T15224] RSP: 0018:ffffc90003eaef48 EFLAGS: 00010283 [ 399.072062][T15224] RAX: ffffffff8adafb23 RBX: ffff88807b9c8000 RCX: 0000000000080000 [ 399.080139][T15224] RDX: ffffc9000c97e000 RSI: 0000000000000412 RDI: 0000000000000413 [ 399.088781][T15224] RBP: 0000000000000000 R08: ffff88802a579e00 R09: 0000000000000007 [ 399.096909][T15224] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 399.105004][T15224] R13: 0000000000000006 R14: ffff88807b9c8180 R15: 1ffff1100f739030 [ 399.113039][T15224] FS: 00007f7a175e06c0(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 399.122082][T15224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.129707][T15224] CR2: 00007f7a175bfd58 CR3: 00000000626ce000 CR4: 00000000003526f0 [ 399.137998][T15224] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 399.146078][T15224] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 399.154137][T15224] Call Trace: [ 399.157465][T15224] [ 399.160700][T15224] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 399.166985][T15224] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 399.173687][T15224] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 399.180303][T15224] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 399.186023][T15224] ? ieee80211_sta_init_nss+0x8dd/0xbe0 [ 399.191619][T15224] ? ieee80211_get_link_sband+0x335/0x3e0 [ 399.197530][T15224] sta_link_apply_parameters+0xbb8/0xec0 [ 399.203233][T15224] sta_apply_parameters+0x944/0x15b0 [ 399.208887][T15224] ieee80211_add_station+0x424/0x6a0 [ 399.214294][T15224] rdev_add_station+0x105/0x290 [ 399.219197][T15224] nl80211_new_station+0x1723/0x1b40 [ 399.224623][T15224] ? __pfx_nl80211_new_station+0x10/0x10 [ 399.230320][T15224] ? netdev_run_todo+0xe1d/0xea0 [ 399.235397][T15224] ? nl80211_pre_doit+0x4f1/0x930 [ 399.240492][T15224] genl_family_rcv_msg_doit+0x215/0x300 [ 399.246141][T15224] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 399.252280][T15224] ? bpf_lsm_capable+0x9/0x20 [ 399.257044][T15224] ? security_capable+0x7e/0x2e0 [ 399.262263][T15224] genl_rcv_msg+0x60e/0x790 [ 399.267068][T15224] ? __pfx_genl_rcv_msg+0x10/0x10 [ 399.272230][T15224] ? ref_tracker_free+0x63a/0x7d0 [ 399.277344][T15224] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 399.282776][T15224] ? __pfx_nl80211_new_station+0x10/0x10 [ 399.289382][T15224] ? __pfx_nl80211_post_doit+0x10/0x10 [ 399.295168][T15224] ? __pfx_ref_tracker_free+0x10/0x10 [ 399.300605][T15224] netlink_rcv_skb+0x205/0x470 [ 399.303215][ T5834] Bluetooth: hci1: command tx timeout [ 399.305461][T15224] ? __pfx_genl_rcv_msg+0x10/0x10 [ 399.315948][T15224] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 399.321301][T15224] ? down_read+0x1ad/0x2e0 [ 399.325842][T15224] genl_rcv+0x28/0x40 [ 399.329890][T15224] netlink_unicast+0x758/0x8d0 [ 399.334771][T15224] netlink_sendmsg+0x805/0xb30 [ 399.339602][T15224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.345079][T15224] ? aa_sock_msg_perm+0x94/0x160 [ 399.350083][T15224] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 399.355463][T15224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.360797][T15224] __sock_sendmsg+0x219/0x270 [ 399.366465][T15224] ____sys_sendmsg+0x505/0x830 [ 399.371299][T15224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.377071][T15224] ? import_iovec+0x74/0xa0 [ 399.381642][T15224] ___sys_sendmsg+0x21f/0x2a0 [ 399.386504][T15224] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.391798][T15224] ? __fget_files+0x2a/0x420 [ 399.396500][T15224] ? __fget_files+0x3a0/0x420 [ 399.401230][T15224] __x64_sys_sendmsg+0x19b/0x260 [ 399.406295][T15224] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.411826][T15224] ? do_syscall_64+0xbe/0x3b0 [ 399.416608][T15224] do_syscall_64+0xfa/0x3b0 [ 399.421186][T15224] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.426632][T15224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.432746][T15224] ? clear_bhb_loop+0x60/0xb0 [ 399.437522][T15224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.443461][T15224] RIP: 0033:0x7f7a1678e929 [ 399.448020][T15224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.468029][T15224] RSP: 002b:00007f7a175e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.476784][T15224] RAX: ffffffffffffffda RBX: 00007f7a169b5fa0 RCX: 00007f7a1678e929 [ 399.478755][T15149] chnl_net:caif_netlink_parms(): no params data found [ 399.484839][T15224] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 399.484861][T15224] RBP: 00007f7a16810b39 R08: 0000000000000000 R09: 0000000000000000 [ 399.484876][T15224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.484891][T15224] R13: 0000000000000000 R14: 00007f7a169b5fa0 R15: 00007ffd98ff0b88 [ 399.524403][T15224] [ 399.527477][T15224] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 399.534789][T15224] CPU: 1 UID: 0 PID: 15224 Comm: syz.3.2224 Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 PREEMPT(full) [ 399.546883][T15224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 399.556956][T15224] Call Trace: [ 399.560249][T15224] [ 399.563194][T15224] dump_stack_lvl+0x99/0x250 [ 399.567823][T15224] ? __asan_memcpy+0x40/0x70 [ 399.572462][T15224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.577730][T15224] ? __pfx__printk+0x10/0x10 [ 399.582350][T15224] panic+0x2db/0x790 [ 399.586285][T15224] ? __pfx_panic+0x10/0x10 [ 399.590722][T15224] ? show_trace_log_lvl+0x4fb/0x550 [ 399.595966][T15224] __warn+0x31b/0x4b0 [ 399.599968][T15224] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 399.605799][T15224] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 399.611623][T15224] report_bug+0x2be/0x4f0 [ 399.615973][T15224] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 399.621799][T15224] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 399.627629][T15224] ? _ieee80211_sta_cur_vht_bw+0x526/0x6e0 [ 399.633549][T15224] handle_bug+0x84/0x160 [ 399.637840][T15224] exc_invalid_op+0x1a/0x50 [ 399.642372][T15224] asm_exc_invalid_op+0x1a/0x20 [ 399.647245][T15224] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 399.653689][T15224] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 60 53 e5 f6 b8 04 00 00 00 eb 31 e8 54 53 e5 f6 eb 28 e8 4d 53 e5 f6 90 <0f> 0b 90 eb 1d e8 42 53 e5 f6 b8 02 00 00 00 eb 13 e8 36 53 e5 f6 [ 399.673321][T15224] RSP: 0018:ffffc90003eaef48 EFLAGS: 00010283 [ 399.679437][T15224] RAX: ffffffff8adafb23 RBX: ffff88807b9c8000 RCX: 0000000000080000 [ 399.687446][T15224] RDX: ffffc9000c97e000 RSI: 0000000000000412 RDI: 0000000000000413 [ 399.695456][T15224] RBP: 0000000000000000 R08: ffff88802a579e00 R09: 0000000000000007 [ 399.703458][T15224] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 399.711455][T15224] R13: 0000000000000006 R14: ffff88807b9c8180 R15: 1ffff1100f739030 [ 399.719653][T15224] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 399.725507][T15224] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 399.731338][T15224] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 399.737344][T15224] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 399.743003][T15224] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 399.749530][T15224] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 399.755190][T15224] ? ieee80211_sta_init_nss+0x8dd/0xbe0 [ 399.760760][T15224] ? ieee80211_get_link_sband+0x335/0x3e0 [ 399.766506][T15224] sta_link_apply_parameters+0xbb8/0xec0 [ 399.772200][T15224] sta_apply_parameters+0x944/0x15b0 [ 399.777537][T15224] ieee80211_add_station+0x424/0x6a0 [ 399.782859][T15224] rdev_add_station+0x105/0x290 [ 399.787738][T15224] nl80211_new_station+0x1723/0x1b40 [ 399.793087][T15224] ? __pfx_nl80211_new_station+0x10/0x10 [ 399.798762][T15224] ? netdev_run_todo+0xe1d/0xea0 [ 399.803757][T15224] ? nl80211_pre_doit+0x4f1/0x930 [ 399.808822][T15224] genl_family_rcv_msg_doit+0x215/0x300 [ 399.814404][T15224] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 399.820512][T15224] ? bpf_lsm_capable+0x9/0x20 [ 399.825233][T15224] ? security_capable+0x7e/0x2e0 [ 399.830218][T15224] genl_rcv_msg+0x60e/0x790 [ 399.834791][T15224] ? __pfx_genl_rcv_msg+0x10/0x10 [ 399.839848][T15224] ? ref_tracker_free+0x63a/0x7d0 [ 399.844899][T15224] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 399.850300][T15224] ? __pfx_nl80211_new_station+0x10/0x10 [ 399.855961][T15224] ? __pfx_nl80211_post_doit+0x10/0x10 [ 399.861448][T15224] ? __pfx_ref_tracker_free+0x10/0x10 [ 399.866854][T15224] netlink_rcv_skb+0x205/0x470 [ 399.871644][T15224] ? __pfx_genl_rcv_msg+0x10/0x10 [ 399.876873][T15224] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 399.882190][T15224] ? down_read+0x1ad/0x2e0 [ 399.886644][T15224] genl_rcv+0x28/0x40 [ 399.890658][T15224] netlink_unicast+0x758/0x8d0 [ 399.895449][T15224] netlink_sendmsg+0x805/0xb30 [ 399.900240][T15224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.905574][T15224] ? aa_sock_msg_perm+0x94/0x160 [ 399.910533][T15224] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 399.915851][T15224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.921153][T15224] __sock_sendmsg+0x219/0x270 [ 399.925858][T15224] ____sys_sendmsg+0x505/0x830 [ 399.930647][T15224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.935961][T15224] ? import_iovec+0x74/0xa0 [ 399.940483][T15224] ___sys_sendmsg+0x21f/0x2a0 [ 399.945181][T15224] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.950433][T15224] ? __fget_files+0x2a/0x420 [ 399.955051][T15224] ? __fget_files+0x3a0/0x420 [ 399.959760][T15224] __x64_sys_sendmsg+0x19b/0x260 [ 399.964752][T15224] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.970247][T15224] ? do_syscall_64+0xbe/0x3b0 [ 399.974955][T15224] do_syscall_64+0xfa/0x3b0 [ 399.979508][T15224] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.984753][T15224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.991028][T15224] ? clear_bhb_loop+0x60/0xb0 [ 399.995861][T15224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.001781][T15224] RIP: 0033:0x7f7a1678e929 [ 400.006226][T15224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.025920][T15224] RSP: 002b:00007f7a175e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.034357][T15224] RAX: ffffffffffffffda RBX: 00007f7a169b5fa0 RCX: 00007f7a1678e929 [ 400.042347][T15224] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 400.050335][T15224] RBP: 00007f7a16810b39 R08: 0000000000000000 R09: 0000000000000000 [ 400.058327][T15224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.066311][T15224] R13: 0000000000000000 R14: 00007f7a169b5fa0 R15: 00007ffd98ff0b88 [ 400.074318][T15224] [ 400.077685][T15224] Kernel Offset: disabled [ 400.082022][T15224] Rebooting in 86400 seconds..